veryfront 0.1.754 → 0.1.756

package/esm/src/rendering/orchestrator/module-loader/index.js

@@ -8,41 +8,18 @@
  */
 import { rendererLogger } from "../../../utils/index.js";
 import { getLocalAdapter } from "../../../platform/adapters/registry.js";
-import { transformToESM } from "../../../transforms/esm-transform.js";
 import { createFileSystem } from "../../../platform/compat/fs.js";
 import { getProjectTmpDir } from "../../../modules/react-loader/index.js";
-import { generateCacheKey as generateTransformCacheKey, getOrComputeTransform, initializeTransformCache, setCachedTransformAsync, } from "../../../transforms/esm/transform-cache.js";
-import { TRANSFORM_DISTRIBUTED_TTL_SEC } from "../../../utils/constants/cache.js";
-import { validateCachedBundlesByManifestOrCode } from "../../../transforms/esm/cached-bundle-validation.js";
 import { getHttpBundleCacheDir, getMdxEsmCacheDir } from "../../../utils/cache-dir.js";
 import { join } from "../../../platform/compat/path/index.js";
-import { hashCodeHex } from "../../../utils/hash-utils.js";
-import { getModulePathCache, invalidateMdxEsmModule, lookupMdxEsmCache, saveModulePathCache, } from "../../../transforms/mdx/esm-module-loader/cache/index.js";
-import { buildMdxEsmPathCacheKey } from "../../../transforms/mdx/esm-module-loader/cache-format.js";
+import { invalidateMdxEsmModule, lookupMdxEsmCache, } from "../../../transforms/mdx/esm-module-loader/cache/index.js";
 import { resolveModuleDependencies, rewriteResolvedDependencyImports, } from "./dependency-resolver.js";
+import { persistTransformedModule } from "./module-persistence.js";
+import { transformModuleCodeWithCache, UNRESOLVED_VF_MODULES_RE, } from "./module-transform-cache.js";
 const logger = rendererLogger.component("module-loader");
 // Re-export utilities
 export { createEsmCache, createModuleCache, generateHash } from "./cache.js";
 export { fetchEsmModule, rewriteEsmPaths } from "./esm-rewriter.js";
-/** Maximum number of directories to track to prevent memory leaks */
-const MAX_CREATED_DIRS = 5_000;
-/** Cache for created directories to avoid repeated mkdir calls (LRU-style) */
-const createdDirs = new Set();
-/** TTL for cached transforms (uses centralized config) */
-const TRANSFORM_CACHE_TTL_SECONDS = TRANSFORM_DISTRIBUTED_TTL_SEC;
-/** Prune oldest entries when cache exceeds limit */
-function pruneCreatedDirs() {
-    if (createdDirs.size <= MAX_CREATED_DIRS)
-        return;
-    const toDelete = createdDirs.size - MAX_CREATED_DIRS;
-    let deleted = 0;
-    for (const dir of createdDirs) {
-        if (deleted >= toDelete)
-            break;
-        createdDirs.delete(dir);
-        deleted++;
-    }
-}
 function getModuleCacheKey(filePath, projectId, projectDir, contentSourceId) {
     const base = projectId ?? projectDir ?? "default";
     const source = contentSourceId ?? "default";
@@ -53,20 +30,6 @@ function decodeFileContent(fileContent) {
         return fileContent;
     return new TextDecoder().decode(fileContent);
 }
-async function ensureDir(adapter, dir) {
-    if (createdDirs.has(dir))
-        return;
-    try {
-        await adapter.fs.mkdir(dir, { recursive: true });
-    }
-    catch (_) {
-        /* expected: directory might already exist */
-    }
-    finally {
-        createdDirs.add(dir);
-        pruneCreatedDirs();
-    }
-}
 /**
  * Transform a module and all its local dependencies (@/ alias and relative imports).
  *
@@ -77,8 +40,6 @@ async function ensureDir(adapter, dir) {
  * @param useLocalAdapter - Whether to use local adapter for reading
  * @returns Path to the transformed module file
  */
-/** Pattern to detect unresolved /_vf_modules/ imports that will fail at runtime */
-const UNRESOLVED_VF_MODULES_RE = /from\s*["']((?:file:\/\/)?\/?\/?_vf_modules\/[^"']+)["']/;
 export async function transformModuleWithDeps(filePath, tmpDir, localAdapter, config, useLocalAdapter = false) {
     const { moduleCache, projectDir, projectId, contentSourceId, adapter, mode } = config;
     const cacheKey = getModuleCacheKey(filePath, projectId, projectDir, contentSourceId);
@@ -158,123 +119,27 @@ export async function transformModuleWithDeps(filePath, tmpDir, localAdapter, co
             projectDir,
         });
     }
-    const contentHash = hashCodeHex(fileContent);
     const effectiveProjectId = projectId ?? projectDir;
-    const scopedPath = `${effectiveProjectId}:${filePath}`;
-    const transformCacheKey = generateTransformCacheKey(scopedPath, contentHash, true);
-    await initializeTransformCache();
-    const transformResult = await getOrComputeTransform(transformCacheKey, () => {
-        logger.debug("Transform cache miss, transforming", { filePath });
-        return transformToESM(fileContent, filePath, projectDir, adapter, {
-            projectId: effectiveProjectId,
-            dev: mode === "development",
-            ssr: true,
-            reactVersion: config.reactVersion,
-        });
-    }, TRANSFORM_CACHE_TTL_SECONDS);
-    let transformedCode = transformResult.code;
-    const cacheDir = getHttpBundleCacheDir();
-    let bundlesValid = true;
-    if (transformResult.cacheHit) {
-        const validation = await validateCachedBundlesByManifestOrCode(transformedCode, transformResult.bundleManifestId, cacheDir);
-        if (!validation.valid) {
-            logger.warn("Cached HTTP bundle validation failed, re-transforming", {
-                filePath,
-                manifestId: transformResult.bundleManifestId?.slice(0, 12),
-                failedHashes: validation.failedHashes,
-                reason: validation.reason,
-                source: validation.source,
-            });
-            bundlesValid = false;
-        }
-    }
-    if (!bundlesValid) {
-        transformedCode = await transformToESM(fileContent, filePath, projectDir, adapter, {
-            projectId: effectiveProjectId,
-            dev: mode === "development",
-            ssr: true,
-            reactVersion: config.reactVersion,
-        });
-        setCachedTransformAsync(transformCacheKey, transformedCode, contentHash, TRANSFORM_CACHE_TTL_SECONDS).catch((error) => {
-            logger.debug("Failed to update transform cache after re-transform", {
-                filePath,
-                error,
-            });
-        });
-    }
-    // CRITICAL: Validate that no unresolved /_vf_modules/ imports remain after transform.
-    // These imports should have been resolved to file:// paths by ssrVfModulesPlugin.
-    // If they're still present, retry the transform bypassing all caches.
-    if (UNRESOLVED_VF_MODULES_RE.test(transformedCode)) {
-        const match = transformedCode.match(UNRESOLVED_VF_MODULES_RE);
-        const unresolvedImport = match?.[1] || "unknown";
-        logger.warn("[ModuleLoader] Transform has unresolved _vf_modules import, retrying without cache", {
-            filePath: filePath.slice(-60),
-            unresolvedImport: unresolvedImport.slice(0, 80),
-            cacheHit: transformResult.cacheHit,
-        });
-        // Force a fresh transform bypassing all caches
-        // Import runPipeline directly to bypass getOrComputeTransform cache
-        const { runPipeline } = await import("../../../transforms/pipeline/index.js");
-        const pipelineResult = await runPipeline(fileContent, filePath, projectDir, {
-            projectId: effectiveProjectId,
-            dev: mode === "development",
-            ssr: true,
-            reactVersion: config.reactVersion,
-        });
-        transformedCode = pipelineResult.code;
-        // Check again after retry
-        if (UNRESOLVED_VF_MODULES_RE.test(transformedCode)) {
-            const retryMatch = transformedCode.match(UNRESOLVED_VF_MODULES_RE);
-            logger.error("Transform still has unresolved _vf_modules after retry", {
-                filePath: filePath.slice(-60),
-                unresolvedImport: retryMatch?.[1]?.slice(0, 80) || "unknown",
-                hint: "Check that framework sources exist in dist/framework-src/ and ssrVfModulesPlugin is running",
-            });
-            // Continue anyway - let it fail at import time for better error context
-        }
-        else {
-            // Retry succeeded - update the cache
-            setCachedTransformAsync(transformCacheKey, transformedCode, hashCodeHex(transformedCode).slice(0, 16), TRANSFORM_CACHE_TTL_SECONDS).catch((error) => {
-                logger.debug("Failed to update cache after retry", { filePath, error });
-            });
-        }
-    }
-    const transformedHash = hashCodeHex(transformedCode).slice(0, 8);
-    const relativePath = filePath.startsWith(projectDir)
-        ? filePath.slice(projectDir.length).replace(/^\/+/, "")
-        : filePath.replace(/^\/+/, "");
-    const jsPath = relativePath.replace(/\.(tsx?|jsx|mdx)$/, `.${transformedHash}.js`);
-    const tempFilePath = join(tmpDir, jsPath);
-    const tempDir = tempFilePath.substring(0, tempFilePath.lastIndexOf("/"));
-    await ensureDir(localAdapter, tempDir);
-    try {
-        await localAdapter.fs.writeFile(tempFilePath, transformedCode);
-    }
-    catch (error) {
-        logger.error("Failed to write module:", {
-            filePath,
-            tempFilePath,
-            error: error instanceof Error ? error.message : String(error),
-        });
-        throw error;
-    }
-    if (contentSourceId) {
-        const normalizedPath = `_vf_modules/${relativePath.replace(/\.(tsx?|jsx|mdx)$/, ".js")}`;
-        const mdxCacheKey = buildMdxEsmPathCacheKey(normalizedPath, config.reactVersion);
-        const cache = await getModulePathCache(tmpDir);
-        cache.set(mdxCacheKey, tempFilePath);
-        saveModulePathCache(tmpDir).catch((err) => {
-            logger.debug("Failed to save module cache", { error: String(err) });
-        });
-        logger.debug("Registered module in MDX-ESM cache", {
-            file: filePath.slice(-40),
-            mdxCacheKey,
-            tempFilePath: tempFilePath.slice(-60),
-        });
-    }
-    moduleCache.set(cacheKey, tempFilePath);
-    return tempFilePath;
+    const { code: transformedCode } = await transformModuleCodeWithCache({
+        fileContent,
+        filePath,
+        projectDir,
+        effectiveProjectId,
+        mode,
+        adapter,
+        reactVersion: config.reactVersion,
+    });
+    return await persistTransformedModule({
+        filePath,
+        projectDir,
+        tmpDir,
+        transformedCode,
+        localAdapter,
+        moduleCache,
+        cacheKey,
+        contentSourceId,
+        reactVersion: config.reactVersion,
+    });
 }
 /**
  * Get the cache directory for module transforms.

package/esm/src/rendering/orchestrator/module-loader/module-persistence.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Final module-loader persistence phase.
+ *
+ * @module rendering/orchestrator/module-loader/module-persistence
+ */
+import type { RuntimeAdapter } from "../../../platform/adapters/base.js";
+export interface PersistTransformedModuleInput {
+    filePath: string;
+    projectDir: string;
+    tmpDir: string;
+    transformedCode: string;
+    localAdapter: RuntimeAdapter;
+    moduleCache: Map<string, string>;
+    cacheKey: string;
+    contentSourceId?: string;
+    reactVersion?: string;
+}
+/** Write a transformed module artifact and register cache pointers. */
+export declare function persistTransformedModule(input: PersistTransformedModuleInput): Promise<string>;
+//# sourceMappingURL=module-persistence.d.ts.map

package/esm/src/rendering/orchestrator/module-loader/module-persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-persistence.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/module-persistence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AA6CzE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,cAAc,CAAC;IAC7B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,uEAAuE;AACvE,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,MAAM,CAAC,CA2CjB"}

package/esm/src/rendering/orchestrator/module-loader/module-persistence.js

@@ -0,0 +1,80 @@
+/**
+ * Final module-loader persistence phase.
+ *
+ * @module rendering/orchestrator/module-loader/module-persistence
+ */
+import { join } from "../../../platform/compat/path/index.js";
+import { rendererLogger } from "../../../utils/index.js";
+import { hashCodeHex } from "../../../utils/hash-utils.js";
+import { getModulePathCache, saveModulePathCache, } from "../../../transforms/mdx/esm-module-loader/cache/index.js";
+import { buildMdxEsmPathCacheKey } from "../../../transforms/mdx/esm-module-loader/cache-format.js";
+const logger = rendererLogger.component("module-loader");
+/** Maximum number of directories to track to prevent memory leaks. */
+const MAX_CREATED_DIRS = 5_000;
+/** Cache for created directories to avoid repeated mkdir calls (LRU-style). */
+const createdDirs = new Set();
+/** Prune oldest entries when cache exceeds limit. */
+function pruneCreatedDirs() {
+    if (createdDirs.size <= MAX_CREATED_DIRS)
+        return;
+    const toDelete = createdDirs.size - MAX_CREATED_DIRS;
+    let deleted = 0;
+    for (const dir of createdDirs) {
+        if (deleted >= toDelete)
+            break;
+        createdDirs.delete(dir);
+        deleted++;
+    }
+}
+async function ensureDir(adapter, dir) {
+    if (createdDirs.has(dir))
+        return;
+    try {
+        await adapter.fs.mkdir(dir, { recursive: true });
+    }
+    catch (_) {
+        /* expected: directory might already exist */
+    }
+    finally {
+        createdDirs.add(dir);
+        pruneCreatedDirs();
+    }
+}
+/** Write a transformed module artifact and register cache pointers. */
+export async function persistTransformedModule(input) {
+    const transformedHash = hashCodeHex(input.transformedCode).slice(0, 8);
+    const relativePath = input.filePath.startsWith(input.projectDir)
+        ? input.filePath.slice(input.projectDir.length).replace(/^\/+/, "")
+        : input.filePath.replace(/^\/+/, "");
+    const jsPath = relativePath.replace(/\.(tsx?|jsx|mdx)$/, `.${transformedHash}.js`);
+    const tempFilePath = join(input.tmpDir, jsPath);
+    const tempDir = tempFilePath.substring(0, tempFilePath.lastIndexOf("/"));
+    await ensureDir(input.localAdapter, tempDir);
+    try {
+        await input.localAdapter.fs.writeFile(tempFilePath, input.transformedCode);
+    }
+    catch (error) {
+        logger.error("Failed to write module:", {
+            filePath: input.filePath,
+            tempFilePath,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    if (input.contentSourceId) {
+        const normalizedPath = `_vf_modules/${relativePath.replace(/\.(tsx?|jsx|mdx)$/, ".js")}`;
+        const mdxCacheKey = buildMdxEsmPathCacheKey(normalizedPath, input.reactVersion);
+        const cache = await getModulePathCache(input.tmpDir);
+        cache.set(mdxCacheKey, tempFilePath);
+        saveModulePathCache(input.tmpDir).catch((err) => {
+            logger.debug("Failed to save module cache", { error: String(err) });
+        });
+        logger.debug("Registered module in MDX-ESM cache", {
+            file: input.filePath.slice(-40),
+            mdxCacheKey,
+            tempFilePath: tempFilePath.slice(-60),
+        });
+    }
+    input.moduleCache.set(input.cacheKey, tempFilePath);
+    return tempFilePath;
+}

package/esm/src/rendering/orchestrator/module-loader/module-transform-cache.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Transform-cache and retry phase for the SSR module loader.
+ *
+ * @module rendering/orchestrator/module-loader/module-transform-cache
+ */
+import type { RuntimeAdapter } from "../../../platform/adapters/base.js";
+import { initializeTransformCache, setCachedTransformAsync } from "../../../transforms/esm/transform-cache.js";
+import { getHttpBundleCacheDir } from "../../../utils/cache-dir.js";
+/** Pattern to detect unresolved /_vf_modules/ imports that will fail at runtime. */
+export declare const UNRESOLVED_VF_MODULES_RE: RegExp;
+export interface ModuleTransformCacheResult {
+    code: string;
+    cacheKey: string;
+    contentHash: string;
+}
+interface TransformCacheResult {
+    code: string;
+    cacheHit: boolean;
+    bundleManifestId?: string;
+}
+interface BundleValidationResult {
+    valid: boolean;
+    failedHashes: string[];
+    reason?: string;
+    source: string;
+}
+interface TransformOptions {
+    projectId: string;
+    dev: boolean;
+    ssr: boolean;
+    reactVersion?: string;
+}
+interface PipelineResult {
+    code: string;
+}
+export interface ModuleTransformCacheDeps {
+    initializeTransformCache: typeof initializeTransformCache;
+    getOrComputeTransform: (key: string, compute: () => Promise<string>, ttlSeconds: number) => Promise<TransformCacheResult>;
+    transformToESM: (code: string, filePath: string, projectDir: string, adapter: RuntimeAdapter, options: TransformOptions) => Promise<string>;
+    validateCachedBundlesByManifestOrCode: (code: string, bundleManifestId: string | undefined, cacheDir: string) => Promise<BundleValidationResult>;
+    getHttpBundleCacheDir: typeof getHttpBundleCacheDir;
+    setCachedTransformAsync: typeof setCachedTransformAsync;
+    runPipeline: (code: string, filePath: string, projectDir: string, options: TransformOptions) => Promise<PipelineResult>;
+}
+export interface TransformModuleCodeWithCacheInput {
+    fileContent: string;
+    filePath: string;
+    projectDir: string;
+    effectiveProjectId: string;
+    mode: "development" | "production";
+    adapter: RuntimeAdapter;
+    reactVersion?: string;
+    ttlSeconds?: number;
+    deps?: ModuleTransformCacheDeps;
+}
+/** Transform module source through the shared cache and stale-cache retry checks. */
+export declare function transformModuleCodeWithCache(input: TransformModuleCodeWithCacheInput): Promise<ModuleTransformCacheResult>;
+export {};
+//# sourceMappingURL=module-transform-cache.d.ts.map

package/esm/src/rendering/orchestrator/module-loader/module-transform-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-transform-cache.d.ts","sourceRoot":"","sources":["../../../../../src/src/rendering/orchestrator/module-loader/module-transform-cache.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAIzE,OAAO,EAGL,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,4CAA4C,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKpE,oFAAoF;AACpF,eAAO,MAAM,wBAAwB,QAA6D,CAAC;AAEnG,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,sBAAsB;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,qBAAqB,EAAE,CACrB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAC9B,UAAU,EAAE,MAAM,KACf,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACnC,cAAc,EAAE,CACd,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,qCAAqC,EAAE,CACrC,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrC,qBAAqB,EAAE,OAAO,qBAAqB,CAAC;IACpD,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,WAAW,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,cAAc,CAAC,CAAC;CAC9B;AAeD,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,wBAAwB,CAAC;CACjC;AAED,qFAAqF;AACrF,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,0BAA0B,CAAC,CAoHrC"}

package/esm/src/rendering/orchestrator/module-loader/module-transform-cache.js

@@ -0,0 +1,97 @@
+/**
+ * Transform-cache and retry phase for the SSR module loader.
+ *
+ * @module rendering/orchestrator/module-loader/module-transform-cache
+ */
+import { rendererLogger } from "../../../utils/index.js";
+import { hashCodeHex } from "../../../utils/hash-utils.js";
+import { transformToESM } from "../../../transforms/esm-transform.js";
+import { generateCacheKey as generateTransformCacheKey, getOrComputeTransform, initializeTransformCache, setCachedTransformAsync, } from "../../../transforms/esm/transform-cache.js";
+import { validateCachedBundlesByManifestOrCode } from "../../../transforms/esm/cached-bundle-validation.js";
+import { getHttpBundleCacheDir } from "../../../utils/cache-dir.js";
+import { TRANSFORM_DISTRIBUTED_TTL_SEC } from "../../../utils/constants/cache.js";
+const logger = rendererLogger.component("module-loader");
+/** Pattern to detect unresolved /_vf_modules/ imports that will fail at runtime. */
+export const UNRESOLVED_VF_MODULES_RE = /from\s*["']((?:file:\/\/)?\/?\/?_vf_modules\/[^"']+)["']/;
+const defaultDeps = {
+    initializeTransformCache,
+    getOrComputeTransform,
+    transformToESM,
+    validateCachedBundlesByManifestOrCode,
+    getHttpBundleCacheDir,
+    setCachedTransformAsync,
+    runPipeline: async (code, filePath, projectDir, options) => {
+        const { runPipeline } = await import("../../../transforms/pipeline/index.js");
+        return await runPipeline(code, filePath, projectDir, options);
+    },
+};
+/** Transform module source through the shared cache and stale-cache retry checks. */
+export async function transformModuleCodeWithCache(input) {
+    const deps = input.deps ?? defaultDeps;
+    const ttlSeconds = input.ttlSeconds ?? TRANSFORM_DISTRIBUTED_TTL_SEC;
+    const contentHash = hashCodeHex(input.fileContent);
+    const scopedPath = `${input.effectiveProjectId}:${input.filePath}`;
+    const cacheKey = generateTransformCacheKey(scopedPath, contentHash, true);
+    const transformOptions = {
+        projectId: input.effectiveProjectId,
+        dev: input.mode === "development",
+        ssr: true,
+        reactVersion: input.reactVersion,
+    };
+    await deps.initializeTransformCache();
+    const transformResult = await deps.getOrComputeTransform(cacheKey, () => {
+        logger.debug("Transform cache miss, transforming", { filePath: input.filePath });
+        return deps.transformToESM(input.fileContent, input.filePath, input.projectDir, input.adapter, transformOptions);
+    }, ttlSeconds);
+    let transformedCode = transformResult.code;
+    if (transformResult.cacheHit) {
+        const validation = await deps.validateCachedBundlesByManifestOrCode(transformedCode, transformResult.bundleManifestId, deps.getHttpBundleCacheDir());
+        if (!validation.valid) {
+            logger.warn("Cached HTTP bundle validation failed, re-transforming", {
+                filePath: input.filePath,
+                manifestId: transformResult.bundleManifestId?.slice(0, 12),
+                failedHashes: validation.failedHashes,
+                reason: validation.reason,
+                source: validation.source,
+            });
+            transformedCode = await deps.transformToESM(input.fileContent, input.filePath, input.projectDir, input.adapter, transformOptions);
+            deps.setCachedTransformAsync(cacheKey, transformedCode, contentHash, ttlSeconds).catch((error) => {
+                logger.debug("Failed to update transform cache after re-transform", {
+                    filePath: input.filePath,
+                    error,
+                });
+            });
+        }
+    }
+    // CRITICAL: Validate that no unresolved /_vf_modules/ imports remain after transform.
+    // These imports should have been resolved to file:// paths by ssrVfModulesPlugin.
+    // If they're still present, retry the transform bypassing all caches.
+    if (UNRESOLVED_VF_MODULES_RE.test(transformedCode)) {
+        const match = transformedCode.match(UNRESOLVED_VF_MODULES_RE);
+        const unresolvedImport = match?.[1] || "unknown";
+        logger.warn("[ModuleLoader] Transform has unresolved _vf_modules import, retrying without cache", {
+            filePath: input.filePath.slice(-60),
+            unresolvedImport: unresolvedImport.slice(0, 80),
+            cacheHit: transformResult.cacheHit,
+        });
+        const pipelineResult = await deps.runPipeline(input.fileContent, input.filePath, input.projectDir, transformOptions);
+        transformedCode = pipelineResult.code;
+        if (UNRESOLVED_VF_MODULES_RE.test(transformedCode)) {
+            const retryMatch = transformedCode.match(UNRESOLVED_VF_MODULES_RE);
+            logger.error("Transform still has unresolved _vf_modules after retry", {
+                filePath: input.filePath.slice(-60),
+                unresolvedImport: retryMatch?.[1]?.slice(0, 80) || "unknown",
+                hint: "Check that framework sources exist in dist/framework-src/ and ssrVfModulesPlugin is running",
+            });
+        }
+        else {
+            deps.setCachedTransformAsync(cacheKey, transformedCode, hashCodeHex(transformedCode).slice(0, 16), ttlSeconds).catch((error) => {
+                logger.debug("Failed to update cache after retry", {
+                    filePath: input.filePath,
+                    error,
+                });
+            });
+        }
+    }
+    return { code: transformedCode, cacheKey, contentHash };
+}

package/esm/src/routing/api/handler.d.ts

@@ -4,6 +4,7 @@ import { type APIContext } from "./context-builder.js";
 import type { APIRoute } from "./module-loader/types.js";
 import { loadHandlerModule } from "./module-loader/loader.js";
 import { discoverAppRoutes, discoverPagesRoutes } from "./route-discovery.js";
+import type { HandlerContext } from "../../types/index.js";
 export type { APIContext, APIRoute };
 /**
  * Injection interface for testing APIRouteHandler dependencies
@@ -40,7 +41,7 @@ export declare class APIRouteHandler {
     private configPromise;
     constructor(projectDir: string, adapter?: RuntimeAdapter);
     initialize(): Promise<void>;
-    handle(request: Request): Promise<Response | null>;
+    handle(request: Request, ctx?: HandlerContext): Promise<Response | null>;
     private loadHandler;
     clearCache(): void;
     destroy(): void;

package/esm/src/routing/api/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/src/routing/api/handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAMlD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAO9E,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAErC;;GAEG;AACH,UAAU,mBAAmB;IAC3B,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC7C,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACjD,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC7C,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;CAC9B;AAID;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAE3E;AAWD,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;AAE3E,qBAAa,eAAe;IAgBxB,OAAO,CAAC,UAAU;IAfpB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,UAAU,CAA6E;IAC/F,OAAO,CAAC,gBAAgB,CAAuB;IAE/C,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,cAAc,CAAwC;IAE9D,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,iBAAiB,CAA8B;IAEvD,OAAO,CAAC,MAAM,CAAsD;IACpE,OAAO,CAAC,aAAa,CAA8B;gBAGzC,UAAU,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,cAAc;IAM1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD3B,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAyFlD,OAAO,CAAC,WAAW;IAuCnB,UAAU,IAAI,IAAI;IAKlB,OAAO,IAAI,IAAI;YAKD,aAAa;YAsBb,gBAAgB;YAOhB,cAAc;YAcd,YAAY;YAOZ,cAAc;CAW7B;AAED,OAAO,EACL,UAAU,EACV,SAAS,EACT,mBAAmB,IAAI,WAAW,EAClC,YAAY,IAAI,IAAI,EACpB,QAAQ,EACR,gBAAgB,IAAI,QAAQ,EAC5B,YAAY,GACb,MAAM,yCAAyC,CAAC"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/src/routing/api/handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAMlD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAErC;;GAEG;AACH,UAAU,mBAAmB;IAC3B,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC7C,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACjD,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC7C,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;CAC9B;AAID;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAE3E;AAWD,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;AAE3E,qBAAa,eAAe;IAgBxB,OAAO,CAAC,UAAU;IAfpB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,UAAU,CAA6E;IAC/F,OAAO,CAAC,gBAAgB,CAAuB;IAE/C,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,cAAc,CAAwC;IAE9D,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,iBAAiB,CAA8B;IAEvD,OAAO,CAAC,MAAM,CAAsD;IACpE,OAAO,CAAC,aAAa,CAA8B;gBAGzC,UAAU,EAAE,MAAM,EAC1B,OAAO,CAAC,EAAE,cAAc;IAM1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAgD3B,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA0FxE,OAAO,CAAC,WAAW;IAuCnB,UAAU,IAAI,IAAI;IAKlB,OAAO,IAAI,IAAI;YAKD,aAAa;YAsBb,gBAAgB;YAOhB,cAAc;YAcd,YAAY;YAOZ,cAAc;CAW7B;AAED,OAAO,EACL,UAAU,EACV,SAAS,EACT,mBAAmB,IAAI,WAAW,EAClC,YAAY,IAAI,IAAI,EACpB,QAAQ,EACR,gBAAgB,IAAI,QAAQ,EAC5B,YAAY,GACb,MAAM,yCAAyC,CAAC"}

package/esm/src/routing/api/handler.js

@@ -79,7 +79,7 @@ export class APIRouteHandler {
             logger.debug("Route handler initialized");
         }, { "api.projectDir": this.projectDir });
     }
-    handle(request) {
+    handle(request, ctx) {
         const { pathname } = new URL(request.url);
         return withSpan("api.handle", async () => {
             const adapter = await this.ensureAdapter();
@@ -132,6 +132,7 @@ export class APIRouteHandler {
             const isolationOptions = {
                 modulePath: match.route.page,
                 projectDir: this.projectDir,
+                isLocalProject: ctx?.isLocalProject,
             };
             const response = isAppRoute
                 ? await executeAppRoute(handler, request, match, pathname, adapter, isolationOptions)

package/esm/src/routing/api/route-executor.d.ts

@@ -1,11 +1,14 @@
 import type { RuntimeAdapter } from "../../platform/adapters/base.js";
 import type { RouteMatch } from "./api-route-matcher.js";
 import type { APIRoute } from "./module-loader/types.js";
+export declare function __resetInProcessIsolationWarningForTests(): void;
 export interface ExecuteRouteOptions {
     /** Absolute path to the handler module on disk (for isolated execution) */
     modulePath?: string;
     /** Project directory (for isolated execution scope) */
     projectDir?: string;
+    /** Whether the handler module belongs to a trusted local development project. */
+    isLocalProject?: boolean;
 }
 export declare function executeAppRoute(handler: APIRoute, request: Request, match: RouteMatch, pathname: string, adapter: RuntimeAdapter, options?: ExecuteRouteOptions): Promise<Response>;
 export declare function executePagesRoute(handler: APIRoute, request: Request, match: RouteMatch, pathname: string, adapter: RuntimeAdapter, projectDir?: string, options?: ExecuteRouteOptions): Promise<Response>;

package/esm/src/routing/api/route-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-executor.d.ts","sourceRoot":"","sources":["../../../../src/src/routing/api/route-executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAqB,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EACV,QAAQ,EAKT,MAAM,0BAA0B,CAAC;AA0UlC,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,QAAQ,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA6CnB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,QAAQ,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAuCnB"}
+{"version":3,"file":"route-executor.d.ts","sourceRoot":"","sources":["../../../../src/src/routing/api/route-executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAqB,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,KAAK,EACV,QAAQ,EAKT,MAAM,0BAA0B,CAAC;AAoJlC,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D;AAqND,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,QAAQ,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA8CnB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,QAAQ,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAwCnB"}

package/esm/src/routing/api/route-executor.js

@@ -106,6 +106,32 @@ function checkContentLengthLimit(request) {
         });
     }
 }
+let warnedUntrustedInProcessExecution = false;
+export function __resetInProcessIsolationWarningForTests() {
+    warnedUntrustedInProcessExecution = false;
+}
+function warnIfUntrustedInProcessExecution(routeKind, pathname, options) {
+    if (options?.isLocalProject !== false)
+        return;
+    if (isWorkerIsolationEnabled())
+        return;
+    if (warnedUntrustedInProcessExecution)
+        return;
+    warnedUntrustedInProcessExecution = true;
+    try {
+        logger.warn("Untrusted project code is executing in-process with worker isolation disabled. Enable WORKER_ISOLATION_ENABLED=1 and WORKER_ISOLATION_API=1 to run project routes in a permission-restricted worker.", {
+            modulePath: options.modulePath,
+            pathname,
+            projectDir: options.projectDir,
+            requiredEnv: ["WORKER_ISOLATION_ENABLED", "WORKER_ISOLATION_API"],
+            routeKind,
+            workerIsolationEnabled: false,
+        });
+    }
+    catch {
+        // A diagnostic warning must not prevent the API route from running.
+    }
+}
 async function readBodyWithSizeGuard(request) {
     if (!request.body)
         return null;
@@ -237,6 +263,7 @@ export function executeAppRoute(handler, request, match, pathname, adapter, opti
         return executeAppRouteIsolated(options.modulePath, request, match, pathname, adapter, options.projectDir);
     }
     // Default path: execute in main process (existing behavior)
+    warnIfUntrustedInProcessExecution("app", pathname, options);
     const method = request.method.toUpperCase();
     return withSpan("api.executeAppRoute", async () => {
         const handlerModule = handler;
@@ -266,6 +293,7 @@ export function executePagesRoute(handler, request, match, pathname, adapter, pr
         return executePagesRouteIsolated(options.modulePath, request, match, pathname, adapter, options.projectDir ?? projectDir);
     }
     // Default path: execute in main process (existing behavior)
+    warnIfUntrustedInProcessExecution("pages", pathname, options);
     const method = request.method;
     return withSpan("api.executePagesRoute", async () => {
         const methodHandler = handler[method] ?? handler.default;

package/esm/src/runtime/runtime-bridge.js

@@ -271,7 +271,7 @@ export function generateText(options) {
     return resolveDirectTools(options.tools).then((tools) => options.model.doGenerate({
         prompt: toRuntimePrompt(normalizeSystemPrompt(options.system), options.messages),
         maxOutputTokens: options.maxOutputTokens,
-        temperature: options.temperature,
+        ...(options.temperature === undefined ? {} : { temperature: options.temperature }),
         topP: options.topP,
         topK: options.topK,
         stopSequences: options.stopSequences,
@@ -293,7 +293,7 @@ export function streamText(options) {
     const directResultPromise = resolveDirectTools(options.tools).then((tools) => options.model.doStream({
         prompt: toRuntimePrompt(normalizeSystemPrompt(options.system), options.messages),
         maxOutputTokens: options.maxOutputTokens,
-        temperature: options.temperature,
+        ...(options.temperature === undefined ? {} : { temperature: options.temperature }),
         topP: options.topP,
         topK: options.topK,
         stopSequences: options.stopSequences,

package/esm/src/security/http/base-handler.d.ts

@@ -1,8 +1,9 @@
 import type { Handler, HandlerContext, HandlerMetadata, HandlerResult } from "../../types/index.js";
+import type { WebSocketUpgradeResponse } from "../../platform/adapters/base.js";
 import { ResponseBuilder } from "./response/index.js";
 export interface HandlerHelpers {
     createResponseBuilder: (ctx: HandlerContext, nonce?: string) => ResponseBuilder;
-    respond: (response: Response, metadata?: Record<string, unknown>) => HandlerResult;
+    respond: (response: Response | WebSocketUpgradeResponse, metadata?: Record<string, unknown>) => HandlerResult;
     logDebug: (message: string, extra?: Record<string, unknown>, ctx?: HandlerContext) => void;
     getErrorMessage: (error: unknown) => string;
     continue: () => HandlerResult;
@@ -19,7 +20,7 @@ export declare abstract class BaseHandler implements Handler {
     protected logInfo(message: string, extra?: Record<string, unknown>, _ctx?: HandlerContext): void;
     protected getErrorMessage(error: unknown): string;
     protected continue(): HandlerResult;
-    protected respond(response: Response, metadata?: Record<string, unknown>): HandlerResult;
+    protected respond(response: Response | WebSocketUpgradeResponse, metadata?: Record<string, unknown>): HandlerResult;
     protected withProxyContext<T>(ctx: HandlerContext, fn: () => Promise<T>, options?: {
         requireToken?: boolean;
     }): Promise<T>;