veryfront 0.0.81 → 0.0.83

package/esm/src/observability/tracing/span-names.d.ts

@@ -80,6 +80,8 @@ export declare const SpanNames: {
     readonly CACHE_REGISTRY_DELETE_REDIS_KEYS: "cache.registry.delete_redis_keys";
     readonly CACHE_KEYS_GET_ALL_ASYNC: "cache.keys.get_all_async";
     readonly CACHE_KEYS_DELETE_ALL_ASYNC: "cache.keys.delete_all_async";
+    readonly CACHE_MULTI_TIER_GET: "cache.multi_tier.get";
+    readonly CACHE_MULTI_TIER_SET: "cache.multi_tier.set";
     readonly HTML_GENERATE_SHELL_PARTS: "html.generate_shell_parts";
     readonly HTML_WRAP_IN_SHELL: "html.wrap_in_shell";
     readonly HTML_GENERATE_TAILWIND_CSS: "html.generate_tailwind_css";

package/esm/src/observability/tracing/span-names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"span-names.d.ts","sourceRoot":"","sources":["../../../../src/src/observability/tracing/span-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4GZ,CAAC"}
+{"version":3,"file":"span-names.d.ts","sourceRoot":"","sources":["../../../../src/src/observability/tracing/span-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8GZ,CAAC"}

package/esm/src/observability/tracing/span-names.js

@@ -80,6 +80,8 @@ export const SpanNames = {
     CACHE_REGISTRY_DELETE_REDIS_KEYS: "cache.registry.delete_redis_keys",
     CACHE_KEYS_GET_ALL_ASYNC: "cache.keys.get_all_async",
     CACHE_KEYS_DELETE_ALL_ASYNC: "cache.keys.delete_all_async",
+    CACHE_MULTI_TIER_GET: "cache.multi_tier.get",
+    CACHE_MULTI_TIER_SET: "cache.multi_tier.set",
     HTML_GENERATE_SHELL_PARTS: "html.generate_shell_parts",
     HTML_WRAP_IN_SHELL: "html.wrap_in_shell",
     HTML_GENERATE_TAILWIND_CSS: "html.generate_tailwind_css",

package/esm/src/platform/adapters/fs/cache/file-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-cache.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/fs/cache/file-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAc,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAmC3E;;;GAGG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC,CAwBnE;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,mCAA6B,CAAC;AAEnE,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,sCAAgC,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,aAAa,CAAmC;IACxD,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,MAAM,CAAK;gBAEP,OAAO,GAAE,gBAAqB;IAgB1C,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IA4BlC;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAqChD;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAoBnC;;OAEG;IACH,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BjD,mEAAmE;IACnE,OAAO,CAAC,aAAa;IAWrB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAezB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAM5B,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAmBtC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBpD,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAoB/D,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB7E,KAAK,IAAI,IAAI;IAOb,KAAK,IAAI,UAAU,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;IAazC,YAAY,IAAI,MAAM;IAetB,OAAO,CAAC,qBAAqB;CAuB9B"}
+{"version":3,"file":"file-cache.d.ts","sourceRoot":"","sources":["../../../../../../src/src/platform/adapters/fs/cache/file-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAc,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAmC3E;;;GAGG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,OAAO,CAAC,CAwBnE;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,mCAA6B,CAAC;AAEnE,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,sCAAgC,CAAC;AAErE;;;;;GAKG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,aAAa,CAAmC;IACxD,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,MAAM,CAAK;gBAEP,OAAO,GAAE,gBAAqB;IAgB1C,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS;IA4BlC;;;OAGG;IACH,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAqChD;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAsBnC;;OAEG;IACH,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BjD,mEAAmE;IACnE,OAAO,CAAC,aAAa;IAWrB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAezB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAM5B,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAqBtC,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBpD,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAsB/D,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkB7E,KAAK,IAAI,IAAI;IAOb,KAAK,IAAI,UAAU,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;IAazC,YAAY,IAAI,MAAM;IAetB,OAAO,CAAC,qBAAqB;CAuB9B"}

package/esm/src/platform/adapters/fs/cache/file-cache.js

@@ -186,7 +186,9 @@ export class FileCache {
             const serialized = JSON.stringify(entry);
             // Update request-scoped cache so subsequent reads in same request see the new value
             setInRequestCache(key, serialized);
-            backend.set(key, serialized, BACKEND_TTL_SECONDS).catch(() => { });
+            backend.set(key, serialized, BACKEND_TTL_SECONDS).catch((error) => {
+                logger.debug("[FileCache] Backend set failed", { key, error });
+            });
             return;
         }
         this.setToFallback(key, entry, size);
@@ -261,7 +263,9 @@ export class FileCache {
         }
         // Fire-and-forget backend deletion
         // Note: prefix already includes "file:" from buildFileCacheKeyPrefix, don't add it again
-        cacheBackend?.delByPattern?.(`${prefix}*`).catch(() => { });
+        cacheBackend?.delByPattern?.(`${prefix}*`).catch((error) => {
+            logger.debug("[FileCache] Backend invalidation failed", { prefix, error });
+        });
         return count;
     }
     deleteByPrefixAsync(prefix) {
@@ -289,7 +293,9 @@ export class FileCache {
         }
         // Fire-and-forget backend deletion
         // Note: prefix already includes "file:" from buildFileCacheKeyPrefix, don't add it again
-        cacheBackend?.delByPattern?.(`${prefix}*:${suffix}`).catch(() => { });
+        cacheBackend?.delByPattern?.(`${prefix}*:${suffix}`).catch((error) => {
+            logger.debug("[FileCache] Backend invalidation failed", { prefix, suffix, error });
+        });
         return count;
     }
     deleteByPrefixAndSuffixAsync(prefix, suffix) {

package/esm/src/rendering/orchestrator/module-loader/cache.d.ts

@@ -1,4 +1,12 @@
+/**
+ * Module Loader Cache Utilities
+ *
+ * Provides hash generation and cache factory functions.
+ * Module caches are now pod-level singletons (see src/cache/module-cache.ts)
+ * to ensure caches persist across requests within the same pod.
+ *
+ * @module rendering/orchestrator/module-loader/cache
+ */
+export { createEsmCache, createModuleCache } from "../../../cache/module-cache.js";
 export declare function generateHash(str: string): Promise<string>;
-export declare function createModuleCache(): Map<string, string>;
-export declare function createEsmCache(): Map<string, string>;
 //# sourceMappingURL=cache.d.ts.map

package/esm/src/rendering/orchestrator/module-loader/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/cache.ts"],"names":[],"mappings":"AAGA,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW/D;AAED,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAEvD;AAED,wBAAgB,cAAc,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAEpD"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAInF,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAW/D"}

package/esm/src/rendering/orchestrator/module-loader/cache.js

@@ -1,4 +1,15 @@
+/**
+ * Module Loader Cache Utilities
+ *
+ * Provides hash generation and cache factory functions.
+ * Module caches are now pod-level singletons (see src/cache/module-cache.ts)
+ * to ensure caches persist across requests within the same pod.
+ *
+ * @module rendering/orchestrator/module-loader/cache
+ */
+// Re-export pod-level cache factories
 import * as dntShim from "../../../../_dnt.shims.js";
+export { createEsmCache, createModuleCache } from "../../../cache/module-cache.js";
 const HEX_CHARS = "0123456789abcdef";
 export async function generateHash(str) {
     const data = new TextEncoder().encode(str);
@@ -11,9 +22,3 @@ export async function generateHash(str) {
     }
     return hex;
 }
-export function createModuleCache() {
-    return new Map();
-}
-export function createEsmCache() {
-    return new Map();
-}

package/esm/src/rendering/orchestrator/module-loader/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAUzE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA+DpE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAqDD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,kBAAkB,EAC1B,eAAe,UAAQ,GACtB,OAAO,CAAC,MAAM,CAAC,CAuHjB;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,CAiB3F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAkBzE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AA4BpE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAqDD;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,cAAc,EAC5B,MAAM,EAAE,kBAAkB,EAC1B,eAAe,UAAQ,GACtB,OAAO,CAAC,MAAM,CAAC,CAsIjB;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,CAmC3F"}

package/esm/src/rendering/orchestrator/module-loader/index.js

@@ -6,69 +6,41 @@
  * @module rendering/orchestrator/module-loader
  */
 import { parallelMap, rendererLogger as logger } from "../../../utils/index.js";
-import { Singleflight } from "../../../utils/singleflight.js";
 import { getLocalAdapter } from "../../../platform/adapters/registry.js";
 import { generateHash } from "./cache.js";
 import { findLocalLibFile, findSourceFile } from "../file-resolver/index.js";
 import { transformToESM } from "../../../transforms/esm-transform.js";
 import { getProjectTmpDir } from "../../../modules/react-loader/index.js";
-import { TRANSFORM_CACHE_VERSION } from "../../../transforms/esm/package-registry.js";
+import { generateCacheKey as generateTransformCacheKey, getOrComputeTransform, initializeTransformCache, setCachedTransformAsync, } from "../../../transforms/esm/transform-cache.js";
+import { hashString } from "../../../cache/hash.js";
+import { TRANSFORM_DISTRIBUTED_TTL_SEC } from "../../../utils/constants/cache.js";
+import { ensureHttpBundlesExist } from "../../../transforms/esm/http-cache.js";
+import { getHttpBundleCacheDir } from "../../../utils/cache-dir.js";
 // Re-export utilities
 export { createEsmCache, createModuleCache, generateHash } from "./cache.js";
 export { fetchEsmModule, rewriteEsmPaths } from "./esm-rewriter.js";
-/** Cache for created directories to avoid repeated mkdir calls */
-const createdDirs = new Set();
-/**
- * Distributed transform cache for cross-pod sharing.
- * Caches transformed module code in Redis/API so other pods don't need to re-transform.
- */
-let distributedTransformCache;
-const distributedCacheInit = new Singleflight();
-/** TTL for cached transforms (24 hours) */
-const TRANSFORM_CACHE_TTL_SECONDS = 86400;
-function getDistributedTransformCache() {
-    if (distributedTransformCache !== undefined) {
-        return Promise.resolve(distributedTransformCache);
-    }
-    return distributedCacheInit.do("init", async () => {
-        try {
-            const { CacheBackends } = await import("../../../cache/backend.js");
-            const backend = await CacheBackends.transform();
-            // Only use distributed cache if API or Redis (not memory - that's per-process)
-            if (backend.type === "memory") {
-                distributedTransformCache = null;
-                logger.debug("[ModuleLoader] No distributed transform cache (memory only)");
-                return null;
-            }
-            distributedTransformCache = backend;
-            logger.debug("[ModuleLoader] Distributed transform cache initialized", {
-                type: backend.type,
-            });
-            return backend;
+/** Pattern to match HTTP bundle file:// paths in transformed code */
+const HTTP_BUNDLE_PATTERN = /file:\/\/([^"'\s]+veryfront-http-bundle\/http-([a-f0-9]+)\.mjs)/gi;
+/** Extract HTTP bundle paths from transformed code for proactive recovery */
+function extractHttpBundlePaths(code) {
+    const bundles = [];
+    const seen = new Set();
+    let match;
+    while ((match = HTTP_BUNDLE_PATTERN.exec(code)) !== null) {
+        const path = match[1];
+        const hash = match[2];
+        if (!seen.has(hash)) {
+            seen.add(hash);
+            bundles.push({ path, hash });
         }
-        catch (error) {
-            logger.debug("[ModuleLoader] Failed to init distributed transform cache", { error });
-            distributedTransformCache = null;
-            return null;
-        }
-    });
-}
-/**
- * Build cache key for transformed module.
- * Includes content hash so cache invalidates when source changes.
- */
-function getTransformCacheKey(projectId, filePath, contentHash) {
-    return `v${TRANSFORM_CACHE_VERSION}:${projectId}:${filePath}:${contentHash}`;
-}
-/** Simple string hash for cache keys */
-function hashString(str) {
-    let hash = 0;
-    for (let i = 0; i < str.length; i++) {
-        hash = ((hash << 5) - hash) + str.charCodeAt(i);
-        hash &= hash;
     }
-    return Math.abs(hash).toString(36);
+    HTTP_BUNDLE_PATTERN.lastIndex = 0;
+    return bundles;
 }
+/** Cache for created directories to avoid repeated mkdir calls */
+const createdDirs = new Set();
+/** TTL for cached transforms (uses centralized config) */
+const TRANSFORM_CACHE_TTL_SECONDS = TRANSFORM_DISTRIBUTED_TTL_SEC;
 function getModuleCacheKey(filePath, projectId, projectDir) {
     return `${projectId ?? projectDir ?? "default"}:${filePath}`;
 }
@@ -154,35 +126,41 @@ export async function transformModuleWithDeps(filePath, tmpDir, localAdapter, co
     }
     const contentHash = hashString(fileContent);
     const effectiveProjectId = projectId ?? projectDir;
-    const transformCacheKey = getTransformCacheKey(effectiveProjectId, filePath, contentHash);
-    let transformedCode = null;
-    const distributedCache = await getDistributedTransformCache();
-    if (distributedCache) {
-        try {
-            const cached = await distributedCache.get(transformCacheKey);
-            if (cached) {
-                transformedCode = cached;
-                logger.debug("[ModuleLoader] Distributed transform cache HIT", {
-                    filePath,
-                    cacheKey: transformCacheKey,
-                });
-            }
-        }
-        catch (error) {
-            logger.debug("[ModuleLoader] Distributed cache get failed", { filePath, error });
-        }
-    }
-    if (!transformedCode) {
-        transformedCode = await transformToESM(fileContent, filePath, projectDir, adapter, {
+    const scopedPath = `${effectiveProjectId}:${filePath}`;
+    const transformCacheKey = generateTransformCacheKey(scopedPath, contentHash, true); // ssr=true
+    // Initialize transform cache (lazy, only once per pod)
+    await initializeTransformCache();
+    // Use consolidated transform cache with getOrCompute pattern
+    let transformedCode = await getOrComputeTransform(transformCacheKey, () => {
+        logger.debug("[ModuleLoader] Transform cache miss, transforming", { filePath });
+        return transformToESM(fileContent, filePath, projectDir, adapter, {
             projectId: effectiveProjectId,
             dev: mode === "development",
             ssr: true,
         });
-        if (distributedCache) {
-            distributedCache
-                .set(transformCacheKey, transformedCode, TRANSFORM_CACHE_TTL_SECONDS)
-                .catch((error) => {
-                logger.debug("[ModuleLoader] Distributed cache set failed", { filePath, error });
+    }, TRANSFORM_CACHE_TTL_SECONDS);
+    // Proactively ensure HTTP bundles exist before writing the module.
+    // Cached transforms from a different pod may reference file:// paths
+    // to HTTP bundles that don't exist locally.
+    const bundlePaths = extractHttpBundlePaths(transformedCode);
+    if (bundlePaths.length > 0) {
+        const cacheDir = getHttpBundleCacheDir();
+        const failed = await ensureHttpBundlesExist(bundlePaths, cacheDir);
+        if (failed.length > 0) {
+            logger.warn("[ModuleLoader] HTTP bundle recovery failed, re-transforming", {
+                filePath,
+                failed,
+            });
+            transformedCode = await transformToESM(fileContent, filePath, projectDir, adapter, {
+                projectId: effectiveProjectId,
+                dev: mode === "development",
+                ssr: true,
+            });
+            setCachedTransformAsync(transformCacheKey, transformedCode, contentHash, TRANSFORM_CACHE_TTL_SECONDS).catch((error) => {
+                logger.debug("[ModuleLoader] Failed to update transform cache after re-transform", {
+                    filePath,
+                    error,
+                });
             });
         }
     }
@@ -219,6 +197,23 @@ export async function loadModule(filePath, config) {
         return await import(moduleUrl);
     }
     catch (error) {
+        // If import fails due to missing HTTP bundle, try to recover and retry once
+        const errorMsg = error instanceof Error ? error.message : String(error);
+        const bundleMatch = errorMsg.match(/veryfront-http-bundle\/http-([a-f0-9]+)\.mjs/);
+        if (bundleMatch) {
+            const hash = bundleMatch[1];
+            logger.warn("[ModuleLoader] Import failed due to missing HTTP bundle, attempting recovery", {
+                filePath,
+                hash,
+            });
+            const { recoverHttpBundleByHash } = await import("../../../transforms/esm/http-cache.js");
+            const cacheDir = getHttpBundleCacheDir();
+            const recovered = await recoverHttpBundleByHash(hash, cacheDir);
+            if (recovered) {
+                logger.info("[ModuleLoader] HTTP bundle recovered, retrying import", { hash });
+                return await import(`file://${tempFilePath}?t=${Date.now()}&retry=1`);
+            }
+        }
         logger.error("[ModuleLoader] Failed to import module:", {
             filePath,
             tempFilePath,

package/esm/src/server/context/cache-invalidation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-invalidation.d.ts","sourceRoot":"","sources":["../../../../src/src/server/context/cache-invalidation.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACvC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA8Ff"}
+{"version":3,"file":"cache-invalidation.d.ts","sourceRoot":"","sources":["../../../../src/src/server/context/cache-invalidation.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACvC,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiGf"}

package/esm/src/server/context/cache-invalidation.js

@@ -1,5 +1,6 @@
 import { serverLogger as logger } from "../../utils/index.js";
 import { clearModulePathCache, invalidateModulePaths, } from "../../transforms/mdx/esm-module-loader/index.js";
+import { clearModuleCacheForProject } from "../../cache/module-cache.js";
 import { clearSSRModuleCache, clearSSRModuleCacheForProject, } from "../../modules/react-loader/ssr-module-loader/index.js";
 import { clearRendererCacheForProject, clearRendererCaches } from "../../rendering/renderer.js";
 import { clearRouterDetectionCache } from "../../rendering/router-detection.js";
@@ -38,6 +39,9 @@ export async function invalidateProjectCaches(projectSlug, changedPaths, options
     });
     if (projectId) {
         clearSSRModuleCacheForProject(projectId);
+        // Also clear the pod-level module cache (used by RenderPipeline)
+        // This was previously missed, causing stale renders despite SSR module cache clearing
+        clearModuleCacheForProject(projectId);
     }
     else {
         clearSSRModuleCache();

package/esm/src/server/handlers/dev/dashboard/api.js

@@ -321,6 +321,8 @@ async function handleListFiles(req, ctx) {
     if (!projectDir)
         return errorResponse("No project directory configured", 500);
     const relativePath = new URL(req.url).searchParams.get("path") || "";
+    if (relativePath.includes(".."))
+        return errorResponse("Invalid path", 400);
     const fullPath = relativePath ? `${projectDir}/${relativePath}` : projectDir;
     try {
         const files = [];
@@ -352,6 +354,8 @@ async function handleReadFileContent(req, ctx) {
     const relativePath = new URL(req.url).searchParams.get("path") || "";
     if (!relativePath)
         return errorResponse("path parameter is required", 400);
+    if (relativePath.includes(".."))
+        return errorResponse("Invalid path", 400);
     try {
         const content = await adapter.fs.readFile(`${projectDir}/${relativePath}`);
         const extension = relativePath.split(".").pop() || "";

package/esm/src/server/handlers/dev/projects/ui-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ui-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/projects/ui-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AA6ExD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAwCvF"}
+{"version":3,"file":"ui-handler.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/projects/ui-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AA6ExD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA8CvF"}

package/esm/src/server/handlers/dev/projects/ui-handler.js

@@ -62,6 +62,12 @@ export function handleProjectsUI(req) {
         return Promise.resolve(null);
     return withSpan("server.dev.projectsUI.handle", async () => {
         const relativePath = pathname.replace("/_projects/ui/", "").replace(/\.js$/, "");
+        if (relativePath.includes("..")) {
+            return new dntShim.Response("Invalid path", {
+                status: 400,
+                headers: { "Content-Type": "text/plain" },
+            });
+        }
         const uiDir = getUiDirectory();
         const module = await readUiSource(uiDir, relativePath);
         if (!module) {

package/esm/src/transforms/esm/http-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-cache.d.ts","sourceRoot":"","sources":["../../../../src/src/transforms/esm/http-cache.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAsCzE,KAAK,YAAY,GAAG;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAoUF;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwC9F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAiFnB"}
+{"version":3,"file":"http-cache.d.ts","sourceRoot":"","sources":["../../../../src/src/transforms/esm/http-cache.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAmBzE,KAAK,YAAY,GAAG;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAyUF;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOvF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA8D9F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAClD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAiInB"}