@morlay/dsh-client-modules 0.2.11-alpha.2 → 0.2.11

package/dist/index.mjs

@@ -1,12 +1,14 @@
 import { createRequire, findPackageJSON } from "node:module";
 import { appendFile, mkdir, readFile, readdir, stat, writeFile } from "node:fs/promises";
-import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { ASSET_MIME, NODE_BUILTIN, clientAssetPlugin } from "@morlay/dsh-cordis-assets/assets";
 import { createHash } from "node:crypto";
 import { cssInlinePlugins } from "@morlay/dsh-cordis-assets/styles";
 import { rolldown } from "rolldown";
 import { createServer, esmExternalRequirePlugin } from "vite";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 // src/trace.ts
 /**
 * 诊断细节（逐包预编译、逐请求那一类）的具名 logger。
@@ -85,6 +87,122 @@ async function devExcluded(profileDir) {
 function isAggregated(name, patterns) {
 	return patterns.some((pattern) => pattern.test(name));
 }
+// src/client-meta.ts
+/**
+* 浏览器构建里烘焙的版本元数据。
+*
+* 上游的 client 构建（`scripts/client-build-environment.ts`）把一组 `DSH_CLIENT_*` 值当 `define` 注入产物：
+* - `DSH_CLIENT_VERSION`：设置页「当前版本」那一行；
+* - `DSH_CLIENT_COMMIT_HASH` + `DSH_CLIENT_GIT_DIRTY`：侧栏显示的 `<commit>` / `<commit>-dirty`；
+* - `DSH_CLIENT_BUILD_PROFILE`：`official` / `local`（官方品牌只在 official 下出现）。
+*
+* 这条链以前把 `process.env` 整个替换成 `{ env: {} }`，于是这些值全是 `undefined`：版本行不显示、
+* `ui-settings-account` 还会因为 `DSH_CLIENT_VERSION` 缺失直接抛错。取值顺序（越靠前越权威）：
+*
+* 1. 宿主进程的 `DSH_CLIENT_*`（`dshdev` 与桌面壳在起宿主时注入）；
+* 2. 仓库根的 `.dsh-build/client-build-environment.json`（`just prepare` 里的 `dshdev client-meta` 写）；
+* 3. 现算：仓库根的 `package.json` 版本 + `git rev-parse` / `git status`（dev 常见，代价是几次 git 调用）。
+*/
+/** `prepare` 写、构建读的那份记录（形状与上游 `client-build-environment.json` 一致）。 */
+const CLIENT_BUILD_RECORD = join(".dsh-build", "client-build-environment.json");
+const VERSION = "DSH_CLIENT_VERSION";
+const COMMIT = "DSH_CLIENT_COMMIT_HASH";
+const DIRTY = "DSH_CLIENT_GIT_DIRTY";
+const PROFILE = "DSH_CLIENT_BUILD_PROFILE";
+/** 环境里那组 `DSH_CLIENT_*` → 元数据。 */
+function metaOfEnvironment(environment) {
+	const version = environment[VERSION];
+	const commit = environment[COMMIT];
+	const dirty = environment[DIRTY];
+	const profile = environment[PROFILE];
+	return {
+		...version === void 0 || version === "" ? {} : { version },
+		...commit === void 0 || commit === "" ? {} : { commit },
+		...dirty === "true" ? { dirty: true } : {},
+		...profile === void 0 || profile === "" ? {} : { profile }
+	};
+}
+const runFile = promisify(execFile);
+/** `git` 的输出；不在 git 工作树里、或 git 不可用时 undefined。 */
+async function gitOutput(root, args) {
+	try {
+		const { stdout } = await runFile("git", args, {
+			cwd: root,
+			encoding: "utf8"
+		});
+		return stdout.trim();
+	} catch {
+		return;
+	}
+}
+/**
+* 现算：**装的是哪一版 harness**（`DEEPSEEK_HARNESS_VERSION`，与同步链同一个真源）+ 本仓库的 git 元数据。
+*
+* 正常路径拿不到这里：`dshdev` 会注入环境、`prepare` 会写记录。只有"绕过 dshdev 直接构建 client 产物"
+* 时才走到，所以版本只能取环境或仓库根的 `package.json`（后者不是权威值，缺 env 时用它兜底）。
+*/
+async function computeMeta(repoRoot) {
+	const explicit = process.env["DEEPSEEK_HARNESS_VERSION"];
+	let version = explicit === void 0 || explicit === "" ? void 0 : explicit;
+	if (version === void 0) {
+		const manifest = await readFile(join(repoRoot, "package.json"), "utf8").catch(() => void 0);
+		if (manifest !== void 0) {
+			const parsed = JSON.parse(manifest);
+			if (typeof parsed.version === "string" && parsed.version !== "") version = parsed.version;
+		}
+	}
+	const commit = await gitOutput(repoRoot, [
+		"rev-parse",
+		"--short=7",
+		"HEAD"
+	]);
+	const status = await gitOutput(repoRoot, [
+		"status",
+		"--porcelain",
+		"--untracked-files=normal"
+	]);
+	return {
+		...version === void 0 ? {} : { version },
+		...commit === void 0 ? {} : { commit },
+		...status === void 0 || status === "" ? {} : { dirty: true }
+	};
+}
+/** 读 `prepare` 写下的那份记录（缺失 / 坏掉都给 undefined，不挡构建）。 */
+async function recordedMeta(repoRoot) {
+	const raw = await readFile(join(repoRoot, CLIENT_BUILD_RECORD), "utf8").catch(() => void 0);
+	if (raw === void 0) return void 0;
+	try {
+		return metaOfEnvironment(JSON.parse(raw).environment ?? {});
+	} catch {
+		return;
+	}
+}
+/**
+* 这个仓库在浏览器产物里该带的版本元数据。
+* @param repoRoot - 仓库根（dev 是工作区，打包形态是 profile：那里通常读不到记录，靠宿主注入的环境）。
+*/
+async function clientBuildMeta(repoRoot) {
+	const inherited = metaOfEnvironment(process.env);
+	if (inherited.version !== void 0 && inherited.commit !== void 0) return inherited;
+	return {
+		...await recordedMeta(repoRoot) ?? await computeMeta(repoRoot),
+		...inherited
+	};
+}
+/**
+* `define` 用的一组键：`process.env.DSH_CLIENT_*` → 字面量。
+*
+* `browserProcessPlugin` 会跳过这些键（见那里的负向前瞻），所以 define 这一层能把它们换成真实值；
+* 其余 `process.env` 仍是空壳对象。
+*/
+function clientMetaDefines(meta) {
+	return {
+		[`process.env.${VERSION}`]: meta.version === void 0 ? "undefined" : JSON.stringify(meta.version),
+		[`process.env.${COMMIT}`]: meta.commit === void 0 ? "undefined" : JSON.stringify(meta.commit),
+		[`process.env.${DIRTY}`]: meta.dirty === true ? JSON.stringify("true") : "undefined",
+		[`process.env.${PROFILE}`]: meta.profile === void 0 ? "undefined" : JSON.stringify(meta.profile)
+	};
+}
 // src/resolve.ts
 /** 路由前缀（沿用上游的 `/plugins`，页面上不改 URL 形态）。 */
 const PLUGIN_ROUTE = "/plugins";
@@ -385,7 +503,7 @@ function clientModulesAlias(options) {
 * 实例）。内容变了**不换 URL**，靠 `cache-control: no-cache` + `ETag` 协商（vite dev 对它自己的模块
 * 也是这套）。
 */
-const BUNDLER_REV = createHash("sha1").update(`client-modules:rules:22`).digest("hex").slice(0, 8);
+const BUNDLER_REV = createHash("sha1").update(`client-modules:rules:36`).digest("hex").slice(0, 8);
 /** 包 → 它在浏览器里的地址（联邦式）。 */
 function depsUrlOf(specifier, version, file = "index.js") {
 	const name = packageNameOf(specifier) || specifier;
@@ -512,8 +630,13 @@ function urlOf(specifier, tables) {
 * **只替换 `process.env` 系列**：裸的 `process` 不能碰——它可能只是个普通标识符（`zod` 里就有一个叫
 * `process` 的函数，替换掉直接把源码变成语法错误）。
 */
-function browserProcessPlugin() {
-	const replace = (code) => code.replaceAll(/\bprocess\.env\.NODE_ENV\b/gu, JSON.stringify("development")).replaceAll(/\bprocess\.env\b/gu, "({ env: {} })");
+function browserProcessPlugin(meta = {}) {
+	const metaDefines = Object.entries(clientMetaDefines(meta));
+	const replace = (code) => {
+		let next = code.replaceAll(/\bprocess\.env\.NODE_ENV\b/gu, JSON.stringify("development"));
+		for (const [key, value] of metaDefines) next = next.replaceAll(key, value);
+		return next.replaceAll(/\bprocess\.env\b/gu, "({ env: {} })");
+	};
 	return {
 		name: "dsh-browser-process",
 		enforce: "pre",
@@ -527,52 +650,205 @@ function browserProcessPlugin() {
 	};
 }
 /**
-* CJS 入口的**具名导出包装**（`react` 这类）。
+* `export const <名>` 用不了的键：JS 的保留字（`zod@4` 的 CJS 面有 `function` / `void` / `null`
+* 这些键，原样拼出去就是 `SyntaxError`）。
+*/
+const RESERVED_EXPORT_NAMES = /* @__PURE__ */ new Set([
+	"await",
+	"break",
+	"case",
+	"catch",
+	"class",
+	"const",
+	"continue",
+	"debugger",
+	"default",
+	"delete",
+	"do",
+	"else",
+	"enum",
+	"eval",
+	"export",
+	"extends",
+	"false",
+	"finally",
+	"for",
+	"function",
+	"if",
+	"implements",
+	"import",
+	"in",
+	"instanceof",
+	"interface",
+	"let",
+	"new",
+	"null",
+	"package",
+	"private",
+	"protected",
+	"public",
+	"return",
+	"static",
+	"super",
+	"switch",
+	"this",
+	"throw",
+	"true",
+	"try",
+	"typeof",
+	"undefined",
+	"var",
+	"void",
+	"while",
+	"with",
+	"yield"
+]);
+/** ESM 的顶层语法节点：`import` / `export` 声明。 */
+const ESM_STATEMENT_TYPES = /* @__PURE__ */ new Set([
+	"ImportDeclaration",
+	"ExportNamedDeclaration",
+	"ExportDefaultDeclaration",
+	"ExportAllDeclaration"
+]);
+/**
+* `.js` 且没有 `type` 时，按 **Node 的语法检测**判：有 ESM 语法（顶层 `import`/`export`）就是 ESM，
+* 否则 CJS（Node 23+ 默认开启 `--experimental-detect-module`）。
+*
+* 用 rolldown 自带的解析器（`rolldown/parseAst`），不自己写词法扫描。
+*
+* @param entry - `.js` 入口的绝对路径。
+* @returns 是否含 ESM 语法。
+*/
+async function hasModuleSyntax(entry) {
+	try {
+		const [{ parseAst }, source] = await Promise.all([import("rolldown/parseAst"), readFile(entry, "utf8")]);
+		return parseAst(source, null, entry).body.some((node) => ESM_STATEMENT_TYPES.has(node.type));
+	} catch {
+		return false;
+	}
+}
+/**
+* 一个入口的模块类型：**扩展名 + 最近的 `package.json`**，不猜源码。
+*
+* | 入口 | 类型 |
+* | --- | --- |
+* | `.mjs` / `.mts` | `esm` |
+* | `.cjs` / `.cts` | `cjs` |
+* | `.js` + `type: "module"` | `esm` |
+* | `.js` + `module` 字段指向它 | `esm`（打包器约定） |
+* | 其余 `.js` | `cjs` |
+* | `.ts` / `.tsx` / `.jsx` | `source`（转译面，原样） |
+* | `.css` | `style` |
+* | 其他（图片 / 字体 / `.json` …） | `asset` |
+*
+* 这是 `exports` 条件（`import` / `require`）选出入口之后的**第二步**：条件决定"哪个文件"，这里决定
+* "那个文件是什么模块"。只有 `cjs` 需要导出面适配，`esm` / `source` 一律原样。
+*
+* @param entry - 入口的绝对路径。
+* @returns 模块类型。
+*/
+async function moduleKindOf(entry) {
+	const extension = extname(entry).toLowerCase();
+	if (extension === ".css") return "style";
+	if (extension === ".mjs" || extension === ".mts") return "esm";
+	if (extension === ".cjs" || extension === ".cts") return "cjs";
+	if (extension === ".ts" || extension === ".tsx" || extension === ".jsx") return "source";
+	if (extension !== ".js") return "asset";
+	const manifestPath = await packageJsonNear(entry);
+	const manifest = JSON.parse(await readFile(manifestPath, "utf8").catch(() => "{}"));
+	if (manifest.type === "module") return "esm";
+	if (manifest.type === "commonjs") return "cjs";
+	return await hasModuleSyntax(entry) ? "esm" : "cjs";
+}
+/**
+* CJS 入口的**具名导出包装**（`react` / `@xterm/xterm` 这类）。
+*
+* rolldown 对 CJS 入口的产物的具名导出只能靠静态分析；`module.exports = require(…)` 与 UMD 包装它都分析
+* 不出来，产物只剩 `export default …`——而浏览器侧要 `import { Fragment } from "react"`、`import { Terminal }
+* from "@xterm/xterm"`，整个 import 阶段就失败。ESM 的导出必须**静态可枚举**，所以这里求值入口拿到它的键，
+* 生成一份把它们写成 `export const` 的包装文件，拿包装文件当入口。
 *
-* `react` 的入口是 `module.exports = require('./cjs/react.development.js')`，rolldown 静态分析不出具名
-* 导出，产物只剩 `export default …`——而浏览器侧要 `import { Fragment } from "react"`，于是**整个 import
-* 阶段就失败**（入口一行都执行不了）。ESM 的导出必须**静态可枚举**（不能 `export * from` 一个运行期对象），
-* 所以这里求值入口拿到它的键，生成一份把它们写成 `export const` 的包装文件，拿包装文件当入口。
+* 类型由 {@link moduleKindOf} 先按 **exports 落点 + 扩展名/type** 静态判定，只有 CJS 才进来；
+* 这里求值一次只为**拿键**（`export const <键>` + `default = module.exports`）。ESM 原封不动。
 *
-* @returns 包装文件路径；入口不是 CJS、或求值拿不到键时 undefined（保持原样）。
+* @returns 包装文件路径；入口不是 node 能求值的 CJS、或没有可静态导出的键时 undefined（保持原样）。
 */
 async function cjsShimOf(options) {
-	const source = await readFile(options.entry, "utf8").catch(() => "");
-	if (!(/\.(?:cjs|js)$/u.test(options.entry) && /(?:^|\n)\s*(?:module\.exports\s*=|exports\.[A-Za-z_$][A-Za-z0-9_$]*\s*=)/u.test(source))) return void 0;
-	let keys;
+	let loaded;
 	try {
-		const loaded = createRequire(options.entry)(options.entry);
-		keys = Object.keys(loaded ?? {});
+		loaded = createRequire(options.entry)(options.entry);
 	} catch {
 		return;
 	}
-	const named = keys.filter((key) => key !== "default" && /^[A-Za-z_$][A-Za-z0-9_$]*$/u.test(key));
+	const named = Object.keys(loaded ?? {}).filter((key) => key !== "default" && /^[A-Za-z_$][A-Za-z0-9_$]*$/u.test(key) && !RESERVED_EXPORT_NAMES.has(key));
 	if (named.length === 0) return void 0;
-	const file = join(options.outDir, `${options.exportName.replaceAll("/", "+")}.cjs-shim.mjs`);
-	await mkdir(dirname(file), { recursive: true });
-	await writeFile(file, [
-		`import mod from ${JSON.stringify(options.entry)};`,
+	const id = `\0dsh-cjs-shim:${options.name}:${options.exportName}`;
+	const code = [
+		`import mod from ${JSON.stringify(options.from)};`,
 		"const __cjs = mod ?? {};",
 		"export default __cjs;",
 		...named.map((key) => `export const ${key} = __cjs[${JSON.stringify(key)}];`),
 		""
-	].join("\n"), "utf8");
+	].join("\n");
 	options.log?.(`[bundle-cjs] ${options.name}/${options.exportName}: 补 ${String(named.length)} 个具名导出\n`);
-	return file;
+	return {
+		id,
+		code
+	};
 }
 /**
-* CSS 入口的包装：**样式文件不能直接当入口**——vite 的库模式固定 `cssCodeSplit: false`，遇到
-* `rolldownOptions.input` 里有 `.css` 直接报错。包一层 side-effect import，让样式插件按它一贯的方式
-* 把它编成"注入 `<style>`"的模块。
+* CSS 出口的产物：**就是 CSS 文本**（不包装成 JS、不注入 `<style>`）。
 *
-* @returns 包装文件路径；入口不是 CSS 时 undefined。
+* JS 里的 `import "x.css"` 是另一条路（`cssInlinePlugins` 在构建期内联成注入样式的模块），与本函数无关。
+* 这里的 `url()` 指向包内资产：读到字节、按内容 hash 落到 `assets/`、改写成联邦地址——否则浏览器会按
+* CSS 的相对路径去请求 `.pnpm` 里的文件，路由按清单服务就是 404。
+*
+* `lightningcss` 的 visitor 是同步回调，所以分两遍：第一遍只收集相对 `url()`，异步读资产/算 hash；
+* 第二遍按映射改写（全程异步 IO）。
+*
+* @param options - 入口文件、出口名、缓存目录、包键、产物清单。
 */
-async function cssShimOf(options) {
-	if (!options.entry.endsWith(".css")) return void 0;
-	const file = join(options.outDir, `${options.exportName.replaceAll("/", "+")}.css-shim.mjs`);
+async function bundleStyleOf(options) {
+	const { transform } = await import("lightningcss");
+	const source = await readFile(options.entry);
+	const relativeUrl = (ref) => ref !== "" && !ref.startsWith("#") && !ref.startsWith("/") && !/^[a-z][a-z0-9+.-]*:/iu.test(ref);
+	const refs = /* @__PURE__ */ new Set();
+	transform({
+		filename: options.entry,
+		code: source,
+		minify: false,
+		visitor: { Url(node) {
+			if (relativeUrl(node.url)) refs.add(node.url);
+		} }
+	});
+	const mapping = /* @__PURE__ */ new Map();
+	for (const ref of refs) {
+		const absolute = join(dirname(options.entry), ref);
+		const bytes = await readFile(absolute).catch(() => void 0);
+		if (bytes === void 0) continue;
+		const extension = extname(absolute);
+		const name = `assets/${basename(absolute, extension)}-${createHash("sha256").update(bytes).digest("hex").slice(0, 8)}${extension}`;
+		mapping.set(ref, `${CLIENT_MODULES_PREFIX}/${options.key}/${name}`);
+		await mkdir(dirname(join(options.outDir, name)), { recursive: true });
+		await writeFile(join(options.outDir, name), bytes);
+		options.files[name] = `${options.key}/${name}`;
+	}
+	const result = transform({
+		filename: options.entry,
+		code: source,
+		minify: false,
+		visitor: { Url(node) {
+			const rewritten = mapping.get(node.url);
+			return rewritten === void 0 ? void 0 : {
+				...node,
+				url: rewritten
+			};
+		} }
+	});
+	const file = join(options.outDir, options.exportName);
 	await mkdir(dirname(file), { recursive: true });
-	await writeFile(file, `import ${JSON.stringify(options.entry)};\n`, "utf8");
-	return file;
+	await writeFile(file, result.code);
+	options.files[options.exportName] = `${options.key}/${options.exportName}`;
 }
 /**
 * 确保该包的产物在（指纹没变、且**这次要的出口**都在就直接用）。
@@ -657,7 +933,8 @@ async function bundlePackageOnce(options, key) {
 	const outDir = join(options.cacheRoot, key);
 	const manifestPath = join(outDir, ".files.json");
 	options.log?.(`[bundle-rev] ${options.name}: hash-start watch=${options.watch.join(",")}\n`);
-	const rev = `${BUNDLER_REV}:${await fingerprint(options.watch)}`;
+	const rootRev = createHash("sha1").update(dirname(options.watch[0] ?? options.manifestOf ?? "")).digest("hex").slice(0, 8);
+	const rev = `${BUNDLER_REV}:${rootRev}:${await fingerprint(options.watch)}`;
 	options.log?.(`[bundle-rev] ${options.name}: hash=${rev}\n`);
 	const cached = JSON.parse(await readFile(manifestPath, "utf8").catch(() => "{}"));
 	const fresh = cached.rev === rev;
@@ -674,32 +951,70 @@ async function bundlePackageOnce(options, key) {
 				for (const { find, replacement } of options.alias) if (typeof find === "string" ? source.startsWith(find) : find.test(source)) return source.replace(find, replacement);
 			}
 		},
-		browserProcessPlugin(),
+		browserProcessPlugin(await clientBuildMeta(options.repoRoot)),
+		{
+			name: "dsh-css-specifiers",
+			resolveId(source, importer) {
+				if (!source.endsWith(".css") || source.startsWith(".") || source.startsWith("/")) return;
+				try {
+					return createRequire(importer ?? join(options.repoRoot, "package.json")).resolve(source);
+				} catch {
+					return;
+				}
+			}
+		},
 		cssInlinePlugins({
 			name: key,
 			assets: "threshold",
 			assetUrl: (file) => `${CLIENT_MODULES_PREFIX}/${key}/${file}`
 		}),
 		clientAssetPlugin({ assets: "threshold" }),
-		esmExternalRequirePlugin({ external: [...resolvable.keys()].filter((name) => !NODE_BUILTIN.test(name)).map((name) => barePackageRegExp(name)) })
+		esmExternalRequirePlugin({ external: [...resolvable.keys()].filter((name) => !NODE_BUILTIN.test(name) && name !== options.name).map((name) => barePackageRegExp(name)) })
 	];
 	const startedAt = Date.now();
 	options.log?.(`[bundle-build] ${options.name}: rolldown start\n`);
 	const input = {};
-	for (const [exportName, entry] of Object.entries(options.input)) input[exportName] = await cjsShimOf({
-		name: options.name,
-		exportName,
-		entry,
-		...options.log === void 0 ? {} : { log: options.log },
-		outDir
-	}) ?? await cssShimOf({
-		exportName,
-		entry,
-		outDir
-	}) ?? entry;
+	const entryShims = /* @__PURE__ */ new Map();
+	const styleEntries = /* @__PURE__ */ new Map();
+	for (const [exportName, entry] of Object.entries(options.input)) {
+		const kind = await moduleKindOf(entry);
+		if (kind === "cjs") {
+			const shim = await cjsShimOf({
+				name: options.name,
+				exportName,
+				entry,
+				from: entry,
+				...options.log === void 0 ? {} : { log: options.log }
+			});
+			if (shim !== void 0) entryShims.set(shim.id, shim.code);
+			input[exportName] = shim?.id ?? entry;
+			continue;
+		}
+		if (kind === "style") {
+			styleEntries.set(exportName, entry);
+			const styleId = `\0dsh-style:${options.name}:${exportName}:entry`;
+			entryShims.set(styleId, "export {};\n");
+			input[exportName] = styleId;
+			continue;
+		}
+		input[exportName] = entry;
+	}
+	if (entryShims.size !== 0) plugins.push({
+		name: "dsh-entry-shims",
+		resolveId(source) {
+			return entryShims.has(source) ? source : void 0;
+		},
+		load(source) {
+			return entryShims.get(source);
+		}
+	});
 	const bundle = await rolldown({
 		input,
 		plugins,
+		onLog: (level, log, handler) => {
+			if (log.code === "CONFIGURATION_FIELD_CONFLICT" && log.message?.includes("experimentalDecorators") === true) return;
+			handler(level, log);
+		},
 		...options.tsconfig === void 0 ? {} : { resolve: { tsconfigFilename: options.tsconfig } },
 		transform: {
 			target: [
@@ -709,10 +1024,7 @@ async function bundlePackageOnce(options, key) {
 				"safari16.4"
 			],
 			decorator: { legacy: true },
-			define: {
-				"process.env": "{ env: {} }",
-				process: "{ env: {} }"
-			}
+			define: { process: "{ env: {} }" }
 		}
 	});
 	const { output: items } = await bundle.generate({
@@ -732,8 +1044,10 @@ async function bundlePackageOnce(options, key) {
 		return;
 	}
 	await mkdir(outDir, { recursive: true });
+	const styleExports = new Set(styleEntries.keys());
 	for (const item of items) {
 		if (item.type !== "chunk") continue;
+		if (item.isEntry && styleExports.has(item.name)) continue;
 		await mkdir(dirname(join(outDir, item.fileName)), { recursive: true });
 		await writeFile(join(outDir, item.fileName), item.code, "utf8");
 		files[item.isEntry ? item.name : item.fileName] = `${key}/${item.fileName}`;
@@ -744,6 +1058,13 @@ async function bundlePackageOnce(options, key) {
 		await writeFile(join(outDir, asset.fileName), asset.source ?? "");
 		files[asset.fileName] = `${key}/${asset.fileName}`;
 	}
+	for (const [exportName, entry] of styleEntries) await bundleStyleOf({
+		entry,
+		exportName,
+		outDir,
+		key,
+		files
+	});
 	await writeFile(manifestPath, `${JSON.stringify({
 		rev,
 		files
@@ -1009,11 +1330,7 @@ async function startViteDev(ctx, options) {
 	const server = await createServer({
 		root: appRoot,
 		base: "/",
-		define: {
-			"process.env.NODE_ENV": JSON.stringify(process.env["NODE_ENV"] ?? "development"),
-			"process.env": "{ env: {} }",
-			process: "{ env: {} }"
-		},
+		define: { process: "{ env: {} }" },
 		publicDir: false,
 		appType: "mpa",
 		configFile: false,
@@ -1035,11 +1352,10 @@ async function startViteDev(ctx, options) {
 			}
 		},
 		optimizeDeps: {
-			disabled: true,
 			noDiscovery: true,
 			include: []
 		},
-		plugins: [dshClientRowsPlugin({
+		plugins: [browserProcessPlugin(await clientBuildMeta(repoRoot)), dshClientRowsPlugin({
 			repoRoot,
 			rows: () => rowsOf(options.rows),
 			resolvePluginUrl: options.resolvePluginUrl,
@@ -1097,7 +1413,8 @@ const inject = ["loader", "webServer"];
 */
 async function clientRowsOf(loader) {
 	const found = /* @__PURE__ */ new Map();
-	for (const entry of loader.entries()) {
+	for (const raw of loader.entries()) {
+		const entry = raw;
 		if (entry.disabled === true || entry.fiber === void 0) continue;
 		const name = entry.options?.name;
 		if (typeof name !== "string" || name === "") continue;
@@ -1276,6 +1593,7 @@ function apply(ctx) {
 	*/
 	const depsUrlOfSpecifier = async (specifier, importer) => {
 		if (specifier.startsWith("@/")) return void 0;
+		if (specifier.endsWith(".css")) return void 0;
 		if (NODE_BUILTIN.test(specifier)) return void 0;
 		const bare = packageNameOf(specifier) || specifier;
 		const root = await rootOf(bare);
@@ -1362,8 +1680,9 @@ function apply(ctx) {
 		if (code === void 0) return false;
 		const cacheControl = root !== void 0 && !root.includes("node_modules") ? "no-cache" : "public, max-age=31536000, immutable";
 		const etag = `"${bundled.rev}"`;
+		const extension = target.slice(target.lastIndexOf(".") + 1).toLowerCase();
 		res.writeHead(200, {
-			"content-type": "text/javascript; charset=utf-8",
+			"content-type": extension === "css" ? "text/css; charset=utf-8" : "text/javascript; charset=utf-8",
 			"cache-control": cacheControl,
 			etag
 		});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@morlay/dsh-client-modules",
-  "version": "0.2.11-alpha.2",
+  "version": "0.2.11",
   "description": "Dev-form web layer for dsh: serves the page, the app entry and every client resource through an in-process vite dev server (middleware mode) — the node-side counterpart of upstream @deepseek-ai/dsh-client-modules, with the module table replaced by vite's resolver, dependency prebundling and HMR.",
   "keywords": [
     "client",
@@ -36,26 +36,26 @@
     "./locale/*.json": "./locale/*.json"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-client-ui-theme": "^0.2.2-alpha.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.2.2-alpha.2",
-    "@morlay/dsh-client-ui-primitives": "0.0.14-alpha.2",
-    "@morlay/dsh-cordis-assets": "0.2.10-alpha.2",
+    "@deepseek-ai/dsh-client-ui-theme": "^0.2.2-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "^0.2.2-alpha.3",
+    "@morlay/dsh-client-ui-primitives": "0.0.14",
+    "@morlay/dsh-cordis-assets": "0.2.10",
     "@oxc-project/runtime": "^0.153.0",
     "lightningcss": "^1.30.0",
     "vite": "^8.3.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.2",
     "@local/devkit": "0.1.0",
     "@types/node": "^26.5.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.6-alpha.1",
+    "@deepseek-ai/cordis": "^4.0.6-alpha.2",
     "react": "^18.3.1",
     "rolldown": "^1.2.14"
   },
   "engines": {
-    "dsh": ">= 0.2.2-alpha.2 < 0.2.3",
+    "dsh": ">= 0.2.2-alpha.3 < 0.2.3",
     "node": ">=24.11.0"
   },
   "dsh": {