@veryfront/ext-content-mdx 0.1.1232 → 0.1.1234

package/esm/_dnt.shims.js

@@ -1,14 +1,29 @@
-import { Deno as dntShimDeno } from "@deno/shim-deno";
 const dntNativeDeno = globalThis.Deno;
 // Prefer the host runtime's own Deno. The `@deno/shim-deno` fallback exists
 // for Node and Bun; under Deno it shadows working native APIs with node:net
 // reimplementations that throw (e.g. Deno.listen reads `server._handle.fd`,
 // which is null on Deno's node compatibility layer).
+//
+// It loads lazily so Deno never resolves it at all. The esm transform
+// rewrites the bare specifier to an absolute file:// bundle, and Deno
+// refuses to prepare that graph node when node_modules is unmanaged, which
+// is what `deno install -g` produces (`nodeModulesDir: "manual"`). A static
+// import therefore failed every request with "Loading unprepared module"
+// naming a bundle that was present on disk, on the one runtime that never
+// reads the value.
 export const Deno = typeof dntNativeDeno?.version?.deno === "string"
     ? dntNativeDeno
-    : dntShimDeno;
-import { crypto } from "@deno/shim-crypto";
-export { crypto } from "@deno/shim-crypto";
+    : (await import("@deno/shim-deno")).Deno;
+const dntNativeCrypto = globalThis.crypto;
+// Web Crypto is a global on every runtime the framework supports (Deno,
+// Node 19+, Bun), so `@deno/shim-crypto` is a fallback for runtimes that no
+// longer exist in practice. It loads lazily for the same reason the Deno
+// shim does: the esm transform rewrites the bare specifier to an absolute
+// file:// bundle, and Deno cannot prepare that graph node when node_modules
+// is unmanaged.
+export const crypto = dntNativeCrypto !== undefined
+    ? dntNativeCrypto
+    : (await import("@deno/shim-crypto")).crypto;
 import { setInterval, setTimeout } from "@deno/shim-timers";
 export { setInterval, setTimeout } from "@deno/shim-timers";
 const dntGlobals = {

package/esm/deno.d.ts

@@ -403,6 +403,7 @@ declare namespace _default {
         "test:unit:cwd-exclusion": string;
         "test:integration": string;
         "test:integration:cli": string;
+        "test:local-inference": string;
         "test:record": string;
         "test:coverage": string;
         "test:coverage:unit": string;
@@ -467,6 +468,7 @@ declare namespace _default {
         "lint:sanitizer-baseline": string;
         "lint:skipped-tests": string;
         "lint:cwd-relative-test-reads": string;
+        "lint:dnt-meta-properties": string;
         "test:scripts": string;
         "test:sentry-runtime-packages": string;
         "test:tool-search-live": string;

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.1232",
+    "version": "0.1.1234",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "minimumDependencyAge": {
@@ -469,7 +469,7 @@ export default {
         "build:prepare": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run -A scripts/build/prepare-framework-sources.ts",
         "build": "deno task build:prepare && deno run -A scripts/build/compile-binary.ts --output ./bin/veryfront",
         "build:proxy-lock": "deno cache --node-modules-dir=none --lock scripts/build/proxy-deno.lock cli/proxy-main.ts",
-        "build:npm": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno run --config=scripts/test.deno.json --frozen -A scripts/build/build-npm-dnt.ts",
+        "build:npm": "deno run -A scripts/build/generate-integrations-module.ts && deno task generate && deno task lint:dnt-meta-properties && deno run --config=scripts/test.deno.json --frozen -A scripts/build/build-npm-dnt.ts",
         "verify:dist": "deno task build && deno task build:npm",
         "release": "deno run -A scripts/release.ts",
         "test": "deno task generate && DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/testing/preload.ts --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts,scripts' --unstable-worker-options --unstable-net",
@@ -479,6 +479,7 @@ export default {
         "test:unit:cwd-exclusion": "DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/testing/preload.ts --no-check --parallel --allow-all --v8-flags=--max-old-space-size=8192 --unstable-worker-options --unstable-net src/testing/cwd-exclusion-a.test.ts src/testing/cwd-exclusion-b.test.ts",
         "test:integration": "deno task generate && DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/testing/preload.ts --no-check --parallel --allow-all '--ignore=tests/e2e,tests/integration/compiled-binary-e2e.test.ts' tests --unstable-worker-options --unstable-net",
         "test:integration:cli": "DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --no-check --parallel --allow-all --unstable-worker-options --unstable-net $(find cli -name '*.integration.test.ts')",
+        "test:local-inference": "deno run -A src/provider/_openai-compatible-smoke-test.ts",
         "test:record": "VCR=record deno test --no-check --allow-all $(find cli -name '*.integration.test.ts' -path '*/commands/*')",
         "test:coverage": "rm -rf coverage && deno task generate && DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/testing/preload.ts --no-check --parallel --fail-fast --allow-all --v8-flags=--max-old-space-size=8192 --coverage=coverage '--ignore=tests/integration/compiled-binary-e2e.test.ts' --unstable-worker-options --unstable-net || exit 1",
         "test:coverage:unit": "rm -rf coverage && deno task generate && DENO_TESTING=1 VF_DISABLE_LRU_INTERVAL=1 SSR_TRANSFORM_PER_PROJECT_LIMIT=0 REVALIDATION_PER_PROJECT_LIMIT=0 NODE_ENV=production LOG_FORMAT=text deno test --preload=src/testing/preload.ts --no-check --parallel --fail-fast --allow-all --v8-flags=--max-old-space-size=8192 --coverage=coverage '--ignore=tests,src/workflow/__tests__' --unstable-worker-options --unstable-net $(find src cli templates -name '*.test.ts*' ! -name '*.integration.test.ts*') || exit 1",
@@ -494,10 +495,10 @@ export default {
         "storybook": "npm --prefix storybook run storybook",
         "build:storybook": "npm --prefix storybook run build-storybook",
         "storybook:check": "deno test --no-lock --config=scripts/test.deno.json --no-check --allow-read scripts/storybook/storybook-workbench.test.ts",
-        "lint": "DENO_NO_PACKAGE_JSON=1 deno lint && deno lint --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/npm-package-metadata.test.ts scripts/build/prepare-framework-sources.test.ts && deno lint --config=scripts/codemods/deno.json scripts/codemods/",
-        "lint:ci": "deno task lint && deno task lint:core-deps && deno task lint:cross-runtime-jsr && deno task lint:dependency-boundaries && deno task lint:module-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task lint:ban-test-only && deno task lint:sanitizer-baseline && deno task lint:skipped-tests && deno task lint:chat-ratchets && deno task lint:chat-composability && deno task lint:rfc-status && deno task lint:esm-sh-codemod && deno task lint:test-typecheck && deno task lint:cwd-relative-test-reads && deno task storybook:check && deno task docs:api-reference:check && deno task docs:errors:check && deno task docs:public:check && deno test --frozen --config=scripts/test.deno.json --no-check --allow-read --allow-write --allow-run=bash scripts/ci/setup-deno-workflow.test.ts scripts/ci/prepare-rc-build.test.ts scripts/build/generated-artifact-checks.test.ts",
-        "fmt": "deno fmt src/ cli/ react/ templates/ && deno fmt --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/prepare-framework-sources.test.ts && deno fmt --config=scripts/codemods/deno.json scripts/codemods/",
-        "fmt:check": "deno fmt --check src/ cli/ react/ templates/ && deno fmt --check --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/prepare-framework-sources.test.ts && deno fmt --check --config=scripts/codemods/deno.json scripts/codemods/",
+        "lint": "DENO_NO_PACKAGE_JSON=1 deno lint && deno lint --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-meta-property-safety.ts scripts/build/dnt-meta-property-safety.test.ts scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/npm-package-metadata.test.ts scripts/build/prepare-framework-sources.test.ts && deno lint --config=scripts/codemods/deno.json scripts/codemods/",
+        "lint:ci": "deno task lint && deno task lint:core-deps && deno task lint:cross-runtime-jsr && deno task lint:dependency-boundaries && deno task lint:module-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task lint:ban-test-only && deno task lint:sanitizer-baseline && deno task lint:skipped-tests && deno task lint:chat-ratchets && deno task lint:chat-composability && deno task lint:rfc-status && deno task lint:esm-sh-codemod && deno task lint:test-typecheck && deno task lint:cwd-relative-test-reads && deno task lint:dnt-meta-properties && deno task storybook:check && deno task docs:api-reference:check && deno task docs:errors:check && deno task docs:public:check && deno test --frozen --config=scripts/test.deno.json --no-check --allow-read --allow-write --allow-run=bash scripts/ci/setup-deno-workflow.test.ts scripts/ci/prepare-rc-build.test.ts scripts/build/generated-artifact-checks.test.ts",
+        "fmt": "deno fmt src/ cli/ react/ templates/ && deno fmt --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-meta-property-safety.ts scripts/build/dnt-meta-property-safety.test.ts scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/prepare-framework-sources.test.ts && deno fmt --config=scripts/codemods/deno.json scripts/codemods/",
+        "fmt:check": "deno fmt --check src/ cli/ react/ templates/ && deno fmt --check --config=scripts/test.deno.json scripts/test/ scripts/build/dnt-meta-property-safety.ts scripts/build/dnt-meta-property-safety.test.ts scripts/build/dnt-polyfill.ts scripts/build/dnt-polyfill.test.ts scripts/build/prepare-framework-sources.test.ts && deno fmt --check --config=scripts/codemods/deno.json scripts/codemods/",
         "typecheck": "deno task generate:manifests:check && deno check src/index.ts cli/main.ts src/server/index.ts src/routing/api/index.ts src/rendering/index.ts src/platform/index.ts src/platform/adapters/index.ts src/build/index.ts src/build/production-build/index.ts src/transforms/index.ts src/config/index.ts src/utils/index.ts src/data/index.ts src/security/index.ts src/middleware/index.ts src/server/handlers/dev/index.ts src/server/handlers/request/api/index.ts src/rendering/cache/index.ts src/rendering/cache/stores/index.ts src/rendering/rsc/actions/index.ts src/html/index.ts src/html/hydration-script-builder/runtime/main.ts src/modules/index.ts src/proxy/main.ts src/react/components/ui/index.ts src/chat/index.ts src/markdown/index.ts src/mdx/index.ts src/fs/index.ts src/oauth/index.ts src/agent/index.ts src/agent/service/route-export.check.ts src/eval/index.ts src/tool/index.ts src/workflow/index.ts src/prompt/index.ts src/resource/index.ts src/runs/index.ts src/mcp/index.ts src/provider/index.ts",
         "verify": "deno task generate:manifests:check && deno task fmt:check && deno task lint && deno task lint:style && deno task lint:chat-composability && deno task lint:rfc-status && deno task lint:chat-ratchets && deno task lint:esm-sh-codemod && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-test-only && deno task lint:sanitizer-baseline && deno task lint:skipped-tests && deno task lint:ban-zod && deno task lint:cwd-relative-test-reads && deno task lint:core-deps && deno task lint:cross-runtime-jsr && deno task lint:dependency-boundaries && deno task lint:module-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task docs:api-reference:check && deno task docs:errors:check && deno task docs:validate && deno task typecheck && deno task typecheck:consumer && deno task test && deno task test:scripts && deno task test:e2e:binary",
         "verify:quick": "deno task generate:manifests:check && deno task fmt:check && deno task lint && deno task lint:style && deno task lint:chat-composability && deno task lint:rfc-status && deno task lint:chat-ratchets && deno task lint:esm-sh-codemod && deno task lint:cli-boundary && deno task lint:wildcard-exports && deno task lint:barrel-jsdoc && deno task lint:ban-test-only && deno task lint:sanitizer-baseline && deno task lint:skipped-tests && deno task lint:ban-zod && deno task lint:cwd-relative-test-reads && deno task lint:core-deps && deno task lint:cross-runtime-jsr && deno task lint:dependency-boundaries && deno task lint:module-boundaries && deno task lint:extension-contracts && deno task lint:extension-capabilities && deno task docs:api-reference:check && deno task docs:errors:check && deno task docs:validate && deno task typecheck",
@@ -543,7 +544,8 @@ export default {
         "lint:sanitizer-baseline": "deno run --allow-read scripts/lint/check-sanitizer-baseline.ts",
         "lint:skipped-tests": "deno run --allow-read scripts/lint/check-skipped-tests-baseline.ts",
         "lint:cwd-relative-test-reads": "deno run --allow-read scripts/lint/audit-cwd-relative-test-reads.ts",
-        "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read --allow-write --allow-run scripts/ci/prepare-rc-build.test.ts scripts/ci/publish-npm-packages.test.ts scripts/ci/setup-deno-workflow.test.ts scripts/build/compile-binary.test.ts scripts/build/dnt-polyfill.test.ts scripts/build/generate-sbom.test.ts scripts/build/generated-artifact-checks.test.ts scripts/build/npm-dependency-sources.test.ts scripts/build/npm-extension-package-metadata.test.ts scripts/build/npm-package-metadata.test.ts scripts/build/npm-react-shims.test.ts scripts/build/npm-runtime-helper-contract.test.ts scripts/build/prepare-framework-sources.test.ts scripts/docs/docs-coverage.test.ts scripts/docs/generate-api-reference.test.ts scripts/docs/guide-validation.test.ts scripts/lint/audit-chat-composability.test.ts scripts/lint/audit-rfc-status.test.ts scripts/lint/audit-core-deps.test.ts scripts/lint/audit-cwd-relative-test-reads.test.ts scripts/lint/audit-cross-runtime-jsr.test.ts scripts/lint/audit-dependency-boundaries.test.ts scripts/lint/audit-extension-capabilities.test.ts scripts/lint/audit-extension-contracts.test.ts scripts/lint/audit-deps.test.ts scripts/lint/check-module-boundaries.test.ts scripts/lint/lint-config.test.ts scripts/lint/ban-test-only.test.ts scripts/lint/check-sanitizer-baseline.test.ts scripts/lint/check-skipped-tests-baseline.test.ts scripts/lint/check-test-typecheck-baseline.test.ts scripts/lint/check-coverage.test.ts scripts/security/audit-npm.test.ts scripts/security/submit-dependency-snapshot.test.ts scripts/test/template-runtime-e2e.test.ts && deno task test:tool-search-live",
+        "lint:dnt-meta-properties": "deno run --config=scripts/test.deno.json --frozen --allow-read scripts/build/dnt-meta-property-safety.ts",
+        "test:scripts": "deno test --config=scripts/test.deno.json --no-check --allow-read --allow-write --allow-run scripts/ci/prepare-rc-build.test.ts scripts/ci/publish-npm-packages.test.ts scripts/ci/setup-deno-workflow.test.ts scripts/build/compile-binary.test.ts scripts/build/dnt-meta-property-safety.test.ts scripts/build/dnt-polyfill.test.ts scripts/build/generate-sbom.test.ts scripts/build/generated-artifact-checks.test.ts scripts/build/npm-dependency-sources.test.ts scripts/build/npm-extension-package-metadata.test.ts scripts/build/npm-package-metadata.test.ts scripts/build/npm-react-shims.test.ts scripts/build/npm-runtime-helper-contract.test.ts scripts/build/prepare-framework-sources.test.ts scripts/docs/docs-coverage.test.ts scripts/docs/generate-api-reference.test.ts scripts/docs/guide-validation.test.ts scripts/lint/audit-chat-composability.test.ts scripts/lint/audit-rfc-status.test.ts scripts/lint/audit-core-deps.test.ts scripts/lint/audit-cwd-relative-test-reads.test.ts scripts/lint/audit-cross-runtime-jsr.test.ts scripts/lint/audit-dependency-boundaries.test.ts scripts/lint/audit-extension-capabilities.test.ts scripts/lint/audit-extension-contracts.test.ts scripts/lint/audit-deps.test.ts scripts/lint/check-module-boundaries.test.ts scripts/lint/lint-config.test.ts scripts/lint/ban-test-only.test.ts scripts/lint/check-sanitizer-baseline.test.ts scripts/lint/check-skipped-tests-baseline.test.ts scripts/lint/check-test-typecheck-baseline.test.ts scripts/lint/check-coverage.test.ts scripts/security/audit-npm.test.ts scripts/security/submit-dependency-snapshot.test.ts scripts/test/template-runtime-e2e.test.ts && deno task test:tool-search-live",
         "test:sentry-runtime-packages": "deno test --config=scripts/test.deno.json --no-check --no-lock --allow-read --allow-write --allow-run --allow-env=DENO_DIR,HOME,XDG_CACHE_HOME,LOCALAPPDATA,USERPROFILE scripts/build/sentry-runtime-packages.test.ts",
         "test:tool-search-live": "VF_DISABLE_LRU_INTERVAL=1 deno test --no-check -A tests/agent/verify-tool-search-live.test.ts",
         "test:cross-runtime": "deno run --allow-all src/platform/compat/cross-runtime.test.ts",

package/esm/src/errors/error-registry/deploy.d.ts

@@ -3,6 +3,7 @@ export declare const PLATFORM_ERROR: import("../types.js").RegisteredError;
 export declare const ENV_VAR_MISSING: import("../types.js").RegisteredError;
 export declare const PRODUCTION_BUILD_REQUIRED: import("../types.js").RegisteredError;
 export declare const ENVIRONMENT_NOT_FOUND: import("../types.js").RegisteredError;
+export declare const ENVIRONMENT_NOT_ROUTABLE: import("../types.js").RegisteredError;
 export declare const RELEASE_MISSING_VERSION: import("../types.js").RegisteredError;
 export declare const RELEASE_BUILD_TIMEOUT: import("../types.js").RegisteredError;
 export declare const DEPLOYMENT_VERIFICATION_TIMEOUT: import("../types.js").RegisteredError;
@@ -10,13 +11,23 @@ export declare const PUSH_RECEIPT_MISSING: import("../types.js").RegisteredError
 export declare const SOURCE_DIGEST_MISMATCH: import("../types.js").RegisteredError;
 export declare const PREVIEW_HOSTNAME_TOO_LONG: import("../types.js").RegisteredError;
 export declare const BRANCH_NOT_FOUND: import("../types.js").RegisteredError;
+/**
+ * The project's configuration file uses a construct Veryfront Cloud's
+ * configuration evaluator can never accept, so the release would answer 500 to
+ * every request. Raised before a release is created; the detail names the file,
+ * the change that makes the project deployable, and the line when the evaluator
+ * located the construct it refused.
+ */
+export declare const CONFIG_NOT_DEPLOYABLE: import("../types.js").RegisteredError;
 /** Registry fragment for DEPLOY errors (slug → definition). */
 export declare const DEPLOY_REGISTRY: {
+    readonly "config-not-deployable": import("../types.js").RegisteredError;
     readonly "deployment-error": import("../types.js").RegisteredError;
     readonly "platform-error": import("../types.js").RegisteredError;
     readonly "env-var-missing": import("../types.js").RegisteredError;
     readonly "production-build-required": import("../types.js").RegisteredError;
     readonly "environment-not-found": import("../types.js").RegisteredError;
+    readonly "environment-not-routable": import("../types.js").RegisteredError;
     readonly "release-missing-version": import("../types.js").RegisteredError;
     readonly "release-build-timeout": import("../types.js").RegisteredError;
     readonly "deployment-verification-timeout": import("../types.js").RegisteredError;

package/esm/src/errors/error-registry/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../../src/src/errors/error-registry/deploy.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,uCAM3B,CAAC;AAEH,eAAO,MAAM,cAAc,uCAMzB,CAAC;AAEH,eAAO,MAAM,eAAe,uCAM1B,CAAC;AAEH,eAAO,MAAM,yBAAyB,uCAMpC,CAAC;AAEH,eAAO,MAAM,qBAAqB,uCAMhC,CAAC;AAEH,eAAO,MAAM,uBAAuB,uCAMlC,CAAC;AAEH,eAAO,MAAM,qBAAqB,uCAMhC,CAAC;AAEH,eAAO,MAAM,+BAA+B,uCAM1C,CAAC;AAEH,eAAO,MAAM,oBAAoB,uCAM/B,CAAC;AAEH,eAAO,MAAM,sBAAsB,uCAMjC,CAAC;AAEH,eAAO,MAAM,yBAAyB,uCAMpC,CAAC;AAEH,eAAO,MAAM,gBAAgB,uCAM3B,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAalB,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../../../src/src/errors/error-registry/deploy.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,uCAM3B,CAAC;AAEH,eAAO,MAAM,cAAc,uCAMzB,CAAC;AAEH,eAAO,MAAM,eAAe,uCAM1B,CAAC;AAEH,eAAO,MAAM,yBAAyB,uCAMpC,CAAC;AAEH,eAAO,MAAM,qBAAqB,uCAMhC,CAAC;AAEH,eAAO,MAAM,wBAAwB,uCAOnC,CAAC;AAEH,eAAO,MAAM,uBAAuB,uCAMlC,CAAC;AAEH,eAAO,MAAM,qBAAqB,uCAMhC,CAAC;AAEH,eAAO,MAAM,+BAA+B,uCAM1C,CAAC;AAEH,eAAO,MAAM,oBAAoB,uCAM/B,CAAC;AAEH,eAAO,MAAM,sBAAsB,uCAMjC,CAAC;AAEH,eAAO,MAAM,yBAAyB,uCAMpC,CAAC;AAEH,eAAO,MAAM,gBAAgB,uCAM3B,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,uCAQhC,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;CAelB,CAAC"}

package/esm/src/errors/error-registry/deploy.js

@@ -34,6 +34,13 @@ export const ENVIRONMENT_NOT_FOUND = defineError({
     title: "Deployment environment not found",
     suggestion: "Check environment names with: veryfront config",
 });
+export const ENVIRONMENT_NOT_ROUTABLE = defineError({
+    slug: "environment-not-routable",
+    category: "DEPLOY",
+    status: 400,
+    title: "Environment name has no Veryfront-hosted address",
+    suggestion: "Deploy to preview, staging, or production, or attach a custom domain to this environment in Studio",
+});
 export const RELEASE_MISSING_VERSION = defineError({
     slug: "release-missing-version",
     category: "DEPLOY",
@@ -83,13 +90,30 @@ export const BRANCH_NOT_FOUND = defineError({
     title: "Branch not found",
     suggestion: "List branches in Studio or push a new one with: veryfront push --branch <name>",
 });
+/**
+ * The project's configuration file uses a construct Veryfront Cloud's
+ * configuration evaluator can never accept, so the release would answer 500 to
+ * every request. Raised before a release is created; the detail names the file,
+ * the change that makes the project deployable, and the line when the evaluator
+ * located the construct it refused.
+ */
+export const CONFIG_NOT_DEPLOYABLE = defineError({
+    slug: "config-not-deployable",
+    category: "DEPLOY",
+    status: 400,
+    title: "Configuration cannot be deployed to Veryfront Cloud",
+    suggestion: "Veryfront Cloud reads veryfront.config.ts as data: keep it to literals and the veryfront configuration helpers",
+    exitCode: 2,
+});
 /** Registry fragment for DEPLOY errors (slug → definition). */
 export const DEPLOY_REGISTRY = {
+    "config-not-deployable": CONFIG_NOT_DEPLOYABLE,
     "deployment-error": DEPLOYMENT_ERROR,
     "platform-error": PLATFORM_ERROR,
     "env-var-missing": ENV_VAR_MISSING,
     "production-build-required": PRODUCTION_BUILD_REQUIRED,
     "environment-not-found": ENVIRONMENT_NOT_FOUND,
+    "environment-not-routable": ENVIRONMENT_NOT_ROUTABLE,
     "release-missing-version": RELEASE_MISSING_VERSION,
     "release-build-timeout": RELEASE_BUILD_TIMEOUT,
     "deployment-verification-timeout": DEPLOYMENT_VERIFICATION_TIMEOUT,

package/esm/src/errors/error-registry.d.ts

@@ -111,11 +111,13 @@ export declare const ERROR_REGISTRY: Readonly<{
     readonly "error-overlay-error": import("./types.js").RegisteredError;
     readonly "source-map-error": import("./types.js").RegisteredError;
 } & {
+    readonly "config-not-deployable": import("./types.js").RegisteredError;
     readonly "deployment-error": import("./types.js").RegisteredError;
     readonly "platform-error": import("./types.js").RegisteredError;
     readonly "env-var-missing": import("./types.js").RegisteredError;
     readonly "production-build-required": import("./types.js").RegisteredError;
     readonly "environment-not-found": import("./types.js").RegisteredError;
+    readonly "environment-not-routable": import("./types.js").RegisteredError;
     readonly "release-missing-version": import("./types.js").RegisteredError;
     readonly "release-build-timeout": import("./types.js").RegisteredError;
     readonly "deployment-verification-timeout": import("./types.js").RegisteredError;

package/esm/src/errors/error-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-registry.d.ts","sourceRoot":"","sources":["../../../src/src/errors/error-registry.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAgBhD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY1B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,cAAc,CAAC;AAEpD;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,wCAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,0CAE1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,SAAS,EAAE,CAEzC"}
+{"version":3,"file":"error-registry.d.ts","sourceRoot":"","sources":["../../../src/src/errors/error-registry.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAgBhD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY1B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,cAAc,CAAC;AAEpD;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,wCAE7C;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,0CAE1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,SAAS,EAAE,CAEzC"}

package/esm/src/platform/adapters/native-file-system-provenance.d.ts

@@ -1,4 +1,27 @@
 import type { FileSystemAdapter } from "./base.js";
+/**
+ * Whether `instance` was constructed directly as `constructorRef` rather than as
+ * a subclass of it.
+ *
+ * `new.target === constructorRef` is the natural spelling and cannot be used
+ * here: DNT rewrites every meta-property into its `import.meta` ponyfill when it
+ * emits the npm package, so in the published build `new.target` is an
+ * `ImportMeta`, the comparison is unconditionally false, and no adapter is ever
+ * registered (see `scripts/build/dnt-meta-property-safety.ts`).
+ *
+ * `this.constructor === constructorRef` survives that transform but is
+ * forgeable: a subclass that deletes or overwrites its own
+ * `prototype.constructor` inherits the base's, so a subclass instance would be
+ * classified as a directly constructed built-in.
+ *
+ * Prototype identity survives the transform and is not forgeable that way. A
+ * class's `prototype` is a non-writable, non-configurable own property, and
+ * `[[Construct]]` takes the new object's prototype from `new.target.prototype`,
+ * so `new Subclass()` always arrives here carrying `Subclass.prototype`.
+ */
+export declare function isDirectConstruction(instance: object, constructorRef: {
+    readonly prototype: object;
+}): boolean;
 /** Register a directly constructed built-in adapter backed by the host filesystem. */
 export declare function markNativeFileSystemAdapter(adapter: FileSystemAdapter): void;
 /** Return true only for the exact built-in adapter object registered at construction. */

package/esm/src/platform/adapters/native-file-system-provenance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-file-system-provenance.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/adapters/native-file-system-provenance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAWnD,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAE5E;AAED,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAMT"}
+{"version":3,"file":"native-file-system-provenance.d.ts","sourceRoot":"","sources":["../../../../src/src/platform/adapters/native-file-system-provenance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAYnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC7C,OAAO,CAGT;AAED,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAE5E;AAED,yFAAyF;AACzF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAMT"}

package/esm/src/platform/adapters/native-file-system-provenance.js

@@ -1,10 +1,35 @@
 const IntrinsicWeakSet = WeakSet;
 const ReflectApply = Reflect.apply;
+const ObjectGetPrototypeOf = Object.getPrototypeOf;
 const WeakSetPrototypeAdd = IntrinsicWeakSet.prototype.add;
 const WeakSetPrototypeHas = IntrinsicWeakSet.prototype.has;
 // Exact-object provenance only. Wrappers and proxies must not inherit this
 // classification because they may translate paths into a non-native namespace.
 const nativeFileSystemAdapters = new IntrinsicWeakSet();
+/**
+ * Whether `instance` was constructed directly as `constructorRef` rather than as
+ * a subclass of it.
+ *
+ * `new.target === constructorRef` is the natural spelling and cannot be used
+ * here: DNT rewrites every meta-property into its `import.meta` ponyfill when it
+ * emits the npm package, so in the published build `new.target` is an
+ * `ImportMeta`, the comparison is unconditionally false, and no adapter is ever
+ * registered (see `scripts/build/dnt-meta-property-safety.ts`).
+ *
+ * `this.constructor === constructorRef` survives that transform but is
+ * forgeable: a subclass that deletes or overwrites its own
+ * `prototype.constructor` inherits the base's, so a subclass instance would be
+ * classified as a directly constructed built-in.
+ *
+ * Prototype identity survives the transform and is not forgeable that way. A
+ * class's `prototype` is a non-writable, non-configurable own property, and
+ * `[[Construct]]` takes the new object's prototype from `new.target.prototype`,
+ * so `new Subclass()` always arrives here carrying `Subclass.prototype`.
+ */
+export function isDirectConstruction(instance, constructorRef) {
+    return ReflectApply(ObjectGetPrototypeOf, undefined, [instance]) ===
+        constructorRef.prototype;
+}
 /** Register a directly constructed built-in adapter backed by the host filesystem. */
 export function markNativeFileSystemAdapter(adapter) {
     ReflectApply(WeakSetPrototypeAdd, nativeFileSystemAdapters, [adapter]);

package/esm/src/platform/adapters/runtime/deno/filesystem-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"filesystem-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/runtime/deno/filesystem-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EAGR,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AAWvB,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,sCAAsC,CAAC;AAE9C,UAAU,cAAc;IACtB,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,iBAAiB;IACzB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GACxC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED,UAAU,+BAAgC,SAAQ,+BAA+B;IAC/E,4EAA4E;IAC5E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvD;AAoGD,qBAAa,qBAAsB,YAAW,iBAAiB;gBACjD,OAAO,GAAE,+BAAoC;IAuBnD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKhD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAW1E,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAW9E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC;IAY/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKlD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW;CAoGrE;AAED,MAAM,WAAW,qBAAqB;IACpC,2BAA2B,CAAC,CAC1B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E"}
+{"version":3,"file":"filesystem-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/runtime/deno/filesystem-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EAGR,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AAcvB,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,sCAAsC,CAAC;AAE9C,UAAU,cAAc;IACtB,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,UAAU,iBAAiB;IACzB,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,KAAK,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GACxC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED,UAAU,+BAAgC,SAAQ,+BAA+B;IAC/E,4EAA4E;IAC5E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACvD;AAoGD,qBAAa,qBAAsB,YAAW,iBAAiB;gBACjD,OAAO,GAAE,+BAAoC;IAuBnD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKhD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAW1E,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAW9E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC;IAY/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKlD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW;CAoGrE;AAED,MAAM,WAAW,qBAAqB;IACpC,2BAA2B,CAAC,CAC1B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E"}

package/esm/src/platform/adapters/runtime/deno/filesystem-adapter.js

@@ -4,7 +4,7 @@ import { createFileWatcher } from "../shared/watcher-queue.js";
 import { resolve, sep } from "../../../compat/path/index.js";
 import { validateTempDirectoryPrefix } from "../../../compat/temp-directory-prefix.js";
 import { readBoundedFilePrefix, readFileWithinLimit, withFileHandle, } from "../../bounded-file-read.js";
-import { markNativeFileSystemAdapter } from "../../native-file-system-provenance.js";
+import { isDirectConstruction, markNativeFileSystemAdapter, } from "../../native-file-system-provenance.js";
 import { NodeCompatibleFileSystemAdapter, } from "../shared/node-filesystem-adapter.js";
 function hasOwn(value, property) {
     return Object.prototype.hasOwnProperty.call(value, property);
@@ -100,7 +100,7 @@ export class DenoFileSystemAdapter {
                 enumerable: true,
             });
         }
-        if (globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta) === DenoFileSystemAdapter) {
+        if (isDirectConstruction(this, DenoFileSystemAdapter)) {
             markNativeFileSystemAdapter(this);
         }
     }

package/esm/src/platform/adapters/runtime/shared/node-filesystem-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-filesystem-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/runtime/shared/node-filesystem-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EAER,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAA4C,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAcnG,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAUD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,UAAU,cAAc;IACtB,IAAI,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtC,IAAI,CACF,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAC3C,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;AAED,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAoElF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAMT;AA6DD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,wBAAwB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CA4JrB;AAcD;;;GAGG;AACH,qBAAa,+BAAgC,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,GAAE,oBAAmC,EAC5D,OAAO,GAAE,+BAAoC;IAqCzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMhD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB1E,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB9E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC;IAc/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,SAAS,CAAC,YAAY,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;IAIhB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW;CAmIrE;AAED,MAAM,WAAW,+BAA+B;IAC9C,2BAA2B,CAAC,CAC1B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E"}
+{"version":3,"file":"node-filesystem-adapter.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/runtime/shared/node-filesystem-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EAER,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAA4C,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAiBnG,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAUD,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,UAAU,cAAc;IACtB,IAAI,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACtC,IAAI,CACF,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,+BAA+B;IAC9C,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAC3C,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACzD;AAED,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAoElF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAMT;AA6DD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,wBAAwB,EACpC,QAAQ,EAAE,sBAAsB,EAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CA4JrB;AAcD;;;GAGG;AACH,qBAAa,+BAAgC,YAAW,iBAAiB;IAErE,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,GAAE,oBAAmC,EAC5D,OAAO,GAAE,+BAAoC;IAqCzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAMhD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB1E,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB9E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC;IAc/C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYtC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBtE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,SAAS,CAAC,YAAY,CACpB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;IAIhB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW;CAmIrE;AAED,MAAM,WAAW,+BAA+B;IAC9C,2BAA2B,CAAC,CAC1B,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,wBAAwB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E"}

package/esm/src/platform/adapters/runtime/shared/node-filesystem-adapter.js

@@ -4,7 +4,7 @@ import { makeNodeTempDir } from "./temp-dir.js";
 import { isProxyWithoutHooks } from "../../../compat/error-introspection.js";
 import { isCanonicalNotFoundError } from "../../../compat/not-found-error.js";
 import { readBoundedFilePrefix, readFileWithinLimit, withFileHandle, } from "../../bounded-file-read.js";
-import { markNativeFileSystemAdapter } from "../../native-file-system-provenance.js";
+import { isDirectConstruction, markNativeFileSystemAdapter, } from "../../native-file-system-provenance.js";
 import { constants as nodeFsConstants } from "node:fs";
 import { resolve } from "../../../compat/path/index.js";
 import { runtimeUsesWindowsPaths } from "../../../compat/path/portable.js";
@@ -283,7 +283,7 @@ export class NodeCompatibleFileSystemAdapter {
                 enumerable: true,
             });
         }
-        if (globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta) === NodeCompatibleFileSystemAdapter) {
+        if (isDirectConstruction(this, NodeCompatibleFileSystemAdapter)) {
             markNativeFileSystemAdapter(this);
         }
     }

package/esm/src/platform/compat/process/env.d.ts

@@ -17,6 +17,10 @@ export declare function getHostEnv(key: string): string | undefined;
  * Kept out of the public process barrel so project code cannot replace the
  * callback through a supported package export. Re-registering a different
  * function is rejected rather than silently widening an isolation boundary.
+ *
+ * Registering the bridge also installs the matching view over `process.env`, so
+ * the raw environment object and `getEnv()` are scoped by the same act and
+ * cannot drift apart.
  */
 export declare function registerTrustedProjectEnvSnapshot(getter: () => ProjectEnvSnapshot | undefined): void;
 /** Return the active server-owned project env snapshot, if registered. */

package/esm/src/platform/compat/process/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAKpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoB5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAqB1D;AAID;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,kBAAkB,GAAG,SAAS,GAC3C,IAAI,CAKN;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,IAAI,kBAAkB,GAAG,SAAS,CAE7E;AAED,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWtD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAapE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAiBvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/env.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAKpE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACtC,CAAC;AAoBF,oDAAoD;AACpD,wBAAgB,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4B5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAwB1D;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,kBAAkB,GAAG,SAAS,GAC3C,IAAI,CAMN;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,IAAI,kBAAkB,GAAG,SAAS,CAE7E;AAED,kEAAkE;AAClE,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYtD;AAKD,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAOpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;AAapE,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,QAAQ,UAAQ,EAChB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAmBT;AAED,gBAAgB;AAChB,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAiBvD;AAED,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAiB3C;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,GAAG,IAAI,CAS/D"}

package/esm/src/platform/compat/process/env.js

@@ -1,6 +1,7 @@
 import * as dntShim from "../../../../_dnt.shims.js";
 import { getDenoRuntime, isDeno as IS_DENO } from "../runtime.js";
-import { runtimeProcess } from "./runtime-process.js";
+import { hostProcessEnv, runtimeProcess } from "./runtime-process.js";
+import { installProjectScopedProcessEnv, projectScopedEnvRecord, readProjectScopedEnv, } from "./scoped-process-env.js";
 function getEnvOverlayStore() {
     const storage = getEnvOverlayStorage();
     const store = storage?.getStore();
@@ -15,11 +16,19 @@ function getOverlayEnvValue(store, key) {
 }
 /** Read and write process environment variables. */
 export function env() {
+    const projectEnv = getTrustedProjectEnvSnapshot();
+    // Same rule as getEnv(): while a project scope is active its snapshot is the
+    // whole environment, so the bulk accessor cannot report a wider set of
+    // variables than the single-key one. Built from the scoped view rather than
+    // the raw snapshot, so a write the raw object has already accepted is not
+    // missing here.
+    if (projectEnv !== undefined)
+        return projectScopedEnvRecord(projectEnv);
     const deno = IS_DENO ? getDenoRuntime() : undefined;
     const base = deno
         ? deno.env.toObject()
-        : runtimeProcess
-            ? { ...runtimeProcess.env }
+        : hostProcessEnv
+            ? { ...hostProcessEnv }
             : {};
     const overlay = getEnvOverlayStore();
     if (!overlay)
@@ -56,8 +65,11 @@ export function getHostEnv(key) {
             return undefined;
         }
     }
-    if (runtimeProcess)
-        return runtimeProcess.env[key];
+    // Read the captured host record rather than `runtimeProcess.env`, so the
+    // narrower view installed over `process.env` cannot redirect a host-scoped
+    // read back into a project scope.
+    if (hostProcessEnv)
+        return hostProcessEnv[key];
     return undefined;
 }
 let _trustedProjectEnvSnapshot = null;
@@ -67,12 +79,17 @@ let _trustedProjectEnvSnapshot = null;
  * Kept out of the public process barrel so project code cannot replace the
  * callback through a supported package export. Re-registering a different
  * function is rejected rather than silently widening an isolation boundary.
+ *
+ * Registering the bridge also installs the matching view over `process.env`, so
+ * the raw environment object and `getEnv()` are scoped by the same act and
+ * cannot drift apart.
  */
 export function registerTrustedProjectEnvSnapshot(getter) {
     if (_trustedProjectEnvSnapshot && _trustedProjectEnvSnapshot !== getter) {
         throw new Error("Project environment snapshot bridge is already registered");
     }
     _trustedProjectEnvSnapshot = getter;
+    installProjectScopedProcessEnv(getTrustedProjectEnvSnapshot);
 }
 /** Return the active server-owned project env snapshot, if registered. */
 export function getTrustedProjectEnvSnapshot() {
@@ -85,8 +102,9 @@ export function getEnv(key) {
         // The registered snapshot is authoritative even when the requested key is
         // absent. Falling through here would expose host process configuration to
         // a remote project. Never discover this boundary through replaceable
-        // globalThis hooks.
-        return projectEnv[key];
+        // globalThis hooks. Reads go through the scoped view so this accessor and
+        // the raw object resolve a key by the same rule, writes included.
+        return readProjectScopedEnv(projectEnv, key);
     }
     return getHostEnv(key);
 }

package/esm/src/platform/compat/process/runtime-process.d.ts

@@ -6,5 +6,13 @@ export type RuntimeProcess = typeof import("node:process");
  */
 export declare function testHasRuntimeProcess(processLike: unknown): processLike is RuntimeProcess;
 export declare const runtimeProcess: RuntimeProcess | null;
+/**
+ * The host environment record, captured before any narrower view is installed
+ * over `process.env`.
+ *
+ * Host-scoped accessors read through this reference so that installing a
+ * scoped view over `process.env` cannot redirect them.
+ */
+export declare const hostProcessEnv: RuntimeProcess["env"] | null;
 export declare function isWindowsPlatform(): boolean;
 //# sourceMappingURL=runtime-process.d.ts.map

package/esm/src/platform/compat/process/runtime-process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-process.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/runtime-process.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG,cAAc,cAAc,CAAC,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,OAAO,GAAG,WAAW,IAAI,cAAc,CAIzF;AAED,eAAO,MAAM,cAAc,EAAE,cAAc,GAAG,IAEtC,CAAC;AAET,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C"}
+{"version":3,"file":"runtime-process.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/runtime-process.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG,cAAc,cAAc,CAAC,CAAC;AAE3D;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,OAAO,GAAG,WAAW,IAAI,cAAc,CAIzF;AAED,eAAO,MAAM,cAAc,EAAE,cAAc,GAAG,IAEtC,CAAC;AAET;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAkC,CAAC;AAExF,wBAAgB,iBAAiB,IAAI,OAAO,CAM3C"}

package/esm/src/platform/compat/process/runtime-process.js

@@ -15,6 +15,14 @@ export function testHasRuntimeProcess(processLike) {
 export const runtimeProcess = testHasRuntimeProcess(nodeProcess)
     ? nodeProcess
     : null;
+/**
+ * The host environment record, captured before any narrower view is installed
+ * over `process.env`.
+ *
+ * Host-scoped accessors read through this reference so that installing a
+ * scoped view over `process.env` cannot redirect them.
+ */
+export const hostProcessEnv = runtimeProcess?.env ?? null;
 export function isWindowsPlatform() {
     const deno = IS_DENO ? getDenoRuntime() : undefined;
     if (deno)

package/esm/src/platform/compat/process/scoped-process-env.d.ts

@@ -0,0 +1,29 @@
+import type { ProjectEnvSnapshot } from "./project-env-contract.js";
+/** Returns the active project environment snapshot, or undefined outside one. */
+export type ProjectEnvSnapshotGetter = () => ProjectEnvSnapshot | undefined;
+/**
+ * Read a key as the scoped view presents it: snapshot entry, then any write
+ * recorded against that snapshot.
+ *
+ * Exported so the accessors (`getEnv()`, `env()`) resolve keys through exactly
+ * the same rule as the raw object, instead of reading the immutable snapshot
+ * and missing writes the object has already accepted.
+ */
+export declare function readProjectScopedEnv(snapshot: ProjectEnvSnapshot, key: string): string | undefined;
+/** The scoped view as a plain record, for the bulk accessor. */
+export declare function projectScopedEnvRecord(snapshot: ProjectEnvSnapshot): Record<string, string>;
+/**
+ * Install the project-scoped view over `process.env`.
+ *
+ * Idempotent: the first installation owns the view for the process lifetime, so
+ * the record captured as the host view is always the pre-installation one.
+ * Outside a project scope every operation passes straight through to it.
+ *
+ * The view is installed as a non-configurable accessor, so code running later
+ * cannot detach it by assigning to or redefining `process.env` — an assignment
+ * is applied through the view (see `applyEnvReplacement`) rather than replacing
+ * it. Without that, one assignment would drop the view for every scope in the
+ * process, not only the one that made it.
+ */
+export declare function installProjectScopedProcessEnv(getSnapshot: ProjectEnvSnapshotGetter): void;
+//# sourceMappingURL=scoped-process-env.d.ts.map

package/esm/src/platform/compat/process/scoped-process-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-process-env.d.ts","sourceRoot":"","sources":["../../../../../src/src/platform/compat/process/scoped-process-env.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAIpE,iFAAiF;AACjF,MAAM,MAAM,wBAAwB,GAAG,MAAM,kBAAkB,GAAG,SAAS,CAAC;AA0B5E;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAEpB;AAED,gEAAgE;AAChE,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAyID;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,wBAAwB,GACpC,IAAI,CAqBN"}

package/esm/src/platform/compat/process/scoped-process-env.js

@@ -0,0 +1,221 @@
+/**
+ * Project-scoped view of the raw process environment object.
+ *
+ * A project environment snapshot is the complete environment a project sees.
+ * `getEnv()` already serves that snapshot and nothing else while it is active,
+ * but `process.env` is an ordinary object reachable without going through any
+ * accessor, so the two surfaces disagreed about what the project environment
+ * contains. Installing this view makes them agree.
+ *
+ * Host-scoped configuration keeps its own accessor (`getHostEnv()`), which
+ * reads the captured host record and is unaffected by the installed view.
+ *
+ * Writes made while a snapshot is active are recorded per snapshot, so a
+ * project scope observes its own mutations and nothing outside it does.
+ *
+ * @module platform/compat/process/scoped-process-env
+ */
+import * as dntShim from "../../../../_dnt.shims.js";
+const ObjectKeys = Object.keys;
+const ObjectDefineProperty = Object.defineProperty;
+const ReflectDefineProperty = Reflect.defineProperty;
+const ReflectDeleteProperty = Reflect.deleteProperty;
+const ReflectGet = Reflect.get;
+const ReflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;
+const ReflectHas = Reflect.has;
+const ReflectOwnKeys = Reflect.ownKeys;
+const ReflectSet = Reflect.set;
+// Keyed by the snapshot object, which the scope owns for exactly its lifetime.
+const writesBySnapshot = new WeakMap();
+function writesFor(snapshot) {
+    const existing = writesBySnapshot.get(snapshot);
+    if (existing)
+        return existing;
+    const created = new Map();
+    writesBySnapshot.set(snapshot, created);
+    return created;
+}
+/**
+ * Read a key as the scoped view presents it: snapshot entry, then any write
+ * recorded against that snapshot.
+ *
+ * Exported so the accessors (`getEnv()`, `env()`) resolve keys through exactly
+ * the same rule as the raw object, instead of reading the immutable snapshot
+ * and missing writes the object has already accepted.
+ */
+export function readProjectScopedEnv(snapshot, key) {
+    return readScoped(snapshot, key);
+}
+/** The scoped view as a plain record, for the bulk accessor. */
+export function projectScopedEnvRecord(snapshot) {
+    const record = {};
+    for (const key of scopedKeys(snapshot)) {
+        const value = readScoped(snapshot, key);
+        if (value !== undefined)
+            record[key] = value;
+    }
+    return record;
+}
+function readScoped(snapshot, key) {
+    const writes = writesBySnapshot.get(snapshot);
+    if (writes?.has(key)) {
+        const written = writes.get(key);
+        return written === null ? undefined : written;
+    }
+    const value = snapshot[key];
+    return typeof value === "string" ? value : undefined;
+}
+function scopedKeys(snapshot) {
+    const keys = new Set(ObjectKeys(snapshot));
+    const writes = writesBySnapshot.get(snapshot);
+    if (writes) {
+        for (const [key, value] of writes) {
+            if (value === null)
+                keys.delete(key);
+            else
+                keys.add(key);
+        }
+    }
+    return [...keys];
+}
+/**
+ * Reject descriptors the raw environment object never accepts.
+ *
+ * Both Node and Deno back `process.env` with an object that only takes a
+ * configurable, writable, enumerable data descriptor and throws a `TypeError`
+ * for anything else. Recording the value instead would let the view report a
+ * property shape the host object would have refused, which is the kind of
+ * disagreement between the two surfaces this module exists to remove.
+ */
+function assertEnvDataDescriptor(descriptor) {
+    if ("get" in descriptor || "set" in descriptor) {
+        throw new TypeError("'process.env' does not accept an accessor(getter/setter) descriptor");
+    }
+    if (!("value" in descriptor) || descriptor.writable !== true ||
+        descriptor.enumerable !== true || descriptor.configurable !== true) {
+        throw new TypeError("'process.env' only accepts a configurable, writable, and enumerable data descriptor");
+    }
+}
+function createHandler(getSnapshot) {
+    /** Resolve the snapshot for a string key, or undefined to defer to the host record. */
+    const scopeFor = (prop) => typeof prop === "string" ? getSnapshot() : undefined;
+    return {
+        get(target, prop) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectGet(target, prop);
+            return readScoped(snapshot, prop);
+        },
+        set(target, prop, value) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectSet(target, prop, value);
+            writesFor(snapshot).set(prop, String(value));
+            return true;
+        },
+        deleteProperty(target, prop) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectDeleteProperty(target, prop);
+            writesFor(snapshot).set(prop, null);
+            return true;
+        },
+        has(target, prop) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectHas(target, prop);
+            return readScoped(snapshot, prop) !== undefined;
+        },
+        ownKeys(target) {
+            const snapshot = getSnapshot();
+            if (!snapshot)
+                return ReflectOwnKeys(target);
+            return scopedKeys(snapshot);
+        },
+        getOwnPropertyDescriptor(target, prop) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectGetOwnPropertyDescriptor(target, prop);
+            const value = readScoped(snapshot, prop);
+            if (value === undefined)
+                return undefined;
+            return { value, writable: true, enumerable: true, configurable: true };
+        },
+        defineProperty(target, prop, descriptor) {
+            const snapshot = scopeFor(prop);
+            if (!snapshot)
+                return ReflectDefineProperty(target, prop, descriptor);
+            assertEnvDataDescriptor(descriptor);
+            writesFor(snapshot).set(prop, String(descriptor.value));
+            return true;
+        },
+    };
+}
+/**
+ * Apply `process.env = record` without giving up the installed view.
+ *
+ * A plain assignment would swap the object identity and drop the view for the
+ * whole process, so the property is an accessor and assignment is applied
+ * through the view instead:
+ *
+ * - Inside a project scope the result is contained to that scope, so the
+ *   replacement is applied exactly: keys the assigned record omits are masked.
+ * - Outside one, the record is the host's and is shared with child processes,
+ *   so entries are merged and nothing is removed. `process.env = {...}` at host
+ *   level therefore adds and overwrites but never clears.
+ */
+function applyEnvReplacement(view, getSnapshot, replacement) {
+    // `process.env = process.env` is an identity assignment; clearing first would
+    // turn it into a wipe.
+    if (replacement === view)
+        return;
+    if (getSnapshot() !== undefined) {
+        for (const key of ObjectKeys(view))
+            delete view[key];
+    }
+    if (replacement === null || typeof replacement !== "object")
+        return;
+    for (const key of ObjectKeys(replacement)) {
+        const value = replacement[key];
+        if (value === undefined)
+            continue;
+        view[key] = value;
+    }
+}
+let installed = false;
+/**
+ * Install the project-scoped view over `process.env`.
+ *
+ * Idempotent: the first installation owns the view for the process lifetime, so
+ * the record captured as the host view is always the pre-installation one.
+ * Outside a project scope every operation passes straight through to it.
+ *
+ * The view is installed as a non-configurable accessor, so code running later
+ * cannot detach it by assigning to or redefining `process.env` — an assignment
+ * is applied through the view (see `applyEnvReplacement`) rather than replacing
+ * it. Without that, one assignment would drop the view for every scope in the
+ * process, not only the one that made it.
+ */
+export function installProjectScopedProcessEnv(getSnapshot) {
+    if (installed)
+        return;
+    const processLike = dntShim.dntGlobalThis.process;
+    const hostEnv = processLike?.env;
+    if (!processLike || !hostEnv)
+        return;
+    installed = true;
+    const view = new Proxy(hostEnv, createHandler(getSnapshot));
+    try {
+        ObjectDefineProperty(processLike, "env", {
+            get: () => view,
+            set: (replacement) => applyEnvReplacement(view, getSnapshot, replacement),
+            enumerable: true,
+            configurable: false,
+        });
+    }
+    catch {
+        // A runtime that refuses to redefine the property still gets the view; it
+        // just keeps the weaker guarantee a plain assignment gives.
+        processLike.env = view;
+    }
+}

package/esm/src/utils/version-constant.d.ts

@@ -1,3 +1,3 @@
 /** Shared version value. */
-export declare const VERSION = "0.1.1232";
+export declare const VERSION = "0.1.1234";
 //# sourceMappingURL=version-constant.d.ts.map

package/esm/src/utils/version-constant.js

@@ -1,4 +1,4 @@
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
 /** Shared version value. */
-export const VERSION = "0.1.1232";
+export const VERSION = "0.1.1234";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veryfront/ext-content-mdx",
-  "version": "0.1.1232",
+  "version": "0.1.1234",
   "description": "Veryfront first-party extension package for ext-content-mdx",
   "keywords": [
     "veryfront",
@@ -67,7 +67,7 @@
     "vfile": "6.0.3"
   },
   "peerDependencies": {
-    "veryfront": "^0.1.1232"
+    "veryfront": "^0.1.1234"
   },
   "type": "module",
   "types": "./esm/extensions/ext-content-mdx/src/index.d.ts",