refactor(runtime): reduce surface to a mechanism-only dev-loader contract

The runtime explicitly does not implement HMR policy. import.meta.hot, the
hot-data/accept/dispose/prune registries, and dev-session state move to the
JS HMR clients (eg, @nativescript/vite); native keeps only the sync HTTP
module fetch, prewarm cache + list-mode kickstart, eviction plumbing, and
the dev-boot-complete signal. Dev helpers are consolidated under __NS_DEV__.

Also fixes dynamic import() error propagation: with top-level-await enabled,
Module::Evaluate() returns a promise instead of an empty MaybeLocal on throw,
so the previous empty-check never fired and import() resolved a
half-evaluated namespace, silently swallowing module evaluation errors. The
callback now checks Module::GetStatus() for kErrored (HTTP, blob, and
generic paths) and rejects with the module's real exception, matching iOS.
Removes the httpModulePrefetch app-config flag and speculative prefetching;
list-mode kickstart remains.

Author: NathanWalker

test-app/app/src/main/assets/app/mainpage.js

@@ -77,6 +77,6 @@ require('./tests/testQueueMicrotask');
 require("./tests/testConcurrentAccess");
 
 require("./tests/testESModules.mjs");
-require("./tests/testHmrHotDataExt.mjs");
+require("./tests/testNsDevBoundary.mjs");
 require("./tests/testHttpCanonicalKey.mjs");
 require("./tests/testNodeBuiltinsAndOptionalModules.mjs");

test-app/app/src/main/assets/app/tests/esm/hmr/hot-data-ext.js

@@ -0,0 +1,5 @@
+// Fixture for testNsDevBoundary: reports whether the runtime attached a
+// native `import.meta.hot` (it must NOT — hot contexts are injected by the
+// JS dev client via source rewrite, never by the runtime).
+export const hasHot = typeof import.meta.hot !== "undefined";
+export const hotValue = import.meta.hot;

test-app/app/src/main/assets/app/tests/esm/hmr/hot-data-ext.mjs

@@ -1,52 +1,77 @@
 // HTTP canonical-key identity tests.
 //
 // Pins the behavior of the native CanonicalizeHttpUrlKey (the loader/registry
-// key) via the debug-only __nsCanonicalizeHttpUrlKey diagnostic global. Pure
-// string logic — no dev server required. Android does NOT collapse the
-// __ns_boot__/__ns_hmr__ virtual prefixes here (that is canonicalHotKey's job),
-// which these specs assert explicitly.
+// key) via the debug-only __NS_DEV__.canonicalizeHttpUrlKey diagnostic. Pure
+// string logic — no dev server required.
+//
+// Module identity IS the canonical URL: the dev server serves every module
+// under one URL and freshness is handled by __NS_DEV__.invalidateModules
+// (registry + prewarm-cache evict + fetch nonce), never by URL variation.
+// There is deliberately no path-tag vocabulary (__ns_boot__/__ns_hmr__)
+// to collapse, and no versioned-bridge-endpoint normalization.
 
 describe("HTTP canonical key", function () {
+    function canonFn() {
+        const dev = globalThis.__NS_DEV__;
+        return dev && typeof dev.canonicalizeHttpUrlKey === "function"
+            ? dev.canonicalizeHttpUrlKey
+            : null;
+    }
     function canon(url) {
-        return globalThis.__nsCanonicalizeHttpUrlKey(url);
+        return canonFn()(url);
     }
 
     it("is available in dev builds", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") {
-            pending("__nsCanonicalizeHttpUrlKey not available (release build?)");
+        if (!canonFn()) {
+            pending("__NS_DEV__.canonicalizeHttpUrlKey not available (release build?)");
             return;
         }
-        expect(typeof globalThis.__nsCanonicalizeHttpUrlKey).toBe("function");
+        expect(typeof canonFn()).toBe("function");
     });
 
     it("drops the fragment and unwraps file://http wrappers", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") { pending("release"); return; }
+        if (!canonFn()) { pending("release"); return; }
         expect(canon("http://h/ns/m/foo.js#frag")).toBe("http://h/ns/m/foo.js");
         expect(canon("file://http://h/x.js")).toBe("http://h/x.js");
     });
 
-    it("normalizes versioned bridge endpoints but not deeper paths", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") { pending("release"); return; }
-        expect(canon("http://h/ns/rt/42")).toBe("http://h/ns/rt");
-        expect(canon("http://h/ns/core/13")).toBe("http://h/ns/core");
+    it("does NOT collapse versioned endpoint paths or path tags", function () {
+        if (!canonFn()) { pending("release"); return; }
+        // Path is identity — no /ns/rt/<v> → /ns/rt collapse, no
+        // __ns_hmr__/__ns_boot__ tag folding.
+        expect(canon("http://h/ns/rt/42")).toBe("http://h/ns/rt/42");
         expect(canon("http://h/ns/rt/42/x.js")).toBe("http://h/ns/rt/42/x.js");
-    });
-
-    it("does NOT collapse __ns_hmr__/__ns_boot__ prefixes (Android loader key)", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") { pending("release"); return; }
         expect(canon("http://h/ns/m/__ns_hmr__/v7/foo.js"))
             .toBe("http://h/ns/m/__ns_hmr__/v7/foo.js");
     });
 
-    it("strips ?import and sorts remaining query params", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") { pending("release"); return; }
-        expect(canon("http://h/a?import=1&b=2&a=3")).toBe("http://h/a?a=3&b=2");
-        expect(canon("http://h/a?b=2&a=1")).toBe("http://h/a?a=1&b=2");
+    it("strips import/t/v markers and sorts remaining params on dev endpoints", function () {
+        if (!canonFn()) { pending("release"); return; }
+        expect(canon("http://h/ns/m/a?import=1&b=2&a=3")).toBe("http://h/ns/m/a?a=3&b=2");
+        expect(canon("http://h/ns/m/a?b=2&a=1")).toBe("http://h/ns/m/a?a=1&b=2");
         expect(canon("http://h/ns/core?import=1")).toBe("http://h/ns/core");
+        expect(canon("http://h/ns/m/a?t=123&v=abc&x=1")).toBe("http://h/ns/m/a?x=1");
+    });
+
+    it("preserves the query verbatim on non-dev endpoints", function () {
+        if (!canonFn()) { pending("release"); return; }
+        // Public-internet module URLs: the query can be part of identity
+        // (auth, content versioning, routing) — only the fragment is dropped.
+        expect(canon("http://h/a?import=1&b=2&a=3")).toBe("http://h/a?import=1&b=2&a=3");
+        expect(canon("https://cdn.example.com/pkg.js?token=x#frag"))
+            .toBe("https://cdn.example.com/pkg.js?token=x");
+    });
+
+    it("preserves the t param on @ng/component endpoints", function () {
+        if (!canonFn()) { pending("release"); return; }
+        // Angular HMR component-update endpoint: `t` identifies a specific
+        // recompile and must remain a distinct registry entry.
+        expect(canon("http://h/ns/m/app/@ng/component?c=x&t=111"))
+            .toBe("http://h/ns/m/app/@ng/component?c=x&t=111");
     });
 
     it("leaves a non-http(s) specifier unchanged", function () {
-        if (typeof globalThis.__nsCanonicalizeHttpUrlKey !== "function") { pending("release"); return; }
+        if (!canonFn()) { pending("release"); return; }
         expect(canon("~/local/foo.js")).toBe("~/local/foo.js");
     });
 });

test-app/app/src/main/assets/app/tests/esm/meta-no-hot.mjs

@@ -1,4 +1,4 @@
-// Tests the resolver paths added in the HMR/ESM hardening port:
+// Tests the ESM resolver's synthetic-module paths:
 // - node: built-in polyfills (in-memory ES modules)
 // - bare-specifier optional-module placeholders
 // - ns-vendor:// vendor-registry resolution via configureRuntime importMap
@@ -46,9 +46,10 @@ describe("Node built-in and optional module resolution", function () {
   });
 
   it("resolves import-map vendor modules through the explicit vendor registry", async function () {
-    const configureRuntime = globalThis.__nsConfigureDevRuntime || globalThis.__nsConfigureRuntime;
+    const dev = globalThis.__NS_DEV__;
+    const configureRuntime = dev && dev.configureRuntime;
     if (typeof configureRuntime !== "function") {
-      pending("__nsConfigureDevRuntime not available (release build?)");
+      pending("__NS_DEV__.configureRuntime not available");
       return;
     }