veryfront 0.1.49 → 0.1.51

package/esm/src/modules/react-loader/ssr-module-loader/http-bundle-helpers.d.ts

@@ -7,11 +7,6 @@
  * @module module-system/react-loader/ssr-module-loader/http-bundle-helpers
  */
 import { LRUCache } from "../../../utils/lru-wrapper.js";
-/**
- * Extract VF module paths (veryfront-mdx-esm/*.mjs) from code.
- * These are user project modules that may import HTTP bundles.
- */
-export declare function extractVfModulePaths(code: string): string[];
 /**
  * Recursively extract all HTTP bundle paths from code and any VF modules it imports.
  * This ensures transitive HTTP bundle dependencies through VF modules are discovered.

package/esm/src/modules/react-loader/ssr-module-loader/http-bundle-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-bundle-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/http-bundle-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB3D;AAED;;;GAGG;AACH,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAmDhD;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA6B1F;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkB1D;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,wBAAmD,CAAC"}
+{"version":3,"file":"http-bundle-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/http-bundle-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AA2BzD;;;GAGG;AACH,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAmDhD;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA6B1F;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkB1D;AAED;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,wBAElC,CAAC"}

package/esm/src/modules/react-loader/ssr-module-loader/http-bundle-helpers.js

@@ -8,11 +8,13 @@
  */
 import { createFileSystem, exists } from "../../../platform/compat/fs.js";
 import { LRUCache } from "../../../utils/lru-wrapper.js";
+/** Max entries in the verified HTTP bundle paths LRU cache */
+const VERIFIED_BUNDLE_CACHE_MAX_ENTRIES = 2_000;
 /**
  * Extract VF module paths (veryfront-mdx-esm/*.mjs) from code.
  * These are user project modules that may import HTTP bundles.
  */
-export function extractVfModulePaths(code) {
+function extractVfModulePaths(code) {
     // Create regex per call to avoid shared lastIndex state across concurrent calls.
     const vfModulePattern = /file:\/\/([^"'\s]+veryfront-mdx-esm\/[^"'\s]+\.mjs)/gi;
     const paths = [];
@@ -73,8 +75,8 @@ export async function extractAllHttpBundlePathsRecursive(code) {
                 }
             }
         }
-        catch {
-            // Ignore read errors for VF modules
+        catch (_) {
+            /* expected: VF module file may fail to read */
         }
     }
     return allBundles;
@@ -135,4 +137,6 @@ export function extractAllFilePaths(code) {
  * Bounded LRU to prevent unbounded memory growth in long-running pods.
  * Keying by contentHash ensures verification is re-done when content changes at the same path.
  */
-export const verifiedHttpBundlePaths = new LRUCache({ maxEntries: 2000 });
+export const verifiedHttpBundlePaths = new LRUCache({
+    maxEntries: VERIFIED_BUNDLE_CACHE_MAX_ENTRIES,
+});

package/esm/src/modules/react-loader/ssr-module-loader/loader.js

@@ -412,7 +412,7 @@ export class SSRModuleLoader {
                     return;
                 }
                 if (isSSRDistributedCacheEnabled()) {
-                    setInRedis(contentCacheKey, transformed, {
+                    void setInRedis(contentCacheKey, transformed, {
                         isProduction: this.cache.isProductionContentSource(),
                     }).catch((error) => {
                         logger.debug("Distributed cache set failed", {

package/esm/src/modules/react-loader/ssr-module-loader/preflight-imports.d.ts

@@ -1,5 +1,5 @@
 import type { LocalImport, MissingImport } from "../../../transforms/esm/import-parser.js";
-export interface PreflightImportsResult {
+interface PreflightImportsResult {
     validImports: LocalImport[];
     missingImports: MissingImport[];
 }
@@ -8,4 +8,5 @@ export declare function preflightLocalImports(imports: LocalImport[], filePath:
         isFile: boolean;
     }>;
 }): Promise<PreflightImportsResult>;
+export {};
 //# sourceMappingURL=preflight-imports.d.ts.map

package/esm/src/modules/react-loader/ssr-module-loader/preflight-imports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preflight-imports.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/preflight-imports.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAE3F,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,WAAW,EAAE,EACtB,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE;IAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAuB,GAChF,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}
+{"version":3,"file":"preflight-imports.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/preflight-imports.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAE3F,UAAU,sBAAsB;IAC9B,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,aAAa,EAAE,CAAC;CACjC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,WAAW,EAAE,EACtB,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE;IAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAuB,GAChF,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}

package/esm/src/modules/react-loader/ssr-module-loader/preflight-imports.js

@@ -20,7 +20,8 @@ export async function preflightLocalImports(imports, filePath, fs = createFileSy
                 });
             }
         }
-        catch {
+        catch (_) {
+            /* expected: file may not be accessible on disk */
             missingImports.push({
                 specifier: imp.specifier,
                 fromFile: filePath,

package/esm/src/modules/react-loader/ssr-module-loader/ssr-cache-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssr-cache-manager.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/ssr-cache-manager.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAYlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAO3E;;;;;;;GAOG;AACH,qBAAa,eAAe;IAId,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,gBAAgB,CAAqB;gBAEzB,OAAO,EAAE,sBAAsB;IAEnD,4DAA4D;IAC5D,aAAa,IAAI,MAAM;IAUvB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAiB/B,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBlD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1E,yBAAyB,IAAI,OAAO;IAoB9B,kBAAkB,CACtB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,GAAG,aAAa,EACtC,OAAO,EAAE;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAA;KAAE,GACpE,OAAO,CAAC,OAAO,CAAC;IAgCb,wBAAwB,CAC5B,WAAW,EAAE,gBAAgB,EAC7B,eAAe,EAAE,MAAM,EACvB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IAsBnB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,IAAI;IAOnF,oCAAoC,CAClC,eAAe,EAAE,MAAM,EACvB,gBAAgB,EAAE,MAAM,EACxB,UAAU,CAAC,EAAE,gBAAgB,GAC5B,IAAI;IAQP,wDAAwD;IACxD,KAAK,IAAI,UAAU,CAAC,OAAO,gBAAgB,CAAC;IAI5C,OAAO,CAAC,4BAA4B;YAItB,qBAAqB;YAsBrB,oBAAoB;YAoBpB,YAAY;CAyB3B"}
+{"version":3,"file":"ssr-cache-manager.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/ssr-cache-manager.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAYlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAU3E;;;;;;;GAOG;AACH,qBAAa,eAAe;IAId,OAAO,CAAC,OAAO;IAH3B,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,gBAAgB,CAAqB;gBAEzB,OAAO,EAAE,sBAAsB;IAEnD,4DAA4D;IAC5D,aAAa,IAAI,MAAM;IAUvB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAkB/B,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBlD,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK1E,yBAAyB,IAAI,OAAO;IAoB9B,kBAAkB,CACtB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,GAAG,aAAa,EACtC,OAAO,EAAE;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,qBAAqB,EAAE,OAAO,CAAA;KAAE,GACpE,OAAO,CAAC,OAAO,CAAC;IAgCb,wBAAwB,CAC5B,WAAW,EAAE,gBAAgB,EAC7B,eAAe,EAAE,MAAM,EACvB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC;IAuBnB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,IAAI;IAOnF,oCAAoC,CAClC,eAAe,EAAE,MAAM,EACvB,gBAAgB,EAAE,MAAM,EACxB,UAAU,CAAC,EAAE,gBAAgB,GAC5B,IAAI;IAQP,wDAAwD;IACxD,KAAK,IAAI,UAAU,CAAC,OAAO,gBAAgB,CAAC;IAI5C,OAAO,CAAC,4BAA4B;YAItB,qBAAqB;YAsBrB,oBAAoB;YAqBpB,YAAY;CA2B3B"}

package/esm/src/modules/react-loader/ssr-module-loader/ssr-cache-manager.js

@@ -8,6 +8,7 @@
  */
 import * as dntShim from "../../../../_dnt.shims.js";
 import { VERSION } from "../../../utils/version.js";
+import { INVALID_ARGUMENT } from "../../../errors/index.js";
 import { buildSSRModuleCacheKey } from "../../../cache/keys.js";
 import { computeConfigHashSync } from "../../../cache/config-hash.js";
 import { createFileSystem } from "../../../platform/compat/fs.js";
@@ -19,6 +20,8 @@ import { globalModuleCache, globalTmpDirs } from "./cache/index.js";
 import { extractAllFilePaths, extractHttpBundlePaths, verifiedHttpBundlePaths, } from "./http-bundle-helpers.js";
 import { buildTempModulePath, buildTmpDirPath, getTmpDirCacheKey } from "./tmp-paths.js";
 const logger = rendererLogger.component("ssr-module-loader");
+/** Content length threshold: below this, use fast sync hash; above, use async SHA-256 */
+const SYNC_HASH_THRESHOLD = 10_000;
 const UNRESOLVED_VF_MODULE_IMPORT_PATTERN = /from\s*["']((?:file:\/\/)?\/?\/?_vf_modules\/[^"']+)["']/;
 /**
  * Manages caching concerns for SSR module loading:
@@ -47,14 +50,16 @@ export class SSRCacheManager {
     }
     getCacheKey(filePath) {
         if (!this.options.contentSourceId) {
-            throw new Error(`Missing contentSourceId for SSR module cache (project: ${this.options.projectId}, file: ${filePath})`);
+            throw INVALID_ARGUMENT.create({
+                detail: `Missing contentSourceId for SSR module cache (project: ${this.options.projectId}, file: ${filePath})`,
+            });
         }
         const reactVersion = this.options.reactVersion ?? "default";
         const configHash = this.getConfigHash();
         return buildSSRModuleCacheKey(VERSION, this.options.projectId, `${this.options.contentSourceId}:${reactVersion}:${configHash}:${filePath}`);
     }
     async hashContentAsync(content) {
-        if (content.length < 10000)
+        if (content.length < SYNC_HASH_THRESHOLD)
             return hashCodeHex(content);
         try {
             const data = new TextEncoder().encode(content);
@@ -65,7 +70,8 @@ export class SSRCacheManager {
                 .map((b) => b.toString(16).padStart(2, "0"))
                 .join("");
         }
-        catch {
+        catch (_) {
+            /* expected: WebCrypto may not be available, fall back to sync hash */
             return hashCodeHex(content);
         }
     }
@@ -126,7 +132,8 @@ export class SSRCacheManager {
             verifiedHttpBundlePaths.set(verifyKey, true);
             return globalModuleCache.has(contentCacheKey);
         }
-        catch {
+        catch (error) {
+            logger.debug("Failed to validate memory cache entry, invalidating", { error });
             this.invalidateContentAndFileCacheEntries(contentCacheKey, filePathCacheKey, cachedEntry);
             return false;
         }
@@ -177,10 +184,11 @@ export class SSRCacheManager {
                     return true;
                 }
             }
-            catch {
+            catch (error) {
                 logger.debug("Redis cache has invalid local path, re-transforming", {
                     file: filePath.slice(-40),
                     missingPath: path.slice(-60),
+                    error,
                 });
                 return true;
             }
@@ -190,10 +198,14 @@ export class SSRCacheManager {
     async ensureTmpDir() {
         const { projectId, contentSourceId } = this.options;
         if (!projectId) {
-            throw new Error(`Missing projectId for SSR temp directory (projectDir: ${this.options.projectDir})`);
+            throw INVALID_ARGUMENT.create({
+                detail: `Missing projectId for SSR temp directory (projectDir: ${this.options.projectDir})`,
+            });
         }
         if (!contentSourceId) {
-            throw new Error(`Missing contentSourceId for SSR temp directory (project: ${projectId})`);
+            throw INVALID_ARGUMENT.create({
+                detail: `Missing contentSourceId for SSR temp directory (project: ${projectId})`,
+            });
         }
         const baseCacheDir = getMdxEsmCacheDir();
         const sourceKey = contentSourceId;

package/esm/src/modules/react-loader/ssr-module-loader/vf-module-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vf-module-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/vf-module-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAWzE,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,6BAA6B;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAelE;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,MAAM,CAAC,CA8CjB"}
+{"version":3,"file":"vf-module-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/vf-module-resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAWzE,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,6BAA6B;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAelE;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,MAAM,CAAC,CAuDjB"}

package/esm/src/modules/react-loader/ssr-module-loader/vf-module-resolver.js

@@ -49,8 +49,18 @@ export async function resolveVfModuleImports(code, options) {
         strictMissingModules: false,
     });
     const results = await Promise.all(imports.map(async ({ original, path }) => {
-        const cachedFilePath = await fetchAndCacheModule(path, fetcherContext);
-        return { original, path, cachedFilePath };
+        try {
+            const cachedFilePath = await fetchAndCacheModule(path, fetcherContext);
+            return { original, path, cachedFilePath };
+        }
+        catch (error) {
+            logger.warn("Failed to fetch _vf_modules import", {
+                file: options.filePath.slice(-40),
+                path,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return { original, path, cachedFilePath: null };
+        }
     }));
     let transformed = code;
     for (const { original, path, cachedFilePath } of results) {

package/esm/src/modules/react-loader/unified-loader.js

@@ -29,8 +29,8 @@ export function loadComponentsUnified(components, projectDir, adapter, options)
         }
     }, { "modules.projectDir": projectDir, "modules.componentCount": components.length });
 }
-function transformAllComponents(components, projectDir, adapter, transformOpts) {
-    return Promise.all(components.map(async (comp) => ({
+async function transformAllComponents(components, projectDir, adapter, transformOpts) {
+    return await Promise.all(components.map(async (comp) => ({
         name: comp.name,
         code: await transformToESM(comp.source, comp.filePath, projectDir, adapter, transformOpts),
     })));

package/esm/src/modules/server/module-batch-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-batch-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-batch-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAUlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AA+CtE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CA2K/G;AA4JD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAY1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAKrE"}
+{"version":3,"file":"module-batch-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-batch-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAUlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAqDtE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CA2K/G;AA4JD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAY1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAKrE"}

package/esm/src/modules/server/module-batch-handler.js

@@ -32,9 +32,13 @@ const logger = serverLogger.component("module-batch");
 const SLOW_REQUEST_THRESHOLD_MS = 500;
 /** Slow module transform threshold in milliseconds */
 const SLOW_TRANSFORM_THRESHOLD_MS = 100;
+/** Max entries in the per-project transform LRU cache */
+const TRANSFORM_CACHE_MAX_ENTRIES = 1_000;
+/** Immutable cache max-age in seconds (1 year) */
+const IMMUTABLE_CACHE_MAX_AGE_SECONDS = 31_536_000;
 /** Cache for transformed modules (path -> code) */
 const transformCache = new LRUCache({
-    maxEntries: 1000,
+    maxEntries: TRANSFORM_CACHE_MAX_ENTRIES,
 });
 // Register cache for monitoring
 registerLRUCache("module-batch-transform-cache", transformCache);
@@ -176,7 +180,7 @@ export function handleModuleBatch(req, options) {
             status: HTTP_OK,
             headers: {
                 "Content-Type": "application/javascript; charset=utf-8",
-                "Cache-Control": "public, max-age=31536000, immutable",
+                "Cache-Control": `public, max-age=${IMMUTABLE_CACHE_MAX_AGE_SECONDS}, immutable`,
                 "X-Batch-Modules": String(successes.length),
                 "X-Batch-Duration": String(Math.round(duration)),
                 "X-Batch-Slow": isSlow ? "true" : "false",
@@ -201,8 +205,8 @@ async function loadAndTransformModule(modulePath, projectDir, adapter, secureFs,
             const source = await secureFs.readFile(fullPath);
             return transformModule(source, fullPath, projectDir, adapter, options);
         }
-        catch {
-            // Continue trying
+        catch (_) {
+            /* expected: file may not exist at this extension */
         }
     }
     if (!basePath.startsWith("lib/"))
@@ -223,8 +227,8 @@ async function loadAndTransformModule(modulePath, projectDir, adapter, secureFs,
                 const source = await platformFs.readTextFile(frameworkPath);
                 return transformModule(source, frameworkPath, projectDir, adapter, options);
             }
-            catch {
-                // Continue trying
+            catch (_) {
+                /* expected: framework file may not exist at this extension */
             }
         }
     }

package/esm/src/modules/server/module-server.d.ts

@@ -12,13 +12,6 @@ import type { RuntimeAdapter } from "../../platform/adapters/base.js";
  * @see getRequiredPolyfillPaths() in node-builtin-strategy.ts - source of truth for required paths
  */
 export declare const EMBEDDED_POLYFILLS: Record<string, string>;
-/**
- * Validate that all required polyfills are embedded.
- * Call this at startup in compiled mode to fail fast if polyfills are missing.
- *
- * @throws Error if any required polyfill is missing from EMBEDDED_POLYFILLS
- */
-export declare function validateEmbeddedPolyfills(): Promise<void>;
 export interface ModuleServerOptions {
     /** Project identifier (directory path, legacy naming) */
     projectId: string;

package/esm/src/modules/server/module-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAmBtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAkDrD,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAuB/D;AASD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAqTzG;AAmND;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAG7D"}
+{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAkBtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAkDrD,CAAC;AASF,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAqTzG;AAmND;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAG7D"}

package/esm/src/modules/server/module-server.js

@@ -15,7 +15,6 @@ import { parseProjectDomain } from "../../server/utils/domain-parser.js";
 import { applySSRImportRewrites } from "./ssr-import-rewriter.js";
 import { addHMRTimestamps } from "../../transforms/esm/import-rewriter.js";
 import { getFrameworkRootFromMeta } from "../../platform/compat/vfs-paths.js";
-import { isDenoCompiled } from "../../platform/compat/runtime.js";
 const logger = serverLogger.component("module-server");
 /**
  * Embedded polyfills for compiled Deno binaries.
@@ -78,29 +77,6 @@ export default {};
     ].join("\n") + "\n",
     "_dnt.polyfills": `export default {};\n`,
 };
-/**
- * Validate that all required polyfills are embedded.
- * Call this at startup in compiled mode to fail fast if polyfills are missing.
- *
- * @throws Error if any required polyfill is missing from EMBEDDED_POLYFILLS
- */
-export async function validateEmbeddedPolyfills() {
-    if (!isDenoCompiled)
-        return; // Only validate in compiled mode
-    // Dynamic import to avoid circular dependency at module load time
-    const { getRequiredPolyfillPaths } = await import("../../transforms/import-rewriter/strategies/node-builtin-strategy.js");
-    const requiredPaths = getRequiredPolyfillPaths();
-    const embeddedPaths = new Set(Object.keys(EMBEDDED_POLYFILLS));
-    const missing = requiredPaths.filter((path) => !embeddedPaths.has(path));
-    if (missing.length > 0) {
-        const errorMsg = `FATAL: Missing embedded polyfills (will cause 404 errors in browser):\n` +
-            missing.map((p) => `  - ${p}`).join("\n") +
-            `\n\nAdd these to EMBEDDED_POLYFILLS in src/modules/server/module-server.ts`;
-        logger.error(errorMsg);
-        throw new Error(errorMsg);
-    }
-    logger.info(`Validated ${embeddedPaths.size} embedded polyfills`);
-}
 const DEV_MODULE_PREFIX = /^\/(?:_vf_modules|_veryfront\/modules)\//;
 const SNIPPET_MODULE_PREFIX = /^\/_vf_modules\/_snippets\/([a-f0-9]+)\.js/;
 // Cross-project import patterns: /_vf_modules/_cross/<slug>[@<version>]/@/<path>
@@ -424,8 +400,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                         return { path: frameworkPath, isFrameworkFile: true };
                     }
                 }
-                catch {
-                    // continue
+                catch (_) {
+                    /* expected: file may not exist at this extension */
                 }
             }
         }
@@ -454,8 +430,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                 return { path: fullPath, isFrameworkFile: false };
             }
         }
-        catch {
-            // continue
+        catch (_) {
+            /* expected: file may not exist at this path */
         }
     }
     // Project file lookups (using secureFs which may go through FSAdapter in proxy mode)
@@ -468,8 +444,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                 return { path: fullPath, isFrameworkFile: false };
             }
         }
-        catch {
-            // continue
+        catch (_) {
+            /* expected: file may not exist at this extension */
         }
     }
     const prefixesToStrip = ["components/", "pages/", "lib/", "app/", "src/"];
@@ -490,8 +466,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                     return { path: fullPath, isFrameworkFile: false };
                 }
             }
-            catch {
-                // continue
+            catch (_) {
+                /* expected: file may not exist after stripping prefix */
             }
         }
     }
@@ -507,8 +483,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                 return { path: fullPath, isFrameworkFile: false };
             }
         }
-        catch {
-            // continue
+        catch (_) {
+            /* expected: index file may not exist at this extension */
         }
     }
     // Try looking in common project directories
@@ -526,8 +502,8 @@ async function findSourceFile(secureFs, projectDir, basePath) {
                     return { path: fullPath, isFrameworkFile: false };
                 }
             }
-            catch {
-                // continue
+            catch (_) {
+                /* expected: file may not exist in common directory */
             }
         }
     }

package/esm/src/modules/server/ssr-import-rewriter.d.ts

@@ -1,4 +1,4 @@
-export interface SSRRewriteOptions {
+interface SSRRewriteOptions {
     /** Project slug for multi-project routing */
     projectSlug?: string | null;
     /** Branch name for branch-aware routing */
@@ -11,4 +11,5 @@ export interface SSRRewriteOptions {
     reactVersion?: string;
 }
 export declare function applySSRImportRewrites(code: string, options?: SSRRewriteOptions): string;
+export {};
 //# sourceMappingURL=ssr-import-rewriter.d.ts.map

package/esm/src/modules/server/ssr-import-rewriter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssr-import-rewriter.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/ssr-import-rewriter.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA4FD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,MAAM,CAK5F"}
+{"version":3,"file":"ssr-import-rewriter.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/ssr-import-rewriter.ts"],"names":[],"mappings":"AAOA,UAAU,iBAAiB;IACzB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA4FD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,MAAM,CAK5F"}

package/esm/src/modules/server/websocket-handler.js

@@ -95,7 +95,7 @@ export async function closeAllConnections(clients, rateLimiter) {
     // Alternate between microtasks and macrotasks to ensure all I/O completes.
     for (let i = 0; i < 10; i++) {
         await Promise.resolve();
-        await new Promise((resolve) => dntShim.setTimeout(resolve, 50));
+        await new Promise((resolve) => dntShim.setTimeout(resolve, 50)); // no cleanup needed: one-shot
     }
     for (const client of clients) {
         rateLimiter.cleanup(client);

package/esm/src/oauth/providers/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EAEV,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACX,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAuB5D,qBAAa,aAAa;IACxB,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;gBAEnB,MAAM,EAAE,mBAAmB,EAAE,SAAS,GAAE,SAAkB;IAKtE,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,eAAe,IAAI,MAAM,GAAG,IAAI;IAIhC,YAAY,IAAI,OAAO;IAIjB,sBAAsB,CAC1B,OAAO,GAAE,uBAAuB,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GACnE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAwC9C,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,kBAAkB;YA2BZ,gBAAgB;IAe9B,OAAO,CAAC,4BAA4B;YAQtB,aAAa;IA8BrB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+BzE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwBjE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAgBnD;AAED,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC5C,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;gBAEtB,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS;IAMtF,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAEQ,sBAAsB,CAC7B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAOxC,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgBxC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,CAAC,WAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;CAsBhF"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAClD,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EAEV,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACX,MAAM,aAAa,CAAC;AAUrB,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAuB5D,qBAAa,aAAa;IACxB,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;gBAEnB,MAAM,EAAE,mBAAmB,EAAE,SAAS,GAAE,SAAkB;IAKtE,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,eAAe,IAAI,MAAM,GAAG,IAAI;IAIhC,YAAY,IAAI,OAAO;IAIjB,sBAAsB,CAC1B,OAAO,GAAE,uBAAuB,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GACnE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IA0C9C,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,kBAAkB;YAyCZ,gBAAgB;IAe9B,OAAO,CAAC,4BAA4B;YAQtB,aAAa;IA+BrB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+BzE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwBjE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAiBnD;AAED,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC5C,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;gBAEtB,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS;IAMtF,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAEQ,sBAAsB,CAC7B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAOxC,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmBxC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,CAAC,WAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;CA4BhF"}

package/esm/src/oauth/providers/base.js

@@ -1,5 +1,10 @@
 import * as dntShim from "../../../_dnt.shims.js";
 import { getEnv } from "../../platform/compat/process.js";
+import { INVALID_ARGUMENT, TOKEN_STORAGE_ERROR } from "../../errors/index.js";
+/** Buffer before token expiry to trigger proactive refresh (5 minutes). */
+const TOKEN_REFRESH_BUFFER_MS = 300_000;
+/** Multiplier to convert `expires_in` (seconds) to milliseconds. */
+const SECONDS_TO_MS = 1_000;
 function generateRandomString(length) {
     const array = new Uint8Array(length);
     dntShim.crypto.getRandomValues(array);
@@ -36,8 +41,9 @@ export class OAuthProvider {
     }
     async createAuthorizationUrl(options = {}) {
         const clientId = this.getClientId();
-        if (!clientId)
-            throw new Error(`${this.config.clientIdEnvVar} not configured`);
+        if (!clientId) {
+            throw INVALID_ARGUMENT.create({ detail: `${this.config.clientIdEnvVar} not configured` });
+        }
         const state = options.state ?? generateRandomString(32);
         const scopes = options.scopes ?? options.defaultScopes ?? [];
         const redirectUri = options.redirectUri ?? "";
@@ -81,12 +87,20 @@ export class OAuthProvider {
     }
     parseTokenResponse(data, fallbackRefreshToken) {
         const mapping = this.config.tokenResponseMapping ?? {};
-        const accessToken = data[mapping.accessToken ?? "access_token"];
-        const refreshToken = data[mapping.refreshToken ?? "refresh_token"] ??
+        const str = (key) => {
+            const v = data[key];
+            return typeof v === "string" ? v : "";
+        };
+        const optStr = (key) => {
+            const v = data[key];
+            return typeof v === "string" ? v : undefined;
+        };
+        const accessToken = str(mapping.accessToken ?? "access_token");
+        const refreshToken = optStr(mapping.refreshToken ?? "refresh_token") ??
             fallbackRefreshToken;
-        const tokenType = data[mapping.tokenType ?? "token_type"];
-        const scope = data[mapping.scope ?? "scope"];
-        const idToken = data.id_token;
+        const tokenType = str(mapping.tokenType ?? "token_type");
+        const scope = str(mapping.scope ?? "scope");
+        const idToken = optStr("id_token");
         const tokens = {
             accessToken,
             refreshToken,
@@ -94,9 +108,14 @@ export class OAuthProvider {
             scope,
             idToken,
         };
-        const expiresIn = data[mapping.expiresIn ?? "expires_in"];
+        const rawExpiresIn = data[mapping.expiresIn ?? "expires_in"];
+        const expiresIn = typeof rawExpiresIn === "number"
+            ? rawExpiresIn
+            : typeof rawExpiresIn === "string"
+                ? Number(rawExpiresIn) || undefined
+                : undefined;
         if (expiresIn)
-            tokens.expiresAt = Date.now() + expiresIn * 1000;
+            tokens.expiresAt = Date.now() + expiresIn * SECONDS_TO_MS;
         return tokens;
     }
     async postTokenRequest(body, clientId, clientSecret) {
@@ -119,8 +138,8 @@ export class OAuthProvider {
             if (!response.ok) {
                 return {
                     success: false,
-                    error: data.error || errorFallback,
-                    errorDescription: data.error_description ||
+                    error: (typeof data.error === "string" ? data.error : "") || errorFallback,
+                    errorDescription: (typeof data.error_description === "string" ? data.error_description : "") ||
                         (errorDescriptionFallback ? errorDescriptionFallback(response.status) : undefined),
                 };
             }
@@ -179,7 +198,8 @@ export class OAuthProvider {
             });
             return response.ok;
         }
-        catch {
+        catch (_) {
+            // expected: network failure during token revocation
             return false;
         }
     }
@@ -208,7 +228,7 @@ export class OAuthService extends OAuthProvider {
         const tokens = await this.tokenStore?.getTokens(this.serviceId);
         if (!tokens)
             return null;
-        const isExpired = tokens.expiresAt && Date.now() > tokens.expiresAt - 300000;
+        const isExpired = tokens.expiresAt && Date.now() > tokens.expiresAt - TOKEN_REFRESH_BUFFER_MS;
         if (!isExpired)
             return tokens.accessToken;
         if (!tokens.refreshToken)
@@ -216,13 +236,19 @@ export class OAuthService extends OAuthProvider {
         const result = await this.refreshTokens(tokens.refreshToken);
         if (!result.success || !result.tokens)
             return null;
+        if (!this.tokenStore) {
+            throw new Error("TokenStore not configured");
+        }
         await this.tokenStore.setTokens(this.serviceId, result.tokens);
         return result.tokens.accessToken;
     }
     async fetch(endpoint, options = {}) {
         const token = await this.getAccessToken();
-        if (!token)
-            throw new Error(`Not authenticated with ${this.serviceConfig.displayName}`);
+        if (!token) {
+            throw TOKEN_STORAGE_ERROR.create({
+                detail: `Not authenticated with ${this.serviceConfig.displayName}`,
+            });
+        }
         const url = endpoint.startsWith("http") ? endpoint : `${this.apiBaseUrl}${endpoint}`;
         const response = await dntShim.fetch(url, {
             ...options,
@@ -234,7 +260,9 @@ export class OAuthService extends OAuthProvider {
         });
         if (!response.ok) {
             const error = await response.text();
-            throw new Error(`${this.serviceConfig.displayName} API error: ${response.status} ${error}`);
+            throw INVALID_ARGUMENT.create({
+                detail: `${this.serviceConfig.displayName} API error: ${response.status} ${error}`,
+            });
         }
         return response.json();
     }

package/esm/src/oauth/token-store/memory.d.ts

@@ -2,8 +2,6 @@ import type { OAuthState, OAuthTokens, TokenStore } from "../types.js";
 export declare class MemoryTokenStore implements TokenStore {
     private tokens;
     private states;
-    /** State expiration time in ms (10 minutes) */
-    private stateExpirationMs;
     getTokens(serviceId: string): Promise<OAuthTokens | null>;
     setTokens(serviceId: string, tokens: OAuthTokens): Promise<void>;
     clearTokens(serviceId: string): Promise<void>;

package/esm/src/oauth/token-store/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/token-store/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEvE,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,MAAM,CAAiC;IAE/C,+CAA+C;IAC/C,OAAO,CAAC,iBAAiB,CAAkB;IAErC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAIzD,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAYnD,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,OAAO,CAAC,oBAAoB;IAS5B,oBAAoB,IAAI,MAAM,EAAE;IAIhC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAQvC,QAAQ,IAAI,IAAI;CAIjB;AAED,eAAO,MAAM,gBAAgB,kBAAyB,CAAC"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/token-store/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKvE,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,MAAM,CAAiC;IAEzC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAIzD,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAYnD,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/C,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,OAAO,CAAC,oBAAoB;IAS5B,oBAAoB,IAAI,MAAM,EAAE;IAIhC,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAQvC,QAAQ,IAAI,IAAI;CAIjB;AAED,eAAO,MAAM,gBAAgB,kBAAyB,CAAC"}

package/esm/src/oauth/token-store/memory.js

@@ -1,8 +1,8 @@
+/** How long an OAuth state nonce remains valid (10 minutes). */
+const STATE_EXPIRATION_MS = 10 * 60 * 1_000;
 export class MemoryTokenStore {
     tokens = new Map();
     states = new Map();
-    /** State expiration time in ms (10 minutes) */
-    stateExpirationMs = 10 * 60 * 1000;
     async getTokens(serviceId) {
         return this.tokens.get(serviceId) ?? null;
     }
@@ -16,7 +16,7 @@ export class MemoryTokenStore {
         const oauthState = this.states.get(state);
         if (!oauthState)
             return null;
-        if (Date.now() - oauthState.createdAt > this.stateExpirationMs) {
+        if (Date.now() - oauthState.createdAt > STATE_EXPIRATION_MS) {
             this.states.delete(state);
             return null;
         }
@@ -32,7 +32,7 @@ export class MemoryTokenStore {
     cleanupExpiredStates() {
         const now = Date.now();
         for (const [state, oauthState] of this.states) {
-            if (now - oauthState.createdAt > this.stateExpirationMs) {
+            if (now - oauthState.createdAt > STATE_EXPIRATION_MS) {
                 this.states.delete(state);
             }
         }

package/esm/src/observability/auto-instrument/http-instrumentation.js

@@ -66,8 +66,8 @@ export function createInstrumentedFetch(baseFetch = dntShim.dntGlobalThis.fetch)
             fetchAttrs["http.host"] = parsed.host;
             fetchAttrs["http.scheme"] = parsed.protocol.replace(":", "");
         }
-        catch {
-            // Relative URLs are fine; leave defaults
+        catch (_) {
+            /* expected: relative URLs cannot be parsed, leave defaults */
         }
         try {
             return await tracer.startActiveSpan("http.client.fetch", { kind: SpanKind.CLIENT, attributes: fetchAttrs }, async (span) => {