@4399ywkf/core 5.1.6 → 5.3.1

package/dist/plugin/index.d.ts

@@ -1,5 +1,5 @@
-import { Q as YwkfPlugin, e as PluginHooks, Y as YwkfConfig, f as PluginConfig, U as RouteItem } from '../schema-Ba1qfYz_.js';
-export { y as BuildHooks, C as CodeInjection, V as DefinePlugin, F as GeneratedFile, G as GeneratorContext, J as GeneratorHooks, W as PluginAPI, K as PluginContext, X as PluginLogger, L as RouterHooks, N as RuntimeHooks } from '../schema-Ba1qfYz_.js';
+import { Q as YwkfPlugin, e as PluginHooks, Y as YwkfConfig, f as PluginConfig, U as RouteItem } from '../schema-Ade9gA3U.js';
+export { y as BuildHooks, C as CodeInjection, V as DefinePlugin, F as GeneratedFile, G as GeneratorContext, J as GeneratorHooks, W as PluginAPI, K as PluginContext, X as PluginLogger, L as RouterHooks, N as RuntimeHooks } from '../schema-Ade9gA3U.js';
 import { Configuration } from '@rspack/core';
 import { a as AppConfig, P as ProviderConfig } from '../types-ZJhd87ue.js';
 import 'react';

package/dist/rspack/index.d.ts

@@ -1,5 +1,5 @@
 import { Configuration } from '@rspack/core';
-import { Y as YwkfConfig } from '../schema-Ba1qfYz_.js';
+import { Y as YwkfConfig } from '../schema-Ade9gA3U.js';
 import '../types-ZJhd87ue.js';
 import 'react';
 import 'react-router';

package/dist/rspack/index.js

@@ -763,7 +763,7 @@ function scaffoldI18nRc(cwd, localesDir, defaultLocale, locales, logger) {
   const filePath = join3(cwd, ".i18nrc.js");
   if (existsSync3(filePath)) return;
   const outputLocales = locales.filter((l) => l !== defaultLocale).map((l) => `"${l}"`).join(", ");
-  const content = `const { defineConfig } = require("@lobehub/i18n-cli");
+  const content = `const { defineConfig } = require("@4399ywkf/i18n");
 
 module.exports = defineConfig({
   entry: "${localesDir}/${defaultLocale}",
@@ -773,7 +773,7 @@ module.exports = defineConfig({
 });
 `;
   writeFileSync2(filePath, content, "utf-8");
-  logger.info("\u5DF2\u751F\u6210\u7FFB\u8BD1\u914D\u7F6E: .i18nrc.js\uFF08@lobehub/i18n-cli\uFF09");
+  logger.info("\u5DF2\u751F\u6210\u7FFB\u8BD1\u914D\u7F6E: .i18nrc.js\uFF08\u9700\u5B89\u88C5 @4399ywkf/i18n\uFF09");
 }
 function scaffoldLocaleJsonDirs(cwd, localesDir, locales, defaultLocale, namespaces, logger) {
   const baseDir = join3(cwd, localesDir);
@@ -874,7 +874,7 @@ function createMockMiddleware(mockPath, options) {
   scanMockFiles(mockPath);
   return async (_req, _res, next) => {
     if (delay > 0) {
-      await new Promise((resolve3) => setTimeout(resolve3, delay));
+      await new Promise((resolve4) => setTimeout(resolve4, delay));
     }
     next();
   };
@@ -1828,11 +1828,11 @@ var zustandPlugin = createPlugin((options = {}) => ({
     const hooks = {
       modifyRspackConfig(rspackConfig) {
         logger.info("Zustand \u5DF2\u542F\u7528");
-        const resolve3 = rspackConfig.resolve || {};
-        const alias = resolve3.alias || {};
+        const resolve4 = rspackConfig.resolve || {};
+        const alias = resolve4.alias || {};
         alias["@store"] = storePath;
-        resolve3.alias = alias;
-        rspackConfig.resolve = resolve3;
+        resolve4.alias = alias;
+        rspackConfig.resolve = resolve4;
         return rspackConfig;
       },
       generateFiles(_ctx) {
@@ -3016,6 +3016,69 @@ var YwkfGeneratorPlugin = class {
   }
 };
 
+// src/rspack/client-env.ts
+import { existsSync as existsSync12, readFileSync as readFileSync4 } from "fs";
+import { resolve as resolve3 } from "path";
+import dotenv from "dotenv";
+var FRAMEWORK_ENV_KEYS = [
+  "APP_CNAME",
+  "APP_HOST",
+  "APP_MODE",
+  "APP_NAME",
+  "APP_PORT",
+  "DEBUG",
+  "NODE_ENV",
+  "OUTPUT_PATH",
+  "PUBLIC_PATH",
+  "YWKF_BUILD_ID",
+  "YWKF_PREFIX_CLS"
+];
+var DEFAULT_EXPOSE_PREFIXES = ["YWKF_PUBLIC_", "NEXT_PUBLIC_"];
+var SECRET_KEY_PATTERN = /TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL|PRIVATE|AUTH|ACCESS_KEY|API_KEY|SIGNING_KEY/i;
+var SECRET_VALUE_PATTERN = /^(sntry[su]_|sk-|ghp_|gho_|ghu_|ghs_|github_pat_|glpat-|xox[abprs]-|AKIA|ya29\.)/;
+function readEnvFileKeys(filePath) {
+  if (!existsSync12(filePath)) return [];
+  try {
+    return Object.keys(dotenv.parse(readFileSync4(filePath, "utf-8")));
+  } catch {
+    return [];
+  }
+}
+function collectClientEnvKeys(options) {
+  const { cwd, env = {}, mode = process.env.APP_MODE || "development" } = options;
+  const keys = new Set(FRAMEWORK_ENV_KEYS);
+  const files = [
+    env.publicEnvFile ?? "config/env/.env.public",
+    ".env.public",
+    ".env",
+    `${env.envDir ?? "config/env"}/.env.${mode}`,
+    `.env.${mode}`
+  ];
+  for (const file of files) {
+    for (const key of readEnvFileKeys(resolve3(cwd, file))) keys.add(key);
+  }
+  for (const key of env.expose ?? []) keys.add(key);
+  return keys;
+}
+function buildClientEnv(options) {
+  const { cwd, env = {}, mode, processEnv = process.env } = options;
+  const prefixes = env.exposePrefixes ?? DEFAULT_EXPOSE_PREFIXES;
+  const allowed = collectClientEnvKeys({ cwd, env, mode });
+  const result = {};
+  const dropped = [];
+  for (const [key, value] of Object.entries(processEnv)) {
+    if (value === void 0) continue;
+    const isAllowed = allowed.has(key) || prefixes.some((prefix) => key.startsWith(prefix));
+    if (!isAllowed) continue;
+    if (SECRET_KEY_PATTERN.test(key) || SECRET_VALUE_PATTERN.test(value)) {
+      dropped.push(key);
+      continue;
+    }
+    result[key] = value;
+  }
+  return { env: result, dropped };
+}
+
 // src/rspack/base.ts
 var require2 = createRequire(import.meta.url);
 var __dirname = dirname(fileURLToPath(import.meta.url));
@@ -3034,6 +3097,12 @@ function createBaseConfig(config, cwd, options = {}) {
   const { resolveApp } = createPathResolver(cwd);
   const { appName, appCName, output, html, alias: userAlias, microFrontend, router, reactCompiler } = config;
   const buildId = resolveYwkfBuildId(appName);
+  const { env: clientEnv, dropped: droppedEnvKeys } = buildClientEnv({ cwd, env: config.env });
+  if (droppedEnvKeys.length > 0) {
+    console.warn(
+      `[ywkf] \u4EE5\u4E0B\u73AF\u5883\u53D8\u91CF\u7591\u4F3C\u5BC6\u94A5,\u5DF2\u4ECE\u5BA2\u6237\u7AEF\u4EA7\u7269\u4E2D\u5254\u9664:${droppedEnvKeys.join(", ")}\u3002\u5982\u786E\u4E3A\u516C\u5F00\u914D\u7F6E,\u8BF7\u91CD\u547D\u540D\u6216\u8C03\u6574 env.expose\u3002`
+    );
+  }
   const ywkfOutputDir = resolveApp(".ywkf");
   const defaultAlias = {
     "@": resolveApp("src"),
@@ -3158,7 +3227,10 @@ function createBaseConfig(config, cwd, options = {}) {
       }),
       new rspack2.DefinePlugin({
         "globalThis.__YWKF_BUILD_ID__": JSON.stringify(buildId),
-        "process.env": JSON.stringify(process.env)
+        // 只内联白名单内的公开配置。整包 process.env 会把构建机环境(CI 凭据、内网地址)
+        // 写进公网可下载的产物,见 client-env.ts。外层括号不可省:该值以 `{` 开头,
+        // `() => process.env.X` 会被替换成 `() => {…}` 而当成函数块体,导致整条 chunk 语法失败。
+        "process.env": `(${JSON.stringify(clientEnv)})`
       }),
       new rspack2.HtmlRspackPlugin({
         template: resolveApp(html.template ?? "public/index.html"),