@nasti-toolchain/nasti 2.4.3 → 2.5.0

package/dist/cli.js

@@ -10,10 +10,10 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
-var __glob = (map) => (path18) => {
-  var fn = map[path18];
+var __glob = (map) => (path19) => {
+  var fn = map[path19];
   if (fn) return fn();
-  throw new Error("Module not found in bundle: " + path18);
+  throw new Error("Module not found in bundle: " + path19);
 };
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
@@ -162,7 +162,7 @@ var init_logger = __esm({
 });
 
 // src/config/defaults.ts
-var defaultResolve, defaultServer, defaultBuild, defaultElectron, defaultExperimental, defaults;
+var defaultResolve, defaultServer, defaultBuild, defaultElectron, defaultExperimental, defaultReact, defaults;
 var init_defaults = __esm({
   "src/config/defaults.ts"() {
     "use strict";
@@ -215,12 +215,20 @@ var init_defaults = __esm({
     defaultExperimental = {
       bundledDev: false
     };
+    defaultReact = {
+      include: /\.[tj]sx?$/,
+      exclude: /node_modules/,
+      jsxImportSource: "react",
+      jsxRuntime: "automatic",
+      compiler: false
+    };
     defaults = {
       root: ".",
       base: "/",
       mode: "development",
       target: "web",
       framework: "auto",
+      react: defaultReact,
       resolve: defaultResolve,
       server: defaultServer,
       build: defaultBuild,
@@ -445,6 +453,13 @@ async function resolveConfig(inlineConfig = {}, command) {
     mode,
     target: merged.target ?? defaults.target,
     framework: (merged.framework ?? defaults.framework) === "auto" ? detectFramework(root) : merged.framework,
+    react: {
+      include: merged.react?.include ?? defaultReact.include,
+      exclude: merged.react?.exclude ?? defaultReact.exclude,
+      jsxImportSource: merged.react?.jsxImportSource ?? defaultReact.jsxImportSource,
+      jsxRuntime: merged.react?.jsxRuntime ?? defaultReact.jsxRuntime,
+      compiler: merged.react?.compiler === true ? {} : merged.react?.compiler ?? defaultReact.compiler
+    },
     command,
     resolve: {
       // tsconfig paths 优先级最低：tsconfig < defaults < user config
@@ -856,6 +871,24 @@ var init_module_graph = __esm({
       getModulesByFile(file) {
         return this.fileToModulesMap.get(file);
       }
+      /**
+       * Modules whose registered entry file lives under `dir` (inclusive).
+       * Used when a non-entry source inside a prebundled workspace package changes:
+       * only the package entry was registered, so getModulesByFile(changedFile)
+       * misses — we invalidate every /@modules entry rooted in that package.
+       */
+      getModulesWithFileUnder(dir) {
+        const result = /* @__PURE__ */ new Set();
+        const normDir = dir.replace(/\\/g, "/");
+        const normPrefix = normDir.endsWith("/") ? normDir : normDir + "/";
+        for (const [file, mods] of this.fileToModulesMap) {
+          const normFile = file.replace(/\\/g, "/");
+          if (normFile === normDir || normFile.startsWith(normPrefix)) {
+            for (const m of mods) result.add(m);
+          }
+        }
+        return result;
+      }
       async ensureEntryFromUrl(url) {
         const normalizedUrl = removeTimestampQuery(url);
         let mod = this.urlToModuleMap.get(normalizedUrl);
@@ -1341,13 +1374,88 @@ ${msg}`);
     map: result.map ? JSON.stringify(result.map) : null
   };
 }
-var JS_EXTENSIONS, TS_EXTENSIONS, JSX_EXTENSIONS;
+async function transformReactCode(filename, code, options) {
+  if (!matchesReactFilter(filename, options.react.include, options.react.exclude)) {
+    return null;
+  }
+  if (!options.react.compiler) {
+    if (!shouldTransform(filename)) return null;
+    return transformCode(filename, code, {
+      sourcemap: options.sourcemap,
+      jsxRuntime: options.react.jsxRuntime,
+      jsxImportSource: options.react.jsxImportSource,
+      reactRefresh: options.reactRefresh,
+      target: options.target
+    });
+  }
+  if (!shouldTransform(filename)) return null;
+  const compiler2 = await loadReactCompiler();
+  const compilerOptions = options.react.compiler;
+  const shouldCompile = options.consumer === "client" && (compilerOptions.compilationMode === "annotation" ? /['"]use memo['"]/.test(code) : defaultReactCompilerCodeFilter.test(code));
+  const result = await compiler2.transform(cleanTransformId(filename), code, {
+    jsx: {
+      runtime: options.react.jsxRuntime,
+      development: options.development,
+      importSource: options.react.jsxImportSource,
+      refresh: options.consumer === "client" && !!options.reactRefresh
+    },
+    reactCompiler: shouldCompile ? compilerOptions : false,
+    sourcemap: options.sourcemap ?? true
+  });
+  const diagnostics = result.errors.map(
+    (error) => `${error.message}${error.codeframe ? `
+${error.codeframe}` : ""}`
+  );
+  if (result.fatal) {
+    throw new Error(
+      diagnostics.join("\n\n") || `React Compiler transform failed for ${filename}`
+    );
+  }
+  for (const diagnostic of diagnostics) options.onWarning?.(diagnostic);
+  return {
+    code: result.code,
+    map: result.map ? JSON.stringify(result.map) : null
+  };
+}
+function matchesReactFilter(id, include, exclude) {
+  const cleanId = cleanTransformId(id);
+  return matchesFilter(cleanId, include) && !matchesFilter(cleanId, exclude);
+}
+function matchesFilter(id, filter2) {
+  const patterns = Array.isArray(filter2) ? filter2 : [filter2];
+  return patterns.some((pattern) => {
+    if (pattern instanceof RegExp) {
+      pattern.lastIndex = 0;
+      return pattern.test(id);
+    }
+    if (!pattern.includes("*")) return id.includes(pattern);
+    const expression = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "\0").replace(/\*/g, "[^/]*").replace(/\0/g, ".*");
+    return new RegExp(`^${expression}$`).test(id);
+  });
+}
+function cleanTransformId(id) {
+  return id.split(/[?#]/, 1)[0];
+}
+async function loadReactCompiler() {
+  if (reactCompilerImplementation) return reactCompilerImplementation;
+  try {
+    reactCompilerImplementation = await import("oxc-transform-react");
+    return reactCompilerImplementation;
+  } catch (error) {
+    throw new Error(
+      '[nasti] React Compiler requires the optional "oxc-transform-react" package. Install it before setting react.compiler.' + (error instanceof Error ? `
+${error.message}` : "")
+    );
+  }
+}
+var JS_EXTENSIONS, TS_EXTENSIONS, JSX_EXTENSIONS, defaultReactCompilerCodeFilter, reactCompilerImplementation;
 var init_transformer = __esm({
   "src/core/transformer.ts"() {
     "use strict";
     JS_EXTENSIONS = /\.(js|mjs|cjs)$/;
     TS_EXTENSIONS = /\.(ts|mts|cts)$/;
     JSX_EXTENSIONS = /\.(jsx|tsx)$/;
+    defaultReactCompilerCodeFilter = /forwardRef|memo|\b(?:[A-Z]|use[A-Z0-9])/;
   }
 });
 
@@ -1586,9 +1694,123 @@ var init_assets = __esm({
   }
 });
 
-// src/server/middleware.ts
-import path5 from "path";
+// src/server/fs-allow.ts
 import fs5 from "fs";
+import path5 from "path";
+function isUnderRoot(abs, root) {
+  const rel = path5.relative(root, abs);
+  return !!rel && !rel.startsWith("..") && !path5.isAbsolute(rel);
+}
+function discoverLinkedPackageRoots(projectRoot, maxDepth = 4) {
+  const results = [];
+  const seenReal = /* @__PURE__ */ new Set();
+  const queued = /* @__PURE__ */ new Set([projectRoot]);
+  const queue = [projectRoot];
+  for (let depth = 0; depth < maxDepth && queue.length > 0; depth++) {
+    const levelCount = queue.length;
+    for (let i = 0; i < levelCount; i++) {
+      const dir = queue.shift();
+      const nm = path5.join(dir, "node_modules");
+      let entries;
+      try {
+        entries = fs5.readdirSync(nm, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const ent of entries) {
+        if (ent.name.startsWith(".") || ent.name === "node_modules") continue;
+        const pkgNames = ent.name.startsWith("@") ? listScopedPackages(nm, ent.name) : [ent.name];
+        for (const pkgName of pkgNames) {
+          const pkgPath = path5.join(nm, pkgName);
+          let real;
+          try {
+            real = fs5.realpathSync(pkgPath);
+          } catch {
+            continue;
+          }
+          if (seenReal.has(real)) continue;
+          seenReal.add(real);
+          if (!queued.has(real)) {
+            queued.add(real);
+            queue.push(real);
+          }
+          if (real !== projectRoot && !isUnderRoot(real, projectRoot) && !real.includes(NM)) {
+            results.push(real);
+          }
+        }
+      }
+    }
+  }
+  return results;
+}
+function listScopedPackages(nm, scope) {
+  try {
+    return fs5.readdirSync(path5.join(nm, scope)).filter((name) => !name.startsWith(".")).map((name) => path5.join(scope, name));
+  } catch {
+    return [];
+  }
+}
+function getLinkedPackageRoots(projectRoot) {
+  let mtimeMs = 0;
+  try {
+    mtimeMs = fs5.statSync(path5.join(projectRoot, "node_modules")).mtimeMs;
+  } catch {
+    mtimeMs = 0;
+  }
+  const cached2 = linkedRootsCache.get(projectRoot);
+  if (cached2 && cached2.mtimeMs === mtimeMs) {
+    return cached2.roots;
+  }
+  const roots = discoverLinkedPackageRoots(projectRoot);
+  linkedRootsCache.set(projectRoot, { roots, mtimeMs });
+  return roots;
+}
+function clearLinkedPackageRootsCache() {
+  linkedRootsCache.clear();
+}
+function isAllowedDevModulePath(realId, projectRoot) {
+  if (realId === projectRoot || isUnderRoot(realId, projectRoot)) return true;
+  for (const pkgRoot of getLinkedPackageRoots(projectRoot)) {
+    if (realId === pkgRoot || realId.startsWith(pkgRoot + path5.sep)) return true;
+  }
+  let dir = projectRoot;
+  for (; ; ) {
+    const nm = path5.join(dir, "node_modules");
+    if (realId === nm || realId.startsWith(nm + path5.sep)) return true;
+    const parent = path5.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return false;
+}
+function findNearestPackageRoot(file) {
+  let dir = path5.dirname(file);
+  for (; ; ) {
+    const pkgJson = path5.join(dir, "package.json");
+    if (fs5.existsSync(pkgJson)) {
+      try {
+        const pkg = JSON.parse(fs5.readFileSync(pkgJson, "utf-8"));
+        if (typeof pkg?.name === "string" && pkg.name) return dir;
+      } catch {
+      }
+    }
+    const parent = path5.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+var NM, linkedRootsCache;
+var init_fs_allow = __esm({
+  "src/server/fs-allow.ts"() {
+    "use strict";
+    NM = `${path5.sep}node_modules${path5.sep}`;
+    linkedRootsCache = /* @__PURE__ */ new Map();
+  }
+});
+
+// src/server/middleware.ts
+import path6 from "path";
+import fs6 from "fs";
 import { createRequire } from "module";
 import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "url";
 import pc3 from "picocolors";
@@ -1599,10 +1821,10 @@ function getReactRefreshRuntimeEsm(includeBoundaryHelpers = false) {
   let cjsPath;
   try {
     const pkgPath = __require2.resolve("react-refresh/package.json");
-    cjsPath = path5.join(path5.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
+    cjsPath = path6.join(path6.dirname(pkgPath), "cjs", "react-refresh-runtime.development.js");
   } catch (err) {
-    cjsPath = path5.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
-    if (!fs5.existsSync(cjsPath)) {
+    cjsPath = path6.resolve(__dirname_esm, "../../node_modules/react-refresh/cjs/react-refresh-runtime.development.js");
+    if (!fs6.existsSync(cjsPath)) {
       const origMsg = err instanceof Error ? err.message : String(err);
       throw new Error(
         `[nasti] Missing dependency "react-refresh". Install it with: npm install react-refresh
@@ -1610,7 +1832,7 @@ Original resolve error: ${origMsg}`
       );
     }
   }
-  const cjsSource = fs5.readFileSync(cjsPath, "utf-8");
+  const cjsSource = fs6.readFileSync(cjsPath, "utf-8");
   __refreshRuntimeCache = `// Wrapped react-refresh runtime -> ESM
 const exports = {};
 const module = { exports };
@@ -1781,8 +2003,8 @@ async function transformRequest(url, ctx) {
     let realIdValid = false;
     try {
       if (idParam) {
-        realId = fs5.realpathSync(idParam);
-        realIdValid = fs5.statSync(realId).isFile() && (realId.includes(`${path5.sep}node_modules${path5.sep}`) || isUnderRoot(realId, config.root));
+        realId = fs6.realpathSync(idParam);
+        realIdValid = fs6.statSync(realId).isFile() && isAllowedDevModulePath(realId, config.root);
       }
     } catch {
       realId = null;
@@ -1849,7 +2071,7 @@ async function transformRequest(url, ctx) {
     }
   }
   const filePath = resolveUrlToFile(url, config.root);
-  if (!filePath || !fs5.existsSync(filePath)) return null;
+  if (!filePath || !fs6.existsSync(filePath)) return null;
   const mod = await moduleGraph.ensureEntryFromUrl(url);
   moduleGraph.registerModule(mod, filePath);
   const transformVersion = mod.invalidationVersion;
@@ -1860,7 +2082,7 @@ async function transformRequest(url, ctx) {
     return transformResult2;
   }
   const loaded = await pluginContainer.load(filePath);
-  let code = loaded == null ? fs5.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
+  let code = loaded == null ? fs6.readFileSync(filePath, "utf-8") : typeof loaded === "string" ? loaded : loaded.code;
   let map = loaded && typeof loaded !== "string" ? loaded.map : void 0;
   const pluginResult = await pluginContainer.transform(code, filePath);
   if (pluginResult) {
@@ -1869,22 +2091,35 @@ async function transformRequest(url, ctx) {
   }
   const stableUrl = cleanReqUrl;
   let wrappedWithRefresh = false;
-  if (shouldTransform(filePath)) {
-    const isJsx = /\.[jt]sx$/.test(filePath);
-    const useRefresh = isJsx && config.framework !== "vue";
+  if (config.framework === "react") {
+    const refreshEnabled = (ctx.environment?.consumer ?? "client") === "client" && config.server.hmr !== false;
+    const useRefresh = refreshEnabled && (!!config.react.compiler || /\.[jt]sx$/.test(filePath));
+    const result = await transformReactCode(filePath, code, {
+      react: config.react,
+      consumer: ctx.environment?.consumer ?? "client",
+      development: true,
+      reactRefresh: useRefresh,
+      sourcemap: true,
+      target: ctx.environment?.options.build.target ?? config.build.target,
+      onWarning: (message) => config.logger.warn(`[nasti:react] ${message}`)
+    });
+    if (result) {
+      code = result.code;
+      if (result.map) map = JSON.parse(result.map);
+      if (useRefresh) {
+        code = buildReactRefreshWrapper(stableUrl, code);
+        wrappedWithRefresh = true;
+      }
+    }
+  } else if (shouldTransform(filePath)) {
     const result = transformCode(filePath, code, {
       sourcemap: true,
       jsxRuntime: "automatic",
-      jsxImportSource: config.framework === "vue" ? "vue" : "react",
-      reactRefresh: useRefresh,
+      jsxImportSource: "vue",
       target: ctx.environment?.options.build.target ?? config.build.target
     });
     code = result.code;
     if (result.map) map = JSON.parse(result.map);
-    if (useRefresh) {
-      code = buildReactRefreshWrapper(stableUrl, code);
-      wrappedWithRefresh = true;
-    }
   }
   const hotInfo = rewriteHotAcceptDeps(code, config, filePath);
   code = hotInfo.code;
@@ -1918,7 +2153,7 @@ async function loadVirtualModule(spec, ctx) {
   const resolved = await pluginContainer.resolveId(spec);
   if (resolved == null) return null;
   const resolvedId = typeof resolved === "string" ? resolved : resolved.id;
-  const looksVirtual = resolvedId.startsWith("\0") || !fs5.existsSync(resolvedId);
+  const looksVirtual = resolvedId.startsWith("\0") || !fs6.existsSync(resolvedId);
   if (!looksVirtual) return null;
   const loadResult = await pluginContainer.load(resolvedId);
   if (loadResult == null) return null;
@@ -1932,7 +2167,7 @@ async function loadVirtualModule(spec, ctx) {
     config.mode,
     ssrDefineOverrides(ctx.environment?.consumer ?? "client")
   ));
-  const anchor = path5.join(config.root, "__nasti_virtual__.ts");
+  const anchor = path6.join(config.root, "__nasti_virtual__.ts");
   code = rewriteImports(code, config, anchor);
   return { id: resolvedId, result: { code } };
 }
@@ -1958,7 +2193,7 @@ async function doBundlePackage(entryFile, root) {
   await bundle2.close();
   let code = result.output[0].code;
   code = code.replace(/process\.env\.NODE_ENV/g, '"development"');
-  const externalBaseDir = path5.dirname(entryFile);
+  const externalBaseDir = path6.dirname(entryFile);
   code = code.replace(
     /^(import\b[^;'"]*?\bfrom\s+)(['"])([^'"./][^'"]*)(\2)/gm,
     (_, prefix, q, spec) => `${prefix}${q}${externalSpecToModuleUrl(spec, externalBaseDir, root)}${q}`
@@ -1976,16 +2211,16 @@ async function doBundlePackage(entryFile, root) {
   return code;
 }
 async function tryGenerateSubpathShim(entryFile, root) {
-  const NM = `${path5.sep}node_modules${path5.sep}`;
-  if (!entryFile.includes(NM)) return null;
+  const NM2 = `${path6.sep}node_modules${path6.sep}`;
+  if (!entryFile.includes(NM2)) return null;
   let pkgDir = null;
   let pkgName = null;
-  let dir = path5.dirname(entryFile);
+  let dir = path6.dirname(entryFile);
   while (true) {
-    const pkgJsonPath = path5.join(dir, "package.json");
-    if (fs5.existsSync(pkgJsonPath)) {
+    const pkgJsonPath = path6.join(dir, "package.json");
+    if (fs6.existsSync(pkgJsonPath)) {
       try {
-        const pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+        const pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
         if (typeof pkg?.name === "string" && pkg.name) {
           pkgDir = dir;
           pkgName = pkg.name;
@@ -1994,16 +2229,16 @@ async function tryGenerateSubpathShim(entryFile, root) {
       } catch {
       }
     }
-    const parent = path5.dirname(dir);
+    const parent = path6.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
-    if (!dir.includes(NM)) return null;
+    if (!dir.includes(NM2)) return null;
   }
   if (!pkgDir || !pkgName) return null;
-  const entryExt = path5.extname(entryFile);
+  const entryExt = path6.extname(entryFile);
   const mainEntry = pickMainEntryByExtension(pkgDir, entryExt);
   if (!mainEntry) return null;
-  if (path5.resolve(mainEntry) === path5.resolve(entryFile)) return null;
+  if (path6.resolve(mainEntry) === path6.resolve(entryFile)) return null;
   let mainNs;
   let subNs;
   try {
@@ -2027,7 +2262,7 @@ async function tryGenerateSubpathShim(entryFile, root) {
     if (mainNs["default"] !== subNs["default"]) return null;
   }
   const rootMain = resolveNodeModule(root, pkgName);
-  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path5.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
+  const mainEntryUrl = rootMain && rootMain.startsWith(pkgDir + path6.sep) ? `/@modules/${pkgName}` : `/@modules/${pkgName}?id=${encodeURIComponent(mainEntry)}`;
   const lines = [
     `// Nasti subpath shim \u2192 ${pkgName} (avoid duplicate bundling)`,
     `import * as __pkg from "${mainEntryUrl}";`
@@ -2041,10 +2276,10 @@ async function tryGenerateSubpathShim(entryFile, root) {
   return lines.join("\n") + "\n";
 }
 function pickMainEntryByExtension(pkgDir, preferredExt) {
-  const pkgJsonPath = path5.join(pkgDir, "package.json");
+  const pkgJsonPath = path6.join(pkgDir, "package.json");
   let pkg;
   try {
-    pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -2063,14 +2298,14 @@ function pickMainEntryByExtension(pkgDir, preferredExt) {
   if (typeof pkg.module === "string") candidates.push(pkg.module);
   if (typeof pkg.main === "string") candidates.push(pkg.main);
   for (const cand of candidates) {
-    if (path5.extname(cand) === preferredExt) {
-      const full = path5.resolve(pkgDir, cand);
-      if (fs5.existsSync(full)) return full;
+    if (path6.extname(cand) === preferredExt) {
+      const full = path6.resolve(pkgDir, cand);
+      if (fs6.existsSync(full)) return full;
     }
   }
   for (const cand of candidates) {
-    const full = path5.resolve(pkgDir, cand);
-    if (fs5.existsSync(full)) return full;
+    const full = path6.resolve(pkgDir, cand);
+    if (fs6.existsSync(full)) return full;
   }
   return null;
 }
@@ -2095,8 +2330,8 @@ function rewriteExternalRequires(code, baseDir, root) {
 }
 async function injectCjsNamedExports(code, entryFile) {
   try {
-    const { createRequire: createRequire6 } = await import("module");
-    const req = createRequire6(entryFile);
+    const { createRequire: createRequire7 } = await import("module");
+    const req = createRequire7(entryFile);
     const cjsExports = req(entryFile);
     if (!cjsExports || typeof cjsExports !== "object" && typeof cjsExports !== "function" || Array.isArray(cjsExports)) return code;
     const namedKeys = Object.keys(cjsExports).filter(
@@ -2137,11 +2372,22 @@ function rewriteImports(code, config, filePath, importedUrls, moduleGraph) {
 }
 function createModuleSpecifierResolver(config, filePath) {
   const root = config.root;
-  const fileDir = path5.dirname(filePath);
+  const fileDir = path6.dirname(filePath);
   const aliasEntries = Object.entries(config.resolve.alias).sort(
     ([a], [b]) => b.length - a.length
   );
-  const toRootUrl = (abs) => "/" + path5.relative(root, abs).replace(/\\/g, "/");
+  const toServableUrl = (abs) => {
+    if (isUnderRoot(abs, root)) {
+      return "/" + path6.relative(root, abs).replace(/\\/g, "/");
+    }
+    for (const pkgRoot of getLinkedPackageRoots(root)) {
+      if (abs === pkgRoot || abs.startsWith(pkgRoot + path6.sep)) {
+        const normalized = abs.replace(/\\/g, "/");
+        return "/@fs/" + (normalized.startsWith("/") ? normalized.slice(1) : normalized);
+      }
+    }
+    return null;
+  };
   return (specifier) => {
     const suffixMatch = specifier.match(/[?#].*$/);
     const suffix = suffixMatch ? suffixMatch[0] : "";
@@ -2150,18 +2396,21 @@ function createModuleSpecifierResolver(config, filePath) {
       if (baseSpec === key || baseSpec.startsWith(key + "/")) {
         const aliasBase = resolveAliasTarget(value, root);
         const sub = baseSpec.slice(key.length).replace(/^\//, "");
-        const target = sub ? path5.join(aliasBase, sub) : aliasBase;
+        const target = sub ? path6.join(aliasBase, sub) : aliasBase;
         const resolved = tryResolveDiskPath(target);
-        return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+        const url = resolved ? toServableUrl(resolved) : null;
+        return url ? url + suffix : specifier;
       }
     }
     if (baseSpec.startsWith("./") || baseSpec.startsWith("../")) {
-      const resolved = tryResolveDiskPath(path5.resolve(fileDir, baseSpec));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path6.resolve(fileDir, baseSpec));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/") && !baseSpec.startsWith("/@")) {
-      const resolved = tryResolveDiskPath(path5.join(root, baseSpec.replace(/^\//, "")));
-      return resolved && isUnderRoot(resolved, root) ? toRootUrl(resolved) + suffix : specifier;
+      const resolved = tryResolveDiskPath(path6.join(root, baseSpec.replace(/^\//, "")));
+      const url = resolved ? toServableUrl(resolved) : null;
+      return url ? url + suffix : specifier;
     }
     if (baseSpec.startsWith("/")) return specifier;
     return `/@modules/${specifier}`;
@@ -2314,28 +2563,24 @@ function maskStringsAndComments(code) {
   return masked.join("");
 }
 function resolveAliasTarget(value, root) {
-  if (path5.isAbsolute(value) && fs5.existsSync(value)) return value;
-  if (value.startsWith("/")) return path5.join(root, value.slice(1));
-  return path5.resolve(root, value);
+  if (path6.isAbsolute(value) && fs6.existsSync(value)) return value;
+  if (value.startsWith("/")) return path6.join(root, value.slice(1));
+  return path6.resolve(root, value);
 }
 function tryResolveDiskPath(target) {
-  if (fs5.existsSync(target) && fs5.statSync(target).isFile()) return target;
+  if (fs6.existsSync(target) && fs6.statSync(target).isFile()) return target;
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = target + ext;
-    if (fs5.existsSync(withExt) && fs5.statSync(withExt).isFile()) return withExt;
+    if (fs6.existsSync(withExt) && fs6.statSync(withExt).isFile()) return withExt;
   }
-  if (fs5.existsSync(target) && fs5.statSync(target).isDirectory()) {
+  if (fs6.existsSync(target) && fs6.statSync(target).isDirectory()) {
     for (const ext of RESOLVE_EXTENSIONS) {
-      const idx = path5.join(target, "index" + ext);
-      if (fs5.existsSync(idx) && fs5.statSync(idx).isFile()) return idx;
+      const idx = path6.join(target, "index" + ext);
+      if (fs6.existsSync(idx) && fs6.statSync(idx).isFile()) return idx;
     }
   }
   return null;
 }
-function isUnderRoot(abs, root) {
-  const rel = path5.relative(root, abs);
-  return !!rel && !rel.startsWith("..") && !path5.isAbsolute(rel);
-}
 function appendTimestampQuery(url, timestamp) {
   const hashIndex = url.indexOf("#");
   const hash = hashIndex >= 0 ? url.slice(hashIndex) : "";
@@ -2353,7 +2598,7 @@ function resolveNodeModule(baseDir, moduleName) {
   const resolved = resolveNodeModuleEntry(baseDir, moduleName);
   if (!resolved) return null;
   try {
-    return fs5.realpathSync(resolved);
+    return fs6.realpathSync(resolved);
   } catch {
     return resolved;
   }
@@ -2373,21 +2618,21 @@ function resolveNodeModuleEntry(root, moduleName) {
   let pkgDir = null;
   let dir = root;
   for (; ; ) {
-    const candidate = path5.join(dir, "node_modules", pkgName);
-    if (fs5.existsSync(candidate)) {
+    const candidate = path6.join(dir, "node_modules", pkgName);
+    if (fs6.existsSync(candidate)) {
       pkgDir = candidate;
       break;
     }
-    const parent = path5.dirname(dir);
+    const parent = path6.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   if (!pkgDir) return null;
-  const pkgJsonPath = path5.join(pkgDir, "package.json");
-  if (!fs5.existsSync(pkgJsonPath)) return null;
+  const pkgJsonPath = path6.join(pkgDir, "package.json");
+  if (!fs6.existsSync(pkgJsonPath)) return null;
   let pkg;
   try {
-    pkg = JSON.parse(fs5.readFileSync(pkgJsonPath, "utf-8"));
+    pkg = JSON.parse(fs6.readFileSync(pkgJsonPath, "utf-8"));
   } catch {
     return null;
   }
@@ -2400,32 +2645,32 @@ function resolveNodeModuleEntry(root, moduleName) {
     const subDirs = [""];
     for (const field of ["module", "main"]) {
       if (typeof pkg[field] === "string") {
-        const dir2 = path5.dirname(pkg[field]);
+        const dir2 = path6.dirname(pkg[field]);
         if (dir2 && dir2 !== "." && !subDirs.includes(dir2)) subDirs.push(dir2);
       }
     }
     for (const dir2 of subDirs) {
-      const direct = path5.join(pkgDir, dir2, subpath);
-      if (fs5.existsSync(direct) && fs5.statSync(direct).isFile()) return direct;
+      const direct = path6.join(pkgDir, dir2, subpath);
+      if (fs6.existsSync(direct) && fs6.statSync(direct).isFile()) return direct;
       for (const ext of RESOLVE_EXTENSIONS) {
-        if (fs5.existsSync(direct + ext)) return direct + ext;
+        if (fs6.existsSync(direct + ext)) return direct + ext;
       }
     }
     return null;
   }
   for (const field of ["module", "jsnext:main", "jsnext", "main"]) {
     if (typeof pkg[field] === "string") {
-      const entry = path5.join(pkgDir, pkg[field]);
-      if (fs5.existsSync(entry)) return entry;
+      const entry = path6.join(pkgDir, pkg[field]);
+      if (fs6.existsSync(entry)) return entry;
     }
   }
-  const indexFallback = path5.join(pkgDir, "index.js");
-  if (fs5.existsSync(indexFallback)) return indexFallback;
+  const indexFallback = path6.join(pkgDir, "index.js");
+  if (fs6.existsSync(indexFallback)) return indexFallback;
   return null;
 }
 function resolvePackageExports(exports, key, pkgDir) {
   if (typeof exports === "string") {
-    return key === "." ? path5.join(pkgDir, exports) : null;
+    return key === "." ? path6.join(pkgDir, exports) : null;
   }
   const entry = exports[key];
   if (entry === void 0) {
@@ -2437,7 +2682,7 @@ function resolvePackageExports(exports, key, pkgDir) {
   return resolveExportValue(entry, pkgDir);
 }
 function resolveExportValue(value, pkgDir) {
-  if (typeof value === "string") return path5.join(pkgDir, value);
+  if (typeof value === "string") return path6.join(pkgDir, value);
   if (Array.isArray(value)) {
     for (const item of value) {
       const r = resolveExportValue(item, pkgDir);
@@ -2456,35 +2701,54 @@ function resolveExportValue(value, pkgDir) {
   return null;
 }
 function resolveUrlToFile(url, root) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (cleanUrl.startsWith("/@modules/")) {
     const moduleName = cleanUrl.slice("/@modules/".length);
     return resolveNodeModule(root, moduleName);
   }
-  const filePath = path5.resolve(root, cleanUrl.replace(/^\//, ""));
-  if (fs5.existsSync(filePath) && fs5.statSync(filePath).isFile()) {
+  if (cleanUrl.startsWith("/@fs/")) {
+    let abs = cleanUrl.slice("/@fs/".length);
+    if (process.platform === "win32") {
+      abs = abs.replace(/\//g, path6.sep);
+    } else if (!abs.startsWith("/")) {
+      abs = "/" + abs;
+    }
+    try {
+      const real = fs6.realpathSync(abs);
+      if (fs6.statSync(real).isFile() && isAllowedDevModulePath(real, root)) return real;
+    } catch {
+      return null;
+    }
+    return null;
+  }
+  const filePath = path6.resolve(root, cleanUrl.replace(/^\//, ""));
+  if (fs6.existsSync(filePath) && fs6.statSync(filePath).isFile()) {
     return filePath;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
     const withExt = filePath + ext;
-    if (fs5.existsSync(withExt)) return withExt;
+    if (fs6.existsSync(withExt)) return withExt;
   }
   for (const ext of RESOLVE_EXTENSIONS) {
-    const indexFile = path5.join(filePath, "index" + ext);
-    if (fs5.existsSync(indexFile)) return indexFile;
+    const indexFile = path6.join(filePath, "index" + ext);
+    if (fs6.existsSync(indexFile)) return indexFile;
   }
   return null;
 }
 function isModuleRequest(url, destination) {
-  const cleanUrl = url.split("?")[0];
+  const cleanUrl = url.split(/[?#]/)[0];
   if (/\.(ts|tsx|jsx|js|mjs|vue|css|json)$/.test(cleanUrl)) return true;
   if (cleanUrl.startsWith("/@modules/")) return true;
+  if (cleanUrl.startsWith("/@fs/")) return true;
   if (isAssetFile(cleanUrl)) {
-    const query = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
+    const qIdx = url.indexOf("?");
+    const hIdx = url.indexOf("#");
+    const queryEnd = hIdx === -1 ? url.length : hIdx;
+    const query = qIdx === -1 || qIdx > queryEnd ? "" : url.slice(qIdx + 1, queryEnd);
     const isExplicitAssetModule = /(?:^|&)(?:url|raw)(?:&|$)/.test(query);
     return isExplicitAssetModule || destination === "script";
   }
-  if (!path5.extname(cleanUrl)) return true;
+  if (!path6.extname(cleanUrl)) return true;
   return false;
 }
 function getHmrClientCode() {
@@ -2723,7 +2987,8 @@ var init_middleware = __esm({
     init_env();
     init_url();
     init_assets();
-    __dirname_esm = path5.dirname(fileURLToPath(import.meta.url));
+    init_fs_allow();
+    __dirname_esm = path6.dirname(fileURLToPath(import.meta.url));
     __require2 = createRequire(import.meta.url);
     __refreshRuntimeCache = null;
     REACT_REFRESH_BOUNDARY_HELPERS = `
@@ -2804,8 +3069,8 @@ window.__vite_plugin_react_preamble_installed__ = true;
 });
 
 // src/server/hmr.ts
-import path6 from "path";
-import fs6 from "fs";
+import path7 from "path";
+import fs7 from "fs";
 import pc4 from "picocolors";
 async function handleFileChange(file, server, environmentName = "client", timestamp = Date.now()) {
   const { config } = server;
@@ -2815,9 +3080,26 @@ async function handleFileChange(file, server, environmentName = "client", timest
   }
   const moduleGraph = environment.moduleGraph;
   const logger = config.logger;
-  const relativePath = "/" + path6.relative(config.root, file);
-  const shortFile = path6.relative(config.root, file);
-  const mods = moduleGraph.getModulesByFile(file);
+  const relativePath = "/" + path7.relative(config.root, file);
+  const shortFile = path7.relative(config.root, file);
+  let mods = moduleGraph.getModulesByFile(file);
+  if (!mods || mods.size === 0) {
+    try {
+      const real = fs7.realpathSync(file);
+      if (real !== file) mods = moduleGraph.getModulesByFile(real);
+      if (mods && mods.size > 0) file = real;
+    } catch {
+    }
+  }
+  if (!mods || mods.size === 0) {
+    const packageRoot = findNearestPackageRoot(file);
+    if (packageRoot && getLinkedPackageRoots(config.root).some(
+      (r) => packageRoot === r || packageRoot.startsWith(r + path7.sep)
+    )) {
+      const under = moduleGraph.getModulesWithFileUnder(packageRoot);
+      if (under.size > 0) mods = under;
+    }
+  }
   if (!mods || mods.size === 0) {
     return null;
   }
@@ -2832,7 +3114,7 @@ async function handleFileChange(file, server, environmentName = "client", timest
       file,
       timestamp,
       modules: [mod],
-      read: () => fs6.readFileSync(file, "utf-8"),
+      read: () => fs7.readFileSync(file, "utf-8"),
       server,
       environment
     };
@@ -2896,16 +3178,17 @@ async function handleFileChange(file, server, environmentName = "client", timest
 var init_hmr = __esm({
   "src/server/hmr.ts"() {
     "use strict";
+    init_fs_allow();
   }
 });
 
 // src/plugins/resolve.ts
-import path7 from "path";
-import fs7 from "fs";
+import path8 from "path";
+import fs8 from "fs";
 import { createRequire as createRequire2 } from "module";
 function resolvePlugin(config) {
   const { alias, extensions } = config.resolve;
-  const require2 = createRequire2(path7.resolve(config.root, "package.json"));
+  const require2 = createRequire2(path8.resolve(config.root, "package.json"));
   const aliasEntries = Object.entries(alias).sort(
     ([a], [b]) => b.length - a.length
   );
@@ -2913,10 +3196,10 @@ function resolvePlugin(config) {
   if (config.framework === "vue") {
     try {
       const vuePkgJson = require2.resolve("vue/package.json", { paths: [config.root] });
-      const vueDir = path7.dirname(vuePkgJson);
-      const mod = JSON.parse(fs7.readFileSync(vuePkgJson, "utf-8")).module;
-      const entry = path7.join(vueDir, mod ?? "dist/vue.runtime.esm-bundler.js");
-      if (fs7.existsSync(entry)) vueRuntimeEntry = entry;
+      const vueDir = path8.dirname(vuePkgJson);
+      const mod = JSON.parse(fs8.readFileSync(vuePkgJson, "utf-8")).module;
+      const entry = path8.join(vueDir, mod ?? "dist/vue.runtime.esm-bundler.js");
+      if (fs8.existsSync(entry)) vueRuntimeEntry = entry;
     } catch {
     }
   }
@@ -2928,24 +3211,24 @@ function resolvePlugin(config) {
         if (source === key || source.startsWith(key + "/")) {
           const aliasBase = resolveAliasTarget2(value, config.root);
           const sub = source.slice(key.length).replace(/^\//, "");
-          const target = sub ? path7.join(aliasBase, sub) : aliasBase;
+          const target = sub ? path8.join(aliasBase, sub) : aliasBase;
           const resolved = tryResolveFile(target, extensions);
           if (resolved) return resolved;
           break;
         }
       }
       if (source.startsWith("/") && !source.startsWith("//")) {
-        const rootRelative = path7.join(config.root, source.slice(1));
+        const rootRelative = path8.join(config.root, source.slice(1));
         const resolved = tryResolveFile(rootRelative, extensions);
         if (resolved) return resolved;
       }
-      if (path7.isAbsolute(source) && fs7.existsSync(source)) {
+      if (path8.isAbsolute(source) && fs8.existsSync(source)) {
         const resolved = tryResolveFile(source, extensions);
         if (resolved) return resolved;
       }
       if (source.startsWith(".")) {
-        const dir = importer ? path7.dirname(importer) : config.root;
-        const absolute = path7.resolve(dir, source);
+        const dir = importer ? path8.dirname(importer) : config.root;
+        const absolute = path8.resolve(dir, source);
         const resolved = tryResolveFile(absolute, extensions);
         if (resolved) return resolved;
       }
@@ -2954,7 +3237,7 @@ function resolvePlugin(config) {
         if (config.command === "build") return null;
         try {
           const resolved = require2.resolve(source, {
-            paths: [importer ? path7.dirname(importer) : config.root]
+            paths: [importer ? path8.dirname(importer) : config.root]
           });
           return resolved;
         } catch {
@@ -2965,9 +3248,9 @@ function resolvePlugin(config) {
     },
     load(id) {
       if (id.startsWith("\0")) return null;
-      if (!fs7.existsSync(id)) return null;
+      if (!fs8.existsSync(id)) return null;
       if (id.endsWith(".json")) {
-        const content = fs7.readFileSync(id, "utf-8");
+        const content = fs8.readFileSync(id, "utf-8");
         return `export default ${content}`;
       }
       return null;
@@ -2975,24 +3258,24 @@ function resolvePlugin(config) {
   };
 }
 function resolveAliasTarget2(value, root) {
-  if (path7.isAbsolute(value) && fs7.existsSync(value)) return value;
-  if (value.startsWith("/")) return path7.join(root, value.slice(1));
-  return path7.resolve(root, value);
+  if (path8.isAbsolute(value) && fs8.existsSync(value)) return value;
+  if (value.startsWith("/")) return path8.join(root, value.slice(1));
+  return path8.resolve(root, value);
 }
 function tryResolveFile(file, extensions) {
-  if (fs7.existsSync(file) && fs7.statSync(file).isFile()) {
+  if (fs8.existsSync(file) && fs8.statSync(file).isFile()) {
     return file;
   }
   for (const ext of extensions) {
     const withExt = file + ext;
-    if (fs7.existsSync(withExt) && fs7.statSync(withExt).isFile()) {
+    if (fs8.existsSync(withExt) && fs8.statSync(withExt).isFile()) {
       return withExt;
     }
   }
-  if (fs7.existsSync(file) && fs7.statSync(file).isDirectory()) {
+  if (fs8.existsSync(file) && fs8.statSync(file).isDirectory()) {
     for (const ext of extensions) {
-      const indexFile = path7.join(file, "index" + ext);
-      if (fs7.existsSync(indexFile)) {
+      const indexFile = path8.join(file, "index" + ext);
+      if (fs8.existsSync(indexFile)) {
         return indexFile;
       }
     }
@@ -3040,27 +3323,27 @@ var require_process = __commonJS({
 var require_filesystem = __commonJS({
   "node_modules/detect-libc/lib/filesystem.js"(exports, module) {
     "use strict";
-    var fs13 = __require("fs");
+    var fs14 = __require("fs");
     var LDD_PATH = "/usr/bin/ldd";
     var SELF_PATH = "/proc/self/exe";
     var MAX_LENGTH = 2048;
-    var readFileSync = (path18) => {
-      const fd = fs13.openSync(path18, "r");
+    var readFileSync = (path19) => {
+      const fd = fs14.openSync(path19, "r");
       const buffer = Buffer.alloc(MAX_LENGTH);
-      const bytesRead = fs13.readSync(fd, buffer, 0, MAX_LENGTH, 0);
-      fs13.close(fd, () => {
+      const bytesRead = fs14.readSync(fd, buffer, 0, MAX_LENGTH, 0);
+      fs14.close(fd, () => {
       });
       return buffer.subarray(0, bytesRead);
     };
-    var readFile = (path18) => new Promise((resolve, reject) => {
-      fs13.open(path18, "r", (err, fd) => {
+    var readFile = (path19) => new Promise((resolve, reject) => {
+      fs14.open(path19, "r", (err, fd) => {
         if (err) {
           reject(err);
         } else {
           const buffer = Buffer.alloc(MAX_LENGTH);
-          fs13.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
+          fs14.read(fd, buffer, 0, MAX_LENGTH, 0, (_, bytesRead) => {
             resolve(buffer.subarray(0, bytesRead));
-            fs13.close(fd, () => {
+            fs14.close(fd, () => {
             });
           });
         }
@@ -3172,11 +3455,11 @@ var require_detect_libc = __commonJS({
       }
       return null;
     };
-    var familyFromInterpreterPath = (path18) => {
-      if (path18) {
-        if (path18.includes("/ld-musl-")) {
+    var familyFromInterpreterPath = (path19) => {
+      if (path19) {
+        if (path19.includes("/ld-musl-")) {
           return MUSL;
-        } else if (path18.includes("/ld-linux-")) {
+        } else if (path19.includes("/ld-linux-")) {
           return GLIBC;
         }
       }
@@ -3223,8 +3506,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = await readFile(SELF_PATH);
-        const path18 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path18);
+        const path19 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -3236,8 +3519,8 @@ var require_detect_libc = __commonJS({
       cachedFamilyInterpreter = null;
       try {
         const selfContent = readFileSync(SELF_PATH);
-        const path18 = interpreterPath(selfContent);
-        cachedFamilyInterpreter = familyFromInterpreterPath(path18);
+        const path19 = interpreterPath(selfContent);
+        cachedFamilyInterpreter = familyFromInterpreterPath(path19);
       } catch (e) {
       }
       return cachedFamilyInterpreter;
@@ -3956,7 +4239,7 @@ var init_css_engine = __esm({
 });
 
 // src/plugins/tailwind.ts
-import path8 from "path";
+import path9 from "path";
 import { createRequire as createRequire3 } from "module";
 import { pathToFileURL as pathToFileURL3 } from "url";
 function hasTailwindDirectives(css) {
@@ -3966,7 +4249,7 @@ function hasTailwindDirectives(css) {
 }
 async function loadTailwind(projectRoot) {
   if (cached && cachedRoot === projectRoot) return cached;
-  const req = createRequire3(path8.join(projectRoot, "package.json"));
+  const req = createRequire3(path9.join(projectRoot, "package.json"));
   let nodePath;
   let oxidePath;
   try {
@@ -3987,7 +4270,7 @@ async function compileTailwind(css, fromFile, projectRoot) {
   const { node, oxide } = await loadTailwind(projectRoot);
   const dependencies = [];
   const compiler2 = await node.compile(css, {
-    base: path8.dirname(fromFile),
+    base: path9.dirname(fromFile),
     from: fromFile,
     onDependency: (p) => dependencies.push(p)
   });
@@ -4009,7 +4292,7 @@ var init_tailwind = __esm({
 });
 
 // src/plugins/css.ts
-import path9 from "path";
+import path10 from "path";
 import { SourceMapGenerator } from "source-map-js";
 function cssPlugin(config, engine, consumer = "client") {
   return {
@@ -4133,8 +4416,8 @@ function rewriteCssUrls(css, from, root) {
     if (url.startsWith("/") || url.startsWith("data:") || url.startsWith("http")) {
       return match;
     }
-    const resolved = path9.resolve(path9.dirname(from), url);
-    const relative = "/" + path9.relative(root, resolved).replace(/\\/g, "/");
+    const resolved = path10.resolve(path10.dirname(from), url);
+    const relative = "/" + path10.relative(root, resolved).replace(/\\/g, "/");
     return `url(${relative})`;
   });
 }
@@ -4264,8 +4547,8 @@ function vuePlugin(config, environmentName = "client") {
       let cached2 = descriptorCache.get(filePath);
       if (!cached2) {
         try {
-          const fs13 = await import("fs");
-          const rawSource = fs13.readFileSync(filePath, "utf-8");
+          const fs14 = await import("fs");
+          const rawSource = fs14.readFileSync(filePath, "utf-8");
           const transformedSfc = await applySourceTransform(
             vueOptions.transformSfc,
             rawSource,
@@ -4693,8 +4976,8 @@ __export(runnable_environment_exports, {
   NastiModuleRunner: () => NastiModuleRunner,
   createModuleRunner: () => createModuleRunner
 });
-import path10 from "path";
-import fs8 from "fs";
+import path11 from "path";
+import fs9 from "fs";
 import { builtinModules, createRequire as createRequire4 } from "module";
 import { pathToFileURL as pathToFileURL4 } from "url";
 function createModuleRunner(environment) {
@@ -4728,7 +5011,7 @@ var init_runnable_environment = __esm({
           this.config.mode,
           ssrDefineOverrides(environment.consumer)
         );
-        this.require = createRequire4(path10.join(this.config.root, "package.json"));
+        this.require = createRequire4(path11.join(this.config.root, "package.json"));
         const handlers = {
           fetchModule: async (id, importer) => this.fetchModule(id, importer),
           getBuiltins: () => [/^node:/, ...builtinModules]
@@ -4752,9 +5035,9 @@ var init_runnable_environment = __esm({
         this.cache.clear();
       }
       resolveToId(rawUrl) {
-        if (path10.isAbsolute(rawUrl) && fs8.existsSync(rawUrl.split("?")[0])) return rawUrl;
+        if (path11.isAbsolute(rawUrl) && fs9.existsSync(rawUrl.split("?")[0])) return rawUrl;
         const clean = rawUrl.replace(/^\//, "");
-        return path10.resolve(this.config.root, clean);
+        return path11.resolve(this.config.root, clean);
       }
       /**
        * fetchModule（invoke 契约方法）：环境管线产出 runner 可执行代码。
@@ -4763,14 +5046,14 @@ var init_runnable_environment = __esm({
        */
       async fetchModule(id, importer) {
         if (NODE_BUILTINS.has(id)) return { externalize: id };
-        if (!id.startsWith(".") && !path10.isAbsolute(id) && !id.startsWith("\0")) {
+        if (!id.startsWith(".") && !path11.isAbsolute(id) && !id.startsWith("\0")) {
           return { externalize: id };
         }
         const container = this.environment.pluginContainer;
         let resolvedId = id;
         if (id.startsWith(".") && importer) {
           const resolved = await container.resolveId(id, importer);
-          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path10.resolve(path10.dirname(importer.split("?")[0]), id);
+          resolvedId = resolved ? typeof resolved === "string" ? resolved : resolved.id : path11.resolve(path11.dirname(importer.split("?")[0]), id);
         }
         resolvedId = this.completeExtension(resolvedId);
         const cleanId = resolvedId.split("?")[0];
@@ -4778,8 +5061,8 @@ var init_runnable_environment = __esm({
         const loaded = await container.load(resolvedId);
         if (loaded != null) {
           code = typeof loaded === "string" ? loaded : loaded.code;
-        } else if (fs8.existsSync(cleanId)) {
-          code = fs8.readFileSync(cleanId, "utf-8");
+        } else if (fs9.existsSync(cleanId)) {
+          code = fs9.readFileSync(cleanId, "utf-8");
         } else {
           throw new Error(`[nasti:ssr] cannot load module: ${resolvedId}`);
         }
@@ -4787,12 +5070,32 @@ var init_runnable_environment = __esm({
         if (transformed != null) {
           code = typeof transformed === "string" ? transformed : transformed.code;
         }
-        if (shouldTransform(cleanId)) {
+        if (this.config.framework === "react") {
+          const result = await transformReactCode(cleanId, code, {
+            react: this.config.react,
+            consumer: this.environment.consumer,
+            development: true,
+            sourcemap: false,
+            target: this.environment.options.build.target,
+            onWarning: (message) => this.config.logger.warn(`[nasti:react] ${message}`)
+          });
+          if (result) {
+            code = result.code;
+          } else if (shouldTransform(cleanId)) {
+            const fallback = transformCode(cleanId, code, {
+              sourcemap: false,
+              jsxRuntime: this.config.react.jsxRuntime,
+              jsxImportSource: this.config.react.jsxImportSource,
+              target: this.environment.options.build.target
+            });
+            code = fallback.code;
+          }
+        } else if (shouldTransform(cleanId)) {
           const result = transformCode(cleanId, code, {
             sourcemap: false,
             target: this.environment.options.build.target,
             jsxRuntime: "automatic",
-            jsxImportSource: this.config.framework === "vue" ? "vue" : "react"
+            jsxImportSource: "vue"
           });
           code = result.code;
         }
@@ -4813,19 +5116,19 @@ var init_runnable_environment = __esm({
       completeExtension(id) {
         const clean = id.split("?")[0];
         const query = id.includes("?") ? id.slice(id.indexOf("?")) : "";
-        if (fs8.existsSync(clean) && fs8.statSync(clean).isFile()) return id;
+        if (fs9.existsSync(clean) && fs9.statSync(clean).isFile()) return id;
         const jsMatch = clean.match(/^(.*)\.([mc]?)jsx?$/);
         if (jsMatch) {
           for (const tsExt of [`.${jsMatch[2]}ts`, `.${jsMatch[2]}tsx`]) {
-            if (fs8.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
+            if (fs9.existsSync(jsMatch[1] + tsExt)) return jsMatch[1] + tsExt + query;
           }
         }
         for (const ext of this.config.resolve.extensions) {
-          if (fs8.existsSync(clean + ext)) return clean + ext + query;
+          if (fs9.existsSync(clean + ext)) return clean + ext + query;
         }
         for (const ext of this.config.resolve.extensions) {
-          const indexPath = path10.join(clean, `index${ext}`);
-          if (fs8.existsSync(indexPath)) return indexPath;
+          const indexPath = path11.join(clean, `index${ext}`);
+          if (fs9.existsSync(indexPath)) return indexPath;
         }
         return id;
       }
@@ -4852,10 +5155,10 @@ var init_runnable_environment = __esm({
           return;
         }
         const ssrImport = async (dep) => {
-          if (NODE_BUILTINS.has(dep) || !dep.startsWith(".") && !path10.isAbsolute(dep) && !dep.startsWith("\0")) {
+          if (NODE_BUILTINS.has(dep) || !dep.startsWith(".") && !path11.isAbsolute(dep) && !dep.startsWith("\0")) {
             return this.importExternal(dep);
           }
-          const depId = dep.startsWith(".") ? this.completeExtension(path10.resolve(path10.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
+          const depId = dep.startsWith(".") ? this.completeExtension(path11.resolve(path11.dirname(fetched.id.split("?")[0]), dep)) : this.completeExtension(dep);
           return this.instantiate(depId);
         };
         const ssrExportAll = (sourceModule) => {
@@ -4887,7 +5190,7 @@ var init_runnable_environment = __esm({
       }
       async importExternal(spec) {
         try {
-          return await (spec.startsWith("node:") || !path10.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
+          return await (spec.startsWith("node:") || !path11.isAbsolute(spec) ? import(this.resolveExternalSpecifier(spec)) : import(pathToFileURL4(spec).href));
         } catch (err) {
           throw new Error(`[nasti:ssr] failed to import external "${spec}": ${err.message}`);
         }
@@ -4908,8 +5211,46 @@ var init_runnable_environment = __esm({
   }
 });
 
+// src/plugins/react.ts
+function reactPlugin(config, environment) {
+  return {
+    name: "nasti:oxc-transform",
+    async transform(code, id) {
+      const result = await transformReactCode(id, code, {
+        react: config.react,
+        consumer: environment.consumer,
+        development: config.mode === "development",
+        sourcemap: !!environment.options.build.sourcemap,
+        target: environment.options.build.target,
+        onWarning: (message) => config.logger.warn(`[nasti:react] ${message}`)
+      });
+      if (!result) return null;
+      return {
+        code: result.code,
+        map: result.map ? JSON.parse(result.map) : void 0
+      };
+    },
+    handleHotUpdate(ctx) {
+      for (const mod of ctx.modules) {
+        if (REACT_FILE_RE.test(mod.url) && matchesReactFilter(mod.url, config.react.include, config.react.exclude)) {
+          mod.isSelfAccepting = true;
+        }
+      }
+      return ctx.modules;
+    }
+  };
+}
+var REACT_FILE_RE;
+var init_react = __esm({
+  "src/plugins/react.ts"() {
+    "use strict";
+    init_transformer();
+    REACT_FILE_RE = /\.[jt]sx(?:[?#].*)?$/;
+  }
+});
+
 // src/build/reporter.ts
-import path11 from "path";
+import path12 from "path";
 import { gzipSync } from "zlib";
 import pc5 from "picocolors";
 async function tryNativeReporterPlugin(config, logger) {
@@ -4950,7 +5291,7 @@ function reportBuildOutput(output, config, logger) {
     if (compressed && content != null) {
       gzip = gzipSync(typeof content === "string" ? Buffer.from(content) : content).byteLength;
     }
-    const ext = path11.extname(file.fileName);
+    const ext = path12.extname(file.fileName);
     const group = file.type === "chunk" ? "js" : ext === ".css" ? "css" : "assets";
     entries.push({ name: file.fileName, size, gzip, group });
   }
@@ -4998,12 +5339,12 @@ var init_reporter = __esm({
 });
 
 // src/core/build-app-context.ts
-import fs9 from "fs";
-import path12 from "path";
+import fs10 from "fs";
+import path13 from "path";
 function createBuildAppContext(config, results) {
   const output = [];
   const emitted = /* @__PURE__ */ new Set();
-  const outDir = path12.resolve(config.root, config.build.outDir);
+  const outDir = path13.resolve(config.root, config.build.outDir);
   let environmentArtifacts;
   return {
     config,
@@ -5059,14 +5400,14 @@ function createBuildAppContext(config, results) {
       if (environmentArtifacts.has(collisionKey)) {
         throw new Error(`[nasti] app artifact conflicts with environment output: ${fileName}`);
       }
-      const target = path12.resolve(outDir, ...fileName.split("/"));
-      const relative = path12.relative(outDir, target);
-      if (relative.startsWith("..") || path12.isAbsolute(relative)) {
+      const target = path13.resolve(outDir, ...fileName.split("/"));
+      const relative = path13.relative(outDir, target);
+      if (relative.startsWith("..") || path13.isAbsolute(relative)) {
         throw new Error(`[nasti] app artifact must stay inside build.outDir: ${file.fileName}`);
       }
       assertNoSymlinkComponents(outDir, fileName);
-      fs9.mkdirSync(path12.dirname(target), { recursive: true });
-      fs9.writeFileSync(target, file.source);
+      fs10.mkdirSync(path13.dirname(target), { recursive: true });
+      fs10.writeFileSync(target, file.source);
       const artifact = {
         ...file,
         fileName,
@@ -5082,10 +5423,10 @@ function joinPublicPath(base, fileName) {
   return `${base.endsWith("/") ? base : `${base}/`}${fileName.replace(/^\//, "")}`;
 }
 function normalizeEnvironmentFileName(fileName) {
-  return path12.posix.normalize(fileName.replace(/\\/g, "/").replace(/^\.\//, ""));
+  return path13.posix.normalize(fileName.replace(/\\/g, "/").replace(/^\.\//, ""));
 }
 function isInvalidEnvironmentFileName(fileName) {
-  return !fileName || fileName === "." || fileName === ".." || fileName.startsWith("../") || path12.posix.isAbsolute(fileName) || /^[A-Za-z]:\//.test(fileName);
+  return !fileName || fileName === "." || fileName === ".." || fileName.startsWith("../") || path13.posix.isAbsolute(fileName) || /^[A-Za-z]:\//.test(fileName);
 }
 function normalizeAppFileName(fileName) {
   const normalized = normalizeEnvironmentFileName(fileName);
@@ -5102,14 +5443,14 @@ function collectEnvironmentArtifacts(config, results, appOutDir) {
   for (const [environmentName, result] of Object.entries(results)) {
     const environment = config.environments[environmentName];
     if (!environment) continue;
-    const environmentOutDir = path12.resolve(config.root, environment.build.outDir);
+    const environmentOutDir = path13.resolve(config.root, environment.build.outDir);
     for (const artifact of result.output) {
-      const artifactPath = path12.resolve(
+      const artifactPath = path13.resolve(
         environmentOutDir,
         ...normalizeEnvironmentFileName(artifact.fileName).split("/")
       );
-      const relative = path12.relative(appOutDir, artifactPath);
-      if (!relative.startsWith("..") && !path12.isAbsolute(relative)) {
+      const relative = path13.relative(appOutDir, artifactPath);
+      if (!relative.startsWith("..") && !path13.isAbsolute(relative)) {
         occupied.add(artifactCollisionKey(relative));
       }
     }
@@ -5119,10 +5460,10 @@ function collectEnvironmentArtifacts(config, results, appOutDir) {
 function assertNoSymlinkComponents(outDir, fileName) {
   let current = outDir;
   for (const segment of fileName.split("/")) {
-    current = path12.join(current, segment);
+    current = path13.join(current, segment);
     let stats;
     try {
-      stats = fs9.lstatSync(current);
+      stats = fs10.lstatSync(current);
     } catch (error) {
       if (error.code === "ENOENT") continue;
       throw error;
@@ -5155,8 +5496,8 @@ __export(build_exports, {
   resolveClientEntries: () => resolveClientEntries,
   toRolldownPlugins: () => toRolldownPlugins
 });
-import path13 from "path";
-import fs10 from "fs";
+import path14 from "path";
+import fs11 from "fs";
 import { builtinModules as builtinModules2 } from "module";
 import { rolldown } from "rolldown";
 import pc6 from "picocolors";
@@ -5164,7 +5505,7 @@ function getRolldownOptions(environment, entryPoints, rolldownPlugins) {
   const config = environment.config;
   const envOptions = environment.options;
   const isServer = environment.consumer === "server";
-  const outDir = path13.resolve(config.root, envOptions.build.outDir);
+  const outDir = path14.resolve(config.root, envOptions.build.outDir);
   const assetsDir = envOptions.build.assetsDir;
   const {
     output: userOutput,
@@ -5204,7 +5545,7 @@ function getRolldownOptions(environment, entryPoints, rolldownPlugins) {
       // 相对/绝对/虚拟模块照常打包。需要内联依赖时经 rolldownOptions.external 覆盖。
       external: restInputOptions.external ?? ((id) => {
         if (NODE_BUILTINS2.has(id)) return true;
-        return !id.startsWith(".") && !path13.isAbsolute(id) && !id.startsWith("\0");
+        return !id.startsWith(".") && !path14.isAbsolute(id) && !id.startsWith("\0") && !id.startsWith("virtual:");
       })
     } : {}
   };
@@ -5361,11 +5702,11 @@ function prepareBuildOutputDirectories(config, buildableNames) {
   const protectedPaths = /* @__PURE__ */ new Set();
   const clientIsBuilt = buildableNames.includes("client");
   if (!clientIsBuilt && config.build.emptyOutDir) {
-    directories.add(path13.resolve(config.root, config.build.outDir));
+    directories.add(path14.resolve(config.root, config.build.outDir));
   }
   for (const name of buildableNames) {
     const environment = config.environments[name];
-    const outDir = path13.resolve(config.root, environment.build.outDir);
+    const outDir = path14.resolve(config.root, environment.build.outDir);
     if (!environment.build.emptyOutDir) {
       protectedPaths.add(outDir);
       continue;
@@ -5373,8 +5714,8 @@ function prepareBuildOutputDirectories(config, buildableNames) {
     if (!environment.driver) directories.add(outDir);
   }
   const containsPath = (parent, child) => {
-    const relative = path13.relative(parent, child);
-    return relative === "" || !relative.startsWith("..") && !path13.isAbsolute(relative);
+    const relative = path14.relative(parent, child);
+    return relative === "" || !relative.startsWith("..") && !path14.isAbsolute(relative);
   };
   const roots = [...directories].filter(
     (directory) => ![...protectedPaths].some((protectedPath) => containsPath(directory, protectedPath))
@@ -5382,7 +5723,7 @@ function prepareBuildOutputDirectories(config, buildableNames) {
     (directory, index2, all) => !all.slice(0, index2).some((parent) => containsPath(parent, directory))
   );
   for (const directory of roots) {
-    if (fs10.existsSync(directory)) fs10.rmSync(directory, { recursive: true, force: true });
+    if (fs11.existsSync(directory)) fs11.rmSync(directory, { recursive: true, force: true });
   }
 }
 function assertDriverBuildResult(environment, result) {
@@ -5401,7 +5742,7 @@ function resolveClientEntries(config, html) {
   if (configuredEntries.length > 0) return configuredEntries;
   const entryPoints = [];
   const htmlFile = config.environments.client?.html;
-  const htmlDir = htmlFile ? path13.dirname(htmlFile) : config.root;
+  const htmlDir = htmlFile ? path14.dirname(htmlFile) : config.root;
   if (html) {
     const scriptMatches = html.matchAll(/<script[^>]+src=["']([^"']+)["'][^>]*>/gi);
     for (const match of scriptMatches) {
@@ -5409,7 +5750,7 @@ function resolveClientEntries(config, html) {
       if (src && !src.startsWith("http")) {
         const cleanSrc = src.split(/[?#]/, 1)[0];
         entryPoints.push(
-          cleanSrc.startsWith("/") ? path13.resolve(config.root, cleanSrc.replace(/^\//, "")) : path13.resolve(htmlDir, cleanSrc)
+          cleanSrc.startsWith("/") ? path14.resolve(config.root, cleanSrc.replace(/^\//, "")) : path14.resolve(htmlDir, cleanSrc)
         );
       }
     }
@@ -5417,8 +5758,8 @@ function resolveClientEntries(config, html) {
   if (entryPoints.length === 0) {
     const fallbackEntries = ["src/main.ts", "src/main.tsx", "src/main.js", "src/index.ts", "src/index.tsx", "src/index.js"];
     for (const entry of fallbackEntries) {
-      const fullPath = path13.resolve(config.root, entry);
-      if (fs10.existsSync(fullPath)) {
+      const fullPath = path14.resolve(config.root, entry);
+      if (fs11.existsSync(fullPath)) {
         entryPoints.push(fullPath);
         break;
       }
@@ -5427,6 +5768,7 @@ function resolveClientEntries(config, html) {
   return entryPoints;
 }
 function createOxcTransformPlugin(config, environment) {
+  if (config.framework === "react") return reactPlugin(config, environment);
   return {
     name: "nasti:oxc-transform",
     transform(code, id) {
@@ -5447,7 +5789,7 @@ async function build(inlineConfig = {}) {
   const startTime = performance.now();
   logger.info(
     pc6.cyan(`
-nasti v${"2.4.3"} `) + pc6.green(`building for ${config.mode}...`)
+nasti v${"2.5.0"} `) + pc6.green(`building for ${config.mode}...`)
   );
   debug6?.(`root: ${config.root}`);
   const buildableNames = Object.keys(config.environments).filter((name) => {
@@ -5522,7 +5864,7 @@ nasti v${"2.4.3"} `) + pc6.green(`building for ${config.mode}...`)
 }
 async function buildClientEnvironment(config) {
   const logger = config.logger;
-  const outDir = path13.resolve(config.root, config.build.outDir);
+  const outDir = path14.resolve(config.root, config.build.outDir);
   const cssEngine = createCssEngine();
   const pluginList = resolvePluginList(config, config.plugins, {
     cssEngine,
@@ -5545,8 +5887,8 @@ async function buildClientEnvironment(config) {
       assertDriverBuildResult(clientEnv, result);
       return { environment: clientEnv, result: finalizeEnvironmentResult(clientEnv, result) };
     }
-    fs10.mkdirSync(outDir, { recursive: true });
-    const htmlFile = config.environments.client.html ?? path13.resolve(config.root, "index.html");
+    fs11.mkdirSync(outDir, { recursive: true });
+    const htmlFile = config.environments.client.html ?? path14.resolve(config.root, "index.html");
     const html = await readHtmlFile(config.root, htmlFile);
     const entryPoints = resolveClientEntries(config, html);
     if (entryPoints.length === 0) {
@@ -5596,7 +5938,7 @@ async function buildClientEnvironment(config) {
           );
         }
       }
-      fs10.writeFileSync(path13.resolve(outDir, "index.html"), processedHtml);
+      fs11.writeFileSync(path14.resolve(outDir, "index.html"), processedHtml);
     }
     if (!nativeReporter && config.logLevel !== "silent") {
       reportBuildOutput(output, config, logger);
@@ -5650,7 +5992,7 @@ async function buildServerEnvironment(config, name) {
     }
   }
   for (const entry of envOptions.entry) {
-    if (!fs10.existsSync(entry)) {
+    if (!fs11.existsSync(entry)) {
       await environment.close();
       throw new Error(`[nasti] environment "${name}" entry not found: ${entry}`);
     }
@@ -5664,13 +6006,13 @@ async function buildServerEnvironment(config, name) {
     envOptions.entry,
     rolldownPlugins
   );
-  fs10.mkdirSync(outDir, { recursive: true });
+  fs11.mkdirSync(outDir, { recursive: true });
   const bundle2 = await rolldown(inputOptions);
   const { output } = await bundle2.write(outputOptions);
   await bundle2.close();
   if (cssEngine) environment.setBuildMetadata({ css: getCssMetadata(cssEngine) });
   logger.info(
-    pc6.dim(`  [${name}] `) + output.map((o) => path13.join(envOptions.build.outDir, o.fileName)).join(pc6.dim(", "))
+    pc6.dim(`  [${name}] `) + output.map((o) => path14.join(envOptions.build.outDir, o.fileName)).join(pc6.dim(", "))
   );
   return {
     environment,
@@ -5702,9 +6044,9 @@ function escapeRegExp(string) {
   return string.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function replaceEntryScript(html, facadeModuleId, fileName, config, htmlFile, urlPrefix) {
-  const rootRelative = path13.relative(config.root, facadeModuleId).split(path13.sep).join("/");
-  const resolvedHtmlFile = path13.resolve(config.root, htmlFile);
-  const htmlRelative = path13.relative(path13.dirname(resolvedHtmlFile), facadeModuleId).split(path13.sep).join("/");
+  const rootRelative = path14.relative(config.root, facadeModuleId).split(path14.sep).join("/");
+  const resolvedHtmlFile = path14.resolve(config.root, htmlFile);
+  const htmlRelative = path14.relative(path14.dirname(resolvedHtmlFile), facadeModuleId).split(path14.sep).join("/");
   const candidates = /* @__PURE__ */ new Set([
     rootRelative,
     `/${rootRelative}`,
@@ -5729,6 +6071,7 @@ var init_build = __esm({
     init_environment();
     init_css_engine();
     init_html();
+    init_react();
     init_transformer();
     init_env();
     init_reporter();
@@ -5745,7 +6088,7 @@ var dev_engine_exports = {};
 __export(dev_engine_exports, {
   createBundledDevServer: () => createBundledDevServer
 });
-import path14 from "path";
+import path15 from "path";
 import crypto3 from "crypto";
 import { WebSocketServer as WsServer2 } from "ws";
 import pc7 from "picocolors";
@@ -5775,11 +6118,11 @@ async function createBundledDevServer(opts) {
   const patches = new MemoryFiles();
   const entryFileNames = /* @__PURE__ */ new Map();
   const bundledClients = /* @__PURE__ */ new Map();
-  const useReactRefresh = config.framework !== "vue" && refreshWrapperFn != null;
+  const useReactRefresh = config.framework === "react" && config.server.hmr !== false && refreshWrapperFn != null;
   const rolldownPlugins = [
     ...useReactRefresh ? [
       createReactRefreshRuntimePlugin(entryPoints),
-      createBundledOxcRefreshPlugin()
+      createBundledOxcRefreshPlugin(config)
     ] : [],
     ...stripCatchAllLoad(toRolldownPlugins(clientEnv.plugins, clientEnv)),
     ...useReactRefresh ? [
@@ -5830,7 +6173,7 @@ async function createBundledDevServer(opts) {
       }
       const url = `/${patchPath}`;
       logger.info(
-        pc7.green("hmr update ") + pc7.dim(changedFiles.map((f) => path14.relative(config.root, f)).join(", ")),
+        pc7.green("hmr update ") + pc7.dim(changedFiles.map((f) => path15.relative(config.root, f)).join(", ")),
         { timestamp: true }
       );
       sendTo(clientId, { type: "hmr:update", path: url, url });
@@ -5985,7 +6328,7 @@ async function createBundledDevServer(opts) {
           return;
         }
         res.setHeader("ETag", hit.etag);
-        res.setHeader("Content-Type", MIME_TYPES[path14.extname(fileName)] ?? "application/octet-stream");
+        res.setHeader("Content-Type", MIME_TYPES[path15.extname(fileName)] ?? "application/octet-stream");
         res.setHeader("Cache-Control", "no-cache");
         res.once("finish", () => {
           void engine.notifyPayloadDelivered(fileName).catch(
@@ -6026,7 +6369,7 @@ function stripCatchAllLoad(plugins) {
   );
 }
 function createReactRefreshRuntimePlugin(entryPoints) {
-  const entryIds = new Set(entryPoints.map((p) => path14.resolve(p)));
+  const entryIds = new Set(entryPoints.map((p) => path15.resolve(p)));
   return {
     name: "nasti:bundled-react-refresh",
     resolveId(source) {
@@ -6044,24 +6387,27 @@ function createReactRefreshRuntimePlugin(entryPoints) {
       return null;
     },
     transform(code, id) {
-      if (!entryIds.has(path14.resolve(id.split("?")[0]))) return null;
+      if (!entryIds.has(path15.resolve(id.split("?")[0]))) return null;
       return { code: `import ${JSON.stringify(PREAMBLE_SPEC)};
 ${code}`, map: null };
     }
   };
 }
-function createBundledOxcRefreshPlugin() {
+function createBundledOxcRefreshPlugin(config) {
   return {
     name: "nasti:bundled-oxc-refresh",
-    transform(code, id) {
+    async transform(code, id) {
       const clean = id.split("?")[0];
-      if (!/\.[jt]sx$/.test(clean) || clean.includes("/node_modules/")) return null;
-      const result = transformCode(clean, code, {
+      const result = await transformReactCode(clean, code, {
+        react: config.react,
+        consumer: "client",
+        development: true,
+        reactRefresh: true,
         sourcemap: true,
-        jsxRuntime: "automatic",
-        jsxImportSource: "react",
-        reactRefresh: true
+        target: config.build.target,
+        onWarning: (message) => config.logger.warn(`[nasti:react] ${message}`)
       });
+      if (!result) return null;
       return { code: result.code, map: result.map ? JSON.parse(result.map) : void 0 };
     }
   };
@@ -6215,7 +6561,7 @@ __export(server_exports, {
   createServer: () => createServer
 });
 import http from "http";
-import path15 from "path";
+import path16 from "path";
 import os from "os";
 import connect from "connect";
 import sirv from "sirv";
@@ -6308,20 +6654,39 @@ async function createServer(inlineConfig = {}) {
     app.use(bundledServer.middleware);
   }
   const ignoredSegments = /* @__PURE__ */ new Set(["node_modules", ".git", ".nasti"]);
-  const outDirAbs = path15.resolve(config.root, config.build.outDir);
-  const watcher = watch(config.root, {
+  const outDirAbs = path16.resolve(config.root, config.build.outDir);
+  const linkedPackageRoots = getLinkedPackageRoots(config.root).filter(
+    (r) => r !== config.root && !isUnderRoot(config.root, r)
+  );
+  const watchTargets = [config.root, ...linkedPackageRoots];
+  const watcher = watch(watchTargets, {
     ignored: (filePath) => {
-      if (filePath === config.root) return false;
-      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path15.sep)) return true;
-      const rel = path15.relative(config.root, filePath);
-      if (!rel || rel.startsWith("..") || path15.isAbsolute(rel)) return false;
-      for (const seg of rel.split(path15.sep)) {
-        if (ignoredSegments.has(seg)) return true;
+      if (filePath === outDirAbs || filePath.startsWith(outDirAbs + path16.sep)) return true;
+      for (const watchRoot of watchTargets) {
+        if (filePath === watchRoot) return false;
+        const rel = path16.relative(watchRoot, filePath);
+        if (!rel || rel.startsWith("..") || path16.isAbsolute(rel)) continue;
+        for (const seg of rel.split(path16.sep)) {
+          if (ignoredSegments.has(seg)) return true;
+        }
+        return false;
       }
       return false;
     },
     ignoreInitial: true
   });
+  await new Promise((resolve, reject) => {
+    const onReady = () => {
+      watcher.off("error", onError);
+      resolve();
+    };
+    const onError = (err) => {
+      watcher.off("ready", onReady);
+      reject(err);
+    };
+    watcher.once("ready", onReady);
+    watcher.once("error", onError);
+  });
   let server;
   const environmentServices = {};
   let environmentDriversStarted = false;
@@ -6433,16 +6798,25 @@ async function createServer(inlineConfig = {}) {
     });
   };
   watcher.on("change", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "change");
   });
   watcher.on("add", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     queueClientEnvironmentUpdate(file);
     notifyEnvironmentDrivers(file, "add");
   });
   watcher.on("unlink", (file) => {
+    if (file.includes(`${path16.sep}node_modules${path16.sep}`) || file.endsWith(`${path16.sep}node_modules`)) {
+      clearLinkedPackageRootsCache();
+    }
     ssrRunner?.invalidateFile(file);
     notifyEnvironmentDrivers(file, "unlink");
   });
@@ -6472,7 +6846,7 @@ async function createServer(inlineConfig = {}) {
           const readyIn = Math.ceil(performance.now() - startTime);
           logger.info(
             `
-  ${pc8.cyan(pc8.bold("NASTI"))} ${pc8.cyan(`v${"2.4.3"}`)}  ${pc8.dim("ready in")} ${pc8.bold(readyIn)} ${pc8.dim("ms")}
+  ${pc8.cyan(pc8.bold("NASTI"))} ${pc8.cyan(`v${"2.5.0"}`)}  ${pc8.dim("ready in")} ${pc8.bold(readyIn)} ${pc8.dim("ms")}
 `
           );
           printServerUrls(
@@ -6569,7 +6943,7 @@ async function createServer(inlineConfig = {}) {
     throw error;
   }
   app.use(transformMiddleware(transformContexts.get("client")));
-  const publicDir = path15.resolve(config.root, "public");
+  const publicDir = path16.resolve(config.root, "public");
   app.use(sirv(publicDir, { dev: true, etag: true }));
   app.use(sirv(config.root, { dev: true, etag: true }));
   const postMiddlewares = [];
@@ -6608,6 +6982,7 @@ var init_server = __esm({
     init_builtins();
     init_plugin_api();
     init_env();
+    init_fs_allow();
   }
 });
 
@@ -6658,24 +7033,25 @@ __export(electron_exports, {
   detectInstalledElectron: () => detectInstalledElectron,
   normalizePreload: () => normalizePreload
 });
-import path16 from "path";
-import fs11 from "fs";
+import path17 from "path";
+import fs12 from "fs";
+import { createRequire as createRequire5 } from "module";
 import { rolldown as rolldown2 } from "rolldown";
 import pc9 from "picocolors";
 async function buildElectron(inlineConfig = {}) {
   const config = await resolveConfig({ ...inlineConfig, target: "electron" }, "build");
   const startTime = performance.now();
   assertElectronVersion(config);
-  console.log(pc9.cyan("\n\u26A1 nasti build (electron)") + pc9.dim(` v${"2.4.3"}`));
+  console.log(pc9.cyan("\n\u26A1 nasti build (electron)") + pc9.dim(` v${"2.5.0"}`));
   console.log(pc9.dim(`  root: ${config.root}`));
   console.log(pc9.dim(`  mode: ${config.mode}`));
   console.log(pc9.dim(`  target: electron (\u2265 ${config.electron.minVersion})`));
-  const outDir = path16.resolve(config.root, config.build.outDir);
-  if (config.build.emptyOutDir && fs11.existsSync(outDir)) {
-    fs11.rmSync(outDir, { recursive: true, force: true });
+  const outDir = path17.resolve(config.root, config.build.outDir);
+  if (config.build.emptyOutDir && fs12.existsSync(outDir)) {
+    fs12.rmSync(outDir, { recursive: true, force: true });
   }
-  fs11.mkdirSync(outDir, { recursive: true });
-  const rendererOutDir = path16.join(outDir, "renderer");
+  fs12.mkdirSync(outDir, { recursive: true });
+  const rendererOutDir = path17.join(outDir, "renderer");
   const { build: build2 } = await Promise.resolve().then(() => (init_build(), build_exports));
   await build2(createElectronRendererConfig(config, inlineConfig, {
     build: {
@@ -6684,8 +7060,8 @@ async function buildElectron(inlineConfig = {}) {
       emptyOutDir: false
     }
   }));
-  const mainEntry = path16.resolve(config.root, config.electron.main);
-  if (!fs11.existsSync(mainEntry)) {
+  const mainEntry = path17.resolve(config.root, config.electron.main);
+  if (!fs12.existsSync(mainEntry)) {
     throw new Error(
       `Electron main entry not found: ${config.electron.main}
 \u5728 nasti.config.ts \u7684 electron.main \u6307\u5B9A\u4E3B\u8FDB\u7A0B\u5165\u53E3\u6587\u4EF6\u3002`
@@ -6699,11 +7075,11 @@ async function buildElectron(inlineConfig = {}) {
   const preloadEntries = normalizePreload(config.electron.preload, config.root);
   const preloadFiles = [];
   for (const entry of preloadEntries) {
-    if (!fs11.existsSync(entry)) {
+    if (!fs12.existsSync(entry)) {
       console.warn(pc9.yellow(`  \u26A0 preload entry not found, skipped: ${entry}`));
       continue;
     }
-    const base = path16.basename(entry).replace(/\.[^.]+$/, "");
+    const base = path17.basename(entry).replace(/\.[^.]+$/, "");
     const out = outFileName(outDir, base, config.electron.preloadFormat);
     await bundleNode(config, entry, {
       outFile: out,
@@ -6715,10 +7091,10 @@ async function buildElectron(inlineConfig = {}) {
   const elapsed = ((performance.now() - startTime) / 1e3).toFixed(2);
   console.log(pc9.green(`
 \u2713 Electron build complete in ${elapsed}s`));
-  console.log(pc9.dim(`  renderer: ${path16.relative(config.root, rendererOutDir)}/`));
-  console.log(pc9.dim(`  main:     ${path16.relative(config.root, mainFile)}`));
+  console.log(pc9.dim(`  renderer: ${path17.relative(config.root, rendererOutDir)}/`));
+  console.log(pc9.dim(`  main:     ${path17.relative(config.root, mainFile)}`));
   for (const pf of preloadFiles) {
-    console.log(pc9.dim(`  preload:  ${path16.relative(config.root, pf)}`));
+    console.log(pc9.dim(`  preload:  ${path17.relative(config.root, pf)}`));
   }
   console.log();
   return { rendererOutDir, mainFile, preloadFiles };
@@ -6732,14 +7108,21 @@ async function bundleNode(config, entry, opts) {
   };
   const oxcTransformPlugin = {
     name: "nasti:oxc-transform",
-    transform(code, id) {
-      if (!shouldTransform(id)) return null;
-      const result = transformCode(id, code, {
+    async transform(code, id) {
+      const result = config.framework === "react" ? await transformReactCode(id, code, {
+        react: config.react,
+        consumer: "server",
+        development: config.mode === "development",
+        sourcemap: !!config.build.sourcemap,
+        target: config.electron.nodeTarget,
+        onWarning: (message) => config.logger.warn(`[nasti:react] ${message}`)
+      }) : shouldTransform(id) ? transformCode(id, code, {
         sourcemap: !!config.build.sourcemap,
         jsxRuntime: "automatic",
-        jsxImportSource: config.framework === "vue" ? "vue" : "react",
+        jsxImportSource: "vue",
         target: config.electron.nodeTarget
-      });
+      }) : null;
+      if (!result) return null;
       return { code: result.code, map: result.map ? JSON.parse(result.map) : void 0 };
     }
   };
@@ -6756,7 +7139,7 @@ async function bundleNode(config, entry, opts) {
     },
     plugins: [oxcTransformPlugin, electronPlugin(config), resolvePlugin(config)]
   });
-  fs11.mkdirSync(path16.dirname(opts.outFile), { recursive: true });
+  fs12.mkdirSync(path17.dirname(opts.outFile), { recursive: true });
   await bundle2.write({
     sourcemap: !!config.build.sourcemap,
     minify: !!config.build.minify,
@@ -6767,7 +7150,7 @@ async function bundleNode(config, entry, opts) {
     codeSplitting: false
   });
   await bundle2.close();
-  console.log(pc9.dim(`  \u2713 ${opts.label} \u2192 ${path16.relative(config.root, opts.outFile)}`));
+  console.log(pc9.dim(`  \u2713 ${opts.label} \u2192 ${path17.relative(config.root, opts.outFile)}`));
   return opts.outFile;
 }
 function createElectronRendererConfig(config, inlineConfig = {}, overrides = {}) {
@@ -6791,11 +7174,11 @@ function createElectronRendererConfig(config, inlineConfig = {}, overrides = {})
 }
 function outFileName(outDir, base, format) {
   const ext = format === "cjs" ? ".cjs" : ".mjs";
-  return path16.join(outDir, base + ext);
+  return path17.join(outDir, base + ext);
 }
 function normalizePreload(preload, root) {
   const list = Array.isArray(preload) ? preload : preload ? [preload] : [];
-  return list.map((p) => path16.resolve(root, p));
+  return list.map((p) => path17.resolve(root, p));
 }
 function assertElectronVersion(config) {
   const min = config.electron.minVersion;
@@ -6810,13 +7193,21 @@ function assertElectronVersion(config) {
 }
 function detectInstalledElectron(root) {
   try {
-    const pkgPath = path16.resolve(root, "node_modules/electron/package.json");
-    if (!fs11.existsSync(pkgPath)) return null;
-    const pkg = JSON.parse(fs11.readFileSync(pkgPath, "utf-8"));
+    const require2 = createRequire5(path17.resolve(root, "package.json"));
+    const pkgPath = require2.resolve("electron/package.json");
+    const pkg = JSON.parse(fs12.readFileSync(pkgPath, "utf-8"));
     const major = parseInt(String(pkg.version).split(".")[0], 10);
     return Number.isFinite(major) ? major : null;
   } catch {
-    return null;
+    try {
+      const pkgPath = path17.resolve(root, "node_modules/electron/package.json");
+      if (!fs12.existsSync(pkgPath)) return null;
+      const pkg = JSON.parse(fs12.readFileSync(pkgPath, "utf-8"));
+      const major = parseInt(String(pkg.version).split(".")[0], 10);
+      return Number.isFinite(major) ? major : null;
+    } catch {
+      return null;
+    }
   }
 }
 var init_electron2 = __esm({
@@ -6836,9 +7227,9 @@ __export(electron_dev_exports, {
   electronRendererDevPath: () => electronRendererDevPath,
   startElectronDev: () => startElectronDev
 });
-import path17 from "path";
-import fs12 from "fs";
-import { createRequire as createRequire5 } from "module";
+import path18 from "path";
+import fs13 from "fs";
+import { createRequire as createRequire6 } from "module";
 import { spawn } from "child_process";
 import chokidar from "chokidar";
 import pc10 from "picocolors";
@@ -6847,7 +7238,7 @@ async function startElectronDev(inlineConfig = {}) {
   const { noSpawn, ...rest } = inlineConfig;
   const config = await resolveConfig({ ...rest, target: "electron" }, "serve");
   warnElectronVersion(config);
-  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.4.3"}`));
+  console.log(pc10.cyan("\n\u26A1 nasti electron dev") + pc10.dim(` v${"2.5.0"}`));
   const { createServer: createServer2 } = await Promise.resolve().then(() => (init_server(), server_exports));
   const server = await createServer2({
     ...rest,
@@ -6857,11 +7248,11 @@ async function startElectronDev(inlineConfig = {}) {
   await server.listen();
   const devUrl = `http://localhost:${server.config.server.port}` + electronRendererDevPath(config.electron.renderer);
   console.log(pc10.dim(`  renderer: ${devUrl}`));
-  const stageDir = path17.resolve(config.root, ".nasti");
-  fs12.mkdirSync(stageDir, { recursive: true });
-  const mainEntry = path17.resolve(config.root, config.electron.main);
+  const stageDir = path18.resolve(config.root, ".nasti");
+  fs13.mkdirSync(stageDir, { recursive: true });
+  const mainEntry = path18.resolve(config.root, config.electron.main);
   const preloadEntries = normalizePreload(config.electron.preload, config.root);
-  const builtMainFile = path17.join(stageDir, "main" + extFor(config.electron.mainFormat));
+  const builtMainFile = path18.join(stageDir, "main" + extFor(config.electron.mainFormat));
   const builtPreloadFiles = [];
   const compileAll = async () => {
     await compileNode(config, mainEntry, {
@@ -6871,9 +7262,9 @@ async function startElectronDev(inlineConfig = {}) {
     });
     builtPreloadFiles.length = 0;
     for (const entry of preloadEntries) {
-      if (!fs12.existsSync(entry)) continue;
-      const base = path17.basename(entry).replace(/\.[^.]+$/, "");
-      const out = path17.join(stageDir, base + extFor(config.electron.preloadFormat));
+      if (!fs13.existsSync(entry)) continue;
+      const base = path18.basename(entry).replace(/\.[^.]+$/, "");
+      const out = path18.join(stageDir, base + extFor(config.electron.preloadFormat));
       await compileNode(config, entry, {
         outFile: out,
         format: config.electron.preloadFormat,
@@ -6912,7 +7303,7 @@ async function startElectronDev(inlineConfig = {}) {
   };
   spawnElectron();
   if (config.electron.autoRestart) {
-    const watchTargets = [mainEntry, ...preloadEntries].filter(fs12.existsSync);
+    const watchTargets = [mainEntry, ...preloadEntries].filter(fs13.existsSync);
     const watcher = chokidar.watch(watchTargets, { ignoreInitial: true });
     let restarting = null;
     let pending = false;
@@ -6972,14 +7363,21 @@ async function compileNode(config, entry, opts) {
   };
   const oxcTransformPlugin = {
     name: "nasti:oxc-transform",
-    transform(code, id) {
-      if (!shouldTransform(id)) return null;
-      const result = transformCode(id, code, {
+    async transform(code, id) {
+      const result = config.framework === "react" ? await transformReactCode(id, code, {
+        react: config.react,
+        consumer: "server",
+        development: true,
+        sourcemap: true,
+        target: config.electron.nodeTarget,
+        onWarning: (message) => config.logger.warn(`[nasti:react] ${message}`)
+      }) : shouldTransform(id) ? transformCode(id, code, {
         sourcemap: true,
         jsxRuntime: "automatic",
-        jsxImportSource: config.framework === "vue" ? "vue" : "react",
+        jsxImportSource: "vue",
         target: config.electron.nodeTarget
-      });
+      }) : null;
+      if (!result) return null;
       return { code: result.code, map: result.map ? JSON.parse(result.map) : void 0 };
     }
   };
@@ -6992,7 +7390,7 @@ async function compileNode(config, entry, opts) {
     platform: "node",
     plugins: [oxcTransformPlugin, electronPlugin(config), resolvePlugin(config)]
   });
-  fs12.mkdirSync(path17.dirname(opts.outFile), { recursive: true });
+  fs13.mkdirSync(path18.dirname(opts.outFile), { recursive: true });
   await bundle2.write({
     file: opts.outFile,
     format: opts.format === "cjs" ? "cjs" : "esm",
@@ -7005,18 +7403,18 @@ async function compileNode(config, entry, opts) {
   await bundle2.close();
 }
 function electronRendererDevPath(renderer) {
-  const normalized = renderer.split(path17.sep).join("/").replace(/^\.?\//, "");
+  const normalized = renderer.split(path18.sep).join("/").replace(/^\.?\//, "");
   return normalized === "index.html" ? "/" : `/${normalized}`;
 }
 function resolveElectronBinary(config) {
-  if (config.electron.electronPath && fs12.existsSync(config.electron.electronPath)) {
+  if (config.electron.electronPath && fs13.existsSync(config.electron.electronPath)) {
     return config.electron.electronPath;
   }
   try {
-    const require2 = createRequire5(path17.resolve(config.root, "package.json"));
+    const require2 = createRequire6(path18.resolve(config.root, "package.json"));
     const pathFile = require2.resolve("electron");
     const electronModule = require2(pathFile);
-    if (typeof electronModule === "string" && fs12.existsSync(electronModule)) {
+    if (typeof electronModule === "string" && fs13.existsSync(electronModule)) {
       return electronModule;
     }
   } catch {
@@ -7191,20 +7589,20 @@ cli.command("preview [root]", "Preview production build").option("--port <port>"
   const logger = createCliLogger(options);
   try {
     const http2 = await import("http");
-    const path18 = await import("path");
+    const path19 = await import("path");
     const os2 = await import("os");
     const sirv2 = (await import("sirv")).default;
     const connect2 = (await import("connect")).default;
     const { printServerUrls: printServerUrls2 } = await Promise.resolve().then(() => (init_logger(), logger_exports));
-    const resolvedRoot = path18.resolve(root ?? ".");
-    const outDir = path18.resolve(resolvedRoot, options.outDir);
+    const resolvedRoot = path19.resolve(root ?? ".");
+    const outDir = path19.resolve(resolvedRoot, options.outDir);
     const app = connect2();
     app.use(sirv2(outDir, { single: true, etag: true, gzip: true, brotli: true }));
     const port = options.port;
     const host = options.host === true ? "0.0.0.0" : options.host ?? "localhost";
     http2.createServer(app).listen(port, host, () => {
       logger.info(`
-  ${pc11.cyan(pc11.bold("NASTI"))} ${pc11.cyan(`v${"2.4.3"}`)}  ${pc11.dim("preview")}
+  ${pc11.cyan(pc11.bold("NASTI"))} ${pc11.cyan(`v${"2.5.0"}`)}  ${pc11.dim("preview")}
 `);
       printServerUrls2(
         {
@@ -7221,6 +7619,6 @@ cli.command("preview [root]", "Preview production build").option("--port <port>"
   }
 });
 cli.help();
-cli.version("2.4.3");
+cli.version("2.5.0");
 cli.parse();
 //# sourceMappingURL=cli.js.map