fix(sveltekit): production server crash from bundled TypeScript compiler (#2799)

* fix(sveltekit): patch server chunks with rollup-renamed __filename bindings

The adapter-node chunk patch skipped any chunk matching
/\b(const|let|var)\s+__(file|dir)name\b/ — but $ is not a regex word
character, so rollup-renamed declarations like `__filename$1` (produced
when adapter-node re-bundles the intermediate server output and our
banner's declaration collides) satisfied the check. Chunks that declared
only a renamed binding while a bundled CJS dependency referenced the
bare `__filename` were skipped, and the production server crashed at
boot (observed on main with the TypeScript compiler bundled via
cosmiconfig through @workflow/world-postgres).

Anchor both regexes with (?![\w$]) so renamed identifiers no longer
match. Verified: the sveltekit workbench production server now boots and
serves health checks (with and without a base path), and queue
deliveries from start() succeed.

Signed-off-by: Nathan Colosimo <110621881+NathanColosimo@users.noreply.github.com>

* fix(sveltekit): keep the TypeScript compiler out of the server bundle

Since the world-target injection change, the sveltekit workbench's
hooks.server.ts imports @workflow/world-postgres, whose dependency chain
(graphile-worker -> cosmiconfig) reaches cosmiconfig's TS-config loader.
At runtime that loader's require('typescript') is lazy and never fires,
but SvelteKit bundles the whole chain into the server and rollup's CJS
conversion hoists it into an eager top-level evaluation — executing the
entire TypeScript compiler at boot and crashing the server
("__filename is not defined" inside the bundled compiler).

Alias 'typescript' to a stub module in the SvelteKit plugin, following
the existing pg-native pattern. Server output shrinks from 36MB to 11MB
and boots cleanly.

Verified: sveltekit workbench production build boots, serves
flow?__health (200), and start() runs execute with clean queue
deliveries. The chunk-patch regex fix from the previous commit stays as
hardening for any other CJS dependency that references __filename.

Signed-off-by: Nathan Colosimo <110621881+NathanColosimo@users.noreply.github.com>

* Update .changeset/fix-sveltekit-filename-chunk-patch.md

Signed-off-by: Peter Wielander <mittgfu@gmail.com>

---------

Signed-off-by: Nathan Colosimo <110621881+NathanColosimo@users.noreply.github.com>
Signed-off-by: Peter Wielander <mittgfu@gmail.com>
Co-authored-by: Peter Wielander <mittgfu@gmail.com>

Author: NathanColosimo

.changeset/fix-sveltekit-filename-chunk-patch.md

@@ -0,0 +1,6 @@
+---
+"@workflow/sveltekit": patch
+"@workflow/builders": patch
+---
+
+Fix SvelteKit production server crash at boot if a world package pulls cosmiconfig into the server bundle.

packages/builders/src/index.ts

@@ -33,6 +33,7 @@ export {
 } from './node-compat-banner.js';
 export { createNodeModuleErrorPlugin } from './node-module-esbuild-plugin.js';
 export { WORKFLOW_OPTIONAL_PG_NATIVE_ALIAS } from './optional-pg-native-alias.js';
+export { WORKFLOW_OPTIONAL_TYPESCRIPT_ALIAS } from './optional-typescript-alias.js';
 export {
   createPseudoPackagePlugin,
   PSEUDO_PACKAGES,

packages/builders/src/optional-typescript-alias.ts

@@ -0,0 +1,5 @@
+import { fileURLToPath } from 'node:url';
+
+export const WORKFLOW_OPTIONAL_TYPESCRIPT_ALIAS = fileURLToPath(
+  new URL('./optional-typescript.js', import.meta.url)
+);

packages/builders/src/optional-typescript.ts

@@ -0,0 +1,9 @@
+// Stub aliased in place of the `typescript` package in framework server
+// bundles. It is only reachable through cosmiconfig's TS-config loader
+// (via world packages -> graphile-worker), where `require('typescript')`
+// is lazy and never fires at runtime — but bundling converts it into an
+// eager top-level evaluation, pulling the entire compiler into the server
+// output and executing it at boot.
+const typescript = {};
+
+export default typescript;

packages/sveltekit/src/plugin.ts

@@ -7,6 +7,7 @@ import {
   WORKFLOW_NODE_COMPAT_BANNER,
   WORKFLOW_NODE_FILENAME_BANNER,
   WORKFLOW_OPTIONAL_PG_NATIVE_ALIAS,
+  WORKFLOW_OPTIONAL_TYPESCRIPT_ALIAS,
   WORKFLOW_WORLD_TARGET_MODULE,
 } from '@workflow/builders';
 import { workflowTransformPlugin } from '@workflow/rollup';
@@ -48,6 +49,7 @@ export function workflowPlugin(options: WorkflowPluginOptions = {}): Plugin[] {
             alias: {
               [WORKFLOW_WORLD_TARGET_MODULE]: workflowTargetWorldAlias,
               'pg-native': WORKFLOW_OPTIONAL_PG_NATIVE_ALIAS,
+              typescript: WORKFLOW_OPTIONAL_TYPESCRIPT_ALIAS,
             },
           },
         };
@@ -143,9 +145,19 @@ function patchAdapterNodeServerChunks(cwd: string): void {
       // that already declares either identifier (const/let/var, e.g. a
       // CJS-interop shim) would produce a duplicate top-level declaration
       // and crash the server with a SyntaxError at startup.
-      const referencesFilename = /\b__(?:file|dir)name\b/.test(source);
+      //
+      // The `(?![\w$])` lookaheads matter: when adapter-node re-bundles the
+      // intermediate output, rollup renames colliding declarations to e.g.
+      // `__filename$1`. A bare `\b` boundary matches those ($ is not a word
+      // character), which made this skip chunks that declare only a RENAMED
+      // binding while still referencing the bare `__filename` (observed with
+      // the bundled `typescript` compiler pulled in via cosmiconfig — the
+      // server crashed at boot with "__filename is not defined").
+      const referencesFilename = /(?<![\w$])__(?:file|dir)name(?![\w$])/.test(
+        source
+      );
       const declaresOwnBinding =
-        /\b(?:const|let|var)\s+__(?:file|dir)name\b/.test(source);
+        /\b(?:const|let|var)\s+__(?:file|dir)name(?![\w$])/.test(source);
       if (!referencesFilename || declaresOwnBinding) {
         continue;
       }