This might end up in a separate file/module
Adds a server-side component to allow for proper pathing and removes the need for meta.xml-ing every JS file, only the root one for a script.
Would use client/server events (via MessageChannel? possibly) then evals with CommonJS module spec workings in context. This would technically work like Webpack's loader in practice but 500% more complicated.
Other benefits:
- semi-impossible to exploit client-side scripts.
- this might be possible via side-channel attacks but..