@aglyn/tenant-feature-instance 1.0.0-beta.143

package/src/lib/constants/firebase-config.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type FirebaseOptions } from 'firebase/app';
+export declare const RECAPTCHA_API_KEY: string;
+export declare const FIREBASE_CLIENT_APP_NAME = "DEFAULT_AGLYN";
+/**
+ * The App Check reCAPTCHA site key, or `null` when it is unset or blank
+ * (AGL-2049).
+ *
+ * ## Why a guard, when `new ReCaptchaV3Provider(undefined)` does not throw
+ *
+ * That is precisely the problem. It does not throw — it stores the value and
+ * returns, `initializeAppCheck` returns normally, and the SDK then requests
+ * `https://www.google.com/recaptcha/api.js?render=undefined`. The failure is
+ * ASYNCHRONOUS, so the `try/catch` both call sites wrap this in never sees it.
+ * What the operator gets is a provider registered against an app it can never
+ * mint a token for, plus console errors on every page, and nothing anywhere
+ * that says the key is missing.
+ *
+ * Two configurations reach it:
+ *
+ *  - **Self-host.** `.env.selfhost.example` ships the variable EMPTY, so the
+ *    documented self-host path lands here by default. AGL-2049 named this and
+ *    deliberately left it; this is that fix.
+ *  - **A misconfigured deployment.** On the `aglyn-tenant` Vercel project this
+ *    variable was misspelled `NEXT_PUBLIC_RECPATCHA_PUBLIC_KEY` for three
+ *    years and eleven months, so `RECAPTCHA_API_KEY` was `undefined` in every
+ *    tenant build ever made. Nothing in the repo read the misspelling, so no
+ *    lint rule, schema or review could have found it — and nothing at runtime
+ *    said so either, which is the part this changes.
+ *
+ * Skipping registration is strictly better than registering a broken one: an
+ * app with no App Check provider is a known, visible state (calls are
+ * unattested and enforcement refuses them with a clear code), whereas an app
+ * with a provider that cannot mint tokens looks configured and is not.
+ *
+ * ## Read at CALL time, not at module load
+ *
+ * `NEXT_PUBLIC_*` is inlined textually by webpack's DefinePlugin wherever the
+ * expression appears, so this is exactly as static in a production bundle as
+ * the module-level constant above. Reading it inside the function is what
+ * lets a test drive both directions — with a key and without — instead of
+ * asserting the guard exists and never running it.
+ */
+export declare function appCheckSiteKey(): string | null;
+/** The one message both call sites log, so a search finds either. */
+export declare const APP_CHECK_KEY_MISSING_MESSAGE: string;
+/**
+ * Firebase client-side configuration assembled directly from NEXT_PUBLIC_*
+ * environment variables so that Next.js webpack DefinePlugin substitutes
+ * them at build time and no intermediate constant indirection can carry a
+ * stale undefined value across a cached compilation.
+ */
+export declare const fbClientAppOptions: FirebaseOptions;

package/src/lib/constants/firebase-config.js

@@ -0,0 +1,155 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export const RECAPTCHA_API_KEY = process.env.NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY;
+export const FIREBASE_CLIENT_APP_NAME = 'DEFAULT_AGLYN';
+/**
+ * The App Check reCAPTCHA site key, or `null` when it is unset or blank
+ * (AGL-2049).
+ *
+ * ## Why a guard, when `new ReCaptchaV3Provider(undefined)` does not throw
+ *
+ * That is precisely the problem. It does not throw — it stores the value and
+ * returns, `initializeAppCheck` returns normally, and the SDK then requests
+ * `https://www.google.com/recaptcha/api.js?render=undefined`. The failure is
+ * ASYNCHRONOUS, so the `try/catch` both call sites wrap this in never sees it.
+ * What the operator gets is a provider registered against an app it can never
+ * mint a token for, plus console errors on every page, and nothing anywhere
+ * that says the key is missing.
+ *
+ * Two configurations reach it:
+ *
+ *  - **Self-host.** `.env.selfhost.example` ships the variable EMPTY, so the
+ *    documented self-host path lands here by default. AGL-2049 named this and
+ *    deliberately left it; this is that fix.
+ *  - **A misconfigured deployment.** On the `aglyn-tenant` Vercel project this
+ *    variable was misspelled `NEXT_PUBLIC_RECPATCHA_PUBLIC_KEY` for three
+ *    years and eleven months, so `RECAPTCHA_API_KEY` was `undefined` in every
+ *    tenant build ever made. Nothing in the repo read the misspelling, so no
+ *    lint rule, schema or review could have found it — and nothing at runtime
+ *    said so either, which is the part this changes.
+ *
+ * Skipping registration is strictly better than registering a broken one: an
+ * app with no App Check provider is a known, visible state (calls are
+ * unattested and enforcement refuses them with a clear code), whereas an app
+ * with a provider that cannot mint tokens looks configured and is not.
+ *
+ * ## Read at CALL time, not at module load
+ *
+ * `NEXT_PUBLIC_*` is inlined textually by webpack's DefinePlugin wherever the
+ * expression appears, so this is exactly as static in a production bundle as
+ * the module-level constant above. Reading it inside the function is what
+ * lets a test drive both directions — with a key and without — instead of
+ * asserting the guard exists and never running it.
+ */ export function appCheckSiteKey() {
+    var _process_env_NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY;
+    const key = String((_process_env_NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY = process.env.NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY) != null ? _process_env_NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY : '').trim();
+    // The literal string 'undefined' is included on purpose: an env var
+    // interpolated from an unset shell variable arrives that way, and it is the
+    // exact value the SDK would otherwise put in `?render=`.
+    return !key || key === 'undefined' ? null : key;
+}
+/** The one message both call sites log, so a search finds either. */ export const APP_CHECK_KEY_MISSING_MESSAGE = '[app-check] NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY is not set — App Check is ' + 'DISABLED for this app. Firebase client calls will be unattested, and ' + 'will be refused wherever App Check enforcement is on.';
+/**
+ * On deployed workspace hosts the OAuth handshake is funnelled through one
+ * dedicated same-site auth origin — `auth.<workspaceDomain>` (e.g.
+ * auth.aglyn.com), which reverse-proxies the Firebase auth helpers under
+ * /__/* (console next.config rewrite, AGL-462). This keeps the handshake
+ * same-site (all *.aglyn.com share the aglyn.com eTLD+1, so browser storage
+ * partitioning — which severed the cross-origin *.firebaseapp.com
+ * authDomain and broke mobile Google sign-in — never applies), while
+ * every host, including dynamically-provisioned {org}.aglyn.com
+ * workspaces, presents the SAME redirect URI. Google OAuth forbids
+ * wildcard redirect URIs, so a per-host authDomain would need a new
+ * registration per org; the single auth host needs exactly one.
+ *
+ * **The auth origin is a property of the DEPLOYMENT, not of the page you
+ * happen to be on** (AGL-1919). This used to gate on
+ * `window.location.hostname` being on the workspace domain, which meant
+ * localhost and every preview deployment silently fell back to
+ * `aglyn-main.firebaseapp.com` — and so Google's account chooser said
+ * "continue to aglyn-main.firebaseapp.com" for the entire local
+ * development loop. Google renders the redirect_uri's host, and the
+ * redirect_uri is `https://<authDomain>/__/auth/handler`. Preview was the
+ * sharper version of the same bug: it *has* NEXT_PUBLIC_FIREBASE_AUTH_
+ * HANDLER_HOST set and could not use it, because a `*.vercel.app`
+ * hostname fails the `endsWith` test.
+ *
+ * Widening it is safe precisely because nothing about the branded host is
+ * new: `auth.aglyn.com` already serves `/__/auth/*`, is already a Firebase
+ * authorized domain, and `https://auth.aglyn.com/__/auth/handler` is
+ * already a registered redirect URI on the production OAuth client
+ * (AGL-1486 probed all three). This only widens which page hosts use a
+ * handler that already works.
+ *
+ * The precedence deliberately MIRRORS `ssoServiceMetadata()` in
+ * `sso-provisioning.ts`, which documents it as load-bearing — the SAML ACS
+ * URL and the OAuth redirect URI have to name the same origin or the two
+ * halves of a flow land on different ones:
+ *
+ *   1. NEXT_PUBLIC_FIREBASE_AUTH_HANDLER_HOST — an explicit override wins.
+ *   2. `auth.<NEXT_PUBLIC_WORKSPACE_DOMAIN>` — derived only when the
+ *      variable is actually SET, never defaulted to `aglyn.com`: a
+ *      self-hosted install with neither variable would otherwise be
+ *      pointed at OUR auth origin.
+ *   3. NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN — the project's own
+ *      *.firebaseapp.com, for self-host installs that never stood up an
+ *      auth subdomain.
+ *
+ * The emulator keeps the configured domain outright: there is no branded
+ * host in front of a local Auth emulator.
+ */ function resolveFirebaseAuthDomain() {
+    const configured = process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN;
+    if (process.env['FIREBASE_AUTH_EMULATOR_ENABLED'] === 'true') {
+        return configured;
+    }
+    const workspaceDomain = process.env.NEXT_PUBLIC_WORKSPACE_DOMAIN;
+    // `||`, not `??`, and for the same reason `ssoServiceMetadata()` uses it:
+    // a variable declared-but-empty in a .env file (`NEXT_PUBLIC_FIREBASE_
+    // AUTH_HANDLER_HOST=`) is NOT an override — `??` would accept `''` and
+    // hand Firebase `https:///__/auth/handler`.
+    const branded = process.env.NEXT_PUBLIC_FIREBASE_AUTH_HANDLER_HOST || (workspaceDomain ? `auth.${workspaceDomain}` : '');
+    return branded || configured;
+}
+/**
+ * Firebase client-side configuration assembled directly from NEXT_PUBLIC_*
+ * environment variables so that Next.js webpack DefinePlugin substitutes
+ * them at build time and no intermediate constant indirection can carry a
+ * stale undefined value across a cached compilation.
+ */ export const fbClientAppOptions = {
+    apiKey: process.env.NEXT_PUBLIC_FIREBASE_PUBLIC_API_KEY,
+    authDomain: resolveFirebaseAuthDomain(),
+    databaseURL: process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL,
+    projectId: process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID,
+    storageBucket: process.env.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET,
+    messagingSenderId: process.env.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID,
+    appId: process.env.NEXT_PUBLIC_FIREBASE_APP_ID,
+    measurementId: process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID
+} // export let fbClientApp: FirebaseApp
+ //
+ // try {
+ //   fbClientApp = getApp(FIREBASE_CLIENT_APP_NAME)
+ // }
+ // catch {
+ //   fbClientApp = initializeApp(fbClientAppOptions, {
+ //     name: FIREBASE_CLIENT_APP_NAME,
+ //     automaticDataCollectionEnabled: true,
+ //   })
+ // }
+ //
+ // export default fbClientApp
+;
+
+//# sourceMappingURL=firebase-config.js.map

package/src/lib/constants/firebase-config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/constants/firebase-config.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { type FirebaseOptions } from 'firebase/app'\n\nexport const RECAPTCHA_API_KEY = process.env.NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY\nexport const FIREBASE_CLIENT_APP_NAME = 'DEFAULT_AGLYN'\n\n/**\n * The App Check reCAPTCHA site key, or `null` when it is unset or blank\n * (AGL-2049).\n *\n * ## Why a guard, when `new ReCaptchaV3Provider(undefined)` does not throw\n *\n * That is precisely the problem. It does not throw — it stores the value and\n * returns, `initializeAppCheck` returns normally, and the SDK then requests\n * `https://www.google.com/recaptcha/api.js?render=undefined`. The failure is\n * ASYNCHRONOUS, so the `try/catch` both call sites wrap this in never sees it.\n * What the operator gets is a provider registered against an app it can never\n * mint a token for, plus console errors on every page, and nothing anywhere\n * that says the key is missing.\n *\n * Two configurations reach it:\n *\n *  - **Self-host.** `.env.selfhost.example` ships the variable EMPTY, so the\n *    documented self-host path lands here by default. AGL-2049 named this and\n *    deliberately left it; this is that fix.\n *  - **A misconfigured deployment.** On the `aglyn-tenant` Vercel project this\n *    variable was misspelled `NEXT_PUBLIC_RECPATCHA_PUBLIC_KEY` for three\n *    years and eleven months, so `RECAPTCHA_API_KEY` was `undefined` in every\n *    tenant build ever made. Nothing in the repo read the misspelling, so no\n *    lint rule, schema or review could have found it — and nothing at runtime\n *    said so either, which is the part this changes.\n *\n * Skipping registration is strictly better than registering a broken one: an\n * app with no App Check provider is a known, visible state (calls are\n * unattested and enforcement refuses them with a clear code), whereas an app\n * with a provider that cannot mint tokens looks configured and is not.\n *\n * ## Read at CALL time, not at module load\n *\n * `NEXT_PUBLIC_*` is inlined textually by webpack's DefinePlugin wherever the\n * expression appears, so this is exactly as static in a production bundle as\n * the module-level constant above. Reading it inside the function is what\n * lets a test drive both directions — with a key and without — instead of\n * asserting the guard exists and never running it.\n */\nexport function appCheckSiteKey(): string | null {\n  const key = String(\n    process.env.NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY ?? '',\n  ).trim()\n  // The literal string 'undefined' is included on purpose: an env var\n  // interpolated from an unset shell variable arrives that way, and it is the\n  // exact value the SDK would otherwise put in `?render=`.\n  return !key || key === 'undefined' ? null : key\n}\n\n/** The one message both call sites log, so a search finds either. */\nexport const APP_CHECK_KEY_MISSING_MESSAGE =\n  '[app-check] NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY is not set — App Check is ' +\n  'DISABLED for this app. Firebase client calls will be unattested, and ' +\n  'will be refused wherever App Check enforcement is on.'\n\n/**\n * On deployed workspace hosts the OAuth handshake is funnelled through one\n * dedicated same-site auth origin — `auth.<workspaceDomain>` (e.g.\n * auth.aglyn.com), which reverse-proxies the Firebase auth helpers under\n * /__/* (console next.config rewrite, AGL-462). This keeps the handshake\n * same-site (all *.aglyn.com share the aglyn.com eTLD+1, so browser storage\n * partitioning — which severed the cross-origin *.firebaseapp.com\n * authDomain and broke mobile Google sign-in — never applies), while\n * every host, including dynamically-provisioned {org}.aglyn.com\n * workspaces, presents the SAME redirect URI. Google OAuth forbids\n * wildcard redirect URIs, so a per-host authDomain would need a new\n * registration per org; the single auth host needs exactly one.\n *\n * **The auth origin is a property of the DEPLOYMENT, not of the page you\n * happen to be on** (AGL-1919). This used to gate on\n * `window.location.hostname` being on the workspace domain, which meant\n * localhost and every preview deployment silently fell back to\n * `aglyn-main.firebaseapp.com` — and so Google's account chooser said\n * \"continue to aglyn-main.firebaseapp.com\" for the entire local\n * development loop. Google renders the redirect_uri's host, and the\n * redirect_uri is `https://<authDomain>/__/auth/handler`. Preview was the\n * sharper version of the same bug: it *has* NEXT_PUBLIC_FIREBASE_AUTH_\n * HANDLER_HOST set and could not use it, because a `*.vercel.app`\n * hostname fails the `endsWith` test.\n *\n * Widening it is safe precisely because nothing about the branded host is\n * new: `auth.aglyn.com` already serves `/__/auth/*`, is already a Firebase\n * authorized domain, and `https://auth.aglyn.com/__/auth/handler` is\n * already a registered redirect URI on the production OAuth client\n * (AGL-1486 probed all three). This only widens which page hosts use a\n * handler that already works.\n *\n * The precedence deliberately MIRRORS `ssoServiceMetadata()` in\n * `sso-provisioning.ts`, which documents it as load-bearing — the SAML ACS\n * URL and the OAuth redirect URI have to name the same origin or the two\n * halves of a flow land on different ones:\n *\n *   1. NEXT_PUBLIC_FIREBASE_AUTH_HANDLER_HOST — an explicit override wins.\n *   2. `auth.<NEXT_PUBLIC_WORKSPACE_DOMAIN>` — derived only when the\n *      variable is actually SET, never defaulted to `aglyn.com`: a\n *      self-hosted install with neither variable would otherwise be\n *      pointed at OUR auth origin.\n *   3. NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN — the project's own\n *      *.firebaseapp.com, for self-host installs that never stood up an\n *      auth subdomain.\n *\n * The emulator keeps the configured domain outright: there is no branded\n * host in front of a local Auth emulator.\n */\nfunction resolveFirebaseAuthDomain(): string | undefined {\n  const configured = process.env.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN\n  if (process.env['FIREBASE_AUTH_EMULATOR_ENABLED'] === 'true') {\n    return configured\n  }\n  const workspaceDomain = process.env.NEXT_PUBLIC_WORKSPACE_DOMAIN\n  // `||`, not `??`, and for the same reason `ssoServiceMetadata()` uses it:\n  // a variable declared-but-empty in a .env file (`NEXT_PUBLIC_FIREBASE_\n  // AUTH_HANDLER_HOST=`) is NOT an override — `??` would accept `''` and\n  // hand Firebase `https:///__/auth/handler`.\n  const branded =\n    process.env.NEXT_PUBLIC_FIREBASE_AUTH_HANDLER_HOST ||\n    (workspaceDomain ? `auth.${workspaceDomain}` : '')\n  return branded || configured\n}\n\n/**\n * Firebase client-side configuration assembled directly from NEXT_PUBLIC_*\n * environment variables so that Next.js webpack DefinePlugin substitutes\n * them at build time and no intermediate constant indirection can carry a\n * stale undefined value across a cached compilation.\n */\nexport const fbClientAppOptions: FirebaseOptions = {\n  apiKey: process.env.NEXT_PUBLIC_FIREBASE_PUBLIC_API_KEY,\n  authDomain: resolveFirebaseAuthDomain(),\n  databaseURL: process.env.NEXT_PUBLIC_FIREBASE_DATABASE_URL,\n  projectId: process.env.NEXT_PUBLIC_FIREBASE_PROJECT_ID,\n  storageBucket: process.env.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET,\n  messagingSenderId: process.env.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID,\n  appId: process.env.NEXT_PUBLIC_FIREBASE_APP_ID,\n  measurementId: process.env.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID,\n}\n\n// export let fbClientApp: FirebaseApp\n//\n// try {\n//   fbClientApp = getApp(FIREBASE_CLIENT_APP_NAME)\n// }\n// catch {\n//   fbClientApp = initializeApp(fbClientAppOptions, {\n//     name: FIREBASE_CLIENT_APP_NAME,\n//     automaticDataCollectionEnabled: true,\n//   })\n// }\n//\n// export default fbClientApp\n"],"names":["RECAPTCHA_API_KEY","process","env","NEXT_PUBLIC_RECAPTCHA_PUBLIC_KEY","FIREBASE_CLIENT_APP_NAME","appCheckSiteKey","key","String","trim","APP_CHECK_KEY_MISSING_MESSAGE","resolveFirebaseAuthDomain","configured","NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN","workspaceDomain","NEXT_PUBLIC_WORKSPACE_DOMAIN","branded","NEXT_PUBLIC_FIREBASE_AUTH_HANDLER_HOST","fbClientAppOptions","apiKey","NEXT_PUBLIC_FIREBASE_PUBLIC_API_KEY","authDomain","databaseURL","NEXT_PUBLIC_FIREBASE_DATABASE_URL","projectId","NEXT_PUBLIC_FIREBASE_PROJECT_ID","storageBucket","NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET","messagingSenderId","NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID","appId","NEXT_PUBLIC_FIREBASE_APP_ID","measurementId","NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID,OAAO,MAAMA,oBAAoBC,QAAQC,GAAG,CAACC,gCAAgC,CAAA;AAC7E,OAAO,MAAMC,2BAA2B,gBAAe;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GACD,OAAO,SAASC;QAEZJ;IADF,MAAMK,MAAMC,QACVN,gDAAAA,QAAQC,GAAG,CAACC,gCAAgC,YAA5CF,gDAAgD,IAChDO,IAAI;IACN,oEAAoE;IACpE,4EAA4E;IAC5E,yDAAyD;IACzD,OAAO,CAACF,OAAOA,QAAQ,cAAc,OAAOA;AAC9C;AAEA,mEAAmE,GACnE,OAAO,MAAMG,gCACX,4EACA,0EACA,wDAAuD;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDC,GACD,SAASC;IACP,MAAMC,aAAaV,QAAQC,GAAG,CAACU,gCAAgC;IAC/D,IAAIX,QAAQC,GAAG,CAAC,iCAAiC,KAAK,QAAQ;QAC5D,OAAOS;IACT;IACA,MAAME,kBAAkBZ,QAAQC,GAAG,CAACY,4BAA4B;IAChE,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,4CAA4C;IAC5C,MAAMC,UACJd,QAAQC,GAAG,CAACc,sCAAsC,IACjDH,CAAAA,kBAAkB,CAAC,KAAK,EAAEA,iBAAiB,GAAG,EAAC;IAClD,OAAOE,WAAWJ;AACpB;AAEA;;;;;CAKC,GACD,OAAO,MAAMM,qBAAsC;IACjDC,QAAQjB,QAAQC,GAAG,CAACiB,mCAAmC;IACvDC,YAAYV;IACZW,aAAapB,QAAQC,GAAG,CAACoB,iCAAiC;IAC1DC,WAAWtB,QAAQC,GAAG,CAACsB,+BAA+B;IACtDC,eAAexB,QAAQC,GAAG,CAACwB,mCAAmC;IAC9DC,mBAAmB1B,QAAQC,GAAG,CAAC0B,wCAAwC;IACvEC,OAAO5B,QAAQC,GAAG,CAAC4B,2BAA2B;IAC9CC,eAAe9B,QAAQC,GAAG,CAAC8B,mCAAmC;AAChE,EAEA,sCAAsC;CACtC,EAAE;CACF,QAAQ;CACR,mDAAmD;CACnD,IAAI;CACJ,UAAU;CACV,sDAAsD;CACtD,sCAAsC;CACtC,4CAA4C;CAC5C,OAAO;CACP,IAAI;CACJ,EAAE;CACF,6BAA6B;CAd5B"}

package/src/lib/constants/firebase-emulator-hosts.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Where the browser's Firebase clients find the emulators (AGL-2834).
+ *
+ * A dev server and the Node half of every e2e suite find them through
+ * `FIRESTORE_EMULATOR_HOST`, `FIREBASE_AUTH_EMULATOR_HOST` and
+ * `FIREBASE_DATABASE_EMULATOR_HOST`. A page in the browser cannot read those:
+ * Next inlines `NEXT_PUBLIC_*` into client bundles and nothing else. So the
+ * `serve:*:emulated` scripts mirror each host into a `NEXT_PUBLIC_` twin, and
+ * the page connects where its server does.
+ *
+ * Without the twins, the page carried the default ports as literals, and an
+ * emulator stack on any other ports split in two: the server and the suite
+ * talked to that stack while the page in Chrome read and wrote whichever
+ * emulators held 8082 and 9099 — another session's, when one was running.
+ *
+ * Called only inside the emulator branches, which the
+ * `FIREBASE_*_EMULATOR_ENABLED` flags gate, so a build without those flags
+ * never reads a host. Every default is the port `cloud/firebase.json` and
+ * `cloud/firebase.e2e.json` pin, and the one the page used before.
+ *
+ * No Storage twin: no browser code talks to the Storage emulator. Uploads and
+ * media reads go through the servers, which already follow
+ * `FIREBASE_STORAGE_EMULATOR_HOST`.
+ */
+/** One emulator's address, as the SDK's `connect*Emulator` calls take it. */
+export interface EmulatorHost {
+    host: string;
+    port: number;
+}
+export declare const DEFAULT_FIRESTORE_EMULATOR: EmulatorHost;
+export declare const DEFAULT_AUTH_EMULATOR: EmulatorHost;
+export declare const DEFAULT_DATABASE_EMULATOR: EmulatorHost;
+/**
+ * `host:port`, as the emulator variables spell it, or `fallback` for anything
+ * else: an unset variable, a bare host, a port that is not a TCP port, or an
+ * IPv6 address without the brackets that tell its colons from the port's.
+ */
+export declare function parseEmulatorHost(value: string | null | undefined, fallback: EmulatorHost): EmulatorHost;
+/** The Firestore emulator the page connects to. */
+export declare function firestoreEmulatorHost(): EmulatorHost;
+/** The Auth emulator's origin, the form `connectAuthEmulator` takes. */
+export declare function authEmulatorUrl(): string;
+/** The Realtime Database emulator the page's presence session connects to. */
+export declare function databaseEmulatorHost(): EmulatorHost;

package/src/lib/constants/firebase-emulator-hosts.js

@@ -0,0 +1,81 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Where the browser's Firebase clients find the emulators (AGL-2834).
+ *
+ * A dev server and the Node half of every e2e suite find them through
+ * `FIRESTORE_EMULATOR_HOST`, `FIREBASE_AUTH_EMULATOR_HOST` and
+ * `FIREBASE_DATABASE_EMULATOR_HOST`. A page in the browser cannot read those:
+ * Next inlines `NEXT_PUBLIC_*` into client bundles and nothing else. So the
+ * `serve:*:emulated` scripts mirror each host into a `NEXT_PUBLIC_` twin, and
+ * the page connects where its server does.
+ *
+ * Without the twins, the page carried the default ports as literals, and an
+ * emulator stack on any other ports split in two: the server and the suite
+ * talked to that stack while the page in Chrome read and wrote whichever
+ * emulators held 8082 and 9099 — another session's, when one was running.
+ *
+ * Called only inside the emulator branches, which the
+ * `FIREBASE_*_EMULATOR_ENABLED` flags gate, so a build without those flags
+ * never reads a host. Every default is the port `cloud/firebase.json` and
+ * `cloud/firebase.e2e.json` pin, and the one the page used before.
+ *
+ * No Storage twin: no browser code talks to the Storage emulator. Uploads and
+ * media reads go through the servers, which already follow
+ * `FIREBASE_STORAGE_EMULATOR_HOST`.
+ */ /** One emulator's address, as the SDK's `connect*Emulator` calls take it. */ export const DEFAULT_FIRESTORE_EMULATOR = {
+    host: 'localhost',
+    port: 8082
+};
+export const DEFAULT_AUTH_EMULATOR = {
+    host: 'localhost',
+    port: 9099
+};
+export const DEFAULT_DATABASE_EMULATOR = {
+    host: 'localhost',
+    port: 9000
+};
+/**
+ * `host:port`, as the emulator variables spell it, or `fallback` for anything
+ * else: an unset variable, a bare host, a port that is not a TCP port, or an
+ * IPv6 address without the brackets that tell its colons from the port's.
+ */ export function parseEmulatorHost(value, fallback) {
+    const text = String(value != null ? value : '').trim();
+    const colon = text.lastIndexOf(':');
+    if (colon <= 0) return fallback;
+    const host = text.slice(0, colon);
+    const portText = text.slice(colon + 1);
+    if (!/^\d{1,5}$/.test(portText)) return fallback;
+    const port = Number(portText);
+    if (port < 1 || port > 65535) return fallback;
+    if (host.includes(':') && !/^\[[^\]]+\]$/.test(host)) return fallback;
+    return {
+        host,
+        port
+    };
+}
+/** The Firestore emulator the page connects to. */ export function firestoreEmulatorHost() {
+    return parseEmulatorHost(process.env.NEXT_PUBLIC_FIRESTORE_EMULATOR_HOST, DEFAULT_FIRESTORE_EMULATOR);
+}
+/** The Auth emulator's origin, the form `connectAuthEmulator` takes. */ export function authEmulatorUrl() {
+    const { host, port } = parseEmulatorHost(process.env.NEXT_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST, DEFAULT_AUTH_EMULATOR);
+    return `http://${host}:${port}`;
+}
+/** The Realtime Database emulator the page's presence session connects to. */ export function databaseEmulatorHost() {
+    return parseEmulatorHost(process.env.NEXT_PUBLIC_FIREBASE_DATABASE_EMULATOR_HOST, DEFAULT_DATABASE_EMULATOR);
+}
+
+//# sourceMappingURL=firebase-emulator-hosts.js.map

package/src/lib/constants/firebase-emulator-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/constants/firebase-emulator-hosts.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Where the browser's Firebase clients find the emulators (AGL-2834).\n *\n * A dev server and the Node half of every e2e suite find them through\n * `FIRESTORE_EMULATOR_HOST`, `FIREBASE_AUTH_EMULATOR_HOST` and\n * `FIREBASE_DATABASE_EMULATOR_HOST`. A page in the browser cannot read those:\n * Next inlines `NEXT_PUBLIC_*` into client bundles and nothing else. So the\n * `serve:*:emulated` scripts mirror each host into a `NEXT_PUBLIC_` twin, and\n * the page connects where its server does.\n *\n * Without the twins, the page carried the default ports as literals, and an\n * emulator stack on any other ports split in two: the server and the suite\n * talked to that stack while the page in Chrome read and wrote whichever\n * emulators held 8082 and 9099 — another session's, when one was running.\n *\n * Called only inside the emulator branches, which the\n * `FIREBASE_*_EMULATOR_ENABLED` flags gate, so a build without those flags\n * never reads a host. Every default is the port `cloud/firebase.json` and\n * `cloud/firebase.e2e.json` pin, and the one the page used before.\n *\n * No Storage twin: no browser code talks to the Storage emulator. Uploads and\n * media reads go through the servers, which already follow\n * `FIREBASE_STORAGE_EMULATOR_HOST`.\n */\n\n/** One emulator's address, as the SDK's `connect*Emulator` calls take it. */\nexport interface EmulatorHost {\n  host: string\n  port: number\n}\n\nexport const DEFAULT_FIRESTORE_EMULATOR: EmulatorHost = {\n  host: 'localhost',\n  port: 8082,\n}\n\nexport const DEFAULT_AUTH_EMULATOR: EmulatorHost = {\n  host: 'localhost',\n  port: 9099,\n}\n\nexport const DEFAULT_DATABASE_EMULATOR: EmulatorHost = {\n  host: 'localhost',\n  port: 9000,\n}\n\n/**\n * `host:port`, as the emulator variables spell it, or `fallback` for anything\n * else: an unset variable, a bare host, a port that is not a TCP port, or an\n * IPv6 address without the brackets that tell its colons from the port's.\n */\nexport function parseEmulatorHost(\n  value: string | null | undefined,\n  fallback: EmulatorHost,\n): EmulatorHost {\n  const text = String(value ?? '').trim()\n  const colon = text.lastIndexOf(':')\n  if (colon <= 0) return fallback\n  const host = text.slice(0, colon)\n  const portText = text.slice(colon + 1)\n  if (!/^\\d{1,5}$/.test(portText)) return fallback\n  const port = Number(portText)\n  if (port < 1 || port > 65535) return fallback\n  if (host.includes(':') && !/^\\[[^\\]]+\\]$/.test(host)) return fallback\n  return { host, port }\n}\n\n/** The Firestore emulator the page connects to. */\nexport function firestoreEmulatorHost(): EmulatorHost {\n  return parseEmulatorHost(\n    process.env.NEXT_PUBLIC_FIRESTORE_EMULATOR_HOST,\n    DEFAULT_FIRESTORE_EMULATOR,\n  )\n}\n\n/** The Auth emulator's origin, the form `connectAuthEmulator` takes. */\nexport function authEmulatorUrl(): string {\n  const { host, port } = parseEmulatorHost(\n    process.env.NEXT_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST,\n    DEFAULT_AUTH_EMULATOR,\n  )\n  return `http://${host}:${port}`\n}\n\n/** The Realtime Database emulator the page's presence session connects to. */\nexport function databaseEmulatorHost(): EmulatorHost {\n  return parseEmulatorHost(\n    process.env.NEXT_PUBLIC_FIREBASE_DATABASE_EMULATOR_HOST,\n    DEFAULT_DATABASE_EMULATOR,\n  )\n}\n"],"names":["DEFAULT_FIRESTORE_EMULATOR","host","port","DEFAULT_AUTH_EMULATOR","DEFAULT_DATABASE_EMULATOR","parseEmulatorHost","value","fallback","text","String","trim","colon","lastIndexOf","slice","portText","test","Number","includes","firestoreEmulatorHost","process","env","NEXT_PUBLIC_FIRESTORE_EMULATOR_HOST","authEmulatorUrl","NEXT_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST","databaseEmulatorHost","NEXT_PUBLIC_FIREBASE_DATABASE_EMULATOR_HOST"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;CAuBC,GAED,2EAA2E,GAM3E,OAAO,MAAMA,6BAA2C;IACtDC,MAAM;IACNC,MAAM;AACR,EAAC;AAED,OAAO,MAAMC,wBAAsC;IACjDF,MAAM;IACNC,MAAM;AACR,EAAC;AAED,OAAO,MAAME,4BAA0C;IACrDH,MAAM;IACNC,MAAM;AACR,EAAC;AAED;;;;CAIC,GACD,OAAO,SAASG,kBACdC,KAAgC,EAChCC,QAAsB;IAEtB,MAAMC,OAAOC,OAAOH,gBAAAA,QAAS,IAAII,IAAI;IACrC,MAAMC,QAAQH,KAAKI,WAAW,CAAC;IAC/B,IAAID,SAAS,GAAG,OAAOJ;IACvB,MAAMN,OAAOO,KAAKK,KAAK,CAAC,GAAGF;IAC3B,MAAMG,WAAWN,KAAKK,KAAK,CAACF,QAAQ;IACpC,IAAI,CAAC,YAAYI,IAAI,CAACD,WAAW,OAAOP;IACxC,MAAML,OAAOc,OAAOF;IACpB,IAAIZ,OAAO,KAAKA,OAAO,OAAO,OAAOK;IACrC,IAAIN,KAAKgB,QAAQ,CAAC,QAAQ,CAAC,eAAeF,IAAI,CAACd,OAAO,OAAOM;IAC7D,OAAO;QAAEN;QAAMC;IAAK;AACtB;AAEA,iDAAiD,GACjD,OAAO,SAASgB;IACd,OAAOb,kBACLc,QAAQC,GAAG,CAACC,mCAAmC,EAC/CrB;AAEJ;AAEA,sEAAsE,GACtE,OAAO,SAASsB;IACd,MAAM,EAAErB,IAAI,EAAEC,IAAI,EAAE,GAAGG,kBACrBc,QAAQC,GAAG,CAACG,uCAAuC,EACnDpB;IAEF,OAAO,CAAC,OAAO,EAAEF,KAAK,CAAC,EAAEC,MAAM;AACjC;AAEA,4EAA4E,GAC5E,OAAO,SAASsB;IACd,OAAOnB,kBACLc,QAAQC,GAAG,CAACK,2CAA2C,EACvDrB;AAEJ"}

package/src/lib/constants/mock-data.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export type TenantSite = {
+    name: string;
+    description: string;
+    subdomain: string;
+    cname?: string;
+    paths: string[];
+};
+export declare const mockDB: TenantSite[];

package/src/lib/constants/mock-data.js

@@ -0,0 +1,49 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export const mockDB = [
+    {
+        name: 'Site 1',
+        description: 'Subdomain + custom domain',
+        subdomain: 'myhost-1',
+        cname: 'custom-domain-1.com',
+        paths: [
+            '/index',
+            '/aa'
+        ]
+    },
+    {
+        name: 'Site 2',
+        description: 'Subdomain only',
+        subdomain: 'myhost-2',
+        cname: null,
+        paths: [
+            '/index',
+            '/aa'
+        ]
+    },
+    {
+        name: 'Site 3',
+        description: 'Subdomain only',
+        subdomain: 'myhost-3',
+        cname: null,
+        paths: [
+            '/index',
+            '/aa'
+        ]
+    }
+];
+
+//# sourceMappingURL=mock-data.js.map

package/src/lib/constants/mock-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/constants/mock-data.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport type TenantSite = {\n  name: string\n  description: string\n  subdomain: string\n  cname?: string\n  paths: string[]\n}\nexport const mockDB: TenantSite[] = [\n  {\n    name: 'Site 1',\n    description: 'Subdomain + custom domain',\n    subdomain: 'myhost-1',\n    cname: 'custom-domain-1.com',\n    paths: ['/index', '/aa'],\n  },\n  {\n    name: 'Site 2',\n    description: 'Subdomain only',\n    subdomain: 'myhost-2',\n    cname: null,\n    paths: ['/index', '/aa'],\n  },\n  {\n    name: 'Site 3',\n    description: 'Subdomain only',\n    subdomain: 'myhost-3',\n    cname: null,\n    paths: ['/index', '/aa'],\n  },\n]\n"],"names":["mockDB","name","description","subdomain","cname","paths"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GASD,OAAO,MAAMA,SAAuB;IAClC;QACEC,MAAM;QACNC,aAAa;QACbC,WAAW;QACXC,OAAO;QACPC,OAAO;YAAC;YAAU;SAAM;IAC1B;IACA;QACEJ,MAAM;QACNC,aAAa;QACbC,WAAW;QACXC,OAAO;QACPC,OAAO;YAAC;YAAU;SAAM;IAC1B;IACA;QACEJ,MAAM;QACNC,aAAa;QACbC,WAAW;QACXC,OAAO;QACPC,OAAO;YAAC;YAAU;SAAM;IAC1B;CACD,CAAA"}

package/src/lib/constants/site-paths.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+export declare const API_DIR = "/api";
+export declare const STATIC_DIR = "/_static";
+export declare const NEXT_DIR = "/_next";
+export declare const NEXT_IMAGE_DIR = "/_next/image";
+export declare const STATIC_IMAGE_DIR = "/_static/image";
+export declare const STATIC_PWA_DIR = "/_static/_pwa";
+export declare const STATIC_PWA_ICON_DIR = "/_static/_pwa/icons";
+export declare const STATIC_FAVICON_PATH = "/_static/favicon.ico";
+export declare const STATIC_ROBOTS_PATH = "/_static/robots.txt";
+export declare const STATIC_PWA_MANIFEST_PATH = "/_static/_pwa/manifest.json";
+export declare const IMPLICIT_DIRS: string[];
+export declare const STATIC_PATHS: string[];
+export declare const NEXT_PATHS: string[];
+export declare const IMPLICIT_PATHS: string[];
+declare const _default: {
+    IMPLICIT_DIRS: string[];
+    API_DIR: string;
+    STATIC_DIR: string;
+    STATIC_IMAGE_DIR: string;
+    STATIC_PWA_DIR: string;
+    STATIC_PWA_ICON_DIR: string;
+    NEXT_DIR: string;
+    NEXT_IMAGE_DIR: string;
+    STATIC_PATHS: string[];
+    NEXT_PATHS: string[];
+    IMPLICIT_PATHS: string[];
+    STATIC_FAVICON_PATH: string;
+    STATIC_ROBOTS_PATH: string;
+    STATIC_PWA_MANIFEST_PATH: string;
+};
+export default _default;

package/src/lib/constants/site-paths.js

@@ -0,0 +1,66 @@
+/**
+ * @license
+ * Copyright 2022 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ export const API_DIR = `/api`;
+export const STATIC_DIR = '/_static';
+export const NEXT_DIR = '/_next';
+export const NEXT_IMAGE_DIR = `/_next/image`;
+export const STATIC_IMAGE_DIR = `${STATIC_DIR}/image`;
+export const STATIC_PWA_DIR = `${STATIC_DIR}/_pwa`;
+export const STATIC_PWA_ICON_DIR = `${STATIC_PWA_DIR}/icons`;
+export const STATIC_FAVICON_PATH = `${STATIC_DIR}/favicon.ico`;
+export const STATIC_ROBOTS_PATH = `${STATIC_DIR}/robots.txt`;
+export const STATIC_PWA_MANIFEST_PATH = `${STATIC_PWA_DIR}/manifest.json`;
+export const IMPLICIT_DIRS = [
+    STATIC_DIR,
+    API_DIR,
+    NEXT_DIR
+];
+export const STATIC_PATHS = [
+    STATIC_DIR,
+    STATIC_IMAGE_DIR,
+    STATIC_PWA_DIR,
+    STATIC_PWA_ICON_DIR,
+    STATIC_FAVICON_PATH,
+    STATIC_ROBOTS_PATH,
+    STATIC_PWA_MANIFEST_PATH
+];
+export const NEXT_PATHS = [
+    NEXT_IMAGE_DIR,
+    NEXT_DIR
+];
+export const IMPLICIT_PATHS = [
+    API_DIR,
+    ...STATIC_PATHS,
+    ...NEXT_PATHS
+];
+export default {
+    IMPLICIT_DIRS,
+    API_DIR,
+    STATIC_DIR,
+    STATIC_IMAGE_DIR,
+    STATIC_PWA_DIR,
+    STATIC_PWA_ICON_DIR,
+    NEXT_DIR,
+    NEXT_IMAGE_DIR,
+    STATIC_PATHS,
+    NEXT_PATHS,
+    IMPLICIT_PATHS,
+    STATIC_FAVICON_PATH,
+    STATIC_ROBOTS_PATH,
+    STATIC_PWA_MANIFEST_PATH
+};
+
+//# sourceMappingURL=site-paths.js.map

package/src/lib/constants/site-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/feature/instance/src/lib/constants/site-paths.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2022 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nexport const API_DIR = `/api`\nexport const STATIC_DIR = '/_static'\nexport const NEXT_DIR = '/_next'\nexport const NEXT_IMAGE_DIR = `/_next/image`\nexport const STATIC_IMAGE_DIR = `${STATIC_DIR}/image`\nexport const STATIC_PWA_DIR = `${STATIC_DIR}/_pwa`\nexport const STATIC_PWA_ICON_DIR = `${STATIC_PWA_DIR}/icons`\n\nexport const STATIC_FAVICON_PATH = `${STATIC_DIR}/favicon.ico`\nexport const STATIC_ROBOTS_PATH = `${STATIC_DIR}/robots.txt`\nexport const STATIC_PWA_MANIFEST_PATH = `${STATIC_PWA_DIR}/manifest.json`\n\nexport const IMPLICIT_DIRS = [STATIC_DIR, API_DIR, NEXT_DIR]\n\nexport const STATIC_PATHS = [\n  STATIC_DIR,\n  STATIC_IMAGE_DIR,\n  STATIC_PWA_DIR,\n  STATIC_PWA_ICON_DIR,\n  STATIC_FAVICON_PATH,\n  STATIC_ROBOTS_PATH,\n  STATIC_PWA_MANIFEST_PATH,\n]\n\nexport const NEXT_PATHS = [NEXT_IMAGE_DIR, NEXT_DIR]\n\nexport const IMPLICIT_PATHS = [API_DIR, ...STATIC_PATHS, ...NEXT_PATHS]\n\nexport default {\n  IMPLICIT_DIRS,\n  API_DIR,\n  STATIC_DIR,\n  STATIC_IMAGE_DIR,\n  STATIC_PWA_DIR,\n  STATIC_PWA_ICON_DIR,\n  NEXT_DIR,\n  NEXT_IMAGE_DIR,\n  STATIC_PATHS,\n  NEXT_PATHS,\n  IMPLICIT_PATHS,\n  STATIC_FAVICON_PATH,\n  STATIC_ROBOTS_PATH,\n  STATIC_PWA_MANIFEST_PATH,\n}\n"],"names":["API_DIR","STATIC_DIR","NEXT_DIR","NEXT_IMAGE_DIR","STATIC_IMAGE_DIR","STATIC_PWA_DIR","STATIC_PWA_ICON_DIR","STATIC_FAVICON_PATH","STATIC_ROBOTS_PATH","STATIC_PWA_MANIFEST_PATH","IMPLICIT_DIRS","STATIC_PATHS","NEXT_PATHS","IMPLICIT_PATHS"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,OAAO,MAAMA,UAAU,CAAC,IAAI,CAAC,CAAA;AAC7B,OAAO,MAAMC,aAAa,WAAU;AACpC,OAAO,MAAMC,WAAW,SAAQ;AAChC,OAAO,MAAMC,iBAAiB,CAAC,YAAY,CAAC,CAAA;AAC5C,OAAO,MAAMC,mBAAmB,GAAGH,WAAW,MAAM,CAAC,CAAA;AACrD,OAAO,MAAMI,iBAAiB,GAAGJ,WAAW,KAAK,CAAC,CAAA;AAClD,OAAO,MAAMK,sBAAsB,GAAGD,eAAe,MAAM,CAAC,CAAA;AAE5D,OAAO,MAAME,sBAAsB,GAAGN,WAAW,YAAY,CAAC,CAAA;AAC9D,OAAO,MAAMO,qBAAqB,GAAGP,WAAW,WAAW,CAAC,CAAA;AAC5D,OAAO,MAAMQ,2BAA2B,GAAGJ,eAAe,cAAc,CAAC,CAAA;AAEzE,OAAO,MAAMK,gBAAgB;IAACT;IAAYD;IAASE;CAAS,CAAA;AAE5D,OAAO,MAAMS,eAAe;IAC1BV;IACAG;IACAC;IACAC;IACAC;IACAC;IACAC;CACD,CAAA;AAED,OAAO,MAAMG,aAAa;IAACT;IAAgBD;CAAS,CAAA;AAEpD,OAAO,MAAMW,iBAAiB;IAACb;OAAYW;OAAiBC;CAAW,CAAA;AAEvE,eAAe;IACbF;IACAV;IACAC;IACAG;IACAC;IACAC;IACAJ;IACAC;IACAQ;IACAC;IACAC;IACAN;IACAC;IACAC;AACF,EAAC"}