@rangojs/router 0.0.0-experimental.f2d1a2f1 → 0.0.0-experimental.f4a8e8de

package/src/vite/plugins/expose-internal-ids.ts

@@ -28,6 +28,7 @@ import {
   getImportedFnNames,
   collectCreateExportBindings,
   buildUnsupportedShapeWarning,
+  findUnsupportedCreateCallSites,
   isExportOnlyFile,
 } from "./expose-ids/export-analysis.js";
 import {
@@ -39,10 +40,12 @@ import {
   transformHandles,
   transformLocationState,
   generateWholeFileStubs,
-  generateExprStubs,
   stubHandlerExprs,
   transformHandlerIds,
 } from "./expose-ids/handler-transform.js";
+import { createRangoDebugger, createCounter, NS } from "../debug.js";
+
+const debug = createRangoDebugger(NS.transform);
 
 // Re-exports consumed by other packages/plugins
 export { exposeRouterId } from "./expose-ids/router-transform.js";
@@ -65,6 +68,52 @@ const VIRTUAL_HANDLER_PREFIX = "virtual:handler-extract:";
 // Consolidated plugin
 // ---------------------------------------------------------------------------
 
+interface RscScanPluginApi {
+  manager?: { isScanBuild?: boolean };
+}
+
+/**
+ * Stub export-only loader modules before plugin-rsc reduces scan modules to
+ * imports. The regular post transform remains authoritative outside scan builds.
+ *
+ * Handles and location-state definitions are intentionally excluded: handle
+ * collect functions run in the browser, and location-state definitions are
+ * callable browser objects. Their dependencies must remain visible to non-RSC
+ * validation rather than being hidden behind an opaque scan stub.
+ */
+export function createLoaderScanStubPlugin(): Plugin {
+  let projectRoot = "";
+  let rscApi: RscScanPluginApi | undefined;
+
+  return {
+    name: "@rangojs/router:loader-scan-stubs",
+    apply: "build",
+    configResolved(config) {
+      projectRoot = config.root;
+      rscApi = config.plugins.find((plugin) => plugin.name === "rsc:minimal")
+        ?.api as RscScanPluginApi | undefined;
+    },
+    transform(code, id) {
+      if (
+        !rscApi?.manager?.isScanBuild ||
+        this.environment?.name === "rsc" ||
+        id.includes("/node_modules/") ||
+        !code.includes("createLoader") ||
+        !hasCreateLoaderImport(code)
+      ) {
+        return;
+      }
+
+      const fnNames = getImportedFnNames(code, "createLoader");
+      const bindings = collectCreateExportBindings(code, fnNames);
+      const filePath = normalizePath(path.relative(projectRoot, id));
+      return (
+        generateClientLoaderStubs(bindings, code, filePath, true) ?? undefined
+      );
+    },
+  };
+}
+
 export function exposeInternalIds(options?: { forceBuild?: boolean }): Plugin {
   let config: ResolvedConfig;
   let isBuild = false;
@@ -87,10 +136,16 @@ export function exposeInternalIds(options?: { forceBuild?: boolean }): Plugin {
   // De-duplicate unsupported shape warnings across repeated transforms.
   const unsupportedShapeWarnings = new Set<string>();
 
+  const counter = createCounter(debug, "expose-internal-ids");
+
   return {
     name: "@rangojs/router:expose-internal-ids",
     enforce: "post",
 
+    buildEnd() {
+      counter?.flush();
+    },
+
     api: {
       prerenderHandlerModules,
       staticHandlerModules,
@@ -175,6 +230,16 @@ ${lazyImports.join(",\n")}
     async buildStart() {
       if (!isBuild) return;
 
+      // The loader pre-scan walks and reads the entire project, but the
+      // loaderRegistry it populates is consumed only by the RSC loader-manifest
+      // virtual module (and the transform hook already gates its registry writes
+      // with isRscEnv). plugin-rsc runs ~5 build passes (rsc-scan, ssr-scan, rsc,
+      // client, ssr) over this single shared plugin instance; without this gate
+      // the full-tree I/O ran on every pass with no consumer on the non-RSC
+      // ones. Skip only when the environment is known and not RSC, so an
+      // unavailable environment still falls through (no empty registry).
+      if (this.environment && this.environment.name !== "rsc") return;
+
       const fs = await import("node:fs/promises");
 
       const SKIP_DIRS = new Set(["node_modules", "dist", "build", "coverage"]);
@@ -233,554 +298,554 @@ ${lazyImports.join(",\n")}
     transform(code, id) {
       if (id.includes("/node_modules/")) return;
 
-      const filePath = normalizePath(path.relative(projectRoot, id));
-      const isRscEnv = this.environment?.name === "rsc";
-
-      // Warn if named-routes.gen is imported in a client component.
-      // NamedRoutes is server-only data and would bloat the client bundle.
-      if (
-        id.includes(".named-routes.gen.") &&
-        !isRscEnv &&
-        this.environment?.name === "client"
-      ) {
-        this.warn(
-          `\n` +
-            `!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n` +
-            `!!                                                              !!\n` +
-            `!!  WARNING: NamedRoutes imported in a CLIENT component!        !!\n` +
-            `!!                                                              !!\n` +
-            `!!  File: ${filePath.padEnd(53)}!!\n` +
-            `!!                                                              !!\n` +
-            `!!  NamedRoutes contains your entire route structure — every    !!\n` +
-            `!!  route name and URL pattern in your application. Shipping    !!\n` +
-            `!!  this to the browser exposes your full routing topology to   !!\n` +
-            `!!  the client, which is a security concern (internal/admin     !!\n` +
-            `!!  routes, API endpoints, hidden paths become visible).        !!\n` +
-            `!!                                                              !!\n` +
-            `!!  It also bloats the client bundle — this map contains all    !!\n` +
-            `!!  named routes in your application.                           !!\n` +
-            `!!                                                              !!\n` +
-            `!!  Fix: remove the import or move it to a server component.    !!\n` +
-            `!!                                                              !!\n` +
-            `!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n`,
-        );
-      }
-
-      // Fast exit: if the file doesn't import from @rangojs/router at all,
-      // skip all create* analysis and transforms.
-      if (!code.includes("@rangojs/router")) return;
-
-      // Detect all relevant imports in one pass
-      const has = detectImports(code);
-
-      // Quick bail-out: also check for raw create* identifiers.
-      // This is safe even with aliases (e.g., `import { createLoader as cl }`)
-      // because the import statement itself always contains the canonical name
-      // "createLoader", so code.includes("createLoader") will still match.
-      const hasLoaderCode = has.loader && code.includes("createLoader");
-      const hasHandleCode = has.handle && code.includes("createHandle");
-      const hasLocationStateCode =
-        has.locationState && code.includes("createLocationState");
-      const hasPrerenderHandlerCode =
-        has.prerenderHandler && code.includes("Prerender");
-      const hasStaticHandlerCode = has.staticHandler && code.includes("Static");
-      if (
-        !hasLoaderCode &&
-        !hasHandleCode &&
-        !hasLocationStateCode &&
-        !hasPrerenderHandlerCode &&
-        !hasStaticHandlerCode
-      ) {
-        return;
-      }
+      const __t0 = counter ? performance.now() : 0;
+      try {
+        const filePath = normalizePath(path.relative(projectRoot, id));
+        const isRscEnv = this.environment?.name === "rsc";
 
-      // Per-invocation caches to avoid redundant AST parsing.
-      // getImportedFnNames is cached by canonical name (imports never change).
-      // collectCreateExportBindings is cached by fnNames key; the cache is
-      // cleared when `code` changes (e.g., after inline handler extraction).
-      const _fnNamesCache = new Map<string, string[]>();
-      const _bindingsCache = new Map<string, CreateExportBinding[]>();
-      let _cachedAst: any;
-      let _astParseFailed = false;
-      let _astCodeRef = code;
-
-      const getFnNames = (canonicalName: string): string[] => {
-        let result = _fnNamesCache.get(canonicalName);
-        if (!result) {
-          result = getImportedFnNames(code, canonicalName);
-          _fnNamesCache.set(canonicalName, result);
-        }
-        return result;
-      };
-
-      // Lazy AST parse: parsed once and shared across all
-      // collectCreateExportBindings calls for the same code string.
-      const lazyAst = (): any | undefined => {
-        if (code !== _astCodeRef) {
-          _cachedAst = undefined;
-          _astParseFailed = false;
-          _astCodeRef = code;
-        }
-        if (_cachedAst !== undefined || _astParseFailed) return _cachedAst;
-        try {
-          _cachedAst = parseAst(code, { jsx: true });
-        } catch {
-          _astParseFailed = true;
-        }
-        return _cachedAst;
-      };
-
-      const getBindings = (
-        currentCode: string,
-        fnNames: string[],
-      ): CreateExportBinding[] => {
-        const key = fnNames.join("\0");
-        let result = _bindingsCache.get(key);
-        if (!result) {
-          result = collectCreateExportBindings(currentCode, fnNames, lazyAst());
-          _bindingsCache.set(key, result);
+        // Warn if named-routes.gen is imported in a client component.
+        // NamedRoutes is server-only data and would bloat the client bundle.
+        if (
+          id.includes(".named-routes.gen.") &&
+          !isRscEnv &&
+          this.environment?.name === "client"
+        ) {
+          this.warn(
+            `\n` +
+              `!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n` +
+              `!!                                                              !!\n` +
+              `!!  WARNING: NamedRoutes imported in a CLIENT component!        !!\n` +
+              `!!                                                              !!\n` +
+              `!!  File: ${filePath.padEnd(53)}!!\n` +
+              `!!                                                              !!\n` +
+              `!!  NamedRoutes contains your entire route structure — every    !!\n` +
+              `!!  route name and URL pattern in your application. Shipping    !!\n` +
+              `!!  this to the browser exposes your full routing topology to   !!\n` +
+              `!!  the client, which is a security concern (internal/admin     !!\n` +
+              `!!  routes, API endpoints, hidden paths become visible).        !!\n` +
+              `!!                                                              !!\n` +
+              `!!  It also bloats the client bundle — this map contains all    !!\n` +
+              `!!  named routes in your application.                           !!\n` +
+              `!!                                                              !!\n` +
+              `!!  Fix: remove the import or move it to a server component.    !!\n` +
+              `!!                                                              !!\n` +
+              `!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n`,
+          );
         }
-        return result;
-      };
-
-      // Warn on create* declaration shapes that are currently unsupported by
-      // non-AST transforms (loader/handle/locationState only).
-      for (const cfg of STRICT_CREATE_CONFIGS) {
-        const hasCode =
-          cfg.fnName === "createLoader"
-            ? hasLoaderCode
-            : cfg.fnName === "createHandle"
-              ? hasHandleCode
-              : hasLocationStateCode;
-        if (!hasCode) continue;
-
-        const fnNames = getFnNames(cfg.fnName);
-        const totalCalls = countCreateCallsForNames(code, fnNames);
-        const supportedBindings = getBindings(code, fnNames).length;
-        if (totalCalls <= supportedBindings) continue;
-
-        const warnKey = `${id}::${cfg.fnName}`;
-        if (unsupportedShapeWarnings.has(warnKey)) continue;
-        unsupportedShapeWarnings.add(warnKey);
-        this.warn(buildUnsupportedShapeWarning(filePath, cfg.fnName));
-      }
 
-      // --- Loader: track for manifest (RSC env only) ---
-      if (hasLoaderCode && isRscEnv) {
-        const fnNames = getFnNames("createLoader");
-        const bindings = getBindings(code, fnNames);
-        for (const binding of bindings) {
-          const exportName = binding.exportNames[0];
-          const hashedId = hashId(filePath, exportName);
-          loaderRegistry.set(hashedId, {
-            filePath,
-            exportName,
-          });
+        // Fast exit: if the file doesn't import from @rangojs/router at all,
+        // skip all create* analysis and transforms.
+        if (!code.includes("@rangojs/router")) return;
+
+        // Detect all relevant imports in one pass
+        const has = detectImports(code);
+
+        // Quick bail-out: also check for raw create* identifiers.
+        // This is safe even with aliases (e.g., `import { createLoader as cl }`)
+        // because the import statement itself always contains the canonical name
+        // "createLoader", so code.includes("createLoader") will still match.
+        const hasLoaderCode = has.loader && code.includes("createLoader");
+        const hasHandleCode = has.handle && code.includes("createHandle");
+        const hasLocationStateCode =
+          has.locationState && code.includes("createLocationState");
+        const hasPrerenderHandlerCode =
+          has.prerenderHandler && code.includes("Prerender");
+        const hasStaticHandlerCode =
+          has.staticHandler && code.includes("Static");
+        if (
+          !hasLoaderCode &&
+          !hasHandleCode &&
+          !hasLocationStateCode &&
+          !hasPrerenderHandlerCode &&
+          !hasStaticHandlerCode
+        ) {
+          return;
         }
-      }
 
-      // --- Loader: client stubs for non-RSC environments ---
-      if (hasLoaderCode && !isRscEnv) {
-        const fnNames = getFnNames("createLoader");
-        const bindings = getBindings(code, fnNames);
-        const stubResult = generateClientLoaderStubs(
-          bindings,
-          code,
-          filePath,
-          isBuild,
-        );
-        if (stubResult) return stubResult;
-      }
+        // Per-invocation caches to avoid redundant AST parsing.
+        // getImportedFnNames is cached by canonical name (imports never change).
+        // collectCreateExportBindings is cached by fnNames key; the cache is
+        // cleared when `code` changes (e.g., after inline handler extraction).
+        const _fnNamesCache = new Map<string, string[]>();
+        const _bindingsCache = new Map<string, CreateExportBinding[]>();
+        let _cachedAst: any;
+        let _astParseFailed = false;
+        let _astCodeRef = code;
+
+        const getFnNames = (canonicalName: string): string[] => {
+          let result = _fnNamesCache.get(canonicalName);
+          if (!result) {
+            result = getImportedFnNames(code, canonicalName);
+            _fnNamesCache.set(canonicalName, result);
+          }
+          return result;
+        };
+
+        // Lazy AST parse: parsed once and shared across all
+        // collectCreateExportBindings calls for the same code string.
+        const lazyAst = (): any | undefined => {
+          if (code !== _astCodeRef) {
+            _cachedAst = undefined;
+            _astParseFailed = false;
+            _astCodeRef = code;
+          }
+          if (_cachedAst !== undefined || _astParseFailed) return _cachedAst;
+          try {
+            _cachedAst = parseAst(code, { lang: "tsx" });
+          } catch {
+            _astParseFailed = true;
+          }
+          return _cachedAst;
+        };
+
+        const getBindings = (
+          currentCode: string,
+          fnNames: string[],
+        ): CreateExportBinding[] => {
+          const key = fnNames.join("\0");
+          let result = _bindingsCache.get(key);
+          if (!result) {
+            result = collectCreateExportBindings(
+              currentCode,
+              fnNames,
+              lazyAst(),
+            );
+            _bindingsCache.set(key, result);
+          }
+          return result;
+        };
+
+        // Warn on create* declaration shapes that are currently unsupported by
+        // non-AST transforms (loader/handle/locationState only).
+        for (const cfg of STRICT_CREATE_CONFIGS) {
+          const hasCode =
+            cfg.fnName === "createLoader"
+              ? hasLoaderCode
+              : cfg.fnName === "createHandle"
+                ? hasHandleCode
+                : hasLocationStateCode;
+          if (!hasCode) continue;
 
-      // --- PrerenderHandler: non-RSC whole-file stub replacement ---
-      // When ALL exports are Prerender() calls, replace the entire file.
-      // Mixed-export files are handled in the unified pipeline below.
-      if (hasPrerenderHandlerCode && !isRscEnv) {
-        const fnNames = getFnNames(PRERENDER_CONFIG.fnName);
-        const bindings = getBindings(code, fnNames);
-        const wholeFile = generateWholeFileStubs(
-          PRERENDER_CONFIG,
-          bindings,
-          code,
-          filePath,
-          isBuild,
-        );
-        if (wholeFile) return wholeFile;
-      }
+          const fnNames = getFnNames(cfg.fnName);
+          // Locate the real (comment/string-free) create* calls not covered by
+          // a supported, id-injectable export shape. Empty means every call is
+          // fine — in particular, a create*() token in a comment or string no
+          // longer trips a spurious warning.
+          const sites = findUnsupportedCreateCallSites(
+            code,
+            fnNames,
+            getBindings(code, fnNames),
+          );
+          if (sites.length === 0) continue;
 
-      // --- PrerenderHandler: RSC build module tracking ---
-      if (hasPrerenderHandlerCode && isRscEnv && isBuild) {
-        const fnNames = getFnNames(PRERENDER_CONFIG.fnName);
-        const exportNames = getBindings(code, fnNames).map(
-          (b) => b.exportNames[0],
-        );
-        if (exportNames.length > 0) {
-          prerenderHandlerModules.set(id, exportNames);
+          const warnKey = `${id}::${cfg.fnName}`;
+          if (unsupportedShapeWarnings.has(warnKey)) continue;
+          unsupportedShapeWarnings.add(warnKey);
+          this.warn(buildUnsupportedShapeWarning(filePath, cfg.fnName, sites));
         }
-      }
 
-      // --- Inline handler extraction to virtual modules ---
-      // Runs before stubs/tracking so inline calls become imports, then
-      // the existing regex fast path handles both the original file's
-      // export const patterns and the virtual modules independently.
-      //
-      // Cheap pre-check: count total fnName( occurrences vs export const
-      // patterns. If they match, every call is a named export and the
-      // regex fast path handles them -- skip the AST parse entirely.
-      //
-      // Each iteration creates a fresh MagicString so that AST positions
-      // from findHandlerCalls always match the string they were parsed from.
-      let changed = false;
-
-      const handlerConfigs = [
-        hasStaticHandlerCode && STATIC_CONFIG,
-        hasPrerenderHandlerCode && PRERENDER_CONFIG,
-      ]
-        .filter((c): c is HandlerTransformConfig => !!c)
-        .map((cfg) => {
-          const fnNames = getFnNames(cfg.fnName);
-          return { cfg, fnNames };
-        });
-
-      for (const { cfg, fnNames } of handlerConfigs) {
-        const totalCalls = countCreateCallsForNames(code, fnNames);
-        const supportedBindings = getBindings(code, fnNames).length;
-
-        if (totalCalls > supportedBindings) {
-          const iterS = new MagicString(code);
-          const result = transformInlineHandlers(
-            cfg.fnName,
-            VIRTUAL_HANDLER_PREFIX,
-            iterS,
+        // --- Loader: track for manifest (RSC env only) ---
+        if (hasLoaderCode && isRscEnv) {
+          const fnNames = getFnNames("createLoader");
+          const bindings = getBindings(code, fnNames);
+          for (const binding of bindings) {
+            const exportName = binding.exportNames[0];
+            const hashedId = hashId(filePath, exportName);
+            loaderRegistry.set(hashedId, {
+              filePath,
+              exportName,
+            });
+          }
+        }
+
+        // --- Loader: client stubs for non-RSC environments ---
+        if (hasLoaderCode && !isRscEnv) {
+          const fnNames = getFnNames("createLoader");
+          const bindings = getBindings(code, fnNames);
+          const stubResult = generateClientLoaderStubs(
+            bindings,
             code,
             filePath,
-            virtualHandlers,
-            id,
-            parseAst,
+            isBuild,
           );
-          if (result) {
-            changed = true;
-            code = iterS.toString();
-            _bindingsCache.clear();
-          }
+          if (stubResult) return stubResult;
         }
-      }
 
-      // --- StaticHandler: non-RSC whole-file stub replacement ---
-      // When ALL exports are Static() calls, replace the entire file.
-      if (hasStaticHandlerCode && !isRscEnv) {
-        const fnNames = getFnNames(STATIC_CONFIG.fnName);
-        const bindings = getBindings(code, fnNames);
-        const wholeFile = generateWholeFileStubs(
-          STATIC_CONFIG,
-          bindings,
-          code,
-          filePath,
-          isBuild,
-        );
-        if (wholeFile) return wholeFile;
-      }
+        // --- PrerenderHandler: non-RSC whole-file stub replacement ---
+        // When ALL exports are Prerender() calls, replace the entire file.
+        // Mixed-export files are handled in the unified pipeline below.
+        if (hasPrerenderHandlerCode && !isRscEnv) {
+          const fnNames = getFnNames(PRERENDER_CONFIG.fnName);
+          const bindings = getBindings(code, fnNames);
+          const wholeFile = generateWholeFileStubs(
+            PRERENDER_CONFIG,
+            bindings,
+            code,
+            filePath,
+            isBuild,
+          );
+          if (wholeFile) return wholeFile;
+        }
+
+        // --- Inline handler extraction to virtual modules ---
+        // Runs before stubs/tracking so inline calls become imports, then
+        // the existing regex fast path handles both the original file's
+        // export const patterns and the virtual modules independently.
+        //
+        // Cheap pre-check: count total fnName( occurrences vs export const
+        // patterns. If they match, every call is a named export and the
+        // regex fast path handles them -- skip the AST parse entirely.
+        //
+        // Each iteration creates a fresh MagicString so that AST positions
+        // from findHandlerCalls always match the string they were parsed from.
+        let changed = false;
+
+        const handlerConfigs = [
+          hasStaticHandlerCode && STATIC_CONFIG,
+          hasPrerenderHandlerCode && PRERENDER_CONFIG,
+        ]
+          .filter((c): c is HandlerTransformConfig => !!c)
+          .map((cfg) => {
+            const fnNames = getFnNames(cfg.fnName);
+            return { cfg, fnNames };
+          });
 
-      // --- Mixed-type whole-file stub replacement (non-RSC) ---
-      // When the individual whole-file checks above fail (each only checks
-      // one type), the file has mixed exports (e.g. createLoader + Prerender).
-      // Gather ALL stub-safe bindings and check if they cover every export.
-      // If yes, replace the entire file with stubs — this strips server-only
-      // imports (node:fs, DB clients, etc.) that would crash in the browser.
-      //
-      // Only applies when the file contains Prerender/Static (the handler
-      // types that bring server-only code). Files with only loaders, handles,
-      // or locationState are handled correctly by the unified pipeline below.
-      //
-      // Loader, Prerender, and Static exports become plain { __brand, $$id }
-      // stubs. createHandle and createLocationState need their create*()
-      // functions to execute (collect registration / __rsc_ls_key), so their
-      // call expressions are preserved with only a @rangojs/router import.
-      // This strips all server-only imports while keeping the correct
-      // client contract for every export type.
-      if (!isRscEnv && (hasPrerenderHandlerCode || hasStaticHandlerCode)) {
-        const prerenderFnNames = hasPrerenderHandlerCode
-          ? getFnNames(PRERENDER_CONFIG.fnName)
-          : [];
-        const staticFnNames = hasStaticHandlerCode
-          ? getFnNames(STATIC_CONFIG.fnName)
-          : [];
-        const loaderFnNames = hasLoaderCode ? getFnNames("createLoader") : [];
-        const handleFnNames = hasHandleCode ? getFnNames("createHandle") : [];
-        const lsFnNames = hasLocationStateCode
-          ? getFnNames("createLocationState")
-          : [];
-
-        // Collect ALL recognized bindings to check export coverage
-        const allBindings: CreateExportBinding[] = [];
-        for (const fnNames of [
-          prerenderFnNames,
-          staticFnNames,
-          loaderFnNames,
-          handleFnNames,
-          lsFnNames,
-        ]) {
-          if (fnNames.length > 0) {
-            allBindings.push(...getBindings(code, fnNames));
+        for (const { cfg, fnNames } of handlerConfigs) {
+          const totalCalls = countCreateCallsForNames(code, fnNames);
+          const supportedBindings = getBindings(code, fnNames).length;
+
+          if (totalCalls > supportedBindings) {
+            const iterS = new MagicString(code);
+            const result = transformInlineHandlers(
+              cfg.fnName,
+              VIRTUAL_HANDLER_PREFIX,
+              iterS,
+              code,
+              filePath,
+              virtualHandlers,
+              id,
+              parseAst,
+            );
+            if (result) {
+              changed = true;
+              code = iterS.toString();
+              _bindingsCache.clear();
+            }
           }
         }
 
-        // Check if preserved createHandle/createLocationState calls
-        // reference non-exported locals (e.g. helper functions, constants).
-        // If so, the whole-file stub would strip those locals, breaking
-        // the call. Fall through to the unified pipeline instead.
-        let canStubWholeFile =
-          allBindings.length > 0 && isExportOnlyFile(code, allBindings);
+        // --- StaticHandler: non-RSC whole-file stub replacement ---
+        // When ALL exports are Static() calls, replace the entire file.
+        if (hasStaticHandlerCode && !isRscEnv) {
+          const fnNames = getFnNames(STATIC_CONFIG.fnName);
+          const bindings = getBindings(code, fnNames);
+          const wholeFile = generateWholeFileStubs(
+            STATIC_CONFIG,
+            bindings,
+            code,
+            filePath,
+            isBuild,
+          );
+          if (wholeFile) return wholeFile;
+        }
 
-        if (
-          canStubWholeFile &&
-          (handleFnNames.length > 0 || lsFnNames.length > 0)
-        ) {
-          const exportedLocals = new Set(allBindings.map((b) => b.localName));
-          // Collect bindings that would be stripped by whole-file replacement:
-          // local declarations and imported bindings from non-@rangojs/router
-          // modules. This is a regex-based heuristic — it intentionally skips
-          // edge cases (class decls, destructured bindings, combined
-          // default+named imports) since those rarely appear in route files.
-          const strippedBindings: string[] = [];
-
-          // Skip React Fast Refresh temporaries (_c, _c2, ...) which are
-          // injected by @vitejs/plugin-react in the client environment and
-          // would falsely trigger the bailout.
-          const localDeclPattern =
-            /(?:^|;|\n)\s*(?:const|let|var|function)\s+(\w+)/g;
-          let declMatch: RegExpExecArray | null;
-          while ((declMatch = localDeclPattern.exec(code)) !== null) {
-            const name = declMatch[1];
-            if (!exportedLocals.has(name) && !/^_c\d*$/.test(name)) {
-              strippedBindings.push(name);
+        // --- Mixed-type whole-file stub replacement (non-RSC) ---
+        // When the individual whole-file checks above fail (each only checks
+        // one type), the file has mixed exports (e.g. createLoader + Prerender).
+        // Gather ALL stub-safe bindings and check if they cover every export.
+        // If yes, replace the entire file with stubs — this strips server-only
+        // imports (node:fs, DB clients, etc.) that would crash in the browser.
+        //
+        // Only applies when the file contains Prerender/Static (the handler
+        // types that bring server-only code). Files with only loaders, handles,
+        // or locationState are handled correctly by the unified pipeline below.
+        //
+        // Loader, Prerender, and Static exports become plain { __brand, $$id }
+        // stubs. createHandle and createLocationState need their create*()
+        // functions to execute (collect registration / __rsc_ls_key), so their
+        // call expressions are preserved with only a @rangojs/router import.
+        // This strips all server-only imports while keeping the correct
+        // client contract for every export type.
+        if (!isRscEnv && (hasPrerenderHandlerCode || hasStaticHandlerCode)) {
+          const prerenderFnNames = hasPrerenderHandlerCode
+            ? getFnNames(PRERENDER_CONFIG.fnName)
+            : [];
+          const staticFnNames = hasStaticHandlerCode
+            ? getFnNames(STATIC_CONFIG.fnName)
+            : [];
+          const loaderFnNames = hasLoaderCode ? getFnNames("createLoader") : [];
+          const handleFnNames = hasHandleCode ? getFnNames("createHandle") : [];
+          const lsFnNames = hasLocationStateCode
+            ? getFnNames("createLocationState")
+            : [];
+
+          // Collect ALL recognized bindings to check export coverage
+          const allBindings: CreateExportBinding[] = [];
+          for (const fnNames of [
+            prerenderFnNames,
+            staticFnNames,
+            loaderFnNames,
+            handleFnNames,
+            lsFnNames,
+          ]) {
+            if (fnNames.length > 0) {
+              allBindings.push(...getBindings(code, fnNames));
             }
           }
 
-          const importPattern =
-            /import\s*\{([^}]*)\}\s*from\s*["'](?!@rangojs\/router)[^"']*["']/g;
-          let importMatch: RegExpExecArray | null;
-          while ((importMatch = importPattern.exec(code)) !== null) {
-            for (const spec of importMatch[1].split(",")) {
-              const m = spec
-                .trim()
-                .match(/^[A-Za-z_$][\w$]*(?:\s+as\s+([A-Za-z_$][\w$]*))?$/);
-              if (m) strippedBindings.push(m[1] || m[0].trim().split(/\s/)[0]);
+          // Check if preserved createHandle/createLocationState calls
+          // reference non-exported locals (e.g. helper functions, constants).
+          // If so, the whole-file stub would strip those locals, breaking
+          // the call. Fall through to the unified pipeline instead.
+          let canStubWholeFile =
+            allBindings.length > 0 && isExportOnlyFile(code, allBindings);
+
+          if (
+            canStubWholeFile &&
+            (handleFnNames.length > 0 || lsFnNames.length > 0)
+          ) {
+            const exportedLocals = new Set(allBindings.map((b) => b.localName));
+            // Collect bindings that would be stripped by whole-file replacement:
+            // local declarations and imported bindings from non-@rangojs/router
+            // modules. This is a regex-based heuristic — it intentionally skips
+            // edge cases (class decls, destructured bindings, combined
+            // default+named imports) since those rarely appear in route files.
+            const strippedBindings: string[] = [];
+
+            // Skip React Fast Refresh temporaries (_c, _c2, ...) which are
+            // injected by @vitejs/plugin-react in the client environment and
+            // would falsely trigger the bailout.
+            const localDeclPattern =
+              /(?:^|;|\n)\s*(?:const|let|var|function)\s+(\w+)/g;
+            let declMatch: RegExpExecArray | null;
+            while ((declMatch = localDeclPattern.exec(code)) !== null) {
+              const name = declMatch[1];
+              if (!exportedLocals.has(name) && !/^_c\d*$/.test(name)) {
+                strippedBindings.push(name);
+              }
             }
-          }
-          const defaultImportPattern =
-            /import\s+([A-Za-z_$][\w$]*)\s+from\s*["'](?!@rangojs\/router)[^"']*["']/g;
-          while ((importMatch = defaultImportPattern.exec(code)) !== null) {
-            strippedBindings.push(importMatch[1]);
-          }
-          const nsImportPattern =
-            /import\s+\*\s+as\s+([A-Za-z_$][\w$]*)\s+from\s*["'](?!@rangojs\/router)[^"']*["']/g;
-          while ((importMatch = nsImportPattern.exec(code)) !== null) {
-            strippedBindings.push(importMatch[1]);
-          }
 
-          if (strippedBindings.length > 0) {
-            const preservedBindings = allBindings.filter((b) => {
-              const fc = code.slice(b.callExprStart, b.callOpenParenPos + 1);
-              return (
-                handleFnNames.some((n) => fc.includes(n)) ||
-                lsFnNames.some((n) => fc.includes(n))
+            const importPattern =
+              /import\s*\{([^}]*)\}\s*from\s*["'](?!@rangojs\/router)[^"']*["']/g;
+            let importMatch: RegExpExecArray | null;
+            while ((importMatch = importPattern.exec(code)) !== null) {
+              for (const spec of importMatch[1].split(",")) {
+                const m = spec
+                  .trim()
+                  .match(/^[A-Za-z_$][\w$]*(?:\s+as\s+([A-Za-z_$][\w$]*))?$/);
+                if (m)
+                  strippedBindings.push(m[1] || m[0].trim().split(/\s/)[0]);
+              }
+            }
+            const defaultImportPattern =
+              /import\s+([A-Za-z_$][\w$]*)\s+from\s*["'](?!@rangojs\/router)[^"']*["']/g;
+            while ((importMatch = defaultImportPattern.exec(code)) !== null) {
+              strippedBindings.push(importMatch[1]);
+            }
+            const nsImportPattern =
+              /import\s+\*\s+as\s+([A-Za-z_$][\w$]*)\s+from\s*["'](?!@rangojs\/router)[^"']*["']/g;
+            while ((importMatch = nsImportPattern.exec(code)) !== null) {
+              strippedBindings.push(importMatch[1]);
+            }
+
+            if (strippedBindings.length > 0) {
+              const preservedBindings = allBindings.filter((b) => {
+                const fc = code.slice(b.callExprStart, b.callOpenParenPos + 1);
+                return (
+                  handleFnNames.some((n) => fc.includes(n)) ||
+                  lsFnNames.some((n) => fc.includes(n))
+                );
+              });
+              const strippedRe = new RegExp(
+                `\\b(?:${strippedBindings.join("|")})\\b`,
               );
-            });
-            const strippedRe = new RegExp(
-              `\\b(?:${strippedBindings.join("|")})\\b`,
-            );
-            canStubWholeFile = !preservedBindings.some((b) => {
-              const expr = code.slice(b.callExprStart, b.callCloseParenPos + 1);
-              return strippedRe.test(expr);
-            });
+              canStubWholeFile = !preservedBindings.some((b) => {
+                const expr = code.slice(
+                  b.callExprStart,
+                  b.callCloseParenPos + 1,
+                );
+                return strippedRe.test(expr);
+              });
+            }
           }
-        }
 
-        if (canStubWholeFile) {
-          const lines: string[] = [];
-          const neededImports: string[] = [];
-          if (handleFnNames.length > 0) neededImports.push("createHandle");
-          if (lsFnNames.length > 0) neededImports.push("createLocationState");
-          if (neededImports.length > 0) {
-            lines.push(
-              `import { ${neededImports.join(", ")} } from "@rangojs/router";`,
-            );
-          }
+          if (canStubWholeFile) {
+            const lines: string[] = [];
+            const neededImports: string[] = [];
+            if (handleFnNames.length > 0) neededImports.push("createHandle");
+            if (lsFnNames.length > 0) neededImports.push("createLocationState");
+            if (neededImports.length > 0) {
+              lines.push(
+                `import { ${neededImports.join(", ")} } from "@rangojs/router";`,
+              );
+            }
 
-          for (const binding of allBindings) {
-            const fnCall = code.slice(
-              binding.callExprStart,
-              binding.callOpenParenPos + 1,
-            );
-            const isHandle = handleFnNames.some((n) => fnCall.includes(n));
-            const isLocationState = lsFnNames.some((n) => fnCall.includes(n));
-
-            // Aliases share the primary name's ID (matches server transforms).
-            const primaryName = binding.exportNames[0];
-            const stubId = makeStubId(filePath, primaryName, isBuild);
-
-            if (isHandle || isLocationState) {
-              // Rewrite alias to canonical name since the stub file only
-              // imports canonical names from @rangojs/router.
-              // Strip React Fast Refresh `_c = ` wrappers from args
-              // (e.g. `_c = (segments) => ...` → `(segments) => ...`)
-              const rawArgs = code
-                .slice(binding.callOpenParenPos + 1, binding.callCloseParenPos)
-                .replace(/\b_c\d*\s*=\s*/g, "");
-              const canonicalName = isHandle
-                ? "createHandle"
-                : "createLocationState";
-              const activeFnNames = isHandle ? handleFnNames : lsFnNames;
-
-              // Reconstruct the function name (handling aliases + generics)
-              let rawCallee = code.slice(
+            for (const binding of allBindings) {
+              const fnCall = code.slice(
                 binding.callExprStart,
-                binding.callOpenParenPos,
+                binding.callOpenParenPos + 1,
               );
-              for (const alias of activeFnNames) {
-                if (alias !== canonicalName && rawCallee.startsWith(alias)) {
-                  rawCallee = canonicalName + rawCallee.slice(alias.length);
-                  break;
+              const isHandle = handleFnNames.some((n) => fnCall.includes(n));
+              const isLocationState = lsFnNames.some((n) => fnCall.includes(n));
+
+              // Aliases share the primary name's ID (matches server transforms).
+              const primaryName = binding.exportNames[0];
+              const stubId = makeStubId(filePath, primaryName, isBuild);
+
+              if (isHandle || isLocationState) {
+                // Rewrite alias to canonical name since the stub file only
+                // imports canonical names from @rangojs/router.
+                // Strip React Fast Refresh `_c = ` wrappers from args
+                // (e.g. `_c = (segments) => ...` → `(segments) => ...`)
+                const rawArgs = code
+                  .slice(
+                    binding.callOpenParenPos + 1,
+                    binding.callCloseParenPos,
+                  )
+                  .replace(/\b_c\d*\s*=\s*/g, "");
+                const canonicalName = isHandle
+                  ? "createHandle"
+                  : "createLocationState";
+                const activeFnNames = isHandle ? handleFnNames : lsFnNames;
+
+                // Reconstruct the function name (handling aliases + generics)
+                let rawCallee = code.slice(
+                  binding.callExprStart,
+                  binding.callOpenParenPos,
+                );
+                for (const alias of activeFnNames) {
+                  if (alias !== canonicalName && rawCallee.startsWith(alias)) {
+                    rawCallee = canonicalName + rawCallee.slice(alias.length);
+                    break;
+                  }
                 }
-              }
 
-              if (isHandle) {
-                // createHandle checks __injectedId DURING the call, so $$id
-                // must be a parameter, not a post-call property assignment.
-                const idParam =
-                  binding.argCount === 0
-                    ? `undefined, "${stubId}"`
-                    : `, "${stubId}"`;
-                lines.push(
-                  `export const ${primaryName} = ${rawCallee}(${rawArgs}${idParam});`,
-                );
-                lines.push(`${primaryName}.$$id = "${stubId}";`);
+                if (isHandle) {
+                  // createHandle checks __injectedId DURING the call, so $$id
+                  // must be a parameter, not a post-call property assignment.
+                  const idParam =
+                    binding.argCount === 0
+                      ? `undefined, "${stubId}"`
+                      : `, "${stubId}"`;
+                  lines.push(
+                    `export const ${primaryName} = ${rawCallee}(${rawArgs}${idParam});`,
+                  );
+                  lines.push(`${primaryName}.$$id = "${stubId}";`);
+                } else {
+                  lines.push(
+                    `export const ${primaryName} = ${rawCallee}(${rawArgs});`,
+                  );
+                  lines.push(
+                    `${primaryName}.__rsc_ls_key = "__rsc_ls_${stubId}";`,
+                  );
+                }
+                for (const name of binding.exportNames.slice(1)) {
+                  lines.push(`export const ${name} = ${primaryName};`);
+                }
               } else {
+                let brand = "loader";
+                if (prerenderFnNames.some((n) => fnCall.includes(n))) {
+                  brand = PRERENDER_CONFIG.brand;
+                } else if (staticFnNames.some((n) => fnCall.includes(n))) {
+                  brand = STATIC_CONFIG.brand;
+                }
                 lines.push(
-                  `export const ${primaryName} = ${rawCallee}(${rawArgs});`,
-                );
-                lines.push(
-                  `${primaryName}.__rsc_ls_key = "__rsc_ls_${stubId}";`,
+                  `export const ${primaryName} = { __brand: "${brand}", $$id: "${stubId}" };`,
                 );
-              }
-              for (const name of binding.exportNames.slice(1)) {
-                lines.push(`export const ${name} = ${primaryName};`);
-              }
-            } else {
-              let brand = "loader";
-              if (prerenderFnNames.some((n) => fnCall.includes(n))) {
-                brand = PRERENDER_CONFIG.brand;
-              } else if (staticFnNames.some((n) => fnCall.includes(n))) {
-                brand = STATIC_CONFIG.brand;
-              }
-              lines.push(
-                `export const ${primaryName} = { __brand: "${brand}", $$id: "${stubId}" };`,
-              );
-              for (const name of binding.exportNames.slice(1)) {
-                lines.push(`export const ${name} = ${primaryName};`);
+                for (const name of binding.exportNames.slice(1)) {
+                  lines.push(`export const ${name} = ${primaryName};`);
+                }
               }
             }
-          }
 
-          return { code: lines.join("\n") + "\n", map: null };
+            return { code: lines.join("\n") + "\n", map: null };
+          }
         }
-      }
 
-      // --- StaticHandler: RSC build module tracking ---
-      if (hasStaticHandlerCode && isRscEnv && isBuild) {
-        const fnNames = getFnNames(STATIC_CONFIG.fnName);
-        const exportNames = getBindings(code, fnNames).map(
-          (b) => b.exportNames[0],
-        );
-        if (exportNames.length > 0) {
-          staticHandlerModules.set(id, exportNames);
+        // RSC build module tracking (prerender + static), consumed via the
+        // plugin API for prerender freezing. Export-binding sets are invariant
+        // across the inline-extraction loop, so tracking both here is equivalent
+        // to the pre-extraction prerender tracking this replaces.
+        if (isRscEnv && isBuild) {
+          const trackTypes: Array<
+            [boolean, HandlerTransformConfig, Map<string, string[]>]
+          > = [
+            [
+              hasPrerenderHandlerCode,
+              PRERENDER_CONFIG,
+              prerenderHandlerModules,
+            ],
+            [hasStaticHandlerCode, STATIC_CONFIG, staticHandlerModules],
+          ];
+          for (const [has, cfg, trackMap] of trackTypes) {
+            if (!has) continue;
+            const exportNames = getBindings(code, getFnNames(cfg.fnName)).map(
+              (b) => b.exportNames[0],
+            );
+            if (exportNames.length > 0) trackMap.set(id, exportNames);
+          }
         }
-      }
 
-      // --- Unified MagicString transforms ---
-      // Single pipeline for all downstream transforms (loaders, handles,
-      // locationState, handler IDs). Uses the post-extraction code so
-      // positions are always consistent.
-      const s = new MagicString(code);
-
-      if (hasLoaderCode) {
-        const fnNames = getFnNames("createLoader");
-        changed =
-          transformLoaders(getBindings(code, fnNames), s, filePath, isBuild) ||
-          changed;
-      }
-      if (hasHandleCode) {
-        const fnNames = getFnNames("createHandle");
-        changed =
-          transformHandles(
-            getBindings(code, fnNames),
-            s,
-            code,
-            filePath,
-            isBuild,
-          ) || changed;
-      }
-      if (hasLocationStateCode) {
-        const fnNames = getFnNames("createLocationState");
-        changed =
-          transformLocationState(
-            getBindings(code, fnNames),
-            s,
-            filePath,
-            isBuild,
-          ) || changed;
-      }
-      if (hasPrerenderHandlerCode) {
-        const fnNames = getFnNames(PRERENDER_CONFIG.fnName);
-        const bindings = getBindings(code, fnNames);
-        if (isRscEnv) {
+        // --- Unified MagicString transforms ---
+        // Single pipeline for all downstream transforms (loaders, handles,
+        // locationState, handler IDs). Uses the post-extraction code so
+        // positions are always consistent.
+        const s = new MagicString(code);
+
+        if (hasLoaderCode) {
+          const fnNames = getFnNames("createLoader");
           changed =
-            transformHandlerIds(
-              PRERENDER_CONFIG,
-              bindings,
+            transformLoaders(
+              getBindings(code, fnNames),
               s,
               filePath,
               isBuild,
             ) || changed;
-        } else {
-          // Non-RSC mixed-export file: replace Prerender() calls with stubs
-          // on the shared MagicString so sourcemaps stay accurate.
+        }
+        if (hasHandleCode) {
+          const fnNames = getFnNames("createHandle");
           changed =
-            stubHandlerExprs(
-              PRERENDER_CONFIG,
-              bindings,
+            transformHandles(
+              getBindings(code, fnNames),
               s,
               filePath,
               isBuild,
             ) || changed;
         }
-      }
-      if (hasStaticHandlerCode) {
-        const fnNames = getFnNames(STATIC_CONFIG.fnName);
-        const bindings = getBindings(code, fnNames);
-        if (isRscEnv) {
+        if (hasLocationStateCode) {
+          const fnNames = getFnNames("createLocationState");
           changed =
-            transformHandlerIds(
-              STATIC_CONFIG,
-              bindings,
+            transformLocationState(
+              getBindings(code, fnNames),
               s,
               filePath,
               isBuild,
             ) || changed;
-        } else {
+        }
+        // Prerender + Static share the RSC inject-id vs non-RSC stub dispatch.
+        // Call sites are disjoint (distinct fnNames), so loop order is irrelevant.
+        const finalHandlerConfigs = [
+          hasPrerenderHandlerCode && PRERENDER_CONFIG,
+          hasStaticHandlerCode && STATIC_CONFIG,
+        ].filter((c): c is HandlerTransformConfig => !!c);
+        for (const cfg of finalHandlerConfigs) {
+          const bindings = getBindings(code, getFnNames(cfg.fnName));
           changed =
-            stubHandlerExprs(STATIC_CONFIG, bindings, s, filePath, isBuild) ||
+            (isRscEnv
+              ? transformHandlerIds(cfg, bindings, s, filePath, isBuild)
+              : stubHandlerExprs(cfg, bindings, s, filePath, isBuild)) ||
             changed;
         }
-      }
 
-      if (!changed) return;
+        if (!changed) return;
 
-      return {
-        code: s.toString(),
-        map: s.generateMap({ source: id, includeContent: true }),
-      };
+        return {
+          code: s.toString(),
+          map: s.generateMap({ source: id, includeContent: true }),
+        };
+      } finally {
+        counter?.record(id, performance.now() - __t0);
+      }
     },
   };
 }