fix(bun): package project Node-API addon paths

changelog.d/9632-bun-project-node-addons.md

@@ -0,0 +1,12 @@
+### Bun compatibility
+
+- **Root/project Node-API addons loaded through `import.meta.require` now ship
+  and run after a Bun extraction tree is removed.** Declare each file by its
+  exact project-relative path, for example
+  `"perry": { "nativeAddonPaths": ["native/addon.node"] }`. Perry follows
+  immutable aliases and simple path constants, including
+  `new URL("./native/addon.node", import.meta.url).pathname`, and maps relative,
+  absolute, and `/$bunfs/root/` spellings to the same authenticated sidecar
+  entry. Dynamic or otherwise unprovable paths fail compilation with guidance
+  instead of producing a binary that depends on the build machine's source
+  tree.

crates/perry/Cargo.toml

@@ -21,7 +21,10 @@ path = "src/main.rs"
 
 [dependencies]
 perry-parser.workspace = true
+swc_common.workspace = true
 swc_ecma_ast.workspace = true
+swc_ecma_transforms_base.workspace = true
+swc_ecma_visit.workspace = true
 perry-hir.workspace = true
 perry-transform.workspace = true
 perry-codegen.workspace = true
@@ -172,7 +175,6 @@ all-codegen-backends = [
 
 [dev-dependencies]
 tempfile.workspace = true
-swc_common.workspace = true
 
 [build-dependencies]
 winresource = "0.1.31"

crates/perry/src/commands/compile/collect_modules.rs

@@ -36,6 +36,7 @@ mod dynamic_glob;
 mod eval_worker;
 mod feature_detect;
 mod import_helpers;
+mod import_meta_require;
 mod json_module;
 mod native_addon;
 mod parse_error;
@@ -56,6 +57,7 @@ use import_helpers::{
     cached_resolve_import_with_lexical_base, collect_js_module_imports,
     ensure_bunfs_import_resolves, env_defines_for_lowering,
 };
+use import_meta_require::rewrite_import_meta_require_addons;
 use json_module::synthesize_json_module;
 pub(super) use native_addon::package_has_unsupported_node_addon;
 use native_addon::{collect_or_refuse_node_addon, refuse_compile_package_native_addon};
@@ -338,6 +340,13 @@ fn collect_module_one(
         fs::read_to_string(&canonical)
             .map_err(|e| anyhow!("Failed to read {}: {}", canonical.display(), e))?
     };
+    // Bun exposes `import.meta.require`; unlike CommonJS `require`, aliases of
+    // that function and URL-derived addon paths are invisible to the ordinary
+    // static-require scan. Recover and rewrite exact Node-API loads before HIR
+    // lowering so runtime execution uses only the authenticated sidecar id.
+    // Run before the Bun virtual-literal asset scan so a `.node` call target
+    // ships once in the sidecar rather than also being embedded as inert data.
+    let raw_source = rewrite_import_meta_require_addons(&raw_source, &canonical, ctx)?;
     register_bunfs_literal_assets(&raw_source, ctx);
     // CJS wrapping consumes literal `require()` sites and replaces them with
     // generated loader calls. Queue native targets before that rewrite so the