@nasti-toolchain/nasti 2.4.3 → 2.4.4

package/dist/cli.js

@@ -10,10 +10,10 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
-var __glob = (map) => (path18) => {
-  var fn = map[path18];
+var __glob = (map) => (path19) => {
+  var fn = map[path19];
   if (fn) return fn();
-  throw new Error("Module not found in bundle: " + path18);
+  throw new Error("Module not found in bundle: " + path19);
 };
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
@@ -856,6 +856,24 @@ var init_module_graph = __esm({
       getModulesByFile(file) {
         return this.fileToModulesMap.get(file);
       }
+      /**
+       * Modules whose registered entry file lives under `dir` (inclusive).
+       * Used when a non-entry source inside a prebundled workspace package changes:
+       * only the package entry was registered, so getModulesByFile(changedFile)
+       * misses — we invalidate every /@modules entry rooted in that package.
+       */
+      getModulesWithFileUnder(dir) {
+        const result = /* @__PURE__ */ new Set();
+        const normDir = dir.replace(/\\/g, "/");
+        const normPrefix = normDir.endsWith("/") ? normDir : normDir + "/";
+        for (const [file, mods] of this.fileToModulesMap) {
+          const normFile = file.replace(/\\/g, "/");
+          if (normFile === normDir || normFile.startsWith(normPrefix)) {
+            for (const m of mods) result.add(m);
+          }
+        }
+        return result;
+      }
       async ensureEntryFromUrl(url) {
         const normalizedUrl = removeTimestampQuery(url);
         let mod = this.urlToModuleMap.get(normalizedUrl);
@@ -1586,9 +1604,123 @@ var init_assets = __esm({
   }
 });
 
-// src/server/middleware.ts
-import path5 from "path";
+// src/server/fs-allow.ts
 import fs5 from "fs";
+import path5 from "path";
+function isUnderRoot(abs, root) {
+  const rel = path5.relative(root, abs);
+  return !!rel && !rel.startsWith("..") && !path5.isAbsolute(rel);
+}
+function discoverLinkedPackageRoots(projectRoot, maxDepth = 4) {
+  const results = [];
+  const seenReal = /* @__PURE__ */ new Set();
+  const queued = /* @__PURE__ */ new Set([projectRoot]);
+  const queue = [projectRoot];
+  for (let depth = 0; depth < maxDepth && queue.length > 0; depth++) {
+    const levelCount = queue.length;
+    for (let i = 0; i < levelCount; i++) {
+      const dir = queue.shift();
+      const nm = path5.join(dir, "node_modules");
+      let entries;
+      try {
+        entries = fs5.readdirSync(nm, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const ent of entries) {
+        if (ent.name.startsWith(".") || ent.name === "node_modules") continue;
+        const pkgNames = ent.name.startsWith("@") ? listScopedPackages(nm, ent.name) : [ent.name];
+        for (const pkgName of pkgNames) {
+          const pkgPath = path5.join(nm, pkgName);
+          let real;
+          try {
+            real = fs5.realpathSync(pkgPath);
+          } catch {
+            continue;
+          }
+          if (seenReal.has(real)) continue;
+          seenReal.add(real);
+          if (!queued.has(real)) {
+            queued.add(real);
+            queue.push(real);
+          }
+          if (real !== projectRoot && !isUnderRoot(real, projectRoot) && !real.includes(NM)) {
+            results.push(real);
+          }
+        }
+      }
+    }
+  }
+  return results;
+}
+function listScopedPackages(nm, scope) {
+  try {
+    return fs5.readdirSync(path5.join(nm, scope)).filter((name) => !name.startsWith(".")).map((name) => path5.join(scope, name));
+  } catch {
+    return [];
+  }
+}
+function getLinkedPackageRoots(projectRoot) {
+  let mtimeMs = 0;
+  try {
+    mtimeMs = fs5.statSync(path5.join(projectRoot, "node_modules")).mtimeMs;
+  } catch {
+    mtimeMs = 0;
+  }
+  const cached2 = linkedRootsCache.get(projectRoot);
+  if (cached2 && cached2.mtimeMs === mtimeMs) {
+    return cached2.roots;
+  }
+  const roots = discoverLinkedPackageRoots(projectRoot);
+  linkedRootsCache.set(projectRoot, { roots, mtimeMs });
+  return roots;
+}
+function clearLinkedPackageRootsCache() {
+  linkedRootsCache.clear();
+}
+function isAllowedDevModulePath(realId, projectRoot) {
+  if (realId === projectRoot || isUnderRoot(realId, projectRoot)) return true;
+  for (const pkgRoot of getLinkedPackageRoots(projectRoot)) {
+    if (realId === pkgRoot || realId.startsWith(pkgRoot + path5.sep)) return true;
+  }
+  let dir = projectRoot;
+  for (; ; ) {
+    const nm = path5.join(dir, "node_modules");
+    if (realId === nm || realId.startsWith(nm + path5.sep)) return true;
+    const parent = path5.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return false;
+}
+function findNearestPackageRoot(file) {
+  let dir = path5.dirname(file);
+  for (; ; ) {
+    const pkgJson = path5.join(dir, "package.json");
+    if (fs5.existsSync(pkgJson)) {
+      try {
+        const pkg = JSON.parse(fs5.readFileSync(pkgJson, "utf-8"));
+        if (typeof pkg?.name === "string" && pkg.name) return dir;
+      } catch {
+      }
+    }
+    const parent = path5.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+var NM, linkedRootsCache;
+var init_fs_allow = __esm({
+  "src/server/fs-allow.ts"() {
+    "use strict";
+    NM = `${path5.sep}node_modules${path5.sep}`;
+    linkedRootsCache = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/server/middleware.ts
+import path6 from "path";
+import fs6 from "fs";
 import { createRequire } from "module";
 import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "url";
 import pc3 from "picocolors";
@@ -1599,10 +1731,10 @@ function getReactRefreshRuntimeEsm(includeBoundaryHelpers = false) {
   let cjsPath;
   try {
     const pkgPath = __require2.resolve("react-refresh/package.json");
-    cjsPath = path5.join(path5.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
+    cjsPath = path6.join(path6.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
   } catch (err) {
-    cjsPath = path5.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
-    if (!fs5.existsSync(cjsPath)) {
+    cjsPath = path6.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
+    if (!fs6.existsSync(cjsPath)) {
       const origMsg = err instanceof Error ? err.message : String(err);
       throw new Error(
         `[nasti] Missing dependency "react-refresh". Install it with: npm install react-refresh
@@ -1610,7 +1742,7 @@ Original resolve error: ${origMsg}`
       );
     }
   }
-  const cjsSource = fs5.readFileSync(cjsPath, "utf-8");
+  const cjsSource = fs6.readFileSync(cjsPath, "utf-8");
   __refreshRuntimeCache = `// Wrapped react-refresh runtime -> ESM
 const exports = {};
 const module = { exports };
@@ -1781,8 +1913,8 @@ async function transformRequest(url, ctx) {
     let realIdValid = false;
     try {
       if (idParam) {
-        realId = fs5.realpathSync(idParam);
-        realIdValid = fs5.statSync(realId).isFile() && (realId.includes(`${path5.sep}node_modules${path5.sep}`) || isUnderRoot(realId, config.root));
+        realId = fs6.realpathSync(idParam);
+        realIdValid = fs6.statSync(realId).isFile() && isAllowedDevModulePath(realId, config.root);
       }
     } catch {
       realId = null;
@@ -1849,7 +1981,7 @@ async function transformRequest(url, ctx) {
     }
   }
   const filePath = resolveUrlToFile(url, config.root);
-  if (!filePath || !fs5.existsSync(filePath)) return null;
+  if (!filePath || !fs6.existsSync(filePath)) return null;
   const mod = await moduleGraph.ensureEntryFromUrl(url);
   moduleGraph.registerModule(mod, filePath);
   const transformVersion = mod.invalidationVersion;
@@ -1860,7 +1992,7 @@ async function transformRequest(url, ctx) {
     return transformResult2;
   }
   const loaded = await pluginContainer.load(filePath);
-  let code = loaded == null ? fs5.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
+  let code = loaded == null ? fs6.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
   let map = loaded && typeof loaded !== "string" ? loaded.map : void 0;
   const pluginResult = await pluginContainer.transform(code, filePath);
   if (pluginResult) {
@@ -1918,7 +2050,7 @@ async function loadVirtualModule(spec, ctx) {
   const resolved = await pluginContainer.resolveId(spec);
   if (resolved == null) return null;
   const resolvedId = typeof resolved === "string" ? resolved : resolved.id;
-  const looksVirtual = resolvedId.startsWith("\0") || !fs5.existsSync(resolvedId);
+  const looksVirtual = resolvedId.startsWith("\0") || !fs6.existsSync(resolvedId);
   if (!looksVirtual) return null;
   const loadResult = await pluginContainer.load(resolvedId);
   if (loadResult == null) return null;
@@ -1932,7 +2064,7 @@ async function loadVirtualModule(spec, ctx) {
     config.mode,
     ssrDefineOverrides(ctx.environment?.consumer ?? "client")
   ));
-  const anchor = path5.join(config.root, "__nasti_virtual__.ts");
+  const anchor = path6.join(config.root, "__nasti_virtual__.ts");
   code = rewriteImports(code, config, anchor);
   return { id: resolvedId, result: { code } };
 }
@@ -1958,7 +2090,7 @@ async function doBundlePackage(entryFile, root) {
   await bundle2.close();
   let code = result.output[0].code;
   code = code.replace(/process\.env\.NODE_ENV/g, '"development"');
-  const externalBaseDir = path5.dirname(entryFile);
+  const externalBaseDir = path6.dirname(entryFile);
   code = code.replace(
     /^(import\b[^;'"]*?\bfrom\s+)(['"])([^'"./][^'"]*)(\2)/gm,
     (_, prefix, q, spec) => `${prefix}${q}${externalSpecToModuleUrl(spec, externalBaseDir, root)}${q}`
@@ -1976,16 +2108,16 @@ async function doBundlePackage(entryFile, root) {
   return code;
 }
 async function tryGenerateSubpathShim(entryFile, root) {
-  const NM = `${path5.sep}node_modules${path5.sep}`;
-  if (!entryFile.includes(NM)) return null;
+  const NM2 = `${path6.sep}node_modules${path6.sep}`;
+  if (!entryFile.includes(NM2)) return null;
   let pkgDir = null;
   let pkgName = null;
-  let dir = path5.dirname(entryFile);
+  let dir = path6.dirname(entryFile);
   while (true) {
-    const pkgJsonPath = path5.join(dir, "package.json");
-    if (fs5.existsSync(pkgJsonPath)) {
+    const pkgJsonPath = path6.join(dir, "package.json");
+    if (fs6.existsSync(pkgJsonPath)) {
       try {
-        const pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+        const pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
         if (typeof pkg?.name === "string" && pkg.name) {
           pkgDir = dir;
           pkgName = pkg.name;
@@ -1994,16 +2126,16 @@ async function tryGenerateSubpathShim(entryFile, root) {
       } catch {
       }
     }
-    const parent = path5.dirname(dir);
+    const parent = path6.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
-    if (!dir.includes(NM)) return null;
+    if (!dir.includes(NM2)) return null;
   }
   if (!pkgDir || !pkgName) return null;
-  const entryExt = path5.extname(entryFile);
+  const entryExt = path6.extname(entryFile);
   const mainEntry = pickMainEntryByExtension(pkgDir, entryExt);
   if (!mainEntry) return null;
-  if (path5.resolve(mainEntry) === path5.resolve(entryFile)) return null;
+  if (path6.resolve(mainEntry) === path6.resolve(entryFile)) return null;
   let mainNs;
   let subNs;
   try {
@@ -2027,7 +2159,7 @@ async function tryGenerateSubpathShim(entryFile, root) {
     if (mainNs["default"] !== subNs["default"]) return null;
   }
   const rootMain = resolveNodeModule(root, pkgName);
-  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path5.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
+  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path6.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
   const lines = [
     `// Nasti subpath shim \u2192 ${pkgName} (avoid duplicate bundling)`,
     `import * as __pkg from "${mainEntryUrl}";`
@@ -2041,10 +2173,10 @@ async function tryGenerateSubpathShim(entryFile, root) {
   return lines.join("\n") + "\n";
 }
 function pickMainEntryByExtension(pkgDir, preferredExt) {
-  const pkgJsonPath = path5.join(pkgDir, "package.json");
+  const pkgJsonPath = path6.join(pkgDir, "package.json");
   let pkg;
   try {
-    pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -2063,14 +2195,14 @@ function pickMainEntryByExtension(pkgDir, preferredExt) {
   if (typeof pkg.module === "string") candidates.push(pkg.module);
   if (typeof pkg.main === "string") candidates.push(pkg.main);
   for (const cand of candidates) {
-    if (path5.extname(cand) === preferredExt) {
-      const full = path5.resolve(pkgDir, cand);
-      if (fs5.existsSync(full)) return full;
+    if (path6.extname(cand) === preferredExt) {
+      const full = path6.resolve(pkgDir, cand);
+      if (fs6.existsSync(full)) return full;
     }
   }
   for (const cand of candidates) {
-    const full = path5.resolve(pkgDir, cand);
-    if (fs5.existsSync(full)) return full;
+    const full = path6.resolve(pkgDir, cand);
+    if (fs6.existsSync(full)) return full;
   }
   return null;
 }
@@ -2095,8 +2227,8 @@ function rewriteExternalRequires(code, baseDir, root) {
 }
 async function injectCjsNamedExports(code, entryFile) {
   try {
-    const { createRequire: createRequire6 } = await import("module");
-    const req = createRequire6(entryFile);
+    const { createRequire: createRequire7 } = await import("module");
+    const req = createRequire7(entryFile);
     const cjsExports = req(entryFile);
     if (!cjsExports || typeof cjsExports !== "object" && typeof cjsExports !== "function" || Array.isArray(cjsExports)) return code;
     const namedKeys = Object.keys(cjsExports).filter(
@@ -2137,11 +2269,22 @@ function rewriteImports(code, config, filePath, importedUrls, moduleGraph) {
 }
 function createModuleSpecifierResolver(config, filePath) {
   const root = config.root;
-  const fileDir = path5.dirname(filePath);
+  const fileDir = path6.dirname(filePath);
   const aliasEntries = Object.entries(config.resolve.alias).sort(
     ([a], [b]) => b.length - a.length
   );
-  const toRootUrl = (abs) => "/" + path5.relative(root, abs).replace(/\\/g, "/");
+  const toServableUrl = (abs) => {
+    if (isUnderRoot(abs, root)) {
+      return "/" + path6.relative(root, abs).replace(/\\/g, "/");
+    }
+    for (const pkgRoot of getLinkedPackageRoots(root)) {
+      if (abs === pkgRoot || abs.startsWith(pkgRoot + path6.sep)) {
+        const normalized = abs.replace(/\\/g, "/");
+        return "/@fs/" + (normalized.startsWith("/") ? normalized.slice(1) : normalized);
+      }
+    }
+    return null;
+  };
   return (specifier) => {
     const suffixMatch = specifier.match(/[?#].*$/);
     const suffix = suffixMatch ? suffixMatch[0] : "";
@@ -2150,18 +2293,21 @@ function createModuleSpecifierResolver(config, filePath) {
       if (baseSpec === key || baseSpec.startsWith(key + "/")) {
         const aliasBase = resolveAliasTarget(value, root);
         const sub = baseSpec.slice(key.length).replace(/^\//, "");
-        const target = sub ? path5.join(aliasBase, sub) : aliasBase;
+        const target = sub ? path6.join(aliasBase, sub) : aliasBase;
         const resolved = tryResolveDiskPath(target);
-        return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+        const url = resolved ? toServableUrl(resolved) : null;
+        return url ? url + suffix : specifier;
       }
     }
     if (baseSpec.startsWith("./") || baseSpec.startsWith("../")) {
-      const resolved = tryResolveDiskPath(path5.resolve(fileDir, baseSpec));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path6.resolve(fileDir, baseSpec));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/") && !baseSpec.startsWith("/@")) {
-      const resolved = tryResolveDiskPath(path5.join(root, baseSpec.replace(/^\//, "")));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path6.join(root, baseSpec.replace(/^\//, "")));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/")) return specifier;
     return `/@modules/${specifier}`;
@@ -2314,28 +2460,24 @@ function maskStringsAndComments(code) {
   return masked.join("");
 }
 function resolveAliasTarget(value, root) {
-  if (path5.isAbsolute(value) && fs5.existsSync(value)) return value;
-  if (value.startsWith("/")) return path5.join(root, value.slice(1));
-  return path5.resolve(root, value);
+  if (path6.isAbsolute(value) && fs6.existsSync(value)) return value;
+  if (value.startsWith("/")) return path6.join(root, value.slice(1));
+  return path6.resolve(root, value);
 }
 function tryResolveDiskPath(target) {
-  if (fs5.existsSync(target) && fs5.statSync(target).isFile()) return target;
+  if (fs6.existsSync(target) && fs6.statSync(target).isFile()) return target;
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = target + ext;
-    if (fs5.existsSync(withExt) && fs5.statSync(withExt).isFile()) return withExt;
+    if (fs6.existsSync(withExt) && fs6.statSync(withExt).isFile()) return withExt;
   }
-  if (fs5.existsSync(target) && fs5.statSync(target).isDirectory()) {
+  if (fs6.existsSync(target) && fs6.statSync(target).isDirectory()) {
     for (const ext of RESOLVE_EXTENSIONS) {
-      const idx = path5.join(target, "index" + ext);
-      if (fs5.existsSync(idx) && fs5.statSync(idx).isFile()) return idx;
+      const idx = path6.join(target, "index" + ext);
+      if (fs6.existsSync(idx) && fs6.statSync(idx).isFile()) return idx;
     }
   }
   return null;
 }
-function isUnderRoot(abs, root) {
-  const rel = path5.relative(root, abs);
-  return !!rel && !rel.startsWith("..") && !path5.isAbsolute(rel);
-}
 function appendTimestampQuery(url, timestamp) {
   const hashIndex = url.indexOf("#");
   const hash = hashIndex >= 0 ? url.slice(hashIndex) : "";
@@ -2353,7 +2495,7 @@ function resolveNodeModule(baseDir, moduleName) {
   const resolved = resolveNodeModuleEntry(baseDir, moduleName);
   if (!resolved) return null;
   try {
-    return fs5.realpathSync(resolved);
+    return fs6.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -2373,21 +2515,21 @@ function resolveNodeModuleEntry(root, moduleName) {
   let pkgDir = null;
   let dir = root;
   for (; ; ) {
-    const candidate = path5.join(dir, "node_modules", pkgName);
-    if (fs5.existsSync(candidate)) {
+    const candidate = path6.join(dir, "node_modules", pkgName);
+    if (fs6.existsSync(candidate)) {
       pkgDir = candidate;
       break;
     }
-    const parent = path5.dirname(dir);
+    const parent = path6.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   if (!pkgDir) return null;
-  const pkgJsonPath = path5.join(pkgDir, "package.json");
-  if (!fs5.existsSync(pkgJsonPath)) return null;
+  const pkgJsonPath = path6.join(pkgDir, "package.json");
+  if (!fs6.existsSync(pkgJsonPath)) return null;
   let pkg;
   try {
-    pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -2400,32 +2542,32 @@ function resolveNodeModuleEntry(root, moduleName) {
     const subDirs = [""];
     for (const field of ["module", "main"]) {
       if (typeof pkg[field] === "string") {
-        const dir2 = path5.dirname(pkg[field]);
+        const dir2 = path6.dirname(pkg[field]);
         if (dir2 && dir2 !== "." && !subDirs.includes(dir2)) subDirs.push(dir2);
       }
     }
     for (const dir2 of subDirs) {
-      const direct = path5.join(pkgDir, dir2, subpath);
-      if (fs5.existsSync(direct) && fs5.statSync(direct).isFile()) return direct;
+      const direct = path6.join(pkgDir, dir2, subpath);
+      if (fs6.existsSync(direct) && fs6.statSync(direct).isFile()) return direct;
       for (const ext of RESOLVE_EXTENSIONS) {
-        if (fs5.existsSync(direct + ext)) return direct + ext;
+        if (fs6.existsSync(direct + ext)) return direct + ext;
       }
     }
     return null;
   }
   for (const field of ["module", "jsnext:main", "jsnext", "main"]) {
     if (typeof pkg[field] === "string") {
-      const entry = path5.join(pkgDir, pkg[field]);
-      if (fs5.existsSync(entry)) return entry;
+      const entry = path6.join(pkgDir, pkg[field]);
+      if (fs6.existsSync(entry)) return entry;
     }
   }
-  const indexFallback = path5.join(pkgDir, "index.js");
-  if (fs5.existsSync(indexFallback)) return indexFallback;
+  const indexFallback = path6.join(pkgDir, "index.js");
+  if (fs6.existsSync(indexFallback)) return indexFallback;
   return null;
 }
 function resolvePackageExports(exports, key, pkgDir) {
   if (typeof exports === "string") {
-    return key === "." ? path5.join(pkgDir, exports) : null;
+    return key === "." ? path6.join(pkgDir, exports) : null;
   }
   const entry = exports[key];
   if (entry === void 0) {
@@ -2437,7 +2579,7 @@ function resolvePackageExports(exports, key, pkgDir) {
   return resolveExportValue(entry, pkgDir);
 }
 function resolveExportValue(value, pkgDir) {
-  if (typeof value === "string") return path5.join(pkgDir, value);
+  if (typeof value === "string") return path6.join(pkgDir, value);
   if (Array.isArray(value)) {
     for (const item of value) {
       const r = resolveExportValue(item, pkgDir);
@@ -2456,35 +2598,54 @@ function resolveExportValue(value, pkgDir) {
   return null;
 }
 function resolveUrlToFile(url, root) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (cleanUrl.startsWith("/@modules/")) {
     const moduleName = cleanUrl.slice("/@modules/".length);
     return resolveNodeModule(root, moduleName);
   }
-  const filePath = path5.resolve(root, cleanUrl.replace(/^\//, ""));
-  if (fs5.existsSync(filePath) && fs5.statSync(filePath).isFile()) {
+  if (cleanUrl.startsWith("/@fs/")) {
+    let abs = cleanUrl.slice("/@fs/".length);
+    if (process.platform === "win32") {
+      abs = abs.replace(/\//g, path6.sep);
+    } else if (!abs.startsWith("/")) {
+      abs = "/" + abs;
+    }
+    try {
+      const real = fs6.realpathSync(abs);
+      if (fs6.statSync(real).isFile() && isAllowedDevModulePath(real, root)) return real;
+    } catch {
+      return null;
+    }
+    return null;
+  }
+  const filePath = path6.resolve(root, cleanUrl.replace(/^\//, ""));
+  if (fs6.existsSync(filePath) && fs6.statSync(filePath).isFile()) {
     return filePath;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = filePath + ext;
-    if (fs5.existsSync(withExt)) return withExt;
+    if (fs6.existsSync(withExt)) return withExt;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
-    const indexFile = path5.join(filePath, "index" + ext);
-    if (fs5.existsSync(indexFile)) return indexFile;
+    const indexFile = path6.join(filePath, "index" + ext);
+    if (fs6.existsSync(indexFile)) return indexFile;
   }
   return null;
 }
 function isModuleRequest(url, destination) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (/\.(ts|tsx|jsx|js|mjs|vue|css|json)$/.test(cleanUrl)) return true;
   if (cleanUrl.startsWith("/@modules/")) return true;
+  if (cleanUrl.startsWith("/@fs/")) return true;
   if (isAssetFile(cleanUrl)) {
-    const query = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
+    const qIdx = url.indexOf("?");
+    const hIdx = url.indexOf("#");
+    const queryEnd = hIdx === -1 ? url.length : hIdx;
+    const query = qIdx === -1 || qIdx > queryEnd ? "" : url.slice(qIdx + 1, queryEnd);
     const isExplicitAssetModule = /(?:^|&)(?:url|raw)(?:&|$)/.test(query);
     return isExplicitAssetModule || destination === "script";
   }
-  if (!path5.extname(cleanUrl)) return true;
+  if (!path6.extname(cleanUrl)) return true;
   return false;
 }
 function getHmrClientCode() {
@@ -2723,7 +2884,8 @@ var init_middleware = __esm({
     init_env();
     init_url();
     init_assets();
-    __dirname_esm = path5.dirname(fileURLToPath(import.meta.url));
+    init_fs_allow();
+    __dirname_esm = path6.dirname(fileURLToPath(import.meta.url));
     __require2 = createRequire(import.meta.url);
     __refreshRuntimeCache = null;
     REACT_REFRESH_BOUNDARY_HELPERS = `
@@ -2804,8 +2966,8 @@ window.__vite_plugin_react_preamble_installed__ = true;
 });
 
 // src/server/hmr.ts
-import path6 from "path";
-import fs6 from "fs";
+import path7 from "path";
+import fs7 from "fs";
 import pc4 from "picocolors";
 async function handleFileChange(file, server, environmentName = "client", timestamp = Date.now()) {
   const { config } = server;
@@ -2815,9 +2977,26 @@ async function handleFileChange(file, server, environmentName = "client", timest
   }
   const moduleGraph = environment.moduleGraph;
   const logger = config.logger;
-  const relativePath = "/" + path6.relative(config.root, file);
-  const shortFile = path6.relative(config.root, file);
-  const mods = moduleGraph.getModulesByFile(file);
+  const relativePath = "/" + path7.relative(config.root, file);
+  const shortFile = path7.relative(config.root, file);
+  let mods = moduleGraph.getModulesByFile(file);
+  if (!mods || mods.size === 0) {
+    try {
+      const real = fs7.realpathSync(file);
+      if (real !== file) mods = moduleGraph.getModulesByFile(real);
+      if (mods && mods.size > 0) file = real;
+    } catch {
+    }
+  }
+  if (!mods || mods.size === 0) {
+    const packageRoot = findNearestPackageRoot(file);
+    if (packageRoot && getLinkedPackageRoots(config.root).some(
+      (r) => packageRoot === r || packageRoot.startsWith(r + path7.sep)
+    )) {
+      const under = moduleGraph.getModulesWithFileUnder(packageRoot);
+      if (under.size > 0) mods = under;
+    }
+  }
   if (!mods || mods.size === 0) {
     return null;
   }
@@ -2832,7 +3011,7 @@ async function handleFileChange(file, server, environmentName = "client", timest
       file,
       timestamp,
       modules: [mod],
-      read: () => fs6.readFileSync(file, "utf-8"),
+      read: () => fs7.readFileSync(file, "utf-8"),
       server,
       environment
     };
@@ -2896,16 +3075,17 @@ async function handleFileChange(file, server, environmentName = "client", timest
 var init_hmr = __esm({
   "src/server/hmr.ts"() {
     "use strict";
+    init_fs_allow();
   }
 });
 
 // src/plugins/resolve.ts
-import path7 from "path";
-import fs7 from "fs";
+import path8 from "path";
+import fs8 from "fs";
 import { createRequire as createRequire2 } from "module";
 function resolvePlugin(config) {
   const { alias, extensions } = config.resolve;
-  const require2 = createRequire2(path7.resolve(config.root, "package.json"));
+  const require2 = createRequire2(path8.resolve(config.root, "package.json"));
   const aliasEntries = Object.entries(alias).sort(
     ([a], [b]) => b.length - a.length
   );
@@ -2913,10 +3093,10 @@ function resolvePlugin(config) {
   if (config.framework === "vue") {
     try {
       const vuePkgJson = require2.resolve("vue/package.json", { paths: [config.root] });
-      const vueDir = path7.dirname(vuePkgJson);
-      const mod = JSON.parse(fs7.readFileSync(vuePkgJson, "utf-8")).module;
-      const entry = path7.join(vueDir, mod ?? "dist/vue.runtime.esm-bundler.js");
-      if (fs7.existsSync(entry)) vueRuntimeEntry = entry;
+      const vueDir = path8.dirname(vuePkgJson);
+      const mod = JSON.parse(fs8.readFileSync(vuePkgJson, "utf-8")).module;
+      const entry = path8.join(vueDir, mod ?? "dist/vue.runtime.esm-bundler.js");
+      if (fs8.existsSync(entry)) vueRuntimeEntry = entry;
     } catch {
     }
   }
@@ -2928,24 +3108,24 @@ function resolvePlugin(config) {
         if (source === key || source.startsWith(key + "/")) {
           const aliasBase = resolveAliasTarget2(value, config.root);
           const sub = source.slice(key.length).replace(/^\//, "");
-          const target = sub ? path7.join(aliasBase, sub) : aliasBase;
+          const target = sub ? path8.join(aliasBase, sub) : aliasBase;
           const resolved = tryResolveFile(target, extensions);
           if (resolved) return resolved;
           break;
         }
       }
       if (source.startsWith("/") && !source.startsWith("//")) {
-        const rootRelative = path7.join(config.root, source.slice(1));
+        const rootRelative = path8.join(config.root, source.slice(1));
         const resolved = tryResolveFile(rootRelative, extensions);
         if (resolved) return resolved;
       }
-      if (path7.isAbsolute(source) && fs7.existsSync(source)) {
+      if (path8.isAbsolute(source) && fs8.existsSync(source)) {
         const resolved = tryResolveFile(source, extensions);
         if (resolved) return resolved;
       }
       if (source.startsWith(".")) {
-        const dir = importer ? path7.dirname(importer) : config.root;
-        const absolute = path7.resolve(dir, source);
+        const dir = importer ? path8.dirname(importer) : config.root;
+        const absolute = path8.resolve(dir, source);
         const resolved = tryResolveFile(absolute, extensions);
         if (resolved) return resolved;
       }
@@ -2954,7 +3134,7 @@ function resolvePlugin(config) {
         if (config.command === "build") return null;
         try {
           const resolved = require2.resolve(source, {
-            paths: [importer ? path7.dirname(importer) : config.root]
+            paths: [importer ? path8.dirname(importer) : config.root]
           });
           return resolved;
         } catch {
@@ -2965,9 +3145,9 @@ function resolvePlugin(config) {
     },
     load(id) {
       if (id.startsWith("\0")) return null;
-      if (!fs7.existsSync(id)) return null;
+      if (!fs8.existsSync(id)) return null;
       if (id.endsWith(".json")) {
-        const content = fs7.readFileSync(id, "utf-8");
+        const content = fs8.readFileSync(id, "utf-8");
         return `export default ${content}`;
       }
       return null;
@@ -2975,24 +3155,24 @@ function resolvePlugin(config) {
   };
 }
 function resolveAliasTarget2(value, root) {
-  if (path7.isAbsolute(value) && fs7.existsSync(value)) return value;
-  if (value.startsWith("/")) return path7.join(root, value.slice(1));
-  return path7.resolve(root, value);
+  if (path8.isAbsolute(value) && fs8.existsSync(value)) return value;
+  if (value.startsWith("/")) return path8.join(root, value.slice(1));
+  return path8.resolve(root, value);
 }
 function tryResolveFile(file, extensions) {
-  if (fs7.existsSync(file) && fs7.statSync(file).isFile()) {
+  if (fs8.existsSync(file) && fs8.statSync(file).isFile()) {
     return file;
   }
   for (const ext of extensions) {
     const withExt = file + ext;
-    if (fs7.existsSync(withExt) && fs7.statSync(withExt).isFile()) {
+    if (fs8.existsSync(withExt) && fs8.statSync(withExt).isFile()) {
       return withExt;
     }
   }
-  if (fs7.existsSync(file) && fs7.statSync(file).isDirectory()) {
+  if (fs8.existsSync(file) && fs8.statSync(file).isDirectory()) {
     for (const ext of extensions) {
-      const indexFile = path7.join(file, "index" + ext);
-      if (fs7.existsSync(indexFile)) {
+      const indexFile = path8.join(file, "index" + ext);
+      if (fs8.existsSync(indexFile)) {
         return indexFile;
       }
     }
@@ -3040,27 +3220,27 @@ var require_process = __commonJS({
 var require_filesystem = __commonJS({
   "node_modules/detect-libc/lib/filesystem.js"(exports, module) {
     "use strict";
-    var fs13 = __require("fs");
+    var fs14 = __require("fs");
     var LDD_PATH = "/usr/bin/ldd";
     var SELF_PATH = "/proc/self/exe";
     var MAX_LENGTH = 2048;
-    var readFileSync = (path18) => {
-      const fd = fs13.openSync(path18, "r");
+    var readFileSync = (path19) => {
+      const fd = fs14.openSync(path19, "r");
       const buffer = Buffer.alloc(MAX_LENGTH);
-      const bytesRead = fs13.readSync(fd, buffer, 0, MAX_LENGTH, 0);
-      fs13.close(fd, () => {
+      const bytesRead = fs14.readSync(fd, buffer, 0, MAX_LENGTH, 0);
+      fs14.close(fd, () => {
       });
       return buffer.subarray(0, bytesRead);
     };
-    var readFile = (path18) => new Promise((resolve, reject) => {
-      fs13.open(path18, "r", (err, fd) => {
+    var readFile = (path19) => new Promise((resolve, reject) => {
+      fs14.open(path19, "r", (err, fd) => {
         if (err) {
           reject(err);
         } else {
           const buffer = Buffer.alloc(MAX_LENGTH);
-          fs13.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
+          fs14.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
             resolve(buffer.subarray(0, bytesRead));
-            fs13.close(fd, () => {
+            fs14.close(fd, () => {
             });
           });
         }
@@ -3172,11 +3352,11 @@ var require_detect_libc = __commonJS({
       }
       return null;
     };
-    var familyFromInterpreterPath = (path18) => {
-      if (path18) {
-        if (path18.includes("/ld-musl-")) {
+    var familyFromInterpreterPath = (path19) => {
+      if (path19) {
+        if (path19.includes("/ld-musl-")) {
           return MUSL;
-        } else if (path18.includes("/ld-linux-")) {
+        } else if (path19.includes("/ld-linux-")) {
           return GLIBC;
         }
       }
@@ -3223,8 +3403,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = await readFile(SELF_PATH);
-        const path18 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path18);
+        const path19 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -3236,8 +3416,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = readFileSync(SELF_PATH);
-        const path18 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path18);
+        const path19 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -3956,7 +4136,7 @@ var init_css_engine = __esm({
 });
 
 // src/plugins/tailwind.ts
-import path8 from "path";
+import path9 from "path";
 import { createRequire as createRequire3 } from "module";
 import { pathToFileURL as pathToFileURL3 } from "url";
 function hasTailwindDirectives(css) {
@@ -3966,7 +4146,7 @@ function hasTailwindDirectives(css) {
 }
 async function loadTailwind(projectRoot) {
   if (cached && cachedRoot === projectRoot) return cached;
-  const req = createRequire3(path8.join(projectRoot, "package.json"));
+  const req = createRequire3(path9.join(projectRoot, "package.json"));
   let nodePath;
   let oxidePath;
   try {
@@ -3987,7 +4167,7 @@ async function compileTailwind(css, fromFile, projectRoot) {
   const { node, oxide } = await loadTailwind(projectRoot);
   const dependencies = [];
   const compiler2 = await node.compile(css, {
-    base: path8.dirname(fromFile),
+    base: path9.dirname(fromFile),
     from: fromFile,
     onDependency: (p) => dependencies.push(p)
   });
@@ -4009,7 +4189,7 @@ var init_tailwind = __esm({
 });
 
 // src/plugins/css.ts
-import path9 from "path";
+import path10 from "path";
 import { SourceMapGenerator } from "source-map-js";
 function cssPlugin(config, engine, consumer = "client") {
   return {
@@ -4133,8 +4313,8 @@ function rewriteCssUrls(css, from, root) {
     if (url.startsWith("/") || url.startsWith("data:") || url.startsWith("http")) {
       return match;
     }
-    const resolved = path9.resolve(path9.dirname(from), url);
-    const relative = "/" + path9.relative(root, resolved).replace(/\\/g, "/");
+    const resolved = path10.resolve(path10.dirname(from), url);
+    const relative = "/" + path10.relative(root, resolved).replace(/\\/g, "/");
     return `url(${relative})`;
   });
 }
@@ -4264,8 +4444,8 @@ function vuePlugin(config, environmentName = "client") {
       let cached2 = descriptorCache.get(filePath);
       if (!cached2) {
         try {
-          const fs13 = await import("fs");
-          const rawSource = fs13.readFileSync(filePath, "utf-8");
+          const fs14 = await import("fs");
+          const rawSource = fs14.readFileSync(filePath, "utf-8");
           const transformedSfc = await applySourceTransform(
             vueOptions.transformSfc,
             rawSource,
@@ -4693,8 +4873,8 @@ __export(runnable_environment_exports, {
   NastiModuleRunner: () => NastiModuleRunner,
   createModuleRunner: () => createModuleRunner
 });
-import path10 from "path";
-import fs8 from "fs";
+import path11 from "path";
+import fs9 from "fs";
 import { builtinModules, createRequire as createRequire4 } from "module";
 import { pathToFileURL as pathToFileURL4 } from "url";
 function createModuleRunner(environment) {
@@ -4728,7 +4908,7 @@ var init_runnable_environment = __esm({
           this.config.mode,
           ssrDefineOverrides(environment.consumer)
         );
-        this.require = createRequire4(path10.join(this.config.root, "package.json"));
+        this.require = createRequire4(path11.join(this.config.root, "package.json"));
         const handlers = {
           fetchModule: async (id, importer) => this.fetchModule(id, importer),
           getBuiltins: () => [/^node:/, ...builtinModules]
@@ -4752,9 +4932,9 @@ var init_runnable_environment = __esm({
         this.cache.clear();
       }
       resolveToId(rawUrl) {
-        if (path10.isAbsolute(rawUrl) && fs8.existsSync(rawUrl.split("?")[0])) return rawUrl;
+        if (path11.isAbsolute(rawUrl) && fs9.existsSync(rawUrl.split("?")[0])) return rawUrl;
         const clean = rawUrl.replace(/^\//, "");
-        return path10.resolve(this.config.root, clean);
+        return path11.resolve(this.config.root, clean);
       }
       /**
        * fetchModule（invoke 契约方法）：环境管线产出 runner 可执行代码。
@@ -4763,14 +4943,14 @@ var init_runnable_environment = __esm({
        */
       async fetchModule(id, importer) {
         if (NODE_BUILTINS.has(id)) return { externalize: id };
-        if (!id.startsWith(".") && !path10.isAbsolute(id) && !id.startsWith("\0")) {
+        if (!id.startsWith(".") && !path11.isAbsolute(id) && !id.startsWith("\0")) {
           return { externalize: id };
         }
         const container = this.environment.pluginContainer;
         let resolvedId = id;
         if (id.startsWith(".") && importer) {
           const resolved = await container.resolveId(id, importer);
-          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path10.resolve(path10.dirname(importer.split("?")[0]), id);
+          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path11.resolve(path11.dirname(importer.split("?")[0]), id);
         }
         resolvedId = this.completeExtension(resolvedId);
         const cleanId = resolvedId.split("?")[0];
@@ -4778,8 +4958,8 @@ var init_runnable_environment = __esm({
         const loaded = await container.load(resolvedId);
         if (loaded != null) {
           code = typeof loaded === "string" ? loaded : loaded.code;
-        } else if (fs8.existsSync(cleanId)) {
-          code = fs8.readFileSync(cleanId, "utf-8");
+        } else if (fs9.existsSync(cleanId)) {
+          code = fs9.readFileSync(cleanId, "utf-8");
         } else {
           throw new Error(`[nasti:ssr] cannot load module: ${resolvedId}`);
         }
@@ -4813,19 +4993,19 @@ var init_runnable_environment = __esm({
       completeExtension(id) {
         const clean = id.split("?")[0];
         const query = id.includes("?") ? id.slice(id.indexOf("?")) : "";
-        if (fs8.existsSync(clean) && fs8.statSync(clean).isFile()) return id;
+        if (fs9.existsSync(clean) && fs9.statSync(clean).isFile()) return id;
         const jsMatch = clean.match(/^(.*)\.([mc]?)jsx?$/);
         if (jsMatch) {
           for (const tsExt of [`.${jsMatch[2]}ts`, `.${jsMatch[2]}tsx`]) {
-            if (fs8.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
+            if (fs9.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
           }
         }
         for (const ext of this.config.resolve.extensions) {
-          if (fs8.existsSync(clean + ext)) return clean + ext + query;
+          if (fs9.existsSync(clean + ext)) return clean + ext + query;
         }
         for (const ext of this.config.resolve.extensions) {
-          const indexPath = path10.join(clean, `index${ext}`);
-          if (fs8.existsSync(indexPath)) return indexPath;
+          const indexPath = path11.join(clean, `index${ext}`);
+          if (fs9.existsSync(indexPath)) return indexPath;
         }
         return id;
       }
@@ -4852,10 +5032,10 @@ var init_runnable_environment = __esm({
           return;
         }
         const ssrImport = async (dep) => {
-          if (NODE_BUILTINS.has(dep) || !dep.startsWith(".") && !path10.isAbsolute(dep) && !dep.startsWith("\0")) {
+          if (NODE_BUILTINS.has(dep) || !dep.startsWith(".") && !path11.isAbsolute(dep) && !dep.startsWith("\0")) {
             return this.importExternal(dep);
           }
-          const depId = dep.startsWith(".") ? this.completeExtension(path10.resolve(path10.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
+          const depId = dep.startsWith(".") ? this.completeExtension(path11.resolve(path11.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
           return this.instantiate(depId);
         };
         const ssrExportAll = (sourceModule) => {
@@ -4887,7 +5067,7 @@ var init_runnable_environment = __esm({
       }
       async importExternal(spec) {
         try {
-          return await (spec.startsWith("node:") || !path10.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
+          return await (spec.startsWith("node:") || !path11.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
         } catch (err) {
           throw new Error(`[nasti:ssr] failed to import external "${spec}": ${err.message}`);
         }
@@ -4909,7 +5089,7 @@ var init_runnable_environment = __esm({
 });
 
 // src/build/reporter.ts
-import path11 from "path";
+import path12 from "path";
 import { gzipSync } from "zlib";
 import pc5 from "picocolors";
 async function tryNativeReporterPlugin(config, logger) {
@@ -4950,7 +5130,7 @@ function reportBuildOutput(output, config, logger) {
     if (compressed && content != null) {
       gzip = gzipSync(typeof content === "string" ? Buffer.from(content) : content).byteLength;
     }
-    const ext = path11.extname(file.fileName);
+    const ext = path12.extname(file.fileName);
     const group = file.type === "chunk" ? "js" : ext === ".css" ? "css" : "assets";
     entries.push({ name: file.fileName, size, gzip, group });
   }
@@ -4998,12 +5178,12 @@ var init_reporter = __esm({
 });
 
 // src/core/build-app-context.ts
-import fs9 from "fs";
-import path12 from "path";
+import fs10 from "fs";
+import path13 from "path";
 function createBuildAppContext(config, results) {
   const output = [];
   const emitted = /* @__PURE__ */ new Set();
-  const outDir = path12.resolve(config.root, config.build.outDir);
+  const outDir = path13.resolve(config.root, config.build.outDir);
   let environmentArtifacts;
   return {
     config,
@@ -5059,14 +5239,14 @@ function createBuildAppContext(config, results) {
       if (environmentArtifacts.has(collisionKey)) {
         throw new Error(`[nasti] app artifact conflicts with environment output: ${fileName}`);
       }
-      const target = path12.resolve(outDir, ...fileName.split("/"));
-      const relative = path12.relative(outDir, target);
-      if (relative.startsWith("..") || path12.isAbsolute(relative)) {
+      const target = path13.resolve(outDir, ...fileName.split("/"));
+      const relative = path13.relative(outDir, target);
+      if (relative.startsWith("..") || path13.isAbsolute(relative)) {
         throw new Error(`[nasti] app artifact must stay inside build.outDir: ${file.fileName}`);
       }
       assertNoSymlinkComponents(outDir, fileName);
-      fs9.mkdirSync(path12.dirname(target), { recursive: true });
-      fs9.writeFileSync(target, file.source);
+      fs10.mkdirSync(path13.dirname(target), { recursive: true });
+      fs10.writeFileSync(target, file.source);
       const artifact = {
         ...file,
         fileName,
@@ -5082,10 +5262,10 @@ function joinPublicPath(base, fileName) {
   return `${base.endsWith("/") ? base : `${base}/`}${fileName.replace(/^\//, "")}`;
 }
 function normalizeEnvironmentFileName(fileName) {
-  return path12.posix.normalize(fileName.replace(/\\/g, "/").replace(/^\.\//, ""));
+  return path13.posix.normalize(fileName.replace(/\\/g, "/").replace(/^\.\//, ""));
 }
 function isInvalidEnvironmentFileName(fileName) {
-  return !fileName || fileName === "." || fileName === ".." || fileName.startsWith("../") || path12.posix.isAbsolute(fileName) || /^[A-Za-z]:\//.test(fileName);
+  return !fileName || fileName === "." || fileName === ".." || fileName.startsWith("../") || path13.posix.isAbsolute(fileName) || /^[A-Za-z]:\//.test(fileName);
 }
 function normalizeAppFileName(fileName) {
   const normalized = normalizeEnvironmentFileName(fileName);
@@ -5102,14 +5282,14 @@ function collectEnvironmentArtifacts(config, results, appOutDir) {
   for (const [environmentName, result] of Object.entries(results)) {
     const environment = config.environments[environmentName];
     if (!environment) continue;
-    const environmentOutDir = path12.resolve(config.root, environment.build.outDir);
+    const environmentOutDir = path13.resolve(config.root, environment.build.outDir);
     for (const artifact of result.output) {
-      const artifactPath = path12.resolve(
+      const artifactPath = path13.resolve(
         environmentOutDir,
         ...normalizeEnvironmentFileName(artifact.fileName).split("/")
       );
-      const relative = path12.relative(appOutDir, artifactPath);
-      if (!relative.startsWith("..") && !path12.isAbsolute(relative)) {
+      const relative = path13.relative(appOutDir, artifactPath);
+      if (!relative.startsWith("..") && !path13.isAbsolute(relative)) {
         occupied.add(artifactCollisionKey(relative));
       }
     }
@@ -5119,10 +5299,10 @@ function collectEnvironmentArtifacts(config, results, appOutDir) {
 function assertNoSymlinkComponents(outDir, fileName) {
   let current = outDir;
   for (const segment of fileName.split("/")) {
-    current = path12.join(current, segment);
+    current = path13.join(current, segment);
     let stats;
     try {
-      stats = fs9.lstatSync(current);
+      stats = fs10.lstatSync(current);
     } catch (error) {
       if (error.code === "ENOENT") continue;
       throw error;
@@ -5155,8 +5335,8 @@ __export(build_exports, {
   resolveClientEntries: () => resolveClientEntries,
   toRolldownPlugins: () => toRolldownPlugins
 });
-import path13 from "path";
-import fs10 from "fs";
+import path14 from "path";
+import fs11 from "fs";
 import { builtinModules as builtinModules2 } from "module";
 import { rolldown } from "rolldown";
 import pc6 from "picocolors";
@@ -5164,7 +5344,7 @@ function getRolldownOptions(environment, entryPoints, rolldownPlugins) {
   const config = environment.config;
   const envOptions = environment.options;
   const isServer = environment.consumer === "server";
-  const outDir = path13.resolve(config.root, envOptions.build.outDir);
+  const outDir = path14.resolve(config.root, envOptions.build.outDir);
   const assetsDir = envOptions.build.assetsDir;
   const {
     output: userOutput,
@@ -5204,7 +5384,7 @@ function getRolldownOptions(environment, entryPoints, rolldownPlugins) {
       // 相对/绝对/虚拟模块照常打包。需要内联依赖时经 rolldownOptions.external 覆盖。
       external: restInputOptions.external ?? ((id) => {
         if (NODE_BUILTINS2.has(id)) return true;
-        return !id.startsWith(".") && !path13.isAbsolute(id) && !id.startsWith("\0");
+        return !id.startsWith(".") && !path14.isAbsolute(id) && !id.startsWith("\0");
       })
     } : {}
   };
@@ -5361,11 +5541,11 @@ function prepareBuildOutputDirectories(config, buildableNames) {
   const protectedPaths = /* @__PURE__ */ new Set();
   const clientIsBuilt = buildableNames.includes("client");
   if (!clientIsBuilt && config.build.emptyOutDir) {
-    directories.add(path13.resolve(config.root, config.build.outDir));
+    directories.add(path14.resolve(config.root, config.build.outDir));
   }
   for (const name of buildableNames) {
     const environment = config.environments[name];
-    const outDir = path13.resolve(config.root, environment.build.outDir);
+    const outDir = path14.resolve(config.root, environment.build.outDir);
     if (!environment.build.emptyOutDir) {
       protectedPaths.add(outDir);
       continue;
@@ -5373,8 +5553,8 @@ function prepareBuildOutputDirectories(config, buildableNames) {
     if (!environment.driver) directories.add(outDir);
   }
   const containsPath = (parent, child) => {
-    const relative = path13.relative(parent, child);
-    return relative === "" || !relative.startsWith("..") && !path13.isAbsolute(relative);
+    const relative = path14.relative(parent, child);
+    return relative === "" || !relative.startsWith("..") && !path14.isAbsolute(relative);
   };
   const roots = [...directories].filter(
     (directory) => ![...protectedPaths].some((protectedPath) => containsPath(directory, protectedPath))
@@ -5382,7 +5562,7 @@ function prepareBuildOutputDirectories(config, buildableNames) {
     (directory, index2, all) => !all.slice(0, index2).some((parent) => containsPath(parent, directory))
   );
   for (const directory of roots) {
-    if (fs10.existsSync(directory)) fs10.rmSync(directory, { recursive: true, force: true });
+    if (fs11.existsSync(directory)) fs11.rmSync(directory, { recursive: true, force: true });
   }
 }
 function assertDriverBuildResult(environment, result) {
@@ -5401,7 +5581,7 @@ function resolveClientEntries(config, html) {
   if (configuredEntries.length > 0) return configuredEntries;
   const entryPoints = [];
   const htmlFile = config.environments.client?.html;
-  const htmlDir = htmlFile ? path13.dirname(htmlFile) : config.root;
+  const htmlDir = htmlFile ? path14.dirname(htmlFile) : config.root;
   if (html) {
     const scriptMatches = html.matchAll(/<script[^>]+src=["']([^"']+)["'][^>]*>/gi);
     for (const match of scriptMatches) {
@@ -5409,7 +5589,7 @@ function resolveClientEntries(config, html) {
       if (src && !src.startsWith("http")) {
         const cleanSrc = src.split(/[?#]/, 1)[0];
         entryPoints.push(
-          cleanSrc.startsWith("/") ? path13.resolve(config.root, cleanSrc.replace(/^\//, "")) : path13.resolve(htmlDir, cleanSrc)
+          cleanSrc.startsWith("/") ? path14.resolve(config.root, cleanSrc.replace(/^\//, "")) : path14.resolve(htmlDir, cleanSrc)
         );
       }
     }
@@ -5417,8 +5597,8 @@ function resolveClientEntries(config, html) {
   if (entryPoints.length === 0) {
     const fallbackEntries = ["src/main.ts", "src/main.tsx", "src/main.js", "src/index.ts", "src/index.tsx", "src/index.js"];
     for (const entry of fallbackEntries) {
-      const fullPath = path13.resolve(config.root, entry);
-      if (fs10.existsSync(fullPath)) {
+      const fullPath = path14.resolve(config.root, entry);
+      if (fs11.existsSync(fullPath)) {
         entryPoints.push(fullPath);
         break;
       }
@@ -5447,7 +5627,7 @@ async function build(inlineConfig = {}) {
   const startTime = performance.now();
   logger.info(
     pc6.cyan(`
-nasti v${"2.4.3"} `) + pc6.green(`building for ${config.mode}...`)
+nasti v${"2.4.4"} `) + pc6.green(`building for ${config.mode}...`)
   );
   debug6?.(`root: ${config.root}`);
   const buildableNames = Object.keys(config.environments).filter((name) => {
@@ -5522,7 +5702,7 @@ nasti v${"2.4.3"} `) + pc6.green(`building for ${config.mode}...`)
 }
 async function buildClientEnvironment(config) {
   const logger = config.logger;
-  const outDir = path13.resolve(config.root, config.build.outDir);
+  const outDir = path14.resolve(config.root, config.build.outDir);
   const cssEngine = createCssEngine();
   const pluginList = resolvePluginList(config, config.plugins, {
     cssEngine,
@@ -5545,8 +5725,8 @@ async function buildClientEnvironment(config) {
       assertDriverBuildResult(clientEnv, result);
       return { environment: clientEnv, result: finalizeEnvironmentResult(clientEnv, result) };
     }
-    fs10.mkdirSync(outDir, { recursive: true });
-    const htmlFile = config.environments.client.html ?? path13.resolve(config.root, "index.html");
+    fs11.mkdirSync(outDir, { recursive: true });
+    const htmlFile = config.environments.client.html ?? path14.resolve(config.root, "index.html");
     const html = await readHtmlFile(config.root, htmlFile);
     const entryPoints = resolveClientEntries(config, html);
     if (entryPoints.length === 0) {
@@ -5596,7 +5776,7 @@ async function buildClientEnvironment(config) {
           );
         }
       }
-      fs10.writeFileSync(path13.resolve(outDir, "index.html"), processedHtml);
+      fs11.writeFileSync(path14.resolve(outDir, "index.html"), processedHtml);
     }
     if (!nativeReporter && config.logLevel !== "silent") {
       reportBuildOutput(output, config, logger);
@@ -5650,7 +5830,7 @@ async function buildServerEnvironment(config, name) {
     }
   }
   for (const entry of envOptions.entry) {
-    if (!fs10.existsSync(entry)) {
+    if (!fs11.existsSync(entry)) {
       await environment.close();
       throw new Error(`[nasti] environment "${name}" entry not found: ${entry}`);
     }
@@ -5664,13 +5844,13 @@ async function buildServerEnvironment(config, name) {
     envOptions.entry,
     rolldownPlugins
   );
-  fs10.mkdirSync(outDir, { recursive: true });
+  fs11.mkdirSync(outDir, { recursive: true });
   const bundle2 = await rolldown(inputOptions);
   const { output } = await bundle2.write(outputOptions);
   await bundle2.close();
   if (cssEngine) environment.setBuildMetadata({ css: getCssMetadata(cssEngine) });
   logger.info(
-    pc6.dim(`  [${name}] `) + output.map((o) => path13.join(envOptions.build.outDir, o.fileName)).join(pc6.dim(", "))
+    pc6.dim(`  [${name}] `) + output.map((o) => path14.join(envOptions.build.outDir, o.fileName)).join(pc6.dim(", "))
   );
   return {
     environment,
@@ -5702,9 +5882,9 @@ function escapeRegExp(string) {
   return string.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function replaceEntryScript(html, facadeModuleId, fileName, config, htmlFile, urlPrefix) {
-  const rootRelative = path13.relative(config.root, facadeModuleId).split(path13.sep).join("/");
-  const resolvedHtmlFile = path13.resolve(config.root, htmlFile);
-  const htmlRelative = path13.relative(path13.dirname(resolvedHtmlFile), facadeModuleId).split(path13.sep).join("/");
+  const rootRelative = path14.relative(config.root, facadeModuleId).split(path14.sep).join("/");
+  const resolvedHtmlFile = path14.resolve(config.root, htmlFile);
+  const htmlRelative = path14.relative(path14.dirname(resolvedHtmlFile), facadeModuleId).split(path14.sep).join("/");
   const candidates = /* @__PURE__ */ new Set([
     rootRelative,
     `/${rootRelative}`,
@@ -5745,7 +5925,7 @@ var dev_engine_exports = {};
 __export(dev_engine_exports, {
   createBundledDevServer: () => createBundledDevServer
 });
-import path14 from "path";
+import path15 from "path";
 import crypto3 from "crypto";
 import { WebSocketServer as WsServer2 } from "ws";
 import pc7 from "picocolors";
@@ -5830,7 +6010,7 @@ async function createBundledDevServer(opts) {
       }
       const url = `/${patchPath}`;
       logger.info(
-        pc7.green("hmr update ") + pc7.dim(changedFiles.map((f) => path14.relative(config.root, f)).join(", ")),
+        pc7.green("hmr update ") + pc7.dim(changedFiles.map((f) => path15.relative(config.root, f)).join(", ")),
         { timestamp: true }
       );
       sendTo(clientId, { type: "hmr:update", path: url, url });
@@ -5985,7 +6165,7 @@ async function createBundledDevServer(opts) {
           return;
         }
         res.setHeader("ETag", hit.etag);
-        res.setHeader("Content-Type", MIME_TYPES[path14.extname(fileName)] ?? "application/octet-stream");
+        res.setHeader("Content-Type", MIME_TYPES[path15.extname(fileName)] ?? "application/octet-stream");
         res.setHeader("Cache-Control", "no-cache");
         res.once("finish", () => {
           void engine.notifyPayloadDelivered(fileName).catch(
@@ -6026,7 +6206,7 @@ function stripCatchAllLoad(plugins) {
   );
 }
 function createReactRefreshRuntimePlugin(entryPoints) {
-  const entryIds = new Set(entryPoints.map((p) => path14.resolve(p)));
+  const entryIds = new Set(entryPoints.map((p) => path15.resolve(p)));
   return {
     name: "nasti:bundled-react-refresh",
     resolveId(source) {
@@ -6044,7 +6224,7 @@ function createReactRefreshRuntimePlugin(entryPoints) {
       return null;
     },
     transform(code, id) {
-      if (!entryIds.has(path14.resolve(id.split("?")[0]))) return null;
+      if (!entryIds.has(path15.resolve(id.split("?")[0]))) return null;
       return { code: `import ${JSON.stringify(PREAMBLE_SPEC)};
 ${code}`, map: null };
     }
@@ -6215,7 +6395,7 @@ __export(server_exports, {
   createServer: () => createServer
 });
 import http from "http";
-import path15 from "path";
+import path16 from "path";
 import os from "os";
 import connect from "connect";
 import sirv from "sirv";
@@ -6308,20 +6488,39 @@ async function createServer(inlineConfig = {}) {
     app.use(bundledServer.middleware);
   }
   const ignoredSegments = /* @__PURE__ */ new Set(["node_modules", ".git", ".nasti"]);
-  const outDirAbs = path15.resolve(config.root, config.build.outDir);
-  const watcher = watch(config.root, {
+  const outDirAbs = path16.resolve(config.root, config.build.outDir);
+  const linkedPackageRoots = getLinkedPackageRoots(config.root).filter(
+    (r) => r !== config.root && !isUnderRoot(config.root, r)
+  );
+  const watchTargets = [config.root, ...linkedPackageRoots];
+  const watcher = watch(watchTargets, {
     ignored: (filePath) => {
-      if (filePath === config.root) return false;
-      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path15.sep)) return true;
-      const rel = path15.relative(config.root, filePath);
-      if (!rel || rel.startsWith("..") || path15.isAbsolute(rel)) return false;
-      for (const seg of rel.split(path15.sep)) {
-        if (ignoredSegments.has(seg)) return true;
+      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path16.sep)) return true;
+      for (const watchRoot of watchTargets) {
+        if (filePath === watchRoot) return false;
+        const rel = path16.relative(watchRoot, filePath);
+        if (!rel || rel.startsWith("..") || path16.isAbsolute(rel)) continue;
+        for (const seg of rel.split(path16.sep)) {
+          if (ignoredSegments.has(seg)) return true;
+        }
+        return false;
       }
       return false;
     },
     ignoreInitial: true
   });
+  await new Promise((resolve, reject) => {
+    const onReady = () => {
+      watcher.off("error", onError);
+      resolve();
+    };
+    const onError = (err) => {
+      watcher.off("ready", onReady);
+      reject(err);
+    };
+    watcher.once("ready", onReady);
+    watcher.once("error", onError);
+  });
   let server;
   const environmentServices = {};
   let environmentDriversStarted = false;
@@ -6433,16 +6632,25 @@ async function createServer(inlineConfig = {}) {
     });
   };
   watcher.on("change", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "change");
   });
   watcher.on("add", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "add");
   });
   watcher.on("unlink", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     notifyEnvironmentDrivers(file, "unlink");
   });
@@ -6472,7 +6680,7 @@ async function createServer(inlineConfig = {}) {
           const readyIn = Math.ceil(performance.now() - startTime);
           logger.info(
             `
-  ${pc8.cyan(pc8.bold("NASTI"))} ${pc8.cyan(`v${"2.4.3"}`)}  ${pc8.dim("ready in")} ${pc8.bold(readyIn)} ${pc8.dim("ms")}
+  ${pc8.cyan(pc8.bold("NASTI"))} ${pc8.cyan(`v${"2.4.4"}`)}  ${pc8.dim("ready in")} ${pc8.bold(readyIn)} ${pc8.dim("ms")}
 `
           );
           printServerUrls(
@@ -6569,7 +6777,7 @@ async function createServer(inlineConfig = {}) {
     throw error;
   }
   app.use(transformMiddleware(transformContexts.get("client")));
-  const publicDir = path15.resolve(config.root, "public");
+  const publicDir = path16.resolve(config.root, "public");
   app.use(sirv(publicDir, { dev: true, etag: true }));
   app.use(sirv(config.root, { dev: true, etag: true }));
   const postMiddlewares = [];
@@ -6608,6 +6816,7 @@ var init_server = __esm({
     init_builtins();
     init_plugin_api();
     init_env();
+    init_fs_allow();
   }
 });
 
@@ -6658,24 +6867,25 @@ __export(electron_exports, {
   detectInstalledElectron: () => detectInstalledElectron,
   normalizePreload: () => normalizePreload
 });
-import path16 from "path";
-import fs11 from "fs";
+import path17 from "path";
+import fs12 from "fs";
+import { createRequire as createRequire5 } from "module";
 import { rolldown as rolldown2 } from "rolldown";
 import pc9 from "picocolors";
 async function buildElectron(inlineConfig = {}) {
   const config = await resolveConfig({ ...inlineConfig, target: "electron" }, "build");
   const startTime = performance.now();
   assertElectronVersion(config);
-  console.log(pc9.cyan("\n\u26A1 nasti build (electron)") + pc9.dim(` v${"2.4.3"}`));
+  console.log(pc9.cyan("\n\u26A1 nasti build (electron)") + pc9.dim(` v${"2.4.4"}`));
   console.log(pc9.dim(`  root: ${config.root}`));
   console.log(pc9.dim(`  mode: ${config.mode}`));
   console.log(pc9.dim(`  target: electron (\u2265 ${config.electron.minVersion})`));
-  const outDir = path16.resolve(config.root, config.build.outDir);
-  if (config.build.emptyOutDir && fs11.existsSync(outDir)) {
-    fs11.rmSync(outDir, { recursive: true, force: true });
+  const outDir = path17.resolve(config.root, config.build.outDir);
+  if (config.build.emptyOutDir && fs12.existsSync(outDir)) {
+    fs12.rmSync(outDir, { recursive: true, force: true });
   }
-  fs11.mkdirSync(outDir, { recursive: true });
-  const rendererOutDir = path16.join(outDir, "renderer");
+  fs12.mkdirSync(outDir, { recursive: true });
+  const rendererOutDir = path17.join(outDir, "renderer");
   const { build: build2 } = await Promise.resolve().then(() => (init_build(), build_exports));
   await build2(createElectronRendererConfig(config, inlineConfig, {
     build: {
@@ -6684,8 +6894,8 @@ async function buildElectron(inlineConfig = {}) {
       emptyOutDir: false
     }
   }));
-  const mainEntry = path16.resolve(config.root, config.electron.main);
-  if (!fs11.existsSync(mainEntry)) {
+  const mainEntry = path17.resolve(config.root, config.electron.main);
+  if (!fs12.existsSync(mainEntry)) {
     throw new Error(
       `Electron main entry not found: ${config.electron.main}
 \u5728 nasti.config.ts \u7684 electron.main \u6307\u5B9A\u4E3B\u8FDB\u7A0B\u5165\u53E3\u6587\u4EF6\u3002`
@@ -6699,11 +6909,11 @@ async function buildElectron(inlineConfig = {}) {
   const preloadEntries = normalizePreload(config.electron.preload, config.root);
   const preloadFiles = [];
   for (const entry of preloadEntries) {
-    if (!fs11.existsSync(entry)) {
+    if (!fs12.existsSync(entry)) {
       console.warn(pc9.yellow(`  \u26A0 preload entry not found, skipped: ${entry}`));
       continue;
     }
-    const base = path16.basename(entry).replace(/\.[^.]+$/, "");
+    const base = path17.basename(entry).replace(/\.[^.]+$/, "");
     const out = outFileName(outDir, base, config.electron.preloadFormat);
     await bundleNode(config, entry, {
       outFile: out,
@@ -6715,10 +6925,10 @@ async function buildElectron(inlineConfig = {}) {
   const elapsed = ((performance.now() - startTime) / 1e3).toFixed(2);
   console.log(pc9.green(`
 \u2713 Electron build complete in ${elapsed}s`));
-  console.log(pc9.dim(`  renderer: ${path16.relative(config.root, rendererOutDir)}/`));
-  console.log(pc9.dim(`  main:     ${path16.relative(config.root, mainFile)}`));
+  console.log(pc9.dim(`  renderer: ${path17.relative(config.root, rendererOutDir)}/`));
+  console.log(pc9.dim(`  main:     ${path17.relative(config.root, mainFile)}`));
   for (const pf of preloadFiles) {
-    console.log(pc9.dim(`  preload:  ${path16.relative(config.root, pf)}`));
+    console.log(pc9.dim(`  preload:  ${path17.relative(config.root, pf)}`));
   }
   console.log();
   return { rendererOutDir, mainFile, preloadFiles };
@@ -6756,7 +6966,7 @@ async function bundleNode(config, entry, opts) {
     },
     plugins: [oxcTransformPlugin, electronPlugin(config), resolvePlugin(config)]
   });
-  fs11.mkdirSync(path16.dirname(opts.outFile), { recursive: true });
+  fs12.mkdirSync(path17.dirname(opts.outFile), { recursive: true });
   await bundle2.write({
     sourcemap: !!config.build.sourcemap,
     minify: !!config.build.minify,
@@ -6767,7 +6977,7 @@ async function bundleNode(config, entry, opts) {
     codeSplitting: false
   });
   await bundle2.close();
-  console.log(pc9.dim(`  \u2713 ${opts.label} \u2192 ${path16.relative(config.root, opts.outFile)}`));
+  console.log(pc9.dim(`  \u2713 ${opts.label} \u2192 ${path17.relative(config.root, opts.outFile)}`));
   return opts.outFile;
 }
 function createElectronRendererConfig(config, inlineConfig = {}, overrides = {}) {
@@ -6791,11 +7001,11 @@ function createElectronRendererConfig(config, inlineConfig = {}, overrides = {})
 }
 function outFileName(outDir, base, format) {
   const ext = format === "cjs" ? ".cjs" : ".mjs";
-  return path16.join(outDir, base + ext);
+  return path17.join(outDir, base + ext);
 }
 function normalizePreload(preload, root) {
   const list = Array.isArray(preload) ? preload : preload ? [preload] : [];
-  return list.map((p) => path16.resolve(root, p));
+  return list.map((p) => path17.resolve(root, p));
 }
 function assertElectronVersion(config) {
   const min = config.electron.minVersion;
@@ -6810,13 +7020,21 @@ function assertElectronVersion(config) {
 }
 function detectInstalledElectron(root) {
   try {
-    const pkgPath = path16.resolve(root, "node_modules/electron/package.json");
-    if (!fs11.existsSync(pkgPath)) return null;
-    const pkg = JSON.parse(fs11.readFileSync(pkgPath, "utf-8"));
+    const require2 = createRequire5(path17.resolve(root, "package.json"));
+    const pkgPath = require2.resolve("electron/package.json");
+    const pkg = JSON.parse(fs12.readFileSync(pkgPath, "utf-8"));
     const major = parseInt(String(pkg.version).split(".")[0], 10);
     return Number.isFinite(major) ? major : null;
   } catch {
-    return null;
+    try {
+      const pkgPath = path17.resolve(root, "node_modules/electron/package.json");
+      if (!fs12.existsSync(pkgPath)) return null;
+      const pkg = JSON.parse(fs12.readFileSync(pkgPath, "utf-8"));
+      const major = parseInt(String(pkg.version).split(".")[0], 10);
+      return Number.isFinite(major) ? major : null;
+    } catch {
+      return null;
+    }
   }
 }
 var init_electron2 = __esm({
@@ -6836,9 +7054,9 @@ __export(electron_dev_exports, {
   electronRendererDevPath: () => electronRendererDevPath,
   startElectronDev: () => startElectronDev
 });
-import path17 from "path";
-import fs12 from "fs";
-import { createRequire as createRequire5 } from "module";
+import path18 from "path";
+import fs13 from "fs";
+import { createRequire as createRequire6 } from "module";
 import { spawn } from "child_process";
 import chokidar from "chokidar";
 import pc10 from "picocolors";
@@ -6847,7 +7065,7 @@ async function startElectronDev(inlineConfig = {}) {
   const { noSpawn, ...rest } = inlineConfig;
   const config = await resolveConfig({ ...rest, target: "electron" }, "serve");
   warnElectronVersion(config);
-  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.4.3"}`));
+  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.4.4"}`));
   const { createServer: createServer2 } = await Promise.resolve().then(() => (init_server(), server_exports));
   const server = await createServer2({
     ...rest,
@@ -6857,11 +7075,11 @@ async function startElectronDev(inlineConfig = {}) {
   await server.listen();
   const devUrl = `http://localhost:${server.config.server.port}` + electronRendererDevPath(config.electron.renderer);
   console.log(pc10.dim(`  renderer: ${devUrl}`));
-  const stageDir = path17.resolve(config.root, ".nasti");
-  fs12.mkdirSync(stageDir, { recursive: true });
-  const mainEntry = path17.resolve(config.root, config.electron.main);
+  const stageDir = path18.resolve(config.root, ".nasti");
+  fs13.mkdirSync(stageDir, { recursive: true });
+  const mainEntry = path18.resolve(config.root, config.electron.main);
   const preloadEntries = normalizePreload(config.electron.preload, config.root);
-  const builtMainFile = path17.join(stageDir, "main" + extFor(config.electron.mainFormat));
+  const builtMainFile = path18.join(stageDir, "main" + extFor(config.electron.mainFormat));
   const builtPreloadFiles = [];
   const compileAll = async () => {
     await compileNode(config, mainEntry, {
@@ -6871,9 +7089,9 @@ async function startElectronDev(inlineConfig = {}) {
     });
     builtPreloadFiles.length = 0;
     for (const entry of preloadEntries) {
-      if (!fs12.existsSync(entry)) continue;
-      const base = path17.basename(entry).replace(/\.[^.]+$/, "");
-      const out = path17.join(stageDir, base + extFor(config.electron.preloadFormat));
+      if (!fs13.existsSync(entry)) continue;
+      const base = path18.basename(entry).replace(/\.[^.]+$/, "");
+      const out = path18.join(stageDir, base + extFor(config.electron.preloadFormat));
       await compileNode(config, entry, {
         outFile: out,
         format: config.electron.preloadFormat,
@@ -6912,7 +7130,7 @@ async function startElectronDev(inlineConfig = {}) {
   };
   spawnElectron();
   if (config.electron.autoRestart) {
-    const watchTargets = [mainEntry, ...preloadEntries].filter(fs12.existsSync);
+    const watchTargets = [mainEntry, ...preloadEntries].filter(fs13.existsSync);
     const watcher = chokidar.watch(watchTargets, { ignoreInitial: true });
     let restarting = null;
     let pending = false;
@@ -6992,7 +7210,7 @@ async function compileNode(config, entry, opts) {
     platform: "node",
     plugins: [oxcTransformPlugin, electronPlugin(config), resolvePlugin(config)]
   });
-  fs12.mkdirSync(path17.dirname(opts.outFile), { recursive: true });
+  fs13.mkdirSync(path18.dirname(opts.outFile), { recursive: true });
   await bundle2.write({
     file: opts.outFile,
     format: opts.format === "cjs" ? "cjs" : "esm",
@@ -7005,18 +7223,18 @@ async function compileNode(config, entry, opts) {
   await bundle2.close();
 }
 function electronRendererDevPath(renderer) {
-  const normalized = renderer.split(path17.sep).join("/").replace(/^\.?\//, "");
+  const normalized = renderer.split(path18.sep).join("/").replace(/^\.?\//, "");
   return normalized === "index.html" ? "/" : `/${normalized}`;
 }
 function resolveElectronBinary(config) {
-  if (config.electron.electronPath && fs12.existsSync(config.electron.electronPath)) {
+  if (config.electron.electronPath && fs13.existsSync(config.electron.electronPath)) {
     return config.electron.electronPath;
   }
   try {
-    const require2 = createRequire5(path17.resolve(config.root, "package.json"));
+    const require2 = createRequire6(path18.resolve(config.root, "package.json"));
     const pathFile = require2.resolve("electron");
     const electronModule = require2(pathFile);
-    if (typeof electronModule === "string" && fs12.existsSync(electronModule)) {
+    if (typeof electronModule === "string" && fs13.existsSync(electronModule)) {
       return electronModule;
     }
   } catch {
@@ -7191,20 +7409,20 @@ cli.command("preview [root]", "Preview production build").option("--port <port>"
   const logger = createCliLogger(options);
   try {
     const http2 = await import("http");
-    const path18 = await import("path");
+    const path19 = await import("path");
     const os2 = await import("os");
     const sirv2 = (await import("sirv")).default;
     const connect2 = (await import("connect")).default;
     const { printServerUrls: printServerUrls2 } = await Promise.resolve().then(() => (init_logger(), logger_exports));
-    const resolvedRoot = path18.resolve(root ?? ".");
-    const outDir = path18.resolve(resolvedRoot, options.outDir);
+    const resolvedRoot = path19.resolve(root ?? ".");
+    const outDir = path19.resolve(resolvedRoot, options.outDir);
     const app = connect2();
     app.use(sirv2(outDir, { single: true, etag: true, gzip: true, brotli: true }));
     const port = options.port;
     const host = options.host === true ? "0.0.0.0" : options.host ?? "localhost";
     http2.createServer(app).listen(port, host, () => {
       logger.info(`
-  ${pc11.cyan(pc11.bold("NASTI"))} ${pc11.cyan(`v${"2.4.3"}`)}  ${pc11.dim("preview")}
+  ${pc11.cyan(pc11.bold("NASTI"))} ${pc11.cyan(`v${"2.4.4"}`)}  ${pc11.dim("preview")}
 `);
       printServerUrls2(
         {
@@ -7221,6 +7439,6 @@ cli.command("preview [root]", "Preview production build").option("--port <port>"
   }
 });
 cli.help();
-cli.version("2.4.3");
+cli.version("2.4.4");
 cli.parse();
 //# sourceMappingURL=cli.js.map