@commercetools-frontend/mc-scripts 27.4.2 → 27.5.1

package/dist/{create-webpack-config-for-development-835be72f.cjs.dev.js → create-webpack-config-for-development-a2df037a.cjs.dev.js}

@@ -25,7 +25,7 @@ var _createClass = require('@babel/runtime-corejs3/helpers/createClass');
 var _Object$assign = require('@babel/runtime-corejs3/core-js-stable/object/assign');
 var applicationConfig = require('@commercetools-frontend/application-config');
 var mcHtmlTemplate = require('@commercetools-frontend/mc-html-template');
-var createPostcssConfig = require('./create-postcss-config-7cebb3e2.cjs.dev.js');
+var createPostcssConfig = require('./create-postcss-config-e4c767b4.cjs.dev.js');
 var optimizations = require('./optimizations-56be74d6.cjs.dev.js');
 var paths = require('./paths-b76fc753.cjs.dev.js');
 var vendorsToTranspile = require('./vendors-to-transpile-6ab4ea06.cjs.dev.js');

package/dist/{create-webpack-config-for-development-5fba3c63.esm.js → create-webpack-config-for-development-c6e48557.esm.js}

@@ -23,7 +23,7 @@ import _createClass from '@babel/runtime-corejs3/helpers/esm/createClass';
 import _Object$assign from '@babel/runtime-corejs3/core-js-stable/object/assign';
 import { processConfig } from '@commercetools-frontend/application-config';
 import { replaceHtmlPlaceholders } from '@commercetools-frontend/mc-html-template';
-import { c as createPostcssConfig } from './create-postcss-config-040fa794.esm.js';
+import { c as createPostcssConfig } from './create-postcss-config-f6a5f68b.esm.js';
 import { g as getWepbackCacheGroups, h as hasJsxRuntime } from './optimizations-54382f7b.esm.js';
 import { p as paths } from './paths-39f22b8b.esm.js';
 import { v as vendorsToTranspile } from './vendors-to-transpile-7dc84a72.esm.js';

package/dist/{create-webpack-config-for-production-1c770191.esm.js → create-webpack-config-for-production-04a7a9f8.esm.js}

@@ -27,7 +27,7 @@ import _reduceInstanceProperty from '@babel/runtime-corejs3/core-js-stable/insta
 import _Object$assign from '@babel/runtime-corejs3/core-js-stable/object/assign';
 import fs from 'fs';
 import path from 'path';
-import { c as createPostcssConfig } from './create-postcss-config-040fa794.esm.js';
+import { c as createPostcssConfig } from './create-postcss-config-f6a5f68b.esm.js';
 import { g as getWepbackCacheGroups, h as hasJsxRuntime } from './optimizations-54382f7b.esm.js';
 import { p as paths } from './paths-39f22b8b.esm.js';
 import { v as vendorsToTranspile } from './vendors-to-transpile-7dc84a72.esm.js';

package/dist/{create-webpack-config-for-production-ffeb4a22.cjs.dev.js → create-webpack-config-for-production-12e257fc.cjs.dev.js}

@@ -29,7 +29,7 @@ var _reduceInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/ins
 var _Object$assign = require('@babel/runtime-corejs3/core-js-stable/object/assign');
 var fs = require('fs');
 var path = require('path');
-var createPostcssConfig = require('./create-postcss-config-7cebb3e2.cjs.dev.js');
+var createPostcssConfig = require('./create-postcss-config-e4c767b4.cjs.dev.js');
 var optimizations = require('./optimizations-56be74d6.cjs.dev.js');
 var paths = require('./paths-b76fc753.cjs.dev.js');
 var vendorsToTranspile = require('./vendors-to-transpile-6ab4ea06.cjs.dev.js');

package/dist/{create-webpack-config-for-production-8c3f894b.cjs.prod.js → create-webpack-config-for-production-443f6fe7.cjs.prod.js}

@@ -29,7 +29,7 @@ var _reduceInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/ins
 var _Object$assign = require('@babel/runtime-corejs3/core-js-stable/object/assign');
 var fs = require('fs');
 var path = require('path');
-var createPostcssConfig = require('./create-postcss-config-82c6d99e.cjs.prod.js');
+var createPostcssConfig = require('./create-postcss-config-3f3bda09.cjs.prod.js');
 var optimizations = require('./optimizations-da5a0cfa.cjs.prod.js');
 var paths = require('./paths-7768b440.cjs.prod.js');
 var vendorsToTranspile = require('./vendors-to-transpile-04a49d40.cjs.prod.js');

package/dist/declarations/src/types.d.ts

@@ -14,6 +14,9 @@ export type TCliCommandConfigSyncOptions = {
 export type TCliCommandConfigSyncCIOptions = {
     dryRun: boolean;
 };
+export type TCliCommandServeOptions = {
+    handleAuthRoutes: string;
+};
 export type TCliCommandLoginOptions = {
     mcApiUrl?: string;
     projectKey?: string;

package/dist/{deployment-previews-set-6dd7e367.cjs.prod.js → deployment-previews-set-2b334c11.cjs.prod.js}

@@ -8,7 +8,7 @@ var chalk = require('chalk');
 var prompts = require('prompts');
 var applicationConfig = require('@commercetools-frontend/application-config');
 var credentialsStorage$1 = require('./credentials-storage-ea1c16dc.cjs.prod.js');
-var graphqlRequests = require('./graphql-requests-5e31d639.cjs.prod.js');
+var graphqlRequests = require('./graphql-requests-6ead2029.cjs.prod.js');
 require('@babel/runtime-corejs3/helpers/classCallCheck');
 require('@babel/runtime-corejs3/helpers/createClass');
 require('@babel/runtime-corejs3/core-js-stable/json/stringify');
@@ -30,7 +30,7 @@ require('graphql');
 require('graphql-request');
 require('@commercetools-frontend/constants');
 require('@commercetools/http-user-agent');
-require('./package-d75d6b9f.cjs.prod.js');
+require('./package-62998a4b.cjs.prod.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{deployment-previews-set-68c37d9d.cjs.dev.js → deployment-previews-set-491442d7.cjs.dev.js}

@@ -8,7 +8,7 @@ var chalk = require('chalk');
 var prompts = require('prompts');
 var applicationConfig = require('@commercetools-frontend/application-config');
 var credentialsStorage$1 = require('./credentials-storage-fd195144.cjs.dev.js');
-var graphqlRequests = require('./graphql-requests-24e04c13.cjs.dev.js');
+var graphqlRequests = require('./graphql-requests-bd7a3fe9.cjs.dev.js');
 require('@babel/runtime-corejs3/helpers/classCallCheck');
 require('@babel/runtime-corejs3/helpers/createClass');
 require('@babel/runtime-corejs3/core-js-stable/json/stringify');
@@ -30,7 +30,7 @@ require('graphql');
 require('graphql-request');
 require('@commercetools-frontend/constants');
 require('@commercetools/http-user-agent');
-require('./package-6dcc2c4f.cjs.dev.js');
+require('./package-fe1840f3.cjs.dev.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{deployment-previews-set-add2d9c6.esm.js → deployment-previews-set-4b020cb4.esm.js}

@@ -6,7 +6,7 @@ import chalk from 'chalk';
 import prompts from 'prompts';
 import { processConfig } from '@commercetools-frontend/application-config';
 import { C as CredentialsStorage } from './credentials-storage-67deadc3.esm.js';
-import { d as fetchCustomApplication, g as updateCustomApplicationDeploymentPreview, h as createCustomApplicationDeploymentPreview } from './graphql-requests-c07e7b8f.esm.js';
+import { d as fetchCustomApplication, g as updateCustomApplicationDeploymentPreview, h as createCustomApplicationDeploymentPreview } from './graphql-requests-87338c52.esm.js';
 import '@babel/runtime-corejs3/helpers/classCallCheck';
 import '@babel/runtime-corejs3/helpers/createClass';
 import '@babel/runtime-corejs3/core-js-stable/json/stringify';
@@ -28,7 +28,7 @@ import 'graphql';
 import 'graphql-request';
 import '@commercetools-frontend/constants';
 import '@commercetools/http-user-agent';
-import './package-14789720.esm.js';
+import './package-a686a0ee.esm.js';
 
 const credentialsStorage = new CredentialsStorage();
 const validateUrl = function () {

package/dist/{graphql-requests-5e31d639.cjs.prod.js → graphql-requests-6ead2029.cjs.prod.js}

@@ -16,7 +16,7 @@ var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
 var credentialsStorage$1 = require('./credentials-storage-ea1c16dc.cjs.prod.js');
 var createHttpUserAgent = require('@commercetools/http-user-agent');
-var _package = require('./package-d75d6b9f.cjs.prod.js');
+var _package = require('./package-62998a4b.cjs.prod.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{graphql-requests-c07e7b8f.esm.js → graphql-requests-87338c52.esm.js}

@@ -14,7 +14,7 @@ import { GraphQLClient, ClientError } from 'graphql-request';
 import { GRAPHQL_TARGETS, SUPPORTED_HEADERS } from '@commercetools-frontend/constants';
 import { C as CredentialsStorage } from './credentials-storage-67deadc3.esm.js';
 import createHttpUserAgent from '@commercetools/http-user-agent';
-import { p as pkgJson } from './package-14789720.esm.js';
+import { p as pkgJson } from './package-a686a0ee.esm.js';
 
 const userAgent = createHttpUserAgent({
   name: 'graphql-request',

package/dist/{graphql-requests-24e04c13.cjs.dev.js → graphql-requests-bd7a3fe9.cjs.dev.js}

@@ -16,7 +16,7 @@ var graphqlRequest = require('graphql-request');
 var constants = require('@commercetools-frontend/constants');
 var credentialsStorage$1 = require('./credentials-storage-fd195144.cjs.dev.js');
 var createHttpUserAgent = require('@commercetools/http-user-agent');
-var _package = require('./package-6dcc2c4f.cjs.dev.js');
+var _package = require('./package-fe1840f3.cjs.dev.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{login-c05816f1.cjs.prod.js → login-26cfe1af.cjs.prod.js}

@@ -15,7 +15,7 @@ var crypto = require('node:crypto');
 var process = require('node:process');
 var chalk = require('chalk');
 var applicationConfig = require('@commercetools-frontend/application-config');
-var _package = require('./package-d75d6b9f.cjs.prod.js');
+var _package = require('./package-62998a4b.cjs.prod.js');
 var http = require('node:http');
 var jwtDecode = require('jwt-decode');
 var credentialsStorage$1 = require('./credentials-storage-ea1c16dc.cjs.prod.js');

package/dist/{login-a1ad5f07.cjs.dev.js → login-2d10deff.cjs.dev.js}

@@ -15,7 +15,7 @@ var crypto = require('node:crypto');
 var process = require('node:process');
 var chalk = require('chalk');
 var applicationConfig = require('@commercetools-frontend/application-config');
-var _package = require('./package-6dcc2c4f.cjs.dev.js');
+var _package = require('./package-fe1840f3.cjs.dev.js');
 var http = require('node:http');
 var jwtDecode = require('jwt-decode');
 var credentialsStorage$1 = require('./credentials-storage-fd195144.cjs.dev.js');

package/dist/{login-af2522fd.esm.js → login-ab249036.esm.js}

@@ -13,7 +13,7 @@ import crypto from 'node:crypto';
 import process, { exit } from 'node:process';
 import chalk from 'chalk';
 import { processConfig } from '@commercetools-frontend/application-config';
-import { p as pkgJson } from './package-14789720.esm.js';
+import { p as pkgJson } from './package-a686a0ee.esm.js';
 import http from 'node:http';
 import jwtDecode from 'jwt-decode';
 import { C as CredentialsStorage } from './credentials-storage-67deadc3.esm.js';

package/dist/{package-d75d6b9f.cjs.prod.js → package-62998a4b.cjs.prod.js}

@@ -2,7 +2,7 @@
 
 var pkgJson = {
 	name: "@commercetools-frontend/mc-scripts",
-	version: "27.4.2",
+	version: "27.5.1",
 	description: "Configuration and scripts for developing a MC application",
 	bugs: "https://github.com/commercetools/merchant-center-application-kit/issues",
 	repository: {
@@ -63,13 +63,13 @@ var pkgJson = {
 		"@babel/plugin-proposal-do-expressions": "^7.22.5",
 		"@babel/runtime": "^7.22.15",
 		"@babel/runtime-corejs3": "^7.22.15",
-		"@commercetools-frontend/application-components": "27.4.2",
-		"@commercetools-frontend/application-config": "27.4.2",
-		"@commercetools-frontend/assets": "27.4.2",
-		"@commercetools-frontend/babel-preset-mc-app": "27.4.2",
-		"@commercetools-frontend/constants": "27.4.2",
-		"@commercetools-frontend/mc-dev-authentication": "27.4.2",
-		"@commercetools-frontend/mc-html-template": "27.4.2",
+		"@commercetools-frontend/application-components": "27.5.1",
+		"@commercetools-frontend/application-config": "27.5.1",
+		"@commercetools-frontend/assets": "27.5.1",
+		"@commercetools-frontend/babel-preset-mc-app": "27.5.1",
+		"@commercetools-frontend/constants": "27.5.1",
+		"@commercetools-frontend/mc-dev-authentication": "27.5.1",
+		"@commercetools-frontend/mc-html-template": "27.5.1",
 		"@commercetools/http-user-agent": "3.0.0",
 		"@emotion/babel-plugin": "^11.13.5",
 		"@formatjs/cli-lib": "^6.3.8",
@@ -93,7 +93,7 @@ var pkgJson = {
 		commander: "^13.1.0",
 		"core-js": "^3.32.2",
 		"css-loader": "6.11.0",
-		"css-minimizer-webpack-plugin": "3.4.1",
+		"css-minimizer-webpack-plugin": "^8.0.0",
 		dotenv: "16.6.1",
 		"dotenv-expand": "8.0.3",
 		"fs-extra": "10.1.0",
@@ -110,7 +110,7 @@ var pkgJson = {
 		"moment-locales-webpack-plugin": "1.2.0",
 		"node-fetch": "2.7.0",
 		open: "^10.1.0",
-		postcss: "8.5.6",
+		postcss: "^8.5.12",
 		"postcss-custom-media": "8.0.2",
 		"postcss-custom-properties": "12.1.4",
 		"postcss-import": "14.1.0",
@@ -127,7 +127,7 @@ var pkgJson = {
 		sirv: "^3.0.2",
 		"style-loader": "3.3.4",
 		"svg-url-loader": "7.1.1",
-		"terser-webpack-plugin": "5.3.14",
+		"terser-webpack-plugin": "^5.5.0",
 		"thread-loader": "3.0.4",
 		url: "^0.11.0",
 		vite: "~6.4.2",
@@ -152,7 +152,7 @@ var pkgJson = {
 		rimraf: "6.0.1"
 	},
 	engines: {
-		node: "18.x || 20.x || >=22.0.0"
+		node: "20.x || >=22.0.0"
 	},
 	peerDependencies: {
 		puppeteer: ">=20.0.0"

package/dist/{package-14789720.esm.js → package-a686a0ee.esm.js}

@@ -1,6 +1,6 @@
 var pkgJson = {
 	name: "@commercetools-frontend/mc-scripts",
-	version: "27.4.2",
+	version: "27.5.1",
 	description: "Configuration and scripts for developing a MC application",
 	bugs: "https://github.com/commercetools/merchant-center-application-kit/issues",
 	repository: {
@@ -61,13 +61,13 @@ var pkgJson = {
 		"@babel/plugin-proposal-do-expressions": "^7.22.5",
 		"@babel/runtime": "^7.22.15",
 		"@babel/runtime-corejs3": "^7.22.15",
-		"@commercetools-frontend/application-components": "27.4.2",
-		"@commercetools-frontend/application-config": "27.4.2",
-		"@commercetools-frontend/assets": "27.4.2",
-		"@commercetools-frontend/babel-preset-mc-app": "27.4.2",
-		"@commercetools-frontend/constants": "27.4.2",
-		"@commercetools-frontend/mc-dev-authentication": "27.4.2",
-		"@commercetools-frontend/mc-html-template": "27.4.2",
+		"@commercetools-frontend/application-components": "27.5.1",
+		"@commercetools-frontend/application-config": "27.5.1",
+		"@commercetools-frontend/assets": "27.5.1",
+		"@commercetools-frontend/babel-preset-mc-app": "27.5.1",
+		"@commercetools-frontend/constants": "27.5.1",
+		"@commercetools-frontend/mc-dev-authentication": "27.5.1",
+		"@commercetools-frontend/mc-html-template": "27.5.1",
 		"@commercetools/http-user-agent": "3.0.0",
 		"@emotion/babel-plugin": "^11.13.5",
 		"@formatjs/cli-lib": "^6.3.8",
@@ -91,7 +91,7 @@ var pkgJson = {
 		commander: "^13.1.0",
 		"core-js": "^3.32.2",
 		"css-loader": "6.11.0",
-		"css-minimizer-webpack-plugin": "3.4.1",
+		"css-minimizer-webpack-plugin": "^8.0.0",
 		dotenv: "16.6.1",
 		"dotenv-expand": "8.0.3",
 		"fs-extra": "10.1.0",
@@ -108,7 +108,7 @@ var pkgJson = {
 		"moment-locales-webpack-plugin": "1.2.0",
 		"node-fetch": "2.7.0",
 		open: "^10.1.0",
-		postcss: "8.5.6",
+		postcss: "^8.5.12",
 		"postcss-custom-media": "8.0.2",
 		"postcss-custom-properties": "12.1.4",
 		"postcss-import": "14.1.0",
@@ -125,7 +125,7 @@ var pkgJson = {
 		sirv: "^3.0.2",
 		"style-loader": "3.3.4",
 		"svg-url-loader": "7.1.1",
-		"terser-webpack-plugin": "5.3.14",
+		"terser-webpack-plugin": "^5.5.0",
 		"thread-loader": "3.0.4",
 		url: "^0.11.0",
 		vite: "~6.4.2",
@@ -150,7 +150,7 @@ var pkgJson = {
 		rimraf: "6.0.1"
 	},
 	engines: {
-		node: "18.x || 20.x || >=22.0.0"
+		node: "20.x || >=22.0.0"
 	},
 	peerDependencies: {
 		puppeteer: ">=20.0.0"

package/dist/{package-6dcc2c4f.cjs.dev.js → package-fe1840f3.cjs.dev.js}

@@ -2,7 +2,7 @@
 
 var pkgJson = {
 	name: "@commercetools-frontend/mc-scripts",
-	version: "27.4.2",
+	version: "27.5.1",
 	description: "Configuration and scripts for developing a MC application",
 	bugs: "https://github.com/commercetools/merchant-center-application-kit/issues",
 	repository: {
@@ -63,13 +63,13 @@ var pkgJson = {
 		"@babel/plugin-proposal-do-expressions": "^7.22.5",
 		"@babel/runtime": "^7.22.15",
 		"@babel/runtime-corejs3": "^7.22.15",
-		"@commercetools-frontend/application-components": "27.4.2",
-		"@commercetools-frontend/application-config": "27.4.2",
-		"@commercetools-frontend/assets": "27.4.2",
-		"@commercetools-frontend/babel-preset-mc-app": "27.4.2",
-		"@commercetools-frontend/constants": "27.4.2",
-		"@commercetools-frontend/mc-dev-authentication": "27.4.2",
-		"@commercetools-frontend/mc-html-template": "27.4.2",
+		"@commercetools-frontend/application-components": "27.5.1",
+		"@commercetools-frontend/application-config": "27.5.1",
+		"@commercetools-frontend/assets": "27.5.1",
+		"@commercetools-frontend/babel-preset-mc-app": "27.5.1",
+		"@commercetools-frontend/constants": "27.5.1",
+		"@commercetools-frontend/mc-dev-authentication": "27.5.1",
+		"@commercetools-frontend/mc-html-template": "27.5.1",
 		"@commercetools/http-user-agent": "3.0.0",
 		"@emotion/babel-plugin": "^11.13.5",
 		"@formatjs/cli-lib": "^6.3.8",
@@ -93,7 +93,7 @@ var pkgJson = {
 		commander: "^13.1.0",
 		"core-js": "^3.32.2",
 		"css-loader": "6.11.0",
-		"css-minimizer-webpack-plugin": "3.4.1",
+		"css-minimizer-webpack-plugin": "^8.0.0",
 		dotenv: "16.6.1",
 		"dotenv-expand": "8.0.3",
 		"fs-extra": "10.1.0",
@@ -110,7 +110,7 @@ var pkgJson = {
 		"moment-locales-webpack-plugin": "1.2.0",
 		"node-fetch": "2.7.0",
 		open: "^10.1.0",
-		postcss: "8.5.6",
+		postcss: "^8.5.12",
 		"postcss-custom-media": "8.0.2",
 		"postcss-custom-properties": "12.1.4",
 		"postcss-import": "14.1.0",
@@ -127,7 +127,7 @@ var pkgJson = {
 		sirv: "^3.0.2",
 		"style-loader": "3.3.4",
 		"svg-url-loader": "7.1.1",
-		"terser-webpack-plugin": "5.3.14",
+		"terser-webpack-plugin": "^5.5.0",
 		"thread-loader": "3.0.4",
 		url: "^0.11.0",
 		vite: "~6.4.2",
@@ -152,7 +152,7 @@ var pkgJson = {
 		rimraf: "6.0.1"
 	},
 	engines: {
-		node: "18.x || 20.x || >=22.0.0"
+		node: "20.x || >=22.0.0"
 	},
 	peerDependencies: {
 		puppeteer: ">=20.0.0"

package/dist/serve-22475fec.esm.js

@@ -0,0 +1,80 @@
+import _startsWithInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/starts-with';
+import _bindInstanceProperty from '@babel/runtime-corejs3/core-js-stable/instance/bind';
+import _URL from '@babel/runtime-corejs3/core-js-stable/url';
+import _Promise from '@babel/runtime-corejs3/core-js-stable/promise';
+import http from 'http';
+import sirv from 'sirv';
+import { p as paths } from './paths-39f22b8b.esm.js';
+import '@babel/runtime-corejs3/core-js-stable/instance/find';
+import 'fs';
+import 'path';
+import './does-file-exist-32618334.esm.js';
+import 'node:fs';
+
+const DEFAULT_PORT = 3001;
+async function run() {
+  var _context, _context2, _context3;
+  let options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  const port = options.port ?? DEFAULT_PORT;
+  const publicPath = options.publicPath ?? paths.appBuild;
+  const handleAuthRoutes = options.handleAuthRoutes ?? true;
+  const applicationConfig = options.applicationConfig;
+  const isLocalMcApi = ((_context = applicationConfig) == null ? void 0 : _bindInstanceProperty(_context3 = Function.call).call(_context3, _startsWithInstanceProperty(_context2 = _context.env.mcApiUrl), _context2))?.('http://localhost') ?? false;
+
+  // `single: true` gives us the SPA fallback — any unmatched path is served as
+  // the root `index.html`. This replaces the complex glob workaround that
+  // `serve-handler` needed because of vercel/serve-handler#71.
+  const staticHandler = sirv(publicPath, {
+    single: true,
+    etag: true
+  });
+  const server = http.createServer((request, response) => {
+    var _context10, _context11;
+    // The auth-route handlers are the only consumer of `applicationConfig`,
+    // so the branch is entered only when both the flag is on AND the caller
+    // supplied a config. The CLI pairs the two — see `serve` action in
+    // `cli.ts`. Apps that own the `/login*` / `/logout*` routes themselves
+    // (e.g. `application-authentication`) opt out via
+    // `--handle-auth-routes=false` so those paths flow through to the SPA
+    // fallback like any other route.
+    if (handleAuthRoutes && applicationConfig) {
+      var _context4, _context5, _context6, _context7, _context8, _context9, _context0, _context1;
+      // Localhost-only: inline replacement for the login/logout UI that
+      // `mc-dev-authentication` used to ship as static HTML (#3734).
+      if (isLocalMcApi && ((_context4 = request.url) == null ? void 0 : _bindInstanceProperty(_context5 = Function.call).call(_context5, _startsWithInstanceProperty(_context4), _context4))?.('/login/authorize')) {
+        const redirectTo = new _URL(request.url, applicationConfig.env.mcApiUrl);
+        response.writeHead(301, {
+          Location: redirectTo.toString()
+        }).end();
+        return;
+      }
+      if (isLocalMcApi && ((_context6 = request.url) == null ? void 0 : _bindInstanceProperty(_context7 = Function.call).call(_context7, _startsWithInstanceProperty(_context6), _context6))?.('/logout')) {
+        response.end('Please clear your session storage.');
+        return;
+      }
+
+      // Preserve the pre-swap contract: any other `/login*` or `/logout*`
+      // request (bare `/login`, non-localhost auth callbacks, etc.) must NOT
+      // fall back to the SPA — that would mask OAuth callback
+      // misconfigurations by rendering the app on a URL the backend owns.
+      if (((_context8 = request.url) == null ? void 0 : _bindInstanceProperty(_context9 = Function.call).call(_context9, _startsWithInstanceProperty(_context8), _context8))?.('/login') || ((_context0 = request.url) == null ? void 0 : _bindInstanceProperty(_context1 = Function.call).call(_context1, _startsWithInstanceProperty(_context0), _context0))?.('/logout')) {
+        response.writeHead(404).end();
+        return;
+      }
+    }
+
+    // Absorb `/favicon*` variants (e.g. `/favicon.ico`, `/favicon-32x32.png`)
+    // into the single PNG the app ships.
+    if (((_context10 = request.url) == null ? void 0 : _bindInstanceProperty(_context11 = Function.call).call(_context11, _startsWithInstanceProperty(_context10), _context10))?.('/favicon')) {
+      request.url = '/favicon.png';
+    }
+    staticHandler(request, response, () => {
+      response.writeHead(404).end();
+    });
+  });
+  return new _Promise(resolve => {
+    server.listen(port, () => resolve(server));
+  });
+}
+
+export { run as default };

package/dist/serve-3837602d.cjs.prod.js

@@ -0,0 +1,91 @@
+'use strict';
+
+var _startsWithInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/starts-with');
+var _bindInstanceProperty = require('@babel/runtime-corejs3/core-js-stable/instance/bind');
+var _URL = require('@babel/runtime-corejs3/core-js-stable/url');
+var _Promise = require('@babel/runtime-corejs3/core-js-stable/promise');
+var http = require('http');
+var sirv = require('sirv');
+var paths = require('./paths-7768b440.cjs.prod.js');
+require('@babel/runtime-corejs3/core-js-stable/instance/find');
+require('fs');
+require('path');
+require('./does-file-exist-be53305d.cjs.prod.js');
+require('node:fs');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
+
+var _startsWithInstanceProperty__default = /*#__PURE__*/_interopDefault(_startsWithInstanceProperty);
+var _bindInstanceProperty__default = /*#__PURE__*/_interopDefault(_bindInstanceProperty);
+var _URL__default = /*#__PURE__*/_interopDefault(_URL);
+var _Promise__default = /*#__PURE__*/_interopDefault(_Promise);
+var http__default = /*#__PURE__*/_interopDefault(http);
+var sirv__default = /*#__PURE__*/_interopDefault(sirv);
+
+const DEFAULT_PORT = 3001;
+async function run() {
+  var _context, _context2, _context3;
+  let options = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : {};
+  const port = options.port ?? DEFAULT_PORT;
+  const publicPath = options.publicPath ?? paths.paths.appBuild;
+  const handleAuthRoutes = options.handleAuthRoutes ?? true;
+  const applicationConfig = options.applicationConfig;
+  const isLocalMcApi = ((_context = applicationConfig) == null ? void 0 : _bindInstanceProperty__default["default"](_context3 = Function.call).call(_context3, _startsWithInstanceProperty__default["default"](_context2 = _context.env.mcApiUrl), _context2))?.('http://localhost') ?? false;
+
+  // `single: true` gives us the SPA fallback — any unmatched path is served as
+  // the root `index.html`. This replaces the complex glob workaround that
+  // `serve-handler` needed because of vercel/serve-handler#71.
+  const staticHandler = sirv__default["default"](publicPath, {
+    single: true,
+    etag: true
+  });
+  const server = http__default["default"].createServer((request, response) => {
+    var _context10, _context11;
+    // The auth-route handlers are the only consumer of `applicationConfig`,
+    // so the branch is entered only when both the flag is on AND the caller
+    // supplied a config. The CLI pairs the two — see `serve` action in
+    // `cli.ts`. Apps that own the `/login*` / `/logout*` routes themselves
+    // (e.g. `application-authentication`) opt out via
+    // `--handle-auth-routes=false` so those paths flow through to the SPA
+    // fallback like any other route.
+    if (handleAuthRoutes && applicationConfig) {
+      var _context4, _context5, _context6, _context7, _context8, _context9, _context0, _context1;
+      // Localhost-only: inline replacement for the login/logout UI that
+      // `mc-dev-authentication` used to ship as static HTML (#3734).
+      if (isLocalMcApi && ((_context4 = request.url) == null ? void 0 : _bindInstanceProperty__default["default"](_context5 = Function.call).call(_context5, _startsWithInstanceProperty__default["default"](_context4), _context4))?.('/login/authorize')) {
+        const redirectTo = new _URL__default["default"](request.url, applicationConfig.env.mcApiUrl);
+        response.writeHead(301, {
+          Location: redirectTo.toString()
+        }).end();
+        return;
+      }
+      if (isLocalMcApi && ((_context6 = request.url) == null ? void 0 : _bindInstanceProperty__default["default"](_context7 = Function.call).call(_context7, _startsWithInstanceProperty__default["default"](_context6), _context6))?.('/logout')) {
+        response.end('Please clear your session storage.');
+        return;
+      }
+
+      // Preserve the pre-swap contract: any other `/login*` or `/logout*`
+      // request (bare `/login`, non-localhost auth callbacks, etc.) must NOT
+      // fall back to the SPA — that would mask OAuth callback
+      // misconfigurations by rendering the app on a URL the backend owns.
+      if (((_context8 = request.url) == null ? void 0 : _bindInstanceProperty__default["default"](_context9 = Function.call).call(_context9, _startsWithInstanceProperty__default["default"](_context8), _context8))?.('/login') || ((_context0 = request.url) == null ? void 0 : _bindInstanceProperty__default["default"](_context1 = Function.call).call(_context1, _startsWithInstanceProperty__default["default"](_context0), _context0))?.('/logout')) {
+        response.writeHead(404).end();
+        return;
+      }
+    }
+
+    // Absorb `/favicon*` variants (e.g. `/favicon.ico`, `/favicon-32x32.png`)
+    // into the single PNG the app ships.
+    if (((_context10 = request.url) == null ? void 0 : _bindInstanceProperty__default["default"](_context11 = Function.call).call(_context11, _startsWithInstanceProperty__default["default"](_context10), _context10))?.('/favicon')) {
+      request.url = '/favicon.png';
+    }
+    staticHandler(request, response, () => {
+      response.writeHead(404).end();
+    });
+  });
+  return new _Promise__default["default"](resolve => {
+    server.listen(port, () => resolve(server));
+  });
+}
+
+exports["default"] = run;