@powerhousedao/builder-tools 6.2.3-dev.8 → 6.2.3-staging.0

package/dist/index.mjs

@@ -1,13 +1,13 @@
 import { createRequire } from "node:module";
 import { createHash, randomUUID } from "node:crypto";
-import fs, { createReadStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import fs, { chmodSync, createReadStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import path, { dirname, extname, isAbsolute, join, resolve } from "node:path";
 import { exec, execSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
+import { DYNAMIC_BASE_PLACEHOLDER, PWA_FILE_HANDLER_ACTION, buildRuntimeConfig, deepMerge, loadConnectEnv, mergeManifest, mergePwaConfig, normalizeBasePath, phConnectRuntimeConfigSchema, powerhousePackageSchema, resolveSourceConnect, setConnectEnv, unionStrings, withInferredCategory } from "@powerhousedao/shared/connect";
 import MagicString from "magic-string";
 import { readFile, writeFile } from "node:fs/promises";
 import { cwd } from "node:process";
-import { DEFAULT_CONNECT_CONFIG, PWA_FILE_HANDLER_ACTION, buildRuntimeConfig, deepMerge, loadConnectEnv, mergeManifest, mergePwaConfig, normalizeBasePath, phConnectRuntimeConfigSchema, powerhousePackageSchema, setConnectEnv, unionStrings, withInferredCategory } from "@powerhousedao/shared/connect";
 import { getConfig } from "@powerhousedao/config/node";
 import tailwind from "@tailwindcss/vite";
 import react from "@vitejs/plugin-react";
@@ -44,7 +44,8 @@ function computeBuildHash(input) {
 */
 function readConnectVersion(projectRoot) {
 	try {
-		let dir = dirname(createRequire(join(projectRoot, "package.json")).resolve("@powerhousedao/connect", { paths: [projectRoot] }));
+		const entry = createRequire(join(projectRoot, "package.json")).resolve("@powerhousedao/connect", { paths: [projectRoot] });
+		let dir = dirname(entry);
 		for (;;) {
 			try {
 				const pkg = JSON.parse(readFileSync(join(dir, "package.json"), "utf-8"));
@@ -91,16 +92,6 @@ function connectBuildHashPlugin(buildHash) {
 //#endregion
 //#region connect-utils/vite-plugins/dynamic-base.ts
 /**
-* Placeholder base used when Connect is built in dynamic-base mode. The Vite
-* `base` option is set to this token; this plugin rewrites it in the emitted
-* output so the effective base is resolved at serve time from a global instead
-* of being baked at build time.
-*
-* Trailing slash matches `normalizeBasePath` output, so the token sits in the
-* same syntactic position as a concrete base would.
-*/
-const DYNAMIC_BASE_PLACEHOLDER = "/__PH_DYNAMIC_BASE__/";
-/**
 * Global the runtime (ph-clint proxy) must set before the entry bundle loads.
 * Value is the normalized deploy base, e.g. "/myagent/" or "/". The JS rewrite
 * below resolves all asset / lazy-chunk / BASE_URL references against it.
@@ -108,7 +99,8 @@ const DYNAMIC_BASE_PLACEHOLDER = "/__PH_DYNAMIC_BASE__/";
 const RUNTIME_GLOBAL = "globalThis.__PH_DYNAMIC_BASE__";
 const BASE_EXPR = `(${RUNTIME_GLOBAL}||"/")`;
 function workerPrelude(stripPrefix) {
-	return `${RUNTIME_GLOBAL}=self.location.pathname.replace(/${escapeForRegExp(stripPrefix).replace(/\//g, "\\/")}assets\\/[^/]*$/,"");\n`;
+	const prefix = escapeForRegExp(stripPrefix).replace(/\//g, "\\/");
+	return `${RUNTIME_GLOBAL}=self.location.pathname.replace(/${prefix}assets\\/[^/]*$/,"");\n`;
 }
 const PLACEHOLDER_LITERAL = new RegExp(`(["'\`])${escapeForRegExp(DYNAMIC_BASE_PLACEHOLDER)}((?:(?!\\1)[^$])*)\\1`, "g");
 /**
@@ -144,7 +136,7 @@ function connectDynamicBasePlugin(options = {}) {
 		name: "ph-connect-dynamic-base",
 		enforce: "post",
 		renderChunk(code, chunk) {
-			if (!code.includes("/__PH_DYNAMIC_BASE__/")) return null;
+			if (!code.includes(DYNAMIC_BASE_PLACEHOLDER)) return null;
 			const s = new MagicString(code);
 			for (const match of code.matchAll(PLACEHOLDER_LITERAL)) {
 				const rest = match[2];
@@ -161,7 +153,7 @@ function connectDynamicBasePlugin(options = {}) {
 			};
 		},
 		generateBundle(_options, bundle) {
-			for (const file of Object.values(bundle)) if ((file.type === "chunk" ? file.code : file.fileName.endsWith(".css") && typeof file.source === "string" ? file.source : void 0)?.includes("/__PH_DYNAMIC_BASE__/")) this.error(`dynamic-base: unrewritten placeholder ${DYNAMIC_BASE_PLACEHOLDER} remains in ${file.fileName}`);
+			for (const file of Object.values(bundle)) if ((file.type === "chunk" ? file.code : file.fileName.endsWith(".css") && typeof file.source === "string" ? file.source : void 0)?.includes(DYNAMIC_BASE_PLACEHOLDER)) this.error(`dynamic-base: unrewritten placeholder ${DYNAMIC_BASE_PLACEHOLDER} remains in ${file.fileName}`);
 		}
 	};
 }
@@ -241,31 +233,34 @@ async function prebuildConnectVendor(options) {
 	const vendorDir = options.vendorDir ?? join(options.dirname, "node_modules/.ph-vendor");
 	const importMapPath = join(vendorDir, "import-map.json");
 	const versionDigest = resolveVersionDigest(options.dirname, [...include, ...external]);
+	const versions = resolveDepVersions(options.dirname, [...include, ...external]);
+	const base = options.base ?? VENDOR_DYNAMIC_BASE;
+	const nodeEnv = options.nodeEnv ?? "development";
 	try {
 		const hit = readCacheHit(importMapPath, include, external, versionDigest);
 		if (hit) return {
 			vendorDir,
-			imports: hit
+			...hit
 		};
 		const lockDir = `${vendorDir}.lock`;
 		const lock = acquireLock(lockDir);
 		if (!lock) {
-			const imports = await waitForCacheHit(importMapPath, include, external, versionDigest, lockDir);
-			return imports ? {
+			const hit = await waitForCacheHit(importMapPath, include, external, versionDigest, lockDir);
+			return hit ? {
 				vendorDir,
-				imports
+				...hit
 			} : null;
 		}
 		try {
 			const raced = readCacheHit(importMapPath, include, external, versionDigest);
 			if (raced) return {
 				vendorDir,
-				imports: raced
+				...raced
 			};
-			const imports = await buildVendorAtomic(options.dirname, vendorDir, include, external, versionDigest);
-			return imports ? {
+			const result = await buildVendorAtomic(options.dirname, vendorDir, include, external, versionDigest, versions, base, nodeEnv);
+			return result ? {
 				vendorDir,
-				imports
+				...result
 			} : null;
 		} finally {
 			releaseLock(lock);
@@ -279,27 +274,73 @@ function readCacheHit(importMapPath, include, external, versionDigest) {
 	if (!existsSync(importMapPath)) return null;
 	try {
 		const cached = JSON.parse(readFileSync(importMapPath, "utf8"));
-		if (sameSet(cached.include, include) && sameSet(cached.external, external) && cached.versionDigest === versionDigest) return cached.imports;
+		if (sameSet(cached.include, include) && sameSet(cached.external, external) && cached.versionDigest === versionDigest) return {
+			imports: cached.imports,
+			versions: cached.versions ?? {}
+		};
 	} catch {}
 	return null;
 }
-function resolveVersionDigest(dirname, specs) {
-	const seen = /* @__PURE__ */ new Map();
+/**
+* Resolve the installed version of each spec's owning package, deduped by
+* package name. Resolution order per spec:
+*   1. the project itself, when it IS the owning package (a self-vendoring
+*      app has no node_modules self-link);
+*   2. the project's own node_modules link (works for pnpm-strict and
+*      hoisted layouts alike, and — unlike `require.resolve` — for
+*      ESM-only packages whose exports map has no CJS condition);
+*   3. Node's own module resolution (covers transitive installs), walking
+*      the entry up to the owning package's package.json.
+* Unresolvable specs contribute a "missing" sentinel, unknown versions
+* "unknown".
+*/
+function resolveDepVersions(dirname$2, specs) {
+	const req = createRequire(join(dirname$2, "noop.js"));
+	const seen = {};
+	let selfMeta = null;
 	for (const spec of specs) {
 		const { pkg } = parsePkg(spec);
-		if (seen.has(pkg)) continue;
-		let version = "missing";
-		try {
-			const pkgRoot = realpathSync(join(dirname, "node_modules", pkg));
-			const meta = JSON.parse(readFileSync(join(pkgRoot, "package.json"), "utf8"));
-			version = String(meta.version ?? "unknown");
-		} catch {}
-		seen.set(pkg, version);
+		if (pkg in seen) continue;
+		if (selfMeta === null) try {
+			selfMeta = JSON.parse(readFileSync(join(dirname$2, "package.json"), "utf8"));
+		} catch {
+			selfMeta = {};
+		}
+		let version;
+		if (typeof selfMeta.name === "string" && selfMeta.name === pkg && typeof selfMeta.version === "string") version = selfMeta.version;
+		else {
+			version = "missing";
+			try {
+				const pkgRoot = realpathSync(join(dirname$2, "node_modules", pkg));
+				const meta = JSON.parse(readFileSync(join(pkgRoot, "package.json"), "utf8"));
+				version = String(meta.version ?? "unknown");
+			} catch {
+				try {
+					const entry = req.resolve(spec);
+					let dir = dirname(entry);
+					for (let depth = 0; depth < 8; depth++) {
+						if (existsSync(join(dir, "package.json"))) {
+							const meta = JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+							version = String(meta.version ?? "unknown");
+							break;
+						}
+						const parent = dirname(dir);
+						if (parent === dir) break;
+						dir = parent;
+					}
+				} catch {}
+			}
+		}
+		seen[pkg] = version;
 	}
+	return seen;
+}
+function resolveVersionDigest(dirname, specs) {
+	const versions = resolveDepVersions(dirname, specs);
 	const h = createHash("sha256");
 	const workerHash = createHash("sha256").update(VENDOR_BUILD_WORKER).digest("hex");
 	h.update(`worker:${workerHash}\n`);
-	for (const pkg of [...seen.keys()].sort()) h.update(`${pkg}@${seen.get(pkg)}\n`);
+	for (const pkg of Object.keys(versions).sort()) h.update(`${pkg}@${versions[pkg]}\n`);
 	return h.digest("hex").slice(0, 16);
 }
 function sameSet(a, b) {
@@ -307,7 +348,7 @@ function sameSet(a, b) {
 	const s = new Set(a);
 	return b.every((x) => s.has(x));
 }
-const LOCK_STALE_MS = 5 * 6e4;
+const LOCK_STALE_MS = 3e5;
 const LOCK_HEARTBEAT_MS = 6e4;
 const ownerFile = (lockDir) => join(lockDir, "owner");
 function lockIsStale(lockDir) {
@@ -406,11 +447,16 @@ function parsePkg(spec) {
 * `@powerhousedao/design-system/connect/toast`, `zod/v4/core`). Those bare
 * imports need their own import-map entry, so expand each listed spec to its
 * package's concrete (non-wildcard, JS) subpath exports that share the spec's
-* prefix. Unresolvable / CSS / JSON targets are skipped. Failures leave the
-* original spec untouched.
+* prefix. Unresolvable / CSS / JSON targets are skipped.
+*
+* A spec whose package isn't installed in `dirname` is dropped entirely
+* rather than kept for the worker: the worker cannot build an entry for a
+* missing package (its `await import` and the vite resolution both fail),
+* and a bare re-export entry would fail the whole vendor build. The
+* importer of a missing shared dep simply bundles its own copy.
 */
 function expandIncludeSubpaths(dirname, include) {
-	const out = new Set(include);
+	const out = /* @__PURE__ */ new Set();
 	for (const spec of include) {
 		const { pkg, sub } = parsePkg(spec);
 		let exp;
@@ -421,6 +467,7 @@ function expandIncludeSubpaths(dirname, include) {
 		} catch {
 			continue;
 		}
+		out.add(sub ? spec : pkg);
 		if (!exp || typeof exp !== "object") continue;
 		const expMap = exp;
 		const prefixKey = sub ? `./${sub}` : ".";
@@ -437,34 +484,72 @@ function expandIncludeSubpaths(dirname, include) {
 	return [...out];
 }
 /**
+* The published specifiers whose entry file the vendor build never emitted.
+* URLs are base-less (`/__vendor__/x.js`) and resolve inside `vendorDir`.
+*/
+function missingVendorEntries(vendorDir, imports) {
+	const prefix = VENDOR_URL_PREFIX;
+	return Object.entries(imports).filter(([, url]) => {
+		const rel = url.startsWith(prefix) ? url.slice(12) : url;
+		return !existsSync(join(vendorDir, rel));
+	}).map(([spec, url]) => ({
+		spec,
+		url
+	}));
+}
+/**
+* Rebase the vendor's base-less entry URLs (`/__vendor__/x.js`) onto the
+* deploy base, so a consumer that resolves them against the page origin lands
+* under that base rather than the server root. A dynamic-base build keeps its
+* placeholder, which the runtime substitutes.
+*
+* `base` is the app base from `prebuildConnectVendor` callers, but the
+* VENDOR_DYNAMIC_BASE default already carries the vendor segment — that
+* trailing segment is dropped first so it is never doubled.
+*/
+function withVendorBase(imports, base) {
+	const segment = VENDOR_URL_PREFIX.replace(/^\/+/, "");
+	const appBase = base.endsWith(segment) ? base.slice(0, base.length - segment.length) : base;
+	return Object.fromEntries(Object.entries(imports).map(([spec, url]) => [spec, `${appBase}/${url}`.replace(/([^:])\/{2,}/g, "$1/").replace(/^\/{2,}/, "/")]));
+}
+/**
 * Build the vendor into a unique temp dir, then atomically swap it into place,
 * so a concurrent reader never sees a partial bundle or import-map.json. Runs
 * the build in a throwaway subprocess (its peak memory is reclaimed on exit);
-* the parent augments the import map with the version digest and does the swap.
-* Returns the published import map, or null on failure.
+* the parent augments the import map with the version digest + the version
+* table, writes the runtime shared-deps module, and does the swap.
+* Returns the published import map + versions, or null on failure.
 */
-async function buildVendorAtomic(dirname$2, vendorDir, include, external, versionDigest) {
+async function buildVendorAtomic(dirname$3, vendorDir, include, external, versionDigest, versions, base, nodeEnv) {
 	const parent = dirname(vendorDir);
 	mkdirSync(parent, { recursive: true });
 	const tmpDir = mkdtempSync(join(parent, ".ph-vendor.tmp-"));
 	try {
-		const { ok, stderr } = await runBuildWorker(dirname$2, tmpDir, include, external);
+		const { ok, stderr } = await runBuildWorker(dirname$3, tmpDir, include, external, base, nodeEnv);
 		const tmpMap = join(tmpDir, "import-map.json");
 		if (!ok || !existsSync(tmpMap)) {
 			const detail = stderr.trim();
 			throw new Error(`vendor build failed${detail ? `:\n${detail}` : " (no output captured)"}`);
 		}
 		const meta = JSON.parse(readFileSync(tmpMap, "utf8"));
+		const unbacked = missingVendorEntries(tmpDir, meta.imports);
+		if (unbacked.length > 0) throw new Error(`vendor build published ${unbacked.length} import-map ${unbacked.length === 1 ? "entry" : "entries"} with no file behind ${unbacked.length === 1 ? "it" : "them"}:\n` + unbacked.map((e) => `  ${e.spec} -> ${e.url}`).join("\n"));
 		meta.versionDigest = versionDigest;
+		meta.versions = versions;
 		writeFileSync(tmpMap, JSON.stringify(meta, null, 2));
+		writeFileSync(join(tmpDir, "shared-deps.js"), `export const imports = ${JSON.stringify(withVendorBase(meta.imports, base))};\nexport const versions = ${JSON.stringify(versions)};\n`);
 		const oldDir = `${vendorDir}.old-${process.pid}-${Date.now()}`;
 		if (existsSync(vendorDir)) renameSync(vendorDir, oldDir);
 		renameSync(tmpDir, vendorDir);
+		chmodSync(vendorDir, 493);
 		rmSync(oldDir, {
 			recursive: true,
 			force: true
 		});
-		return meta.imports;
+		return {
+			imports: meta.imports,
+			versions
+		};
 	} catch (err) {
 		rmSync(tmpDir, {
 			recursive: true,
@@ -473,16 +558,29 @@ async function buildVendorAtomic(dirname$2, vendorDir, include, external, versio
 		throw err;
 	}
 }
+function resolveSelfModulePath() {
+	const selfPath = fileURLToPath(import.meta.url);
+	if (!selfPath.endsWith(".ts")) return selfPath;
+	let dir = dirname(selfPath);
+	for (let depth = 0; depth < 4; depth++) {
+		const candidate = join(dir, "dist", "index.mjs");
+		if (existsSync(candidate)) return candidate;
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	throw new Error("vendor build needs the built builder-tools bundle (dist/index.mjs); build the package first");
+}
 /**
 * Spawn a throwaway worker that generates one entry per specifier (CJS deps get
 * explicit named re-exports, ESM deps `export *`), `vite build`s them into the
 * given out dir, and writes the import map. Captures stdout/stderr so a failure
 * is debuggable; the normal path stays quiet.
 */
-function runBuildWorker(dirname, outDir, include, external) {
+function runBuildWorker(dirname, outDir, include, external, base, nodeEnv) {
 	const workerPath = join(outDir, "build-worker.mjs");
 	writeFileSync(workerPath, VENDOR_BUILD_WORKER);
-	const selfModulePath = fileURLToPath(import.meta.url);
+	const selfModulePath = resolveSelfModulePath();
 	return new Promise((resolve) => {
 		const child = spawn(process.execPath, [
 			workerPath,
@@ -492,7 +590,9 @@ function runBuildWorker(dirname, outDir, include, external) {
 			VENDOR_URL_PREFIX,
 			JSON.stringify(external),
 			VENDOR_DYNAMIC_BASE,
-			selfModulePath
+			selfModulePath,
+			base,
+			nodeEnv
 		], {
 			cwd: dirname,
 			stdio: [
@@ -522,14 +622,22 @@ function runBuildWorker(dirname, outDir, include, external) {
 * The vendor build worker, written to disk and run as a subprocess. Loads
 * `vite` from the project and `connectDynamicBasePlugin` from builder-tools' own
 * built bundle (selfModulePath). argv: dirname, vendorDir, includeJSON,
-* urlPrefix, externalJSON, dynamicBase, selfModulePath.
+* urlPrefix, externalJSON, dynamicBase, selfModulePath, base (app base),
+* nodeEnv.
 */
 const VENDOR_BUILD_WORKER = `
 import { createRequire } from 'node:module';
 import { mkdirSync, writeFileSync, rmSync } from 'node:fs';
 import { join, isAbsolute } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-const [dirname, vendorDir, includeJSON, urlPrefix, externalJSON, dynamicBase, selfModulePath] = process.argv.slice(2);
+const [dirname, vendorDir, includeJSON, urlPrefix, externalJSON, dynamicBase, selfModulePath, baseArg, nodeEnvArg] = process.argv.slice(2);
+// Trailing argv are optional (older callers): base defaults to the dynamic
+// placeholder behavior, nodeEnv to development. baseArg is the APP base —
+// the same string the app build uses; the build base appends the vendor
+// segment so emitted asset URLs land under <app-base>__vendor__/.
+const segment = urlPrefix.replace(/^\\/+/, '');
+const base = baseArg ? baseArg + segment : dynamicBase;
+const nodeEnv = nodeEnvArg ?? 'development';
 const include = JSON.parse(includeJSON);
 const external = JSON.parse(externalJSON ?? '[]');
 const externalSet = new Set(external);
@@ -602,14 +710,17 @@ const phVendorResolve = {
 };
 await build({
   root: dirname, configFile: false, logLevel: 'error',
-  // Dynamic-base placeholder + vendor segment: connectDynamicBasePlugin rewrites
-  // emitted chunk/asset URLs to resolve against the deploy base at serve time.
-  base: dynamicBase,
+  // Caller-provided build base (or the dynamic placeholder default):
+  // connectDynamicBasePlugin rewrites emitted chunk/asset URLs to resolve
+  // against the deploy base at serve time.
+  base,
   define: {
-    'process.env.NODE_ENV': '"development"',
+    'process.env.NODE_ENV': JSON.stringify(nodeEnv),
     // BASE_URL resolves to the deploy base (not the vendor prefix) so vendored
     // Connect's router basename + BASE_URL-relative fetches use the right path.
-    'import.meta.env.BASE_URL': JSON.stringify(DYNAMIC_BASE_PLACEHOLDER),
+    // The app base when provided (concrete or placeholder), the placeholder
+    // otherwise (dev flow — rewritten at serve time by the dynamic-base plugin).
+    'import.meta.env.BASE_URL': JSON.stringify(baseArg ?? DYNAMIC_BASE_PLACEHOLDER),
   },
   // phVendorResolve (pre) resolves bares from the worker; esmExternalRequirePlugin owns
   // react/virtual externalization; connectDynamicBasePlugin (post) rewrites the placeholder base.
@@ -618,7 +729,9 @@ await build({
   // segment so the worker recovers the deploy base, not the vendor prefix.
   worker: { format: 'es', plugins: () => [connectDynamicBasePlugin({ forWorker: true, workerStripPrefix: urlPrefix.replace(/^\\/+/, '') })] },
   build: {
-    outDir: vendorDir, emptyOutDir: false, minify: false, target: 'esnext', cssCodeSplit: true,
+    // Production ships this to every visitor, so minify it like the app's own
+    // chunks; dev keeps readable output and the faster build.
+    outDir: vendorDir, emptyOutDir: false, minify: nodeEnv === 'production', target: 'esnext', cssCodeSplit: true,
     rollupOptions: {
       input, preserveEntrySignatures: 'strict',
       output: { format: 'es', entryFileNames: '[name].js', chunkFileNames: 'chunks/[name]-[hash].js', assetFileNames: 'assets/[name]-[hash][extname]' },
@@ -655,7 +768,8 @@ function resolveConnectPackageJson(root = process.cwd()) {
 */
 function resolveConnectBundle(root = process.cwd()) {
 	const connectIndexPath = resolvePackage("@powerhousedao/connect", root);
-	return join(connectIndexPath.substring(0, connectIndexPath.indexOf("connect") + 7), "dist/");
+	const connectRootPath = connectIndexPath.substring(0, connectIndexPath.indexOf("connect") + 7);
+	return join(connectRootPath, "dist/");
 }
 function resolveConnectPublicDir(root = process.cwd()) {
 	const connectIconPath = resolvePackage("@powerhousedao/connect/public/icon.ico", root);
@@ -1002,7 +1116,7 @@ async function devReactImportmapPlugin(projectRoot = process.cwd()) {
 			REACT_DEPS.forEach((d) => include.add(d));
 			if (vendorActive) {
 				HEAVY_LIBS.forEach((d) => include.delete(d));
-				cfg.optimizeDeps.exclude = [...new Set([...cfg.optimizeDeps.exclude ?? [], ...HEAVY_LIBS])];
+				cfg.optimizeDeps.exclude = [.../* @__PURE__ */ new Set([...cfg.optimizeDeps.exclude ?? [], ...HEAVY_LIBS])];
 			}
 			cfg.optimizeDeps.include = [...include];
 		},
@@ -1118,7 +1232,7 @@ function connectFaviconPlugin(opts = {}) {
 					res.end(readFileSync(resolved.id));
 				}).catch(() => next());
 			};
-			const paths = new Set([faviconRoute, "/icon.ico"]);
+			const paths = /* @__PURE__ */ new Set([faviconRoute, "/icon.ico"]);
 			for (const path of paths) server.middlewares.use(path, handler);
 		},
 		async generateBundle(_options, bundle) {
@@ -1158,13 +1272,17 @@ function readProjectPackageInfo(projectRoot) {
 }
 function phConfigPlugin(options) {
 	const localPackage = readProjectPackageInfo(options.projectRoot ?? process.cwd());
-	const withDefaults = deepMerge(DEFAULT_CONNECT_CONFIG, options.connect ?? {});
+	const withDefaults = resolveSourceConnect({
+		connect: options.connect,
+		workflows: options.workflows
+	});
 	const mergedConnect = options.cliConnectOverride ? deepMerge(withDefaults, options.cliConnectOverride) : withDefaults;
-	const runtimeConfig = buildRuntimeConfig({
+	const source = {
 		packages: options.packages,
 		packageRegistryUrl: options.packageRegistryUrl,
 		connect: mergedConnect
-	}, localPackage);
+	};
+	const runtimeConfig = buildRuntimeConfig(source, localPackage);
 	const content = JSON.stringify({
 		$schema: RUNTIME_CONFIG_SCHEMA_URL,
 		...runtimeConfig
@@ -1217,11 +1335,13 @@ function toPwaContribution(manifest, fallbackLabel, onWarn) {
 	if (!isPlainObject(manifest)) return null;
 	const label = typeof manifest.name === "string" && manifest.name ? manifest.name : fallbackLabel;
 	let config = {};
-	if (manifest.pwa !== void 0) if (!isPlainObject(manifest.pwa)) onWarn(`PWA config: ${label} declares a non-object 'pwa' field in its manifest; ignored.`);
-	else {
-		const parsed = PwaConfigSchema.safeParse(manifest.pwa);
-		if (!parsed.success) onWarn(`PWA config: ${label}'s pwa fragment is invalid; ignored. ${formatZodIssues(parsed.error)}`);
-		else config = parsed.data;
+	if (manifest.pwa !== void 0) {
+		if (!isPlainObject(manifest.pwa)) onWarn(`PWA config: ${label} declares a non-object 'pwa' field in its manifest; ignored.`);
+		else {
+			const parsed = PwaConfigSchema.safeParse(manifest.pwa);
+			if (!parsed.success) onWarn(`PWA config: ${label}'s pwa fragment is invalid; ignored. ${formatZodIssues(parsed.error)}`);
+			else config = parsed.data;
+		}
 	}
 	config = withInferredCategory(config, manifest.category);
 	if (Object.keys(config).length === 0) return null;
@@ -1330,7 +1450,8 @@ function collectProjectPwaContribution(options) {
 		}
 		if (!isPlainObject(manifest)) return null;
 		const label = typeof manifest.name === "string" && manifest.name ? manifest.name : "project manifest";
-		const withCategory = withInferredCategory(manifest.pwa === void 0 ? {} : parsePwaConfigStrict(manifest.pwa, `pwa in ${manifestPath}`), manifest.category);
+		const config = manifest.pwa === void 0 ? {} : parsePwaConfigStrict(manifest.pwa, `pwa in ${manifestPath}`);
+		const withCategory = withInferredCategory(config, manifest.category);
 		if (Object.keys(withCategory).length === 0) return null;
 		return {
 			source: label,
@@ -1471,7 +1592,7 @@ const BASE_MANIFEST = {
 * declarative runtimeCaching option.
 */
 const BASE_PRECACHE = {
-	maximumFileSizeToCacheInBytes: 16 * 1024 * 1024,
+	maximumFileSizeToCacheInBytes: 16777216,
 	globPatterns: ["**/*.{js,css,html,wasm,data,ico,png,svg,webp,woff,woff2}"],
 	globIgnores: [
 		"**/powerhouse.config.json",
@@ -1776,6 +1897,48 @@ function connectThemeBootPlugin() {
 	};
 }
 //#endregion
+//#region connect-utils/vite-plugins/vendor-import-map.ts
+function extractImports(raw) {
+	if (typeof raw !== "object" || raw === null) return {};
+	const imports = "imports" in raw ? raw.imports : void 0;
+	if (typeof imports !== "object" || imports === null) return {};
+	const out = {};
+	for (const [key, value] of Object.entries(imports)) if (typeof value === "string") out[key] = value;
+	return out;
+}
+function parseImportMap(raw) {
+	try {
+		return extractImports(JSON.parse(raw));
+	} catch {
+		return {};
+	}
+}
+const INLINE_IMPORTMAP = /<script type="importmap">([\s\S]*?)<\/script>/;
+function vendorImportMapPlugin(options) {
+	const vendorEntries = Object.keys(options.imports).length;
+	return {
+		name: "ph-vendor-import-map",
+		apply: "build",
+		transformIndexHtml(html) {
+			if (!vendorEntries) return;
+			const match = INLINE_IMPORTMAP.exec(html);
+			if (match) {
+				const merged = { imports: {
+					...parseImportMap(match[1]),
+					...options.imports
+				} };
+				return html.replace(INLINE_IMPORTMAP, `<script type="importmap">${JSON.stringify(merged)}<\/script>`);
+			}
+			return [{
+				tag: "script",
+				attrs: { type: "importmap" },
+				children: JSON.stringify({ imports: options.imports }),
+				injectTo: "head-prepend"
+			}];
+		}
+	};
+}
+//#endregion
 //#region connect-utils/vite-config.ts
 function getConnectHtmlTags(options = {}) {
 	const { registryUrl, injectTo = "head" } = options;
@@ -1896,7 +2059,8 @@ function getLocalPackageNamesFromPowerhouseConfig({ packages }) {
 }
 function getConnectBaseViteConfig(options) {
 	const mode = options.mode;
-	const fileEnv = loadEnv(mode, options.envDir ?? options.dirname, "PH_");
+	const envDir = options.envDir ?? options.dirname;
+	const fileEnv = loadEnv(mode, envDir, "PH_");
 	const env = loadConnectEnv({
 		processEnv: process.env,
 		fileEnv
@@ -1968,9 +2132,10 @@ function getConnectBaseViteConfig(options) {
 		});
 		const projectContribution = collectProjectPwaContribution({ projectRoot: options.dirname });
 		if (projectContribution) contributions.push(projectContribution);
+		const mergedPwa = mergePwaConfig(contributions, projectPwa, pwaWarn);
 		return connectPwaPlugins({
 			offlineEnabled,
-			pwa: mergePwaConfig(contributions, projectPwa, pwaWarn)
+			pwa: mergedPwa
 		});
 	})();
 	const reactExternal = [
@@ -2023,6 +2188,7 @@ function getConnectBaseViteConfig(options) {
 				packages: phPackages,
 				projectRoot: options.dirname,
 				connect: phConfig.connect,
+				workflows: phConfig.workflows,
 				packageRegistryUrl: phPackageRegistryUrl ?? void 0,
 				cliConnectOverride: options.cliConnectOverride
 			}),
@@ -2032,11 +2198,12 @@ function getConnectBaseViteConfig(options) {
 			}),
 			devReactImportmapPlugin(options.dirname),
 			...plugins,
-			esmExternalRequirePlugin({ external: reactExternal }),
+			esmExternalRequirePlugin({ external: [...reactExternal, ...options.vendor && mode === "production" ? Object.keys(options.vendor.imports) : []] }),
 			reactSelfHostPlugin({
 				dirname: options.dirname,
 				dev: mode !== "production" || isDebug
 			}),
+			...options.vendor && mode === "production" ? [vendorImportMapPlugin({ imports: options.vendor.imports })] : [],
 			connectFaviconPlugin({ faviconPath: options.favicon }),
 			connectThemeBootPlugin(),
 			connectBuildHashPlugin(buildHash),
@@ -2047,10 +2214,13 @@ function getConnectBaseViteConfig(options) {
 			format: "es",
 			...options.dynamicBase ? { plugins: () => [connectDynamicBasePlugin({ forWorker: true })] } : {}
 		},
-		build: { sourcemap: true }
+		build: {
+			sourcemap: true,
+			rolldownOptions: { shimMissingExports: true }
+		}
 	};
 }
 //#endregion
-export { BUILD_HASH_FILE, DEFAULT_CONNECT_OUTDIR, DEFAULT_VENDOR_INCLUDE, DYNAMIC_BASE_PLACEHOLDER, EXTERNAL_PACKAGES_IMPORT, IMPORT_SCRIPT_FILE, LOCAL_PACKAGE_ID, PH_DIR_NAME, RUNTIME_CONFIG_SCHEMA_ID, RUNTIME_CONFIG_SCHEMA_URL, THEME_BOOT_MARKER, VENDOR_EXTERNAL, VENDOR_URL_PREFIX, appendToHtmlHead, backupIndexHtml, buildHashFromBuildOptions, computeBuildHash, connectBuildHashPlugin, connectDynamicBasePlugin, connectThemeBootPlugin, copyConnect, ensureNodeVersion, escapeForRegExp, getConnectBaseViteConfig, getConnectHtmlTags, makeImportScriptFromPackages, phConfigPlugin, prebuildConnectVendor, prependToHtmlHead, readJsonFile, removeBase64EnvValues, resolveConnectBundle, resolveConnectPackageJson, resolveConnectPublicDir, resolvePackage, resolveViteConfigPath, runShellScriptPlugin, runTsc, runtimeConfigSchema, stripVersionFromPackage };
+export { BUILD_HASH_FILE, DEFAULT_CONNECT_OUTDIR, DEFAULT_VENDOR_INCLUDE, DYNAMIC_BASE_PLACEHOLDER, EXTERNAL_PACKAGES_IMPORT, IMPORT_SCRIPT_FILE, LOCAL_PACKAGE_ID, PH_DIR_NAME, RUNTIME_CONFIG_SCHEMA_ID, RUNTIME_CONFIG_SCHEMA_URL, THEME_BOOT_MARKER, VENDOR_EXTERNAL, VENDOR_URL_PREFIX, appendToHtmlHead, backupIndexHtml, buildHashFromBuildOptions, computeBuildHash, connectBuildHashPlugin, connectDynamicBasePlugin, connectThemeBootPlugin, copyConnect, ensureNodeVersion, escapeForRegExp, getConnectBaseViteConfig, getConnectHtmlTags, makeImportScriptFromPackages, missingVendorEntries, phConfigPlugin, prebuildConnectVendor, prependToHtmlHead, readJsonFile, removeBase64EnvValues, resolveConnectBundle, resolveConnectPackageJson, resolveConnectPublicDir, resolvePackage, resolveViteConfigPath, runShellScriptPlugin, runTsc, runtimeConfigSchema, stripVersionFromPackage, vendorImportMapPlugin, withVendorBase };
 
 //# sourceMappingURL=index.mjs.map