Bundler support (POC)

[timokoessler]

Todos

• Add an agent mode during bundling that e.g. does not report to API
• Fix SCA reporting of dependencies
• Support bundlers
  • Esbuild
  • Rolldown
  • Vite (e.g. Nuxt, Astro, Remix ...)
  • Webpack (e.g. old Next.js)
  • Rollup
  • ...
• Sourcemaps?

Modes

Output format: Either CJS or ESM. For CJS we can also include Zen in the bundle, but not for ESM, as we need to preload it using --require.

Packages: External or not. If external, we can copy Zen to the output dir to make it easier for the dev to integrate.

Questions

• Do we want to inline wasm? Only an advantage for CJS (non external packages) output, as lib still needed for ESM.
• Check version agent that was used to bundle, check on runtime if the same version (otherwise error?)
• Do not start the agent in bundling mode?

[codecov]

Codecov Report

❌ Patch coverage is 72.97297% with 20 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
library/agent/Agent.ts	71.42%	10 Missing ⚠️
library/agent/protect.ts	37.50%	10 Missing ⚠️

📢 Thoughts on this report? Let us know!