veryfront 0.1.746 → 0.1.749

package/esm/src/middleware/builtin/security/redis-rate-limit.js

@@ -1,6 +1,15 @@
 import { createError, toError } from "../../../errors/veryfront-error.js";
 import { serverLogger } from "../../../utils/index.js";
 const logger = serverLogger.component("redis-ratelimit");
+const INCREMENT_WITH_TTL_SCRIPT = `
+local count = redis.call("INCR", KEYS[1])
+local ttl = redis.call("PTTL", KEYS[1])
+if ttl < 0 then
+  redis.call("PEXPIRE", KEYS[1], ARGV[1])
+  ttl = tonumber(ARGV[1])
+end
+return { count, ttl }
+`;
 /** Implement redis rate limit store. */
 export class RedisRateLimitStore {
     client = null;
@@ -17,6 +26,19 @@ export class RedisRateLimitStore {
         this.clientPromise ??= this.connectClient();
         return this.clientPromise;
     }
+    clearCachedClient() {
+        this.client = null;
+        this.clientPromise = null;
+    }
+    attachClientLifecycleHandlers(client) {
+        client.on?.("error", (err) => {
+            logger.error("client error", err);
+            this.clearCachedClient();
+        });
+        client.on?.("end", () => {
+            this.clearCachedClient();
+        });
+    }
     async connectClient() {
         let createClient;
         try {
@@ -34,11 +56,10 @@ export class RedisRateLimitStore {
         }
         try {
             const client = createClient({ url: this.url });
-            client.on?.("error", (err) => {
-                logger.error("client error", err);
-            });
+            this.attachClientLifecycleHandlers(client);
             await client.connect();
             this.client = client;
+            this.clientPromise = null;
             return client;
         }
         catch (error) {
@@ -52,15 +73,10 @@ export class RedisRateLimitStore {
     async increment(key, windowMs) {
         const client = await this.ensureClient();
         const redisKey = this.storageKey(key);
-        const count = await client.incr(redisKey);
-        if (count === 1) {
-            await client.pExpire(redisKey, windowMs);
-        }
-        const pttl = await client.pTTL(redisKey);
-        if (pttl === -1) {
-            await client.pExpire(redisKey, windowMs);
-            return { count, resetAt: Date.now() + windowMs };
-        }
+        const [count, pttl] = parseIncrementResult(await client.eval(INCREMENT_WITH_TTL_SCRIPT, {
+            keys: [redisKey],
+            arguments: [String(windowMs)],
+        }));
         const ttl = pttl > 0 ? pttl : windowMs;
         return { count, resetAt: Date.now() + ttl };
     }
@@ -72,6 +88,23 @@ export class RedisRateLimitStore {
         if (!this.client)
             return;
         await this.client.disconnect();
-        this.client = null;
+        this.clearCachedClient();
+    }
+}
+function parseIncrementResult(result) {
+    if (!Array.isArray(result) || result.length < 2) {
+        throw toError(createError({
+            type: "config",
+            message: "Redis rate limit eval returned an invalid result.",
+        }));
+    }
+    const count = Number(result[0]);
+    const ttl = Number(result[1]);
+    if (!Number.isFinite(count) || !Number.isFinite(ttl)) {
+        throw toError(createError({
+            type: "config",
+            message: "Redis rate limit eval returned non-numeric values.",
+        }));
     }
+    return [count, ttl];
 }

package/esm/src/modules/react-loader/ssr-module-loader/import-rewriter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"import-rewriter.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/import-rewriter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,CAyBR"}
+{"version":3,"file":"import-rewriter.d.ts","sourceRoot":"","sources":["../../../../../src/src/modules/react-loader/ssr-module-loader/import-rewriter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,CA8BR"}

package/esm/src/modules/react-loader/ssr-module-loader/import-rewriter.js

@@ -34,16 +34,23 @@ export function rewriteLocalImports(transformed, localImportPaths, fromFilePath,
     const fromRelativeDir = fromFileDir.startsWith(normalizedProjectDir)
         ? fromFileDir.substring(normalizedProjectDir.length + 1)
         : fromFileDir;
-    let result = transformed;
+    const replacementByPattern = new Map();
     for (const [specifierOrPath, tempPath] of localImportPaths) {
         const patterns = buildImportPatterns(specifierOrPath, fromRelativeDir, normalizedProjectDir);
         for (const pattern of patterns) {
-            const escapedPattern = escapeRegExp(pattern);
-            const regex = new RegExp(`${IMPORT_FROM_PREFIX}(${escapedPattern})${IMPORT_FROM_SUFFIX}`, "g");
-            result = result.replace(regex, `from "file://${tempPath}"`);
+            if (!replacementByPattern.has(pattern)) {
+                replacementByPattern.set(pattern, tempPath);
+            }
         }
     }
-    return result;
+    if (replacementByPattern.size === 0)
+        return transformed;
+    const importPattern = Array.from(replacementByPattern.keys()).map(escapeRegExp).join("|");
+    const regex = new RegExp(`${IMPORT_FROM_PREFIX}(${importPattern})${IMPORT_FROM_SUFFIX}`, "g");
+    return transformed.replace(regex, (match, specifier) => {
+        const tempPath = replacementByPattern.get(specifier);
+        return tempPath === undefined ? match : `from "file://${tempPath}"`;
+    });
 }
 /**
  * Build import patterns for a given specifier to match in transformed code.

package/esm/src/modules/server/module-batch-handler.d.ts

@@ -22,6 +22,7 @@ export interface BatchHandlerOptions {
     projectSlug?: string;
     projectId?: string;
     branch?: string | null;
+    releaseId?: string | null;
     dev?: boolean;
     /**
      * Restrict module imports to specific directories (opt-in security).

package/esm/src/modules/server/module-batch-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-batch-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-batch-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AA2DtE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2K/F;AAkPD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAY1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAKrE"}
+{"version":3,"file":"module-batch-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-batch-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAiGtE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA6K/F;AA0PD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAc1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAKrE"}

package/esm/src/modules/server/module-batch-handler.js

@@ -27,6 +27,7 @@ import { getFrameworkRootFromMeta } from "../../platform/compat/vfs-paths.js";
 import { LRUCache } from "../../utils/lru-wrapper.js";
 import { registerLRUCache } from "../../cache/index.js";
 import { sha256Short } from "../../cache/hash.js";
+import { buildSourceMissCacheKey, clearSourceMissCache, hasSourceMiss, rememberSourceMiss, } from "./module-source-resolution-cache.js";
 const logger = serverLogger.component("module-batch");
 /** Slow request threshold in milliseconds */
 const SLOW_REQUEST_THRESHOLD_MS = 500;
@@ -57,6 +58,30 @@ const FRAMEWORK_EXTENSIONS = [
     ".jsx",
     ".js", // Regular sources for dev mode
 ];
+async function findFirstSecureFile(secureFs, paths) {
+    const results = await Promise.all(paths.map(async (path) => {
+        try {
+            const stat = await secureFs.stat(path);
+            return stat.isFile ? path : null;
+        }
+        catch {
+            return null;
+        }
+    }));
+    return results.find((path) => path !== null) ?? null;
+}
+async function findFirstPlatformFile(platformFs, paths) {
+    const results = await Promise.all(paths.map(async (path) => {
+        try {
+            const stat = await platformFs.stat(path);
+            return stat.isFile ? path : null;
+        }
+        catch {
+            return null;
+        }
+    }));
+    return results.find((path) => path !== null) ?? null;
+}
 /**
  * Handle a batch module request
  */
@@ -87,7 +112,7 @@ export function handleModuleBatch(req, options) {
                 headers: { "Content-Type": "text/plain" },
             });
         }
-        const { projectDir, adapter, projectSlug, projectId, branch, dev = false, allowedImportDirs, reactVersion, } = options;
+        const { projectDir, adapter, projectSlug, projectId, branch, releaseId, dev = false, allowedImportDirs, reactVersion, } = options;
         const projectKey = projectId || projectSlug || "default";
         const userAgent = req.headers.get("user-agent") ?? "";
         const isSSR = url.searchParams.get("ssr") === "true" || userAgent.startsWith("Deno/");
@@ -124,6 +149,7 @@ export function handleModuleBatch(req, options) {
                     projectSlug,
                     branch,
                     projectId,
+                    releaseId,
                     reactVersion,
                 });
                 const transformDurationMs = performance.now() - moduleStart;
@@ -196,21 +222,27 @@ export function handleModuleBatch(req, options) {
  */
 async function loadAndTransformModule(modulePath, projectDir, adapter, secureFs, options) {
     const basePath = modulePath.replace(/\.js$/, "");
-    for (const ext of EXTENSIONS) {
-        const fullPath = join(projectDir, basePath + ext);
-        try {
-            const stat = await secureFs.stat(fullPath);
-            if (!stat.isFile)
-                continue;
-            const source = await secureFs.readFile(fullPath);
-            return transformModule(source, fullPath, modulePath, projectDir, adapter, secureFs, options);
-        }
-        catch (_) {
-            /* expected: file may not exist at this extension */
-        }
+    const missCacheKey = buildSourceMissCacheKey({
+        resolver: "module-batch",
+        projectDir,
+        projectId: options.projectId,
+        projectSlug: options.projectSlug,
+        branch: options.branch,
+        releaseId: options.releaseId,
+        basePath,
+        reactVersion: options.reactVersion,
+    });
+    if (hasSourceMiss(missCacheKey))
+        return null;
+    const sourcePath = await findFirstSecureFile(secureFs, EXTENSIONS.map((ext) => join(projectDir, basePath + ext)));
+    if (sourcePath) {
+        const source = await secureFs.readFile(sourcePath);
+        return transformModule(source, sourcePath, modulePath, projectDir, adapter, secureFs, options);
     }
-    if (!basePath.startsWith("lib/"))
+    if (!basePath.startsWith("lib/")) {
+        rememberSourceMiss(missCacheKey);
         return null;
+    }
     // Framework lookup directories in priority order
     const frameworkLookupDirs = [
         EMBEDDED_SRC_DIR, // Embedded sources for compiled binaries (.src files)
@@ -218,20 +250,13 @@ async function loadAndTransformModule(modulePath, projectDir, adapter, secureFs,
     ];
     const platformFs = createFileSystem();
     for (const lookupDir of frameworkLookupDirs) {
-        for (const ext of FRAMEWORK_EXTENSIONS) {
-            const frameworkPath = join(lookupDir, basePath + ext);
-            try {
-                const stat = await platformFs.stat(frameworkPath);
-                if (!stat.isFile)
-                    continue;
-                const source = await platformFs.readTextFile(frameworkPath);
-                return transformModule(source, frameworkPath, modulePath, projectDir, adapter, secureFs, options);
-            }
-            catch (_) {
-                /* expected: framework file may not exist at this extension */
-            }
+        const frameworkPath = await findFirstPlatformFile(platformFs, FRAMEWORK_EXTENSIONS.map((ext) => join(lookupDir, basePath + ext)));
+        if (frameworkPath) {
+            const source = await platformFs.readTextFile(frameworkPath);
+            return transformModule(source, frameworkPath, modulePath, projectDir, adapter, secureFs, options);
         }
     }
+    rememberSourceMiss(missCacheKey);
     return null;
 }
 async function transformModule(source, sourceFile, modulePath, projectDir, adapter, secureFs, options) {
@@ -369,6 +394,7 @@ function transformExportsForBundle(code) {
  * Clear the transform cache (on deployment or memory pressure)
  */
 export function clearBatchCache(projectSlug) {
+    clearSourceMissCache("module-batch");
     if (!projectSlug) {
         transformCache.clear();
         logger.debug("Cleared all cache");

package/esm/src/modules/server/module-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAG5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AA6BtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAsDrD,CAAC;AAQF,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkVzF;AAgTD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGrD"}
+{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAG5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAkCtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAsDrD,CAAC;AAiBF,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkWzF;AAiVD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGrD"}

package/esm/src/modules/server/module-server.js

@@ -17,6 +17,7 @@ import { FRAMEWORK_ROOT, resolveFrameworkSourcePath, } from "../../platform/comp
 import { getReactUrls, REACT_DEFAULT_VERSION } from "../../utils/constants/cdn.js";
 import { readLimitedCrossProjectSource } from "./cross-project-source-limit.js";
 import { sha256Short } from "../../cache/hash.js";
+import { buildSourceMissCacheKey, hasSourceMiss, rememberSourceMiss, } from "./module-source-resolution-cache.js";
 const logger = serverLogger.component("module-server");
 /**
  * Embedded polyfills for compiled Deno binaries.
@@ -161,6 +162,10 @@ export function serveModule(req, options) {
                             secureFs,
                             projectDir,
                             currentModulePath: `_snippets/${hash}.js`,
+                            projectId: effectiveProjectId,
+                            projectSlug: snippetProjectSlug,
+                            branch: snippetBranch,
+                            releaseId: options.releaseId,
                             reactVersion,
                         }),
                     });
@@ -229,6 +234,8 @@ export function serveModule(req, options) {
                             projectDir,
                             currentModulePath: crossPath,
                             crossProjectRef: projectRef,
+                            projectId: effectiveProjectId,
+                            releaseId: options.releaseId,
                             reactVersion,
                         }),
                     });
@@ -262,7 +269,13 @@ export function serveModule(req, options) {
             branch ??= parsedHost.branch;
         }
         try {
-            const findResult = await findSourceFile(secureFs, projectDir, filePathWithoutExt, reactVersion);
+            const findResult = await findSourceFile(secureFs, projectDir, filePathWithoutExt, {
+                projectId: effectiveProjectId,
+                projectSlug,
+                branch,
+                releaseId: options.releaseId,
+                reactVersion,
+            });
             if (!findResult) {
                 logger.warn("Module not found", {
                     modulePath,
@@ -326,6 +339,10 @@ export function serveModule(req, options) {
                             secureFs,
                             projectDir,
                             currentModulePath: modulePath,
+                            projectId: effectiveProjectId,
+                            projectSlug,
+                            branch,
+                            releaseId: options.releaseId,
                             reactVersion,
                         }),
                     });
@@ -375,7 +392,13 @@ function createSSRTargetCacheBusterResolver(options) {
                     const source = await fetchCrossProjectSource(options.crossProjectRef, targetPath);
                     return source === null ? undefined : await sha256Short(`${targetPath}\0${source}`);
                 }
-                const findResult = await findSourceFile(options.secureFs, options.projectDir, stripSSRModuleJsExtension(targetPath), options.reactVersion);
+                const findResult = await findSourceFile(options.secureFs, options.projectDir, stripSSRModuleJsExtension(targetPath), {
+                    projectId: options.projectId,
+                    projectSlug: options.projectSlug,
+                    branch: options.branch,
+                    releaseId: options.releaseId,
+                    reactVersion: options.reactVersion,
+                });
                 if (!findResult)
                     return undefined;
                 const source = await readSourceFileForVersion(options.secureFs, findResult);
@@ -415,20 +438,34 @@ function createBrowserReactPackageShim(basePathWithoutExt, reactVersion = REACT_
 async function findFrameworkPackageAssetFile(fs, basePathWithoutExt, extensions) {
     if (hasUnsafePackageAssetPath(basePathWithoutExt))
         return null;
-    for (const ext of extensions) {
-        const candidatePath = join(FRAMEWORK_ROOT, basePathWithoutExt + ext);
+    return await findFirstPlatformFile(fs, extensions.map((ext) => join(FRAMEWORK_ROOT, basePathWithoutExt + ext)));
+}
+async function findFirstPlatformFile(fs, paths) {
+    const results = await Promise.all(paths.map(async (path) => {
         try {
-            const stat = await fs.stat(candidatePath);
-            if (stat.isFile)
-                return candidatePath;
+            const stat = await fs.stat(path);
+            return stat.isFile ? path : null;
         }
         catch {
-            /* expected: package asset may not exist in source checkouts */
+            return null;
         }
-    }
-    return null;
+    }));
+    return results.find((path) => path !== null) ?? null;
 }
-async function findSourceFile(secureFs, projectDir, basePath, reactVersion) {
+async function findFirstSecureFile(secureFs, paths) {
+    const results = await Promise.all(paths.map(async (path) => {
+        try {
+            const stat = await secureFs.stat(path);
+            return stat.isFile ? path : null;
+        }
+        catch {
+            return null;
+        }
+    }));
+    return results.find((path) => path !== null) ?? null;
+}
+async function findSourceFile(secureFs, projectDir, basePath, context) {
+    const { reactVersion } = context;
     // Extensions including .src for compiled binary embedded sources
     const extensions = [
         ".json",
@@ -457,6 +494,16 @@ async function findSourceFile(secureFs, projectDir, basePath, reactVersion) {
     const isFrameworkPath = basePathWithoutExt.startsWith("_veryfront/");
     const isFrameworkPackageAssetPath = basePathWithoutExt.startsWith("react/") ||
         basePathWithoutExt.startsWith("deps/");
+    const missCacheKey = buildSourceMissCacheKey({
+        resolver: "module-server",
+        projectDir,
+        projectId: context.projectId,
+        projectSlug: context.projectSlug,
+        branch: context.branch,
+        releaseId: context.releaseId,
+        basePath: basePathWithoutExt,
+        reactVersion,
+    });
     // Check embedded polyfills first (no filesystem access needed).
     // These cover both compiled-binary polyfills (node:async_hooks etc.)
     // and dnt build artifacts (_dnt.shims, _dnt.polyfills) that don't
@@ -475,6 +522,8 @@ async function findSourceFile(secureFs, projectDir, basePath, reactVersion) {
             embeddedContent,
         };
     }
+    if (hasSourceMiss(missCacheKey))
+        return null;
     if (isFrameworkPackageAssetPath) {
         const browserReactShim = createBrowserReactPackageShim(basePathWithoutExt, reactVersion);
         if (browserReactShim) {
@@ -525,78 +574,47 @@ async function findSourceFile(secureFs, projectDir, basePath, reactVersion) {
         }
     }
     // Project file lookups (using secureFs which may go through FSAdapter in proxy mode)
-    for (const ext of extensions) {
-        const fullPath = join(projectDir, basePathWithoutExt + ext);
-        try {
-            const stat = await secureFs.stat(fullPath);
-            if (stat.isFile) {
-                logger.debug("Found file", { basePath, resolvedPath: fullPath });
-                return { path: fullPath, isFrameworkFile: false };
-            }
-        }
-        catch (_) {
-            /* expected: file may not exist at this extension */
-        }
+    const projectFilePath = await findFirstSecureFile(secureFs, extensions.map((ext) => join(projectDir, basePathWithoutExt + ext)));
+    if (projectFilePath) {
+        logger.debug("Found file", { basePath, resolvedPath: projectFilePath });
+        return { path: projectFilePath, isFrameworkFile: false };
     }
     const prefixesToStrip = ["components/", "pages/", "lib/", "app/", "src/"];
     for (const prefix of prefixesToStrip) {
         if (!basePathWithoutExt.startsWith(prefix))
             continue;
         const strippedPath = basePathWithoutExt.slice(prefix.length);
-        for (const ext of extensions) {
-            const fullPath = join(projectDir, strippedPath + ext);
-            try {
-                const stat = await secureFs.stat(fullPath);
-                if (stat.isFile) {
-                    logger.debug("Found file after stripping prefix", {
-                        originalPath: basePathWithoutExt,
-                        strippedPath,
-                        resolvedPath: fullPath,
-                    });
-                    return { path: fullPath, isFrameworkFile: false };
-                }
-            }
-            catch (_) {
-                /* expected: file may not exist after stripping prefix */
-            }
+        const strippedFilePath = await findFirstSecureFile(secureFs, extensions.map((ext) => join(projectDir, strippedPath + ext)));
+        if (strippedFilePath) {
+            logger.debug("Found file after stripping prefix", {
+                originalPath: basePathWithoutExt,
+                strippedPath,
+                resolvedPath: strippedFilePath,
+            });
+            return { path: strippedFilePath, isFrameworkFile: false };
         }
     }
-    for (const ext of extensions) {
-        const fullPath = join(projectDir, basePathWithoutExt, `index${ext}`);
-        try {
-            const stat = await secureFs.stat(fullPath);
-            if (stat.isFile) {
-                logger.debug("Found index file", {
-                    basePath: basePathWithoutExt,
-                    resolvedPath: fullPath,
-                });
-                return { path: fullPath, isFrameworkFile: false };
-            }
-        }
-        catch (_) {
-            /* expected: index file may not exist at this extension */
-        }
+    const indexFilePath = await findFirstSecureFile(secureFs, extensions.map((ext) => join(projectDir, basePathWithoutExt, `index${ext}`)));
+    if (indexFilePath) {
+        logger.debug("Found index file", {
+            basePath: basePathWithoutExt,
+            resolvedPath: indexFilePath,
+        });
+        return { path: indexFilePath, isFrameworkFile: false };
     }
     // Try looking in common project directories
     const commonDirs = ["components", "app", "pages", "lib", "src"];
     for (const dir of commonDirs) {
-        for (const ext of extensions) {
-            const fullPath = join(projectDir, dir, basePathWithoutExt + ext);
-            try {
-                const stat = await secureFs.stat(fullPath);
-                if (stat.isFile) {
-                    logger.debug("Found file in common directory", {
-                        basePath,
-                        resolvedPath: fullPath,
-                    });
-                    return { path: fullPath, isFrameworkFile: false };
-                }
-            }
-            catch (_) {
-                /* expected: file may not exist in common directory */
-            }
+        const commonDirFilePath = await findFirstSecureFile(secureFs, extensions.map((ext) => join(projectDir, dir, basePathWithoutExt + ext)));
+        if (commonDirFilePath) {
+            logger.debug("Found file in common directory", {
+                basePath,
+                resolvedPath: commonDirFilePath,
+            });
+            return { path: commonDirFilePath, isFrameworkFile: false };
         }
     }
+    rememberSourceMiss(missCacheKey);
     return null;
 }
 /**

package/esm/src/modules/server/module-source-resolution-cache.d.ts

@@ -0,0 +1,16 @@
+type ModuleSourceResolver = "module-server" | "module-batch";
+export declare function buildSourceMissCacheKey(options: {
+    resolver: ModuleSourceResolver;
+    projectDir: string;
+    projectId?: string;
+    projectSlug?: string | null;
+    branch?: string | null;
+    releaseId?: string | null;
+    basePath: string;
+    reactVersion?: string;
+}): string;
+export declare function hasSourceMiss(cacheKey: string): boolean;
+export declare function rememberSourceMiss(cacheKey: string): void;
+export declare function clearSourceMissCache(resolver?: ModuleSourceResolver): void;
+export {};
+//# sourceMappingURL=module-source-resolution-cache.d.ts.map

package/esm/src/modules/server/module-source-resolution-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-source-resolution-cache.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-source-resolution-cache.ts"],"names":[],"mappings":"AAGA,KAAK,oBAAoB,GAAG,eAAe,GAAG,cAAc,CAAC;AAgB7D,wBAAgB,uBAAuB,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAWT;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAO1E"}

package/esm/src/modules/server/module-source-resolution-cache.js

@@ -0,0 +1,43 @@
+import { registerLRUCache } from "../../cache/index.js";
+import { LRUCache } from "../../utils/lru-wrapper.js";
+const SOURCE_MISS_CACHE_MAX_ENTRIES = 5_000;
+const sourceMissCaches = {
+    "module-server": new LRUCache({
+        maxEntries: SOURCE_MISS_CACHE_MAX_ENTRIES,
+    }),
+    "module-batch": new LRUCache({
+        maxEntries: SOURCE_MISS_CACHE_MAX_ENTRIES,
+    }),
+};
+registerLRUCache("module-server-source-miss-cache", sourceMissCaches["module-server"]);
+registerLRUCache("module-batch-source-miss-cache", sourceMissCaches["module-batch"]);
+export function buildSourceMissCacheKey(options) {
+    return [
+        options.resolver,
+        options.projectDir,
+        options.projectId ?? "",
+        options.projectSlug ?? "",
+        options.branch ?? "",
+        options.releaseId ?? "",
+        options.reactVersion ?? "",
+        options.basePath,
+    ].join("\0");
+}
+export function hasSourceMiss(cacheKey) {
+    return sourceMissCaches[getResolverFromCacheKey(cacheKey)].has(cacheKey);
+}
+export function rememberSourceMiss(cacheKey) {
+    sourceMissCaches[getResolverFromCacheKey(cacheKey)].set(cacheKey, true);
+}
+export function clearSourceMissCache(resolver) {
+    if (resolver) {
+        sourceMissCaches[resolver].clear();
+        return;
+    }
+    for (const cache of Object.values(sourceMissCaches))
+        cache.clear();
+}
+function getResolverFromCacheKey(cacheKey) {
+    const resolver = cacheKey.split("\0", 1)[0];
+    return resolver === "module-batch" ? "module-batch" : "module-server";
+}

package/esm/src/oauth/providers/base.d.ts

@@ -36,11 +36,9 @@ export declare class OAuthProvider {
 export declare class OAuthService extends OAuthProvider {
     protected serviceConfig: OAuthServiceConfig;
     protected tokenStore?: TokenStore;
-    private refreshPromises;
     constructor(config: OAuthServiceConfig, tokenStore?: TokenStore, envReader?: EnvReader);
     get serviceId(): string;
     get apiBaseUrl(): string;
-    private refreshKey;
     createAuthorizationUrl(options?: AuthorizationUrlOptions): Promise<{
         url: string;
         state: OAuthState;

package/esm/src/oauth/providers/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/base.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EAEV,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACX,MAAM,aAAa,CAAC;AAarB,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAuB5D,gCAAgC;AAChC,qBAAa,aAAa;IACxB,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;gBAEnB,MAAM,EAAE,mBAAmB,EAAE,SAAS,GAAE,SAAkB;IAKtE,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,eAAe,IAAI,MAAM,GAAG,IAAI;IAIhC,YAAY,IAAI,OAAO;IAIjB,sBAAsB,CAC1B,OAAO,GAAE,uBAAuB,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GACnE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IA0C9C,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;YA0CZ,gBAAgB;IAe9B,OAAO,CAAC,4BAA4B;YAQtB,aAAa;IAyCrB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgCzE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwBjE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAiBnD;AAED,+BAA+B;AAC/B,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC5C,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAClC,OAAO,CAAC,eAAe,CAA6C;gBAExD,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS;IAMtF,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,OAAO,CAAC,UAAU;IAIT,sBAAsB,CAC7B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAO9C;;;;;;OAMG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAyB9C,0BAA0B;IAcxC;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAuBpB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;CA+BxF"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/src/oauth/providers/base.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EAEV,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACX,MAAM,aAAa,CAAC;AAarB,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAuB5D,gCAAgC;AAChC,qBAAa,aAAa;IACxB,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACtC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC;gBAEnB,MAAM,EAAE,mBAAmB,EAAE,SAAS,GAAE,SAAkB;IAKtE,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,eAAe,IAAI,MAAM,GAAG,IAAI;IAIhC,YAAY,IAAI,OAAO;IAIjB,sBAAsB,CAC1B,OAAO,GAAE,uBAAuB,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO,GACnE,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IA0C9C,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;YA0CZ,gBAAgB;IAe9B,OAAO,CAAC,4BAA4B;YAQtB,aAAa;IAyCrB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgCzE,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAwBjE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAiBnD;AA2CD,+BAA+B;AAC/B,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAS,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC5C,SAAS,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;gBAEtB,MAAM,EAAE,kBAAkB,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS;IAMtF,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAEQ,sBAAsB,CAC7B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAO9C;;;;;;OAMG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YA4B9C,0BAA0B;IAcxC;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IAuBpB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,CAAC,CAAC;CA+BxF"}