@volter/tabnode 0.5.24 → 0.5.26

package/dist/__sw__.js

@@ -43,7 +43,8 @@ function openHost(id, channel) {
   };
   hosts.set(id, host);
   latestHost = host;
-  void pruneClients();
+  // Clients that are gone are forgotten; a prune that fails forgets nothing.
+  void pruneClients().catch(() => {});
   return host;
 }
 
@@ -544,7 +545,7 @@ async function blobWorkerContext(client, requestUrl) {
     if (owners.some(owner => owner.context.port !== owners[0].context.port || owner.host !== owners[0].host)) throw new Error('Ambiguous virtual blob owner');
     rootedClients.set(client.id, owners[0].context.port);
     if (owners[0].host) clientHosts.set(client.id, owners[0].host.id);
-    if (rootedClients.size > 256) pruneClients();
+    if (rootedClients.size > 256) void pruneClients().catch(() => {});
     return owners[0].context;
   })();
   pendingBlobContexts.set(client.id, pending);
@@ -617,7 +618,7 @@ async function askForInit() {
 function handleRootedRequest(event, port, path) {
   if (event.resultingClientId) {
     rootedClients.set(event.resultingClientId, port);
-    if (rootedClients.size > 256) pruneClients();
+    if (rootedClients.size > 256) void pruneClients().catch(() => {});
   }
   return handleVirtualRequest(event.request, port, path, true);
 }

package/dist/assets/{runtime-worker-Bw5ePWPu.js → runtime-worker-VIeZbbDr.js}

@@ -21146,17 +21146,10 @@ var implementation$1 = function bind2(that) {
 var implementation = implementation$1;
 var functionBind = Function.prototype.bind || implementation;
 var functionCall = Function.prototype.call;
-var functionApply;
-var hasRequiredFunctionApply;
-function requireFunctionApply() {
-  if (hasRequiredFunctionApply) return functionApply;
-  hasRequiredFunctionApply = 1;
-  functionApply = Function.prototype.apply;
-  return functionApply;
-}
+var functionApply = Function.prototype.apply;
 var reflectApply = typeof Reflect !== "undefined" && Reflect && Reflect.apply;
 var bind$2 = functionBind;
-var $apply$1 = requireFunctionApply();
+var $apply$1 = functionApply;
 var $call$2 = functionCall;
 var $reflectApply = reflectApply;
 var actualApply = $reflectApply || bind$2.call($call$2, $apply$1);
@@ -21276,7 +21269,7 @@ var hasSymbols = requireHasSymbols()();
 var getProto = requireGetProto();
 var $ObjectGPO = requireObject_getPrototypeOf();
 var $ReflectGPO = requireReflect_getPrototypeOf();
-var $apply = requireFunctionApply();
+var $apply = functionApply;
 var $call = functionCall;
 var needsEval = {};
 var TypedArray = typeof Uint8Array === "undefined" || !getProto ? undefined$1 : getProto(Uint8Array);
@@ -21917,7 +21910,7 @@ function requireApplyBind() {
   if (hasRequiredApplyBind) return applyBind;
   hasRequiredApplyBind = 1;
   var bind3 = functionBind;
-  var $apply2 = requireFunctionApply();
+  var $apply2 = functionApply;
   var actualApply$1 = actualApply;
   applyBind = function applyBind2() {
     return actualApply$1(bind3, $apply2, arguments);
@@ -22528,9 +22521,9 @@ Sha256$1.prototype._hash = function() {
   H.writeInt32BE(this._h, 28);
   return H;
 };
-var sha256 = Sha256$1;
+var sha256$1 = Sha256$1;
 var inherits$2 = inherits_browserExports;
-var Sha256 = sha256;
+var Sha256 = sha256$1;
 var Hash$2 = hash$1;
 var Buffer$3 = safeBufferExports.Buffer;
 var W$3 = new Array(64);
@@ -22956,7 +22949,7 @@ var sha384 = Sha384;
   module.exports.sha = sha;
   module.exports.sha1 = sha1;
   module.exports.sha224 = sha224;
-  module.exports.sha256 = sha256;
+  module.exports.sha256 = sha256$1;
   module.exports.sha384 = sha384;
   module.exports.sha512 = sha512;
 })(sha_js);
@@ -23010,9 +23003,27 @@ function clean(...arrays) {
 function createView(arr) {
   return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
 }
+function rotr(word, shift) {
+  return word << 32 - shift | word >>> shift;
+}
 function rotl(word, shift) {
   return word << shift | word >>> 32 - shift >>> 0;
 }
+const hasHexBuiltin = /* @__PURE__ */ (() => (
+  // @ts-ignore
+  typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function"
+))();
+const hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i10) => i10.toString(16).padStart(2, "0"));
+function bytesToHex(bytes2) {
+  abytes(bytes2);
+  if (hasHexBuiltin)
+    return bytes2.toHex();
+  let hex = "";
+  for (let i10 = 0; i10 < bytes2.length; i10++) {
+    hex += hexes[bytes2[i10]];
+  }
+  return hex;
+}
 function checkOpts(defaults2, opts, title = "opts") {
   aobject(defaults2, "defaults");
   if (opts !== void 0)
@@ -23033,9 +23044,17 @@ function createHasher(hashCons, info = {}) {
   Object.assign(hashC, info);
   return Object.freeze(hashC);
 }
+const oidNist = (suffix) => ({
+  // Current NIST hashAlgs suffixes used here fit in one DER subidentifier octet.
+  // Larger suffix values would need base-128 OID encoding and a different length byte.
+  oid: Uint8Array.from([6, 9, 96, 134, 72, 1, 101, 3, 4, 2, suffix])
+});
 function Chi(a, b, c) {
   return a & b ^ ~a & c;
 }
+function Maj(a, b, c) {
+  return a & b ^ a & c ^ b & c;
+}
 class HashMD {
   constructor(blockLen, outputLen, padOffset, isLE) {
     __publicField(this, "blockLen");
@@ -23131,6 +23150,16 @@ class HashMD {
     return this._cloneInto();
   }
 }
+const SHA256_IV = /* @__PURE__ */ Uint32Array.from([
+  1779033703,
+  3144134277,
+  1013904242,
+  2773480762,
+  1359893119,
+  2600822924,
+  528734635,
+  1541459225
+]);
 const SHA1_IV = /* @__PURE__ */ Uint32Array.from([
   1732584193,
   4023233417,
@@ -32110,6 +32139,169 @@ function simpleHash(str) {
   }
   return hash2.toString(36);
 }
+const SHA256_K = /* @__PURE__ */ Uint32Array.from([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+const SHA256_W = /* @__PURE__ */ new Uint32Array(64);
+class SHA2_32B extends HashMD {
+  constructor(outputLen, IV) {
+    super(64, outputLen, 8, false);
+    // We cannot use array here since array allows indexing by variable
+    // which means optimizer/compiler cannot use registers.
+    // Numeric initializers matter: starting the fields as `undefined` changes
+    // V8's field representation and makes sha256 3x slower (measured).
+    __publicField(this, "A", 0);
+    __publicField(this, "B", 0);
+    __publicField(this, "C", 0);
+    __publicField(this, "D", 0);
+    __publicField(this, "E", 0);
+    __publicField(this, "F", 0);
+    __publicField(this, "G", 0);
+    __publicField(this, "H", 0);
+    this.A = IV[0] | 0;
+    this.B = IV[1] | 0;
+    this.C = IV[2] | 0;
+    this.D = IV[3] | 0;
+    this.E = IV[4] | 0;
+    this.F = IV[5] | 0;
+    this.G = IV[6] | 0;
+    this.H = IV[7] | 0;
+  }
+  get() {
+    const { A: A10, B, C, D: D10, E: E7, F, G: G10, H } = this;
+    return [A10, B, C, D10, E7, F, G10, H];
+  }
+  // prettier-ignore
+  set(A10, B, C, D10, E7, F, G10, H) {
+    this.A = A10 | 0;
+    this.B = B | 0;
+    this.C = C | 0;
+    this.D = D10 | 0;
+    this.E = E7 | 0;
+    this.F = F | 0;
+    this.G = G10 | 0;
+    this.H = H | 0;
+  }
+  _cloneInto(to2) {
+    (to2 || (to2 = new this.constructor())).set(...this.get());
+    return this._cloneIntoMeta(to2);
+  }
+  process(view, offset2) {
+    for (let i10 = 0; i10 < 16; i10++, offset2 += 4)
+      SHA256_W[i10] = view.getUint32(offset2, false);
+    for (let i10 = 16; i10 < 64; i10++) {
+      const W15 = SHA256_W[i10 - 15];
+      const W22 = SHA256_W[i10 - 2];
+      const s02 = rotr(W15, 7) ^ rotr(W15, 18) ^ W15 >>> 3;
+      const s12 = rotr(W22, 17) ^ rotr(W22, 19) ^ W22 >>> 10;
+      SHA256_W[i10] = s12 + SHA256_W[i10 - 7] + s02 + SHA256_W[i10 - 16] | 0;
+    }
+    let { A: A10, B, C, D: D10, E: E7, F, G: G10, H } = this;
+    for (let i10 = 0; i10 < 64; i10++) {
+      const sigma12 = rotr(E7, 6) ^ rotr(E7, 11) ^ rotr(E7, 25);
+      const T12 = H + sigma12 + Chi(E7, F, G10) + SHA256_K[i10] + SHA256_W[i10] | 0;
+      const sigma02 = rotr(A10, 2) ^ rotr(A10, 13) ^ rotr(A10, 22);
+      const T22 = sigma02 + Maj(A10, B, C) | 0;
+      H = G10;
+      G10 = F;
+      F = E7;
+      E7 = D10 + T12 | 0;
+      D10 = C;
+      C = B;
+      B = A10;
+      A10 = T12 + T22 | 0;
+    }
+    A10 = A10 + this.A | 0;
+    B = B + this.B | 0;
+    C = C + this.C | 0;
+    D10 = D10 + this.D | 0;
+    E7 = E7 + this.E | 0;
+    F = F + this.F | 0;
+    G10 = G10 + this.G | 0;
+    H = H + this.H | 0;
+    this.set(A10, B, C, D10, E7, F, G10, H);
+  }
+  roundClean() {
+    clean(SHA256_W);
+  }
+  destroy() {
+    this.destroyed = true;
+    this.set(0, 0, 0, 0, 0, 0, 0, 0);
+    clean(this.buffer);
+  }
+}
+class _SHA256 extends SHA2_32B {
+  constructor() {
+    super(32, SHA256_IV);
+  }
+}
+const sha256 = /* @__PURE__ */ createHasher(
+  () => new _SHA256(),
+  /* @__PURE__ */ oidNist(1)
+);
 const fsModule = lazyModule("fs");
 lazyModule("internal/fs/promises");
 function fsModuleFor(process2) {
@@ -78302,6 +78494,30 @@ Object.defineProperty(globalThis, "__substrateEvalSource", {
   configurable: true,
   value: (source) => typeof source === "string" ? __substrateRewriteDynamicImportsInScript(source) : source
 });
+function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
+  let code2 = rawCode;
+  if (code2.startsWith("#!")) {
+    code2 = code2.slice(code2.indexOf("\n") + 1);
+  }
+  code2 = __substrateModuleTypes(code2, resolvedPath, format2, process2);
+  const __commonjs = format2 === "commonjs" || format2 === "commonjs-typescript" ? true : format2 === "module" || format2 === "module-typescript" ? false : resolvedPath.endsWith(".cjs") || resolvedPath.endsWith(".cts");
+  if (!__commonjs) {
+    const lowered = transformEsmToCjs(code2, resolvedPath);
+    code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
+  } else {
+    code2 = transformDynamicImportsRegex(code2);
+  }
+  return code2;
+}
+const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+const PREPARED_MODULES_FORMAT = "tabnode-prepared-1";
+function preparedModuleKey(rawCode, resolvedPath) {
+  var _a3;
+  const extension = (_a3 = /\.(js|cjs|mjs)$/u.exec(resolvedPath)) == null ? void 0 : _a3[1];
+  if (!extension) return void 0;
+  const kind = extension === "cjs" ? "cjs" : "js";
+  return bytesToHex(sha256(new TextEncoder().encode(`${PREPARED_MODULES_FORMAT}|${kind}|${rawCode}`)));
+}
 function transformEsmToCjs(code2, filename) {
   const maybeEsm = __substrateHasEsmSyntax(code2);
   if (!maybeEsm) return __substrateRewriteDynamicImportsInScript(code2);
@@ -79340,6 +79556,14 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     }
     const rawCode = source === void 0 || source === null ? defaultSource() : String(source);
     const dirname$1 = resolvedPath.startsWith("data:") ? currentDir : dirname(resolvedPath);
+    if (format2 === void 0 && !transformsTypes(process2) && vfs2.existsSync(PREPARED_MODULES_DIR)) {
+      const key = preparedModuleKey(rawCode, resolvedPath);
+      const prepared = key ? `${PREPARED_MODULES_DIR}/${key}` : void 0;
+      if (prepared && vfs2.existsSync(prepared)) {
+        runModuleBody(module, vfs2.readFileSync(prepared, "utf8"), resolvedPath, dirname$1, true);
+        return module;
+      }
+    }
     runModuleBody(module, prepareModuleCode(rawCode, resolvedPath, format2), resolvedPath, dirname$1);
     return module;
   };
@@ -79347,23 +79571,12 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     const codeCacheKey = `${resolvedPath}|${format2 ?? ""}|${transformsTypes(process2) ? "transform-types|" : ""}${simpleHash(rawCode)}`;
     let code2 = processedCodeCache == null ? void 0 : processedCodeCache.get(codeCacheKey);
     if (!code2) {
-      code2 = rawCode;
-      if (code2.startsWith("#!")) {
-        code2 = code2.slice(code2.indexOf("\n") + 1);
-      }
-      code2 = __substrateModuleTypes(code2, resolvedPath, format2, process2);
-      const __commonjs = format2 === "commonjs" || format2 === "commonjs-typescript" ? true : format2 === "module" || format2 === "module-typescript" ? false : resolvedPath.endsWith(".cjs") || resolvedPath.endsWith(".cts");
-      if (!__commonjs) {
-        const lowered = transformEsmToCjs(code2, resolvedPath);
-        code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
-      } else {
-        code2 = transformDynamicImportsRegex(code2);
-      }
+      code2 = __substratePrepareBody(rawCode, resolvedPath, format2, process2);
       processedCodeCache == null ? void 0 : processedCodeCache.set(codeCacheKey, code2);
     }
     return code2;
   };
-  const runModuleBody = (module, prepared, resolvedPath, dirname2) => {
+  const runModuleBody = (module, prepared, resolvedPath, dirname2, scoped = false) => {
     let code2 = prepared;
     const moduleRequire = createRequire(
       vfs2,
@@ -79380,7 +79593,7 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     try {
       const importMetaUrl = resolvedPath.startsWith("data:") ? resolvedPath : "file://" + resolvedPath;
       const strictBody = code2.startsWith(__substrateModuleMarker);
-      code2 = __substrateScopeGlobalCalls(code2);
+      if (!scoped) code2 = __substrateScopeGlobalCalls(code2);
       const wrappedCode = `(function($exports, $require, $module, $filename, $dirname, $process, $console, $importMeta, $dynamicImport, __substrateGuestGlobal, __substrateGuestConstructor) { var exports = $exports; var require = $require; var module = $module; var __filename = $filename; var __dirname = $dirname; var process = $process; var console = $console; var import_meta = $importMeta; var __dynamicImport = $dynamicImport; var document = void 0, window = void 0, location = void 0, self = void 0; var globalThis = __substrateGuestGlobal($process); var global = globalThis; var Buffer = globalThis.Buffer; var queueMicrotask = globalThis.queueMicrotask, atob = globalThis.atob, btoa = globalThis.btoa, structuredClone = globalThis.structuredClone, setTimeout = globalThis.setTimeout, clearTimeout = globalThis.clearTimeout, setInterval = globalThis.setInterval, clearInterval = globalThis.clearInterval; globalThis.process = $process; global.process = $process; with ({ __proto__: null, get navigator() { return globalThis.navigator; }, set navigator(value) { globalThis.navigator = value; }, get Navigator() { return globalThis.Navigator; }, set Navigator(value) { globalThis.Navigator = value; }, get Promise() { return globalThis.Promise; }, set Promise(value) { globalThis.Promise = value; }, get fetch() { return globalThis.fetch; }, set fetch(value) { globalThis.fetch = value; } }) { return (function() {${code2}
 }).call(${strictBody ? "void 0" : "$module.exports"}); }
 })${__substrateSourceURL(resolvedPath)}`;

package/dist/index.d.ts

@@ -10,7 +10,7 @@
 export { restoreHostGlobals, guestRealmInstalled } from './host-globals';
 export { VirtualFS } from './virtual-fs';
 export type { FSNode, MountedTree, Stats, FSWatcher, WatchListener, WatchEventType } from './virtual-fs';
-export { Runtime, execute } from './runtime';
+export { Runtime, execute, prepareModuleForImage, preparedModuleKey, PREPARED_MODULES_DIR } from './runtime';
 export type { Module, RuntimeOptions, RequireFunction } from './runtime';
 export { createRuntime, WorkerRuntime } from './create-runtime';
 export type { IRuntime, IExecuteResult, CreateRuntimeOptions, IRuntimeOptions, VFSSnapshot } from './runtime-interface';

package/dist/index.mjs

@@ -22704,9 +22704,9 @@ Sha256$1.prototype._hash = function() {
   H.writeInt32BE(this._h, 28);
   return H;
 };
-var sha256 = Sha256$1;
+var sha256$1 = Sha256$1;
 var inherits$2 = inherits_browserExports;
-var Sha256 = sha256;
+var Sha256 = sha256$1;
 var Hash$2 = hash$1;
 var Buffer$3 = safeBufferExports.Buffer;
 var W$2 = new Array(64);
@@ -23132,7 +23132,7 @@ var sha384 = Sha384;
   module.exports.sha = sha;
   module.exports.sha1 = sha1;
   module.exports.sha224 = sha224;
-  module.exports.sha256 = sha256;
+  module.exports.sha256 = sha256$1;
   module.exports.sha384 = sha384;
   module.exports.sha512 = sha512;
 })(sha_js);
@@ -23186,9 +23186,27 @@ function clean(...arrays) {
 function createView(arr) {
   return new DataView(arr.buffer, arr.byteOffset, arr.byteLength);
 }
+function rotr(word, shift) {
+  return word << 32 - shift | word >>> shift;
+}
 function rotl(word, shift) {
   return word << shift | word >>> 32 - shift >>> 0;
 }
+const hasHexBuiltin = /* @__PURE__ */ (() => (
+  // @ts-ignore
+  typeof Uint8Array.from([]).toHex === "function" && typeof Uint8Array.fromHex === "function"
+))();
+const hexes = /* @__PURE__ */ Array.from({ length: 256 }, (_, i2) => i2.toString(16).padStart(2, "0"));
+function bytesToHex(bytes2) {
+  abytes(bytes2);
+  if (hasHexBuiltin)
+    return bytes2.toHex();
+  let hex = "";
+  for (let i2 = 0; i2 < bytes2.length; i2++) {
+    hex += hexes[bytes2[i2]];
+  }
+  return hex;
+}
 function checkOpts(defaults, opts, title = "opts") {
   aobject(defaults, "defaults");
   if (opts !== void 0)
@@ -23209,9 +23227,17 @@ function createHasher(hashCons, info = {}) {
   Object.assign(hashC, info);
   return Object.freeze(hashC);
 }
+const oidNist = (suffix) => ({
+  // Current NIST hashAlgs suffixes used here fit in one DER subidentifier octet.
+  // Larger suffix values would need base-128 OID encoding and a different length byte.
+  oid: Uint8Array.from([6, 9, 96, 134, 72, 1, 101, 3, 4, 2, suffix])
+});
 function Chi(a, b, c) {
   return a & b ^ ~a & c;
 }
+function Maj(a, b, c) {
+  return a & b ^ a & c ^ b & c;
+}
 class HashMD {
   constructor(blockLen, outputLen, padOffset, isLE) {
     __publicField(this, "blockLen");
@@ -23307,6 +23333,16 @@ class HashMD {
     return this._cloneInto();
   }
 }
+const SHA256_IV = /* @__PURE__ */ Uint32Array.from([
+  1779033703,
+  3144134277,
+  1013904242,
+  2773480762,
+  1359893119,
+  2600822924,
+  528734635,
+  1541459225
+]);
 const SHA1_IV = /* @__PURE__ */ Uint32Array.from([
   1732584193,
   4023233417,
@@ -32350,6 +32386,169 @@ function simpleHash(str) {
   }
   return hash2.toString(36);
 }
+const SHA256_K = /* @__PURE__ */ Uint32Array.from([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+const SHA256_W = /* @__PURE__ */ new Uint32Array(64);
+class SHA2_32B extends HashMD {
+  constructor(outputLen, IV) {
+    super(64, outputLen, 8, false);
+    // We cannot use array here since array allows indexing by variable
+    // which means optimizer/compiler cannot use registers.
+    // Numeric initializers matter: starting the fields as `undefined` changes
+    // V8's field representation and makes sha256 3x slower (measured).
+    __publicField(this, "A", 0);
+    __publicField(this, "B", 0);
+    __publicField(this, "C", 0);
+    __publicField(this, "D", 0);
+    __publicField(this, "E", 0);
+    __publicField(this, "F", 0);
+    __publicField(this, "G", 0);
+    __publicField(this, "H", 0);
+    this.A = IV[0] | 0;
+    this.B = IV[1] | 0;
+    this.C = IV[2] | 0;
+    this.D = IV[3] | 0;
+    this.E = IV[4] | 0;
+    this.F = IV[5] | 0;
+    this.G = IV[6] | 0;
+    this.H = IV[7] | 0;
+  }
+  get() {
+    const { A, B, C, D, E, F, G, H } = this;
+    return [A, B, C, D, E, F, G, H];
+  }
+  // prettier-ignore
+  set(A, B, C, D, E, F, G, H) {
+    this.A = A | 0;
+    this.B = B | 0;
+    this.C = C | 0;
+    this.D = D | 0;
+    this.E = E | 0;
+    this.F = F | 0;
+    this.G = G | 0;
+    this.H = H | 0;
+  }
+  _cloneInto(to) {
+    (to || (to = new this.constructor())).set(...this.get());
+    return this._cloneIntoMeta(to);
+  }
+  process(view, offset2) {
+    for (let i2 = 0; i2 < 16; i2++, offset2 += 4)
+      SHA256_W[i2] = view.getUint32(offset2, false);
+    for (let i2 = 16; i2 < 64; i2++) {
+      const W15 = SHA256_W[i2 - 15];
+      const W2 = SHA256_W[i2 - 2];
+      const s0 = rotr(W15, 7) ^ rotr(W15, 18) ^ W15 >>> 3;
+      const s1 = rotr(W2, 17) ^ rotr(W2, 19) ^ W2 >>> 10;
+      SHA256_W[i2] = s1 + SHA256_W[i2 - 7] + s0 + SHA256_W[i2 - 16] | 0;
+    }
+    let { A, B, C, D, E, F, G, H } = this;
+    for (let i2 = 0; i2 < 64; i2++) {
+      const sigma12 = rotr(E, 6) ^ rotr(E, 11) ^ rotr(E, 25);
+      const T1 = H + sigma12 + Chi(E, F, G) + SHA256_K[i2] + SHA256_W[i2] | 0;
+      const sigma02 = rotr(A, 2) ^ rotr(A, 13) ^ rotr(A, 22);
+      const T2 = sigma02 + Maj(A, B, C) | 0;
+      H = G;
+      G = F;
+      F = E;
+      E = D + T1 | 0;
+      D = C;
+      C = B;
+      B = A;
+      A = T1 + T2 | 0;
+    }
+    A = A + this.A | 0;
+    B = B + this.B | 0;
+    C = C + this.C | 0;
+    D = D + this.D | 0;
+    E = E + this.E | 0;
+    F = F + this.F | 0;
+    G = G + this.G | 0;
+    H = H + this.H | 0;
+    this.set(A, B, C, D, E, F, G, H);
+  }
+  roundClean() {
+    clean(SHA256_W);
+  }
+  destroy() {
+    this.destroyed = true;
+    this.set(0, 0, 0, 0, 0, 0, 0, 0);
+    clean(this.buffer);
+  }
+}
+class _SHA256 extends SHA2_32B {
+  constructor() {
+    super(32, SHA256_IV);
+  }
+}
+const sha256 = /* @__PURE__ */ createHasher(
+  () => new _SHA256(),
+  /* @__PURE__ */ oidNist(1)
+);
 const fsModule = lazyModule("fs");
 lazyModule("internal/fs/promises");
 function fsModuleFor(process2) {
@@ -37988,6 +38187,33 @@ Object.defineProperty(globalThis, "__substrateEvalSource", {
   configurable: true,
   value: (source) => typeof source === "string" ? __substrateRewriteDynamicImportsInScript(source) : source
 });
+function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
+  let code2 = rawCode;
+  if (code2.startsWith("#!")) {
+    code2 = code2.slice(code2.indexOf("\n") + 1);
+  }
+  code2 = __substrateModuleTypes(code2, resolvedPath, format2, process2);
+  const __commonjs = format2 === "commonjs" || format2 === "commonjs-typescript" ? true : format2 === "module" || format2 === "module-typescript" ? false : resolvedPath.endsWith(".cjs") || resolvedPath.endsWith(".cts");
+  if (!__commonjs) {
+    const lowered = transformEsmToCjs(code2, resolvedPath);
+    code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
+  } else {
+    code2 = transformDynamicImportsRegex(code2);
+  }
+  return code2;
+}
+const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+const PREPARED_MODULES_FORMAT = "tabnode-prepared-1";
+function preparedModuleKey(rawCode, resolvedPath) {
+  var _a2;
+  const extension = (_a2 = /\.(js|cjs|mjs)$/u.exec(resolvedPath)) == null ? void 0 : _a2[1];
+  if (!extension) return void 0;
+  const kind = extension === "cjs" ? "cjs" : "js";
+  return bytesToHex(sha256(new TextEncoder().encode(`${PREPARED_MODULES_FORMAT}|${kind}|${rawCode}`)));
+}
+function prepareModuleForImage(rawCode, resolvedPath) {
+  return __substrateScopeGlobalCalls(__substratePrepareBody(rawCode, resolvedPath, void 0, { execArgv: [], env: {} }));
+}
 function transformEsmToCjs(code2, filename) {
   const maybeEsm = __substrateHasEsmSyntax(code2);
   if (!maybeEsm) return __substrateRewriteDynamicImportsInScript(code2);
@@ -39026,6 +39252,14 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     }
     const rawCode = source === void 0 || source === null ? defaultSource() : String(source);
     const dirname$1 = resolvedPath.startsWith("data:") ? currentDir : dirname(resolvedPath);
+    if (format2 === void 0 && !transformsTypes(process2) && vfs2.existsSync(PREPARED_MODULES_DIR)) {
+      const key = preparedModuleKey(rawCode, resolvedPath);
+      const prepared = key ? `${PREPARED_MODULES_DIR}/${key}` : void 0;
+      if (prepared && vfs2.existsSync(prepared)) {
+        runModuleBody(module, vfs2.readFileSync(prepared, "utf8"), resolvedPath, dirname$1, true);
+        return module;
+      }
+    }
     runModuleBody(module, prepareModuleCode(rawCode, resolvedPath, format2), resolvedPath, dirname$1);
     return module;
   };
@@ -39033,23 +39267,12 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     const codeCacheKey = `${resolvedPath}|${format2 ?? ""}|${transformsTypes(process2) ? "transform-types|" : ""}${simpleHash(rawCode)}`;
     let code2 = processedCodeCache == null ? void 0 : processedCodeCache.get(codeCacheKey);
     if (!code2) {
-      code2 = rawCode;
-      if (code2.startsWith("#!")) {
-        code2 = code2.slice(code2.indexOf("\n") + 1);
-      }
-      code2 = __substrateModuleTypes(code2, resolvedPath, format2, process2);
-      const __commonjs = format2 === "commonjs" || format2 === "commonjs-typescript" ? true : format2 === "module" || format2 === "module-typescript" ? false : resolvedPath.endsWith(".cjs") || resolvedPath.endsWith(".cts");
-      if (!__commonjs) {
-        const lowered = transformEsmToCjs(code2, resolvedPath);
-        code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
-      } else {
-        code2 = transformDynamicImportsRegex(code2);
-      }
+      code2 = __substratePrepareBody(rawCode, resolvedPath, format2, process2);
       processedCodeCache == null ? void 0 : processedCodeCache.set(codeCacheKey, code2);
     }
     return code2;
   };
-  const runModuleBody = (module, prepared, resolvedPath, dirname2) => {
+  const runModuleBody = (module, prepared, resolvedPath, dirname2, scoped = false) => {
     let code2 = prepared;
     const moduleRequire = createRequire(
       vfs2,
@@ -39066,7 +39289,7 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     try {
       const importMetaUrl = resolvedPath.startsWith("data:") ? resolvedPath : "file://" + resolvedPath;
       const strictBody = code2.startsWith(__substrateModuleMarker);
-      code2 = __substrateScopeGlobalCalls(code2);
+      if (!scoped) code2 = __substrateScopeGlobalCalls(code2);
       const wrappedCode = `(function($exports, $require, $module, $filename, $dirname, $process, $console, $importMeta, $dynamicImport, __substrateGuestGlobal, __substrateGuestConstructor) { var exports = $exports; var require = $require; var module = $module; var __filename = $filename; var __dirname = $dirname; var process = $process; var console = $console; var import_meta = $importMeta; var __dynamicImport = $dynamicImport; var document = void 0, window = void 0, location = void 0, self = void 0; var globalThis = __substrateGuestGlobal($process); var global = globalThis; var Buffer = globalThis.Buffer; var queueMicrotask = globalThis.queueMicrotask, atob = globalThis.atob, btoa = globalThis.btoa, structuredClone = globalThis.structuredClone, setTimeout = globalThis.setTimeout, clearTimeout = globalThis.clearTimeout, setInterval = globalThis.setInterval, clearInterval = globalThis.clearInterval; globalThis.process = $process; global.process = $process; with ({ __proto__: null, get navigator() { return globalThis.navigator; }, set navigator(value) { globalThis.navigator = value; }, get Navigator() { return globalThis.Navigator; }, set Navigator(value) { globalThis.Navigator = value; }, get Promise() { return globalThis.Promise; }, set Promise(value) { globalThis.Promise = value; }, get fetch() { return globalThis.fetch; }, set fetch(value) { globalThis.fetch = value; } }) { return (function() {${code2}
 }).call(${strictBody ? "void 0" : "$module.exports"}); }
 })${__substrateSourceURL(resolvedPath)}`;
@@ -39925,7 +40148,7 @@ class WorkerRuntime {
     this.worker = new Worker(
       new URL(
         /* @vite-ignore */
-        "/assets/runtime-worker-Bw5ePWPu.js",
+        "/assets/runtime-worker-VIeZbbDr.js",
         import.meta.url
       ),
       { type: "module" }
@@ -42842,6 +43065,7 @@ function createContainer(options) {
 }
 export {
   NativeStreamScope,
+  PREPARED_MODULES_DIR,
   PackageManager,
   Runtime,
   ServerBridge,
@@ -42877,6 +43101,8 @@ export {
   ownerProcessTable,
   path,
   perfHooksShim as perf_hooks,
+  prepareModuleForImage,
+  preparedModuleKey,
   processByPid,
   requestHasStaticBody,
   resetServerBridge,

package/dist/runtime.d.ts

@@ -8,6 +8,19 @@ import { VirtualFS } from './virtual-fs';
 import type { IExecuteResult } from './runtime-interface';
 import { Process } from './shims/process';
 export { pendingGuestTimers, stopGuestTimers } from './guest-timers';
+/**
+ * Module bodies prepared where the image is built. Parsing a package's files
+ * for the passes above is most of a `require` in a tab: 36 of 45 s for
+ * playwright-core's, measured in a tab, against 0.9 s under Node on the same
+ * machine. The image carries each body under the hash of the file it was made
+ * from, in this directory of the tab's filesystem, and the loader takes it in
+ * place of the passes when the file it read hashes to one.
+ */
+export declare const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+/** The name a prepared body goes under: the hash of the file as read, and how it is compiled. Undefined for a file no body is prepared for. */
+export declare function preparedModuleKey(rawCode: string, resolvedPath: string): string | undefined;
+/** The body the loader would compile for this file, with no load hooks and no type stripping: what the image carries. */
+export declare function prepareModuleForImage(rawCode: string, resolvedPath: string): string;
 export declare function __substratePendingOf(value: unknown): Promise<void> | undefined;
 export interface Module {
     id: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/tabnode",
-  "version": "0.5.24",
+  "version": "0.5.26",
   "description": "Node's own library, in a browser tab.",
   "type": "module",
   "license": "MIT",

package/src/index.ts

@@ -14,7 +14,7 @@
 export { restoreHostGlobals, guestRealmInstalled } from './host-globals';
 export { VirtualFS } from './virtual-fs';
 export type { FSNode, MountedTree, Stats, FSWatcher, WatchListener, WatchEventType } from './virtual-fs';
-export { Runtime, execute } from './runtime';
+export { Runtime, execute, prepareModuleForImage, preparedModuleKey, PREPARED_MODULES_DIR } from './runtime';
 export type { Module, RuntimeOptions, RequireFunction } from './runtime';
 export { createRuntime, WorkerRuntime } from './create-runtime';
 export type { IRuntime, IExecuteResult, CreateRuntimeOptions, IRuntimeOptions, VFSSnapshot } from './runtime-interface';

package/src/runtime.ts

@@ -12,6 +12,8 @@ import { forGuestRealm, installGuestRealm, takeFromHost, defineOnHost, heldWork
 import type { IRuntime, IExecuteResult, IRuntimeOptions } from './runtime-interface';
 import type { PackageJson } from './types/package-json';
 import { simpleHash } from './utils/hash';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex } from '@noble/hashes/utils.js';
 import { uint8ToBase64, uint8ToHex } from './utils/binary-encoding';
 import { createFsShim, FsShim } from './shims/fs';
 import * as pathShim from './shims/path';
@@ -423,6 +425,66 @@ Object.defineProperty(globalThis, "__substrateEvalSource", {
   configurable: true,
   value: (source: unknown): unknown => typeof source === "string" ? __substrateRewriteDynamicImportsInScript(source) : source,
 });
+/** A file's source made a body: shebang stripped, types stripped, ESM lowered, dynamic imports rewritten. */
+function __substratePrepareBody(rawCode: string, resolvedPath: string, format: string | undefined, process: unknown): string {
+  let code = rawCode;
+
+  // Strip shebang line if present (e.g. #!/usr/bin/env node)
+  if (code.startsWith('#!')) {
+    code = code.slice(code.indexOf('\n') + 1);
+  }
+
+  code = __substrateModuleTypes(code, resolvedPath, format, process);
+
+  // Transform ESM to CJS if needed (for .mjs files or ESM that wasn't pre-transformed)
+  // transformEsmToCjs uses AST to handle import/export, import.meta, and dynamic imports
+  // It also handles already-CJS files safely (AST finds no ESM nodes → no-op)
+  const __commonjs = format === 'commonjs' || format === 'commonjs-typescript'
+    ? true
+    : format === 'module' || format === 'module-typescript'
+      ? false
+      : resolvedPath.endsWith('.cjs') || resolvedPath.endsWith('.cts');
+  if (!__commonjs) {
+    // An ES module is strict wherever it runs; the mark says so to the
+    // compile below, which is otherwise sloppy as a CommonJS body is.
+    // The directive shares the body's first line, as Node's one-line
+    // wrapper does, so a frame of an ES module counts the file's own lines;
+    // on a line of its own it put every frame one line below the file's.
+    const lowered = transformEsmToCjs(code, resolvedPath);
+    code = lowered === code ? code : `${__substrateModuleMarker}"use strict";${lowered}`;
+  } else {
+    // A `.cjs` module skips the ESM transform, and with it the rewrite of
+    // `import(...)` to the engine's dynamic import, so its
+    // `import("fs/promises")` reached the browser's own import and failed on
+    // the bare specifier. The dynamic-import rewrite applies to `.cjs` too.
+    code = transformDynamicImportsRegex(code);
+  }
+
+  return code;
+}
+
+/**
+ * Module bodies prepared where the image is built. Parsing a package's files
+ * for the passes above is most of a `require` in a tab: 36 of 45 s for
+ * playwright-core's, measured in a tab, against 0.9 s under Node on the same
+ * machine. The image carries each body under the hash of the file it was made
+ * from, in this directory of the tab's filesystem, and the loader takes it in
+ * place of the passes when the file it read hashes to one.
+ */
+export const PREPARED_MODULES_DIR = '/.tabnode/prepared';
+const PREPARED_MODULES_FORMAT = 'tabnode-prepared-1';
+/** The name a prepared body goes under: the hash of the file as read, and how it is compiled. Undefined for a file no body is prepared for. */
+export function preparedModuleKey(rawCode: string, resolvedPath: string): string | undefined {
+  const extension = /\.(js|cjs|mjs)$/u.exec(resolvedPath)?.[1];
+  if (!extension) return undefined;
+  const kind = extension === 'cjs' ? 'cjs' : 'js';
+  return bytesToHex(sha256(new TextEncoder().encode(`${PREPARED_MODULES_FORMAT}|${kind}|${rawCode}`)));
+}
+/** The body the loader would compile for this file, with no load hooks and no type stripping: what the image carries. */
+export function prepareModuleForImage(rawCode: string, resolvedPath: string): string {
+  return __substrateScopeGlobalCalls(__substratePrepareBody(rawCode, resolvedPath, undefined, { execArgv: [], env: {} }));
+}
+
 function transformEsmToCjs(code: string, filename: string): string {
   // Quick check: does the code have any ESM-like patterns?
   const maybeEsm = __substrateHasEsmSyntax(code);
@@ -1789,6 +1851,14 @@ function createRequire(
     const rawCode = source === undefined || source === null ? defaultSource() : String(source);
     const dirname = resolvedPath.startsWith('data:') ? currentDir : pathShim.dirname(resolvedPath);
 
+    if (format === undefined && !transformsTypes(process as { execArgv?: string[]; env?: Record<string, string> }) && vfs.existsSync(PREPARED_MODULES_DIR)) {
+      const key = preparedModuleKey(rawCode, resolvedPath);
+      const prepared = key ? `${PREPARED_MODULES_DIR}/${key}` : undefined;
+      if (prepared && vfs.existsSync(prepared)) {
+        runModuleBody(module, vfs.readFileSync(prepared, 'utf8'), resolvedPath, dirname, true);
+        return module;
+      }
+    }
     runModuleBody(module, prepareModuleCode(rawCode, resolvedPath, format), resolvedPath, dirname);
     return module;
   };
@@ -1808,45 +1878,10 @@ function createRequire(
     // Use a simple hash of the content for cache key to handle content changes
     const codeCacheKey = `${resolvedPath}|${format ?? ''}|${transformsTypes(process as { execArgv?: string[]; env?: Record<string, string> }) ? 'transform-types|' : ''}${simpleHash(rawCode)}`;
     let code = processedCodeCache?.get(codeCacheKey);
-
     if (!code) {
-      code = rawCode;
-
-      // Strip shebang line if present (e.g. #!/usr/bin/env node)
-      if (code.startsWith('#!')) {
-        code = code.slice(code.indexOf('\n') + 1);
-      }
-
-      code = __substrateModuleTypes(code, resolvedPath, format, process);
-
-      // Transform ESM to CJS if needed (for .mjs files or ESM that wasn't pre-transformed)
-      // transformEsmToCjs uses AST to handle import/export, import.meta, and dynamic imports
-      // It also handles already-CJS files safely (AST finds no ESM nodes → no-op)
-      const __commonjs = format === 'commonjs' || format === 'commonjs-typescript'
-        ? true
-        : format === 'module' || format === 'module-typescript'
-          ? false
-          : resolvedPath.endsWith('.cjs') || resolvedPath.endsWith('.cts');
-      if (!__commonjs) {
-        // An ES module is strict wherever it runs; the mark says so to the
-        // compile below, which is otherwise sloppy as a CommonJS body is.
-        // The directive shares the body's first line, as Node's one-line
-        // wrapper does, so a frame of an ES module counts the file's own lines;
-        // on a line of its own it put every frame one line below the file's.
-        const lowered = transformEsmToCjs(code, resolvedPath);
-        code = lowered === code ? code : `${__substrateModuleMarker}"use strict";${lowered}`;
-      } else {
-        // A `.cjs` module skips the ESM transform, and with it the rewrite of
-        // `import(...)` to the engine's dynamic import, so its
-        // `import("fs/promises")` reached the browser's own import and failed on
-        // the bare specifier. The dynamic-import rewrite applies to `.cjs` too.
-        code = transformDynamicImportsRegex(code);
-      }
-
-      // Cache the processed code
+      code = __substratePrepareBody(rawCode, resolvedPath, format, process);
       processedCodeCache?.set(codeCacheKey, code);
     }
-
     return code;
   };
 
@@ -1858,7 +1893,7 @@ function createRequire(
    * hands the result to it; the engine's own pipeline is what makes the
    * body Node-shaped here.
    */
-  const runModuleBody = (module: Module, prepared: string, resolvedPath: string, dirname: string): void => {
+  const runModuleBody = (module: Module, prepared: string, resolvedPath: string, dirname: string, scoped = false): void => {
     let code = prepared;
     // Create require for this module
     const moduleRequire = createRequire(
@@ -1884,7 +1919,7 @@ function createRequire(
     try {
       const importMetaUrl = resolvedPath.startsWith('data:') ? resolvedPath : 'file://' + resolvedPath;
       const strictBody = code.startsWith(__substrateModuleMarker);
-      code = __substrateScopeGlobalCalls(code);
+      if (!scoped) code = __substrateScopeGlobalCalls(code);
       // The wrapper is one line and the body begins on it, as Node's
       // `Module.wrap` is one line, so a module's line N is line N of the
       // script V8 compiles and a stack names the module's own lines. The