@nimbus-sh/worker 0.12.0 → 0.13.0

package/dist/facets/data-plan.d.ts

@@ -1,30 +1,4 @@
-/**
- * Which file contents a resident node process holds from its first
- * instruction, besides its module map.
- *
- * A synchronous read cannot wait for bytes, so whatever a process reads
- * synchronously has to be in its facet before it runs; the namespace (every
- * name and stat) is always there, content is not. This decides content by
- * rule, from the namespace and the module closure, without reading file
- * contents except a few package.json files:
- *
- *   package-json   every package.json
- *   project        the working tree, minus dependency, VCS and build-cache dirs
- *   convention     config and lockfile names in the working dir and above it
- *   package-data   non-code files under 256 KiB in every package the closure uses
- *   home           $HOME's dot entries (tool config, skills), minus caches
- *   typescript     when the closure has typescript: its lib .d.ts, @types/**,
- *                  and the declaration files of the packages @types depends on
- *   static         what the closure's own code names by a foldable path
- *                  (static-fs-refs.ts), resolved against the namespace:
- *                  under 256 KiB, or any size when the code reads it with
- *                  readFileSync (or a read-only openSync) by that path,
- *                  through any symlinks on it
- *   learned        paths earlier launches of the same package versions missed
- *
- * Code the closure loads is in the module map already; the store adopts it,
- * so it is readable as data too.
- */
+import type { RuntimeFsBridge } from '@nimbus-sh/core/runtime/os-contracts.js';
 import type { StaticFsRefs } from '@nimbus-sh/core/runtime/static-fs-refs.js';
 export interface DataPlanEntry {
     path: string;
@@ -40,8 +14,12 @@ export interface DataPlanSource {
     }>;
     /** A file's text, or null when it cannot be read. */
     readText(path: string): Promise<string | null>;
-    /** A symlink's target as stored, or null when the path is not a symlink. */
-    readlink(path: string): Promise<string | null>;
+    /**
+     * Where the symlink at a path leads, as the namespace follows it (its
+     * stored target, re-rooted on a mount that reads its links from its own
+     * root: RuntimeFsBridge.linkLeadsTo), or null when the path is not a symlink.
+     */
+    linkTarget(path: string): Promise<string | null>;
     /** What is at a path, following symlinks, or null. */
     stat(path: string): Promise<{
         kind: string;
@@ -59,7 +37,7 @@ export interface DataPlanInput {
     /** Called with the bytes of each listed page, to pace a long walk. */
     spend?: (units: number) => Promise<void>;
 }
-export type DataPlanRule = 'package-json' | 'project' | 'convention' | 'package-data' | 'home' | 'typescript' | 'static' | 'learned';
+export type DataPlanRule = 'package-json' | 'project' | 'convention' | 'package-data' | 'home' | 'typescript' | 'static' | 'entries' | 'learned';
 export interface DataPlan {
     paths: string[];
     bytes: number;
@@ -72,6 +50,12 @@ export interface DataPlan {
 export declare const PACKAGE_DATA_MAX_BYTES: number;
 /** The package directory a path sits in: up to the name after its last node_modules. */
 export declare function packageRootOf(k: string): string | null;
+/**
+ * DataPlanSource.linkTarget over a process's bridge: where the symlink at
+ * `path` leads as the namespace follows it, or null when it is no link. A
+ * missing or unreadable component is not a link: the lookup ends there.
+ */
+export declare function linkTargetOf(fs: Pick<RuntimeFsBridge, 'readlink' | 'linkLeadsTo'>, path: string): Promise<string | null>;
 /**
  * The plan for one launch. Walks the namespace once, in pages.
  */

package/dist/facets/data-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-plan.d.ts","sourceRoot":"","sources":["../../src/facets/data-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AAEhG,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvF,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,sDAAsD;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,YAAY,GACpB,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9G,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,QAAa,CAAC;AAkCjD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOtD;AA0GD;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiQnG"}
+{"version":3,"file":"data-plan.d.ts","sourceRoot":"","sources":["../../src/facets/data-plan.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,WAAW,aAAa;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AAEhG,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACvF,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjD,sDAAsD;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IAC9B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,YAAY,GACpB,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1H,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,QAAa,CAAC;AAkCjD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOtD;AAgID;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO9H;AA6BD;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+RnG"}

package/dist/facets/data-plan.js

@@ -1,3 +1,36 @@
+/**
+ * Which file contents a resident node process holds from its first
+ * instruction, besides its module map.
+ *
+ * A synchronous read cannot wait for bytes, so whatever a process reads
+ * synchronously has to be in its facet before it runs; the namespace (every
+ * name and stat) is always there, content is not. This decides content by
+ * rule, from the namespace and the module closure, without reading file
+ * contents except a few package.json files:
+ *
+ *   package-json   every package.json
+ *   project        the working tree, minus dependency, VCS and build-cache dirs
+ *   convention     config and lockfile names in the working dir and above it
+ *   package-data   non-code files under 256 KiB in every package the closure uses
+ *   home           $HOME's dot entries (tool config, skills), minus caches
+ *   typescript     when the closure has typescript: its lib .d.ts, @types/**,
+ *                  and the declaration files of the packages @types depends on
+ *   static         what the closure's own code names by a foldable path
+ *                  (static-fs-refs.ts), resolved against the namespace:
+ *                  under 256 KiB, or any size when the code reads it with
+ *                  readFileSync (or a read-only openSync) by that path,
+ *                  through any symlinks on it
+ *   entries        the entry files the working dir's own dependencies name
+ *                  (exports under every condition, module, main, browser),
+ *                  under 256 KiB: a dev server reads them synchronously to
+ *                  pre-bundle what the app imports (Vite's optimizer reads
+ *                  each with readFileSync), and the process never loads them
+ *   learned        paths earlier launches of the same package versions missed
+ *
+ * Code the closure loads is in the module map already; the store adopts it,
+ * so it is readable as data too.
+ */
+import { resolveFile } from '@nimbus-sh/core/runtime/require-resolution.js';
 /** Package data this size or larger is a bundle or a binary, not configuration. */
 export const PACKAGE_DATA_MAX_BYTES = 256 * 1024;
 const CODE_FILE = /\.(?:c|m)?(?:j|t)sx?$|\.map$|\.d\.(?:c|m)?ts$|\.node$|\.wasm$/;
@@ -74,6 +107,39 @@ function exportTarget(value) {
     }
     return null;
 }
+/**
+ * Every file a package.json names as an entry, relative to its package:
+ * each subpath's `exports` targets under every condition (a dev server
+ * resolves for the browser, the process for node), and `module`, `main` and
+ * a string `browser`. Subpath patterns name no file until a specifier fills
+ * them, so they name none here.
+ */
+function entryTargets(manifest) {
+    const out = new Set();
+    const leaves = (value) => {
+        if (typeof value === 'string') {
+            if (!value.includes('*'))
+                out.add(value);
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const v of value)
+                leaves(v);
+            return;
+        }
+        if (value && typeof value === 'object')
+            for (const v of Object.values(value))
+                leaves(v);
+    };
+    leaves(manifest.exports);
+    for (const field of ['module', 'main', 'browser']) {
+        if (typeof manifest[field] === 'string')
+            out.add(manifest[field]);
+    }
+    if (manifest.exports === undefined && manifest.main === undefined)
+        out.add('index.js');
+    return [...out];
+}
 /** Map `./sub` through a package.json `exports` field; null when it does not export it. */
 function mapExports(exportsField, sub) {
     if (typeof exportsField !== 'object' || exportsField === null || Array.isArray(exportsField)) {
@@ -103,6 +169,21 @@ function mapExports(exportsField, sub) {
         return null;
     return t.replaceAll('*', sub.slice(best.prefix.length, sub.length - best.suffix.length));
 }
+/** A directory's package.json, parsed once per plan; null when absent or not JSON. */
+async function readManifest(source, dir, manifests) {
+    let manifest = manifests.get(dir);
+    if (manifest === undefined) {
+        const text = await source.readText(joinKey(dir, 'package.json'));
+        try {
+            manifest = text === null ? null : JSON.parse(text);
+        }
+        catch {
+            manifest = null;
+        }
+        manifests.set(dir, manifest);
+    }
+    return manifest;
+}
 async function resolveSpecifier(source, fromDir, spec, manifests) {
     const parts = spec.split('/');
     const nameLen = spec.startsWith('@') ? 2 : 1;
@@ -113,17 +194,7 @@ async function resolveSpecifier(source, fromDir, spec, manifests) {
     for (let dir = fromDir;; dir = parentOf(dir)) {
         if (baseOf(dir) !== 'node_modules') {
             const pkgDir = joinKey(dir, 'node_modules/' + name);
-            let manifest = manifests.get(pkgDir);
-            if (manifest === undefined) {
-                const text = await source.readText(pkgDir + '/package.json');
-                try {
-                    manifest = text === null ? null : JSON.parse(text);
-                }
-                catch {
-                    manifest = null;
-                }
-                manifests.set(pkgDir, manifest);
-            }
+            const manifest = await readManifest(source, pkgDir, manifests);
             if (manifest) {
                 const mapped = manifest.exports !== undefined ? mapExports(manifest.exports, sub ? './' + sub : '.') : null;
                 if (mapped)
@@ -135,6 +206,37 @@ async function resolveSpecifier(source, fromDir, spec, manifests) {
             return null;
     }
 }
+/** The resolver's filesystem (require-resolution.ts) over the plan's source. */
+function resolutionFs(source) {
+    return {
+        exists: async (path) => (await source.stat(path)) !== null,
+        isDirectory: async (path) => (await source.stat(path))?.kind === 'directory',
+        readFileString: async (path) => {
+            const text = await source.readText(path);
+            if (text === null)
+                throw Object.assign(new Error(`ENOENT: ${path}`), { code: 'ENOENT' });
+            return text;
+        },
+        stat: async (path) => {
+            const found = await source.stat(path);
+            return found === null ? null : { size: found.size };
+        },
+    };
+}
+/**
+ * DataPlanSource.linkTarget over a process's bridge: where the symlink at
+ * `path` leads as the namespace follows it, or null when it is no link. A
+ * missing or unreadable component is not a link: the lookup ends there.
+ */
+export async function linkTargetOf(fs, path) {
+    try {
+        const text = await fs.readlink(path);
+        return text === null ? null : await fs.linkLeadsTo(path, text);
+    }
+    catch {
+        return null;
+    }
+}
 /** Symlinks a lookup follows before it gives up (Linux's MAXSYMLINKS). */
 const MAX_LINK_HOPS = 40;
 /**
@@ -149,7 +251,7 @@ async function throughLinks(source, k) {
         let followed = false;
         for (let i = 1; i <= segs.length; i++) {
             const at = segs.slice(0, i).join('/');
-            const target = await source.readlink('/' + at);
+            const target = await source.linkTarget('/' + at);
             if (target === null)
                 continue;
             const base = target.startsWith('/') ? key(target) : joinKey(parentOf(at), target);
@@ -209,7 +311,7 @@ export async function planFacetData(source, input) {
     const learned = new Set();
     for (const p of input.learned ?? [])
         learned.add(key(p));
-    const rules = Object.fromEntries(['package-json', 'project', 'convention', 'package-data', 'home', 'typescript', 'static', 'learned']
+    const rules = Object.fromEntries(['package-json', 'project', 'convention', 'package-data', 'home', 'typescript', 'static', 'entries', 'learned']
         .map((r) => [r, { files: 0, bytes: 0 }]));
     const paths = [];
     const planned = new Set();
@@ -448,6 +550,44 @@ export async function planFacetData(source, input) {
                 take(entry, 'static');
         }
     }
+    // The working dir's dependencies' entries, each the file Node's resolver
+    // loads for it (require-resolution.ts, as the module-map walk resolves): a
+    // `main` without its extension, or naming a directory with a package.json
+    // of its own.
+    const files = resolutionFs(source);
+    const projectManifest = await readManifest(source, cwd, manifests);
+    const dependencies = new Set();
+    for (const field of ['dependencies', 'devDependencies', 'optionalDependencies']) {
+        const named = projectManifest?.[field];
+        if (named && typeof named === 'object')
+            for (const name of Object.keys(named))
+                dependencies.add(name);
+    }
+    for (const name of dependencies) {
+        let pkgDir = null;
+        for (let d = cwd; pkgDir === null; d = parentOf(d)) {
+            if (packageRoots.has(joinKey(d, 'node_modules/' + name)))
+                pkgDir = joinKey(d, 'node_modules/' + name);
+            if (d === '')
+                break;
+        }
+        if (pkgDir === null)
+            continue;
+        const manifest = await readManifest(source, pkgDir, manifests);
+        if (manifest === null)
+            continue;
+        for (const rel of entryTargets(manifest)) {
+            const resolved = await resolveFile(files, joinKey(pkgDir, rel));
+            const k = resolved === null ? null : await throughLinks(source, resolved);
+            if (k === null)
+                continue;
+            const found = await source.stat(k);
+            if (found === null || found.kind !== 'file')
+                continue;
+            if (found.size < PACKAGE_DATA_MAX_BYTES && !closure.has(k))
+                take({ path: k, kind: 'file', size: found.size }, 'entries');
+        }
+    }
     // The files behind symlinked directories the project or home rule reached.
     if (linkedDirs.length > 0) {
         after = null;

package/dist/facets/dev-stylesheet.d.ts

@@ -0,0 +1,27 @@
+/**
+ * dev-stylesheet.ts — a stylesheet as the Vite dev server serves it: its
+ * local `@import`s inlined by the CSS layer and rules `vite build` bundles
+ * with (core runtime/css-bundle.ts, on css-tree), so dev and build agree on
+ * what an import means: its conditions wrap what it imports (`@media`,
+ * `@supports`, `@layer`), a sheet imported twice keeps its last place,
+ * imports of remote sheets are hoisted, nested imports are followed.
+ *
+ * Unlike a build, nothing is emitted: each `url()` becomes its file's path
+ * from the project root (under the dev server's base), so a `url()` in an
+ * inlined sheet still names its file wherever the sheet that imported it is
+ * served. An `@import` that names no file in the project stays an `@import`
+ * for the browser to fetch and report.
+ */
+/** The reads a stylesheet needs from the dev server's VFS. */
+export interface DevStylesheetFs {
+    exists(path: string): boolean;
+    isDirectory(path: string): boolean;
+    readFileString(path: string): string;
+}
+/**
+ * The stylesheet at `vfsPath` (under the project's `root`), its imports
+ * inlined, its url()s rooted at `base`. A sheet the CSS layer refuses (an
+ * `@import` with no URL) is served as written, the reason in a comment first.
+ */
+export declare function devStylesheet(fs: DevStylesheetFs, root: string, base: string, vfsPath: string): Promise<string>;
+//# sourceMappingURL=dev-stylesheet.d.ts.map

package/dist/facets/dev-stylesheet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-stylesheet.d.ts","sourceRoot":"","sources":["../../src/facets/dev-stylesheet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACtC;AAeD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BrH"}

package/dist/facets/dev-stylesheet.js

@@ -0,0 +1,65 @@
+/**
+ * dev-stylesheet.ts — a stylesheet as the Vite dev server serves it: its
+ * local `@import`s inlined by the CSS layer and rules `vite build` bundles
+ * with (core runtime/css-bundle.ts, on css-tree), so dev and build agree on
+ * what an import means: its conditions wrap what it imports (`@media`,
+ * `@supports`, `@layer`), a sheet imported twice keeps its last place,
+ * imports of remote sheets are hoisted, nested imports are followed.
+ *
+ * Unlike a build, nothing is emitted: each `url()` becomes its file's path
+ * from the project root (under the dev server's base), so a `url()` in an
+ * inlined sheet still names its file wherever the sheet that imported it is
+ * served. An `@import` that names no file in the project stays an `@import`
+ * for the browser to fetch and report.
+ */
+import { bundleCss, CssError } from '@nimbus-sh/core/runtime/css-bundle.js';
+const dirOf = (path) => path.slice(0, path.lastIndexOf('/')) || '/';
+/** `path` with `.` and `..` segments resolved, leading slash as given. */
+function normalize(path) {
+    const out = [];
+    for (const segment of path.split('/')) {
+        if (segment === '' || segment === '.')
+            continue;
+        if (segment === '..')
+            out.pop();
+        else
+            out.push(segment);
+    }
+    return (path.startsWith('/') ? '/' : '') + out.join('/');
+}
+/**
+ * The stylesheet at `vfsPath` (under the project's `root`), its imports
+ * inlined, its url()s rooted at `base`. A sheet the CSS layer refuses (an
+ * `@import` with no URL) is served as written, the reason in a comment first.
+ */
+export async function devStylesheet(fs, root, base, vfsPath) {
+    const source = fs.readFileString(vfsPath);
+    const rootedUrl = (path) => `${base}/${path.slice(root.length).replace(/^\/+/, '')}`;
+    const plugin = {
+        name: 'nimbus-dev-css',
+        async resolve({ path, resolveDir, kind }) {
+            const suffix = /[?#].*$/.exec(path)?.[0] ?? '';
+            const bare = path.slice(0, path.length - suffix.length);
+            const target = normalize(bare.startsWith('/') ? `${root}${bare}` : `${resolveDir}/${bare}`);
+            if (kind === 'url-token')
+                return { path: rootedUrl(target) + suffix, external: true };
+            if (!fs.exists(target) || fs.isDirectory(target))
+                return { path, external: true };
+            return { path: target, namespace: 'file' };
+        },
+        async load({ path }) {
+            return { contents: fs.readFileString(path), loader: 'css', resolveDir: dirOf(path) };
+        },
+    };
+    const unused = () => {
+        throw new Error('a dev stylesheet emits no assets');
+    };
+    try {
+        return (await bundleCss([{ namespace: 'file', path: vfsPath, resolveDir: dirOf(vfsPath), source }], plugin, { emit: unused, dataUrl: unused }, { minify: false })).css;
+    }
+    catch (error) {
+        if (error instanceof CssError)
+            return `/* ${error.message.replace(/\*\//g, '* /')} */\n${source}`;
+        throw error;
+    }
+}

package/dist/facets/esbuild-transform.d.ts

@@ -5,8 +5,8 @@ import type { NamespaceFs } from '@nimbus-sh/core/runtime/process-files.js';
 export declare const ESBUILD_FACET_WORKER_ID: string;
 /**
  * Slim Worker Loader module whose DO class owns the esbuild wasm.
- * `wasmModule` is the host Worker's own compiled esbuild module
- * (runtime/host-wasm.ts), shared with the facet rather than compiled again.
+ * `wasm` is the staged esbuild.wasm (fetchEsbuildWasmBytes), compiled by the
+ * facet's module map at its startup: no other isolate holds it.
  * `jsFnBody` is the staged adapter (fetchEsbuildJsFnBody), compiled into a
  * factory at startup, the one moment code may be generated from a string;
  * each call of the factory is a separate esbuild, and takes the `WebAssembly`
@@ -14,21 +14,18 @@ export declare const ESBUILD_FACET_WORKER_ID: string;
  * the global one unless given). `cliRunner` is the staged runner of the
  * `esbuild` command (fetchEsbuildCliRunner).
  */
-export declare function esbuildFacetWorkerCode(wasmModule: WebAssembly.Module, jsFnBody: string, cliRunner: string): WorkerCode;
+export declare function esbuildFacetWorkerCode(wasm: ArrayBuffer, jsFnBody: string, cliRunner: string, transformRuntime: string): WorkerCode;
 /**
- * The transform host a Durable Object's esbuild runs its transforms on: its
- * esbuild facet, a slice per call. Transforms are pure, so a slice whose call
- * failed (the facet reset, the connection dropped) is sent once more, to a
- * freshly minted stub; an overloaded facet is not asked again. A slice that
- * still fails answers each of its requests with a transient error, which is
- * no verdict on the source, and the other slices keep their answers.
+ * Where the transform facet sends a module that ran Oxc out of native stack
+ * (oxcTransformHost): the esbuild facet, whose Go stacks grow. One call per
+ * batch; the caller answers a failed call as transient.
  */
-export declare function esbuildTransformHost(ctx: DurableObjectState, env: unknown): EsbuildTransformHost;
+export declare function esbuildStackFallbackHost(ctx: DurableObjectState, env: unknown): EsbuildTransformHost;
 /**
- * The build host a Durable Object's esbuild runs its builds on: its esbuild
- * facet. The plugin, and with it every file read, stays with the caller.
+ * Where the build facet sends a build whose rolldown binding died under it
+ * (rolldownBuildHost): the esbuild facet, whose Go stacks grow.
  */
-export declare function esbuildBuildHost(ctx: DurableObjectState, env: unknown): EsbuildBuildHost;
+export declare function esbuildBuildFallbackHost(ctx: DurableObjectState, env: unknown): EsbuildBuildHost;
 /**
  * Runs one `esbuild` command in the Durable Object's esbuild facet, as
  * process `pid`: its files go through a supervisor capability minted for that
@@ -37,11 +34,19 @@ export declare function esbuildBuildHost(ctx: DurableObjectState, env: unknown):
  */
 export declare function runEsbuildCli(ctx: DurableObjectState, env: unknown, pid: number, args: EsbuildCliArgs, output: EsbuildCliOutput): Promise<number>;
 /**
- * The esbuild a Durable Object's supervisor shares: its transforms and its
- * builds run in its esbuild facet, and build() reads `vfs` from here. The
- * facet's code (ESBUILD_FACET_WORKER_ID: the esbuild version, the facet body
- * and the staged CLI runner) is the host's identity, which the launch's
- * transform store keys its results by.
+ * What a transform from supervisorEsbuildService's host is a function of:
+ * the transform facet's code (OXC_FACET_WORKER_ID) and, for a module too deep
+ * for it, the esbuild facet's (ESBUILD_FACET_WORKER_ID, which carries the
+ * esbuild version). The launch's transform store keys results by it, so a new
+ * build of either engine misses every stored result.
+ */
+export declare const TRANSFORM_HOST_ID: string;
+/**
+ * The transforms and builds a Durable Object's supervisor shares: transforms
+ * run in its transform facet (oxc-transform.ts), builds in its build facet
+ * (build-facet.ts, rolldown), each with the esbuild facet for what its engine
+ * cannot finish, and build() reads `vfs` from here. TRANSFORM_HOST_ID is
+ * the host's identity, which the launch's transform store keys its results by.
  */
 export declare function supervisorEsbuildService(ctx: DurableObjectState, env: unknown, vfs: NamespaceFs): EsbuildService;
 //# sourceMappingURL=esbuild-transform.d.ts.map

package/dist/facets/esbuild-transform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-transform.d.ts","sourceRoot":"","sources":["../../src/facets/esbuild-transform.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAGd,KAAK,gBAAgB,EAIrB,KAAK,oBAAoB,EAG1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAU/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAKpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAqE5E,eAAO,MAAM,uBAAuB,QAAqG,CAAC;AAQ1I;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAoBtH;AA4ED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAkChG;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAIxF;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,cAAc,CAMhH"}
+{"version":3,"file":"esbuild-transform.d.ts","sourceRoot":"","sources":["../../src/facets/esbuild-transform.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAGd,KAAK,gBAAgB,EAIrB,KAAK,oBAAoB,EAG1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAQ/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAMpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAyD5E,eAAO,MAAM,uBAAuB,QAA2H,CAAC;AAQhK;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,UAAU,CAqBZ;AA0ED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,oBAAoB,CAEpG;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAEhG;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,kBAAkB,EACvB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAsD,CAAC;AAErF;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,cAAc,CAMhH"}