veryfront 0.1.1239 → 0.1.1241

package/esm/src/server/handlers/dev/files/esbuild-plugins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-plugins.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/files/esbuild-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA6B,MAAM,EAAe,MAAM,yCAAyC,CAAC;AAI9G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAS5E,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sCAAsC,CAAC;AAU9C,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,gDAAgD,CAAC;AA0BxD,MAAM,WAAW,uBAAuB;IACtC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD;AASD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAE5E,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAoBD,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAgLR;AA4DD,UAAU,yBAAyB;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,4BAA4B,CAAC;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAqFD,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,yBAAyB,GAAG,OAAe,GACnD,MAAM,CAmJR;AAED,UAAU,yBAAyB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAiBxF"}
+{"version":3,"file":"esbuild-plugins.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/files/esbuild-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA6B,MAAM,EAAe,MAAM,yCAAyC,CAAC;AAI9G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAS5E,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,sCAAsC,CAAC;AAW9C,OAAO,EACL,KAAK,4BAA4B,EAElC,MAAM,gDAAgD,CAAC;AA+BxD,MAAM,WAAW,uBAAuB;IACtC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;OAGG;IACH,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD;AASD,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAE5E,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,uBAAuB,CAAC,CAmClC;AAoBD,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAgMR;AA4DD,UAAU,yBAAyB;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,uBAAuB,CAAC,EAAE,4BAA4B,CAAC;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAqFD,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,yBAAyB,GAAG,OAAe,GACnD,MAAM,CA2LR;AAED,UAAU,yBAAyB;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAoCxF"}

package/esm/src/server/handlers/dev/files/esbuild-plugins.js

@@ -1,14 +1,17 @@
-import { NETWORK_ERROR } from "../../../../errors/index.js";
+import { isVeryfrontError, NETWORK_ERROR, SERVER_ONLY_IN_CLIENT } from "../../../../errors/index.js";
 import { isCanonicalNotFoundError } from "../../../../platform/compat/not-found-error.js";
 import { wrapWithCurrentContext } from "../../../../platform/adapters/fs/veryfront/multi-project-adapter.js";
 import { getDirectory, isWithinDirectory, joinPath, normalizePath, } from "../../../../utils/path-utils.js";
 import { computeIntegrity, createLockfileManager, getLockfileEntryForBuild, setLockfileEntryForBuild, } from "../../../../utils/import-lockfile.js";
 import { importMapOwnsSpecifier, mergeBrowserImportMapImports, } from "../../../../utils/import-map.js";
+import { resolveImport } from "../../../../modules/import-map/resolver.js";
 import { serverLogger } from "../../../../utils/index.js";
 import { describeBrowserModuleBoundaryViolation, inspectBrowserModuleBoundary, } from "../../../shared/browser-module-boundary.js";
 import { resolveDependencyPinningSnapshot, } from "../../../../transforms/esm/package-registry.js";
 import { resolveDependencyPinForImport } from "../../../../transforms/import-rewriter/dependency-resolution.js";
+import { assertNoConfiguredCommonJsBrowserImports } from "../../../../transforms/import-rewriter/commonjs-policy.js";
 import { parseBarePackageSpecifier } from "../../../../transforms/shared/package-specifier.js";
+import { describeServerExternalBrowserViolation, getConfiguredServerExternalPackage, } from "../../../../transforms/shared/server-only-packages.js";
 import { appendSameOriginDependencyPinningPathKey } from "../../../../transforms/import-rewriter/url-builder.js";
 const logger = serverLogger.component("bare-ext");
 const SCRIPT_EXTENSIONS = [
@@ -193,6 +196,23 @@ export function createRelativeFsPlugin(projectDir, adapter, options = {}) {
                         ? await options.readBrowserModule(filePath)
                         : await adapter.fs.readFile(filePath);
                     if (enforceBrowserBoundaries) {
+                        try {
+                            await assertNoConfiguredCommonJsBrowserImports(contents, {
+                                filePath,
+                                projectDir,
+                                serverExternalPackages: options.serverExternalPackages,
+                            });
+                        }
+                        catch (error) {
+                            return {
+                                errors: [{
+                                        text: isVeryfrontError(error)
+                                            ? `[${error.slug}] ${error.message}`
+                                            : "Browser dependency could not be safely analyzed",
+                                        location: null,
+                                    }],
+                            };
+                        }
                         const violation = await inspectBrowserModuleBoundary(contents, filePath);
                         if (violation) {
                             return {
@@ -364,7 +384,9 @@ export function createBareExternalPlugin(options = false) {
             build.onResolve({ filter: /.*/ }, async (args) => {
                 if (!isBareImport(args.path))
                     return undefined;
-                if (args.kind !== "import-statement" && args.kind !== "dynamic-import")
+                const isEsmImport = args.kind === "import-statement" || args.kind === "dynamic-import";
+                const isCommonJsImport = args.kind === "require-call" || args.kind === "require-resolve";
+                if (!isEsmImport && !isCommonJsImport)
                     return undefined;
                 // Fail closed on Node built-ins. This plugin only runs for browser
                 // bundles (platform: "browser"), where a server-only `node:*` import can
@@ -381,6 +403,19 @@ export function createBareExternalPlugin(options = false) {
                             }],
                     };
                 }
+                const configuredPackage = getConfiguredServerExternalPackage(args.path, opts.serverExternalPackages);
+                if (configuredPackage !== undefined) {
+                    const violation = describeServerExternalBrowserViolation(args.path, args.importer || undefined, opts.projectDir);
+                    return {
+                        errors: [{
+                                text: `[${SERVER_ONLY_IN_CLIENT.slug}] ${violation.message}`,
+                            }],
+                    };
+                }
+                // Preserve the existing handling of undeclared CommonJS imports. The
+                // policy only makes explicit server-only declarations fail loudly.
+                if (!isEsmImport)
+                    return undefined;
                 // Ensure the package.json dep cache is warm before consulting it for
                 // a version pin. The warmup Promise resolves immediately on warm paths.
                 const snapshot = await dependencySnapshot;
@@ -389,6 +424,16 @@ export function createBareExternalPlugin(options = false) {
                 // and Veryfront still need to report their raw declarations before this
                 // winning branch returns.
                 if (importMapOwnsSpecifier(args.path, importMapImports)) {
+                    const mappedSpecifier = resolveImport(args.path, { imports: importMapImports });
+                    const mappedConfiguredPackage = getConfiguredServerExternalPackage(mappedSpecifier, opts.serverExternalPackages);
+                    if (mappedConfiguredPackage !== undefined) {
+                        const violation = describeServerExternalBrowserViolation(mappedSpecifier, args.importer || undefined, opts.projectDir);
+                        return {
+                            errors: [{
+                                    text: `[${SERVER_ONLY_IN_CLIENT.slug}] ${violation.message}`,
+                                }],
+                        };
+                    }
                     observeImportMapDependency(args.path, opts, snapshot?.cacheKey ?? opts.dependencyPinningCacheKey, snapshot?.dependencies ?? opts.dependencyPinningDependencies);
                     return { path: args.path, external: true };
                 }
@@ -460,7 +505,20 @@ export function createHttpExternalPlugin(options = {}) {
         name: "veryfront-http-ext",
         setup(build) {
             build.onResolve({ filter: /^(?:https?:)?\/\//i }, (args) => {
-                if (args.kind !== "import-statement" && args.kind !== "dynamic-import")
+                const isEsmImport = args.kind === "import-statement" || args.kind === "dynamic-import";
+                const isCommonJsImport = args.kind === "require-call" || args.kind === "require-resolve";
+                if (!isEsmImport && !isCommonJsImport)
+                    return undefined;
+                const configuredPackage = getConfiguredServerExternalPackage(args.path, options.serverExternalPackages);
+                if (configuredPackage !== undefined) {
+                    const violation = describeServerExternalBrowserViolation(args.path, args.importer || undefined, options.projectDir);
+                    return {
+                        errors: [{
+                                text: `[${SERVER_ONLY_IN_CLIENT.slug}] ${violation.message}`,
+                            }],
+                    };
+                }
+                if (!isEsmImport)
                     return undefined;
                 return {
                     path: appendSameOriginDependencyPinningPathKey(args.path, options.dependencyPinningCacheKey, options.moduleServerOrigin),

package/esm/src/server/handlers/dev/framework-candidates.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"framework-candidates.generated.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/dev/framework-candidates.generated.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAgwsBjD,CAAC"}
+{"version":3,"file":"framework-candidates.generated.d.ts","sourceRoot":"","sources":["../../../../../src/src/server/handlers/dev/framework-candidates.generated.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAs8sBjD,CAAC"}