@vmz/vmz 0.1.21 → 0.1.23

package/dist/cli.js

@@ -21,6 +21,7 @@ import { registerArtifactCommands } from './release-cmd.js';
 import { registerRefactorCommands } from './refactor-cmd.js';
 import { registerExplainCommand } from './explain-cmd.js';
 import { registerPlanCommands } from './plan-cmd.js';
+import { registerGithubActionsCommand } from './github-actions-cmd.js';
 import { loadVmzConfig } from './plugin-host.js';
 import { normalizeDeliveryAuthoring, resolveProfileArtifactDir, selectBuildProfile } from './delivery-profile.js';
 import { packFromDeploymentIr } from './pack.js';
@@ -76,6 +77,7 @@ function buildProductCli(opts = {}) {
     registerArtifactCommands(cli.command('artifact|artifacts|release', 'cli.cmd.artifact'));
     registerRefactorCommands(cli.command('refactor', 'cli.cmd.refactor'));
     registerExplainCommand(cli);
+    registerGithubActionsCommand(cli);
     cli.command('version', 'cli.cmd.version').action(() => cmdVersion());
     return cli;
 }

package/dist/content-addressed-assets.d.ts

@@ -1,9 +1,10 @@
 /**
  * A3: content-addressed assets/<hash> layout for immutable CDN objects.
- * Logical paths stay available for serve/dev; static HTML rewrites to hashed URLs.
- * CSS aggregators (vmz.css) rewrite `@import` to hashed sibling paths under assets/.
- * JS under assets/ always rewrites ESM `./` → `../` so barrels (vmz-dom → dom-core)
- * resolve at dist root — never prefer hashed siblings for JS (second-hop 404).
+ * Logical paths stay available for serve/dev. Static HTML must receive hashed
+ * `cssEntry` / `moduleScriptSrc` at shell emit time — this module does **not**
+ * post-rewrite HTML. CSS aggregators rewrite `@import` before hash. JS under
+ * `assets/` rewrites ESM `./` → `../` via oxc (plus dynamic `import("./"+)` form)
+ * so barrels resolve at dist root.
  */
 export declare const CONTENT_ADDRESSED_ASSETS_SCHEMA = "vmz.content_addressed_assets.v0";
 interface ContentAddressedAssetObject {
@@ -24,7 +25,6 @@ export interface ContentAddressedAssetsManifest {
 }
 interface EmitContentAddressedAssetsOpts {
     candidates?: string[];
-    rewriteHtml?: boolean;
 }
 /**
  * Rewrite relative `@import "./foo.css"` to hashed paths under assets/.
@@ -46,9 +46,10 @@ export declare function rewriteCssImports(cssText: any, rewrites: any): any;
  */
 export declare function rewriteJsEntryRelativeImports(jsText: any, _rewrites?: {}): string;
 /**
- * Emit `assets/<sha256>.<ext>` copies and rewrite HTML href/src to hashed URLs.
+ * Emit `assets/<sha256>.<ext>` copies and return logical→hashed rewrites.
+ * Callers must pass hashed URLs into `generatePageShell` — HTML is never rewritten here.
  * @param {string} distDir
- * @param {{ candidates?: string[], rewriteHtml?: boolean }} [opts]
+ * @param {{ candidates?: string[] }} [opts]
  */
 export declare function emitContentAddressedAssets(distDir: string, opts?: EmitContentAddressedAssetsOpts): {
     manifest: ContentAddressedAssetsManifest;
@@ -99,6 +100,8 @@ export declare function assertSharedAssetPath(distDir: any, a: any, b: any, ext?
     digestB?: undefined;
     rel?: undefined;
 };
+/** Resolve `/logical` → hashed href from emit rewrites (`/assets/<sha>.ext`). */
+export declare function hashedAssetHref(rewrites: Record<string, string>, logical: string | null | undefined): string | null;
 export declare function contentAddressedAssetsDigest(manifest: any): any;
 export declare function sha256Buffer(buf: any): string;
 export {};

package/dist/content-addressed-assets.js

@@ -1,13 +1,15 @@
 /**
  * A3: content-addressed assets/<hash> layout for immutable CDN objects.
- * Logical paths stay available for serve/dev; static HTML rewrites to hashed URLs.
- * CSS aggregators (vmz.css) rewrite `@import` to hashed sibling paths under assets/.
- * JS under assets/ always rewrites ESM `./` → `../` so barrels (vmz-dom → dom-core)
- * resolve at dist root — never prefer hashed siblings for JS (second-hop 404).
+ * Logical paths stay available for serve/dev. Static HTML must receive hashed
+ * `cssEntry` / `moduleScriptSrc` at shell emit time — this module does **not**
+ * post-rewrite HTML. CSS aggregators rewrite `@import` before hash. JS under
+ * `assets/` rewrites ESM `./` → `../` via oxc (plus dynamic `import("./"+)` form)
+ * so barrels resolve at dist root.
  */
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
+import { requireNativeAddon } from './native-addon.js';
 import { canonicalJson, sha256Hex } from './release-pack.js';
 import { writePrettyJsonFile } from './pretty-json.js';
 export const CONTENT_ADDRESSED_ASSETS_SCHEMA = 'vmz.content_addressed_assets.v0';
@@ -59,26 +61,25 @@ export function rewriteCssImports(cssText, rewrites) {
  * @param {Record<string, string>} [_rewrites]
  */
 export function rewriteJsEntryRelativeImports(jsText, _rewrites = {}) {
-    let out = String(jsText || '');
-    // Dynamic: import("./" + id) → import("../" + id)
+    const native = requireNativeAddon();
+    if (typeof native.rewriteModuleSpecifiers !== 'function') {
+        throw new Error('native missing rewriteModuleSpecifiers — run `pnpm napi:build`');
+    }
+    // Static import/export specs via oxc AST (`./x` → `../x`). Dynamic
+    // `import("./"+id)` is not a literal specifier — rewrite that codegen form only.
+    let out = String(native.rewriteModuleSpecifiers(String(jsText ?? ''), JSON.stringify({
+        tsExtToJs: false,
+        dotSlashToParent: true,
+    })));
     out = out.replace(/import\(\s*"\.\/"\s*\+/g, 'import("../"+');
     out = out.replace(/import\(\s*'\.\/'\s*\+/g, "import('../'+");
-    const rewriteSpec = (spec) => {
-        const logical = String(spec || '').replace(/^\.\//, '');
-        if (!logical || logical.startsWith('../') || logical.startsWith('/'))
-            return spec;
-        return `../${logical}`;
-    };
-    // import/export … from "./x"  |  import("./x")
-    out = out.replace(/\b((?:import|export)\s+[^'"\n]*?\s+from\s+|import\s*\(\s*)(['"])(\.\/[^'"]+)\2/g, (match, prefix, quote, spec) => `${prefix}${quote}${rewriteSpec(spec)}${quote}`);
-    // side-effect: import "./x.js"
-    out = out.replace(/(^|[;\s])(import\s*)(['"])(\.\/[^'"]+)\3/gm, (match, lead, kw, quote, spec) => `${lead}${kw}${quote}${rewriteSpec(spec)}${quote}`);
     return out;
 }
 /**
- * Emit `assets/<sha256>.<ext>` copies and rewrite HTML href/src to hashed URLs.
+ * Emit `assets/<sha256>.<ext>` copies and return logical→hashed rewrites.
+ * Callers must pass hashed URLs into `generatePageShell` — HTML is never rewritten here.
  * @param {string} distDir
- * @param {{ candidates?: string[], rewriteHtml?: boolean }} [opts]
+ * @param {{ candidates?: string[] }} [opts]
  */
 export function emitContentAddressedAssets(distDir, opts = {}) {
     const abs = path.resolve(distDir);
@@ -141,17 +142,13 @@ export function emitContentAddressedAssets(distDir, opts = {}) {
         });
     }
     objects.sort((a, b) => (a.logicalPath < b.logicalPath ? -1 : a.logicalPath > b.logicalPath ? 1 : 0));
-    let rewrittenHtml = 0;
-    if (opts.rewriteHtml !== false) {
-        rewrittenHtml = rewriteHtmlReferences(abs, rewrites);
-    }
     const manifest = {
         schema: CONTENT_ADDRESSED_ASSETS_SCHEMA,
         layout: 'assets/<sha256>.<ext>',
         immutable: true,
         objectCount: objects.length,
         objects,
-        rewrittenHtml,
+        rewrittenHtml: 0,
     };
     manifest.manifestDigest = sha256Hex(canonicalJson({ ...manifest, manifestDigest: undefined }));
     const vmzDir = path.join(abs, '_vmz');
@@ -299,45 +296,16 @@ function walk(root, dir, onFile) {
             onFile(path.relative(root, full).replace(/\\/g, '/'));
     }
 }
-/**
- * @param {string} distDir
- * @param {Record<string, string>} rewrites map `/logical` → `/assets/hash.ext`
- */
-function rewriteHtmlReferences(distDir, rewrites) {
-    const pairs = Object.entries(rewrites)
-        .filter(([from]) => from.startsWith('/'))
-        .sort((a, b) => b[0].length - a[0].length);
-    if (!pairs.length)
-        return 0;
-    let count = 0;
-    walkHtml(distDir, (file) => {
-        let text = fs.readFileSync(file, 'utf8');
-        let next = text;
-        for (const [from, to] of pairs) {
-            next = next.split(from).join(to);
-        }
-        if (next !== text) {
-            fs.writeFileSync(file, next, 'utf8');
-            count += 1;
-        }
-    });
-    return count;
-}
-function walkHtml(dir, onFile) {
-    const stack = [dir];
-    while (stack.length) {
-        const cur = stack.pop();
-        for (const name of fs.readdirSync(cur)) {
-            if (name === 'assets' || name === '_vmz' || name === 'node_modules')
-                continue;
-            const full = path.join(cur, name);
-            const st = fs.statSync(full);
-            if (st.isDirectory())
-                stack.push(full);
-            else if (name.endsWith('.html'))
-                onFile(full);
-        }
-    }
+/** Resolve `/logical` → hashed href from emit rewrites (`/assets/<sha>.ext`). */
+export function hashedAssetHref(rewrites, logical) {
+    if (!logical)
+        return null;
+    const raw = String(logical).replace(/\\/g, '/');
+    const key = raw.startsWith('/') ? raw : `/${raw.replace(/^\.\//, '')}`;
+    const hit = rewrites[key] || rewrites[key.slice(1)];
+    if (!hit)
+        return key.startsWith('/') ? key : `/${key}`;
+    return hit.startsWith('/') ? hit : `/${hit}`;
 }
 export function contentAddressedAssetsDigest(manifest) {
     return manifest.manifestDigest || sha256Hex(canonicalJson({ ...manifest, manifestDigest: undefined }));

package/dist/github-actions-cmd.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `vmz github-actions` — monitor workflow runs via N-API → Rust `vmz-github` (octocrab).
+ */
+import type { Cli, ParsedOptions } from '@vmz/commander';
+export declare function registerGithubActionsCommand(cli: Cli): void;
+export declare function cmdGithubActions(args: ParsedOptions): number;

package/dist/github-actions-cmd.js

@@ -0,0 +1,120 @@
+/**
+ * `vmz github-actions` — monitor workflow runs via N-API → Rust `vmz-github` (octocrab).
+ */
+import { loadNative } from './index.js';
+import { log } from './log.js';
+import { emitPrettyJson } from './pretty-json.js';
+export function registerGithubActionsCommand(cli) {
+    cli.command('github-actions|gha', 'cli.cmd.github-actions')
+        .option('--mode <mode>', 'cli.opt.gha.mode')
+        .option('--workflow <id>', 'cli.opt.gha.workflow')
+        .option('--run-id <id>', 'cli.opt.gha.run-id')
+        .option('--ref <sha>', 'cli.opt.gha.ref')
+        .option('--branch <name>', 'cli.opt.gha.branch')
+        .option('--owner <owner>', 'cli.opt.gha.owner')
+        .option('--repo <repo>', 'cli.opt.gha.repo')
+        .option('--token <token>', 'cli.opt.gha.token')
+        .option('--timeout-minutes <n>', 'cli.opt.gha.timeout-minutes')
+        .option('--interval-seconds <n>', 'cli.opt.gha.interval-seconds')
+        .option('--required-conclusion <c>', 'cli.opt.gha.required-conclusion')
+        .option('--json [file]', 'cli.opt.json')
+        .action((options) => cmdGithubActions(options));
+}
+export function cmdGithubActions(args) {
+    const native = loadNative();
+    if (typeof native.githubActionsMonitorJson !== 'function') {
+        log.error('githubActionsMonitorJson missing — rebuild native (`pnpm napi:build`)');
+        return 1;
+    }
+    const modeRaw = String(args.mode ?? 'status')
+        .trim()
+        .toLowerCase();
+    if (modeRaw !== 'status' && modeRaw !== 'wait') {
+        log.errorId('cli.err.gha.mode', { mode: modeRaw });
+        return 1;
+    }
+    const { owner, repo } = resolveOwnerRepo(args);
+    if (!owner || !repo) {
+        log.errorId('cli.err.gha.repo');
+        return 1;
+    }
+    const token = (typeof args.token === 'string' && args.token.trim()) || process.env.GITHUB_TOKEN || process.env.GH_TOKEN || undefined;
+    const timeoutMinutes = positiveNumber(args['timeout-minutes'], 45);
+    const intervalSeconds = positiveNumber(args['interval-seconds'], 15);
+    const request = {
+        owner,
+        repo,
+        token: token || null,
+        mode: modeRaw,
+        workflow: strOrNull(args.workflow),
+        runId: parseRunId(args['run-id']),
+        headSha: strOrNull(args.ref),
+        branch: strOrNull(args.branch),
+        timeoutSecs: Math.round(timeoutMinutes * 60),
+        intervalSecs: Math.round(intervalSeconds),
+        requiredConclusion: String(args['required-conclusion'] ?? 'success'),
+    };
+    let resultJson;
+    try {
+        resultJson = native.githubActionsMonitorJson(JSON.stringify(request));
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        log.error(msg);
+        return 1;
+    }
+    let result;
+    try {
+        result = JSON.parse(resultJson);
+    }
+    catch {
+        log.error('githubActionsMonitorJson returned invalid JSON');
+        return 1;
+    }
+    log.info(`github-actions: run_id=${result.runId} status=${result.status} conclusion=${result.conclusion ?? 'null'} html_url=${result.htmlUrl}`);
+    if (args.json !== undefined && args.json !== false) {
+        emitPrettyJson(typeof args.json === 'string' ? args.json : true, result);
+    }
+    return 0;
+}
+function resolveOwnerRepo(args) {
+    let owner = typeof args.owner === 'string' ? args.owner.trim() : '';
+    let repo = typeof args.repo === 'string' ? args.repo.trim() : '';
+    if (!owner || !repo) {
+        const fromEnv = (process.env.GITHUB_REPOSITORY || '').trim();
+        const slash = fromEnv.indexOf('/');
+        if (slash > 0) {
+            if (!owner)
+                owner = fromEnv.slice(0, slash);
+            if (!repo)
+                repo = fromEnv.slice(slash + 1);
+        }
+    }
+    if (!owner || !repo) {
+        const fallback = (process.env.VMZ_GITHUB_REPO || 'doki-land/vmz-framework').trim();
+        const slash = fallback.indexOf('/');
+        if (slash > 0) {
+            if (!owner)
+                owner = fallback.slice(0, slash);
+            if (!repo)
+                repo = fallback.slice(slash + 1);
+        }
+    }
+    return { owner, repo };
+}
+function strOrNull(v) {
+    if (typeof v !== 'string')
+        return null;
+    const t = v.trim();
+    return t ? t : null;
+}
+function parseRunId(v) {
+    if (v === undefined || v === null || v === true || v === false)
+        return null;
+    const n = Number(v);
+    return Number.isFinite(n) && n > 0 ? Math.trunc(n) : null;
+}
+function positiveNumber(v, fallback) {
+    const n = Number(v);
+    return Number.isFinite(n) && n > 0 ? n : fallback;
+}

package/dist/index.js

@@ -127,6 +127,7 @@ export const SERVE_HOST_RUNTIME_FILES = [
     ['deployment-registry.js', 'deployment-registry.js'],
     ['render-host.js', 'render-host.js'],
     ['route-layout-chain.js', 'route-layout-chain.js'],
+    ['localize-body-links.js', 'localize-body-links.js'],
 ];
 /** Copy serve-host + registry bootstrap modules from `@vmz/core` into app outDir. */
 export function materializeServeHostRuntime(outDir, coreDist = resolveCoreRuntimeDist()) {

package/dist/locale-router.d.ts

@@ -130,17 +130,9 @@ export declare function parseLocaleFromPath(pathname: string, supportedLocales:
     localeId: string;
     restPath: string;
 };
-export interface LocaleHrefArtifact {
-    locales?: Array<{
-        id: string;
-    } | string>;
-    defaultLocale?: string;
-    routing?: LocaleRoutingOpts;
-}
-/** Rewrite a same-app href to the given LocaleId via route realization. */
-export declare function localizeSameAppHref(href: string, localeId: string, artifact: LocaleHrefArtifact): string;
-/** Rewrite `<a data-vmz-route href>` in HTML body to retain `localeId`. */
-export declare function localizeBodyLinks(html: string, localeId: string, artifact: LocaleHrefArtifact, escapeAttr?: (s: string) => string): string;
+export type { LocaleHrefArtifact } from '@vmz/core/localize-body-links';
+/** Rewrite a same-app href — single implementation in `@vmz/core/localize-body-links`. */
+export { localizeBodyLinks, localizeSameAppHref } from '@vmz/core/localize-body-links';
 /** Plan redirect / negotiation for an incoming URL (omit-prefix aware). */
 export declare function planLocalePathNavigation(input: {
     pathname: string;

package/dist/locale-router.js

@@ -228,58 +228,8 @@ export function parseLocaleFromPath(pathname, supportedLocales) {
     }
     return { localeId: null, restPath: normalizePath(pathname) };
 }
-/** Rewrite a same-app href to the given LocaleId via route realization. */
-export function localizeSameAppHref(href, localeId, artifact) {
-    if (!href || !localeId || !artifact)
-        return href;
-    if (href.startsWith('#') || /^(mailto|tel|javascript):/i.test(href))
-        return href;
-    if (/^[a-z][a-z0-9+.-]*:/i.test(href) && !href.startsWith('/'))
-        return href;
-    let pathname = String(href);
-    let search = '';
-    let hash = '';
-    const hashIdx = pathname.indexOf('#');
-    if (hashIdx >= 0) {
-        hash = pathname.slice(hashIdx);
-        pathname = pathname.slice(0, hashIdx);
-    }
-    const qIdx = pathname.indexOf('?');
-    if (qIdx >= 0) {
-        search = pathname.slice(qIdx);
-        pathname = pathname.slice(0, qIdx);
-    }
-    if (!pathname)
-        pathname = '/';
-    const supported = (artifact.locales || []).map((l) => (typeof l === 'string' ? l : l.id)).filter(Boolean);
-    const defaultLocale = artifact.defaultLocale || artifact.routing?.defaultLocale;
-    const routing = {
-        strategy: artifact.routing?.strategy || 'prefix',
-        defaultPrefix: artifact.routing?.defaultPrefix || 'include',
-        defaultLocale,
-    };
-    const parsed = parseLocaleFromPath(pathname, supported);
-    const rest = parsed.restPath || '/';
-    const realized = realizeRoutePath(localeId, rest, routing);
-    return `${realized.path}${search}${hash}`;
-}
-/** Rewrite `<a data-vmz-route href>` in HTML body to retain `localeId`. */
-export function localizeBodyLinks(html, localeId, artifact, escapeAttr = (s) => String(s).replace(/&/g, '&amp;').replace(/"/g, '&quot;')) {
-    if (!html || !localeId || !artifact)
-        return html;
-    return String(html).replace(/<a\b([^>]*)>/gi, (full, attrs) => {
-        if (!/\bdata-vmz-route\s*=/.test(attrs))
-            return full;
-        const hm = attrs.match(/\bhref\s*=\s*"([^"]*)"/i);
-        if (!hm)
-            return full;
-        const next = localizeSameAppHref(hm[1], localeId, artifact);
-        if (next === hm[1])
-            return full;
-        const newAttrs = attrs.replace(/\bhref\s*=\s*"[^"]*"/i, `href="${escapeAttr(next)}"`);
-        return `<a${newAttrs}>`;
-    });
-}
+/** Rewrite a same-app href — single implementation in `@vmz/core/localize-body-links`. */
+export { localizeBodyLinks, localizeSameAppHref } from '@vmz/core/localize-body-links';
 /** Plan redirect / negotiation for an incoming URL (omit-prefix aware). */
 export function planLocalePathNavigation(input) {
     const routing = {

package/dist/pack-client-packages.d.ts

@@ -3,7 +3,8 @@
  *
  * Bare npm/workspace imports are legal on the author surface (01/04).
  * Browser ESM cannot resolve them. Pack materializes reachable package
- * modules under `dist/vendor/<pkg>/…` and rewrites importers to relative paths.
+ * modules under `dist/vendor/<pkg>/…` and rewrites importers to relative paths
+ * via oxc AST (N-API `rewriteModuleSpecifiers`) — no import-text regex.
  *
  * Not full oxc chunk-split/minify (`oxc-pending` remains for release minify).
  */
@@ -25,5 +26,6 @@ export declare function packClientBareImports(outDir: string, opts?: PackClientB
 };
 /** @param {string} js */
 export declare function collectBareSpecs(js: any): unknown[];
-export declare function rewriteRelativeTsSpecs(js: any): any;
+/** oxc AST module specifier rewrite (`.ts`→`.js` + optional exact map). */
+export declare function rewriteRelativeTsSpecs(js: any, exactMap?: any): any;
 export {};

package/dist/pack-client-packages.js

@@ -3,7 +3,8 @@
  *
  * Bare npm/workspace imports are legal on the author surface (01/04).
  * Browser ESM cannot resolve them. Pack materializes reachable package
- * modules under `dist/vendor/<pkg>/…` and rewrites importers to relative paths.
+ * modules under `dist/vendor/<pkg>/…` and rewrites importers to relative paths
+ * via oxc AST (N-API `rewriteModuleSpecifiers`) — no import-text regex.
  *
  * Not full oxc chunk-split/minify (`oxc-pending` remains for release minify).
  */
@@ -11,6 +12,7 @@ import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSy
 import path from 'node:path';
 import { createRequire } from 'node:module';
 import { resolvePackageRoot } from './packages.js';
+import { requireNativeAddon } from './native-addon.js';
 const VENDOR_DIR = 'vendor';
 const SKIP_PREFIXES = ['node:', 'nodejs:', 'cloudflare:', 'data:', 'http:', 'https:', 'vmz:', '#'];
 export function packClientBareImports(outDir, opts = {}) {
@@ -327,16 +329,22 @@ function transpileTs(source, filename) {
     }
 }
 function rewriteTsExt(p) {
+    // Path basename only (output layout) — not ESM source rewrite.
     return String(p)
         .replace(/\.tsx$/i, '.js')
         .replace(/\.ts$/i, '.js');
 }
-export function rewriteRelativeTsSpecs(js) {
-    return js
-        .replace(/(from\s+['"])(\.[^'"]+)\.tsx(['"])/g, '$1$2.js$3')
-        .replace(/(from\s+['"])(\.[^'"]+)\.ts(['"])/g, '$1$2.js$3')
-        .replace(/(import\s*\(\s*['"])(\.[^'"]+)\.tsx(['"]\s*\))/g, '$1$2.js$3')
-        .replace(/(import\s*\(\s*['"])(\.[^'"]+)\.ts(['"]\s*\))/g, '$1$2.js$3');
+/** oxc AST module specifier rewrite (`.ts`→`.js` + optional exact map). */
+export function rewriteRelativeTsSpecs(js, exactMap = null) {
+    const native = requireNativeAddon();
+    if (typeof native.rewriteModuleSpecifiers !== 'function') {
+        throw new Error('native missing rewriteModuleSpecifiers — run `pnpm napi:build`');
+    }
+    const rules = {
+        tsExtToJs: true,
+        exact: exactMap && typeof exactMap === 'object' ? exactMap : {},
+    };
+    return native.rewriteModuleSpecifiers(String(js ?? ''), JSON.stringify(rules));
 }
 function resolveRelativeSource(fromDir, rel) {
     const cleaned = rel.replace(/\?.*$/, '').replace(/#.*$/, '');
@@ -361,33 +369,15 @@ function resolveRelativeSource(fromDir, rel) {
     return null;
 }
 function rewriteBareImports(js, fromFile, bareToVendor) {
-    const toRel = (spec) => {
-        const dest = bareToVendor.get(spec);
-        if (!dest)
-            return null;
+    /** @type {Record<string, string>} */
+    const exact = {};
+    for (const [spec, dest] of bareToVendor.entries()) {
+        if (isRelativeOrAbsolute(spec) || shouldSkipBare(spec))
+            continue;
         let rel = path.relative(path.dirname(fromFile), dest).replace(/\\/g, '/');
         if (!rel.startsWith('.'))
             rel = `./${rel}`;
-        return rel;
-    };
-    let out = js;
-    out = out.replace(/\bimport\s*\(\s*(['"])([^'"]+)\1\s*\)/g, (full, quote, spec) => {
-        if (isRelativeOrAbsolute(spec) || shouldSkipBare(spec))
-            return full;
-        const rel = toRel(spec);
-        return rel ? `import(${quote}${rel}${quote})` : full;
-    });
-    out = out.replace(/\bfrom\s+(['"])([^'"]+)\1/g, (full, quote, spec) => {
-        if (isRelativeOrAbsolute(spec) || shouldSkipBare(spec))
-            return full;
-        const rel = toRel(spec);
-        return rel ? `from ${quote}${rel}${quote}` : full;
-    });
-    out = out.replace(/\bimport\s+(['"])([^'"]+)\1/g, (full, quote, spec) => {
-        if (isRelativeOrAbsolute(spec) || shouldSkipBare(spec))
-            return full;
-        const rel = toRel(spec);
-        return rel ? `import ${quote}${rel}${quote}` : full;
-    });
-    return out;
+        exact[spec] = rel;
+    }
+    return rewriteRelativeTsSpecs(js, exact);
 }

package/dist/route-path.d.ts

@@ -6,7 +6,7 @@ export declare function isRouteBoundaryStem(stem: string): boolean;
 export declare function isRouteGroupDir(seg: string): boolean;
 /**
  * File-route fallback (`pages/home` → `/home`, `pages/index` → `/`).
- * Used only when a deployment unit has no `pathPattern`.
+ * Kept for tooling diagnostics only — production hosts must use Plan `pathPattern`.
  */
 export declare function filePathPatternFromChunk(chunkId: string): string;
 export type DeploymentPageUnit = {
@@ -17,7 +17,7 @@ export type DeploymentPageUnit = {
     pathPattern?: string;
     routeId?: string;
 };
-/** Canonical Browser HTTP pattern for a page unit. Mini must not read this. */
+/** Canonical Browser HTTP pattern for a page unit. Mini must not read this. Requires Plan `pathPattern`. */
 export declare function unitBrowserPathPattern(unit: DeploymentPageUnit | null | undefined): string;
 export type PathSeg = {
     kind: 'static';

package/dist/route-path.js

@@ -10,7 +10,7 @@ export function isRouteGroupDir(seg) {
 }
 /**
  * File-route fallback (`pages/home` → `/home`, `pages/index` → `/`).
- * Used only when a deployment unit has no `pathPattern`.
+ * Kept for tooling diagnostics only — production hosts must use Plan `pathPattern`.
  */
 export function filePathPatternFromChunk(chunkId) {
     const rel = String(chunkId || '').replace(/^pages\//, '');
@@ -28,12 +28,14 @@ export function filePathPatternFromChunk(chunkId) {
     }
     return segs.length ? `/${segs.join('/')}` : '/';
 }
-/** Canonical Browser HTTP pattern for a page unit. Mini must not read this. */
+/** Canonical Browser HTTP pattern for a page unit. Mini must not read this. Requires Plan `pathPattern`. */
 export function unitBrowserPathPattern(unit) {
     const explicit = String(unit?.pathPattern || '').trim();
-    if (explicit)
-        return explicit.startsWith('/') ? explicit : `/${explicit}`;
-    return filePathPatternFromChunk(String(unit?.chunkId || ''));
+    if (!explicit) {
+        const chunkId = String(unit?.chunkId || '');
+        throw new Error(`unitBrowserPathPattern: page unit ${chunkId || '(unknown)'} missing pathPattern (plan-only host)`);
+    }
+    return explicit.startsWith('/') ? explicit : `/${explicit}`;
 }
 export function parsePathPattern(pattern) {
     const raw = String(pattern || '').trim();

package/dist/server-artifact.d.ts

@@ -1,19 +1,10 @@
 /**
- * P4 ServerArtifact — compiled route decision tree + public ServerRoute contracts
- * + internal capability units + selected runtime adapter. Web Standards Fetch entry.
+ * P4 ServerArtifact — thin host write of Rust/N-API normalized Plan.
+ * Assembly / digests / adapters live in vmz-artifacts via N-API.
  */
 export declare const SERVER_ARTIFACT_SCHEMA = "vmz.server.artifact.v0";
 export declare const HTTP_CONTRACT_SCHEMA = "vmz.http.contract.v0";
 export declare const SERVER_RUNTIME_ADAPTER_SCHEMA = "vmz.server.runtime_adapter.v0";
-/**
- * @param {string} outDir
- * @param {{
- *   profileId?: string | null,
- *   assembly?: string | null,
- *   serverRuntime?: string | null,
- *   packDigest?: string | null,
- * }} [opts]
- */
 interface ServerArtifactOpts {
     profileId?: string | null;
     assembly?: string | null;
@@ -42,6 +33,7 @@ interface ServerArtifactBody {
     packDigest: string | null;
     adapters: Record<string, unknown>;
     artifactDigest?: string;
+    [key: string]: unknown;
 }
 export declare function emitServerArtifact(outDir: string, opts?: ServerArtifactOpts): {
     artifact: ServerArtifactBody;
@@ -49,47 +41,7 @@ export declare function emitServerArtifact(outDir: string, opts?: ServerArtifact
     httpContractDigest: string;
 };
 /**
- * @param {Record<string, any>} artifact
- * @param {string} adapterId
+ * Project a runtime adapter document from a normalized artifact (N-API).
  */
-export declare function projectServerRuntimeAdapter(artifact: any, adapterId: any): {
-    host: string;
-    invoke: string;
-    status: string;
-    schema: string;
-    adapterId: string;
-    artifactDigest: any;
-    httpContractDigest: any;
-    spaFallback: boolean;
-    entry: any;
-    publicRouteCount: any;
-    internalCapabilityCount: any;
-} | {
-    host: string;
-    invoke: string;
-    status: string;
-    note: string;
-    schema: string;
-    adapterId: string;
-    artifactDigest: any;
-    httpContractDigest: any;
-    spaFallback: boolean;
-    entry: any;
-    publicRouteCount: any;
-    internalCapabilityCount: any;
-} | {
-    host: string;
-    invoke: string;
-    status: string;
-    note: string;
-    consumes: string[];
-    schema: string;
-    adapterId: string;
-    artifactDigest: any;
-    httpContractDigest: any;
-    spaFallback: boolean;
-    entry: any;
-    publicRouteCount: any;
-    internalCapabilityCount: any;
-};
+export declare function projectServerRuntimeAdapter(artifact: Record<string, unknown>, adapterId: string): any;
 export {};

package/dist/server-artifact.js

@@ -1,109 +1,30 @@
 /**
- * P4 ServerArtifact — compiled route decision tree + public ServerRoute contracts
- * + internal capability units + selected runtime adapter. Web Standards Fetch entry.
+ * P4 ServerArtifact — thin host write of Rust/N-API normalized Plan.
+ * Assembly / digests / adapters live in vmz-artifacts via N-API.
  */
-import crypto from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync } from 'node:fs';
 import path from 'node:path';
-import { SERVER_RUNTIMES } from './delivery-profile.js';
+import { requireNativeAddon } from './native-addon.js';
 import { writePrettyJsonFile } from './pretty-json.js';
 export const SERVER_ARTIFACT_SCHEMA = 'vmz.server.artifact.v0';
 export const HTTP_CONTRACT_SCHEMA = 'vmz.http.contract.v0';
 export const SERVER_RUNTIME_ADAPTER_SCHEMA = 'vmz.server.runtime_adapter.v0';
-const DEFAULT_RPC_PATH = '/__vmz/rpc';
 export function emitServerArtifact(outDir, opts = {}) {
-    const deployment = readJson(path.join(outDir, 'vmz-deployment.json')) || { schema: null, units: [] };
-    const routes = readJson(path.join(outDir, 'vmz-routes.json'));
-    const routeRows = Array.isArray(routes) ? routes : [];
-    const selectedRuntime = normalizeRuntime(opts.serverRuntime);
-    const units = Array.isArray(deployment.units) ? deployment.units : [];
-    const publicRoutes = routeRows.map((r) => ({
-        verb: String(r.verb || 'GET').toUpperCase(),
-        path: String(r.path || ''),
-        moduleId: String(r.moduleId || ''),
-        method: String(r.method || ''),
-        className: r.className != null ? String(r.className) : null,
-        visibility: 'public',
-        kind: 'server-route',
-    }));
-    const publicKeys = new Set(publicRoutes.map((r) => `${r.moduleId}::${r.method}`));
-    /** @type {Array<Record<string, unknown>>} */
-    const internalCapabilities = [];
-    for (const u of units) {
-        const moduleId = u.serverModuleId != null ? String(u.serverModuleId) : '';
-        if (!moduleId)
-            continue;
-        const caps = Array.isArray(u.capabilities) ? u.capabilities.map(String) : [];
-        for (const method of caps) {
-            const key = `${moduleId}::${method}`;
-            if (publicKeys.has(key))
-                continue;
-            internalCapabilities.push({
-                chunkId: String(u.chunkId || ''),
-                moduleId,
-                method,
-                visibility: 'internal',
-                kind: 'capability',
-            });
-        }
-    }
-    const routeDecisionTree = [
-        {
-            id: 'rpc',
-            match: { method: 'POST', path: DEFAULT_RPC_PATH },
-            action: 'invoke-rpc',
-            visibility: 'internal-transport',
-        },
-        ...publicRoutes.map((r, i) => ({
-            id: `public-route-${i}`,
-            match: { method: r.verb, path: r.path },
-            action: 'invoke-server-route',
-            target: { moduleId: r.moduleId, method: r.method },
-            visibility: 'public',
-        })),
-    ];
-    const httpContractBody = {
-        schema: HTTP_CONTRACT_SCHEMA,
-        rpcPath: DEFAULT_RPC_PATH,
-        publicRoutes: publicRoutes.map((r) => ({
-            verb: r.verb,
-            path: r.path,
-            moduleId: r.moduleId,
-            method: r.method,
-        })),
-        internalCapabilityCount: internalCapabilities.length,
-        entry: 'fetch',
-    };
-    const httpContractDigest = sha256Hex(canonicalJson(httpContractBody));
-    const artifact = {
-        schema: SERVER_ARTIFACT_SCHEMA,
-        profileId: opts.profileId || null,
-        assembly: opts.assembly || null,
-        selectedRuntime,
-        entry: {
-            kind: 'fetch',
-            standards: ['Request', 'Response', 'Streams', 'AbortSignal'],
-            rpcPath: DEFAULT_RPC_PATH,
-        },
-        httpContract: {
-            schema: HTTP_CONTRACT_SCHEMA,
-            digest: httpContractDigest,
-        },
-        publicRoutes,
-        internalCapabilities,
-        middlewareUnits: [],
-        routeDecisionTree,
-        deploymentSchema: deployment.schema || null,
-        packDigest: opts.packDigest || null,
-        adapters: {
-            node: { kind: 'node-http', status: 'runtime', entry: 'handleNodeRequest' },
-            worker: { kind: 'fetch', status: 'runtime', entry: 'handleFetchRequest' },
-            deno: { kind: 'fetch', status: 'projected', entry: 'handleFetchRequest' },
-            bun: { kind: 'fetch', status: 'projected', entry: 'handleFetchRequest' },
-            'rust-host': { kind: 'contract-projection', status: 'projected', entry: 'fetch' },
-        },
-    };
-    artifact.artifactDigest = sha256Hex(canonicalJson({ ...artifact, artifactDigest: undefined }));
+    const deploymentPath = path.join(outDir, 'vmz-deployment.json');
+    const routesPath = path.join(outDir, 'vmz-routes.json');
+    const deploymentJson = existsSync(deploymentPath) ? readFileSync(deploymentPath, 'utf8') : '{}';
+    const routesJson = existsSync(routesPath) ? readFileSync(routesPath, 'utf8') : '[]';
+    const native = requireNativeAddon();
+    if (typeof native.normalizeServerArtifactJson !== 'function') {
+        throw new Error('vmz native addon missing normalizeServerArtifactJson — rebuild with `pnpm napi:build`');
+    }
+    const artifactJson = native.normalizeServerArtifactJson(deploymentJson, routesJson, {
+        profileId: opts.profileId ?? null,
+        assembly: opts.assembly ?? null,
+        serverRuntime: opts.serverRuntime ?? null,
+        packDigest: opts.packDigest ?? null,
+    });
+    const artifact = JSON.parse(artifactJson);
     const vmzDir = path.join(outDir, '_vmz');
     mkdirSync(vmzDir, { recursive: true });
     const file = path.join(vmzDir, 'server-artifact.json');
@@ -116,79 +37,19 @@ export function emitServerArtifact(outDir, opts = {}) {
         mkdirSync(dir, { recursive: true });
         writePrettyJsonFile(path.join(dir, 'adapter.json'), projection);
     }
-    return { artifact, path: file, httpContractDigest };
+    return {
+        artifact,
+        path: file,
+        httpContractDigest: artifact.httpContract?.digest || null,
+    };
 }
 /**
- * @param {Record<string, any>} artifact
- * @param {string} adapterId
+ * Project a runtime adapter document from a normalized artifact (N-API).
  */
 export function projectServerRuntimeAdapter(artifact, adapterId) {
-    const id = String(adapterId || '').trim();
-    if (!SERVER_RUNTIMES.includes(id) && id !== 'worker') {
-        throw new Error(`projectServerRuntimeAdapter: unknown adapter ${id}`);
-    }
-    const base = {
-        schema: SERVER_RUNTIME_ADAPTER_SCHEMA,
-        adapterId: id,
-        artifactDigest: artifact.artifactDigest,
-        httpContractDigest: artifact.httpContract?.digest || null,
-        spaFallback: false,
-        entry: artifact.entry,
-        publicRouteCount: Array.isArray(artifact.publicRoutes) ? artifact.publicRoutes.length : 0,
-        internalCapabilityCount: Array.isArray(artifact.internalCapabilities) ? artifact.internalCapabilities.length : 0,
-    };
-    if (id === 'node') {
-        return { ...base, host: 'node:http', invoke: 'handleNodeRequest', status: 'runtime' };
-    }
-    if (id === 'worker' || id === 'deno' || id === 'bun') {
-        return {
-            ...base,
-            host: 'fetch',
-            invoke: 'handleFetchRequest',
-            status: id === 'worker' ? 'runtime' : 'projected',
-            note: id === 'worker'
-                ? 'Fetch entry; live thin gated via worker-shaped subprocess host'
-                : 'Fetch contract projection; live runtime not gated',
-        };
+    const native = requireNativeAddon();
+    if (typeof native.projectServerRuntimeAdapterJson !== 'function') {
+        throw new Error('vmz native addon missing projectServerRuntimeAdapterJson — rebuild with `pnpm napi:build`');
     }
-    // rust-host
-    return {
-        ...base,
-        host: 'rust-fetch-consumer',
-        invoke: 'fetch',
-        status: 'projected',
-        note: 'contract projection only — live Rust host binary parity not gated',
-        consumes: ['server-artifact.json', 'vmz-routes.json', 'vmz-deployment.json'],
-    };
-}
-function normalizeRuntime(raw) {
-    const v = String(raw || 'node').trim();
-    return SERVER_RUNTIMES.includes(v) ? v : 'node';
-}
-function readJson(file) {
-    if (!existsSync(file))
-        return null;
-    try {
-        return JSON.parse(readFileSync(file, 'utf8'));
-    }
-    catch {
-        return null;
-    }
-}
-function canonicalJson(value) {
-    return JSON.stringify(sortKeys(value));
-}
-function sortKeys(value) {
-    if (Array.isArray(value))
-        return value.map(sortKeys);
-    if (value && typeof value === 'object') {
-        const out = {};
-        for (const k of Object.keys(value).sort())
-            out[k] = sortKeys(value[k]);
-        return out;
-    }
-    return value;
-}
-function sha256Hex(text) {
-    return crypto.createHash('sha256').update(text, 'utf8').digest('hex');
+    return JSON.parse(native.projectServerRuntimeAdapterJson(JSON.stringify(artifact), String(adapterId || '').trim()));
 }

package/dist/static-emit.js

@@ -10,12 +10,12 @@ import { createRenderHost } from '@vmz/core/render-host';
 import { resolveRouteLayoutChain } from '@vmz/core/route-layout-chain';
 import { listClientComponentsSync } from '@vmz/core/component-registry';
 import { emitCdnPolicy } from './cdn-policy.js';
-import { emitContentAddressedAssets } from './content-addressed-assets.js';
+import { emitContentAddressedAssets, hashedAssetHref } from './content-addressed-assets.js';
 import { absoluteUrl, buildLocalePageMeta, localizeBodyLinks } from './locale-router.js';
 import { requireNativeAddon } from './native-addon.js';
 import { writePrettyJsonFile } from './pretty-json.js';
 import { emitPublicStaticAssets } from './public-static-assets.js';
-import { filePathPatternFromChunk, isRouteBoundaryStem, listPublicPageUnits, parsePathPattern, unitBrowserPathPattern } from './route-path.js';
+import { listPublicPageUnits, parsePathPattern, unitBrowserPathPattern } from './route-path.js';
 import { emitSiteFavicon, readSiteFaviconHeadHtml } from './site-favicon.js';
 export const STATIC_DELIVERY_MANIFEST_SCHEMA = 'vmz.static.delivery_manifest.v0';
 export async function emitWebStatic(distDir, opts = {}) {
@@ -33,6 +33,13 @@ export async function emitWebStatic(distDir, opts = {}) {
     const pageCatalog = listPageClientFiles(distDir);
     const generations = [];
     const skipped = [];
+    // Hash immutable assets before any HTML write so shell slots carry final URLs
+    // (no post-emit HTML split/join rewrite).
+    emitStaticClientEntries(distDir, pageCatalog);
+    const assets = emitContentAddressedAssets(distDir);
+    const cssLogical = readCssEntry(distDir);
+    const cssEntry = hashedAssetHref(assets.rewrites, cssLogical) || hashedAssetHref(assets.rewrites, 'vmz.css');
+    const moduleScriptSrc = hashedAssetHref(assets.rewrites, 'entry-client.js') || '/entry-client.js';
     for (const page of pageCatalog) {
         const pattern = page.pathPattern || patternFromSegs(page.segs);
         const routeId = guessRouteId(distDir, page.chunkId);
@@ -118,7 +125,8 @@ export async function emitWebStatic(distDir, opts = {}) {
                 layoutChain,
                 props,
                 meta: gen.meta,
-                cssEntry: readCssEntry(distDir),
+                cssEntry,
+                moduleScriptSrc,
                 headExtraHtml: faviconHead,
             });
             fs.writeFileSync(absHtml, html, 'utf8');
@@ -149,7 +157,8 @@ export async function emitWebStatic(distDir, opts = {}) {
             robots: 'noindex,nofollow',
             lang: 'en',
         },
-        cssEntry: readCssEntry(distDir),
+        cssEntry,
+        moduleScriptSrc: '',
         isErrorDocument: true,
         headExtraHtml: faviconHead,
     });
@@ -208,22 +217,16 @@ export async function emitWebStatic(distDir, opts = {}) {
             fileCount: publicAssets.fileCount ?? 0,
             source: 'source' in publicAssets && typeof publicAssets.source === 'string' ? publicAssets.source : null,
         },
+        contentAddressedAssets: {
+            schema: assets.manifest.schema,
+            manifestDigest: assets.manifest.manifestDigest,
+            objectCount: assets.manifest.objectCount,
+            layout: assets.manifest.layout,
+        },
     };
     const digest = sha256Hex(canonicalJson(manifest));
     manifest.manifestDigest = digest;
     writePrettyJsonFile(path.join(vmzDir, 'static-delivery-manifest.json'), manifest);
-    emitStaticClientEntries(distDir, pageCatalog);
-    const assets = emitContentAddressedAssets(distDir);
-    manifest.contentAddressedAssets = {
-        schema: assets.manifest.schema,
-        manifestDigest: assets.manifest.manifestDigest,
-        objectCount: assets.manifest.objectCount,
-        layout: assets.manifest.layout,
-    };
-    // Re-stamp static manifest after linking asset digest (HTML already rewritten on disk).
-    delete manifest.manifestDigest;
-    manifest.manifestDigest = sha256Hex(canonicalJson(manifest));
-    writePrettyJsonFile(path.join(vmzDir, 'static-delivery-manifest.json'), manifest);
     const cdn = emitCdnPolicy(distDir, manifest);
     return {
         manifest,
@@ -265,53 +268,25 @@ function sortKeys(value) {
  */
 function listPageClientFiles(distDir) {
     const fromDep = listPagesFromDeployment(distDir);
-    if (fromDep.length)
-        return fromDep;
-    const root = path.join(distDir, 'pages');
-    /** @type {Array<{ chunkId: string, segs: ReturnType<typeof parsePathPattern>, pathPattern: string }>} */
-    const out = [];
-    function walk(abs, relParts) {
-        let ents;
-        try {
-            ents = fs.readdirSync(abs, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const e of ents) {
-            if (e.isDirectory())
-                walk(path.join(abs, e.name), [...relParts, e.name]);
-            else if (e.isFile() && e.name.endsWith('.client.js')) {
-                const stem = e.name.replace(/\.client\.js$/, '');
-                if (isRouteBoundaryStem(stem))
-                    continue;
-                const chunkId = ['pages', ...relParts, stem].join('/');
-                const pathPattern = filePathPatternFromChunk(chunkId);
-                out.push({ chunkId, pathPattern, segs: parsePathPattern(pathPattern) });
-            }
-        }
+    if (!fromDep.length) {
+        throw new Error(`emitWebStatic: no page units with pathPattern in ${path.join(distDir, 'vmz-deployment.json')} (plan-only host)`);
     }
-    walk(root, []);
-    return out;
+    return fromDep;
 }
 /**
  * @param {string} distDir
  */
 function listPagesFromDeployment(distDir) {
     const deploymentPath = path.join(distDir, 'vmz-deployment.json');
-    if (!fs.existsSync(deploymentPath))
-        return [];
-    try {
-        const deployment = JSON.parse(fs.readFileSync(deploymentPath, 'utf8'));
-        return listPublicPageUnits(deployment).map((u) => {
-            const chunkId = String(u.chunkId || '').replace(/\\/g, '/');
-            const pathPattern = unitBrowserPathPattern(u);
-            return { chunkId, pathPattern, segs: parsePathPattern(pathPattern) };
-        });
-    }
-    catch {
-        return [];
+    if (!fs.existsSync(deploymentPath)) {
+        throw new Error(`emitWebStatic: missing ${deploymentPath} (plan-only host)`);
     }
+    const deployment = JSON.parse(fs.readFileSync(deploymentPath, 'utf8'));
+    return listPublicPageUnits(deployment).map((u) => {
+        const chunkId = String(u.chunkId || '').replace(/\\/g, '/');
+        const pathPattern = unitBrowserPathPattern(u);
+        return { chunkId, pathPattern, segs: parsePathPattern(pathPattern) };
+    });
 }
 /**
  * @param {ReturnType<typeof parsePathPattern>} segs
@@ -491,6 +466,7 @@ function readCssEntry(distDir) {
  *   props: Record<string, unknown>,
  *   meta: { title: string, description: string, canonical: string, robots: string, lang: string, dir?: string, alternates?: Array<{ hreflang: string, href: string }> },
  *   cssEntry: string | null,
+ *   moduleScriptSrc?: string,
  *   isErrorDocument?: boolean,
  *   headExtraHtml?: string,
  * }} input
@@ -521,6 +497,7 @@ function wrapDocument(input) {
         ...(input.cssEntry ? { cssEntry: String(input.cssEntry) } : {}),
         isErrorDocument: !!input.isErrorDocument,
         ...(input.headExtraHtml ? { headExtraHtml: String(input.headExtraHtml) } : {}),
+        ...(input.moduleScriptSrc !== undefined ? { moduleScriptSrc: String(input.moduleScriptSrc) } : {}),
     });
 }
 /**

package/locales/en-US/cli.json

@@ -43,6 +43,7 @@
     "cli.cmd.refactor": "DX rename plans / apply",
     "cli.cmd.refactor.rename": "Plan or apply a workspace rename",
     "cli.cmd.explain": "DX causal explain",
+    "cli.cmd.github-actions": "Monitor GitHub Actions via Rust octocrab (status|wait)",
     "cli.cmd.plan": "Dump frozen Rust plans via N-API",
     "cli.cmd.plan.locale": "LocalePlan from locales/",
     "cli.cmd.plan.document-route": "DocumentRoutePlan from documents/",
@@ -83,7 +84,20 @@
     "cli.opt.apply": "Apply workspace edit plan",
     "cli.opt.explain": "Include rename explain chain",
     "cli.opt.explain.target": "Generic Workspace.explain target",
+    "cli.opt.gha.mode": "status (one-shot) or wait (poll until completed)",
+    "cli.opt.gha.workflow": "Workflow file name (e.g. ci.yml) or numeric id",
+    "cli.opt.gha.run-id": "Watch a specific workflow run id",
+    "cli.opt.gha.ref": "Commit SHA filter (head_sha)",
+    "cli.opt.gha.branch": "Branch name filter",
+    "cli.opt.gha.owner": "Repository owner (default GITHUB_REPOSITORY)",
+    "cli.opt.gha.repo": "Repository name (default GITHUB_REPOSITORY)",
+    "cli.opt.gha.token": "GitHub token (default GITHUB_TOKEN / GH_TOKEN)",
+    "cli.opt.gha.timeout-minutes": "Max wait minutes for mode=wait",
+    "cli.opt.gha.interval-seconds": "Poll interval seconds for mode=wait",
+    "cli.opt.gha.required-conclusion": "Required conclusion when mode=wait (default success)",
     "cli.err.unknown_plan_kind": "unknown plan kind `{kind}` (locale | document-route)",
+    "cli.err.gha.mode": "unknown --mode {mode} (status | wait)",
+    "cli.err.gha.repo": "set --owner/--repo or GITHUB_REPOSITORY (owner/repo)",
     "cli.err.unknown_target": "unknown --target {target} (browser | mini-program-wechat)",
     "cli.err.document_build_aborted": "document build aborted due to diagnostics",
     "cli.err.locale_rename_usage": "usage: vmz locale rename <from-message-id> <to-message-id>",

package/locales/en-US/diag.json

@@ -2,7 +2,6 @@
     "diag.message": "{message}",
     "diag.detail": "{detail}",
 
-    "vmz::template::jsx_rejected": "JSX / single-brace expressions are rejected in `<template>`: {detail}",
     "vmz::template::illegal_directive": "Illegal or unsupported directive in `<template>`: {detail}",
     "vmz::template::parse_failed": "Failed to parse `<template>`: {detail}",
     "vmz::template::invalid_expr": "Invalid template expression: {detail}",

package/locales/zh-CN/diag.json

@@ -2,7 +2,6 @@
     "diag.message": "{message}",
     "diag.detail": "{detail}",
 
-    "vmz::template::jsx_rejected": "`<template>` 拒绝 JSX / 单花括号表达式：{detail}",
     "vmz::template::illegal_directive": "`<template>` 中存在非法或不支持的指令：{detail}",
     "vmz::template::parse_failed": "解析 `<template>` 失败：{detail}",
     "vmz::template::invalid_expr": "模板表达式无效：{detail}",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vmz/vmz",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "type": "module",
   "description": "VMZ Node toolchain — N-API workspace session + CLI (publish name @vmz/vmz)",
   "license": "MIT",
@@ -48,16 +48,16 @@
     }
   },
   "dependencies": {
-    "@vmz/commander": "0.1.21",
-    "@vmz/core": "0.1.21",
-    "@vmz/diagnostic": "0.1.21",
-    "@vmz/plugin": "0.1.21",
-    "@vmz/protocol": "0.1.21",
+    "@vmz/commander": "0.1.23",
+    "@vmz/core": "0.1.23",
+    "@vmz/diagnostic": "0.1.23",
+    "@vmz/plugin": "0.1.23",
+    "@vmz/protocol": "0.1.23",
     "jiti": "^2.6.1"
   },
   "peerDependencies": {
-    "@vmz/plugin-markdown-it": "0.1.21",
-    "@vmz/test": "0.1.21",
+    "@vmz/plugin-markdown-it": "0.1.23",
+    "@vmz/test": "0.1.23",
     "typescript": "^5.8.3"
   },
   "peerDependenciesMeta": {
@@ -92,12 +92,12 @@
     "cli"
   ],
   "optionalDependencies": {
-    "@vmz/vmz-win32-x64": "0.1.21",
-    "@vmz/vmz-win32-arm64": "0.1.21",
-    "@vmz/vmz-darwin-x64": "0.1.21",
-    "@vmz/vmz-darwin-arm64": "0.1.21",
-    "@vmz/vmz-linux-x64": "0.1.21",
-    "@vmz/vmz-linux-arm64": "0.1.21"
+    "@vmz/vmz-win32-x64": "0.1.23",
+    "@vmz/vmz-win32-arm64": "0.1.23",
+    "@vmz/vmz-darwin-x64": "0.1.23",
+    "@vmz/vmz-darwin-arm64": "0.1.23",
+    "@vmz/vmz-linux-x64": "0.1.23",
+    "@vmz/vmz-linux-arm64": "0.1.23"
   },
   "publishConfig": {
     "access": "public"