@volter/tabnode 0.5.36 → 0.5.38

package/dist/__sw__.js

@@ -578,7 +578,7 @@ async function virtualContext(event) {
   // virtual request asks for its port, so a restart does not send the
   // preview's own requests to the network.
   if (hosts.size === 0 && ((client && client.frameType === 'nested') || (event.request.mode === 'navigate' && (event.request.destination === 'iframe' || event.request.destination === 'frame')))) {
-    await askForInit();
+    await askForInit(event.clientId);
   }
   const contextUrl = event.request.referrer || (client ? client.url : '');
   if (contextUrl) {
@@ -607,9 +607,16 @@ function ownPath(pathname) {
   return pathname.length > 1 && pathname.endsWith('/') ? pathname.slice(0, -1) : pathname;
 }
 
-/** Asks every window for the page's registrations and waits for them, as a request waits for its port. */
-async function askForInit() {
-  const allClients = await self.clients.matchAll({ type: 'window' });
+/**
+ * Asks every window for the page's registrations and waits for them, as a
+ * request waits for its port. Only another window can answer: a page's own
+ * document and scripts come before its `init`, and a frame being opened is no
+ * window yet, so with no other window each waited out the whole ask (a page
+ * opened on an origin whose worker had restarted took 5 s per request).
+ */
+async function askForInit(requesterId) {
+  const allClients = (await self.clients.matchAll({ type: 'window' })).filter((client) => client.id !== requesterId);
+  if (allClients.length === 0) return;
   for (const client of allClients) client.postMessage({ type: 'sw-needs-init' });
   await new Promise((resolve) => {
     const check = setInterval(() => { if (hosts.size > 0) { clearInterval(check); resolve(); } }, 50);
@@ -739,7 +746,7 @@ async function withDocumentPrelude(event, response) {
  */
 async function handleVirtualRequest(request, port, path, rooted = false) {
   try {
-    if (hosts.size === 0) await askForInit();
+    if (hosts.size === 0) await askForInit(requestEvents.get(request)?.clientId);
     const host = await hostForRequest(request, port);
     const registration = host ? host.flowControlledPorts.get(port) : undefined;
     // Build headers object

package/dist/assets/{runtime-worker-DEgP1CYS.js → runtime-worker-C4lPa6-H.js}

@@ -6235,7 +6235,11 @@ function hexSlice(start, end) {
   }
   return out;
 }
+const nativeBase64 = typeof Uint8Array.prototype.toBase64 === "function";
 function base64Text(bytes2, url2) {
+  if (nativeBase64) {
+    return bytes2.toBase64({ alphabet: url2 ? "base64url" : "base64", omitPadding: url2 });
+  }
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
   let out = "";
   for (let index2 = 0; index2 < bytes2.length; index2 += 3) {
@@ -6259,7 +6263,20 @@ function base64urlSlice(start, end) {
   return base64Text(this.subarray(from, to2), true);
 }
 function byteLengthUtf8(string) {
-  return encoder$1.encode(string).length;
+  let length = 0;
+  for (let index2 = 0; index2 < string.length; index2 += 1) {
+    const code2 = string.charCodeAt(index2);
+    if (code2 < 128) length += 1;
+    else if (code2 < 2048) length += 2;
+    else if (code2 >= 55296 && code2 < 56320 && index2 + 1 < string.length) {
+      const next2 = string.charCodeAt(index2 + 1);
+      if (next2 >= 56320 && next2 < 57344) {
+        length += 4;
+        index2 += 1;
+      } else length += 3;
+    } else length += 3;
+  }
+  return length;
 }
 function compare(a, b) {
   return compareRanges(asBytes(a), 0, a.length, asBytes(b), 0, b.length);
@@ -23424,12 +23441,18 @@ function createCryptoModule(require2) {
   function digestEngine(algorithm) {
     return algorithm === "md5" ? md5.create() : SHA(algorithm);
   }
+  const utf8Encoder = new TextEncoder();
   function cryptoBytes(value, encoding, allowArrayBuffer = false) {
     if (typeof value === "string") {
       if ((encoding == null ? void 0 : encoding.toLowerCase()) === "base64url") return buffer.Buffer.from(value, "base64");
       if (encoding !== void 0 && !buffer.Buffer.isEncoding(encoding)) {
         throw new TypeError(`Unknown encoding: ${encoding}`);
       }
+      const lower = encoding == null ? void 0 : encoding.toLowerCase();
+      if (lower === void 0 || lower === "utf8" || lower === "utf-8") {
+        const bytes2 = utf8Encoder.encode(value);
+        return buffer.Buffer.from(bytes2.buffer, bytes2.byteOffset, bytes2.byteLength);
+      }
       return buffer.Buffer.from(value, encoding);
     }
     if (ArrayBuffer.isView(value)) {
@@ -73561,10 +73584,7 @@ function createNodeResolver(options) {
     const packageName = packageNameOf2(specifier);
     const packageRoot = `${nodeModules}/${packageName}`;
     const pkg = isDirectory(packageRoot) ? manifest(packageRoot) : null;
-    if (pkg && pkg.exports !== void 0 && pkg.exports !== null) {
-      const found = loadPackageExports(packageRoot, pkg, specifier, packageName);
-      if (found) return found;
-    }
+    if (pkg && pkg.exports !== void 0 && pkg.exports !== null) return loadPackageExports(packageRoot, pkg, specifier, packageName);
     const path2 = `${nodeModules}/${specifier}`;
     return loadAsFile(path2) ?? loadAsDirectory(path2);
   };
@@ -78595,27 +78615,27 @@ function __substrateFollowAwaits(code2) {
   };
   const isFunction = (node) => node.type === "FunctionDeclaration" || node.type === "FunctionExpression" || node.type === "ArrowFunctionExpression";
   const visit = (node, framed, parent) => {
+    const leading = [];
     if (isFunction(node)) {
       framed = node.async && node.body.type === "BlockStatement";
       if (framed) {
         const directives = node.body.body.filter((statement) => statement.directive !== void 0);
-        const at3 = directives.length ? directives[directives.length - 1].end : node.body.start + 1;
-        insert(at3, FOLLOW_TAKE);
+        leading.push([directives.length ? directives[directives.length - 1].end : node.body.start + 1, FOLLOW_TAKE]);
       }
     } else if (node.type === "AwaitExpression") {
       insert(node.start, framed ? FOLLOW_RESUME_FRAMED : FOLLOW_RESUME_TAKEN);
       insert(node.end, `${FOLLOW_MARK})`);
     } else if (framed && node.type === "CatchClause") {
-      insert(node.body.start + 1, FOLLOW_RESTORE);
+      leading.push([node.body.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === "TryStatement" && node.finalizer) {
-      insert(node.finalizer.start + 1, FOLLOW_RESTORE);
+      leading.push([node.finalizer.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === "ForOfStatement" && node.await) {
       const whole = (parent == null ? void 0 : parent.type) === "LabeledStatement" ? parent : node;
       insert(whole.start, `{${FOLLOW_MARK}`);
       insert(whole.end, `;${FOLLOW_RESTORE}${FOLLOW_MARK}}`);
-      if (node.body.type === "BlockStatement") insert(node.body.start + 1, FOLLOW_RESTORE);
+      if (node.body.type === "BlockStatement") leading.push([node.body.start + 1, FOLLOW_RESTORE]);
       else {
-        insert(node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`);
+        leading.push([node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`]);
         insert(node.body.end, `${FOLLOW_MARK}}`);
       }
     }
@@ -78627,6 +78647,7 @@ function __substrateFollowAwaits(code2) {
         for (const item of child) if (item && typeof item.type === "string") visit(item, framed, node);
       } else if (typeof child.type === "string") visit(child, framed, node);
     }
+    for (const [at3, text] of leading) insert(at3, text);
   };
   visit(ast, false, void 0);
   return edits.length ? applyReplacements(code2, edits) : code2;
@@ -78666,7 +78687,7 @@ function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
   }
   return __substrateFollowAwaits(code2);
 }
-const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+const PREPARED_MODULES_DIR = "/opt/.tabnode/prepared";
 const PREPARED_MODULES_FORMAT = "tabnode-prepared-2";
 function preparedModuleKey(rawCode, resolvedPath) {
   var _a3;

package/dist/index.mjs

@@ -5946,7 +5946,11 @@ function hexSlice(start, end) {
   }
   return out;
 }
+const nativeBase64 = typeof Uint8Array.prototype.toBase64 === "function";
 function base64Text(bytes2, url2) {
+  if (nativeBase64) {
+    return bytes2.toBase64({ alphabet: url2 ? "base64url" : "base64", omitPadding: url2 });
+  }
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
   let out = "";
   for (let index2 = 0; index2 < bytes2.length; index2 += 3) {
@@ -5970,7 +5974,20 @@ function base64urlSlice(start, end) {
   return base64Text(this.subarray(from, to), true);
 }
 function byteLengthUtf8(string) {
-  return encoder$1.encode(string).length;
+  let length = 0;
+  for (let index2 = 0; index2 < string.length; index2 += 1) {
+    const code2 = string.charCodeAt(index2);
+    if (code2 < 128) length += 1;
+    else if (code2 < 2048) length += 2;
+    else if (code2 >= 55296 && code2 < 56320 && index2 + 1 < string.length) {
+      const next = string.charCodeAt(index2 + 1);
+      if (next >= 56320 && next < 57344) {
+        length += 4;
+        index2 += 1;
+      } else length += 3;
+    } else length += 3;
+  }
+  return length;
 }
 function compare(a, b) {
   return compareRanges(asBytes(a), 0, a.length, asBytes(b), 0, b.length);
@@ -23572,12 +23589,18 @@ function createCryptoModule(require2) {
   function digestEngine(algorithm) {
     return algorithm === "md5" ? md5.create() : SHA(algorithm);
   }
+  const utf8Encoder = new TextEncoder();
   function cryptoBytes(value, encoding, allowArrayBuffer = false) {
     if (typeof value === "string") {
       if ((encoding == null ? void 0 : encoding.toLowerCase()) === "base64url") return buffer.Buffer.from(value, "base64");
       if (encoding !== void 0 && !buffer.Buffer.isEncoding(encoding)) {
         throw new TypeError(`Unknown encoding: ${encoding}`);
       }
+      const lower = encoding == null ? void 0 : encoding.toLowerCase();
+      if (lower === void 0 || lower === "utf8" || lower === "utf-8") {
+        const bytes2 = utf8Encoder.encode(value);
+        return buffer.Buffer.from(bytes2.buffer, bytes2.byteOffset, bytes2.byteLength);
+      }
       return buffer.Buffer.from(value, encoding);
     }
     if (ArrayBuffer.isView(value)) {
@@ -33156,10 +33179,7 @@ function createNodeResolver(options) {
     const packageName = packageNameOf2(specifier);
     const packageRoot = `${nodeModules}/${packageName}`;
     const pkg = isDirectory(packageRoot) ? manifest(packageRoot) : null;
-    if (pkg && pkg.exports !== void 0 && pkg.exports !== null) {
-      const found = loadPackageExports(packageRoot, pkg, specifier, packageName);
-      if (found) return found;
-    }
+    if (pkg && pkg.exports !== void 0 && pkg.exports !== null) return loadPackageExports(packageRoot, pkg, specifier, packageName);
     const path2 = `${nodeModules}/${specifier}`;
     return loadAsFile(path2) ?? loadAsDirectory(path2);
   };
@@ -38253,27 +38273,27 @@ function __substrateFollowAwaits(code2) {
   };
   const isFunction = (node) => node.type === "FunctionDeclaration" || node.type === "FunctionExpression" || node.type === "ArrowFunctionExpression";
   const visit = (node, framed, parent) => {
+    const leading = [];
     if (isFunction(node)) {
       framed = node.async && node.body.type === "BlockStatement";
       if (framed) {
         const directives = node.body.body.filter((statement) => statement.directive !== void 0);
-        const at2 = directives.length ? directives[directives.length - 1].end : node.body.start + 1;
-        insert(at2, FOLLOW_TAKE);
+        leading.push([directives.length ? directives[directives.length - 1].end : node.body.start + 1, FOLLOW_TAKE]);
       }
     } else if (node.type === "AwaitExpression") {
       insert(node.start, framed ? FOLLOW_RESUME_FRAMED : FOLLOW_RESUME_TAKEN);
       insert(node.end, `${FOLLOW_MARK})`);
     } else if (framed && node.type === "CatchClause") {
-      insert(node.body.start + 1, FOLLOW_RESTORE);
+      leading.push([node.body.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === "TryStatement" && node.finalizer) {
-      insert(node.finalizer.start + 1, FOLLOW_RESTORE);
+      leading.push([node.finalizer.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === "ForOfStatement" && node.await) {
       const whole = (parent == null ? void 0 : parent.type) === "LabeledStatement" ? parent : node;
       insert(whole.start, `{${FOLLOW_MARK}`);
       insert(whole.end, `;${FOLLOW_RESTORE}${FOLLOW_MARK}}`);
-      if (node.body.type === "BlockStatement") insert(node.body.start + 1, FOLLOW_RESTORE);
+      if (node.body.type === "BlockStatement") leading.push([node.body.start + 1, FOLLOW_RESTORE]);
       else {
-        insert(node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`);
+        leading.push([node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`]);
         insert(node.body.end, `${FOLLOW_MARK}}`);
       }
     }
@@ -38285,6 +38305,7 @@ function __substrateFollowAwaits(code2) {
         for (const item of child) if (item && typeof item.type === "string") visit(item, framed, node);
       } else if (typeof child.type === "string") visit(child, framed, node);
     }
+    for (const [at2, text] of leading) insert(at2, text);
   };
   visit(ast, false, void 0);
   return edits.length ? applyReplacements(code2, edits) : code2;
@@ -38324,7 +38345,7 @@ function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
   }
   return __substrateFollowAwaits(code2);
 }
-const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+const PREPARED_MODULES_DIR = "/opt/.tabnode/prepared";
 const PREPARED_MODULES_FORMAT = "tabnode-prepared-2";
 function preparedModuleKey(rawCode, resolvedPath) {
   var _a2;
@@ -40293,7 +40314,7 @@ class WorkerRuntime {
     this.worker = new Worker(
       new URL(
         /* @vite-ignore */
-        "/assets/runtime-worker-DEgP1CYS.js",
+        "/assets/runtime-worker-C4lPa6-H.js",
         import.meta.url
       ),
       { type: "module" }

package/dist/runtime.d.ts

@@ -16,8 +16,11 @@ export { pendingGuestTimers, stopGuestTimers } from './guest-timers';
  * from, in this directory of the tab's filesystem, and the loader takes it in
  * place of the passes when the file it read hashes to one. A body the loader
  * prepares for a file the image has none for is kept there the same way.
+ * Under `/opt`, a root a tab's store keeps, so a host can link the image's
+ * bodies there once from a store they share instead of writing each into
+ * every process's memory.
  */
-export declare const PREPARED_MODULES_DIR = "/.tabnode/prepared";
+export declare const PREPARED_MODULES_DIR = "/opt/.tabnode/prepared";
 /** The name a prepared body goes under: the hash of the file as read, and how it is compiled. Undefined for a file no body is prepared for. */
 export declare function preparedModuleKey(rawCode: string, resolvedPath: string): string | undefined;
 /** The body the loader would compile for this file, with no load hooks and no type stripping: what the image carries. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/tabnode",
-  "version": "0.5.36",
+  "version": "0.5.38",
   "description": "Node's own library, in a browser tab.",
   "type": "module",
   "license": "MIT",

package/src/node-lib/binding/buffer.ts

@@ -205,7 +205,16 @@ export function hexSlice(this: Uint8Array, start?: number, end?: number): string
   return out;
 }
 
+/** The engine's own encoder where it has one (`Uint8Array.prototype.toBase64`): one string, no garbage. */
+const nativeBase64 = typeof (Uint8Array.prototype as { toBase64?: unknown }).toBase64 === 'function';
+
 function base64Text(bytes: Uint8Array, url: boolean): string {
+  // Built a character at a time, a sourcemap's base64 was ropes of garbage:
+  // 600 MB of a Vite session's 1.4 GB allocated in its first 20 s in a tab.
+  if (nativeBase64) {
+    return (bytes as Uint8Array & { toBase64(options: { alphabet: string; omitPadding: boolean }): string })
+      .toBase64({ alphabet: url ? 'base64url' : 'base64', omitPadding: url });
+  }
   const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
   let out = '';
   for (let index = 0; index < bytes.length; index += 3) {
@@ -235,7 +244,19 @@ export function base64urlSlice(this: Uint8Array, start?: number, end?: number):
 
 /** Node's `ByteLengthUtf8`. */
 export function byteLengthUtf8(string: string): number {
-  return encoder.encode(string).length;
+  // Counted, not encoded: encoding the whole string to read its length
+  // allocated every Buffer.from(string) twice.
+  let length = 0;
+  for (let index = 0; index < string.length; index += 1) {
+    const code = string.charCodeAt(index);
+    if (code < 0x80) length += 1;
+    else if (code < 0x800) length += 2;
+    else if (code >= 0xd800 && code < 0xdc00 && index + 1 < string.length) {
+      const next = string.charCodeAt(index + 1);
+      if (next >= 0xdc00 && next < 0xe000) { length += 4; index += 1; } else length += 3;
+    } else length += 3;
+  }
+  return length;
 }
 
 /** Node's `Compare`: two buffers whole, as `memcmp` orders them. */

package/src/node-resolution.ts

@@ -158,14 +158,17 @@ export function createNodeResolver(options: NodeResolverOptions): NodeResolver {
     return parts[0]!.startsWith("@") && parts.length > 1 ? `${parts[0]}/${parts[1]}` : parts[0]!;
   };
   // LOAD_NODE_MODULES from one directory: exports, else the package's own entry or a file under it.
+  // A package with `exports` is answered by the map alone, as Node answers it:
+  // a subpath the map does not name, or names to a missing file, does not
+  // resolve. Falling through to the file under the package made
+  // `require.resolve("<pkg>/package.json")` succeed where Node throws, and a
+  // program that asks that question to decide what it does (Vite config that
+  // excludes a package it cannot resolve) decided differently in the tab.
   const loadFromNodeModules = (nodeModules: string, specifier: string): string | null => {
     const packageName = packageNameOf(specifier);
     const packageRoot = `${nodeModules}/${packageName}`;
     const pkg = isDirectory(packageRoot) ? manifest(packageRoot) : null;
-    if (pkg && pkg.exports !== undefined && pkg.exports !== null) {
-      const found = loadPackageExports(packageRoot, pkg, specifier, packageName);
-      if (found) return found;
-    }
+    if (pkg && pkg.exports !== undefined && pkg.exports !== null) return loadPackageExports(packageRoot, pkg, specifier, packageName);
     const path = `${nodeModules}/${specifier}`;
     return loadAsFile(path) ?? loadAsDirectory(path);
   };

package/src/runtime.ts

@@ -468,28 +468,35 @@ function __substrateFollowAwaits(code: string): string {
   const isFunction = (node: any): boolean => node.type === 'FunctionDeclaration' || node.type === 'FunctionExpression' || node.type === 'ArrowFunctionExpression';
   // `framed`: the nearest function is async and holds the frame in ASYNC_FRAME.
   const visit = (node: any, framed: boolean, parent: any): void => {
+    // What opens a block (the frame's take in an async body, the restore
+    // at the start of a catch, a finally or a for-await body) goes before
+    // anything in it: where the block's first statement is an `await`
+    // (`async function f(){await g()}`, `finally{await h()}`, as minified code
+    // writes them), both share an offset, and edits at one offset land in
+    // reverse of the order they were made. So these are made after the
+    // block's own edits, and land first.
+    const leading: Array<[number, string]> = [];
     if (isFunction(node)) {
       framed = node.async && node.body.type === 'BlockStatement';
       if (framed) {
         const directives = node.body.body.filter((statement: any) => statement.directive !== undefined);
-        const at = directives.length ? directives[directives.length - 1].end : node.body.start + 1;
-        insert(at, FOLLOW_TAKE);
+        leading.push([directives.length ? directives[directives.length - 1].end : node.body.start + 1, FOLLOW_TAKE]);
       }
     } else if (node.type === 'AwaitExpression') {
       insert(node.start, framed ? FOLLOW_RESUME_FRAMED : FOLLOW_RESUME_TAKEN);
       insert(node.end, `${FOLLOW_MARK})`);
     } else if (framed && node.type === 'CatchClause') {
-      insert(node.body.start + 1, FOLLOW_RESTORE);
+      leading.push([node.body.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === 'TryStatement' && node.finalizer) {
-      insert(node.finalizer.start + 1, FOLLOW_RESTORE);
+      leading.push([node.finalizer.start + 1, FOLLOW_RESTORE]);
     } else if (framed && node.type === 'ForOfStatement' && node.await) {
       // The loop's own wrap first: where its end is the body's, an insertion
       // made later lands before it, so the body's brace closes inside.
       const whole = parent?.type === 'LabeledStatement' ? parent : node;
       insert(whole.start, `{${FOLLOW_MARK}`);
       insert(whole.end, `;${FOLLOW_RESTORE}${FOLLOW_MARK}}`);
-      if (node.body.type === 'BlockStatement') insert(node.body.start + 1, FOLLOW_RESTORE);
-      else { insert(node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`); insert(node.body.end, `${FOLLOW_MARK}}`); }
+      if (node.body.type === 'BlockStatement') leading.push([node.body.start + 1, FOLLOW_RESTORE]);
+      else { leading.push([node.body.start, `{${FOLLOW_MARK}${FOLLOW_RESTORE}`]); insert(node.body.end, `${FOLLOW_MARK}}`); }
     }
     for (const key of Object.keys(node)) {
       if (key === 'type' || key === 'start' || key === 'end' || key === 'loc' || key === 'range') continue;
@@ -499,6 +506,7 @@ function __substrateFollowAwaits(code: string): string {
         for (const item of child) if (item && typeof item.type === 'string') visit(item, framed, node);
       } else if (typeof child.type === 'string') visit(child, framed, node);
     }
+    for (const [at, text] of leading) insert(at, text);
   };
   visit(ast, false, undefined);
   return edits.length ? applyReplacements(code, edits) : code;
@@ -589,8 +597,11 @@ function __substratePrepareBody(rawCode: string, resolvedPath: string, format: s
  * from, in this directory of the tab's filesystem, and the loader takes it in
  * place of the passes when the file it read hashes to one. A body the loader
  * prepares for a file the image has none for is kept there the same way.
+ * Under `/opt`, a root a tab's store keeps, so a host can link the image's
+ * bodies there once from a store they share instead of writing each into
+ * every process's memory.
  */
-export const PREPARED_MODULES_DIR = '/.tabnode/prepared';
+export const PREPARED_MODULES_DIR = '/opt/.tabnode/prepared';
 const PREPARED_MODULES_FORMAT = 'tabnode-prepared-2';
 /** The name a prepared body goes under: the hash of the file as read, and how it is compiled. Undefined for a file no body is prepared for. */
 export function preparedModuleKey(rawCode: string, resolvedPath: string): string | undefined {

package/src/shims/crypto.ts

@@ -330,6 +330,7 @@ type HostBytes = InstanceType<typeof HostBuffer>;
  * encodings the guest Buffer polyfill does not (utf16le, latin1) and views a
  * caller's ArrayBuffer at its offset instead of copying the whole store.
  */
+const utf8Encoder = new TextEncoder();
 function cryptoBytes(value: unknown, encoding?: string, allowArrayBuffer = false): HostBytes {
   if (typeof value === 'string') {
     // `buffer` 6.0.3 predates base64url; the alphabet is a superset of base64's.
@@ -337,6 +338,14 @@ function cryptoBytes(value: unknown, encoding?: string, allowArrayBuffer = false
     if (encoding !== undefined && !HostBuffer.isEncoding(encoding)) {
       throw new TypeError(`Unknown encoding: ${encoding}`);
     }
+    // UTF-8, the default, by the engine's encoder: `buffer`'s own builds an
+    // array of numbers per string, and a Vite session hashing every module it
+    // served made hundreds of MB of that garbage in its first seconds in a tab.
+    const lower = encoding?.toLowerCase();
+    if (lower === undefined || lower === 'utf8' || lower === 'utf-8') {
+      const bytes = utf8Encoder.encode(value);
+      return HostBuffer.from(bytes.buffer as ArrayBuffer, bytes.byteOffset, bytes.byteLength);
+    }
     return HostBuffer.from(value, encoding);
   }
   if (ArrayBuffer.isView(value)) {