@dr.pogodin/react-utils 1.46.2 → 1.47.0-alpha.11

package/build/production/server/renderer.js

@@ -1,12 +1,14 @@
-"use strict";var _interopRequireDefault=require("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(exports,"__esModule",{value:true});exports.ServerSsrContext=exports.SCRIPT_LOCATIONS=void 0;exports.default=factory;exports.isBrotliAcceptable=isBrotliAcceptable;exports.newDefaultLogger=newDefaultLogger;var _nodeFs=_interopRequireDefault(require("node:fs"));var _nodePath=_interopRequireDefault(require("node:path"));var _nodeStream=require("node:stream");var _nodeZlib=require("node:zlib");var _winston=_interopRequireDefault(require("winston"));var _reactGlobalState=require("@dr.pogodin/react-global-state");var _jsUtils=require("@dr.pogodin/js-utils");var _lodash=require("lodash");var _config=_interopRequireDefault(require("config"));var _nodeForge=_interopRequireDefault(require("node-forge"));var _static=require("react-dom/static");var _reactHelmet=require("@dr.pogodin/react-helmet");var _reactRouter=require("react-router");var _serializeJavascript=_interopRequireDefault(require("serialize-javascript"));var _buildInfo=require("../shared/utils/isomorphy/buildInfo");var _Cache=_interopRequireDefault(require("./Cache"));var _jsxRuntime=require("react/jsx-runtime");/**
+import"core-js/modules/es.iterator.constructor.js";import"core-js/modules/es.iterator.for-each.js";import"core-js/modules/es.iterator.map.js";import"core-js/modules/es.set.difference.v2.js";import"core-js/modules/es.set.intersection.v2.js";import"core-js/modules/es.set.is-disjoint-from.v2.js";import"core-js/modules/es.set.is-subset-of.v2.js";import"core-js/modules/es.set.is-superset-of.v2.js";import"core-js/modules/es.set.symmetric-difference.v2.js";import"core-js/modules/es.set.union.v2.js";import"core-js/modules/es.iterator.constructor.js";import"core-js/modules/es.iterator.for-each.js";import"core-js/modules/es.iterator.map.js";import"core-js/modules/es.set.difference.v2.js";import"core-js/modules/es.set.intersection.v2.js";import"core-js/modules/es.set.is-disjoint-from.v2.js";import"core-js/modules/es.set.is-subset-of.v2.js";import"core-js/modules/es.set.is-superset-of.v2.js";import"core-js/modules/es.set.symmetric-difference.v2.js";import"core-js/modules/es.set.union.v2.js";/**
  * ExpressJS middleware for server-side rendering of a ReactJS app.
- */const sanitizedConfig=(0,_lodash.omit)(_config.default,"SECRET");// Note: These type definitions for logger are copied from Winston logger,
+ */import{Buffer}from"node:buffer";import{createCipheriv,randomBytes}from"node:crypto";import fs from"node:fs";import path from"node:path";import{Writable}from"node:stream";import{brotliCompress,brotliDecompress}from"node:zlib";import winston from"winston";import{GlobalStateProvider,SsrContext}from"@dr.pogodin/react-global-state";import{timer}from"@dr.pogodin/js-utils";import{cloneDeep,defaults,get,mapValues}from"lodash-es";import config from"config";import{prerenderToNodeStream}from"react-dom/static";import{HelmetProvider}from"@dr.pogodin/react-helmet";import{StaticRouter}from"react-router";import serializeJs from"serialize-javascript";import{setBuildInfo}from"../shared/utils/isomorphy/buildInfo.js";import Cache from"./Cache.js";// @ts-expect-error "Property 'SECRET' does not exist on type 'IConfig'."
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+import{jsx as _jsx}from"react/jsx-runtime";const{SECRET,...sanitizedConfig}=config;// Note: These type definitions for logger are copied from Winston logger,
 // then simplified to make it easier to fit an alternative logger into this
 // interface.
 // eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 // eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 // eslint-disable-next-line @typescript-eslint/consistent-type-definitions
-let SCRIPT_LOCATIONS=exports.SCRIPT_LOCATIONS=/*#__PURE__*/function(SCRIPT_LOCATIONS){SCRIPT_LOCATIONS["BODY_OPEN"]="BODY_OPEN";SCRIPT_LOCATIONS["DEFAULT"]="DEFAULT";SCRIPT_LOCATIONS["HEAD_OPEN"]="HEAD_OPEN";return SCRIPT_LOCATIONS}({});class ServerSsrContext extends _reactGlobalState.SsrContext{chunks=[];status=200;constructor(req,chunkGroups,initialState){super((0,_lodash.cloneDeep)(initialState)??{});this.chunkGroups=chunkGroups;this.req=req}}exports.ServerSsrContext=ServerSsrContext;/**
+export let SCRIPT_LOCATIONS=/*#__PURE__*/function(SCRIPT_LOCATIONS){SCRIPT_LOCATIONS["BODY_OPEN"]="BODY_OPEN";SCRIPT_LOCATIONS["DEFAULT"]="DEFAULT";SCRIPT_LOCATIONS["HEAD_OPEN"]="HEAD_OPEN";return SCRIPT_LOCATIONS}({});export class ServerSsrContext extends SsrContext{chunks=[];status=200;constructor(req,chunkGroups,initialState){super(cloneDeep(initialState)??{});this.chunkGroups=chunkGroups;this.req=req}}/**
  * Reads build-time information about the app. This information is generated
  * by our standard Webpack config for apps, and it is written into
  * ".build-info" file in the context folder specified in Webpack config.
@@ -14,26 +16,25 @@ let SCRIPT_LOCATIONS=exports.SCRIPT_LOCATIONS=/*#__PURE__*/function(SCRIPT_LOCAT
  * suitable for cryptographical use.
  * @param context Webpack context path used during the build.
  * @return Resolves to the build-time information.
- */function getBuildInfo(context){const url=_nodePath.default.resolve(context,".build-info");return JSON.parse(_nodeFs.default.readFileSync(url,"utf8"))}/**
+ */function getBuildInfo(context){const url=path.resolve(context,".build-info");return JSON.parse(fs.readFileSync(url,"utf8"))}/**
  * Attempts to read from disk the named chunk groups mapping generated
  * by Webpack during the compilation.
  * It will not work for development builds, where these stats should be captured
  * via compilator callback.
  * @param buildDir
  * @return
- */function readChunkGroupsJson(buildDir){const url=_nodePath.default.resolve(buildDir,"__chunk_groups__.json");let res;try{res=JSON.parse(_nodeFs.default.readFileSync(url,"utf8"))}catch{// TODO: Should we message the error here somehow?
+ */function readChunkGroupsJson(buildDir){const url=path.resolve(buildDir,"__chunk_groups__.json");let res;try{res=JSON.parse(fs.readFileSync(url,"utf8"))}catch{// TODO: Should we message the error here somehow?
 res=null}return res}/**
  * Prepares a new Cipher for data encryption.
- * @param key Encryption key (32-bit random key is expected, see
- *  node-forge documentation, in case of doubts).
- * @return Resolves to the object with two fields:
+ * @param key Encryption key (32-bit random, Base64-encoded key is expected).
+ * @return Returns a tuple of:
  *  1. cipher - a new Cipher, ready for encryption;
  *  2. iv - initial vector used by the cipher.
- */async function prepareCipher(key){return new Promise((resolve,reject)=>{_nodeForge.default.random.getBytes(32,(err,iv)=>{if(err)reject(err);else{const cipher=_nodeForge.default.cipher.createCipher("AES-CBC",key);cipher.start({iv});resolve({cipher,iv})}})})}/**
+ */function prepareCipher(key){const iv=randomBytes(16);const cipher=createCipheriv("AES-256-CBC",Buffer.from(key,"base64"),iv);return[cipher,iv]}/**
  * Given an incoming HTTP requests, it deduces whether Brotli-encoded responses
  * are acceptable to the caller.
  * @param req
- */function isBrotliAcceptable(req){const acceptable=req.get("accept-encoding");if(acceptable){const ops=acceptable.split(",");for(const op of ops){const[type,priority]=op.trim().split(";q=");if((type==="*"||type==="br")&&(!priority||parseFloat(priority)>0)){return true}}}return false}/**
+ */export function isBrotliAcceptable(req){const acceptable=req.get("accept-encoding");if(acceptable){const ops=acceptable.split(",");for(const op of ops){const[type,priority]=op.trim().split(";q=");if((type==="*"||type==="br")&&(!priority||parseFloat(priority)>0)){return true}}}return false}/**
  * Given an array of extra script strings / objects, it returns an object with
  * arrays of scripts to inject in different HTML template locations. During
  * the script groupping it also filters out any empty scripts.
@@ -46,12 +47,12 @@ res=null}return res}/**
  *  DEFAULT: string[];
  *  HEAD_OPEN: string[];
  * }}
- */function groupExtraScripts(scripts=[]){const res={[SCRIPT_LOCATIONS.BODY_OPEN]:"",[SCRIPT_LOCATIONS.DEFAULT]:"",[SCRIPT_LOCATIONS.HEAD_OPEN]:""};for(const script of scripts){if((0,_lodash.isString)(script)){if(script)res[SCRIPT_LOCATIONS.DEFAULT]+=script}else if(script.code){if(script.location in res)res[script.location]+=script.code;else throw Error(`Invalid location "${script.location}"`)}}return res}/**
+ */function groupExtraScripts(scripts=[]){const res={[SCRIPT_LOCATIONS.BODY_OPEN]:"",[SCRIPT_LOCATIONS.DEFAULT]:"",[SCRIPT_LOCATIONS.HEAD_OPEN]:""};for(const script of scripts){if(typeof script==="string"){if(script)res[SCRIPT_LOCATIONS.DEFAULT]+=script}else if(script.code){if(script.location in res)res[script.location]+=script.code;else throw Error(`Invalid location "${script.location}"`)}}return res}/**
  * Creates a new default (Winston) logger.
  * @param {object} [options={}]
  * @param {string} [options.defaultLogLevel='info']
  * @return {object}
- */function newDefaultLogger({defaultLogLevel="info"}={}){const{format,transports}=_winston.default;return _winston.default.createLogger({format:format.combine(format.splat(),format.timestamp(),format.colorize(),format.printf(({level,message,timestamp,stack,...rest})=>{let res=`${level}\t(at ${timestamp}):\t${message}`;if(Object.keys(rest).length){res+=`\n${JSON.stringify(rest,null,2)}`}if(stack)res+=`\n${stack}`;return res})),level:defaultLogLevel,transports:[new transports.Console]})}/**
+ */export function newDefaultLogger({defaultLogLevel="info"}={}){const{format,transports}=winston;return winston.createLogger({format:format.combine(format.splat(),format.timestamp(),format.colorize(),format.printf(({level,message,timestamp,stack,...rest})=>{let res=`${level}\t(at ${timestamp}):\t${message}`;if(Object.keys(rest).length){res+=`\n${JSON.stringify(rest,null,2)}`}if(stack)res+=`\n${stack}`;return res})),level:defaultLogLevel,transports:[new transports.Console]})}/**
  * Creates the middleware.
  * @param webpackConfig
  * @param options Additional options:
@@ -81,25 +82,23 @@ res=null}return res}/**
  * - `maxage?: number` – the maximum age of cached result in ms.
  *   If undefined - infinite age is assumed.
  * @return Created middleware.
- */function factory(webpackConfig,options){const ops=(0,_lodash.defaults)((0,_lodash.clone)(options),{beforeRender:async()=>Promise.resolve({}),maxSsrRounds:10,ssrTimeout:1000,staticCacheSize:1.e7});// Note: in normal use the default logger is created and set in the root
+ */export default function factory(webpackConfig,options){const ops=defaults({...options},{beforeRender:async()=>Promise.resolve({}),maxSsrRounds:10,ssrTimeout:1000,staticCacheSize:1.e7});// Note: in normal use the default logger is created and set in the root
 // server function, and this initialization is for testing uses, where
 // renderer is imported directly.
-ops.logger??=newDefaultLogger({defaultLogLevel:ops.defaultLoggerLogLevel});const buildInfo=ops.buildInfo??getBuildInfo(webpackConfig.context);(0,_buildInfo.setBuildInfo)(buildInfo);// publicPath from webpack.output has a trailing slash at the end.
-const{publicPath,path:outputPath}=webpackConfig.output;const manifestLink=_nodeFs.default.existsSync(`${outputPath}/manifest.json`)?`<link rel="manifest" href="${publicPath}manifest.json">`:"";// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
-const cache=ops.staticCacheController?new _Cache.default(ops.staticCacheSize):null;const CHUNK_GROUPS=readChunkGroupsJson(outputPath);// TODO: Look at it later.
+ops.logger??=newDefaultLogger({defaultLogLevel:ops.defaultLoggerLogLevel});const buildInfo=ops.buildInfo??getBuildInfo(webpackConfig.context);setBuildInfo(buildInfo);// publicPath from webpack.output has a trailing slash at the end.
+const{publicPath,path:outputPath}=webpackConfig.output;const manifestLink=fs.existsSync(`${outputPath}/manifest.json`)?`<link rel="manifest" href="${publicPath}manifest.json">`:"";// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
+const cache=ops.staticCacheController?new Cache(ops.staticCacheSize):null;const CHUNK_GROUPS=readChunkGroupsJson(outputPath);// TODO: Look at it later.
 // eslint-disable-next-line complexity
 return async(req,res,next)=>{try{// Ensures any caches always revalidate HTML markup before reuse.
-res.set("Cache-Control","no-cache");res.cookie("csrfToken",req.csrfToken());let cacheRef;if(cache){cacheRef=ops.staticCacheController(req);if(cacheRef){const data=cache.get(cacheRef);if(data!==null){const{buffer,status}=data;if(ops.noCsp&&isBrotliAcceptable(req)){res.set("Content-Type","text/html");res.set("Content-Encoding","br");if(status!==200)res.status(status);res.send(buffer)}else{await new Promise((done,failed)=>{(0,_nodeZlib.brotliDecompress)(buffer,(error,html)=>{if(error)failed(error);else{let h=html.toString();if(!ops.noCsp){// TODO: Starting from Node v15 we'll be able to use string's
+res.set("Cache-Control","no-cache");res.cookie("csrfToken",req.csrfToken());let cacheRef;if(cache){cacheRef=ops.staticCacheController(req);if(cacheRef){const data=cache.get(cacheRef);if(data!==null){const{buffer,status}=data;if(ops.noCsp&&isBrotliAcceptable(req)){res.set("Content-Type","text/html");res.set("Content-Encoding","br");if(status!==200)res.status(status);res.send(buffer)}else{await new Promise((done,failed)=>{brotliDecompress(buffer,(error,html)=>{if(error)failed(error);else{let h=html.toString();if(!ops.noCsp){// TODO: Starting from Node v15 we'll be able to use string's
 // .replaceAll() method instead relying on reg. expression for
 // global matching.
 const regex=new RegExp(buffer.nonce,"g");// TODO: It should be implemented more careful.
-h=h.replace(regex,req.nonce)}if(status!==200)res.status(status);res.send(h);done()}})})}return}}}const brr=ops.beforeRender(req,sanitizedConfig);const[{configToInject,extraScripts,initialState},{cipher,iv}]=await Promise.all([// NOTE: Written this way to avoid triggering the "await-thenable"
-// ESLint rule.
-brr instanceof Promise?brr:Promise.resolve(brr),prepareCipher(buildInfo.key)]);let helmet;// Gets the mapping between code chunk names and their asset files.
+h=h.replace(regex,req.nonce)}if(status!==200)res.status(status);res.send(h);done()}})})}return}}}const brr=ops.beforeRender(req,sanitizedConfig);const{configToInject,extraScripts,initialState}=await brr;const[cipher,iv]=prepareCipher(buildInfo.key);let helmet;// Gets the mapping between code chunk names and their asset files.
 // These data come from the Webpack compilation, either from the stats
 // attached to the request (in dev mode), or from a file output during
 // the build (in prod mode).
-let chunkGroups;const webpackStats=(0,_lodash.get)(res.locals,"webpack.devMiddleware.stats");if(webpackStats){chunkGroups=(0,_lodash.mapValues)(webpackStats.toJson({all:false,chunkGroups:true}).namedChunkGroups,item=>item.assets?.map(({name})=>name)??[])}else if(CHUNK_GROUPS)chunkGroups=CHUNK_GROUPS;else chunkGroups={};/* Optional server-side rendering. */const App=ops.Application;let appHtmlMarkup="";const ssrContext=new ServerSsrContext(req,chunkGroups,initialState);let stream;if(App){const ssrStart=Date.now();// TODO: Somehow, without it TS does not realise that
+let chunkGroups;const webpackStats=get(res.locals,"webpack.devMiddleware.stats");if(webpackStats){chunkGroups=mapValues(webpackStats.toJson({all:false,chunkGroups:true}).namedChunkGroups,item=>item.assets?.map(({name})=>name)??[])}else if(CHUNK_GROUPS)chunkGroups=CHUNK_GROUPS;else chunkGroups={};/* Optional server-side rendering. */const App=ops.Application;let appHtmlMarkup="";const ssrContext=new ServerSsrContext(req,chunkGroups,initialState);let stream;if(App){const ssrStart=Date.now();// TODO: Somehow, without it TS does not realise that
 // App has been checked to exist.
 const App2=App;const renderPass=async()=>new Promise((resolveArg,rejectArg)=>{ssrContext.chunks=[];// NOTE: JS does not have problems if resolve() and reject() methods
 // of a Promise are called multiple times, with different arguments;
@@ -109,14 +108,14 @@ const App2=App;const renderPass=async()=>new Promise((resolveArg,rejectArg)=>{ss
 // if any.
 let error;const resolve=arg=>{if(error!==undefined)throw Error("Internal error");error=null;resolveArg(arg)};const reject=arg=>{if(error!==undefined&&error!==arg){throw Error("Internal error")}error=arg;rejectArg(arg)};// TODO: prerenderToNodeStream has (abort) "signal" option,
 // and we should wire it up to the SSR timeout below.
-const helmetContext={};void(0,_static.prerenderToNodeStream)(/*#__PURE__*/(0,_jsxRuntime.jsx)(_reactGlobalState.GlobalStateProvider,{initialState:ssrContext.state,ssrContext:ssrContext,children:/*#__PURE__*/(0,_jsxRuntime.jsx)(_reactRouter.StaticRouter,{location:req.url,children:/*#__PURE__*/(0,_jsxRuntime.jsx)(_reactHelmet.HelmetProvider,{context:helmetContext,children:/*#__PURE__*/(0,_jsxRuntime.jsx)(App2,{})})})}),{onError:reject}).then(result=>{({helmet}=helmetContext);resolve(result.prelude)}).catch(reject)});let ssrRound=0;let bailed=false;for(;ssrRound<ops.maxSsrRounds;++ssrRound){stream=await renderPass();if(!ssrContext.dirty)break;const timeout=ops.ssrTimeout+ssrStart-Date.now();bailed=timeout<=0||!(await Promise.race([Promise.allSettled(ssrContext.pending),(0,_jsUtils.timer)(timeout).then(()=>false)]));if(bailed)break}let logMsg;if(ssrContext.dirty){// NOTE: In the case of incomplete SSR one more round is necessary
+const helmetContext={};void prerenderToNodeStream(/*#__PURE__*/_jsx(GlobalStateProvider,{initialState:ssrContext.state,ssrContext:ssrContext,children:/*#__PURE__*/_jsx(StaticRouter,{location:req.url,children:/*#__PURE__*/_jsx(HelmetProvider,{context:helmetContext,children:/*#__PURE__*/_jsx(App2,{})})})}),{onError:reject}).then(result=>{({helmet}=helmetContext);resolve(result.prelude)}).catch(reject)});let ssrRound=0;let bailed=false;for(;ssrRound<ops.maxSsrRounds;++ssrRound){stream=await renderPass();if(!ssrContext.dirty)break;const timeout=ops.ssrTimeout+ssrStart-Date.now();bailed=timeout<=0||!(await Promise.race([Promise.allSettled(ssrContext.pending),timer(timeout).then(()=>false)]));if(bailed)break}let logMsg;if(ssrContext.dirty){// NOTE: In the case of incomplete SSR one more round is necessary
 // to ensure the correct hydration when some pending promises have
 // resolved and placed their data into the initial global state.
-stream=await renderPass();logMsg=bailed?`SSR timed out after ${ops.ssrTimeout} second(s)`:`SSR bailed out after ${ops.maxSsrRounds} round(s)`}else logMsg=`SSR completed in ${ssrRound+1} round(s)`;ops.logger.log(ssrContext.dirty?"warn":"info",logMsg);if(ssrContext.redirectTo){res.redirect(ssrContext.status,ssrContext.redirectTo);return}await new Promise(ready=>{stream.pipe(new _nodeStream.Writable({destroy:ready,write:(chunk,_,done)=>{appHtmlMarkup+=chunk.toString();done()}}))})}/* Encrypts data to be injected into HTML.
+stream=await renderPass();logMsg=bailed?`SSR timed out after ${ops.ssrTimeout} second(s)`:`SSR bailed out after ${ops.maxSsrRounds} round(s)`}else logMsg=`SSR completed in ${ssrRound+1} round(s)`;ops.logger.log(ssrContext.dirty?"warn":"info",logMsg);if(ssrContext.redirectTo){res.redirect(ssrContext.status,ssrContext.redirectTo);return}await new Promise(ready=>{stream.pipe(new Writable({destroy:ready,write:(chunk,_,done)=>{appHtmlMarkup+=chunk.toString();done()}}))})}/* Encrypts data to be injected into HTML.
        * Keep in mind, that this encryption is no way secure: as the JS bundle
        * contains decryption key and is able to decode it at the client side.
        * Hovewer, for a number of reasons, encryption of injected data is still
-       * better than injection of a plain text. */const payload=(0,_serializeJavascript.default)({CHUNK_GROUPS:chunkGroups,CONFIG:configToInject??sanitizedConfig,ISTATE:ssrContext.state},{ignoreFunction:true,unsafe:true});cipher.update(_nodeForge.default.util.createBuffer(payload,"utf8"));cipher.finish();const INJ=_nodeForge.default.util.encode64(`${iv}${cipher.output.data}`);const chunkSet=new Set;// TODO: "main" chunk has to be added explicitly,
+       * better than injection of a plain text. */const payload=serializeJs({CHUNK_GROUPS:chunkGroups,CONFIG:configToInject??sanitizedConfig,ISTATE:ssrContext.state},{ignoreFunction:true,unsafe:true});const INJ=Buffer.concat([iv,cipher.update(payload,"utf8"),cipher.final()]).toString("base64");const chunkSet=new Set;// TODO: "main" chunk has to be added explicitly,
 // because unlike all other chunks they are not managed by <CodeSplit>
 // component, thus they are not added to the ssrContext.chunks
 // automatically. Actually, names of these entry chunks should be
@@ -151,7 +150,7 @@ stream=await renderPass();logMsg=bailed?`SSR timed out after ${ops.ssrTimeout} s
           </body>
         </html>`;const status=ssrContext.status||200;if(status!==200)res.status(status);if(cacheRef&&status<500){// Note: waiting for the caching to complete is not strictly necessary,
 // but it greately simplifies testing, and error reporting.
-await new Promise((done,failed)=>{(0,_nodeZlib.brotliCompress)(html,(error,buffer)=>{if(error)failed(error);else{const b=buffer;b.nonce=req.nonce;cache.add({buffer:b,status},cacheRef.key,buffer.length);done()}})})}// Note: as caching code above may throw in some cases, sending response
+await new Promise((done,failed)=>{brotliCompress(html,(error,buffer)=>{if(error)failed(error);else{const b=buffer;b.nonce=req.nonce;cache.add({buffer:b,status},cacheRef.key,buffer.length);done()}})})}// Note: as caching code above may throw in some cases, sending response
 // before it completes will likely hide the error, making it difficult
 // to debug. Thus, at least for now, lets send response after it.
 res.send(html)}catch(error){next(error)}}}

package/build/production/server/renderer.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderer.js","names":["_nodeFs","_interopRequireDefault","require","_nodePath","_nodeStream","_nodeZlib","_winston","_reactGlobalState","_jsUtils","_lodash","_config","_nodeForge","_static","_reactHelmet","_reactRouter","_serializeJavascript","_buildInfo","_Cache","_jsxRuntime","sanitizedConfig","omit","config","SCRIPT_LOCATIONS","exports","ServerSsrContext","SsrContext","chunks","status","constructor","req","chunkGroups","initialState","cloneDeep","getBuildInfo","context","url","path","resolve","JSON","parse","fs","readFileSync","readChunkGroupsJson","buildDir","res","prepareCipher","key","Promise","reject","forge","random","getBytes","err","iv","cipher","createCipher","start","isBrotliAcceptable","acceptable","get","ops","split","op","type","priority","trim","parseFloat","groupExtraScripts","scripts","BODY_OPEN","DEFAULT","HEAD_OPEN","script","isString","code","location","Error","newDefaultLogger","defaultLogLevel","format","transports","winston","createLogger","combine","splat","timestamp","colorize","printf","level","message","stack","rest","Object","keys","length","stringify","Console","factory","webpackConfig","options","defaults","clone","beforeRender","maxSsrRounds","ssrTimeout","staticCacheSize","logger","defaultLoggerLogLevel","buildInfo","setBuildInfo","publicPath","outputPath","output","manifestLink","existsSync","cache","staticCacheController","Cache","CHUNK_GROUPS","next","set","cookie","csrfToken","cacheRef","data","buffer","noCsp","send","done","failed","brotliDecompress","error","html","h","toString","regex","RegExp","nonce","replace","brr","configToInject","extraScripts","all","helmet","webpackStats","locals","mapValues","toJson","namedChunkGroups","item","assets","map","name","App","Application","appHtmlMarkup","ssrContext","stream","ssrStart","Date","now","App2","renderPass","resolveArg","rejectArg","arg","undefined","helmetContext","prerenderToNodeStream","jsx","GlobalStateProvider","state","children","StaticRouter","HelmetProvider","onError","then","result","prelude","catch","ssrRound","bailed","dirty","timeout","race","allSettled","pending","timer","logMsg","log","redirectTo","redirect","ready","pipe","Writable","destroy","write","chunk","_","payload","serializeJs","CONFIG","ISTATE","ignoreFunction","unsafe","update","util","createBuffer","finish","INJ","encode64","chunkSet","Set","forEach","asset","add","styleChunkString","scriptChunkString","endsWith","grouppedExtraScripts","faviconLink","favicon","title","meta","link","brotliCompress","b"],"sources":["../../../src/server/renderer.tsx"],"sourcesContent":["/**\n * ExpressJS middleware for server-side rendering of a ReactJS app.\n */\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { Writable } from 'node:stream';\nimport { brotliCompress, brotliDecompress } from 'node:zlib';\n\nimport type { Request, RequestHandler } from 'express';\nimport type { ComponentType } from 'react';\nimport type { Configuration, Stats } from 'webpack';\nimport winston from 'winston';\n\nimport { GlobalStateProvider, SsrContext } from '@dr.pogodin/react-global-state';\nimport { timer } from '@dr.pogodin/js-utils';\n\nimport {\n  clone,\n  cloneDeep,\n  defaults,\n  get,\n  isString,\n  mapValues,\n  omit,\n} from 'lodash';\n\nimport config from 'config';\nimport forge from 'node-forge';\n\nimport { prerenderToNodeStream } from 'react-dom/static';\nimport { type HelmetDataContext, HelmetProvider } from '@dr.pogodin/react-helmet';\nimport { StaticRouter } from 'react-router';\nimport serializeJs from 'serialize-javascript';\nimport { type BuildInfoT, setBuildInfo } from 'utils/isomorphy/buildInfo';\n\nimport type { ChunkGroupsT, SsrContextT } from 'utils/globalState';\n\nimport Cache from './Cache';\n\nconst sanitizedConfig = omit(config, 'SECRET');\n\n// Note: These type definitions for logger are copied from Winston logger,\n// then simplified to make it easier to fit an alternative logger into this\n// interface.\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface LogMethodI {\n  // eslint-disable-next-line @typescript-eslint/prefer-function-type\n  (level: string, message: string, ...meta: unknown[]): void;\n}\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface LeveledLogMethodI {\n  // eslint-disable-next-line @typescript-eslint/prefer-function-type\n  (message: string, ...meta: unknown[]): void;\n}\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\nexport interface LoggerI {\n  debug: LeveledLogMethodI;\n  error: LeveledLogMethodI;\n  info: LeveledLogMethodI;\n  log: LogMethodI;\n  warn: LeveledLogMethodI;\n}\n\nexport enum SCRIPT_LOCATIONS {\n  BODY_OPEN = 'BODY_OPEN',\n  DEFAULT = 'DEFAULT',\n  HEAD_OPEN = 'HEAD_OPEN',\n}\n\nexport class ServerSsrContext<StateT>\n  extends SsrContext<StateT>\n  implements SsrContextT<StateT> {\n  chunkGroups: ChunkGroupsT;\n\n  chunks: string[] = [];\n\n  redirectTo?: string;\n\n  req: Request;\n\n  status: number = 200;\n\n  constructor(\n    req: Request,\n    chunkGroups: ChunkGroupsT,\n    initialState?: StateT,\n  ) {\n    super(cloneDeep(initialState) ?? ({} as StateT));\n    this.chunkGroups = chunkGroups;\n    this.req = req;\n  }\n}\n\ntype ScriptT = {\n  code: string;\n  location: SCRIPT_LOCATIONS;\n};\n\n/**\n * Reads build-time information about the app. This information is generated\n * by our standard Webpack config for apps, and it is written into\n * \".build-info\" file in the context folder specified in Webpack config.\n * At the moment, that file contains build timestamp and a random 32-bit key,\n * suitable for cryptographical use.\n * @param context Webpack context path used during the build.\n * @return Resolves to the build-time information.\n */\nfunction getBuildInfo(context: string) {\n  const url = path.resolve(context, '.build-info');\n  return JSON.parse(fs.readFileSync(url, 'utf8')) as BuildInfoT;\n}\n\n/**\n * Attempts to read from disk the named chunk groups mapping generated\n * by Webpack during the compilation.\n * It will not work for development builds, where these stats should be captured\n * via compilator callback.\n * @param buildDir\n * @return\n */\nfunction readChunkGroupsJson(buildDir: string) {\n  const url = path.resolve(buildDir, '__chunk_groups__.json');\n  let res;\n  try {\n    res = JSON.parse(fs.readFileSync(url, 'utf8')) as Record<string, string[]>;\n  } catch {\n    // TODO: Should we message the error here somehow?\n    res = null;\n  }\n  return res;\n}\n\n/**\n * Prepares a new Cipher for data encryption.\n * @param key Encryption key (32-bit random key is expected, see\n *  node-forge documentation, in case of doubts).\n * @return Resolves to the object with two fields:\n *  1. cipher - a new Cipher, ready for encryption;\n *  2. iv - initial vector used by the cipher.\n */\nasync function prepareCipher(key: string): Promise<{\n  cipher: forge.cipher.BlockCipher;\n  iv: string;\n}> {\n  return new Promise((resolve, reject) => {\n    forge.random.getBytes(32, (err, iv) => {\n      if (err) reject(err);\n      else {\n        const cipher = forge.cipher.createCipher('AES-CBC', key);\n        cipher.start({ iv });\n        resolve({ cipher, iv });\n      }\n    });\n  });\n}\n\n/**\n * Given an incoming HTTP requests, it deduces whether Brotli-encoded responses\n * are acceptable to the caller.\n * @param req\n */\nexport function isBrotliAcceptable(req: Request): boolean {\n  const acceptable = req.get('accept-encoding');\n  if (acceptable) {\n    const ops = acceptable.split(',');\n    for (const op of ops) {\n      const [type, priority] = op.trim().split(';q=');\n      if ((type === '*' || type === 'br')\n        && (!priority || parseFloat(priority) > 0)) {\n        return true;\n      }\n    }\n  }\n  return false;\n}\n\n/**\n * Given an array of extra script strings / objects, it returns an object with\n * arrays of scripts to inject in different HTML template locations. During\n * the script groupping it also filters out any empty scripts.\n * @param {({\n *  code: string;\n *  location: string;\n * }|string)[]} [scripts=[]]\n * @return {{\n *  BODY_OPEN: string[];\n *  DEFAULT: string[];\n *  HEAD_OPEN: string[];\n * }}\n */\nfunction groupExtraScripts(scripts: Array<string | ScriptT> = []) {\n  const res = {\n    [SCRIPT_LOCATIONS.BODY_OPEN]: '',\n    [SCRIPT_LOCATIONS.DEFAULT]: '',\n    [SCRIPT_LOCATIONS.HEAD_OPEN]: '',\n  };\n  for (const script of scripts) {\n    if (isString(script)) {\n      if (script) res[SCRIPT_LOCATIONS.DEFAULT] += script;\n    } else if (script.code) {\n      if (script.location in res) res[script.location] += script.code;\n      else throw Error(`Invalid location \"${script.location}\"`);\n    }\n  }\n  return res;\n}\n\n/**\n * Creates a new default (Winston) logger.\n * @param {object} [options={}]\n * @param {string} [options.defaultLogLevel='info']\n * @return {object}\n */\nexport function newDefaultLogger({\n  defaultLogLevel = 'info',\n} = {}): winston.Logger {\n  const { format, transports } = winston;\n  return winston.createLogger({\n    format: format.combine(\n      format.splat(),\n      format.timestamp(),\n      format.colorize(),\n      format.printf(\n        ({\n          level,\n          message,\n          timestamp,\n          stack,\n          ...rest\n        }) => {\n          let res = `${level}\\t(at ${timestamp as string}):\\t${message as string}`;\n          if (Object.keys(rest).length) {\n            res += `\\n${JSON.stringify(rest, null, 2)}`;\n          }\n          if (stack) res += `\\n${stack as string}`;\n          return res;\n        },\n      ),\n    ),\n    level: defaultLogLevel,\n    transports: [new transports.Console()],\n  });\n}\n\nexport type ConfigT = {\n  [key: string]: ConfigT | string;\n};\n\nexport type BeforeRenderResT = {\n  configToInject?: ConfigT;\n  extraScripts?: Array<ScriptT | string>;\n  initialState?: unknown;\n};\n\nexport type BeforeRenderT = (\n  req: Request,\n  config: ConfigT,\n) => BeforeRenderResT | Promise<BeforeRenderResT>;\n\ntype CacheRefT = {\n  key: string;\n  maxage?: number;\n};\n\nexport type OptionsT = {\n  Application?: ComponentType;\n  beforeRender?: BeforeRenderT;\n  buildInfo?: BuildInfoT;\n  defaultLoggerLogLevel?: string;\n  favicon?: string;\n  logger?: LoggerI;\n  maxSsrRounds?: number;\n  noCsp?: boolean;\n  staticCacheSize?: number;\n  ssrTimeout?: number;\n  staticCacheController?: (req: Request) => CacheRefT | null | undefined;\n};\n\n/**\n * Creates the middleware.\n * @param webpackConfig\n * @param options Additional options:\n * @param [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param [options.buildInfo] \"Build info\" object to use. If provided,\n *  it will be used, instead of trying to load from the filesystem the one\n *  generated by the Webpack build. It is intended for test environments,\n *  where passing this stuff via file system is no bueno.\n * @param [options.favicon] `true` will include favicon\n *  link into the rendered HTML templates.\n * @param [options.noCsp] `true` means that no\n * Content-Security-Policy (CSP) is used by server, thus the renderer\n * may cut a few corners.\n * @param [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @param [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` &ndash; the cache key for the response;\n * - `maxage?: number` &ndash; the maximum age of cached result in ms.\n *   If undefined - infinite age is assumed.\n * @return Created middleware.\n */\nexport default function factory(\n  webpackConfig: Configuration,\n  options: OptionsT,\n): RequestHandler {\n  const ops: OptionsT = defaults(clone(options), {\n    beforeRender: async () => Promise.resolve({}),\n    maxSsrRounds: 10,\n    ssrTimeout: 1000,\n    staticCacheSize: 1.e7,\n  });\n\n  // Note: in normal use the default logger is created and set in the root\n  // server function, and this initialization is for testing uses, where\n  // renderer is imported directly.\n  ops.logger ??= newDefaultLogger({\n    defaultLogLevel: ops.defaultLoggerLogLevel,\n  });\n\n  const buildInfo = ops.buildInfo ?? getBuildInfo(webpackConfig.context!);\n  setBuildInfo(buildInfo);\n\n  // publicPath from webpack.output has a trailing slash at the end.\n  const { publicPath, path: outputPath } = webpackConfig.output!;\n\n  const manifestLink = fs.existsSync(`${outputPath}/manifest.json`)\n    ? `<link rel=\"manifest\" href=\"${publicPath as string}manifest.json\">` : '';\n\n  // eslint-disable-next-line @typescript-eslint/consistent-type-definitions\n  interface BufferWithNonce extends ArrayBuffer {\n    nonce: string;\n  }\n\n  const cache = ops.staticCacheController\n    ? new Cache<{\n      buffer: BufferWithNonce;\n      status: number;\n    }>(ops.staticCacheSize!)\n    : null;\n\n  const CHUNK_GROUPS = readChunkGroupsJson(outputPath!);\n\n  // TODO: Look at it later.\n  // eslint-disable-next-line complexity\n  return async (req, res, next) => {\n    try {\n      // Ensures any caches always revalidate HTML markup before reuse.\n      res.set('Cache-Control', 'no-cache');\n\n      res.cookie('csrfToken', req.csrfToken());\n\n      let cacheRef: CacheRefT | null | undefined;\n      if (cache) {\n        cacheRef = ops.staticCacheController!(req);\n        if (cacheRef) {\n          const data = cache.get(cacheRef);\n          if (data !== null) {\n            const { buffer, status } = data;\n            if (ops.noCsp && isBrotliAcceptable(req)) {\n              res.set('Content-Type', 'text/html');\n              res.set('Content-Encoding', 'br');\n              if (status !== 200) res.status(status);\n              res.send(buffer);\n            } else {\n              await new Promise<void>((done, failed) => {\n                brotliDecompress(buffer, (error, html) => {\n                  if (error) failed(error);\n                  else {\n                    let h = html.toString();\n                    if (!ops.noCsp) {\n                      // TODO: Starting from Node v15 we'll be able to use string's\n                      // .replaceAll() method instead relying on reg. expression for\n                      // global matching.\n                      const regex = new RegExp(buffer.nonce, 'g');\n\n                      // TODO: It should be implemented more careful.\n                      h = h.replace(regex, (req as unknown as {\n                        nonce: string;\n                      }).nonce);\n                    }\n                    if (status !== 200) res.status(status);\n                    res.send(h);\n                    done();\n                  }\n                });\n              });\n            }\n            return;\n          }\n        }\n      }\n\n      const brr = ops.beforeRender!(req, sanitizedConfig as unknown as ConfigT);\n\n      const [{\n        configToInject,\n        extraScripts,\n        initialState,\n      }, {\n        cipher,\n        iv,\n      }] = await Promise.all([\n        // NOTE: Written this way to avoid triggering the \"await-thenable\"\n        // ESLint rule.\n        brr instanceof Promise ? brr : Promise.resolve(brr),\n\n        prepareCipher(buildInfo.key),\n      ]);\n\n      let helmet: HelmetDataContext['helmet'];\n\n      // Gets the mapping between code chunk names and their asset files.\n      // These data come from the Webpack compilation, either from the stats\n      // attached to the request (in dev mode), or from a file output during\n      // the build (in prod mode).\n      let chunkGroups: ChunkGroupsT;\n      const webpackStats = get(res.locals, 'webpack.devMiddleware.stats') as Stats | undefined;\n      if (webpackStats) {\n        chunkGroups = mapValues(\n          webpackStats.toJson({\n            all: false,\n            chunkGroups: true,\n          }).namedChunkGroups,\n          (item) => item.assets?.map(({ name }: { name: string }) => name)\n            ?? [],\n        );\n      } else if (CHUNK_GROUPS) chunkGroups = CHUNK_GROUPS;\n      else chunkGroups = {};\n\n      /* Optional server-side rendering. */\n      const App = ops.Application;\n      let appHtmlMarkup: string = '';\n      const ssrContext = new ServerSsrContext(req, chunkGroups, initialState);\n      let stream: NodeJS.ReadableStream;\n      if (App) {\n        const ssrStart = Date.now();\n\n        // TODO: Somehow, without it TS does not realise that\n        // App has been checked to exist.\n        const App2 = App;\n\n        const renderPass = async () => new Promise<NodeJS.ReadableStream>(\n          (resolveArg, rejectArg) => {\n            ssrContext.chunks = [];\n\n            // NOTE: JS does not have problems if resolve() and reject() methods\n            // of a Promise are called multiple times, with different arguments;\n            // it only respects the first call, and ignores subsequent ones.\n            // We, however, really want to assert that here, to safeguard against\n            // any future problems due to unexpected internal changes in React,\n            // if any.\n            let error: unknown;\n\n            const resolve = (arg: NodeJS.ReadableStream) => {\n              if (error !== undefined) throw Error('Internal error');\n              error = null;\n              resolveArg(arg);\n            };\n\n            const reject = (arg: unknown) => {\n              if (error !== undefined && error !== arg) {\n                throw Error('Internal error');\n              }\n              error = arg;\n              rejectArg(arg as Error);\n            };\n\n            // TODO: prerenderToNodeStream has (abort) \"signal\" option,\n            // and we should wire it up to the SSR timeout below.\n            const helmetContext = {} as HelmetDataContext;\n            void prerenderToNodeStream(\n              <GlobalStateProvider\n                initialState={ssrContext.state}\n                ssrContext={ssrContext}\n              >\n                <StaticRouter location={req.url}>\n                  <HelmetProvider context={helmetContext}>\n                    <App2 />\n                  </HelmetProvider>\n                </StaticRouter>\n              </GlobalStateProvider>,\n              { onError: reject },\n            ).then((result) => {\n              ({ helmet } = helmetContext);\n              resolve(result.prelude);\n            }).catch(reject);\n          },\n        );\n\n        let ssrRound = 0;\n        let bailed = false;\n        for (; ssrRound < ops.maxSsrRounds!; ++ssrRound) {\n          stream = await renderPass();\n\n          if (!ssrContext.dirty) break;\n\n          const timeout = ops.ssrTimeout! + ssrStart - Date.now();\n          bailed = timeout <= 0 || !await Promise.race([\n            Promise.allSettled(ssrContext.pending),\n            timer(timeout).then(() => false),\n          ]);\n          if (bailed) break;\n        }\n\n        let logMsg;\n        if (ssrContext.dirty) {\n          // NOTE: In the case of incomplete SSR one more round is necessary\n          // to ensure the correct hydration when some pending promises have\n          // resolved and placed their data into the initial global state.\n          stream = await renderPass();\n\n          logMsg = bailed ? `SSR timed out after ${ops.ssrTimeout} second(s)`\n            : `SSR bailed out after ${ops.maxSsrRounds} round(s)`;\n        } else logMsg = `SSR completed in ${ssrRound + 1} round(s)`;\n\n        ops.logger!.log(ssrContext.dirty ? 'warn' : 'info', logMsg);\n\n        if (ssrContext.redirectTo) {\n          res.redirect(ssrContext.status, ssrContext.redirectTo);\n          return;\n        }\n\n        await new Promise((ready) => {\n          stream!.pipe(new Writable({\n            destroy: ready,\n            write: (chunk: { toString: () => string }, _, done) => {\n              appHtmlMarkup += chunk.toString();\n              done();\n            },\n          }));\n        });\n      }\n\n      /* Encrypts data to be injected into HTML.\n       * Keep in mind, that this encryption is no way secure: as the JS bundle\n       * contains decryption key and is able to decode it at the client side.\n       * Hovewer, for a number of reasons, encryption of injected data is still\n       * better than injection of a plain text. */\n      const payload = serializeJs({\n        CHUNK_GROUPS: chunkGroups,\n        CONFIG: configToInject ?? sanitizedConfig,\n        ISTATE: ssrContext.state,\n      }, {\n        ignoreFunction: true,\n        unsafe: true,\n      });\n      cipher.update(forge.util.createBuffer(payload, 'utf8'));\n      cipher.finish();\n      const INJ = forge.util.encode64(`${iv}${cipher.output.data}`);\n\n      const chunkSet = new Set<string>();\n\n      // TODO: \"main\" chunk has to be added explicitly,\n      // because unlike all other chunks they are not managed by <CodeSplit>\n      // component, thus they are not added to the ssrContext.chunks\n      // automatically. Actually, names of these entry chunks should be\n      // read from Wepback config, as the end user may customize them,\n      // remove or add other entry points, but it requires additional\n      // efforts to figure out how to automatically order them right,\n      // thus for now this handles the default config.\n      [\n        'main',\n        ...ssrContext.chunks,\n      ].forEach((chunk) => {\n        const assets = chunkGroups[chunk];\n        if (assets) assets.forEach((asset) => chunkSet.add(asset));\n      });\n\n      let styleChunkString = '';\n      let scriptChunkString = '';\n      chunkSet.forEach((chunk) => {\n        if (chunk.endsWith('.css')) {\n          styleChunkString += `<link href=\"${publicPath as string}${chunk}\" rel=\"stylesheet\">`;\n        } else if (\n          chunk.endsWith('.js')\n          // In dev mode HMR adds JS updates into asset arrays,\n          // and they (updates) should be ignored.\n          && !chunk.endsWith('.hot-update.js')\n        ) {\n          scriptChunkString += `<script src=\"${publicPath as string}${chunk}\" type=\"application/javascript\"></script>`;\n        }\n      });\n\n      const grouppedExtraScripts = groupExtraScripts(extraScripts);\n\n      const faviconLink = ops.favicon\n        ? '<link rel=\"shortcut icon\" href=\"/favicon.ico\">'\n        : '';\n\n      const html = `<!DOCTYPE html>\n        <html lang=\"en\">\n          <head>\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.HEAD_OPEN]}\n            ${helmet?.title.toString() ?? ''}\n            ${helmet?.meta.toString() ?? ''}\n            <meta name=\"theme-color\" content=\"#FFFFFF\">\n            ${manifestLink}\n            ${helmet?.link.toString() ?? ''}${styleChunkString}\n            ${faviconLink}\n            <meta charset=\"utf-8\">\n            <meta\n              content=\"width=device-width,initial-scale=1.0\"\n              name=\"viewport\"\n            >\n            <meta itemprop=\"drpruinj\" content=\"${INJ}\">\n          </head>\n          <body>\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.BODY_OPEN]}\n            <div id=\"react-view\">${appHtmlMarkup}</div>\n            ${scriptChunkString}\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.DEFAULT]}\n          </body>\n        </html>`;\n\n      const status = ssrContext.status || 200;\n      if (status !== 200) res.status(status);\n\n      if (cacheRef && status < 500) {\n        // Note: waiting for the caching to complete is not strictly necessary,\n        // but it greately simplifies testing, and error reporting.\n        await new Promise<void>((done, failed) => {\n          brotliCompress(html, (error, buffer) => {\n            if (error) failed(error);\n            else {\n              const b = buffer as unknown as BufferWithNonce;\n              b.nonce = (req as unknown as {\n                nonce: string;\n              }).nonce;\n              cache!.add({ buffer: b, status }, cacheRef.key, buffer.length);\n              done();\n            }\n          });\n        });\n      }\n\n      // Note: as caching code above may throw in some cases, sending response\n      // before it completes will likely hide the error, making it difficult\n      // to debug. Thus, at least for now, lets send response after it.\n      res.send(html);\n    } catch (error) {\n      next(error);\n    }\n  };\n}\n"],"mappings":"kUAIA,IAAAA,OAAA,CAAAC,sBAAA,CAAAC,OAAA,aACA,IAAAC,SAAA,CAAAF,sBAAA,CAAAC,OAAA,eACA,IAAAE,WAAA,CAAAF,OAAA,gBACA,IAAAG,SAAA,CAAAH,OAAA,cAKA,IAAAI,QAAA,CAAAL,sBAAA,CAAAC,OAAA,aAEA,IAAAK,iBAAA,CAAAL,OAAA,mCACA,IAAAM,QAAA,CAAAN,OAAA,yBAEA,IAAAO,OAAA,CAAAP,OAAA,WAUA,IAAAQ,OAAA,CAAAT,sBAAA,CAAAC,OAAA,YACA,IAAAS,UAAA,CAAAV,sBAAA,CAAAC,OAAA,gBAEA,IAAAU,OAAA,CAAAV,OAAA,qBACA,IAAAW,YAAA,CAAAX,OAAA,6BACA,IAAAY,YAAA,CAAAZ,OAAA,iBACA,IAAAa,oBAAA,CAAAd,sBAAA,CAAAC,OAAA,0BACA,IAAAc,UAAA,CAAAd,OAAA,wCAIA,IAAAe,MAAA,CAAAhB,sBAAA,CAAAC,OAAA,aAA4B,IAAAgB,WAAA,CAAAhB,OAAA,sBAtC5B;AACA;AACA,GAsCA,KAAM,CAAAiB,eAAe,CAAG,GAAAC,YAAI,EAACC,eAAM,CAAE,QAAQ,CAAC,CAE9C;AACA;AACA;AACA;AAMA;AAMA;AAAA,GASY,CAAAC,gBAAgB,CAAAC,OAAA,CAAAD,gBAAA,uBAAhBA,gBAAgB,EAAhBA,gBAAgB,0BAAhBA,gBAAgB,sBAAhBA,gBAAgB,gCAAhB,CAAAA,gBAAgB,MAMrB,KAAM,CAAAE,gBAAgB,QACnB,CAAAC,4BACuB,CAG/BC,MAAM,CAAa,EAAE,CAMrBC,MAAM,CAAW,GAAG,CAEpBC,WAAWA,CACTC,GAAY,CACZC,WAAyB,CACzBC,YAAqB,CACrB,CACA,KAAK,CAAC,GAAAC,iBAAS,EAACD,YAAY,CAAC,EAAK,CAAC,CAAY,CAAC,CAChD,IAAI,CAACD,WAAW,CAAGA,WAAW,CAC9B,IAAI,CAACD,GAAG,CAAGA,GACb,CACF,CAACN,OAAA,CAAAC,gBAAA,CAAAA,gBAAA,CAOD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAS,YAAYA,CAACC,OAAe,CAAE,CACrC,KAAM,CAAAC,GAAG,CAAGC,iBAAI,CAACC,OAAO,CAACH,OAAO,CAAE,aAAa,CAAC,CAChD,MAAO,CAAAI,IAAI,CAACC,KAAK,CAACC,eAAE,CAACC,YAAY,CAACN,GAAG,CAAE,MAAM,CAAC,CAChD,CAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAO,mBAAmBA,CAACC,QAAgB,CAAE,CAC7C,KAAM,CAAAR,GAAG,CAAGC,iBAAI,CAACC,OAAO,CAACM,QAAQ,CAAE,uBAAuB,CAAC,CAC3D,GAAI,CAAAC,GAAG,CACP,GAAI,CACFA,GAAG,CAAGN,IAAI,CAACC,KAAK,CAACC,eAAE,CAACC,YAAY,CAACN,GAAG,CAAE,MAAM,CAAC,CAC/C,CAAE,KAAM,CACN;AACAS,GAAG,CAAG,IACR,CACA,MAAO,CAAAA,GACT,CAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,cAAe,CAAAC,aAAaA,CAACC,GAAW,CAGrC,CACD,MAAO,IAAI,CAAAC,OAAO,CAAC,CAACV,OAAO,CAAEW,MAAM,GAAK,CACtCC,kBAAK,CAACC,MAAM,CAACC,QAAQ,CAAC,EAAE,CAAE,CAACC,GAAG,CAAEC,EAAE,GAAK,CACrC,GAAID,GAAG,CAAEJ,MAAM,CAACI,GAAG,CAAC,CAAC,IAChB,CACH,KAAM,CAAAE,MAAM,CAAGL,kBAAK,CAACK,MAAM,CAACC,YAAY,CAAC,SAAS,CAAET,GAAG,CAAC,CACxDQ,MAAM,CAACE,KAAK,CAAC,CAAEH,EAAG,CAAC,CAAC,CACpBhB,OAAO,CAAC,CAAEiB,MAAM,CAAED,EAAG,CAAC,CACxB,CACF,CAAC,CACH,CAAC,CACH,CAEA;AACA;AACA;AACA;AACA,GACO,QAAS,CAAAI,kBAAkBA,CAAC5B,GAAY,CAAW,CACxD,KAAM,CAAA6B,UAAU,CAAG7B,GAAG,CAAC8B,GAAG,CAAC,iBAAiB,CAAC,CAC7C,GAAID,UAAU,CAAE,CACd,KAAM,CAAAE,GAAG,CAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC,CACjC,IAAK,KAAM,CAAAC,EAAE,GAAI,CAAAF,GAAG,CAAE,CACpB,KAAM,CAACG,IAAI,CAAEC,QAAQ,CAAC,CAAGF,EAAE,CAACG,IAAI,CAAC,CAAC,CAACJ,KAAK,CAAC,KAAK,CAAC,CAC/C,GAAI,CAACE,IAAI,GAAK,GAAG,EAAIA,IAAI,GAAK,IAAI,IAC5B,CAACC,QAAQ,EAAIE,UAAU,CAACF,QAAQ,CAAC,CAAG,CAAC,CAAC,CAAE,CAC5C,MAAO,KACT,CACF,CACF,CACA,MAAO,MACT,CAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAG,iBAAiBA,CAACC,OAAgC,CAAG,EAAE,CAAE,CAChE,KAAM,CAAAxB,GAAG,CAAG,CACV,CAACtB,gBAAgB,CAAC+C,SAAS,EAAG,EAAE,CAChC,CAAC/C,gBAAgB,CAACgD,OAAO,EAAG,EAAE,CAC9B,CAAChD,gBAAgB,CAACiD,SAAS,EAAG,EAChC,CAAC,CACD,IAAK,KAAM,CAAAC,MAAM,GAAI,CAAAJ,OAAO,CAAE,CAC5B,GAAI,GAAAK,gBAAQ,EAACD,MAAM,CAAC,CAAE,CACpB,GAAIA,MAAM,CAAE5B,GAAG,CAACtB,gBAAgB,CAACgD,OAAO,CAAC,EAAIE,MAC/C,CAAC,IAAM,IAAIA,MAAM,CAACE,IAAI,CAAE,CACtB,GAAIF,MAAM,CAACG,QAAQ,GAAI,CAAA/B,GAAG,CAAEA,GAAG,CAAC4B,MAAM,CAACG,QAAQ,CAAC,EAAIH,MAAM,CAACE,IAAI,CAAC,IAC3D,MAAM,CAAAE,KAAK,CAAC,qBAAqBJ,MAAM,CAACG,QAAQ,GAAG,CAC1D,CACF,CACA,MAAO,CAAA/B,GACT,CAEA;AACA;AACA;AACA;AACA;AACA,GACO,QAAS,CAAAiC,gBAAgBA,CAAC,CAC/BC,eAAe,CAAG,MACpB,CAAC,CAAG,CAAC,CAAC,CAAkB,CACtB,KAAM,CAAEC,MAAM,CAAEC,UAAW,CAAC,CAAGC,gBAAO,CACtC,MAAO,CAAAA,gBAAO,CAACC,YAAY,CAAC,CAC1BH,MAAM,CAAEA,MAAM,CAACI,OAAO,CACpBJ,MAAM,CAACK,KAAK,CAAC,CAAC,CACdL,MAAM,CAACM,SAAS,CAAC,CAAC,CAClBN,MAAM,CAACO,QAAQ,CAAC,CAAC,CACjBP,MAAM,CAACQ,MAAM,CACX,CAAC,CACCC,KAAK,CACLC,OAAO,CACPJ,SAAS,CACTK,KAAK,CACL,GAAGC,IACL,CAAC,GAAK,CACJ,GAAI,CAAA/C,GAAG,CAAG,GAAG4C,KAAK,SAASH,SAAS,OAAiBI,OAAO,EAAY,CACxE,GAAIG,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAACG,MAAM,CAAE,CAC5BlD,GAAG,EAAI,KAAKN,IAAI,CAACyD,SAAS,CAACJ,IAAI,CAAE,IAAI,CAAE,CAAC,CAAC,EAC3C,CACA,GAAID,KAAK,CAAE9C,GAAG,EAAI,KAAK8C,KAAK,EAAY,CACxC,MAAO,CAAA9C,GACT,CACF,CACF,CAAC,CACD4C,KAAK,CAAEV,eAAe,CACtBE,UAAU,CAAE,CAAC,GAAI,CAAAA,UAAU,CAACgB,OAAS,CACvC,CAAC,CACH,CAoCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACe,QAAS,CAAAC,OAAOA,CAC7BC,aAA4B,CAC5BC,OAAiB,CACD,CAChB,KAAM,CAAAvC,GAAa,CAAG,GAAAwC,gBAAQ,EAAC,GAAAC,aAAK,EAACF,OAAO,CAAC,CAAE,CAC7CG,YAAY,CAAE,KAAAA,CAAA,GAAYvD,OAAO,CAACV,OAAO,CAAC,CAAC,CAAC,CAAC,CAC7CkE,YAAY,CAAE,EAAE,CAChBC,UAAU,CAAE,IAAI,CAChBC,eAAe,CAAE,IACnB,CAAC,CAAC,CAEF;AACA;AACA;AACA7C,GAAG,CAAC8C,MAAM,GAAK7B,gBAAgB,CAAC,CAC9BC,eAAe,CAAElB,GAAG,CAAC+C,qBACvB,CAAC,CAAC,CAEF,KAAM,CAAAC,SAAS,CAAGhD,GAAG,CAACgD,SAAS,EAAI3E,YAAY,CAACiE,aAAa,CAAChE,OAAQ,CAAC,CACvE,GAAA2E,uBAAY,EAACD,SAAS,CAAC,CAEvB;AACA,KAAM,CAAEE,UAAU,CAAE1E,IAAI,CAAE2E,UAAW,CAAC,CAAGb,aAAa,CAACc,MAAO,CAE9D,KAAM,CAAAC,YAAY,CAAGzE,eAAE,CAAC0E,UAAU,CAAC,GAAGH,UAAU,gBAAgB,CAAC,CAC7D,8BAA8BD,UAAU,iBAA2B,CAAG,EAAE,CAE5E;AAKA,KAAM,CAAAK,KAAK,CAAGvD,GAAG,CAACwD,qBAAqB,CACnC,GAAI,CAAAC,cAAK,CAGRzD,GAAG,CAAC6C,eAAgB,CAAC,CACtB,IAAI,CAER,KAAM,CAAAa,YAAY,CAAG5E,mBAAmB,CAACqE,UAAW,CAAC,CAErD;AACA;AACA,MAAO,OAAOlF,GAAG,CAAEe,GAAG,CAAE2E,IAAI,GAAK,CAC/B,GAAI,CACF;AACA3E,GAAG,CAAC4E,GAAG,CAAC,eAAe,CAAE,UAAU,CAAC,CAEpC5E,GAAG,CAAC6E,MAAM,CAAC,WAAW,CAAE5F,GAAG,CAAC6F,SAAS,CAAC,CAAC,CAAC,CAExC,GAAI,CAAAC,QAAsC,CAC1C,GAAIR,KAAK,CAAE,CACTQ,QAAQ,CAAG/D,GAAG,CAACwD,qBAAqB,CAAEvF,GAAG,CAAC,CAC1C,GAAI8F,QAAQ,CAAE,CACZ,KAAM,CAAAC,IAAI,CAAGT,KAAK,CAACxD,GAAG,CAACgE,QAAQ,CAAC,CAChC,GAAIC,IAAI,GAAK,IAAI,CAAE,CACjB,KAAM,CAAEC,MAAM,CAAElG,MAAO,CAAC,CAAGiG,IAAI,CAC/B,GAAIhE,GAAG,CAACkE,KAAK,EAAIrE,kBAAkB,CAAC5B,GAAG,CAAC,CAAE,CACxCe,GAAG,CAAC4E,GAAG,CAAC,cAAc,CAAE,WAAW,CAAC,CACpC5E,GAAG,CAAC4E,GAAG,CAAC,kBAAkB,CAAE,IAAI,CAAC,CACjC,GAAI7F,MAAM,GAAK,GAAG,CAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC,CACtCiB,GAAG,CAACmF,IAAI,CAACF,MAAM,CACjB,CAAC,IAAM,CACL,KAAM,IAAI,CAAA9E,OAAO,CAAO,CAACiF,IAAI,CAAEC,MAAM,GAAK,CACxC,GAAAC,0BAAgB,EAACL,MAAM,CAAE,CAACM,KAAK,CAAEC,IAAI,GAAK,CACxC,GAAID,KAAK,CAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,IACpB,CACH,GAAI,CAAAE,CAAC,CAAGD,IAAI,CAACE,QAAQ,CAAC,CAAC,CACvB,GAAI,CAAC1E,GAAG,CAACkE,KAAK,CAAE,CACd;AACA;AACA;AACA,KAAM,CAAAS,KAAK,CAAG,GAAI,CAAAC,MAAM,CAACX,MAAM,CAACY,KAAK,CAAE,GAAG,CAAC,CAE3C;AACAJ,CAAC,CAAGA,CAAC,CAACK,OAAO,CAACH,KAAK,CAAG1G,GAAG,CAEtB4G,KAAK,CACV,CACA,GAAI9G,MAAM,GAAK,GAAG,CAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC,CACtCiB,GAAG,CAACmF,IAAI,CAACM,CAAC,CAAC,CACXL,IAAI,CAAC,CACP,CACF,CAAC,CACH,CAAC,CACH,CACA,MACF,CACF,CACF,CAEA,KAAM,CAAAW,GAAG,CAAG/E,GAAG,CAAC0C,YAAY,CAAEzE,GAAG,CAAEV,eAAqC,CAAC,CAEzE,KAAM,CAAC,CACLyH,cAAc,CACdC,YAAY,CACZ9G,YACF,CAAC,CAAE,CACDuB,MAAM,CACND,EACF,CAAC,CAAC,CAAG,KAAM,CAAAN,OAAO,CAAC+F,GAAG,CAAC,CACrB;AACA;AACAH,GAAG,WAAY,CAAA5F,OAAO,CAAG4F,GAAG,CAAG5F,OAAO,CAACV,OAAO,CAACsG,GAAG,CAAC,CAEnD9F,aAAa,CAAC+D,SAAS,CAAC9D,GAAG,CAAC,CAC7B,CAAC,CAEF,GAAI,CAAAiG,MAAmC,CAEvC;AACA;AACA;AACA;AACA,GAAI,CAAAjH,WAAyB,CAC7B,KAAM,CAAAkH,YAAY,CAAG,GAAArF,WAAG,EAACf,GAAG,CAACqG,MAAM,CAAE,6BAA6B,CAAsB,CACxF,GAAID,YAAY,CAAE,CAChBlH,WAAW,CAAG,GAAAoH,iBAAS,EACrBF,YAAY,CAACG,MAAM,CAAC,CAClBL,GAAG,CAAE,KAAK,CACVhH,WAAW,CAAE,IACf,CAAC,CAAC,CAACsH,gBAAgB,CAClBC,IAAI,EAAKA,IAAI,CAACC,MAAM,EAAEC,GAAG,CAAC,CAAC,CAAEC,IAAuB,CAAC,GAAKA,IAAI,CAAC,EAC3D,EACP,CACF,CAAC,IAAM,IAAIlC,YAAY,CAAExF,WAAW,CAAGwF,YAAY,CAAC,IAC/C,CAAAxF,WAAW,CAAG,CAAC,CAAC,CAErB,qCACA,KAAM,CAAA2H,GAAG,CAAG7F,GAAG,CAAC8F,WAAW,CAC3B,GAAI,CAAAC,aAAqB,CAAG,EAAE,CAC9B,KAAM,CAAAC,UAAU,CAAG,GAAI,CAAApI,gBAAgB,CAACK,GAAG,CAAEC,WAAW,CAAEC,YAAY,CAAC,CACvE,GAAI,CAAA8H,MAA6B,CACjC,GAAIJ,GAAG,CAAE,CACP,KAAM,CAAAK,QAAQ,CAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,CAE3B;AACA;AACA,KAAM,CAAAC,IAAI,CAAGR,GAAG,CAEhB,KAAM,CAAAS,UAAU,CAAG,KAAAA,CAAA,GAAY,GAAI,CAAAnH,OAAO,CACxC,CAACoH,UAAU,CAAEC,SAAS,GAAK,CACzBR,UAAU,CAAClI,MAAM,CAAG,EAAE,CAEtB;AACA;AACA;AACA;AACA;AACA;AACA,GAAI,CAAAyG,KAAc,CAElB,KAAM,CAAA9F,OAAO,CAAIgI,GAA0B,EAAK,CAC9C,GAAIlC,KAAK,GAAKmC,SAAS,CAAE,KAAM,CAAA1F,KAAK,CAAC,gBAAgB,CAAC,CACtDuD,KAAK,CAAG,IAAI,CACZgC,UAAU,CAACE,GAAG,CAChB,CAAC,CAED,KAAM,CAAArH,MAAM,CAAIqH,GAAY,EAAK,CAC/B,GAAIlC,KAAK,GAAKmC,SAAS,EAAInC,KAAK,GAAKkC,GAAG,CAAE,CACxC,KAAM,CAAAzF,KAAK,CAAC,gBAAgB,CAC9B,CACAuD,KAAK,CAAGkC,GAAG,CACXD,SAAS,CAACC,GAAY,CACxB,CAAC,CAED;AACA;AACA,KAAM,CAAAE,aAAa,CAAG,CAAC,CAAsB,CAC7C,IAAK,GAAAC,6BAAqB,eACxB,GAAAtJ,WAAA,CAAAuJ,GAAA,EAAClK,iBAAA,CAAAmK,mBAAmB,EAClB3I,YAAY,CAAE6H,UAAU,CAACe,KAAM,CAC/Bf,UAAU,CAAEA,UAAW,CAAAgB,QAAA,cAEvB,GAAA1J,WAAA,CAAAuJ,GAAA,EAAC3J,YAAA,CAAA+J,YAAY,EAAClG,QAAQ,CAAE9C,GAAG,CAACM,GAAI,CAAAyI,QAAA,cAC9B,GAAA1J,WAAA,CAAAuJ,GAAA,EAAC5J,YAAA,CAAAiK,cAAc,EAAC5I,OAAO,CAAEqI,aAAc,CAAAK,QAAA,cACrC,GAAA1J,WAAA,CAAAuJ,GAAA,EAACR,IAAI,GAAE,CAAC,CACM,CAAC,CACL,CAAC,CACI,CAAC,CACtB,CAAEc,OAAO,CAAE/H,MAAO,CACpB,CAAC,CAACgI,IAAI,CAAEC,MAAM,EAAK,CACjB,CAAC,CAAElC,MAAO,CAAC,CAAGwB,aAAa,EAC3BlI,OAAO,CAAC4I,MAAM,CAACC,OAAO,CACxB,CAAC,CAAC,CAACC,KAAK,CAACnI,MAAM,CACjB,CACF,CAAC,CAED,GAAI,CAAAoI,QAAQ,CAAG,CAAC,CAChB,GAAI,CAAAC,MAAM,CAAG,KAAK,CAClB,KAAOD,QAAQ,CAAGxH,GAAG,CAAC2C,YAAa,CAAE,EAAE6E,QAAQ,CAAE,CAC/CvB,MAAM,CAAG,KAAM,CAAAK,UAAU,CAAC,CAAC,CAE3B,GAAI,CAACN,UAAU,CAAC0B,KAAK,CAAE,MAEvB,KAAM,CAAAC,OAAO,CAAG3H,GAAG,CAAC4C,UAAU,CAAIsD,QAAQ,CAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,CACvDqB,MAAM,CAAGE,OAAO,EAAI,CAAC,EAAI,EAAC,KAAM,CAAAxI,OAAO,CAACyI,IAAI,CAAC,CAC3CzI,OAAO,CAAC0I,UAAU,CAAC7B,UAAU,CAAC8B,OAAO,CAAC,CACtC,GAAAC,cAAK,EAACJ,OAAO,CAAC,CAACP,IAAI,CAAC,IAAM,KAAK,CAAC,CACjC,CAAC,EACF,GAAIK,MAAM,CAAE,KACd,CAEA,GAAI,CAAAO,MAAM,CACV,GAAIhC,UAAU,CAAC0B,KAAK,CAAE,CACpB;AACA;AACA;AACAzB,MAAM,CAAG,KAAM,CAAAK,UAAU,CAAC,CAAC,CAE3B0B,MAAM,CAAGP,MAAM,CAAG,uBAAuBzH,GAAG,CAAC4C,UAAU,YAAY,CAC/D,wBAAwB5C,GAAG,CAAC2C,YAAY,WAC9C,CAAC,IAAM,CAAAqF,MAAM,CAAG,oBAAoBR,QAAQ,CAAG,CAAC,WAAW,CAE3DxH,GAAG,CAAC8C,MAAM,CAAEmF,GAAG,CAACjC,UAAU,CAAC0B,KAAK,CAAG,MAAM,CAAG,MAAM,CAAEM,MAAM,CAAC,CAE3D,GAAIhC,UAAU,CAACkC,UAAU,CAAE,CACzBlJ,GAAG,CAACmJ,QAAQ,CAACnC,UAAU,CAACjI,MAAM,CAAEiI,UAAU,CAACkC,UAAU,CAAC,CACtD,MACF,CAEA,KAAM,IAAI,CAAA/I,OAAO,CAAEiJ,KAAK,EAAK,CAC3BnC,MAAM,CAAEoC,IAAI,CAAC,GAAI,CAAAC,oBAAQ,CAAC,CACxBC,OAAO,CAAEH,KAAK,CACdI,KAAK,CAAEA,CAACC,KAAiC,CAAEC,CAAC,CAAEtE,IAAI,GAAK,CACrD2B,aAAa,EAAI0C,KAAK,CAAC/D,QAAQ,CAAC,CAAC,CACjCN,IAAI,CAAC,CACP,CACF,CAAC,CAAC,CACJ,CAAC,CACH,CAEA;AACN;AACA;AACA;AACA,kDACM,KAAM,CAAAuE,OAAO,CAAG,GAAAC,4BAAW,EAAC,CAC1BlF,YAAY,CAAExF,WAAW,CACzB2K,MAAM,CAAE7D,cAAc,EAAIzH,eAAe,CACzCuL,MAAM,CAAE9C,UAAU,CAACe,KACrB,CAAC,CAAE,CACDgC,cAAc,CAAE,IAAI,CACpBC,MAAM,CAAE,IACV,CAAC,CAAC,CACFtJ,MAAM,CAACuJ,MAAM,CAAC5J,kBAAK,CAAC6J,IAAI,CAACC,YAAY,CAACR,OAAO,CAAE,MAAM,CAAC,CAAC,CACvDjJ,MAAM,CAAC0J,MAAM,CAAC,CAAC,CACf,KAAM,CAAAC,GAAG,CAAGhK,kBAAK,CAAC6J,IAAI,CAACI,QAAQ,CAAC,GAAG7J,EAAE,GAAGC,MAAM,CAAC0D,MAAM,CAACY,IAAI,EAAE,CAAC,CAE7D,KAAM,CAAAuF,QAAQ,CAAG,GAAI,CAAAC,GAAa,CAElC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CACE,MAAM,CACN,GAAGxD,UAAU,CAAClI,MAAM,CACrB,CAAC2L,OAAO,CAAEhB,KAAK,EAAK,CACnB,KAAM,CAAA/C,MAAM,CAAGxH,WAAW,CAACuK,KAAK,CAAC,CACjC,GAAI/C,MAAM,CAAEA,MAAM,CAAC+D,OAAO,CAAEC,KAAK,EAAKH,QAAQ,CAACI,GAAG,CAACD,KAAK,CAAC,CAC3D,CAAC,CAAC,CAEF,GAAI,CAAAE,gBAAgB,CAAG,EAAE,CACzB,GAAI,CAAAC,iBAAiB,CAAG,EAAE,CAC1BN,QAAQ,CAACE,OAAO,CAAEhB,KAAK,EAAK,CAC1B,GAAIA,KAAK,CAACqB,QAAQ,CAAC,MAAM,CAAC,CAAE,CAC1BF,gBAAgB,EAAI,eAAe1G,UAAU,GAAauF,KAAK,qBACjE,CAAC,IAAM,IACLA,KAAK,CAACqB,QAAQ,CAAC,KAAK,CACpB;AACA;AAAA,EACG,CAACrB,KAAK,CAACqB,QAAQ,CAAC,gBAAgB,CAAC,CACpC,CACAD,iBAAiB,EAAI,gBAAgB3G,UAAU,GAAauF,KAAK,2CACnE,CACF,CAAC,CAAC,CAEF,KAAM,CAAAsB,oBAAoB,CAAGxJ,iBAAiB,CAAC0E,YAAY,CAAC,CAE5D,KAAM,CAAA+E,WAAW,CAAGhK,GAAG,CAACiK,OAAO,CAC3B,oDAAgD,CAChD,EAAE,CAEN,KAAM,CAAAzF,IAAI,CAAG;AACnB;AACA;AACA,cAAcuF,oBAAoB,CAACrM,gBAAgB,CAACiD,SAAS,CAAC;AAC9D,cAAcwE,MAAM,EAAE+E,KAAK,CAACxF,QAAQ,CAAC,CAAC,EAAI,EAAE;AAC5C,cAAcS,MAAM,EAAEgF,IAAI,CAACzF,QAAQ,CAAC,CAAC,EAAI,EAAE;AAC3C;AACA,cAAcrB,YAAY;AAC1B,cAAc8B,MAAM,EAAEiF,IAAI,CAAC1F,QAAQ,CAAC,CAAC,EAAI,EAAE,GAAGkF,gBAAgB;AAC9D,cAAcI,WAAW;AACzB;AACA;AACA;AACA;AACA;AACA,iDAAiDX,GAAG;AACpD;AACA;AACA,cAAcU,oBAAoB,CAACrM,gBAAgB,CAAC+C,SAAS,CAAC;AAC9D,mCAAmCsF,aAAa;AAChD,cAAc8D,iBAAiB;AAC/B,cAAcE,oBAAoB,CAACrM,gBAAgB,CAACgD,OAAO,CAAC;AAC5D;AACA,gBAAgB,CAEV,KAAM,CAAA3C,MAAM,CAAGiI,UAAU,CAACjI,MAAM,EAAI,GAAG,CACvC,GAAIA,MAAM,GAAK,GAAG,CAAEiB,GAAG,CAACjB,MAAM,CAACA,MAAM,CAAC,CAEtC,GAAIgG,QAAQ,EAAIhG,MAAM,CAAG,GAAG,CAAE,CAC5B;AACA;AACA,KAAM,IAAI,CAAAoB,OAAO,CAAO,CAACiF,IAAI,CAAEC,MAAM,GAAK,CACxC,GAAAgG,wBAAc,EAAC7F,IAAI,CAAE,CAACD,KAAK,CAAEN,MAAM,GAAK,CACtC,GAAIM,KAAK,CAAEF,MAAM,CAACE,KAAK,CAAC,CAAC,IACpB,CACH,KAAM,CAAA+F,CAAC,CAAGrG,MAAoC,CAC9CqG,CAAC,CAACzF,KAAK,CAAI5G,GAAG,CAEX4G,KAAK,CACRtB,KAAK,CAAEoG,GAAG,CAAC,CAAE1F,MAAM,CAAEqG,CAAC,CAAEvM,MAAO,CAAC,CAAEgG,QAAQ,CAAC7E,GAAG,CAAE+E,MAAM,CAAC/B,MAAM,CAAC,CAC9DkC,IAAI,CAAC,CACP,CACF,CAAC,CACH,CAAC,CACH,CAEA;AACA;AACA;AACApF,GAAG,CAACmF,IAAI,CAACK,IAAI,CACf,CAAE,MAAOD,KAAK,CAAE,CACdZ,IAAI,CAACY,KAAK,CACZ,CACF,CACF","ignoreList":[]}
+{"version":3,"file":"renderer.js","names":["Buffer","createCipheriv","randomBytes","fs","path","Writable","brotliCompress","brotliDecompress","winston","GlobalStateProvider","SsrContext","timer","cloneDeep","defaults","get","mapValues","config","prerenderToNodeStream","HelmetProvider","StaticRouter","serializeJs","setBuildInfo","Cache","jsx","_jsx","SECRET","sanitizedConfig","SCRIPT_LOCATIONS","ServerSsrContext","chunks","status","constructor","req","chunkGroups","initialState","getBuildInfo","context","url","resolve","JSON","parse","readFileSync","readChunkGroupsJson","buildDir","res","prepareCipher","key","iv","cipher","from","isBrotliAcceptable","acceptable","ops","split","op","type","priority","trim","parseFloat","groupExtraScripts","scripts","BODY_OPEN","DEFAULT","HEAD_OPEN","script","code","location","Error","newDefaultLogger","defaultLogLevel","format","transports","createLogger","combine","splat","timestamp","colorize","printf","level","message","stack","rest","Object","keys","length","stringify","Console","factory","webpackConfig","options","beforeRender","Promise","maxSsrRounds","ssrTimeout","staticCacheSize","logger","defaultLoggerLogLevel","buildInfo","publicPath","outputPath","output","manifestLink","existsSync","cache","staticCacheController","CHUNK_GROUPS","next","set","cookie","csrfToken","cacheRef","data","buffer","noCsp","send","done","failed","error","html","h","toString","regex","RegExp","nonce","replace","brr","configToInject","extraScripts","helmet","webpackStats","locals","toJson","all","namedChunkGroups","item","assets","map","name","App","Application","appHtmlMarkup","ssrContext","stream","ssrStart","Date","now","App2","renderPass","resolveArg","rejectArg","arg","undefined","reject","helmetContext","state","children","onError","then","result","prelude","catch","ssrRound","bailed","dirty","timeout","race","allSettled","pending","logMsg","log","redirectTo","redirect","ready","pipe","destroy","write","chunk","_","payload","CONFIG","ISTATE","ignoreFunction","unsafe","INJ","concat","update","final","chunkSet","Set","forEach","asset","add","styleChunkString","scriptChunkString","endsWith","grouppedExtraScripts","faviconLink","favicon","title","meta","link","b"],"sources":["../../../src/server/renderer.tsx"],"sourcesContent":["/**\n * ExpressJS middleware for server-side rendering of a ReactJS app.\n */\n\nimport { Buffer } from 'node:buffer';\nimport { type Cipheriv, createCipheriv, randomBytes } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { Writable } from 'node:stream';\nimport { brotliCompress, brotliDecompress } from 'node:zlib';\n\nimport type { Request, RequestHandler } from 'express';\nimport type { ComponentType } from 'react';\nimport type { Configuration, Stats } from 'webpack';\nimport winston from 'winston';\n\nimport { GlobalStateProvider, SsrContext } from '@dr.pogodin/react-global-state';\nimport { timer } from '@dr.pogodin/js-utils';\n\nimport {\n  cloneDeep,\n  defaults,\n  get,\n  mapValues,\n} from 'lodash-es';\n\nimport config from 'config';\n\nimport { prerenderToNodeStream } from 'react-dom/static';\nimport { type HelmetDataContext, HelmetProvider } from '@dr.pogodin/react-helmet';\nimport { StaticRouter } from 'react-router';\nimport serializeJs from 'serialize-javascript';\nimport { type BuildInfoT, setBuildInfo } from 'utils/isomorphy/buildInfo';\n\nimport type { ChunkGroupsT, SsrContextT } from 'utils/globalState';\n\nimport Cache from './Cache';\n\n// @ts-expect-error \"Property 'SECRET' does not exist on type 'IConfig'.\"\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\nconst { SECRET, ...sanitizedConfig } = config;\n\n// Note: These type definitions for logger are copied from Winston logger,\n// then simplified to make it easier to fit an alternative logger into this\n// interface.\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface LogMethodI {\n  // eslint-disable-next-line @typescript-eslint/prefer-function-type\n  (level: string, message: string, ...meta: unknown[]): void;\n}\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface LeveledLogMethodI {\n  // eslint-disable-next-line @typescript-eslint/prefer-function-type\n  (message: string, ...meta: unknown[]): void;\n}\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\nexport interface LoggerI {\n  debug: LeveledLogMethodI;\n  error: LeveledLogMethodI;\n  info: LeveledLogMethodI;\n  log: LogMethodI;\n  warn: LeveledLogMethodI;\n}\n\nexport enum SCRIPT_LOCATIONS {\n  BODY_OPEN = 'BODY_OPEN',\n  DEFAULT = 'DEFAULT',\n  HEAD_OPEN = 'HEAD_OPEN',\n}\n\nexport class ServerSsrContext<StateT>\n  extends SsrContext<StateT>\n  implements SsrContextT<StateT> {\n  chunkGroups: ChunkGroupsT;\n\n  chunks: string[] = [];\n\n  redirectTo?: string;\n\n  req: Request;\n\n  status: number = 200;\n\n  constructor(\n    req: Request,\n    chunkGroups: ChunkGroupsT,\n    initialState?: StateT,\n  ) {\n    super(cloneDeep(initialState) ?? ({} as StateT));\n    this.chunkGroups = chunkGroups;\n    this.req = req;\n  }\n}\n\ntype ScriptT = {\n  code: string;\n  location: SCRIPT_LOCATIONS;\n};\n\n/**\n * Reads build-time information about the app. This information is generated\n * by our standard Webpack config for apps, and it is written into\n * \".build-info\" file in the context folder specified in Webpack config.\n * At the moment, that file contains build timestamp and a random 32-bit key,\n * suitable for cryptographical use.\n * @param context Webpack context path used during the build.\n * @return Resolves to the build-time information.\n */\nfunction getBuildInfo(context: string) {\n  const url = path.resolve(context, '.build-info');\n  return JSON.parse(fs.readFileSync(url, 'utf8')) as BuildInfoT;\n}\n\n/**\n * Attempts to read from disk the named chunk groups mapping generated\n * by Webpack during the compilation.\n * It will not work for development builds, where these stats should be captured\n * via compilator callback.\n * @param buildDir\n * @return\n */\nfunction readChunkGroupsJson(buildDir: string) {\n  const url = path.resolve(buildDir, '__chunk_groups__.json');\n  let res;\n  try {\n    res = JSON.parse(fs.readFileSync(url, 'utf8')) as Record<string, string[]>;\n  } catch {\n    // TODO: Should we message the error here somehow?\n    res = null;\n  }\n  return res;\n}\n\n/**\n * Prepares a new Cipher for data encryption.\n * @param key Encryption key (32-bit random, Base64-encoded key is expected).\n * @return Returns a tuple of:\n *  1. cipher - a new Cipher, ready for encryption;\n *  2. iv - initial vector used by the cipher.\n */\nfunction prepareCipher(key: string): [cipher: Cipheriv, iv: Buffer] {\n  const iv = randomBytes(16);\n  const cipher = createCipheriv('AES-256-CBC', Buffer.from(key, 'base64'), iv);\n  return [cipher, iv];\n}\n\n/**\n * Given an incoming HTTP requests, it deduces whether Brotli-encoded responses\n * are acceptable to the caller.\n * @param req\n */\nexport function isBrotliAcceptable(req: Request): boolean {\n  const acceptable = req.get('accept-encoding');\n  if (acceptable) {\n    const ops = acceptable.split(',');\n    for (const op of ops) {\n      const [type, priority] = op.trim().split(';q=');\n      if ((type === '*' || type === 'br')\n        && (!priority || parseFloat(priority) > 0)) {\n        return true;\n      }\n    }\n  }\n  return false;\n}\n\n/**\n * Given an array of extra script strings / objects, it returns an object with\n * arrays of scripts to inject in different HTML template locations. During\n * the script groupping it also filters out any empty scripts.\n * @param {({\n *  code: string;\n *  location: string;\n * }|string)[]} [scripts=[]]\n * @return {{\n *  BODY_OPEN: string[];\n *  DEFAULT: string[];\n *  HEAD_OPEN: string[];\n * }}\n */\nfunction groupExtraScripts(scripts: Array<string | ScriptT> = []) {\n  const res = {\n    [SCRIPT_LOCATIONS.BODY_OPEN]: '',\n    [SCRIPT_LOCATIONS.DEFAULT]: '',\n    [SCRIPT_LOCATIONS.HEAD_OPEN]: '',\n  };\n  for (const script of scripts) {\n    if (typeof script === 'string') {\n      if (script) res[SCRIPT_LOCATIONS.DEFAULT] += script;\n    } else if (script.code) {\n      if (script.location in res) res[script.location] += script.code;\n      else throw Error(`Invalid location \"${script.location}\"`);\n    }\n  }\n  return res;\n}\n\n/**\n * Creates a new default (Winston) logger.\n * @param {object} [options={}]\n * @param {string} [options.defaultLogLevel='info']\n * @return {object}\n */\nexport function newDefaultLogger({\n  defaultLogLevel = 'info',\n} = {}): winston.Logger {\n  const { format, transports } = winston;\n  return winston.createLogger({\n    format: format.combine(\n      format.splat(),\n      format.timestamp(),\n      format.colorize(),\n      format.printf(\n        ({\n          level,\n          message,\n          timestamp,\n          stack,\n          ...rest\n        }) => {\n          let res = `${level}\\t(at ${timestamp as string}):\\t${message as string}`;\n          if (Object.keys(rest).length) {\n            res += `\\n${JSON.stringify(rest, null, 2)}`;\n          }\n          if (stack) res += `\\n${stack as string}`;\n          return res;\n        },\n      ),\n    ),\n    level: defaultLogLevel,\n    transports: [new transports.Console()],\n  });\n}\n\nexport type ConfigT = {\n  [key: string]: ConfigT | string;\n};\n\nexport type BeforeRenderResT = {\n  configToInject?: ConfigT;\n  extraScripts?: Array<ScriptT | string>;\n  initialState?: unknown;\n};\n\nexport type BeforeRenderT = (\n  req: Request,\n  config: ConfigT,\n) => BeforeRenderResT | Promise<BeforeRenderResT>;\n\ntype CacheRefT = {\n  key: string;\n  maxage?: number;\n};\n\nexport type OptionsT = {\n  Application?: ComponentType;\n  beforeRender?: BeforeRenderT;\n  buildInfo?: BuildInfoT;\n  defaultLoggerLogLevel?: string;\n  favicon?: string;\n  logger?: LoggerI;\n  maxSsrRounds?: number;\n  noCsp?: boolean;\n  staticCacheSize?: number;\n  ssrTimeout?: number;\n  staticCacheController?: (req: Request) => CacheRefT | null | undefined;\n};\n\n/**\n * Creates the middleware.\n * @param webpackConfig\n * @param options Additional options:\n * @param [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param [options.buildInfo] \"Build info\" object to use. If provided,\n *  it will be used, instead of trying to load from the filesystem the one\n *  generated by the Webpack build. It is intended for test environments,\n *  where passing this stuff via file system is no bueno.\n * @param [options.favicon] `true` will include favicon\n *  link into the rendered HTML templates.\n * @param [options.noCsp] `true` means that no\n * Content-Security-Policy (CSP) is used by server, thus the renderer\n * may cut a few corners.\n * @param [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @param [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` &ndash; the cache key for the response;\n * - `maxage?: number` &ndash; the maximum age of cached result in ms.\n *   If undefined - infinite age is assumed.\n * @return Created middleware.\n */\nexport default function factory(\n  webpackConfig: Configuration,\n  options: OptionsT,\n): RequestHandler {\n  const ops: OptionsT = defaults({ ...options }, {\n    beforeRender: async () => Promise.resolve({}),\n    maxSsrRounds: 10,\n    ssrTimeout: 1000,\n    staticCacheSize: 1.e7,\n  });\n\n  // Note: in normal use the default logger is created and set in the root\n  // server function, and this initialization is for testing uses, where\n  // renderer is imported directly.\n  ops.logger ??= newDefaultLogger({\n    defaultLogLevel: ops.defaultLoggerLogLevel,\n  });\n\n  const buildInfo = ops.buildInfo ?? getBuildInfo(webpackConfig.context!);\n  setBuildInfo(buildInfo);\n\n  // publicPath from webpack.output has a trailing slash at the end.\n  const { publicPath, path: outputPath } = webpackConfig.output!;\n\n  const manifestLink = fs.existsSync(`${outputPath}/manifest.json`)\n    ? `<link rel=\"manifest\" href=\"${publicPath as string}manifest.json\">` : '';\n\n  // eslint-disable-next-line @typescript-eslint/consistent-type-definitions\n  interface BufferWithNonce extends ArrayBuffer {\n    nonce: string;\n  }\n\n  const cache = ops.staticCacheController\n    ? new Cache<{\n      buffer: BufferWithNonce;\n      status: number;\n    }>(ops.staticCacheSize!)\n    : null;\n\n  const CHUNK_GROUPS = readChunkGroupsJson(outputPath!);\n\n  // TODO: Look at it later.\n  // eslint-disable-next-line complexity\n  return async (req, res, next) => {\n    try {\n      // Ensures any caches always revalidate HTML markup before reuse.\n      res.set('Cache-Control', 'no-cache');\n\n      res.cookie('csrfToken', req.csrfToken());\n\n      let cacheRef: CacheRefT | null | undefined;\n      if (cache) {\n        cacheRef = ops.staticCacheController!(req);\n        if (cacheRef) {\n          const data = cache.get(cacheRef);\n          if (data !== null) {\n            const { buffer, status } = data;\n            if (ops.noCsp && isBrotliAcceptable(req)) {\n              res.set('Content-Type', 'text/html');\n              res.set('Content-Encoding', 'br');\n              if (status !== 200) res.status(status);\n              res.send(buffer);\n            } else {\n              await new Promise<void>((done, failed) => {\n                brotliDecompress(buffer, (error, html) => {\n                  if (error) failed(error);\n                  else {\n                    let h = html.toString();\n                    if (!ops.noCsp) {\n                      // TODO: Starting from Node v15 we'll be able to use string's\n                      // .replaceAll() method instead relying on reg. expression for\n                      // global matching.\n                      const regex = new RegExp(buffer.nonce, 'g');\n\n                      // TODO: It should be implemented more careful.\n                      h = h.replace(regex, (req as unknown as {\n                        nonce: string;\n                      }).nonce);\n                    }\n                    if (status !== 200) res.status(status);\n                    res.send(h);\n                    done();\n                  }\n                });\n              });\n            }\n            return;\n          }\n        }\n      }\n\n      const brr = ops.beforeRender!(req, sanitizedConfig as unknown as ConfigT);\n      const { configToInject, extraScripts, initialState } = await brr;\n\n      const [cipher, iv] = prepareCipher(buildInfo.key);\n\n      let helmet: HelmetDataContext['helmet'];\n\n      // Gets the mapping between code chunk names and their asset files.\n      // These data come from the Webpack compilation, either from the stats\n      // attached to the request (in dev mode), or from a file output during\n      // the build (in prod mode).\n      let chunkGroups: ChunkGroupsT;\n      const webpackStats = get(res.locals, 'webpack.devMiddleware.stats') as Stats | undefined;\n      if (webpackStats) {\n        chunkGroups = mapValues(\n          webpackStats.toJson({\n            all: false,\n            chunkGroups: true,\n          }).namedChunkGroups,\n          (item) => item.assets?.map(({ name }: { name: string }) => name)\n            ?? [],\n        );\n      } else if (CHUNK_GROUPS) chunkGroups = CHUNK_GROUPS;\n      else chunkGroups = {};\n\n      /* Optional server-side rendering. */\n      const App = ops.Application;\n      let appHtmlMarkup: string = '';\n      const ssrContext = new ServerSsrContext(req, chunkGroups, initialState);\n      let stream: NodeJS.ReadableStream;\n      if (App) {\n        const ssrStart = Date.now();\n\n        // TODO: Somehow, without it TS does not realise that\n        // App has been checked to exist.\n        const App2 = App;\n\n        const renderPass = async () => new Promise<NodeJS.ReadableStream>(\n          (resolveArg, rejectArg) => {\n            ssrContext.chunks = [];\n\n            // NOTE: JS does not have problems if resolve() and reject() methods\n            // of a Promise are called multiple times, with different arguments;\n            // it only respects the first call, and ignores subsequent ones.\n            // We, however, really want to assert that here, to safeguard against\n            // any future problems due to unexpected internal changes in React,\n            // if any.\n            let error: unknown;\n\n            const resolve = (arg: NodeJS.ReadableStream) => {\n              if (error !== undefined) throw Error('Internal error');\n              error = null;\n              resolveArg(arg);\n            };\n\n            const reject = (arg: unknown) => {\n              if (error !== undefined && error !== arg) {\n                throw Error('Internal error');\n              }\n              error = arg;\n              rejectArg(arg as Error);\n            };\n\n            // TODO: prerenderToNodeStream has (abort) \"signal\" option,\n            // and we should wire it up to the SSR timeout below.\n            const helmetContext = {} as HelmetDataContext;\n            void prerenderToNodeStream(\n              <GlobalStateProvider\n                initialState={ssrContext.state}\n                ssrContext={ssrContext}\n              >\n                <StaticRouter location={req.url}>\n                  <HelmetProvider context={helmetContext}>\n                    <App2 />\n                  </HelmetProvider>\n                </StaticRouter>\n              </GlobalStateProvider>,\n              { onError: reject },\n            ).then((result) => {\n              ({ helmet } = helmetContext);\n              resolve(result.prelude);\n            }).catch(reject);\n          },\n        );\n\n        let ssrRound = 0;\n        let bailed = false;\n        for (; ssrRound < ops.maxSsrRounds!; ++ssrRound) {\n          stream = await renderPass();\n\n          if (!ssrContext.dirty) break;\n\n          const timeout = ops.ssrTimeout! + ssrStart - Date.now();\n          bailed = timeout <= 0 || !await Promise.race([\n            Promise.allSettled(ssrContext.pending),\n            timer(timeout).then(() => false),\n          ]);\n          if (bailed) break;\n        }\n\n        let logMsg;\n        if (ssrContext.dirty) {\n          // NOTE: In the case of incomplete SSR one more round is necessary\n          // to ensure the correct hydration when some pending promises have\n          // resolved and placed their data into the initial global state.\n          stream = await renderPass();\n\n          logMsg = bailed ? `SSR timed out after ${ops.ssrTimeout} second(s)`\n            : `SSR bailed out after ${ops.maxSsrRounds} round(s)`;\n        } else logMsg = `SSR completed in ${ssrRound + 1} round(s)`;\n\n        ops.logger!.log(ssrContext.dirty ? 'warn' : 'info', logMsg);\n\n        if (ssrContext.redirectTo) {\n          res.redirect(ssrContext.status, ssrContext.redirectTo);\n          return;\n        }\n\n        await new Promise((ready) => {\n          stream!.pipe(new Writable({\n            destroy: ready,\n            write: (chunk: { toString: () => string }, _, done) => {\n              appHtmlMarkup += chunk.toString();\n              done();\n            },\n          }));\n        });\n      }\n\n      /* Encrypts data to be injected into HTML.\n       * Keep in mind, that this encryption is no way secure: as the JS bundle\n       * contains decryption key and is able to decode it at the client side.\n       * Hovewer, for a number of reasons, encryption of injected data is still\n       * better than injection of a plain text. */\n      const payload = serializeJs({\n        CHUNK_GROUPS: chunkGroups,\n        CONFIG: configToInject ?? sanitizedConfig,\n        ISTATE: ssrContext.state,\n      }, {\n        ignoreFunction: true,\n        unsafe: true,\n      });\n\n      const INJ = Buffer.concat([\n        iv,\n        cipher.update(payload, 'utf8'),\n        cipher.final(),\n      ]).toString('base64');\n\n      const chunkSet = new Set<string>();\n\n      // TODO: \"main\" chunk has to be added explicitly,\n      // because unlike all other chunks they are not managed by <CodeSplit>\n      // component, thus they are not added to the ssrContext.chunks\n      // automatically. Actually, names of these entry chunks should be\n      // read from Wepback config, as the end user may customize them,\n      // remove or add other entry points, but it requires additional\n      // efforts to figure out how to automatically order them right,\n      // thus for now this handles the default config.\n      [\n        'main',\n        ...ssrContext.chunks,\n      ].forEach((chunk) => {\n        const assets = chunkGroups[chunk];\n        if (assets) assets.forEach((asset) => chunkSet.add(asset));\n      });\n\n      let styleChunkString = '';\n      let scriptChunkString = '';\n      chunkSet.forEach((chunk) => {\n        if (chunk.endsWith('.css')) {\n          styleChunkString += `<link href=\"${publicPath as string}${chunk}\" rel=\"stylesheet\">`;\n        } else if (\n          chunk.endsWith('.js')\n          // In dev mode HMR adds JS updates into asset arrays,\n          // and they (updates) should be ignored.\n          && !chunk.endsWith('.hot-update.js')\n        ) {\n          scriptChunkString += `<script src=\"${publicPath as string}${chunk}\" type=\"application/javascript\"></script>`;\n        }\n      });\n\n      const grouppedExtraScripts = groupExtraScripts(extraScripts);\n\n      const faviconLink = ops.favicon\n        ? '<link rel=\"shortcut icon\" href=\"/favicon.ico\">'\n        : '';\n\n      const html = `<!DOCTYPE html>\n        <html lang=\"en\">\n          <head>\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.HEAD_OPEN]}\n            ${helmet?.title.toString() ?? ''}\n            ${helmet?.meta.toString() ?? ''}\n            <meta name=\"theme-color\" content=\"#FFFFFF\">\n            ${manifestLink}\n            ${helmet?.link.toString() ?? ''}${styleChunkString}\n            ${faviconLink}\n            <meta charset=\"utf-8\">\n            <meta\n              content=\"width=device-width,initial-scale=1.0\"\n              name=\"viewport\"\n            >\n            <meta itemprop=\"drpruinj\" content=\"${INJ}\">\n          </head>\n          <body>\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.BODY_OPEN]}\n            <div id=\"react-view\">${appHtmlMarkup}</div>\n            ${scriptChunkString}\n            ${grouppedExtraScripts[SCRIPT_LOCATIONS.DEFAULT]}\n          </body>\n        </html>`;\n\n      const status = ssrContext.status || 200;\n      if (status !== 200) res.status(status);\n\n      if (cacheRef && status < 500) {\n        // Note: waiting for the caching to complete is not strictly necessary,\n        // but it greately simplifies testing, and error reporting.\n        await new Promise<void>((done, failed) => {\n          brotliCompress(html, (error, buffer) => {\n            if (error) failed(error);\n            else {\n              const b = buffer as unknown as BufferWithNonce;\n              b.nonce = (req as unknown as {\n                nonce: string;\n              }).nonce;\n              cache!.add({ buffer: b, status }, cacheRef.key, buffer.length);\n              done();\n            }\n          });\n        });\n      }\n\n      // Note: as caching code above may throw in some cases, sending response\n      // before it completes will likely hide the error, making it difficult\n      // to debug. Thus, at least for now, lets send response after it.\n      res.send(html);\n    } catch (error) {\n      next(error);\n    }\n  };\n}\n"],"mappings":"k+BAAA;AACA;AACA,GAEA,OAASA,MAAM,KAAQ,aAAa,CACpC,OAAwBC,cAAc,CAAEC,WAAW,KAAQ,aAAa,CACxE,MAAO,CAAAC,EAAE,KAAM,SAAS,CACxB,MAAO,CAAAC,IAAI,KAAM,WAAW,CAC5B,OAASC,QAAQ,KAAQ,aAAa,CACtC,OAASC,cAAc,CAAEC,gBAAgB,KAAQ,WAAW,CAK5D,MAAO,CAAAC,OAAO,KAAM,SAAS,CAE7B,OAASC,mBAAmB,CAAEC,UAAU,KAAQ,gCAAgC,CAChF,OAASC,KAAK,KAAQ,sBAAsB,CAE5C,OACEC,SAAS,CACTC,QAAQ,CACRC,GAAG,CACHC,SAAS,KACJ,WAAW,CAElB,MAAO,CAAAC,MAAM,KAAM,QAAQ,CAE3B,OAASC,qBAAqB,KAAQ,kBAAkB,CACxD,OAAiCC,cAAc,KAAQ,0BAA0B,CACjF,OAASC,YAAY,KAAQ,cAAc,CAC3C,MAAO,CAAAC,WAAW,KAAM,sBAAsB,QACpBC,YAAY,oDAI/B,CAAAC,KAAK,kBAEZ;AACA;AAAA,OAAAC,GAAA,IAAAC,IAAA,yBACA,KAAM,CAAEC,MAAM,CAAE,GAAGC,eAAgB,CAAC,CAAGV,MAAM,CAE7C;AACA;AACA;AACA;AAMA;AAMA;AASA,UAAY,CAAAW,gBAAgB,uBAAhBA,gBAAgB,EAAhBA,gBAAgB,0BAAhBA,gBAAgB,sBAAhBA,gBAAgB,gCAAhB,CAAAA,gBAAgB,MAM5B,MAAO,MAAM,CAAAC,gBAAgB,QACnB,CAAAlB,UACuB,CAG/BmB,MAAM,CAAa,EAAE,CAMrBC,MAAM,CAAW,GAAG,CAEpBC,WAAWA,CACTC,GAAY,CACZC,WAAyB,CACzBC,YAAqB,CACrB,CACA,KAAK,CAACtB,SAAS,CAACsB,YAAY,CAAC,EAAK,CAAC,CAAY,CAAC,CAChD,IAAI,CAACD,WAAW,CAAGA,WAAW,CAC9B,IAAI,CAACD,GAAG,CAAGA,GACb,CACF,CAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAG,YAAYA,CAACC,OAAe,CAAE,CACrC,KAAM,CAAAC,GAAG,CAAGjC,IAAI,CAACkC,OAAO,CAACF,OAAO,CAAE,aAAa,CAAC,CAChD,MAAO,CAAAG,IAAI,CAACC,KAAK,CAACrC,EAAE,CAACsC,YAAY,CAACJ,GAAG,CAAE,MAAM,CAAC,CAChD,CAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAK,mBAAmBA,CAACC,QAAgB,CAAE,CAC7C,KAAM,CAAAN,GAAG,CAAGjC,IAAI,CAACkC,OAAO,CAACK,QAAQ,CAAE,uBAAuB,CAAC,CAC3D,GAAI,CAAAC,GAAG,CACP,GAAI,CACFA,GAAG,CAAGL,IAAI,CAACC,KAAK,CAACrC,EAAE,CAACsC,YAAY,CAACJ,GAAG,CAAE,MAAM,CAAC,CAC/C,CAAE,KAAM,CACN;AACAO,GAAG,CAAG,IACR,CACA,MAAO,CAAAA,GACT,CAEA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAC,aAAaA,CAACC,GAAW,CAAkC,CAClE,KAAM,CAAAC,EAAE,CAAG7C,WAAW,CAAC,EAAE,CAAC,CAC1B,KAAM,CAAA8C,MAAM,CAAG/C,cAAc,CAAC,aAAa,CAAED,MAAM,CAACiD,IAAI,CAACH,GAAG,CAAE,QAAQ,CAAC,CAAEC,EAAE,CAAC,CAC5E,MAAO,CAACC,MAAM,CAAED,EAAE,CACpB,CAEA;AACA;AACA;AACA;AACA,GACA,MAAO,SAAS,CAAAG,kBAAkBA,CAAClB,GAAY,CAAW,CACxD,KAAM,CAAAmB,UAAU,CAAGnB,GAAG,CAAClB,GAAG,CAAC,iBAAiB,CAAC,CAC7C,GAAIqC,UAAU,CAAE,CACd,KAAM,CAAAC,GAAG,CAAGD,UAAU,CAACE,KAAK,CAAC,GAAG,CAAC,CACjC,IAAK,KAAM,CAAAC,EAAE,GAAI,CAAAF,GAAG,CAAE,CACpB,KAAM,CAACG,IAAI,CAAEC,QAAQ,CAAC,CAAGF,EAAE,CAACG,IAAI,CAAC,CAAC,CAACJ,KAAK,CAAC,KAAK,CAAC,CAC/C,GAAI,CAACE,IAAI,GAAK,GAAG,EAAIA,IAAI,GAAK,IAAI,IAC5B,CAACC,QAAQ,EAAIE,UAAU,CAACF,QAAQ,CAAC,CAAG,CAAC,CAAC,CAAE,CAC5C,MAAO,KACT,CACF,CACF,CACA,MAAO,MACT,CAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,QAAS,CAAAG,iBAAiBA,CAACC,OAAgC,CAAG,EAAE,CAAE,CAChE,KAAM,CAAAhB,GAAG,CAAG,CACV,CAACjB,gBAAgB,CAACkC,SAAS,EAAG,EAAE,CAChC,CAAClC,gBAAgB,CAACmC,OAAO,EAAG,EAAE,CAC9B,CAACnC,gBAAgB,CAACoC,SAAS,EAAG,EAChC,CAAC,CACD,IAAK,KAAM,CAAAC,MAAM,GAAI,CAAAJ,OAAO,CAAE,CAC5B,GAAI,MAAO,CAAAI,MAAM,GAAK,QAAQ,CAAE,CAC9B,GAAIA,MAAM,CAAEpB,GAAG,CAACjB,gBAAgB,CAACmC,OAAO,CAAC,EAAIE,MAC/C,CAAC,IAAM,IAAIA,MAAM,CAACC,IAAI,CAAE,CACtB,GAAID,MAAM,CAACE,QAAQ,GAAI,CAAAtB,GAAG,CAAEA,GAAG,CAACoB,MAAM,CAACE,QAAQ,CAAC,EAAIF,MAAM,CAACC,IAAI,CAAC,IAC3D,MAAM,CAAAE,KAAK,CAAC,qBAAqBH,MAAM,CAACE,QAAQ,GAAG,CAC1D,CACF,CACA,MAAO,CAAAtB,GACT,CAEA;AACA;AACA;AACA;AACA;AACA,GACA,MAAO,SAAS,CAAAwB,gBAAgBA,CAAC,CAC/BC,eAAe,CAAG,MACpB,CAAC,CAAG,CAAC,CAAC,CAAkB,CACtB,KAAM,CAAEC,MAAM,CAAEC,UAAW,CAAC,CAAG/D,OAAO,CACtC,MAAO,CAAAA,OAAO,CAACgE,YAAY,CAAC,CAC1BF,MAAM,CAAEA,MAAM,CAACG,OAAO,CACpBH,MAAM,CAACI,KAAK,CAAC,CAAC,CACdJ,MAAM,CAACK,SAAS,CAAC,CAAC,CAClBL,MAAM,CAACM,QAAQ,CAAC,CAAC,CACjBN,MAAM,CAACO,MAAM,CACX,CAAC,CACCC,KAAK,CACLC,OAAO,CACPJ,SAAS,CACTK,KAAK,CACL,GAAGC,IACL,CAAC,GAAK,CACJ,GAAI,CAAArC,GAAG,CAAG,GAAGkC,KAAK,SAASH,SAAS,OAAiBI,OAAO,EAAY,CACxE,GAAIG,MAAM,CAACC,IAAI,CAACF,IAAI,CAAC,CAACG,MAAM,CAAE,CAC5BxC,GAAG,EAAI,KAAKL,IAAI,CAAC8C,SAAS,CAACJ,IAAI,CAAE,IAAI,CAAE,CAAC,CAAC,EAC3C,CACA,GAAID,KAAK,CAAEpC,GAAG,EAAI,KAAKoC,KAAK,EAAY,CACxC,MAAO,CAAApC,GACT,CACF,CACF,CAAC,CACDkC,KAAK,CAAET,eAAe,CACtBE,UAAU,CAAE,CAAC,GAAI,CAAAA,UAAU,CAACe,OAAS,CACvC,CAAC,CACH,CAoCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,cAAe,SAAS,CAAAC,OAAOA,CAC7BC,aAA4B,CAC5BC,OAAiB,CACD,CAChB,KAAM,CAAArC,GAAa,CAAGvC,QAAQ,CAAC,CAAE,GAAG4E,OAAQ,CAAC,CAAE,CAC7CC,YAAY,CAAE,KAAAA,CAAA,GAAYC,OAAO,CAACrD,OAAO,CAAC,CAAC,CAAC,CAAC,CAC7CsD,YAAY,CAAE,EAAE,CAChBC,UAAU,CAAE,IAAI,CAChBC,eAAe,CAAE,IACnB,CAAC,CAAC,CAEF;AACA;AACA;AACA1C,GAAG,CAAC2C,MAAM,GAAK3B,gBAAgB,CAAC,CAC9BC,eAAe,CAAEjB,GAAG,CAAC4C,qBACvB,CAAC,CAAC,CAEF,KAAM,CAAAC,SAAS,CAAG7C,GAAG,CAAC6C,SAAS,EAAI9D,YAAY,CAACqD,aAAa,CAACpD,OAAQ,CAAC,CACvEf,YAAY,CAAC4E,SAAS,CAAC,CAEvB;AACA,KAAM,CAAEC,UAAU,CAAE9F,IAAI,CAAE+F,UAAW,CAAC,CAAGX,aAAa,CAACY,MAAO,CAE9D,KAAM,CAAAC,YAAY,CAAGlG,EAAE,CAACmG,UAAU,CAAC,GAAGH,UAAU,gBAAgB,CAAC,CAC7D,8BAA8BD,UAAU,iBAA2B,CAAG,EAAE,CAE5E;AAKA,KAAM,CAAAK,KAAK,CAAGnD,GAAG,CAACoD,qBAAqB,CACnC,GAAI,CAAAlF,KAAK,CAGR8B,GAAG,CAAC0C,eAAgB,CAAC,CACtB,IAAI,CAER,KAAM,CAAAW,YAAY,CAAG/D,mBAAmB,CAACyD,UAAW,CAAC,CAErD;AACA;AACA,MAAO,OAAOnE,GAAG,CAAEY,GAAG,CAAE8D,IAAI,GAAK,CAC/B,GAAI,CACF;AACA9D,GAAG,CAAC+D,GAAG,CAAC,eAAe,CAAE,UAAU,CAAC,CAEpC/D,GAAG,CAACgE,MAAM,CAAC,WAAW,CAAE5E,GAAG,CAAC6E,SAAS,CAAC,CAAC,CAAC,CAExC,GAAI,CAAAC,QAAsC,CAC1C,GAAIP,KAAK,CAAE,CACTO,QAAQ,CAAG1D,GAAG,CAACoD,qBAAqB,CAAExE,GAAG,CAAC,CAC1C,GAAI8E,QAAQ,CAAE,CACZ,KAAM,CAAAC,IAAI,CAAGR,KAAK,CAACzF,GAAG,CAACgG,QAAQ,CAAC,CAChC,GAAIC,IAAI,GAAK,IAAI,CAAE,CACjB,KAAM,CAAEC,MAAM,CAAElF,MAAO,CAAC,CAAGiF,IAAI,CAC/B,GAAI3D,GAAG,CAAC6D,KAAK,EAAI/D,kBAAkB,CAAClB,GAAG,CAAC,CAAE,CACxCY,GAAG,CAAC+D,GAAG,CAAC,cAAc,CAAE,WAAW,CAAC,CACpC/D,GAAG,CAAC+D,GAAG,CAAC,kBAAkB,CAAE,IAAI,CAAC,CACjC,GAAI7E,MAAM,GAAK,GAAG,CAAEc,GAAG,CAACd,MAAM,CAACA,MAAM,CAAC,CACtCc,GAAG,CAACsE,IAAI,CAACF,MAAM,CACjB,CAAC,IAAM,CACL,KAAM,IAAI,CAAArB,OAAO,CAAO,CAACwB,IAAI,CAAEC,MAAM,GAAK,CACxC7G,gBAAgB,CAACyG,MAAM,CAAE,CAACK,KAAK,CAAEC,IAAI,GAAK,CACxC,GAAID,KAAK,CAAED,MAAM,CAACC,KAAK,CAAC,CAAC,IACpB,CACH,GAAI,CAAAE,CAAC,CAAGD,IAAI,CAACE,QAAQ,CAAC,CAAC,CACvB,GAAI,CAACpE,GAAG,CAAC6D,KAAK,CAAE,CACd;AACA;AACA;AACA,KAAM,CAAAQ,KAAK,CAAG,GAAI,CAAAC,MAAM,CAACV,MAAM,CAACW,KAAK,CAAE,GAAG,CAAC,CAE3C;AACAJ,CAAC,CAAGA,CAAC,CAACK,OAAO,CAACH,KAAK,CAAGzF,GAAG,CAEtB2F,KAAK,CACV,CACA,GAAI7F,MAAM,GAAK,GAAG,CAAEc,GAAG,CAACd,MAAM,CAACA,MAAM,CAAC,CACtCc,GAAG,CAACsE,IAAI,CAACK,CAAC,CAAC,CACXJ,IAAI,CAAC,CACP,CACF,CAAC,CACH,CAAC,CACH,CACA,MACF,CACF,CACF,CAEA,KAAM,CAAAU,GAAG,CAAGzE,GAAG,CAACsC,YAAY,CAAE1D,GAAG,CAAEN,eAAqC,CAAC,CACzE,KAAM,CAAEoG,cAAc,CAAEC,YAAY,CAAE7F,YAAa,CAAC,CAAG,KAAM,CAAA2F,GAAG,CAEhE,KAAM,CAAC7E,MAAM,CAAED,EAAE,CAAC,CAAGF,aAAa,CAACoD,SAAS,CAACnD,GAAG,CAAC,CAEjD,GAAI,CAAAkF,MAAmC,CAEvC;AACA;AACA;AACA;AACA,GAAI,CAAA/F,WAAyB,CAC7B,KAAM,CAAAgG,YAAY,CAAGnH,GAAG,CAAC8B,GAAG,CAACsF,MAAM,CAAE,6BAA6B,CAAsB,CACxF,GAAID,YAAY,CAAE,CAChBhG,WAAW,CAAGlB,SAAS,CACrBkH,YAAY,CAACE,MAAM,CAAC,CAClBC,GAAG,CAAE,KAAK,CACVnG,WAAW,CAAE,IACf,CAAC,CAAC,CAACoG,gBAAgB,CAClBC,IAAI,EAAKA,IAAI,CAACC,MAAM,EAAEC,GAAG,CAAC,CAAC,CAAEC,IAAuB,CAAC,GAAKA,IAAI,CAAC,EAC3D,EACP,CACF,CAAC,IAAM,IAAIhC,YAAY,CAAExE,WAAW,CAAGwE,YAAY,CAAC,IAC/C,CAAAxE,WAAW,CAAG,CAAC,CAAC,CAErB,qCACA,KAAM,CAAAyG,GAAG,CAAGtF,GAAG,CAACuF,WAAW,CAC3B,GAAI,CAAAC,aAAqB,CAAG,EAAE,CAC9B,KAAM,CAAAC,UAAU,CAAG,GAAI,CAAAjH,gBAAgB,CAACI,GAAG,CAAEC,WAAW,CAAEC,YAAY,CAAC,CACvE,GAAI,CAAA4G,MAA6B,CACjC,GAAIJ,GAAG,CAAE,CACP,KAAM,CAAAK,QAAQ,CAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,CAE3B;AACA;AACA,KAAM,CAAAC,IAAI,CAAGR,GAAG,CAEhB,KAAM,CAAAS,UAAU,CAAG,KAAAA,CAAA,GAAY,GAAI,CAAAxD,OAAO,CACxC,CAACyD,UAAU,CAAEC,SAAS,GAAK,CACzBR,UAAU,CAAChH,MAAM,CAAG,EAAE,CAEtB;AACA;AACA;AACA;AACA;AACA;AACA,GAAI,CAAAwF,KAAc,CAElB,KAAM,CAAA/E,OAAO,CAAIgH,GAA0B,EAAK,CAC9C,GAAIjC,KAAK,GAAKkC,SAAS,CAAE,KAAM,CAAApF,KAAK,CAAC,gBAAgB,CAAC,CACtDkD,KAAK,CAAG,IAAI,CACZ+B,UAAU,CAACE,GAAG,CAChB,CAAC,CAED,KAAM,CAAAE,MAAM,CAAIF,GAAY,EAAK,CAC/B,GAAIjC,KAAK,GAAKkC,SAAS,EAAIlC,KAAK,GAAKiC,GAAG,CAAE,CACxC,KAAM,CAAAnF,KAAK,CAAC,gBAAgB,CAC9B,CACAkD,KAAK,CAAGiC,GAAG,CACXD,SAAS,CAACC,GAAY,CACxB,CAAC,CAED;AACA;AACA,KAAM,CAAAG,aAAa,CAAG,CAAC,CAAsB,CAC7C,IAAK,CAAAxI,qBAAqB,cACxBO,IAAA,CAACf,mBAAmB,EAClByB,YAAY,CAAE2G,UAAU,CAACa,KAAM,CAC/Bb,UAAU,CAAEA,UAAW,CAAAc,QAAA,cAEvBnI,IAAA,CAACL,YAAY,EAAC+C,QAAQ,CAAElC,GAAG,CAACK,GAAI,CAAAsH,QAAA,cAC9BnI,IAAA,CAACN,cAAc,EAACkB,OAAO,CAAEqH,aAAc,CAAAE,QAAA,cACrCnI,IAAA,CAAC0H,IAAI,GAAE,CAAC,CACM,CAAC,CACL,CAAC,CACI,CAAC,CACtB,CAAEU,OAAO,CAAEJ,MAAO,CACpB,CAAC,CAACK,IAAI,CAAEC,MAAM,EAAK,CACjB,CAAC,CAAE9B,MAAO,CAAC,CAAGyB,aAAa,EAC3BnH,OAAO,CAACwH,MAAM,CAACC,OAAO,CACxB,CAAC,CAAC,CAACC,KAAK,CAACR,MAAM,CACjB,CACF,CAAC,CAED,GAAI,CAAAS,QAAQ,CAAG,CAAC,CAChB,GAAI,CAAAC,MAAM,CAAG,KAAK,CAClB,KAAOD,QAAQ,CAAG7G,GAAG,CAACwC,YAAa,CAAE,EAAEqE,QAAQ,CAAE,CAC/CnB,MAAM,CAAG,KAAM,CAAAK,UAAU,CAAC,CAAC,CAE3B,GAAI,CAACN,UAAU,CAACsB,KAAK,CAAE,MAEvB,KAAM,CAAAC,OAAO,CAAGhH,GAAG,CAACyC,UAAU,CAAIkD,QAAQ,CAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,CACvDiB,MAAM,CAAGE,OAAO,EAAI,CAAC,EAAI,EAAC,KAAM,CAAAzE,OAAO,CAAC0E,IAAI,CAAC,CAC3C1E,OAAO,CAAC2E,UAAU,CAACzB,UAAU,CAAC0B,OAAO,CAAC,CACtC5J,KAAK,CAACyJ,OAAO,CAAC,CAACP,IAAI,CAAC,IAAM,KAAK,CAAC,CACjC,CAAC,EACF,GAAIK,MAAM,CAAE,KACd,CAEA,GAAI,CAAAM,MAAM,CACV,GAAI3B,UAAU,CAACsB,KAAK,CAAE,CACpB;AACA;AACA;AACArB,MAAM,CAAG,KAAM,CAAAK,UAAU,CAAC,CAAC,CAE3BqB,MAAM,CAAGN,MAAM,CAAG,uBAAuB9G,GAAG,CAACyC,UAAU,YAAY,CAC/D,wBAAwBzC,GAAG,CAACwC,YAAY,WAC9C,CAAC,IAAM,CAAA4E,MAAM,CAAG,oBAAoBP,QAAQ,CAAG,CAAC,WAAW,CAE3D7G,GAAG,CAAC2C,MAAM,CAAE0E,GAAG,CAAC5B,UAAU,CAACsB,KAAK,CAAG,MAAM,CAAG,MAAM,CAAEK,MAAM,CAAC,CAE3D,GAAI3B,UAAU,CAAC6B,UAAU,CAAE,CACzB9H,GAAG,CAAC+H,QAAQ,CAAC9B,UAAU,CAAC/G,MAAM,CAAE+G,UAAU,CAAC6B,UAAU,CAAC,CACtD,MACF,CAEA,KAAM,IAAI,CAAA/E,OAAO,CAAEiF,KAAK,EAAK,CAC3B9B,MAAM,CAAE+B,IAAI,CAAC,GAAI,CAAAxK,QAAQ,CAAC,CACxByK,OAAO,CAAEF,KAAK,CACdG,KAAK,CAAEA,CAACC,KAAiC,CAAEC,CAAC,CAAE9D,IAAI,GAAK,CACrDyB,aAAa,EAAIoC,KAAK,CAACxD,QAAQ,CAAC,CAAC,CACjCL,IAAI,CAAC,CACP,CACF,CAAC,CAAC,CACJ,CAAC,CACH,CAEA;AACN;AACA;AACA;AACA,kDACM,KAAM,CAAA+D,OAAO,CAAG9J,WAAW,CAAC,CAC1BqF,YAAY,CAAExE,WAAW,CACzBkJ,MAAM,CAAErD,cAAc,EAAIpG,eAAe,CACzC0J,MAAM,CAAEvC,UAAU,CAACa,KACrB,CAAC,CAAE,CACD2B,cAAc,CAAE,IAAI,CACpBC,MAAM,CAAE,IACV,CAAC,CAAC,CAEF,KAAM,CAAAC,GAAG,CAAGvL,MAAM,CAACwL,MAAM,CAAC,CACxBzI,EAAE,CACFC,MAAM,CAACyI,MAAM,CAACP,OAAO,CAAE,MAAM,CAAC,CAC9BlI,MAAM,CAAC0I,KAAK,CAAC,CAAC,CACf,CAAC,CAAClE,QAAQ,CAAC,QAAQ,CAAC,CAErB,KAAM,CAAAmE,QAAQ,CAAG,GAAI,CAAAC,GAAa,CAElC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,CACE,MAAM,CACN,GAAG/C,UAAU,CAAChH,MAAM,CACrB,CAACgK,OAAO,CAAEb,KAAK,EAAK,CACnB,KAAM,CAAAzC,MAAM,CAAGtG,WAAW,CAAC+I,KAAK,CAAC,CACjC,GAAIzC,MAAM,CAAEA,MAAM,CAACsD,OAAO,CAAEC,KAAK,EAAKH,QAAQ,CAACI,GAAG,CAACD,KAAK,CAAC,CAC3D,CAAC,CAAC,CAEF,GAAI,CAAAE,gBAAgB,CAAG,EAAE,CACzB,GAAI,CAAAC,iBAAiB,CAAG,EAAE,CAC1BN,QAAQ,CAACE,OAAO,CAAEb,KAAK,EAAK,CAC1B,GAAIA,KAAK,CAACkB,QAAQ,CAAC,MAAM,CAAC,CAAE,CAC1BF,gBAAgB,EAAI,eAAe9F,UAAU,GAAa8E,KAAK,qBACjE,CAAC,IAAM,IACLA,KAAK,CAACkB,QAAQ,CAAC,KAAK,CACpB;AACA;AAAA,EACG,CAAClB,KAAK,CAACkB,QAAQ,CAAC,gBAAgB,CAAC,CACpC,CACAD,iBAAiB,EAAI,gBAAgB/F,UAAU,GAAa8E,KAAK,2CACnE,CACF,CAAC,CAAC,CAEF,KAAM,CAAAmB,oBAAoB,CAAGxI,iBAAiB,CAACoE,YAAY,CAAC,CAE5D,KAAM,CAAAqE,WAAW,CAAGhJ,GAAG,CAACiJ,OAAO,CAC3B,oDAAgD,CAChD,EAAE,CAEN,KAAM,CAAA/E,IAAI,CAAG;AACnB;AACA;AACA,cAAc6E,oBAAoB,CAACxK,gBAAgB,CAACoC,SAAS,CAAC;AAC9D,cAAciE,MAAM,EAAEsE,KAAK,CAAC9E,QAAQ,CAAC,CAAC,EAAI,EAAE;AAC5C,cAAcQ,MAAM,EAAEuE,IAAI,CAAC/E,QAAQ,CAAC,CAAC,EAAI,EAAE;AAC3C;AACA,cAAcnB,YAAY;AAC1B,cAAc2B,MAAM,EAAEwE,IAAI,CAAChF,QAAQ,CAAC,CAAC,EAAI,EAAE,GAAGwE,gBAAgB;AAC9D,cAAcI,WAAW;AACzB;AACA;AACA;AACA;AACA;AACA,iDAAiDb,GAAG;AACpD;AACA;AACA,cAAcY,oBAAoB,CAACxK,gBAAgB,CAACkC,SAAS,CAAC;AAC9D,mCAAmC+E,aAAa;AAChD,cAAcqD,iBAAiB;AAC/B,cAAcE,oBAAoB,CAACxK,gBAAgB,CAACmC,OAAO,CAAC;AAC5D;AACA,gBAAgB,CAEV,KAAM,CAAAhC,MAAM,CAAG+G,UAAU,CAAC/G,MAAM,EAAI,GAAG,CACvC,GAAIA,MAAM,GAAK,GAAG,CAAEc,GAAG,CAACd,MAAM,CAACA,MAAM,CAAC,CAEtC,GAAIgF,QAAQ,EAAIhF,MAAM,CAAG,GAAG,CAAE,CAC5B;AACA;AACA,KAAM,IAAI,CAAA6D,OAAO,CAAO,CAACwB,IAAI,CAAEC,MAAM,GAAK,CACxC9G,cAAc,CAACgH,IAAI,CAAE,CAACD,KAAK,CAAEL,MAAM,GAAK,CACtC,GAAIK,KAAK,CAAED,MAAM,CAACC,KAAK,CAAC,CAAC,IACpB,CACH,KAAM,CAAAoF,CAAC,CAAGzF,MAAoC,CAC9CyF,CAAC,CAAC9E,KAAK,CAAI3F,GAAG,CAEX2F,KAAK,CACRpB,KAAK,CAAEwF,GAAG,CAAC,CAAE/E,MAAM,CAAEyF,CAAC,CAAE3K,MAAO,CAAC,CAAEgF,QAAQ,CAAChE,GAAG,CAAEkE,MAAM,CAAC5B,MAAM,CAAC,CAC9D+B,IAAI,CAAC,CACP,CACF,CAAC,CACH,CAAC,CACH,CAEA;AACA;AACA;AACAvE,GAAG,CAACsE,IAAI,CAACI,IAAI,CACf,CAAE,MAAOD,KAAK,CAAE,CACdX,IAAI,CAACW,KAAK,CACZ,CACF,CACF","ignoreList":[]}

package/build/production/server/server.js

@@ -1,10 +1,10 @@
-"use strict";var _interopRequireDefault=require("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(exports,"__esModule",{value:true});exports.default=factory;exports.getDefaultCspSettings=getDefaultCspSettings;var _nodePath=require("node:path");var _nodeUrl=require("node:url");var _lodash=require("lodash");var _compression=_interopRequireDefault(require("compression"));var _cookieParser=_interopRequireDefault(require("cookie-parser"));var _csurf=_interopRequireDefault(require("@dr.pogodin/csurf"));var _express=_interopRequireDefault(require("express"));var _serveFavicon=_interopRequireDefault(require("serve-favicon"));var _helmet=_interopRequireDefault(require("helmet"));var _morgan=_interopRequireDefault(require("morgan"));var _requestIp=_interopRequireDefault(require("request-ip"));var _uuid=require("uuid");var _renderer=_interopRequireDefault(require("./renderer"));var _errors=require("./utils/errors");/**
+import"core-js/modules/es.array.push.js";import"core-js/modules/es.iterator.constructor.js";import"core-js/modules/es.iterator.filter.js";import"core-js/modules/es.array.push.js";import"core-js/modules/es.iterator.constructor.js";import"core-js/modules/es.iterator.filter.js";/**
  * Creation of standard ExpressJS server for ReactJS apps.
- */// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
+ */import{sep}from"node:path";import{pathToFileURL}from"node:url";import{cloneDeep,mapValues,pick}from"lodash-es";import compression from"compression";import cookieParser from"cookie-parser";import csrf from"@dr.pogodin/csurf";import express from"express";import favicon from"serve-favicon";import helmet from"helmet";import loggerMiddleware from"morgan";import requestIp from"request-ip";import{v4 as uuid}from"uuid";import rendererFactory from"./renderer.js";import{CODES,ERRORS,getErrorForCode,newError}from"./utils/errors.js";// eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 /**
  * Default Content Security Policy settings.
  * @ignore
- */const defaultCspSettings={directives:(0,_lodash.mapValues)(_helmet.default.contentSecurityPolicy.getDefaultDirectives(),// 'https:' options (automatic re-write of insecure URLs to secure ones)
+ */const defaultCspSettings={directives:mapValues(helmet.contentSecurityPolicy.getDefaultDirectives(),// 'https:' options (automatic re-write of insecure URLs to secure ones)
 // is removed to facilitate local development with HTTP server. In cloud
 // deployments we assume Apache or Nginx server in front of out app takes
 // care about such re-writes.
@@ -27,17 +27,17 @@ delete defaultCspSettings.directives["upgrade-insecure-requests"];/**
  * }} A deep copy of default CSP settings object used by `react-utils`,
  * with the exception of `nonce-xxx` clause in `script-src` directive,
  * which is added dynamically for each request.
- */function getDefaultCspSettings(){return(0,_lodash.cloneDeep)(defaultCspSettings)}async function factory(webpackConfig,options){const rendererOps=(0,_lodash.pick)(options,["Application","beforeRender","favicon","logger","maxSsrRounds","noCsp","ssrTimeout","staticCacheController","staticCacheSize"]);const renderer=(0,_renderer.default)(webpackConfig,rendererOps);const{publicPath}=webpackConfig.output;const server=(0,_express.default)();if(options.beforeExpressJsSetup){await options.beforeExpressJsSetup(server)}if(options.logger)server.logger=options.logger;if(options.httpsRedirect){server.use((req,res,next)=>{const schema=req.headers["x-forwarded-proto"];if(schema==="http"){let url=`https://${req.headers.host}`;if(req.originalUrl!=="/")url+=req.originalUrl;res.redirect(url);return}next()})}server.use((0,_compression.default)());server.use((0,_helmet.default)({contentSecurityPolicy:false,crossOriginEmbedderPolicy:false,crossOriginOpenerPolicy:false,crossOriginResourcePolicy:false}));if(!options.noCsp){server.use((req,res,next)=>{const req2=req;req2.nonce=(0,_uuid.v4)();// TODO: This is deprecated, but it is kept for now for backward
+ */export function getDefaultCspSettings(){return cloneDeep(defaultCspSettings)}export default async function factory(webpackConfig,options){const rendererOps=pick(options,["Application","beforeRender","favicon","logger","maxSsrRounds","noCsp","ssrTimeout","staticCacheController","staticCacheSize"]);const renderer=rendererFactory(webpackConfig,rendererOps);const{publicPath}=webpackConfig.output;const server=express();if(options.beforeExpressJsSetup){await options.beforeExpressJsSetup(server)}if(options.logger)server.logger=options.logger;if(options.httpsRedirect){server.use((req,res,next)=>{const schema=req.headers["x-forwarded-proto"];if(schema==="http"){let url=`https://${req.headers.host}`;if(req.originalUrl!=="/")url+=req.originalUrl;res.redirect(url);return}next()})}server.use(compression());server.use(helmet({contentSecurityPolicy:false,crossOriginEmbedderPolicy:false,crossOriginOpenerPolicy:false,crossOriginResourcePolicy:false}));if(!options.noCsp){server.use((req,res,next)=>{const req2=req;req2.nonce=uuid();// TODO: This is deprecated, but it is kept for now for backward
 // compatibility. Should be removed sometime later.
 req2.cspNonce=req2.nonce;// The deep clone is necessary here to ensure that default value can't be
 // mutated during request processing.
-let cspSettings=(0,_lodash.cloneDeep)(defaultCspSettings);(cspSettings.directives?.["script-src"]).push(`'nonce-${req2.nonce}'`);if(options.cspSettingsHook){cspSettings=options.cspSettingsHook(cspSettings,req)}_helmet.default.contentSecurityPolicy(cspSettings)(req,res,next)})}if(options.favicon){server.use((0,_serveFavicon.default)(options.favicon))}server.use("/robots.txt",(req,res)=>{res.send("User-agent: *\nDisallow:")});server.use(_express.default.json({limit:"300kb"}));server.use(_express.default.urlencoded({extended:false}));server.use((0,_cookieParser.default)(options.cookieSignatureSecret));server.use(_requestIp.default.mw());server.use((0,_csurf.default)({cookie:true}));_morgan.default.token("ip",req=>req.clientIp);const FORMAT=":ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent";server.use((0,_morgan.default)(FORMAT,{stream:{// TODO: This implies the logger is always set. Is it on a higher level?
+let cspSettings=cloneDeep(defaultCspSettings);(cspSettings.directives?.["script-src"]).push(`'nonce-${req2.nonce}'`);if(options.cspSettingsHook){cspSettings=options.cspSettingsHook(cspSettings,req)}helmet.contentSecurityPolicy(cspSettings)(req,res,next)})}if(options.favicon){server.use(favicon(options.favicon))}server.use("/robots.txt",(req,res)=>{res.send("User-agent: *\nDisallow:")});server.use(express.json({limit:"300kb"}));server.use(express.urlencoded({extended:false}));server.use(cookieParser(options.cookieSignatureSecret));server.use(requestIp.mw());server.use(csrf({cookie:true}));loggerMiddleware.token("ip",req=>req.clientIp);const FORMAT=":ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent";server.use(loggerMiddleware(FORMAT,{stream:{// TODO: This implies the logger is always set. Is it on a higher level?
 // then mark it as always present.
 write:options.logger.info.bind(options.logger)}}));// Note: no matter the "public path", we want the service worker, if any,
 // to be served from the root, to have all web app pages in its scope.
 // Thus, this setup to serve it. Probably, need some more configuration
 // for special cases, but this will do for now.
-server.get("/__service-worker.js",_express.default.static(webpackConfig.output?.path??"",{setHeaders:res=>res.set("Cache-Control","no-cache")}));/* Setup of Hot Module Reloading for development environment.
+server.get("/__service-worker.js",express.static(webpackConfig.output?.path??"",{setHeaders:res=>res.set("Cache-Control","no-cache")}));/* Setup of Hot Module Reloading for development environment.
    * These dependencies are not used, nor installed for production use,
    * hence we should violate some import-related lint rules. *//* eslint-disable import/no-extraneous-dependencies */if(options.devMode){// This is a workaround for SASS bug:
 // https://github.com/dart-lang/sdk/issues/27979
@@ -45,9 +45,7 @@ server.get("/__service-worker.js",_express.default.static(webpackConfig.output?.
 // (in dev mode), and app modules are imported in some unfortunate ways.
 // TODO: Double-check, what is going on here.
 // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
-if(!global.location){global.location={href:`${(0,_nodeUrl.pathToFileURL)(process.cwd()).href}${_nodePath.sep}`}}/* eslint-disable @typescript-eslint/no-require-imports */const webpack=require("webpack");// TODO: Figure out the exact type for options, don't wanna waste time on it
-// right now.
-const webpackDevMiddleware=require("webpack-dev-middleware");const webpackHotMiddleware=require("webpack-hot-middleware");const compiler=webpack(webpackConfig);server.use(webpackDevMiddleware(compiler,{publicPath,serverSideRender:true}));server.use(webpackHotMiddleware(compiler))}/* eslint-enable import/no-extraneous-dependencies */server.use(publicPath,_express.default.static(webpackConfig.output.path));if(options.onExpressJsSetup){await options.onExpressJsSetup(server)}server.use(renderer);/* Detects 404 errors, and forwards them to the error handler. */server.use((req,res,next)=>{next((0,_errors.newError)(_errors.ERRORS.NOT_FOUND,_errors.CODES.NOT_FOUND))});let dontAttachDefaultErrorHandler;if(options.beforeExpressJsError){dontAttachDefaultErrorHandler=await options.beforeExpressJsError(server)}/* Error handler. */if(!dontAttachDefaultErrorHandler){// TODO: Do we need this error handler at all? It actually seems to do
+if(!global.location){global.location={href:`${pathToFileURL(process.cwd()).href}${sep}`}}const{default:webpack}=await import(/* webpackChunkName: "server-side-code" */"webpack");const{default:webpackDevMiddleware}=await import(/* webpackChunkName: "server-side-code" */"webpack-dev-middleware");const{default:webpackHotMiddleware}=await import(/* webpackChunkName: "server-side-code" */"webpack-hot-middleware");const compiler=webpack(webpackConfig);if(!compiler)throw Error("Internal error");server.use(webpackDevMiddleware(compiler,{publicPath,serverSideRender:true}));server.use(webpackHotMiddleware(compiler))}/* eslint-enable import/no-extraneous-dependencies */server.use(publicPath,express.static(webpackConfig.output.path));if(options.onExpressJsSetup){await options.onExpressJsSetup(server)}server.use(renderer);/* Detects 404 errors, and forwards them to the error handler. */server.use((req,res,next)=>{next(newError(ERRORS.NOT_FOUND,CODES.NOT_FOUND))});let dontAttachDefaultErrorHandler;if(options.beforeExpressJsError){dontAttachDefaultErrorHandler=await options.beforeExpressJsError(server)}/* Error handler. */if(!dontAttachDefaultErrorHandler){// TODO: Do we need this error handler at all? It actually seems to do
 // what the default ExpressJS error handler does anyway, see:
 // https://expressjs.com/en/guide/error-handling.html
 //
@@ -57,6 +55,6 @@ const webpackDevMiddleware=require("webpack-dev-middleware");const webpackHotMid
 // though.
 server.use((error,req,res,next)=>{// TODO: This is needed to correctly handled any errors thrown after
 // sending initial response to the client.
-if(res.headersSent){next(error);return}const status=error.status??_errors.CODES.INTERNAL_SERVER_ERROR;const serverSide=status>=_errors.CODES.INTERNAL_SERVER_ERROR;// Log server-side errors always, client-side at debug level only.
-options.logger.log(serverSide?"error":"debug",error.toString());let message=error.message||(0,_errors.getErrorForCode)(status);if(serverSide&&process.env.NODE_ENV==="production"){message=_errors.ERRORS.INTERNAL_SERVER_ERROR}res.status(status).send(message)})}return server}
+if(res.headersSent){next(error);return}const status=error.status??CODES.INTERNAL_SERVER_ERROR;const serverSide=status>=CODES.INTERNAL_SERVER_ERROR;// Log server-side errors always, client-side at debug level only.
+options.logger.log(serverSide?"error":"debug",error.toString());let message=error.message||getErrorForCode(status);if(serverSide&&process.env.NODE_ENV==="production"){message=ERRORS.INTERNAL_SERVER_ERROR}res.status(status).send(message)})}return server}
 //# sourceMappingURL=server.js.map

package/build/production/server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":["_nodePath","require","_nodeUrl","_lodash","_compression","_interopRequireDefault","_cookieParser","_csurf","_express","_serveFavicon","_helmet","_morgan","_requestIp","_uuid","_renderer","_errors","defaultCspSettings","directives","mapValues","helmet","contentSecurityPolicy","getDefaultDirectives","array","filter","item","push","getDefaultCspSettings","cloneDeep","factory","webpackConfig","options","rendererOps","pick","renderer","rendererFactory","publicPath","output","server","express","beforeExpressJsSetup","logger","httpsRedirect","use","req","res","next","schema","headers","url","host","originalUrl","redirect","compression","crossOriginEmbedderPolicy","crossOriginOpenerPolicy","crossOriginResourcePolicy","noCsp","req2","nonce","uuid","cspNonce","cspSettings","cspSettingsHook","favicon","send","json","limit","urlencoded","extended","cookieParser","cookieSignatureSecret","requestIp","mw","csrf","cookie","loggerMiddleware","token","clientIp","FORMAT","stream","write","info","bind","get","static","path","setHeaders","set","devMode","global","location","href","pathToFileURL","process","cwd","sep","webpack","webpackDevMiddleware","webpackHotMiddleware","compiler","serverSideRender","onExpressJsSetup","newError","ERRORS","NOT_FOUND","CODES","dontAttachDefaultErrorHandler","beforeExpressJsError","error","headersSent","status","INTERNAL_SERVER_ERROR","serverSide","log","toString","message","getErrorForCode","env","NODE_ENV"],"sources":["../../../src/server/server.ts"],"sourcesContent":["/**\n * Creation of standard ExpressJS server for ReactJS apps.\n */\n\nimport { sep } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport {\n  cloneDeep,\n  mapValues,\n  pick,\n} from 'lodash';\n\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport csrf from '@dr.pogodin/csurf';\n\nimport express, {\n  type Express,\n  type NextFunction,\n  type RequestHandler,\n  type Request,\n  type Response,\n} from 'express';\n\nimport favicon from 'serve-favicon';\nimport helmet, { type HelmetOptions } from 'helmet';\nimport loggerMiddleware from 'morgan';\nimport requestIp from 'request-ip';\nimport { v4 as uuid } from 'uuid';\n\nimport type { Compiler, Configuration } from 'webpack';\n\nimport rendererFactory, {\n  type LoggerI,\n  type OptionsT as RendererOptionsT,\n} from './renderer';\n\nimport {\n  CODES,\n  ERRORS,\n  getErrorForCode,\n  newError,\n} from './utils/errors';\n\nexport type CspOptionsT = Exclude<HelmetOptions['contentSecurityPolicy'], boolean | undefined>;\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface RequestT extends Request {\n  cspNonce: string;\n  nonce: string;\n}\n\n/**\n * Default Content Security Policy settings.\n * @ignore\n */\nconst defaultCspSettings = {\n  directives: mapValues(\n    helmet.contentSecurityPolicy.getDefaultDirectives(),\n\n    // 'https:' options (automatic re-write of insecure URLs to secure ones)\n    // is removed to facilitate local development with HTTP server. In cloud\n    // deployments we assume Apache or Nginx server in front of out app takes\n    // care about such re-writes.\n    (array) => (array as string[]).filter((item: string) => item !== 'https:'),\n  ),\n};\ndefaultCspSettings.directives['frame-src'] = [\n  \"'self'\",\n\n  // YouTube domain is whitelisted to allow <YouTubeVideo> component to work\n  // out of box.\n  'https://*.youtube.com',\n];\n\n{\n  const directives = defaultCspSettings.directives['script-src'];\n  if (directives) directives.push(\"'unsafe-eval'\");\n  else defaultCspSettings.directives['script-src'] = [\"'unsafe-eval'\"];\n}\n\n// No need for automatic re-writes via Content Security Policy settings:\n// the forefront Apache or Nginx server is supposed to take care of this\n// in production cloud deployments.\ndelete defaultCspSettings.directives['upgrade-insecure-requests'];\n\n/**\n * @category Utilities\n * @func server/getDefaultCspSettings\n * @global\n * @desc\n * ```js\n * import { server } from '@dr.pogodin/react-utils';\n * const { getDefaultCspSettings } from '@dr.pogodin/react-utils';\n * ```\n * @return {{\n *   directives: object\n * }} A deep copy of default CSP settings object used by `react-utils`,\n * with the exception of `nonce-xxx` clause in `script-src` directive,\n * which is added dynamically for each request.\n */\nexport function getDefaultCspSettings(): {\n  directives: Record<string, string[]>;\n} {\n  return cloneDeep(defaultCspSettings);\n}\n\nexport type ServerT = Express & {\n  logger: LoggerI;\n};\n\nexport type OptionsT = RendererOptionsT & {\n  beforeExpressJsError?:\n  (server: ServerT) => boolean | Promise<boolean>;\n\n  beforeExpressJsSetup?: (server: ServerT) => Promise<void> | void;\n  cookieSignatureSecret?: string;\n  cspSettingsHook?: (\n    defaultOptions: CspOptionsT,\n    req: Request,\n  ) => CspOptionsT;\n  devMode?: boolean;\n  httpsRedirect?: boolean;\n  onExpressJsSetup?: (server: ServerT) => Promise<void> | void;\n};\n\nexport default async function factory(\n  webpackConfig: Configuration,\n  options: OptionsT,\n): Promise<ServerT> {\n  const rendererOps: RendererOptionsT = pick(options, [\n    'Application',\n    'beforeRender',\n    'favicon',\n    'logger',\n    'maxSsrRounds',\n    'noCsp',\n    'ssrTimeout',\n    'staticCacheController',\n    'staticCacheSize',\n  ]);\n  const renderer = rendererFactory(webpackConfig, rendererOps);\n  const { publicPath } = webpackConfig.output!;\n\n  const server = express() as ServerT;\n\n  if (options.beforeExpressJsSetup) {\n    await options.beforeExpressJsSetup(server);\n  }\n\n  if (options.logger) server.logger = options.logger;\n\n  if (options.httpsRedirect) {\n    server.use((req, res, next) => {\n      const schema = req.headers['x-forwarded-proto'];\n      if (schema === 'http') {\n        let url = `https://${req.headers.host}`;\n        if (req.originalUrl !== '/') url += req.originalUrl;\n        res.redirect(url);\n        return;\n      }\n      next();\n    });\n  }\n\n  server.use(compression());\n  server.use(\n    helmet({\n      contentSecurityPolicy: false,\n      crossOriginEmbedderPolicy: false,\n      crossOriginOpenerPolicy: false,\n      crossOriginResourcePolicy: false,\n    }),\n  );\n\n  if (!options.noCsp) {\n    server.use(\n      (req: Request, res: Response, next: NextFunction) => {\n        const req2 = req as RequestT;\n\n        req2.nonce = uuid();\n\n        // TODO: This is deprecated, but it is kept for now for backward\n        // compatibility. Should be removed sometime later.\n        req2.cspNonce = req2.nonce;\n\n        // The deep clone is necessary here to ensure that default value can't be\n        // mutated during request processing.\n        let cspSettings: CspOptionsT = cloneDeep(defaultCspSettings);\n        (cspSettings.directives?.['script-src'] as string[]).push(`'nonce-${req2.nonce}'`);\n        if (options.cspSettingsHook) {\n          cspSettings = options.cspSettingsHook(cspSettings, req);\n        }\n        helmet.contentSecurityPolicy(cspSettings)(req, res, next);\n      },\n    );\n  }\n\n  if (options.favicon) {\n    server.use(favicon(options.favicon));\n  }\n\n  server.use('/robots.txt', (req, res) => {\n    res.send('User-agent: *\\nDisallow:');\n  });\n\n  server.use(express.json({ limit: '300kb' }));\n  server.use(express.urlencoded({ extended: false }));\n  server.use(cookieParser(options.cookieSignatureSecret));\n  server.use(requestIp.mw());\n\n  server.use(csrf({ cookie: true }));\n\n  loggerMiddleware.token(\n    'ip',\n    (req: Request & { clientIp: string }) => req.clientIp,\n  );\n  const FORMAT = ':ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent';\n  server.use(loggerMiddleware(FORMAT, {\n    stream: {\n      // TODO: This implies the logger is always set. Is it on a higher level?\n      // then mark it as always present.\n      write: options.logger!.info.bind(options.logger),\n    },\n  }));\n\n  // Note: no matter the \"public path\", we want the service worker, if any,\n  // to be served from the root, to have all web app pages in its scope.\n  // Thus, this setup to serve it. Probably, need some more configuration\n  // for special cases, but this will do for now.\n  server.get('/__service-worker.js', express.static(\n    webpackConfig.output?.path ?? '',\n    {\n      setHeaders: (res) => res.set('Cache-Control', 'no-cache'),\n    },\n  ));\n\n  /* Setup of Hot Module Reloading for development environment.\n   * These dependencies are not used, nor installed for production use,\n   * hence we should violate some import-related lint rules. */\n  /* eslint-disable import/no-extraneous-dependencies */\n  if (options.devMode) {\n    // This is a workaround for SASS bug:\n    // https://github.com/dart-lang/sdk/issues/27979\n    // which manifests itself sometimes when webpack dev middleware is used\n    // (in dev mode), and app modules are imported in some unfortunate ways.\n    // TODO: Double-check, what is going on here.\n    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n    if (!global.location) {\n      global.location = {\n        href: `${pathToFileURL(process.cwd()).href}${sep}`,\n      } as Location;\n    }\n\n    /* eslint-disable @typescript-eslint/no-require-imports */\n    const webpack = require('webpack') as (ops: Configuration) => Compiler;\n\n    // TODO: Figure out the exact type for options, don't wanna waste time on it\n    // right now.\n    const webpackDevMiddleware = require('webpack-dev-middleware') as\n      (c: Compiler, ops: unknown) => RequestHandler;\n\n    const webpackHotMiddleware = require('webpack-hot-middleware') as\n      (c: Compiler) => RequestHandler;\n\n    const compiler = webpack(webpackConfig);\n    server.use(webpackDevMiddleware(compiler, {\n      publicPath,\n      serverSideRender: true,\n    }));\n    server.use(webpackHotMiddleware(compiler));\n  }\n  /* eslint-enable import/no-extraneous-dependencies */\n\n  server.use(publicPath as string, express.static(webpackConfig.output!.path!));\n\n  if (options.onExpressJsSetup) {\n    await options.onExpressJsSetup(server);\n  }\n  server.use(renderer);\n\n  /* Detects 404 errors, and forwards them to the error handler. */\n  server.use((req, res, next) => {\n    next(newError(ERRORS.NOT_FOUND, CODES.NOT_FOUND));\n  });\n\n  let dontAttachDefaultErrorHandler;\n  if (options.beforeExpressJsError) {\n    dontAttachDefaultErrorHandler = await options.beforeExpressJsError(server);\n  }\n\n  /* Error handler. */\n  if (!dontAttachDefaultErrorHandler) {\n    // TODO: Do we need this error handler at all? It actually seems to do\n    // what the default ExpressJS error handler does anyway, see:\n    // https://expressjs.com/en/guide/error-handling.html\n    //\n    // TODO: It is better to move the default error handler definition\n    // to a stand-alone function at top-level, but the use of options.logger\n    // prevents to do it without some extra refactoring. Should be done sometime\n    // though.\n    server.use((\n      error: Error & {\n        status?: number;\n      },\n      req: Request,\n      res: Response,\n      next: NextFunction,\n    ) => {\n      // TODO: This is needed to correctly handled any errors thrown after\n      // sending initial response to the client.\n      if (res.headersSent) {\n        next(error);\n        return;\n      }\n\n      const status = error.status ?? CODES.INTERNAL_SERVER_ERROR;\n      const serverSide = status >= (CODES.INTERNAL_SERVER_ERROR as number);\n\n      // Log server-side errors always, client-side at debug level only.\n      options.logger!.log(serverSide ? 'error' : 'debug', error.toString());\n\n      let message = error.message || getErrorForCode(status);\n      if (serverSide && process.env.NODE_ENV === 'production') {\n        message = ERRORS.INTERNAL_SERVER_ERROR;\n      }\n\n      res.status(status).send(message);\n    });\n  }\n\n  return server;\n}\n"],"mappings":"qOAIA,IAAAA,SAAA,CAAAC,OAAA,cACA,IAAAC,QAAA,CAAAD,OAAA,aAEA,IAAAE,OAAA,CAAAF,OAAA,WAMA,IAAAG,YAAA,CAAAC,sBAAA,CAAAJ,OAAA,iBACA,IAAAK,aAAA,CAAAD,sBAAA,CAAAJ,OAAA,mBACA,IAAAM,MAAA,CAAAF,sBAAA,CAAAJ,OAAA,uBAEA,IAAAO,QAAA,CAAAH,sBAAA,CAAAJ,OAAA,aAQA,IAAAQ,aAAA,CAAAJ,sBAAA,CAAAJ,OAAA,mBACA,IAAAS,OAAA,CAAAL,sBAAA,CAAAJ,OAAA,YACA,IAAAU,OAAA,CAAAN,sBAAA,CAAAJ,OAAA,YACA,IAAAW,UAAA,CAAAP,sBAAA,CAAAJ,OAAA,gBACA,IAAAY,KAAA,CAAAZ,OAAA,SAIA,IAAAa,SAAA,CAAAT,sBAAA,CAAAJ,OAAA,gBAKA,IAAAc,OAAA,CAAAd,OAAA,mBAtCA;AACA;AACA,GA6CA;AAMA;AACA;AACA;AACA,GACA,KAAM,CAAAe,kBAAkB,CAAG,CACzBC,UAAU,CAAE,GAAAC,iBAAS,EACnBC,eAAM,CAACC,qBAAqB,CAACC,oBAAoB,CAAC,CAAC,CAEnD;AACA;AACA;AACA;AACCC,KAAK,EAAMA,KAAK,CAAcC,MAAM,CAAEC,IAAY,EAAKA,IAAI,GAAK,QAAQ,CAC3E,CACF,CAAC,CACDR,kBAAkB,CAACC,UAAU,CAAC,WAAW,CAAC,CAAG,CAC3C,QAAQ,CAER;AACA;AACA,uBAAuB,CACxB,CAED,CACE,KAAM,CAAAA,UAAU,CAAGD,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAC9D,GAAIA,UAAU,CAAEA,UAAU,CAACQ,IAAI,CAAC,eAAe,CAAC,CAAC,IAC5C,CAAAT,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAAG,CAAC,eAAe,CACrE,CAEA;AACA;AACA;AACA,MAAO,CAAAD,kBAAkB,CAACC,UAAU,CAAC,2BAA2B,CAAC,CAEjE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACO,QAAS,CAAAS,qBAAqBA,CAAA,CAEnC,CACA,MAAO,GAAAC,iBAAS,EAACX,kBAAkB,CACrC,CAqBe,cAAe,CAAAY,OAAOA,CACnCC,aAA4B,CAC5BC,OAAiB,CACC,CAClB,KAAM,CAAAC,WAA6B,CAAG,GAAAC,YAAI,EAACF,OAAO,CAAE,CAClD,aAAa,CACb,cAAc,CACd,SAAS,CACT,QAAQ,CACR,cAAc,CACd,OAAO,CACP,YAAY,CACZ,uBAAuB,CACvB,iBAAiB,CAClB,CAAC,CACF,KAAM,CAAAG,QAAQ,CAAG,GAAAC,iBAAe,EAACL,aAAa,CAAEE,WAAW,CAAC,CAC5D,KAAM,CAAEI,UAAW,CAAC,CAAGN,aAAa,CAACO,MAAO,CAE5C,KAAM,CAAAC,MAAM,CAAG,GAAAC,gBAAO,EAAC,CAAY,CAEnC,GAAIR,OAAO,CAACS,oBAAoB,CAAE,CAChC,KAAM,CAAAT,OAAO,CAACS,oBAAoB,CAACF,MAAM,CAC3C,CAEA,GAAIP,OAAO,CAACU,MAAM,CAAEH,MAAM,CAACG,MAAM,CAAGV,OAAO,CAACU,MAAM,CAElD,GAAIV,OAAO,CAACW,aAAa,CAAE,CACzBJ,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,CAAEC,GAAG,CAAEC,IAAI,GAAK,CAC7B,KAAM,CAAAC,MAAM,CAAGH,GAAG,CAACI,OAAO,CAAC,mBAAmB,CAAC,CAC/C,GAAID,MAAM,GAAK,MAAM,CAAE,CACrB,GAAI,CAAAE,GAAG,CAAG,WAAWL,GAAG,CAACI,OAAO,CAACE,IAAI,EAAE,CACvC,GAAIN,GAAG,CAACO,WAAW,GAAK,GAAG,CAAEF,GAAG,EAAIL,GAAG,CAACO,WAAW,CACnDN,GAAG,CAACO,QAAQ,CAACH,GAAG,CAAC,CACjB,MACF,CACAH,IAAI,CAAC,CACP,CAAC,CACH,CAEAR,MAAM,CAACK,GAAG,CAAC,GAAAU,oBAAW,EAAC,CAAC,CAAC,CACzBf,MAAM,CAACK,GAAG,CACR,GAAAvB,eAAM,EAAC,CACLC,qBAAqB,CAAE,KAAK,CAC5BiC,yBAAyB,CAAE,KAAK,CAChCC,uBAAuB,CAAE,KAAK,CAC9BC,yBAAyB,CAAE,KAC7B,CAAC,CACH,CAAC,CAED,GAAI,CAACzB,OAAO,CAAC0B,KAAK,CAAE,CAClBnB,MAAM,CAACK,GAAG,CACR,CAACC,GAAY,CAAEC,GAAa,CAAEC,IAAkB,GAAK,CACnD,KAAM,CAAAY,IAAI,CAAGd,GAAe,CAE5Bc,IAAI,CAACC,KAAK,CAAG,GAAAC,QAAI,EAAC,CAAC,CAEnB;AACA;AACAF,IAAI,CAACG,QAAQ,CAAGH,IAAI,CAACC,KAAK,CAE1B;AACA;AACA,GAAI,CAAAG,WAAwB,CAAG,GAAAlC,iBAAS,EAACX,kBAAkB,CAAC,CAC5D,CAAC6C,WAAW,CAAC5C,UAAU,GAAG,YAAY,CAAC,EAAcQ,IAAI,CAAC,UAAUgC,IAAI,CAACC,KAAK,GAAG,CAAC,CAClF,GAAI5B,OAAO,CAACgC,eAAe,CAAE,CAC3BD,WAAW,CAAG/B,OAAO,CAACgC,eAAe,CAACD,WAAW,CAAElB,GAAG,CACxD,CACAxB,eAAM,CAACC,qBAAqB,CAACyC,WAAW,CAAC,CAAClB,GAAG,CAAEC,GAAG,CAAEC,IAAI,CAC1D,CACF,CACF,CAEA,GAAIf,OAAO,CAACiC,OAAO,CAAE,CACnB1B,MAAM,CAACK,GAAG,CAAC,GAAAqB,qBAAO,EAACjC,OAAO,CAACiC,OAAO,CAAC,CACrC,CAEA1B,MAAM,CAACK,GAAG,CAAC,aAAa,CAAE,CAACC,GAAG,CAAEC,GAAG,GAAK,CACtCA,GAAG,CAACoB,IAAI,CAAC,0BAA0B,CACrC,CAAC,CAAC,CAEF3B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC2B,IAAI,CAAC,CAAEC,KAAK,CAAE,OAAQ,CAAC,CAAC,CAAC,CAC5C7B,MAAM,CAACK,GAAG,CAACJ,gBAAO,CAAC6B,UAAU,CAAC,CAAEC,QAAQ,CAAE,KAAM,CAAC,CAAC,CAAC,CACnD/B,MAAM,CAACK,GAAG,CAAC,GAAA2B,qBAAY,EAACvC,OAAO,CAACwC,qBAAqB,CAAC,CAAC,CACvDjC,MAAM,CAACK,GAAG,CAAC6B,kBAAS,CAACC,EAAE,CAAC,CAAC,CAAC,CAE1BnC,MAAM,CAACK,GAAG,CAAC,GAAA+B,cAAI,EAAC,CAAEC,MAAM,CAAE,IAAK,CAAC,CAAC,CAAC,CAElCC,eAAgB,CAACC,KAAK,CACpB,IAAI,CACHjC,GAAmC,EAAKA,GAAG,CAACkC,QAC/C,CAAC,CACD,KAAM,CAAAC,MAAM,CAAG,yFAAyF,CACxGzC,MAAM,CAACK,GAAG,CAAC,GAAAiC,eAAgB,EAACG,MAAM,CAAE,CAClCC,MAAM,CAAE,CACN;AACA;AACAC,KAAK,CAAElD,OAAO,CAACU,MAAM,CAAEyC,IAAI,CAACC,IAAI,CAACpD,OAAO,CAACU,MAAM,CACjD,CACF,CAAC,CAAC,CAAC,CAEH;AACA;AACA;AACA;AACAH,MAAM,CAAC8C,GAAG,CAAC,sBAAsB,CAAE7C,gBAAO,CAAC8C,MAAM,CAC/CvD,aAAa,CAACO,MAAM,EAAEiD,IAAI,EAAI,EAAE,CAChC,CACEC,UAAU,CAAG1C,GAAG,EAAKA,GAAG,CAAC2C,GAAG,CAAC,eAAe,CAAE,UAAU,CAC1D,CACF,CAAC,CAAC,CAEF;AACF;AACA,+DACE,sDACA,GAAIzD,OAAO,CAAC0D,OAAO,CAAE,CACnB;AACA;AACA;AACA;AACA;AACA;AACA,GAAI,CAACC,MAAM,CAACC,QAAQ,CAAE,CACpBD,MAAM,CAACC,QAAQ,CAAG,CAChBC,IAAI,CAAE,GAAG,GAAAC,sBAAa,EAACC,OAAO,CAACC,GAAG,CAAC,CAAC,CAAC,CAACH,IAAI,GAAGI,aAAG,EAClD,CACF,CAEA,0DACA,KAAM,CAAAC,OAAO,CAAG/F,OAAO,CAAC,SAAS,CAAqC,CAEtE;AACA;AACA,KAAM,CAAAgG,oBAAoB,CAAGhG,OAAO,CAAC,wBAAwB,CACd,CAE/C,KAAM,CAAAiG,oBAAoB,CAAGjG,OAAO,CAAC,wBAAwB,CAC5B,CAEjC,KAAM,CAAAkG,QAAQ,CAAGH,OAAO,CAACnE,aAAa,CAAC,CACvCQ,MAAM,CAACK,GAAG,CAACuD,oBAAoB,CAACE,QAAQ,CAAE,CACxChE,UAAU,CACViE,gBAAgB,CAAE,IACpB,CAAC,CAAC,CAAC,CACH/D,MAAM,CAACK,GAAG,CAACwD,oBAAoB,CAACC,QAAQ,CAAC,CAC3C,CACA,qDAEA9D,MAAM,CAACK,GAAG,CAACP,UAAU,CAAYG,gBAAO,CAAC8C,MAAM,CAACvD,aAAa,CAACO,MAAM,CAAEiD,IAAK,CAAC,CAAC,CAE7E,GAAIvD,OAAO,CAACuE,gBAAgB,CAAE,CAC5B,KAAM,CAAAvE,OAAO,CAACuE,gBAAgB,CAAChE,MAAM,CACvC,CACAA,MAAM,CAACK,GAAG,CAACT,QAAQ,CAAC,CAEpB,iEACAI,MAAM,CAACK,GAAG,CAAC,CAACC,GAAG,CAAEC,GAAG,CAAEC,IAAI,GAAK,CAC7BA,IAAI,CAAC,GAAAyD,gBAAQ,EAACC,cAAM,CAACC,SAAS,CAAEC,aAAK,CAACD,SAAS,CAAC,CAClD,CAAC,CAAC,CAEF,GAAI,CAAAE,6BAA6B,CACjC,GAAI5E,OAAO,CAAC6E,oBAAoB,CAAE,CAChCD,6BAA6B,CAAG,KAAM,CAAA5E,OAAO,CAAC6E,oBAAoB,CAACtE,MAAM,CAC3E,CAEA,oBACA,GAAI,CAACqE,6BAA6B,CAAE,CAClC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACArE,MAAM,CAACK,GAAG,CAAC,CACTkE,KAEC,CACDjE,GAAY,CACZC,GAAa,CACbC,IAAkB,GACf,CACH;AACA;AACA,GAAID,GAAG,CAACiE,WAAW,CAAE,CACnBhE,IAAI,CAAC+D,KAAK,CAAC,CACX,MACF,CAEA,KAAM,CAAAE,MAAM,CAAGF,KAAK,CAACE,MAAM,EAAIL,aAAK,CAACM,qBAAqB,CAC1D,KAAM,CAAAC,UAAU,CAAGF,MAAM,EAAKL,aAAK,CAACM,qBAAgC,CAEpE;AACAjF,OAAO,CAACU,MAAM,CAAEyE,GAAG,CAACD,UAAU,CAAG,OAAO,CAAG,OAAO,CAAEJ,KAAK,CAACM,QAAQ,CAAC,CAAC,CAAC,CAErE,GAAI,CAAAC,OAAO,CAAGP,KAAK,CAACO,OAAO,EAAI,GAAAC,uBAAe,EAACN,MAAM,CAAC,CACtD,GAAIE,UAAU,EAAInB,OAAO,CAACwB,GAAG,CAACC,QAAQ,GAAK,YAAY,CAAE,CACvDH,OAAO,CAAGZ,cAAM,CAACQ,qBACnB,CAEAnE,GAAG,CAACkE,MAAM,CAACA,MAAM,CAAC,CAAC9C,IAAI,CAACmD,OAAO,CACjC,CAAC,CACH,CAEA,MAAO,CAAA9E,MACT","ignoreList":[]}
+{"version":3,"file":"server.js","names":["sep","pathToFileURL","cloneDeep","mapValues","pick","compression","cookieParser","csrf","express","favicon","helmet","loggerMiddleware","requestIp","v4","uuid","rendererFactory","CODES","ERRORS","getErrorForCode","newError","defaultCspSettings","directives","contentSecurityPolicy","getDefaultDirectives","array","filter","item","push","getDefaultCspSettings","factory","webpackConfig","options","rendererOps","renderer","publicPath","output","server","beforeExpressJsSetup","logger","httpsRedirect","use","req","res","next","schema","headers","url","host","originalUrl","redirect","crossOriginEmbedderPolicy","crossOriginOpenerPolicy","crossOriginResourcePolicy","noCsp","req2","nonce","cspNonce","cspSettings","cspSettingsHook","send","json","limit","urlencoded","extended","cookieSignatureSecret","mw","cookie","token","clientIp","FORMAT","stream","write","info","bind","get","static","path","setHeaders","set","devMode","global","location","href","process","cwd","default","webpack","webpackDevMiddleware","webpackHotMiddleware","compiler","Error","serverSideRender","onExpressJsSetup","NOT_FOUND","dontAttachDefaultErrorHandler","beforeExpressJsError","error","headersSent","status","INTERNAL_SERVER_ERROR","serverSide","log","toString","message","env","NODE_ENV"],"sources":["../../../src/server/server.ts"],"sourcesContent":["/**\n * Creation of standard ExpressJS server for ReactJS apps.\n */\n\nimport { sep } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport { cloneDeep, mapValues, pick } from 'lodash-es';\n\nimport compression from 'compression';\nimport cookieParser from 'cookie-parser';\nimport csrf from '@dr.pogodin/csurf';\n\nimport express, {\n  type Express,\n  type NextFunction,\n  type Request,\n  type Response,\n} from 'express';\n\nimport favicon from 'serve-favicon';\nimport helmet, { type HelmetOptions } from 'helmet';\nimport loggerMiddleware from 'morgan';\nimport requestIp from 'request-ip';\nimport { v4 as uuid } from 'uuid';\n\nimport type { Configuration } from 'webpack';\n\nimport rendererFactory, {\n  type LoggerI,\n  type OptionsT as RendererOptionsT,\n} from './renderer';\n\nimport {\n  CODES,\n  ERRORS,\n  getErrorForCode,\n  newError,\n} from './utils/errors';\n\nexport type CspOptionsT = Exclude<HelmetOptions['contentSecurityPolicy'], boolean | undefined>;\n\n// eslint-disable-next-line @typescript-eslint/consistent-type-definitions\ninterface RequestT extends Request {\n  cspNonce: string;\n  nonce: string;\n}\n\n/**\n * Default Content Security Policy settings.\n * @ignore\n */\nconst defaultCspSettings = {\n  directives: mapValues(\n    helmet.contentSecurityPolicy.getDefaultDirectives(),\n\n    // 'https:' options (automatic re-write of insecure URLs to secure ones)\n    // is removed to facilitate local development with HTTP server. In cloud\n    // deployments we assume Apache or Nginx server in front of out app takes\n    // care about such re-writes.\n    (array) => (array as string[]).filter((item: string) => item !== 'https:'),\n  ),\n};\ndefaultCspSettings.directives['frame-src'] = [\n  \"'self'\",\n\n  // YouTube domain is whitelisted to allow <YouTubeVideo> component to work\n  // out of box.\n  'https://*.youtube.com',\n];\n\n{\n  const directives = defaultCspSettings.directives['script-src'];\n  if (directives) directives.push(\"'unsafe-eval'\");\n  else defaultCspSettings.directives['script-src'] = [\"'unsafe-eval'\"];\n}\n\n// No need for automatic re-writes via Content Security Policy settings:\n// the forefront Apache or Nginx server is supposed to take care of this\n// in production cloud deployments.\ndelete defaultCspSettings.directives['upgrade-insecure-requests'];\n\n/**\n * @category Utilities\n * @func server/getDefaultCspSettings\n * @global\n * @desc\n * ```js\n * import { server } from '@dr.pogodin/react-utils';\n * const { getDefaultCspSettings } from '@dr.pogodin/react-utils';\n * ```\n * @return {{\n *   directives: object\n * }} A deep copy of default CSP settings object used by `react-utils`,\n * with the exception of `nonce-xxx` clause in `script-src` directive,\n * which is added dynamically for each request.\n */\nexport function getDefaultCspSettings(): {\n  directives: Record<string, string[]>;\n} {\n  return cloneDeep(defaultCspSettings);\n}\n\nexport type ServerT = Express & {\n  logger: LoggerI;\n};\n\nexport type OptionsT = RendererOptionsT & {\n  beforeExpressJsError?:\n  (server: ServerT) => boolean | Promise<boolean>;\n\n  beforeExpressJsSetup?: (server: ServerT) => Promise<void> | void;\n  cookieSignatureSecret?: string;\n  cspSettingsHook?: (\n    defaultOptions: CspOptionsT,\n    req: Request,\n  ) => CspOptionsT;\n  devMode?: boolean;\n  httpsRedirect?: boolean;\n  onExpressJsSetup?: (server: ServerT) => Promise<void> | void;\n};\n\nexport default async function factory(\n  webpackConfig: Configuration,\n  options: OptionsT,\n): Promise<ServerT> {\n  const rendererOps: RendererOptionsT = pick(options, [\n    'Application',\n    'beforeRender',\n    'favicon',\n    'logger',\n    'maxSsrRounds',\n    'noCsp',\n    'ssrTimeout',\n    'staticCacheController',\n    'staticCacheSize',\n  ]);\n  const renderer = rendererFactory(webpackConfig, rendererOps);\n  const { publicPath } = webpackConfig.output!;\n\n  const server = express() as ServerT;\n\n  if (options.beforeExpressJsSetup) {\n    await options.beforeExpressJsSetup(server);\n  }\n\n  if (options.logger) server.logger = options.logger;\n\n  if (options.httpsRedirect) {\n    server.use((req, res, next) => {\n      const schema = req.headers['x-forwarded-proto'];\n      if (schema === 'http') {\n        let url = `https://${req.headers.host}`;\n        if (req.originalUrl !== '/') url += req.originalUrl;\n        res.redirect(url);\n        return;\n      }\n      next();\n    });\n  }\n\n  server.use(compression());\n  server.use(\n    helmet({\n      contentSecurityPolicy: false,\n      crossOriginEmbedderPolicy: false,\n      crossOriginOpenerPolicy: false,\n      crossOriginResourcePolicy: false,\n    }),\n  );\n\n  if (!options.noCsp) {\n    server.use(\n      (req: Request, res: Response, next: NextFunction) => {\n        const req2 = req as RequestT;\n\n        req2.nonce = uuid();\n\n        // TODO: This is deprecated, but it is kept for now for backward\n        // compatibility. Should be removed sometime later.\n        req2.cspNonce = req2.nonce;\n\n        // The deep clone is necessary here to ensure that default value can't be\n        // mutated during request processing.\n        let cspSettings: CspOptionsT = cloneDeep(defaultCspSettings);\n        (cspSettings.directives?.['script-src'] as string[]).push(`'nonce-${req2.nonce}'`);\n        if (options.cspSettingsHook) {\n          cspSettings = options.cspSettingsHook(cspSettings, req);\n        }\n        helmet.contentSecurityPolicy(cspSettings)(req, res, next);\n      },\n    );\n  }\n\n  if (options.favicon) {\n    server.use(favicon(options.favicon));\n  }\n\n  server.use('/robots.txt', (req, res) => {\n    res.send('User-agent: *\\nDisallow:');\n  });\n\n  server.use(express.json({ limit: '300kb' }));\n  server.use(express.urlencoded({ extended: false }));\n  server.use(cookieParser(options.cookieSignatureSecret));\n  server.use(requestIp.mw());\n\n  server.use(csrf({ cookie: true }));\n\n  loggerMiddleware.token(\n    'ip',\n    (req: Request & { clientIp: string }) => req.clientIp,\n  );\n  const FORMAT = ':ip > :status :method :url :response-time ms :res[content-length] :referrer :user-agent';\n  server.use(loggerMiddleware(FORMAT, {\n    stream: {\n      // TODO: This implies the logger is always set. Is it on a higher level?\n      // then mark it as always present.\n      write: options.logger!.info.bind(options.logger),\n    },\n  }));\n\n  // Note: no matter the \"public path\", we want the service worker, if any,\n  // to be served from the root, to have all web app pages in its scope.\n  // Thus, this setup to serve it. Probably, need some more configuration\n  // for special cases, but this will do for now.\n  server.get('/__service-worker.js', express.static(\n    webpackConfig.output?.path ?? '',\n    {\n      setHeaders: (res) => res.set('Cache-Control', 'no-cache'),\n    },\n  ));\n\n  /* Setup of Hot Module Reloading for development environment.\n   * These dependencies are not used, nor installed for production use,\n   * hence we should violate some import-related lint rules. */\n  /* eslint-disable import/no-extraneous-dependencies */\n  if (options.devMode) {\n    // This is a workaround for SASS bug:\n    // https://github.com/dart-lang/sdk/issues/27979\n    // which manifests itself sometimes when webpack dev middleware is used\n    // (in dev mode), and app modules are imported in some unfortunate ways.\n    // TODO: Double-check, what is going on here.\n    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition\n    if (!global.location) {\n      global.location = {\n        href: `${pathToFileURL(process.cwd()).href}${sep}`,\n      } as Location;\n    }\n\n    const { default: webpack } = await import(/* webpackChunkName: \"server-side-code\" */ 'webpack');\n\n    const { default: webpackDevMiddleware } = await import(\n      /* webpackChunkName: \"server-side-code\" */ 'webpack-dev-middleware'\n    );\n\n    const { default: webpackHotMiddleware } = await import(\n      /* webpackChunkName: \"server-side-code\" */ 'webpack-hot-middleware'\n    );\n\n    const compiler = webpack(webpackConfig);\n    if (!compiler) throw Error('Internal error');\n\n    server.use(webpackDevMiddleware(compiler, {\n      publicPath,\n      serverSideRender: true,\n    }));\n    server.use(webpackHotMiddleware(compiler));\n  }\n  /* eslint-enable import/no-extraneous-dependencies */\n\n  server.use(publicPath as string, express.static(webpackConfig.output!.path!));\n\n  if (options.onExpressJsSetup) {\n    await options.onExpressJsSetup(server);\n  }\n  server.use(renderer);\n\n  /* Detects 404 errors, and forwards them to the error handler. */\n  server.use((req, res, next) => {\n    next(newError(ERRORS.NOT_FOUND, CODES.NOT_FOUND));\n  });\n\n  let dontAttachDefaultErrorHandler;\n  if (options.beforeExpressJsError) {\n    dontAttachDefaultErrorHandler = await options.beforeExpressJsError(server);\n  }\n\n  /* Error handler. */\n  if (!dontAttachDefaultErrorHandler) {\n    // TODO: Do we need this error handler at all? It actually seems to do\n    // what the default ExpressJS error handler does anyway, see:\n    // https://expressjs.com/en/guide/error-handling.html\n    //\n    // TODO: It is better to move the default error handler definition\n    // to a stand-alone function at top-level, but the use of options.logger\n    // prevents to do it without some extra refactoring. Should be done sometime\n    // though.\n    server.use((\n      error: Error & {\n        status?: number;\n      },\n      req: Request,\n      res: Response,\n      next: NextFunction,\n    ) => {\n      // TODO: This is needed to correctly handled any errors thrown after\n      // sending initial response to the client.\n      if (res.headersSent) {\n        next(error);\n        return;\n      }\n\n      const status = error.status ?? CODES.INTERNAL_SERVER_ERROR;\n      const serverSide = status >= (CODES.INTERNAL_SERVER_ERROR as number);\n\n      // Log server-side errors always, client-side at debug level only.\n      options.logger!.log(serverSide ? 'error' : 'debug', error.toString());\n\n      let message = error.message || getErrorForCode(status);\n      if (serverSide && process.env.NODE_ENV === 'production') {\n        message = ERRORS.INTERNAL_SERVER_ERROR;\n      }\n\n      res.status(status).send(message);\n    });\n  }\n\n  return server;\n}\n"],"mappings":"oRAAA;AACA;AACA,GAEA,OAASA,GAAG,KAAQ,WAAW,CAC/B,OAASC,aAAa,KAAQ,UAAU,CAExC,OAASC,SAAS,CAAEC,SAAS,CAAEC,IAAI,KAAQ,WAAW,CAEtD,MAAO,CAAAC,WAAW,KAAM,aAAa,CACrC,MAAO,CAAAC,YAAY,KAAM,eAAe,CACxC,MAAO,CAAAC,IAAI,KAAM,mBAAmB,CAEpC,MAAO,CAAAC,OAAO,KAKP,SAAS,CAEhB,MAAO,CAAAC,OAAO,KAAM,eAAe,CACnC,MAAO,CAAAC,MAAM,KAA8B,QAAQ,CACnD,MAAO,CAAAC,gBAAgB,KAAM,QAAQ,CACrC,MAAO,CAAAC,SAAS,KAAM,YAAY,CAClC,OAASC,EAAE,GAAI,CAAAC,IAAI,KAAQ,MAAM,OAI1B,CAAAC,eAAe,4BAMpBC,KAAK,CACLC,MAAM,CACNC,eAAe,CACfC,QAAQ,yBAKV;AAMA;AACA;AACA;AACA,GACA,KAAM,CAAAC,kBAAkB,CAAG,CACzBC,UAAU,CAAElB,SAAS,CACnBO,MAAM,CAACY,qBAAqB,CAACC,oBAAoB,CAAC,CAAC,CAEnD;AACA;AACA;AACA;AACCC,KAAK,EAAMA,KAAK,CAAcC,MAAM,CAAEC,IAAY,EAAKA,IAAI,GAAK,QAAQ,CAC3E,CACF,CAAC,CACDN,kBAAkB,CAACC,UAAU,CAAC,WAAW,CAAC,CAAG,CAC3C,QAAQ,CAER;AACA;AACA,uBAAuB,CACxB,CAED,CACE,KAAM,CAAAA,UAAU,CAAGD,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAC9D,GAAIA,UAAU,CAAEA,UAAU,CAACM,IAAI,CAAC,eAAe,CAAC,CAAC,IAC5C,CAAAP,kBAAkB,CAACC,UAAU,CAAC,YAAY,CAAC,CAAG,CAAC,eAAe,CACrE,CAEA;AACA;AACA;AACA,MAAO,CAAAD,kBAAkB,CAACC,UAAU,CAAC,2BAA2B,CAAC,CAEjE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,GACA,MAAO,SAAS,CAAAO,qBAAqBA,CAAA,CAEnC,CACA,MAAO,CAAA1B,SAAS,CAACkB,kBAAkB,CACrC,CAqBA,cAAe,eAAe,CAAAS,OAAOA,CACnCC,aAA4B,CAC5BC,OAAiB,CACC,CAClB,KAAM,CAAAC,WAA6B,CAAG5B,IAAI,CAAC2B,OAAO,CAAE,CAClD,aAAa,CACb,cAAc,CACd,SAAS,CACT,QAAQ,CACR,cAAc,CACd,OAAO,CACP,YAAY,CACZ,uBAAuB,CACvB,iBAAiB,CAClB,CAAC,CACF,KAAM,CAAAE,QAAQ,CAAGlB,eAAe,CAACe,aAAa,CAAEE,WAAW,CAAC,CAC5D,KAAM,CAAEE,UAAW,CAAC,CAAGJ,aAAa,CAACK,MAAO,CAE5C,KAAM,CAAAC,MAAM,CAAG5B,OAAO,CAAC,CAAY,CAEnC,GAAIuB,OAAO,CAACM,oBAAoB,CAAE,CAChC,KAAM,CAAAN,OAAO,CAACM,oBAAoB,CAACD,MAAM,CAC3C,CAEA,GAAIL,OAAO,CAACO,MAAM,CAAEF,MAAM,CAACE,MAAM,CAAGP,OAAO,CAACO,MAAM,CAElD,GAAIP,OAAO,CAACQ,aAAa,CAAE,CACzBH,MAAM,CAACI,GAAG,CAAC,CAACC,GAAG,CAAEC,GAAG,CAAEC,IAAI,GAAK,CAC7B,KAAM,CAAAC,MAAM,CAAGH,GAAG,CAACI,OAAO,CAAC,mBAAmB,CAAC,CAC/C,GAAID,MAAM,GAAK,MAAM,CAAE,CACrB,GAAI,CAAAE,GAAG,CAAG,WAAWL,GAAG,CAACI,OAAO,CAACE,IAAI,EAAE,CACvC,GAAIN,GAAG,CAACO,WAAW,GAAK,GAAG,CAAEF,GAAG,EAAIL,GAAG,CAACO,WAAW,CACnDN,GAAG,CAACO,QAAQ,CAACH,GAAG,CAAC,CACjB,MACF,CACAH,IAAI,CAAC,CACP,CAAC,CACH,CAEAP,MAAM,CAACI,GAAG,CAACnC,WAAW,CAAC,CAAC,CAAC,CACzB+B,MAAM,CAACI,GAAG,CACR9B,MAAM,CAAC,CACLY,qBAAqB,CAAE,KAAK,CAC5B4B,yBAAyB,CAAE,KAAK,CAChCC,uBAAuB,CAAE,KAAK,CAC9BC,yBAAyB,CAAE,KAC7B,CAAC,CACH,CAAC,CAED,GAAI,CAACrB,OAAO,CAACsB,KAAK,CAAE,CAClBjB,MAAM,CAACI,GAAG,CACR,CAACC,GAAY,CAAEC,GAAa,CAAEC,IAAkB,GAAK,CACnD,KAAM,CAAAW,IAAI,CAAGb,GAAe,CAE5Ba,IAAI,CAACC,KAAK,CAAGzC,IAAI,CAAC,CAAC,CAEnB;AACA;AACAwC,IAAI,CAACE,QAAQ,CAAGF,IAAI,CAACC,KAAK,CAE1B;AACA;AACA,GAAI,CAAAE,WAAwB,CAAGvD,SAAS,CAACkB,kBAAkB,CAAC,CAC5D,CAACqC,WAAW,CAACpC,UAAU,GAAG,YAAY,CAAC,EAAcM,IAAI,CAAC,UAAU2B,IAAI,CAACC,KAAK,GAAG,CAAC,CAClF,GAAIxB,OAAO,CAAC2B,eAAe,CAAE,CAC3BD,WAAW,CAAG1B,OAAO,CAAC2B,eAAe,CAACD,WAAW,CAAEhB,GAAG,CACxD,CACA/B,MAAM,CAACY,qBAAqB,CAACmC,WAAW,CAAC,CAAChB,GAAG,CAAEC,GAAG,CAAEC,IAAI,CAC1D,CACF,CACF,CAEA,GAAIZ,OAAO,CAACtB,OAAO,CAAE,CACnB2B,MAAM,CAACI,GAAG,CAAC/B,OAAO,CAACsB,OAAO,CAACtB,OAAO,CAAC,CACrC,CAEA2B,MAAM,CAACI,GAAG,CAAC,aAAa,CAAE,CAACC,GAAG,CAAEC,GAAG,GAAK,CACtCA,GAAG,CAACiB,IAAI,CAAC,0BAA0B,CACrC,CAAC,CAAC,CAEFvB,MAAM,CAACI,GAAG,CAAChC,OAAO,CAACoD,IAAI,CAAC,CAAEC,KAAK,CAAE,OAAQ,CAAC,CAAC,CAAC,CAC5CzB,MAAM,CAACI,GAAG,CAAChC,OAAO,CAACsD,UAAU,CAAC,CAAEC,QAAQ,CAAE,KAAM,CAAC,CAAC,CAAC,CACnD3B,MAAM,CAACI,GAAG,CAAClC,YAAY,CAACyB,OAAO,CAACiC,qBAAqB,CAAC,CAAC,CACvD5B,MAAM,CAACI,GAAG,CAAC5B,SAAS,CAACqD,EAAE,CAAC,CAAC,CAAC,CAE1B7B,MAAM,CAACI,GAAG,CAACjC,IAAI,CAAC,CAAE2D,MAAM,CAAE,IAAK,CAAC,CAAC,CAAC,CAElCvD,gBAAgB,CAACwD,KAAK,CACpB,IAAI,CACH1B,GAAmC,EAAKA,GAAG,CAAC2B,QAC/C,CAAC,CACD,KAAM,CAAAC,MAAM,CAAG,yFAAyF,CACxGjC,MAAM,CAACI,GAAG,CAAC7B,gBAAgB,CAAC0D,MAAM,CAAE,CAClCC,MAAM,CAAE,CACN;AACA;AACAC,KAAK,CAAExC,OAAO,CAACO,MAAM,CAAEkC,IAAI,CAACC,IAAI,CAAC1C,OAAO,CAACO,MAAM,CACjD,CACF,CAAC,CAAC,CAAC,CAEH;AACA;AACA;AACA;AACAF,MAAM,CAACsC,GAAG,CAAC,sBAAsB,CAAElE,OAAO,CAACmE,MAAM,CAC/C7C,aAAa,CAACK,MAAM,EAAEyC,IAAI,EAAI,EAAE,CAChC,CACEC,UAAU,CAAGnC,GAAG,EAAKA,GAAG,CAACoC,GAAG,CAAC,eAAe,CAAE,UAAU,CAC1D,CACF,CAAC,CAAC,CAEF;AACF;AACA,+DACE,sDACA,GAAI/C,OAAO,CAACgD,OAAO,CAAE,CACnB;AACA;AACA;AACA;AACA;AACA;AACA,GAAI,CAACC,MAAM,CAACC,QAAQ,CAAE,CACpBD,MAAM,CAACC,QAAQ,CAAG,CAChBC,IAAI,CAAE,GAAGjF,aAAa,CAACkF,OAAO,CAACC,GAAG,CAAC,CAAC,CAAC,CAACF,IAAI,GAAGlF,GAAG,EAClD,CACF,CAEA,KAAM,CAAEqF,OAAO,CAAEC,OAAQ,CAAC,CAAG,KAAM,OAAM,CAAC,0CAA2C,SAAS,CAAC,CAE/F,KAAM,CAAED,OAAO,CAAEE,oBAAqB,CAAC,CAAG,KAAM,OAAM,CACpD,0CAA2C,wBAC7C,CAAC,CAED,KAAM,CAAEF,OAAO,CAAEG,oBAAqB,CAAC,CAAG,KAAM,OAAM,CACpD,0CAA2C,wBAC7C,CAAC,CAED,KAAM,CAAAC,QAAQ,CAAGH,OAAO,CAACxD,aAAa,CAAC,CACvC,GAAI,CAAC2D,QAAQ,CAAE,KAAM,CAAAC,KAAK,CAAC,gBAAgB,CAAC,CAE5CtD,MAAM,CAACI,GAAG,CAAC+C,oBAAoB,CAACE,QAAQ,CAAE,CACxCvD,UAAU,CACVyD,gBAAgB,CAAE,IACpB,CAAC,CAAC,CAAC,CACHvD,MAAM,CAACI,GAAG,CAACgD,oBAAoB,CAACC,QAAQ,CAAC,CAC3C,CACA,qDAEArD,MAAM,CAACI,GAAG,CAACN,UAAU,CAAY1B,OAAO,CAACmE,MAAM,CAAC7C,aAAa,CAACK,MAAM,CAAEyC,IAAK,CAAC,CAAC,CAE7E,GAAI7C,OAAO,CAAC6D,gBAAgB,CAAE,CAC5B,KAAM,CAAA7D,OAAO,CAAC6D,gBAAgB,CAACxD,MAAM,CACvC,CACAA,MAAM,CAACI,GAAG,CAACP,QAAQ,CAAC,CAEpB,iEACAG,MAAM,CAACI,GAAG,CAAC,CAACC,GAAG,CAAEC,GAAG,CAAEC,IAAI,GAAK,CAC7BA,IAAI,CAACxB,QAAQ,CAACF,MAAM,CAAC4E,SAAS,CAAE7E,KAAK,CAAC6E,SAAS,CAAC,CAClD,CAAC,CAAC,CAEF,GAAI,CAAAC,6BAA6B,CACjC,GAAI/D,OAAO,CAACgE,oBAAoB,CAAE,CAChCD,6BAA6B,CAAG,KAAM,CAAA/D,OAAO,CAACgE,oBAAoB,CAAC3D,MAAM,CAC3E,CAEA,oBACA,GAAI,CAAC0D,6BAA6B,CAAE,CAClC;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA1D,MAAM,CAACI,GAAG,CAAC,CACTwD,KAEC,CACDvD,GAAY,CACZC,GAAa,CACbC,IAAkB,GACf,CACH;AACA;AACA,GAAID,GAAG,CAACuD,WAAW,CAAE,CACnBtD,IAAI,CAACqD,KAAK,CAAC,CACX,MACF,CAEA,KAAM,CAAAE,MAAM,CAAGF,KAAK,CAACE,MAAM,EAAIlF,KAAK,CAACmF,qBAAqB,CAC1D,KAAM,CAAAC,UAAU,CAAGF,MAAM,EAAKlF,KAAK,CAACmF,qBAAgC,CAEpE;AACApE,OAAO,CAACO,MAAM,CAAE+D,GAAG,CAACD,UAAU,CAAG,OAAO,CAAG,OAAO,CAAEJ,KAAK,CAACM,QAAQ,CAAC,CAAC,CAAC,CAErE,GAAI,CAAAC,OAAO,CAAGP,KAAK,CAACO,OAAO,EAAIrF,eAAe,CAACgF,MAAM,CAAC,CACtD,GAAIE,UAAU,EAAIjB,OAAO,CAACqB,GAAG,CAACC,QAAQ,GAAK,YAAY,CAAE,CACvDF,OAAO,CAAGtF,MAAM,CAACkF,qBACnB,CAEAzD,GAAG,CAACwD,MAAM,CAACA,MAAM,CAAC,CAACvC,IAAI,CAAC4C,OAAO,CACjC,CAAC,CACH,CAEA,MAAO,CAAAnE,MACT","ignoreList":[]}

package/build/production/server/utils/errors.js

@@ -1,4 +1,4 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});Object.defineProperty(exports,"CODES",{enumerable:true,get:function(){return _httpStatusCodes.StatusCodes}});Object.defineProperty(exports,"ERRORS",{enumerable:true,get:function(){return _httpStatusCodes.ReasonPhrases}});exports.assert=assert;exports.fail=fail;Object.defineProperty(exports,"getErrorForCode",{enumerable:true,get:function(){return _httpStatusCodes.getReasonPhrase}});exports.newError=newError;var _httpStatusCodes=require("http-status-codes");/**
+/**
  * @category Utilities
  * @module server/errors
  * @desc
@@ -7,7 +7,7 @@
  * const { errors } = server;
  * ```
  * Server-side helpers for error handling.
- *//**
+ */import{StatusCodes as CODES,ReasonPhrases as ERRORS,getReasonPhrase as getErrorForCode}from"http-status-codes";/**
  * @static
  * @const CODES
  * @desc An alias for
@@ -17,7 +17,7 @@
  * import { server } from '@dr.pogodin/react-utils';
  * const { CODES } = server.errors;
  * console.log(CODES.BAD_REQUEST); // Prints: 400
- *//**
+ */export{CODES};/**
  * @static
  * @const ERRORS
  * @desc An alias for
@@ -27,7 +27,7 @@
  * import { server } from '@dr.pogodin/react-utils';
  * const { ERRORS } = server.errors;
  * console.log(ERRORS.BAD_REQUEST); // Prints: Bad Request
- *//**
+ */export{ERRORS};/**
  * @static
  * @func getErrorForCode
  * @desc An alias for
@@ -38,8 +38,8 @@
  * @example
  * import { server } from '@dr.pogodin/react-utils';
  * console.log(server.errors.getErrorForCode(400)); // Prints: Bad Request
- */// TODO: It could accept the status code as a constructor argument.
-class ErrorWithStatus extends Error{status=_httpStatusCodes.StatusCodes.INTERNAL_SERVER_ERROR}/**
+ */export{getErrorForCode};// TODO: It could accept the status code as a constructor argument.
+class ErrorWithStatus extends Error{status=CODES.INTERNAL_SERVER_ERROR}/**
  * ```js
  * import { server } from '@dr.pogodin/react-utils';
  * const { newError } = server.errors;
@@ -50,9 +50,9 @@ class ErrorWithStatus extends Error{status=_httpStatusCodes.StatusCodes.INTERNAL
  * @param {number} [statusCode=500] HTTP status code. Defaults to 500 (Internal
  * Server Error).
  * @return {Error}
- */function newError(message,statusCode=_httpStatusCodes.StatusCodes.INTERNAL_SERVER_ERROR){const error=new ErrorWithStatus(message);error.status=statusCode;return error}/**
+ */export function newError(message,statusCode=CODES.INTERNAL_SERVER_ERROR){const error=new ErrorWithStatus(message);error.status=statusCode;return error}/**
  * Throws an error with given message and HTTP status code.
- */function fail(message,statusCode=_httpStatusCodes.StatusCodes.INTERNAL_SERVER_ERROR){throw newError(message,statusCode)}/**
+ */export function fail(message,statusCode=CODES.INTERNAL_SERVER_ERROR){throw newError(message,statusCode)}/**
  * Validates the `value` against the given "standard" validation `schema`.
  * Resolves to the correctly typed `value`, if it has passed the validation;
  * otherwise throws an error.
@@ -61,5 +61,5 @@ class ErrorWithStatus extends Error{status=_httpStatusCodes.StatusCodes.INTERNAL
  * @param [message] Optional error message, to prepend the validation error
  *  message.
  * @param [statusCode=400] HTTP status code. Defaults to 400 (Bad Request).
- */async function assert(value,schema,message="",statusCode=_httpStatusCodes.StatusCodes.BAD_REQUEST){let result=schema["~standard"].validate(value);if(result instanceof Promise)result=await result;if(result.issues){let error=JSON.stringify(result.issues,null,2);if(message)error=`${message}\n\n${error}`;throw fail(error,statusCode)}return result.value}
+ */export async function assert(value,schema,message="",statusCode=CODES.BAD_REQUEST){let result=schema["~standard"].validate(value);if(result instanceof Promise)result=await result;if(result.issues){let error=JSON.stringify(result.issues,null,2);if(message)error=`${message}\n\n${error}`;throw fail(error,statusCode)}return result.value}
 //# sourceMappingURL=errors.js.map