@nasti-toolchain/nasti 2.4.2 → 2.4.4

package/dist/index.js

@@ -10,10 +10,10 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
-var __glob = (map) => (path19) => {
-  var fn = map[path19];
+var __glob = (map) => (path20) => {
+  var fn = map[path20];
   if (fn) return fn();
-  throw new Error("Module not found in bundle: " + path19);
+  throw new Error("Module not found in bundle: " + path20);
 };
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
@@ -876,27 +876,27 @@ var require_process = __commonJS({
 var require_filesystem = __commonJS({
   "node_modules/detect-libc/lib/filesystem.js"(exports, module) {
     "use strict";
-    var fs14 = __require("fs");
+    var fs15 = __require("fs");
     var LDD_PATH = "/usr/bin/ldd";
     var SELF_PATH = "/proc/self/exe";
     var MAX_LENGTH = 2048;
-    var readFileSync = (path19) => {
-      const fd = fs14.openSync(path19, "r");
+    var readFileSync = (path20) => {
+      const fd = fs15.openSync(path20, "r");
       const buffer = Buffer.alloc(MAX_LENGTH);
-      const bytesRead = fs14.readSync(fd, buffer, 0, MAX_LENGTH, 0);
-      fs14.close(fd, () => {
+      const bytesRead = fs15.readSync(fd, buffer, 0, MAX_LENGTH, 0);
+      fs15.close(fd, () => {
       });
       return buffer.subarray(0, bytesRead);
     };
-    var readFile = (path19) => new Promise((resolve, reject) => {
-      fs14.open(path19, "r", (err, fd) => {
+    var readFile = (path20) => new Promise((resolve, reject) => {
+      fs15.open(path20, "r", (err, fd) => {
         if (err) {
           reject(err);
         } else {
           const buffer = Buffer.alloc(MAX_LENGTH);
-          fs14.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
+          fs15.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
             resolve(buffer.subarray(0, bytesRead));
-            fs14.close(fd, () => {
+            fs15.close(fd, () => {
             });
           });
         }
@@ -1008,11 +1008,11 @@ var require_detect_libc = __commonJS({
       }
       return null;
     };
-    var familyFromInterpreterPath = (path19) => {
-      if (path19) {
-        if (path19.includes("/ld-musl-")) {
+    var familyFromInterpreterPath = (path20) => {
+      if (path20) {
+        if (path20.includes("/ld-musl-")) {
           return MUSL;
-        } else if (path19.includes("/ld-linux-")) {
+        } else if (path20.includes("/ld-linux-")) {
           return GLIBC;
         }
       }
@@ -1059,8 +1059,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = await readFile(SELF_PATH);
-        const path19 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
+        const path20 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path20);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -1072,8 +1072,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = readFileSync(SELF_PATH);
-        const path19 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
+        const path20 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path20);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -2226,8 +2226,8 @@ function vuePlugin(config, environmentName = "client") {
       let cached2 = descriptorCache.get(filePath);
       if (!cached2) {
         try {
-          const fs14 = await import("fs");
-          const rawSource = fs14.readFileSync(filePath, "utf-8");
+          const fs15 = await import("fs");
+          const rawSource = fs15.readFileSync(filePath, "utf-8");
           const transformedSfc = await applySourceTransform(
             vueOptions.transformSfc,
             rawSource,
@@ -2316,8 +2316,10 @@ function vuePlugin(config, environmentName = "client") {
       });
       const scopeId = hashId(id);
       const wantsSourceMap = !!config.build.sourcemap || transformedSfc.map != null;
+      const vapor = resolveVaporMode(descriptor, vueOptions, sfc, config);
       let scriptCode = "";
       let scriptMap;
+      let scriptBindings;
       if (descriptor.script || descriptor.scriptSetup) {
         const inlineTemplate = vueOptions.script?.inlineTemplate !== false;
         const compiled = sfc.compileScript(descriptor, {
@@ -2329,9 +2331,11 @@ function vuePlugin(config, environmentName = "client") {
           // 让 compileScript 产出 `const __sfc__ = ...`（而非默认的 `export default {...}`）。
           // 否则下方追加的 `__sfc__.render` / `__sfc__.__scopeId` / HMR 记录会引用一个
           // 不存在的 `__sfc__`，并与 compileScript 自带的 `export default` 形成双重默认导出。
-          genDefaultAs: "__sfc__"
+          genDefaultAs: "__sfc__",
+          vapor
         });
         scriptCode = compiled.content;
+        scriptBindings = compiled.bindings;
         scriptMap = composeSourceMapChain(
           [compiled.map, transformedSfc.map],
           { filename: id, environmentName, type: "sfc" }
@@ -2345,7 +2349,9 @@ function vuePlugin(config, environmentName = "client") {
       }
       let templateCode = "";
       let templateMap;
+      let templateMultiRoot;
       const scriptSetupIsInline = !!descriptor.scriptSetup && vueOptions.script?.inlineTemplate !== false;
+      const isTemplateOnlyVapor = vapor && !descriptor.script && !descriptor.scriptSetup;
       if (descriptor.template && !scriptSetupIsInline) {
         const transformedTemplate = await applySourceTransform(
           vueOptions.transformTemplate,
@@ -2367,12 +2373,16 @@ function vuePlugin(config, environmentName = "client") {
           filename: id,
           id: scopeId,
           inMap: templateInputMap,
+          vapor,
           compilerOptions: {
             ...customCompilerOptions,
+            // Vapor 在 bindingMetadata 缺失时需要空对象（与 Vite / compiler-sfc 一致）
+            bindingMetadata: customCompilerOptions.bindingMetadata ?? scriptBindings ?? (vapor ? {} : void 0),
             scopeId: `data-v-${scopeId}`
           }
         });
         templateCode = compiled.code;
+        templateMultiRoot = compiled.multiRoot;
         if (wantsSourceMap || transformedTemplate.map != null) {
           templateMap = compiled.map;
         }
@@ -2410,12 +2420,20 @@ function vuePlugin(config, environmentName = "client") {
           outputNode.add(fragment);
         }
       };
-      append(scriptCode || "const __sfc__ = {}", scriptMap);
+      append(
+        scriptCode || (vapor ? "const __sfc__ = { __vapor: true }" : "const __sfc__ = {}"),
+        scriptMap
+      );
       if (templateCode) {
         append("\n");
         append(templateCode, templateMap);
         append("\n");
         append("\n__sfc__.render = render\n");
+        if (isTemplateOnlyVapor && templateMultiRoot !== void 0) {
+          append(`
+__sfc__.__multiRoot = ${JSON.stringify(templateMultiRoot)}
+`);
+        }
       }
       if (descriptor.styles.length > 0) {
         for (let i = 0; i < descriptor.styles.length; i++) {
@@ -2424,6 +2442,16 @@ import "${id}?vue&type=style&index=${i}&lang.css"
 `);
         }
       }
+      if (vapor) {
+        append(
+          `
+if (!globalThis.__NASTI_VAPOR_BETA_WARNED__) {
+  globalThis.__NASTI_VAPOR_BETA_WARNED__ = true
+  console.warn(${JSON.stringify(VAPOR_BETA_WARNING)})
+}
+`
+        );
+      }
       append(`
 __sfc__.__scopeId = "data-v-${scopeId}"
 `);
@@ -2483,6 +2511,32 @@ if (import.meta.hot) {
     }
   };
 }
+function resolveVaporMode(descriptor, vueOptions, sfc, config) {
+  const requested = !!descriptor.vapor || !!vueOptions.features?.vapor && canForceVaporMode(descriptor);
+  if (!requested) return false;
+  if (!supportsVaporCompiler(sfc)) {
+    config.logger.warnOnce(
+      "[nasti:vue] Vapor Mode requires @vue/compiler-sfc >= 3.6. Install it: npm install @vue/compiler-sfc@^3.6.0-0"
+    );
+    return false;
+  }
+  config.logger.warnOnce(VAPOR_BETA_WARNING);
+  return true;
+}
+function canForceVaporMode(descriptor) {
+  if (typeof descriptor.filename === "string" && descriptor.filename.endsWith(".vue")) {
+    if (descriptor.script && !descriptor.scriptSetup) return false;
+    return !!(descriptor.scriptSetup || descriptor.template);
+  }
+  return true;
+}
+function supportsVaporCompiler(sfc) {
+  const version = sfc.version;
+  if (!version) return false;
+  const [major, minor] = version.split(".").map((part) => Number.parseInt(part, 10));
+  if (!Number.isFinite(major) || !Number.isFinite(minor)) return false;
+  return major > 3 || major === 3 && minor >= 6;
+}
 async function applySourceTransform(transform2, source, context) {
   if (!transform2) return { code: source };
   const result = await transform2(source, context);
@@ -2543,7 +2597,7 @@ function warnUnchainableMap(context, reason) {
 function hashId(filename) {
   return crypto2.createHash("sha256").update(filename).digest("hex").slice(0, 8);
 }
-var VUE_FILE_RE, VUE_QUERY_RE, debug2, compiler;
+var VUE_FILE_RE, VUE_QUERY_RE, debug2, VAPOR_BETA_WARNING, compiler;
 var init_vue = __esm({
   "src/plugins/vue.ts"() {
     "use strict";
@@ -2552,6 +2606,7 @@ var init_vue = __esm({
     VUE_FILE_RE = /\.vue$/;
     VUE_QUERY_RE = /\.vue\?vue&type=(script|template|style)(&index=\d+)?(&lang[.=]\w+)?/;
     debug2 = createDebugger("nasti:vue");
+    VAPOR_BETA_WARNING = "Vapor Mode is a beta feature; Zixiao Labs and the Vue team do not provide guarantees against crashes in production environments, and it is not suitable for server-side rendering environments.";
     compiler = null;
   }
 });
@@ -2838,6 +2893,24 @@ var init_module_graph = __esm({
       getModulesByFile(file) {
         return this.fileToModulesMap.get(file);
       }
+      /**
+       * Modules whose registered entry file lives under `dir` (inclusive).
+       * Used when a non-entry source inside a prebundled workspace package changes:
+       * only the package entry was registered, so getModulesByFile(changedFile)
+       * misses — we invalidate every /@modules entry rooted in that package.
+       */
+      getModulesWithFileUnder(dir) {
+        const result = /* @__PURE__ */ new Set();
+        const normDir = dir.replace(/\\/g, "/");
+        const normPrefix = normDir.endsWith("/") ? normDir : normDir + "/";
+        for (const [file, mods] of this.fileToModulesMap) {
+          const normFile = file.replace(/\\/g, "/");
+          if (normFile === normDir || normFile.startsWith(normPrefix)) {
+            for (const m of mods) result.add(m);
+          }
+        }
+        return result;
+      }
       async ensureEntryFromUrl(url) {
         const normalizedUrl = removeTimestampQuery(url);
         let mod = this.urlToModuleMap.get(normalizedUrl);
@@ -3811,7 +3884,7 @@ async function build(inlineConfig = {}) {
   const startTime = performance.now();
   logger.info(
     pc4.cyan(`
-nasti v${"2.4.2"} `) + pc4.green(`building for ${config.mode}...`)
+nasti v${"2.4.4"} `) + pc4.green(`building for ${config.mode}...`)
   );
   debug5?.(`root: ${config.root}`);
   const buildableNames = Object.keys(config.environments).filter((name) => {
@@ -4148,10 +4221,124 @@ var init_ws = __esm({
   }
 });
 
-// src/server/middleware.ts
-import path12 from "path";
+// src/server/fs-allow.ts
 import fs9 from "fs";
-import { createRequire as createRequire3 } from "module";
+import path12 from "path";
+function isUnderRoot(abs, root) {
+  const rel = path12.relative(root, abs);
+  return !!rel && !rel.startsWith("..") && !path12.isAbsolute(rel);
+}
+function discoverLinkedPackageRoots(projectRoot, maxDepth = 4) {
+  const results = [];
+  const seenReal = /* @__PURE__ */ new Set();
+  const queued = /* @__PURE__ */ new Set([projectRoot]);
+  const queue = [projectRoot];
+  for (let depth = 0; depth < maxDepth && queue.length > 0; depth++) {
+    const levelCount = queue.length;
+    for (let i = 0; i < levelCount; i++) {
+      const dir = queue.shift();
+      const nm = path12.join(dir, "node_modules");
+      let entries;
+      try {
+        entries = fs9.readdirSync(nm, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const ent of entries) {
+        if (ent.name.startsWith(".") || ent.name === "node_modules") continue;
+        const pkgNames = ent.name.startsWith("@") ? listScopedPackages(nm, ent.name) : [ent.name];
+        for (const pkgName of pkgNames) {
+          const pkgPath = path12.join(nm, pkgName);
+          let real;
+          try {
+            real = fs9.realpathSync(pkgPath);
+          } catch {
+            continue;
+          }
+          if (seenReal.has(real)) continue;
+          seenReal.add(real);
+          if (!queued.has(real)) {
+            queued.add(real);
+            queue.push(real);
+          }
+          if (real !== projectRoot && !isUnderRoot(real, projectRoot) && !real.includes(NM)) {
+            results.push(real);
+          }
+        }
+      }
+    }
+  }
+  return results;
+}
+function listScopedPackages(nm, scope) {
+  try {
+    return fs9.readdirSync(path12.join(nm, scope)).filter((name) => !name.startsWith(".")).map((name) => path12.join(scope, name));
+  } catch {
+    return [];
+  }
+}
+function getLinkedPackageRoots(projectRoot) {
+  let mtimeMs = 0;
+  try {
+    mtimeMs = fs9.statSync(path12.join(projectRoot, "node_modules")).mtimeMs;
+  } catch {
+    mtimeMs = 0;
+  }
+  const cached2 = linkedRootsCache.get(projectRoot);
+  if (cached2 && cached2.mtimeMs === mtimeMs) {
+    return cached2.roots;
+  }
+  const roots = discoverLinkedPackageRoots(projectRoot);
+  linkedRootsCache.set(projectRoot, { roots, mtimeMs });
+  return roots;
+}
+function clearLinkedPackageRootsCache() {
+  linkedRootsCache.clear();
+}
+function isAllowedDevModulePath(realId, projectRoot) {
+  if (realId === projectRoot || isUnderRoot(realId, projectRoot)) return true;
+  for (const pkgRoot of getLinkedPackageRoots(projectRoot)) {
+    if (realId === pkgRoot || realId.startsWith(pkgRoot + path12.sep)) return true;
+  }
+  let dir = projectRoot;
+  for (; ; ) {
+    const nm = path12.join(dir, "node_modules");
+    if (realId === nm || realId.startsWith(nm + path12.sep)) return true;
+    const parent = path12.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return false;
+}
+function findNearestPackageRoot(file) {
+  let dir = path12.dirname(file);
+  for (; ; ) {
+    const pkgJson = path12.join(dir, "package.json");
+    if (fs9.existsSync(pkgJson)) {
+      try {
+        const pkg = JSON.parse(fs9.readFileSync(pkgJson, "utf-8"));
+        if (typeof pkg?.name === "string" && pkg.name) return dir;
+      } catch {
+      }
+    }
+    const parent = path12.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+var NM, linkedRootsCache;
+var init_fs_allow = __esm({
+  "src/server/fs-allow.ts"() {
+    "use strict";
+    NM = `${path12.sep}node_modules${path12.sep}`;
+    linkedRootsCache = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/server/middleware.ts
+import path13 from "path";
+import fs10 from "fs";
+import { createRequire as createRequire4 } from "module";
 import { fileURLToPath, pathToFileURL as pathToFileURL3 } from "url";
 import pc6 from "picocolors";
 function getReactRefreshRuntimeEsm(includeBoundaryHelpers = false) {
@@ -4161,10 +4348,10 @@ function getReactRefreshRuntimeEsm(includeBoundaryHelpers = false) {
   let cjsPath;
   try {
     const pkgPath = __require2.resolve("react-refresh/package.json");
-    cjsPath = path12.join(path12.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
+    cjsPath = path13.join(path13.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
   } catch (err) {
-    cjsPath = path12.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
-    if (!fs9.existsSync(cjsPath)) {
+    cjsPath = path13.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
+    if (!fs10.existsSync(cjsPath)) {
       const origMsg = err instanceof Error ? err.message : String(err);
       throw new Error(
         `[nasti] Missing dependency "react-refresh". Install it with: npm install react-refresh
@@ -4172,7 +4359,7 @@ Original resolve error: ${origMsg}`
       );
     }
   }
-  const cjsSource = fs9.readFileSync(cjsPath, "utf-8");
+  const cjsSource = fs10.readFileSync(cjsPath, "utf-8");
   __refreshRuntimeCache = `// Wrapped react-refresh runtime -> ESM
 const exports = {};
 const module = { exports };
@@ -4343,8 +4530,8 @@ async function transformRequest(url, ctx) {
     let realIdValid = false;
     try {
       if (idParam) {
-        realId = fs9.realpathSync(idParam);
-        realIdValid = fs9.statSync(realId).isFile() && (realId.includes(`${path12.sep}node_modules${path12.sep}`) || isUnderRoot(realId, config.root));
+        realId = fs10.realpathSync(idParam);
+        realIdValid = fs10.statSync(realId).isFile() && isAllowedDevModulePath(realId, config.root);
       }
     } catch {
       realId = null;
@@ -4411,7 +4598,7 @@ async function transformRequest(url, ctx) {
     }
   }
   const filePath = resolveUrlToFile(url, config.root);
-  if (!filePath || !fs9.existsSync(filePath)) return null;
+  if (!filePath || !fs10.existsSync(filePath)) return null;
   const mod = await moduleGraph.ensureEntryFromUrl(url);
   moduleGraph.registerModule(mod, filePath);
   const transformVersion = mod.invalidationVersion;
@@ -4422,7 +4609,7 @@ async function transformRequest(url, ctx) {
     return transformResult2;
   }
   const loaded = await pluginContainer.load(filePath);
-  let code = loaded == null ? fs9.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
+  let code = loaded == null ? fs10.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
   let map = loaded && typeof loaded !== "string" ? loaded.map : void 0;
   const pluginResult = await pluginContainer.transform(code, filePath);
   if (pluginResult) {
@@ -4480,7 +4667,7 @@ async function loadVirtualModule(spec, ctx) {
   const resolved = await pluginContainer.resolveId(spec);
   if (resolved == null) return null;
   const resolvedId = typeof resolved === "string" ? resolved : resolved.id;
-  const looksVirtual = resolvedId.startsWith("\0") || !fs9.existsSync(resolvedId);
+  const looksVirtual = resolvedId.startsWith("\0") || !fs10.existsSync(resolvedId);
   if (!looksVirtual) return null;
   const loadResult = await pluginContainer.load(resolvedId);
   if (loadResult == null) return null;
@@ -4494,7 +4681,7 @@ async function loadVirtualModule(spec, ctx) {
     config.mode,
     ssrDefineOverrides(ctx.environment?.consumer ?? "client")
   ));
-  const anchor = path12.join(config.root, "__nasti_virtual__.ts");
+  const anchor = path13.join(config.root, "__nasti_virtual__.ts");
   code = rewriteImports(code, config, anchor);
   return { id: resolvedId, result: { code } };
 }
@@ -4520,7 +4707,7 @@ async function doBundlePackage(entryFile, root) {
   await bundle2.close();
   let code = result.output[0].code;
   code = code.replace(/process\.env\.NODE_ENV/g, '"development"');
-  const externalBaseDir = path12.dirname(entryFile);
+  const externalBaseDir = path13.dirname(entryFile);
   code = code.replace(
     /^(import\b[^;'"]*?\bfrom\s+)(['"])([^'"./][^'"]*)(\2)/gm,
     (_, prefix, q, spec) => `${prefix}${q}${externalSpecToModuleUrl(spec, externalBaseDir, root)}${q}`
@@ -4538,16 +4725,16 @@ async function doBundlePackage(entryFile, root) {
   return code;
 }
 async function tryGenerateSubpathShim(entryFile, root) {
-  const NM = `${path12.sep}node_modules${path12.sep}`;
-  if (!entryFile.includes(NM)) return null;
+  const NM2 = `${path13.sep}node_modules${path13.sep}`;
+  if (!entryFile.includes(NM2)) return null;
   let pkgDir = null;
   let pkgName = null;
-  let dir = path12.dirname(entryFile);
+  let dir = path13.dirname(entryFile);
   while (true) {
-    const pkgJsonPath = path12.join(dir, "package.json");
-    if (fs9.existsSync(pkgJsonPath)) {
+    const pkgJsonPath = path13.join(dir, "package.json");
+    if (fs10.existsSync(pkgJsonPath)) {
       try {
-        const pkg = JSON.parse(fs9.readFileSync(pkgJsonPath, "utf-8"));
+        const pkg = JSON.parse(fs10.readFileSync(pkgJsonPath, "utf-8"));
         if (typeof pkg?.name === "string" && pkg.name) {
           pkgDir = dir;
           pkgName = pkg.name;
@@ -4556,16 +4743,16 @@ async function tryGenerateSubpathShim(entryFile, root) {
       } catch {
       }
     }
-    const parent = path12.dirname(dir);
+    const parent = path13.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
-    if (!dir.includes(NM)) return null;
+    if (!dir.includes(NM2)) return null;
   }
   if (!pkgDir || !pkgName) return null;
-  const entryExt = path12.extname(entryFile);
+  const entryExt = path13.extname(entryFile);
   const mainEntry = pickMainEntryByExtension(pkgDir, entryExt);
   if (!mainEntry) return null;
-  if (path12.resolve(mainEntry) === path12.resolve(entryFile)) return null;
+  if (path13.resolve(mainEntry) === path13.resolve(entryFile)) return null;
   let mainNs;
   let subNs;
   try {
@@ -4589,7 +4776,7 @@ async function tryGenerateSubpathShim(entryFile, root) {
     if (mainNs["default"] !== subNs["default"]) return null;
   }
   const rootMain = resolveNodeModule(root, pkgName);
-  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path12.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
+  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path13.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
   const lines = [
     `// Nasti subpath shim \u2192 ${pkgName} (avoid duplicate bundling)`,
     `import * as __pkg from "${mainEntryUrl}";`
@@ -4603,10 +4790,10 @@ async function tryGenerateSubpathShim(entryFile, root) {
   return lines.join("\n") + "\n";
 }
 function pickMainEntryByExtension(pkgDir, preferredExt) {
-  const pkgJsonPath = path12.join(pkgDir, "package.json");
+  const pkgJsonPath = path13.join(pkgDir, "package.json");
   let pkg;
   try {
-    pkg = JSON.parse(fs9.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs10.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -4625,14 +4812,14 @@ function pickMainEntryByExtension(pkgDir, preferredExt) {
   if (typeof pkg.module === "string") candidates.push(pkg.module);
   if (typeof pkg.main === "string") candidates.push(pkg.main);
   for (const cand of candidates) {
-    if (path12.extname(cand) === preferredExt) {
-      const full = path12.resolve(pkgDir, cand);
-      if (fs9.existsSync(full)) return full;
+    if (path13.extname(cand) === preferredExt) {
+      const full = path13.resolve(pkgDir, cand);
+      if (fs10.existsSync(full)) return full;
     }
   }
   for (const cand of candidates) {
-    const full = path12.resolve(pkgDir, cand);
-    if (fs9.existsSync(full)) return full;
+    const full = path13.resolve(pkgDir, cand);
+    if (fs10.existsSync(full)) return full;
   }
   return null;
 }
@@ -4657,8 +4844,8 @@ function rewriteExternalRequires(code, baseDir, root) {
 }
 async function injectCjsNamedExports(code, entryFile) {
   try {
-    const { createRequire: createRequire7 } = await import("module");
-    const req = createRequire7(entryFile);
+    const { createRequire: createRequire8 } = await import("module");
+    const req = createRequire8(entryFile);
     const cjsExports = req(entryFile);
     if (!cjsExports || typeof cjsExports !== "object" && typeof cjsExports !== "function" || Array.isArray(cjsExports)) return code;
     const namedKeys = Object.keys(cjsExports).filter(
@@ -4699,11 +4886,22 @@ function rewriteImports(code, config, filePath, importedUrls, moduleGraph) {
 }
 function createModuleSpecifierResolver(config, filePath) {
   const root = config.root;
-  const fileDir = path12.dirname(filePath);
+  const fileDir = path13.dirname(filePath);
   const aliasEntries = Object.entries(config.resolve.alias).sort(
     ([a], [b]) => b.length - a.length
   );
-  const toRootUrl = (abs) => "/" + path12.relative(root, abs).replace(/\\/g, "/");
+  const toServableUrl = (abs) => {
+    if (isUnderRoot(abs, root)) {
+      return "/" + path13.relative(root, abs).replace(/\\/g, "/");
+    }
+    for (const pkgRoot of getLinkedPackageRoots(root)) {
+      if (abs === pkgRoot || abs.startsWith(pkgRoot + path13.sep)) {
+        const normalized = abs.replace(/\\/g, "/");
+        return "/@fs/" + (normalized.startsWith("/") ? normalized.slice(1) : normalized);
+      }
+    }
+    return null;
+  };
   return (specifier) => {
     const suffixMatch = specifier.match(/[?#].*$/);
     const suffix = suffixMatch ? suffixMatch[0] : "";
@@ -4712,18 +4910,21 @@ function createModuleSpecifierResolver(config, filePath) {
       if (baseSpec === key || baseSpec.startsWith(key + "/")) {
         const aliasBase = resolveAliasTarget2(value, root);
         const sub = baseSpec.slice(key.length).replace(/^\//, "");
-        const target = sub ? path12.join(aliasBase, sub) : aliasBase;
+        const target = sub ? path13.join(aliasBase, sub) : aliasBase;
         const resolved = tryResolveDiskPath(target);
-        return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+        const url = resolved ? toServableUrl(resolved) : null;
+        return url ? url + suffix : specifier;
       }
     }
     if (baseSpec.startsWith("./") || baseSpec.startsWith("../")) {
-      const resolved = tryResolveDiskPath(path12.resolve(fileDir, baseSpec));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path13.resolve(fileDir, baseSpec));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/") && !baseSpec.startsWith("/@")) {
-      const resolved = tryResolveDiskPath(path12.join(root, baseSpec.replace(/^\//, "")));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path13.join(root, baseSpec.replace(/^\//, "")));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/")) return specifier;
     return `/@modules/${specifier}`;
@@ -4876,28 +5077,24 @@ function maskStringsAndComments(code) {
   return masked.join("");
 }
 function resolveAliasTarget2(value, root) {
-  if (path12.isAbsolute(value) && fs9.existsSync(value)) return value;
-  if (value.startsWith("/")) return path12.join(root, value.slice(1));
-  return path12.resolve(root, value);
+  if (path13.isAbsolute(value) && fs10.existsSync(value)) return value;
+  if (value.startsWith("/")) return path13.join(root, value.slice(1));
+  return path13.resolve(root, value);
 }
 function tryResolveDiskPath(target) {
-  if (fs9.existsSync(target) && fs9.statSync(target).isFile()) return target;
+  if (fs10.existsSync(target) && fs10.statSync(target).isFile()) return target;
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = target + ext;
-    if (fs9.existsSync(withExt) && fs9.statSync(withExt).isFile()) return withExt;
+    if (fs10.existsSync(withExt) && fs10.statSync(withExt).isFile()) return withExt;
   }
-  if (fs9.existsSync(target) && fs9.statSync(target).isDirectory()) {
+  if (fs10.existsSync(target) && fs10.statSync(target).isDirectory()) {
     for (const ext of RESOLVE_EXTENSIONS) {
-      const idx = path12.join(target, "index" + ext);
-      if (fs9.existsSync(idx) && fs9.statSync(idx).isFile()) return idx;
+      const idx = path13.join(target, "index" + ext);
+      if (fs10.existsSync(idx) && fs10.statSync(idx).isFile()) return idx;
     }
   }
   return null;
 }
-function isUnderRoot(abs, root) {
-  const rel = path12.relative(root, abs);
-  return !!rel && !rel.startsWith("..") && !path12.isAbsolute(rel);
-}
 function appendTimestampQuery(url, timestamp) {
   const hashIndex = url.indexOf("#");
   const hash = hashIndex >= 0 ? url.slice(hashIndex) : "";
@@ -4915,7 +5112,7 @@ function resolveNodeModule(baseDir, moduleName) {
   const resolved = resolveNodeModuleEntry(baseDir, moduleName);
   if (!resolved) return null;
   try {
-    return fs9.realpathSync(resolved);
+    return fs10.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -4935,21 +5132,21 @@ function resolveNodeModuleEntry(root, moduleName) {
   let pkgDir = null;
   let dir = root;
   for (; ; ) {
-    const candidate = path12.join(dir, "node_modules", pkgName);
-    if (fs9.existsSync(candidate)) {
+    const candidate = path13.join(dir, "node_modules", pkgName);
+    if (fs10.existsSync(candidate)) {
       pkgDir = candidate;
       break;
     }
-    const parent = path12.dirname(dir);
+    const parent = path13.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   if (!pkgDir) return null;
-  const pkgJsonPath = path12.join(pkgDir, "package.json");
-  if (!fs9.existsSync(pkgJsonPath)) return null;
+  const pkgJsonPath = path13.join(pkgDir, "package.json");
+  if (!fs10.existsSync(pkgJsonPath)) return null;
   let pkg;
   try {
-    pkg = JSON.parse(fs9.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs10.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -4962,32 +5159,32 @@ function resolveNodeModuleEntry(root, moduleName) {
     const subDirs = [""];
     for (const field of ["module", "main"]) {
       if (typeof pkg[field] === "string") {
-        const dir2 = path12.dirname(pkg[field]);
+        const dir2 = path13.dirname(pkg[field]);
         if (dir2 && dir2 !== "." && !subDirs.includes(dir2)) subDirs.push(dir2);
       }
     }
     for (const dir2 of subDirs) {
-      const direct = path12.join(pkgDir, dir2, subpath);
-      if (fs9.existsSync(direct) && fs9.statSync(direct).isFile()) return direct;
+      const direct = path13.join(pkgDir, dir2, subpath);
+      if (fs10.existsSync(direct) && fs10.statSync(direct).isFile()) return direct;
       for (const ext of RESOLVE_EXTENSIONS) {
-        if (fs9.existsSync(direct + ext)) return direct + ext;
+        if (fs10.existsSync(direct + ext)) return direct + ext;
       }
     }
     return null;
   }
   for (const field of ["module", "jsnext:main", "jsnext", "main"]) {
     if (typeof pkg[field] === "string") {
-      const entry = path12.join(pkgDir, pkg[field]);
-      if (fs9.existsSync(entry)) return entry;
+      const entry = path13.join(pkgDir, pkg[field]);
+      if (fs10.existsSync(entry)) return entry;
     }
   }
-  const indexFallback = path12.join(pkgDir, "index.js");
-  if (fs9.existsSync(indexFallback)) return indexFallback;
+  const indexFallback = path13.join(pkgDir, "index.js");
+  if (fs10.existsSync(indexFallback)) return indexFallback;
   return null;
 }
 function resolvePackageExports(exports, key, pkgDir) {
   if (typeof exports === "string") {
-    return key === "." ? path12.join(pkgDir, exports) : null;
+    return key === "." ? path13.join(pkgDir, exports) : null;
   }
   const entry = exports[key];
   if (entry === void 0) {
@@ -4999,7 +5196,7 @@ function resolvePackageExports(exports, key, pkgDir) {
   return resolveExportValue(entry, pkgDir);
 }
 function resolveExportValue(value, pkgDir) {
-  if (typeof value === "string") return path12.join(pkgDir, value);
+  if (typeof value === "string") return path13.join(pkgDir, value);
   if (Array.isArray(value)) {
     for (const item of value) {
       const r = resolveExportValue(item, pkgDir);
@@ -5018,35 +5215,54 @@ function resolveExportValue(value, pkgDir) {
   return null;
 }
 function resolveUrlToFile(url, root) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (cleanUrl.startsWith("/@modules/")) {
     const moduleName = cleanUrl.slice("/@modules/".length);
     return resolveNodeModule(root, moduleName);
   }
-  const filePath = path12.resolve(root, cleanUrl.replace(/^\//, ""));
-  if (fs9.existsSync(filePath) && fs9.statSync(filePath).isFile()) {
+  if (cleanUrl.startsWith("/@fs/")) {
+    let abs = cleanUrl.slice("/@fs/".length);
+    if (process.platform === "win32") {
+      abs = abs.replace(/\//g, path13.sep);
+    } else if (!abs.startsWith("/")) {
+      abs = "/" + abs;
+    }
+    try {
+      const real = fs10.realpathSync(abs);
+      if (fs10.statSync(real).isFile() && isAllowedDevModulePath(real, root)) return real;
+    } catch {
+      return null;
+    }
+    return null;
+  }
+  const filePath = path13.resolve(root, cleanUrl.replace(/^\//, ""));
+  if (fs10.existsSync(filePath) && fs10.statSync(filePath).isFile()) {
     return filePath;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = filePath + ext;
-    if (fs9.existsSync(withExt)) return withExt;
+    if (fs10.existsSync(withExt)) return withExt;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
-    const indexFile = path12.join(filePath, "index" + ext);
-    if (fs9.existsSync(indexFile)) return indexFile;
+    const indexFile = path13.join(filePath, "index" + ext);
+    if (fs10.existsSync(indexFile)) return indexFile;
   }
   return null;
 }
 function isModuleRequest(url, destination) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (/\.(ts|tsx|jsx|js|mjs|vue|css|json)$/.test(cleanUrl)) return true;
   if (cleanUrl.startsWith("/@modules/")) return true;
+  if (cleanUrl.startsWith("/@fs/")) return true;
   if (isAssetFile(cleanUrl)) {
-    const query = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
+    const qIdx = url.indexOf("?");
+    const hIdx = url.indexOf("#");
+    const queryEnd = hIdx === -1 ? url.length : hIdx;
+    const query = qIdx === -1 || qIdx > queryEnd ? "" : url.slice(qIdx + 1, queryEnd);
     const isExplicitAssetModule = /(?:^|&)(?:url|raw)(?:&|$)/.test(query);
     return isExplicitAssetModule || destination === "script";
   }
-  if (!path12.extname(cleanUrl)) return true;
+  if (!path13.extname(cleanUrl)) return true;
   return false;
 }
 function getHmrClientCode() {
@@ -5285,8 +5501,9 @@ var init_middleware = __esm({
     init_env();
     init_url();
     init_assets();
-    __dirname_esm = path12.dirname(fileURLToPath(import.meta.url));
-    __require2 = createRequire3(import.meta.url);
+    init_fs_allow();
+    __dirname_esm = path13.dirname(fileURLToPath(import.meta.url));
+    __require2 = createRequire4(import.meta.url);
     __refreshRuntimeCache = null;
     REACT_REFRESH_BOUNDARY_HELPERS = `
 function __nastiIsPlainObject(obj) {
@@ -5366,8 +5583,8 @@ window.__vite_plugin_react_preamble_installed__ = true;
 });
 
 // src/server/hmr.ts
-import path13 from "path";
-import fs10 from "fs";
+import path14 from "path";
+import fs11 from "fs";
 import pc7 from "picocolors";
 async function handleFileChange(file, server, environmentName = "client", timestamp = Date.now()) {
   const { config } = server;
@@ -5377,9 +5594,26 @@ async function handleFileChange(file, server, environmentName = "client", timest
   }
   const moduleGraph = environment.moduleGraph;
   const logger = config.logger;
-  const relativePath = "/" + path13.relative(config.root, file);
-  const shortFile = path13.relative(config.root, file);
-  const mods = moduleGraph.getModulesByFile(file);
+  const relativePath = "/" + path14.relative(config.root, file);
+  const shortFile = path14.relative(config.root, file);
+  let mods = moduleGraph.getModulesByFile(file);
+  if (!mods || mods.size === 0) {
+    try {
+      const real = fs11.realpathSync(file);
+      if (real !== file) mods = moduleGraph.getModulesByFile(real);
+      if (mods && mods.size > 0) file = real;
+    } catch {
+    }
+  }
+  if (!mods || mods.size === 0) {
+    const packageRoot = findNearestPackageRoot(file);
+    if (packageRoot && getLinkedPackageRoots(config.root).some(
+      (r) => packageRoot === r || packageRoot.startsWith(r + path14.sep)
+    )) {
+      const under = moduleGraph.getModulesWithFileUnder(packageRoot);
+      if (under.size > 0) mods = under;
+    }
+  }
   if (!mods || mods.size === 0) {
     return null;
   }
@@ -5394,7 +5628,7 @@ async function handleFileChange(file, server, environmentName = "client", timest
       file,
       timestamp,
       modules: [mod],
-      read: () => fs10.readFileSync(file, "utf-8"),
+      read: () => fs11.readFileSync(file, "utf-8"),
       server,
       environment
     };
@@ -5458,6 +5692,7 @@ async function handleFileChange(file, server, environmentName = "client", timest
 var init_hmr = __esm({
   "src/server/hmr.ts"() {
     "use strict";
+    init_fs_allow();
   }
 });
 
@@ -5467,9 +5702,9 @@ __export(runnable_environment_exports, {
   NastiModuleRunner: () => NastiModuleRunner,
   createModuleRunner: () => createModuleRunner
 });
-import path14 from "path";
-import fs11 from "fs";
-import { builtinModules as builtinModules3, createRequire as createRequire4 } from "module";
+import path15 from "path";
+import fs12 from "fs";
+import { builtinModules as builtinModules3, createRequire as createRequire5 } from "module";
 import { pathToFileURL as pathToFileURL4 } from "url";
 function createModuleRunner(environment) {
   if (environment.consumer !== "server") {
@@ -5502,7 +5737,7 @@ var init_runnable_environment = __esm({
           this.config.mode,
           ssrDefineOverrides(environment.consumer)
         );
-        this.require = createRequire4(path14.join(this.config.root, "package.json"));
+        this.require = createRequire5(path15.join(this.config.root, "package.json"));
         const handlers = {
           fetchModule: async (id, importer) => this.fetchModule(id, importer),
           getBuiltins: () => [/^node:/, ...builtinModules3]
@@ -5526,9 +5761,9 @@ var init_runnable_environment = __esm({
         this.cache.clear();
       }
       resolveToId(rawUrl) {
-        if (path14.isAbsolute(rawUrl) && fs11.existsSync(rawUrl.split("?")[0])) return rawUrl;
+        if (path15.isAbsolute(rawUrl) && fs12.existsSync(rawUrl.split("?")[0])) return rawUrl;
         const clean = rawUrl.replace(/^\//, "");
-        return path14.resolve(this.config.root, clean);
+        return path15.resolve(this.config.root, clean);
       }
       /**
        * fetchModule（invoke 契约方法）：环境管线产出 runner 可执行代码。
@@ -5537,14 +5772,14 @@ var init_runnable_environment = __esm({
        */
       async fetchModule(id, importer) {
         if (NODE_BUILTINS3.has(id)) return { externalize: id };
-        if (!id.startsWith(".") && !path14.isAbsolute(id) && !id.startsWith("\0")) {
+        if (!id.startsWith(".") && !path15.isAbsolute(id) && !id.startsWith("\0")) {
           return { externalize: id };
         }
         const container = this.environment.pluginContainer;
         let resolvedId = id;
         if (id.startsWith(".") && importer) {
           const resolved = await container.resolveId(id, importer);
-          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path14.resolve(path14.dirname(importer.split("?")[0]), id);
+          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path15.resolve(path15.dirname(importer.split("?")[0]), id);
         }
         resolvedId = this.completeExtension(resolvedId);
         const cleanId = resolvedId.split("?")[0];
@@ -5552,8 +5787,8 @@ var init_runnable_environment = __esm({
         const loaded = await container.load(resolvedId);
         if (loaded != null) {
           code = typeof loaded === "string" ? loaded : loaded.code;
-        } else if (fs11.existsSync(cleanId)) {
-          code = fs11.readFileSync(cleanId, "utf-8");
+        } else if (fs12.existsSync(cleanId)) {
+          code = fs12.readFileSync(cleanId, "utf-8");
         } else {
           throw new Error(`[nasti:ssr] cannot load module: ${resolvedId}`);
         }
@@ -5587,19 +5822,19 @@ var init_runnable_environment = __esm({
       completeExtension(id) {
         const clean = id.split("?")[0];
         const query = id.includes("?") ? id.slice(id.indexOf("?")) : "";
-        if (fs11.existsSync(clean) && fs11.statSync(clean).isFile()) return id;
+        if (fs12.existsSync(clean) && fs12.statSync(clean).isFile()) return id;
         const jsMatch = clean.match(/^(.*)\.([mc]?)jsx?$/);
         if (jsMatch) {
           for (const tsExt of [`.${jsMatch[2]}ts`, `.${jsMatch[2]}tsx`]) {
-            if (fs11.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
+            if (fs12.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
           }
         }
         for (const ext of this.config.resolve.extensions) {
-          if (fs11.existsSync(clean + ext)) return clean + ext + query;
+          if (fs12.existsSync(clean + ext)) return clean + ext + query;
         }
         for (const ext of this.config.resolve.extensions) {
-          const indexPath = path14.join(clean, `index${ext}`);
-          if (fs11.existsSync(indexPath)) return indexPath;
+          const indexPath = path15.join(clean, `index${ext}`);
+          if (fs12.existsSync(indexPath)) return indexPath;
         }
         return id;
       }
@@ -5626,10 +5861,10 @@ var init_runnable_environment = __esm({
           return;
         }
         const ssrImport = async (dep) => {
-          if (NODE_BUILTINS3.has(dep) || !dep.startsWith(".") && !path14.isAbsolute(dep) && !dep.startsWith("\0")) {
+          if (NODE_BUILTINS3.has(dep) || !dep.startsWith(".") && !path15.isAbsolute(dep) && !dep.startsWith("\0")) {
             return this.importExternal(dep);
           }
-          const depId = dep.startsWith(".") ? this.completeExtension(path14.resolve(path14.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
+          const depId = dep.startsWith(".") ? this.completeExtension(path15.resolve(path15.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
           return this.instantiate(depId);
         };
         const ssrExportAll = (sourceModule) => {
@@ -5661,7 +5896,7 @@ var init_runnable_environment = __esm({
       }
       async importExternal(spec) {
         try {
-          return await (spec.startsWith("node:") || !path14.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
+          return await (spec.startsWith("node:") || !path15.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
         } catch (err) {
           throw new Error(`[nasti:ssr] failed to import external "${spec}": ${err.message}`);
         }
@@ -5687,7 +5922,7 @@ var dev_engine_exports = {};
 __export(dev_engine_exports, {
   createBundledDevServer: () => createBundledDevServer
 });
-import path15 from "path";
+import path16 from "path";
 import crypto3 from "crypto";
 import { WebSocketServer as WsServer2 } from "ws";
 import pc8 from "picocolors";
@@ -5772,7 +6007,7 @@ async function createBundledDevServer(opts) {
       }
       const url = `/${patchPath}`;
       logger.info(
-        pc8.green("hmr update ") + pc8.dim(changedFiles.map((f) => path15.relative(config.root, f)).join(", ")),
+        pc8.green("hmr update ") + pc8.dim(changedFiles.map((f) => path16.relative(config.root, f)).join(", ")),
         { timestamp: true }
       );
       sendTo(clientId, { type: "hmr:update", path: url, url });
@@ -5927,7 +6162,7 @@ async function createBundledDevServer(opts) {
           return;
         }
         res.setHeader("ETag", hit.etag);
-        res.setHeader("Content-Type", MIME_TYPES[path15.extname(fileName)] ?? "application/octet-stream");
+        res.setHeader("Content-Type", MIME_TYPES[path16.extname(fileName)] ?? "application/octet-stream");
         res.setHeader("Cache-Control", "no-cache");
         res.once("finish", () => {
           void engine.notifyPayloadDelivered(fileName).catch(
@@ -5968,7 +6203,7 @@ function stripCatchAllLoad(plugins) {
   );
 }
 function createReactRefreshRuntimePlugin(entryPoints) {
-  const entryIds = new Set(entryPoints.map((p) => path15.resolve(p)));
+  const entryIds = new Set(entryPoints.map((p) => path16.resolve(p)));
   return {
     name: "nasti:bundled-react-refresh",
     resolveId(source) {
@@ -5986,7 +6221,7 @@ function createReactRefreshRuntimePlugin(entryPoints) {
       return null;
     },
     transform(code, id) {
-      if (!entryIds.has(path15.resolve(id.split("?")[0]))) return null;
+      if (!entryIds.has(path16.resolve(id.split("?")[0]))) return null;
       return { code: `import ${JSON.stringify(PREAMBLE_SPEC)};
 ${code}`, map: null };
     }
@@ -6157,7 +6392,7 @@ __export(server_exports, {
   createServer: () => createServer
 });
 import http from "http";
-import path16 from "path";
+import path17 from "path";
 import os from "os";
 import connect from "connect";
 import sirv from "sirv";
@@ -6250,20 +6485,39 @@ async function createServer(inlineConfig = {}) {
     app.use(bundledServer.middleware);
   }
   const ignoredSegments = /* @__PURE__ */ new Set(["node_modules", ".git", ".nasti"]);
-  const outDirAbs = path16.resolve(config.root, config.build.outDir);
-  const watcher = watch(config.root, {
+  const outDirAbs = path17.resolve(config.root, config.build.outDir);
+  const linkedPackageRoots = getLinkedPackageRoots(config.root).filter(
+    (r) => r !== config.root && !isUnderRoot(config.root, r)
+  );
+  const watchTargets = [config.root, ...linkedPackageRoots];
+  const watcher = watch(watchTargets, {
     ignored: (filePath) => {
-      if (filePath === config.root) return false;
-      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path16.sep)) return true;
-      const rel = path16.relative(config.root, filePath);
-      if (!rel || rel.startsWith("..") || path16.isAbsolute(rel)) return false;
-      for (const seg of rel.split(path16.sep)) {
-        if (ignoredSegments.has(seg)) return true;
+      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path17.sep)) return true;
+      for (const watchRoot of watchTargets) {
+        if (filePath === watchRoot) return false;
+        const rel = path17.relative(watchRoot, filePath);
+        if (!rel || rel.startsWith("..") || path17.isAbsolute(rel)) continue;
+        for (const seg of rel.split(path17.sep)) {
+          if (ignoredSegments.has(seg)) return true;
+        }
+        return false;
       }
       return false;
     },
     ignoreInitial: true
   });
+  await new Promise((resolve, reject) => {
+    const onReady = () => {
+      watcher.off("error", onError);
+      resolve();
+    };
+    const onError = (err) => {
+      watcher.off("ready", onReady);
+      reject(err);
+    };
+    watcher.once("ready", onReady);
+    watcher.once("error", onError);
+  });
   let server;
   const environmentServices = {};
   let environmentDriversStarted = false;
@@ -6375,16 +6629,25 @@ async function createServer(inlineConfig = {}) {
     });
   };
   watcher.on("change", (file) => {
+    if (file.includes(`${path17.sep}node_modules${path17.sep}`) || file.endsWith(`${path17.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "change");
   });
   watcher.on("add", (file) => {
+    if (file.includes(`${path17.sep}node_modules${path17.sep}`) || file.endsWith(`${path17.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "add");
   });
   watcher.on("unlink", (file) => {
+    if (file.includes(`${path17.sep}node_modules${path17.sep}`) || file.endsWith(`${path17.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     notifyEnvironmentDrivers(file, "unlink");
   });
@@ -6414,7 +6677,7 @@ async function createServer(inlineConfig = {}) {
           const readyIn = Math.ceil(performance.now() - startTime);
           logger.info(
             `
-  ${pc9.cyan(pc9.bold("NASTI"))} ${pc9.cyan(`v${"2.4.2"}`)}  ${pc9.dim("ready in")} ${pc9.bold(readyIn)} ${pc9.dim("ms")}
+  ${pc9.cyan(pc9.bold("NASTI"))} ${pc9.cyan(`v${"2.4.4"}`)}  ${pc9.dim("ready in")} ${pc9.bold(readyIn)} ${pc9.dim("ms")}
 `
           );
           printServerUrls(
@@ -6511,7 +6774,7 @@ async function createServer(inlineConfig = {}) {
     throw error;
   }
   app.use(transformMiddleware(transformContexts.get("client")));
-  const publicDir = path16.resolve(config.root, "public");
+  const publicDir = path17.resolve(config.root, "public");
   app.use(sirv(publicDir, { dev: true, etag: true }));
   app.use(sirv(config.root, { dev: true, etag: true }));
   const postMiddlewares = [];
@@ -6550,6 +6813,7 @@ var init_server = __esm({
     init_builtins();
     init_plugin_api();
     init_env();
+    init_fs_allow();
   }
 });
 
@@ -6562,6 +6826,7 @@ init_config();
 init_resolve();
 import path11 from "path";
 import fs8 from "fs";
+import { createRequire as createRequire3 } from "module";
 import { rolldown as rolldown2 } from "rolldown";
 import pc5 from "picocolors";
 
@@ -6605,7 +6870,7 @@ async function buildElectron(inlineConfig = {}) {
   const config = await resolveConfig({ ...inlineConfig, target: "electron" }, "build");
   const startTime = performance.now();
   assertElectronVersion(config);
-  console.log(pc5.cyan("\n\u26A1 nasti build (electron)") + pc5.dim(` v${"2.4.2"}`));
+  console.log(pc5.cyan("\n\u26A1 nasti build (electron)") + pc5.dim(` v${"2.4.4"}`));
   console.log(pc5.dim(`  root: ${config.root}`));
   console.log(pc5.dim(`  mode: ${config.mode}`));
   console.log(pc5.dim(`  target: electron (\u2265 ${config.electron.minVersion})`));
@@ -6749,13 +7014,21 @@ function assertElectronVersion(config) {
 }
 function detectInstalledElectron(root) {
   try {
-    const pkgPath = path11.resolve(root, "node_modules/electron/package.json");
-    if (!fs8.existsSync(pkgPath)) return null;
+    const require2 = createRequire3(path11.resolve(root, "package.json"));
+    const pkgPath = require2.resolve("electron/package.json");
     const pkg = JSON.parse(fs8.readFileSync(pkgPath, "utf-8"));
     const major = parseInt(String(pkg.version).split(".")[0], 10);
     return Number.isFinite(major) ? major : null;
   } catch {
-    return null;
+    try {
+      const pkgPath = path11.resolve(root, "node_modules/electron/package.json");
+      if (!fs8.existsSync(pkgPath)) return null;
+      const pkg = JSON.parse(fs8.readFileSync(pkgPath, "utf-8"));
+      const major = parseInt(String(pkg.version).split(".")[0], 10);
+      return Number.isFinite(major) ? major : null;
+    } catch {
+      return null;
+    }
   }
 }
 
@@ -6764,9 +7037,9 @@ init_server();
 
 // src/server/electron-dev.ts
 init_config();
-import path17 from "path";
-import fs12 from "fs";
-import { createRequire as createRequire5 } from "module";
+import path18 from "path";
+import fs13 from "fs";
+import { createRequire as createRequire6 } from "module";
 import { spawn } from "child_process";
 import chokidar from "chokidar";
 import pc10 from "picocolors";
@@ -6778,7 +7051,7 @@ async function startElectronDev(inlineConfig = {}) {
   const { noSpawn, ...rest } = inlineConfig;
   const config = await resolveConfig({ ...rest, target: "electron" }, "serve");
   warnElectronVersion(config);
-  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.4.2"}`));
+  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.4.4"}`));
   const { createServer: createServer2 } = await Promise.resolve().then(() => (init_server(), server_exports));
   const server = await createServer2({
     ...rest,
@@ -6788,11 +7061,11 @@ async function startElectronDev(inlineConfig = {}) {
   await server.listen();
   const devUrl = `http://localhost:${server.config.server.port}` + electronRendererDevPath(config.electron.renderer);
   console.log(pc10.dim(`  renderer: ${devUrl}`));
-  const stageDir = path17.resolve(config.root, ".nasti");
-  fs12.mkdirSync(stageDir, { recursive: true });
-  const mainEntry = path17.resolve(config.root, config.electron.main);
+  const stageDir = path18.resolve(config.root, ".nasti");
+  fs13.mkdirSync(stageDir, { recursive: true });
+  const mainEntry = path18.resolve(config.root, config.electron.main);
   const preloadEntries = normalizePreload(config.electron.preload, config.root);
-  const builtMainFile = path17.join(stageDir, "main" + extFor(config.electron.mainFormat));
+  const builtMainFile = path18.join(stageDir, "main" + extFor(config.electron.mainFormat));
   const builtPreloadFiles = [];
   const compileAll = async () => {
     await compileNode(config, mainEntry, {
@@ -6802,9 +7075,9 @@ async function startElectronDev(inlineConfig = {}) {
     });
     builtPreloadFiles.length = 0;
     for (const entry of preloadEntries) {
-      if (!fs12.existsSync(entry)) continue;
-      const base = path17.basename(entry).replace(/\.[^.]+$/, "");
-      const out = path17.join(stageDir, base + extFor(config.electron.preloadFormat));
+      if (!fs13.existsSync(entry)) continue;
+      const base = path18.basename(entry).replace(/\.[^.]+$/, "");
+      const out = path18.join(stageDir, base + extFor(config.electron.preloadFormat));
       await compileNode(config, entry, {
         outFile: out,
         format: config.electron.preloadFormat,
@@ -6843,7 +7116,7 @@ async function startElectronDev(inlineConfig = {}) {
   };
   spawnElectron();
   if (config.electron.autoRestart) {
-    const watchTargets = [mainEntry, ...preloadEntries].filter(fs12.existsSync);
+    const watchTargets = [mainEntry, ...preloadEntries].filter(fs13.existsSync);
     const watcher = chokidar.watch(watchTargets, { ignoreInitial: true });
     let restarting = null;
     let pending = false;
@@ -6923,7 +7196,7 @@ async function compileNode(config, entry, opts) {
     platform: "node",
     plugins: [oxcTransformPlugin, electronPlugin(config), resolvePlugin(config)]
   });
-  fs12.mkdirSync(path17.dirname(opts.outFile), { recursive: true });
+  fs13.mkdirSync(path18.dirname(opts.outFile), { recursive: true });
   await bundle2.write({
     file: opts.outFile,
     format: opts.format === "cjs" ? "cjs" : "esm",
@@ -6936,18 +7209,18 @@ async function compileNode(config, entry, opts) {
   await bundle2.close();
 }
 function electronRendererDevPath(renderer) {
-  const normalized = renderer.split(path17.sep).join("/").replace(/^\.?\//, "");
+  const normalized = renderer.split(path18.sep).join("/").replace(/^\.?\//, "");
   return normalized === "index.html" ? "/" : `/${normalized}`;
 }
 function resolveElectronBinary(config) {
-  if (config.electron.electronPath && fs12.existsSync(config.electron.electronPath)) {
+  if (config.electron.electronPath && fs13.existsSync(config.electron.electronPath)) {
     return config.electron.electronPath;
   }
   try {
-    const require2 = createRequire5(path17.resolve(config.root, "package.json"));
+    const require2 = createRequire6(path18.resolve(config.root, "package.json"));
     const pathFile = require2.resolve("electron");
     const electronModule = require2(pathFile);
-    if (typeof electronModule === "string" && fs12.existsSync(electronModule)) {
+    if (typeof electronModule === "string" && fs13.existsSync(electronModule)) {
       return electronModule;
     }
   } catch {
@@ -6974,10 +7247,10 @@ function warnElectronVersion(config) {
 }
 
 // src/plugins/monaco-editor.ts
-import path18 from "path";
-import fs13 from "fs";
+import path19 from "path";
+import fs14 from "fs";
 import crypto4 from "crypto";
-import { createRequire as createRequire6 } from "module";
+import { createRequire as createRequire7 } from "module";
 var DEFAULT_WORKERS = {
   editorWorkerService: "monaco-editor/esm/vs/editor/editor.worker",
   css: "monaco-editor/esm/vs/language/css/css.worker",
@@ -6996,9 +7269,9 @@ function normalizePublicPath(p) {
 }
 function readMonacoVersion(root) {
   try {
-    const require2 = createRequire6(path18.resolve(root, "package.json"));
+    const require2 = createRequire7(path19.resolve(root, "package.json"));
     const pkgJsonPath = require2.resolve("monaco-editor/package.json", { paths: [root] });
-    const pkg = JSON.parse(fs13.readFileSync(pkgJsonPath, "utf-8"));
+    const pkg = JSON.parse(fs14.readFileSync(pkgJsonPath, "utf-8"));
     return typeof pkg.version === "string" ? pkg.version : "unknown";
   } catch {
     return "unknown";
@@ -7018,20 +7291,20 @@ function monacoEditorPlugin(options = {}) {
   let cacheDir = "";
   const building = /* @__PURE__ */ new Map();
   async function buildWorker(worker) {
-    const cacheFile = path18.join(cacheDir, `${worker.label}.worker.js`);
-    if (fs13.existsSync(cacheFile)) return cacheFile;
+    const cacheFile = path19.join(cacheDir, `${worker.label}.worker.js`);
+    if (fs14.existsSync(cacheFile)) return cacheFile;
     const existing = building.get(worker.label);
     if (existing) return existing;
     const task = (async () => {
       const { rolldown: rolldown4 } = await import("rolldown");
-      const require2 = createRequire6(path18.resolve(resolvedConfig.root, "package.json"));
+      const require2 = createRequire7(path19.resolve(resolvedConfig.root, "package.json"));
       let entry;
       try {
         entry = require2.resolve(worker.entry, { paths: [resolvedConfig.root] });
       } catch {
         entry = require2.resolve(worker.entry + ".js", { paths: [resolvedConfig.root] });
       }
-      fs13.mkdirSync(cacheDir, { recursive: true });
+      fs14.mkdirSync(cacheDir, { recursive: true });
       const bundle2 = await rolldown4({
         input: entry,
         platform: "browser"
@@ -7091,16 +7364,23 @@ function monacoEditorPlugin(options = {}) {
       resolvedConfig = config;
       const version = readMonacoVersion(config.root);
       const key = crypto4.createHash("sha1").update(version + "|" + publicPath).digest("hex").slice(0, 8);
-      cacheDir = path18.resolve(config.root, "node_modules/.nasti/monaco", key);
+      cacheDir = path19.resolve(config.root, "node_modules/.nasti/monaco", key);
     },
     async configureServer(server) {
       const shouldBuild = !isCDN(publicPath) || forceBuildCDN;
       const watcher = server.watcher;
-      const monacoDir = path18.resolve(resolvedConfig.root, "node_modules/monaco-editor");
+      const monacoLogical = path19.resolve(resolvedConfig.root, "node_modules/monaco-editor");
+      const monacoPaths = /* @__PURE__ */ new Set([monacoLogical]);
       try {
-        watcher?.unwatch?.(monacoDir);
+        monacoPaths.add(fs14.realpathSync(monacoLogical));
       } catch {
       }
+      for (const monacoDir of monacoPaths) {
+        try {
+          watcher?.unwatch?.(monacoDir);
+        } catch {
+        }
+      }
       if (!shouldBuild) return;
       void Promise.all(
         workers.map(
@@ -7126,7 +7406,7 @@ function monacoEditorPlugin(options = {}) {
             const file = await buildWorker(worker);
             res.setHeader("Content-Type", "application/javascript; charset=utf-8");
             res.setHeader("Cache-Control", "public, max-age=604800, immutable");
-            fs13.createReadStream(file).pipe(res);
+            fs14.createReadStream(file).pipe(res);
           } catch (e) {
             res.statusCode = 500;
             res.end(`Monaco worker build failed: ${e.message}`);
@@ -7161,16 +7441,16 @@ self.monaco = monaco;`,
         resolvedConfig.root,
         resolvedConfig.build.outDir,
         resolvedConfig.base
-      ) : isCDN(publicPath) ? path18.resolve(resolvedConfig.root, resolvedConfig.build.outDir, "monaco") : path18.resolve(
+      ) : isCDN(publicPath) ? path19.resolve(resolvedConfig.root, resolvedConfig.build.outDir, "monaco") : path19.resolve(
         resolvedConfig.root,
         resolvedConfig.build.outDir,
         publicPath.replace(/^\//, "")
       );
-      fs13.mkdirSync(outDir, { recursive: true });
+      fs14.mkdirSync(outDir, { recursive: true });
       for (const worker of workers) {
         try {
           const cacheFile = await buildWorker(worker);
-          fs13.copyFileSync(cacheFile, path18.join(outDir, `${worker.label}.worker.js`));
+          fs14.copyFileSync(cacheFile, path19.join(outDir, `${worker.label}.worker.js`));
         } catch (e) {
           throw new Error(
             `[nasti:monaco-editor] worker build failed for "${worker.label}": ${e.message}