@dr.pogodin/react-utils 1.47.0-alpha.2 → 1.47.0-alpha.4

package/build/development/server/index.js

@@ -1,53 +1,28 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = launchServer;
-Object.defineProperty(exports, "errors", {
-  enumerable: true,
-  get: function () {
-    return _utils.errors;
-  }
-});
-Object.defineProperty(exports, "getDefaultCspSettings", {
-  enumerable: true,
-  get: function () {
-    return _server.getDefaultCspSettings;
-  }
-});
-require("source-map-support/register");
-var _nodeHttp = _interopRequireDefault(require("node:http"));
-var _nodeHttps = _interopRequireDefault(require("node:https"));
-var _cloneDeep = _interopRequireDefault(require("lodash/cloneDeep"));
-var _defaults = _interopRequireDefault(require("lodash/defaults"));
-var _isFinite = _interopRequireDefault(require("lodash/isFinite"));
-var _isNumber = _interopRequireDefault(require("lodash/isNumber"));
-var _isString = _interopRequireDefault(require("lodash/isString"));
-var _toNumber = _interopRequireDefault(require("lodash/toNumber"));
-require("raf/polyfill");
-var _server = _interopRequireWildcard(require("./server"));
-var _renderer = require("./renderer");
-var _utils = require("./utils");
-function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 // eslint-disable-next-line import/no-unassigned-import
+import 'source-map-support/register.js';
+import http from 'node:http';
+import https from 'node:https';
+import { cloneDeep, defaults } from 'lodash-es';
 
 // Polyfill required by ReactJS.
 // TODO: Double-check, if it is still required by React v19?
 // eslint-disable-next-line import/no-unassigned-import
+import 'raf/polyfill.js';
+import serverFactory, { getDefaultCspSettings } from "./server.js";
+import { SCRIPT_LOCATIONS, newDefaultLogger } from "./renderer.js";
+import { errors } from "./utils/index.js";
+export { errors, getDefaultCspSettings };
 
 /**
  * Normalizes a port into a number, string, or false.
  * TODO: Drop this function?
  * @param value Port name or number.
- * @return Port number (Number), name (String), or false.
+ * @return Port number (Number), name (String).
  */
 function normalizePort(value) {
-  const port = (0, _toNumber.default)(value);
-  if ((0, _isFinite.default)(port)) return port; /* port number */
-  if (!(0, _isNumber.default)(port)) return value; /* named pipe */
-  return false;
+  const port = typeof value === 'string' ? parseInt(value) : value;
+  if (Number.isFinite(port)) return port; /* port number */
+  return value; /* named pipe */
 }
 /**
  * Creates and launches web-server for ReactJS application. Allows zero
@@ -167,36 +142,36 @@ function normalizePort(value) {
  * defaults to 1 second.
  * @return Resolves to an object with created Express and HTTP servers.
  */
-async function launchServer(webpackConfig, options = {}) {
+export default async function launchServer(webpackConfig, options = {}) {
   /* Options normalization. */
-  const ops = (0, _cloneDeep.default)(options);
+  const ops = cloneDeep(options);
 
   // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing
   ops.port = normalizePort(ops.port || process.env.PORT || 3000);
-  (0, _defaults.default)(ops, {
+  defaults(ops, {
     httpsRedirect: true
   });
 
   // TODO: Need a separate type for normalized options, which guarantees
   // the logger is set!
-  ops.logger ??= (0, _renderer.newDefaultLogger)({
+  ops.logger ??= newDefaultLogger({
     defaultLogLevel: ops.defaultLoggerLogLevel
   });
 
   /* Creates servers, resolves and sets the port. */
-  const expressServer = await (0, _server.default)(webpackConfig, ops);
+  const expressServer = await serverFactory(webpackConfig, ops);
   let httpServer;
   if (ops.https) {
-    httpServer = _nodeHttps.default.createServer({
+    httpServer = https.createServer({
       cert: ops.https.cert,
       key: ops.https.key
     }, expressServer);
-  } else httpServer = _nodeHttp.default.createServer(expressServer);
+  } else httpServer = http.createServer(expressServer);
 
   /* Sets error handler for HTTP(S) server. */
   httpServer.on('error', error => {
     if (error.syscall !== 'listen') throw error;
-    const bind = (0, _isString.default)(ops.port) ? `Pipe ${ops.port}` : `Port ${ops.port}`;
+    const bind = typeof ops.port === 'string' ? `Pipe ${ops.port}` : `Port ${ops.port}`;
 
     /* Human-readable message for some specific listen errors. */
     switch (error.code) {
@@ -215,7 +190,7 @@ async function launchServer(webpackConfig, options = {}) {
   /* Listening event handler for HTTP(S) server. */
   httpServer.on('listening', () => {
     const addr = httpServer.address();
-    const bind = (0, _isString.default)(addr) ? `pipe ${addr}` : `port ${addr.port}`;
+    const bind = typeof addr === 'string' ? `pipe ${addr}` : `port ${addr.port}`;
     ops.logger.info(`Server listening on ${bind} in ${process.env.NODE_ENV} mode`);
   });
   httpServer.listen(ops.port);
@@ -224,7 +199,7 @@ async function launchServer(webpackConfig, options = {}) {
     httpServer
   };
 }
-launchServer.SCRIPT_LOCATIONS = _renderer.SCRIPT_LOCATIONS;
-launchServer.getDefaultCspSettings = _server.getDefaultCspSettings;
-launchServer.errors = _utils.errors;
+launchServer.SCRIPT_LOCATIONS = SCRIPT_LOCATIONS;
+launchServer.getDefaultCspSettings = getDefaultCspSettings;
+launchServer.errors = errors;
 //# sourceMappingURL=index.js.map

package/build/development/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["require","_nodeHttp","_interopRequireDefault","_nodeHttps","_cloneDeep","_defaults","_isFinite","_isNumber","_isString","_toNumber","_server","_interopRequireWildcard","_renderer","_utils","e","t","WeakMap","r","n","__esModule","o","i","f","__proto__","default","has","get","set","hasOwnProperty","call","Object","defineProperty","getOwnPropertyDescriptor","normalizePort","value","port","toNumber","isFinite","isNumber","launchServer","webpackConfig","options","ops","cloneDeep","process","env","PORT","defaults","httpsRedirect","logger","newDefaultLogger","defaultLogLevel","defaultLoggerLogLevel","expressServer","serverFactory","httpServer","https","createServer","cert","key","http","on","error","syscall","bind","isString","code","exit","undefined","addr","address","info","NODE_ENV","listen","SCRIPT_LOCATIONS","getDefaultCspSettings","errors"],"sources":["../../../src/server/index.ts"],"sourcesContent":["// eslint-disable-next-line import/no-unassigned-import\nimport 'source-map-support/register';\n\nimport http from 'node:http';\nimport https from 'node:https';\n\nimport cloneDeep from 'lodash/cloneDeep';\nimport defaults from 'lodash/defaults';\nimport isFinite from 'lodash/isFinite';\nimport isNumber from 'lodash/isNumber';\nimport isString from 'lodash/isString';\nimport toNumber from 'lodash/toNumber';\n\n// Polyfill required by ReactJS.\n// TODO: Double-check, if it is still required by React v19?\n// eslint-disable-next-line import/no-unassigned-import\nimport 'raf/polyfill';\n\nimport type { Configuration } from 'webpack';\n\nimport serverFactory, {\n  type OptionsT as ServerOptionsT,\n  type ServerT,\n  getDefaultCspSettings,\n} from './server';\n\nimport { SCRIPT_LOCATIONS, newDefaultLogger } from './renderer';\n\nimport { errors } from './utils';\n\nexport type {\n  BeforeRenderResT,\n  BeforeRenderT,\n  ConfigT,\n  ServerSsrContext,\n} from './renderer';\n\nexport { errors, getDefaultCspSettings, type ServerT };\n\n/**\n * Normalizes a port into a number, string, or false.\n * TODO: Drop this function?\n * @param value Port name or number.\n * @return Port number (Number), name (String), or false.\n */\nfunction normalizePort(value: number | string) {\n  const port = toNumber(value);\n  if (isFinite(port)) return port; /* port number */\n  if (!isNumber(port)) return value; /* named pipe */\n  return false;\n}\n\ntype OptionsT = ServerOptionsT & {\n  https?: {\n    cert: string;\n    key: string;\n  };\n\n  // TODO: Should we limit it to number | string, and throw if it is different value?\n  port?: false | number | string;\n};\n\n/**\n * Creates and launches web-server for ReactJS application. Allows zero\n * or detailed configuration, supports server-side rendering,\n * and development tools, including Hot Module Reloading (HMR).\n *\n * NOTE: Many of options defined below are passed down to the server and\n * renderer factories, and their declared default values are set in those\n * factories, rather than here.\n *\n * @param {object} webpackConfig Webpack configuration used to build\n * the frontend bundle. In production mode the server will read out of it\n * `context`, `publicPath`, and a few other parameters, necessary to locate\n * and serve the app bundle. In development mode the server will use entire\n * provided config to build the app bundle in memory, and further watch and\n * update it via HMR.\n * @param {object} [options] Additional parameters.\n * @param {Component} [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param {function} [options.beforeExpressJsError] Asynchronous callback\n * (`(server) => Promise<boolean>`) to be executed just before the default error\n * handler is added to ExpressJS server. If the callback is provided and its\n * result resolves to a truthy value, `react-utils` won't attach the default\n * error handler.\n * @param {function} [options.beforeExpressJsSetup] Asynchronous callback\n * (`(server) => Promise) to be executed right after ExpressJS server creation,\n * before any configuration is performed.\n * @param {BeforeRenderHook} [options.beforeRender] The hook to run just before\n * the server-side rendering. For each incoming request, it will be executed\n * just before the HTML markup is generated at the server. It allows to load\n * and provide the data necessary for server-side rendering, and also to inject\n * additional configuration and scripts into the generated HTML code.\n * @param {boolean} [options.noCsp] Set `true` to disable\n * Content-Security-Policy (CSP) headers altogether.\n * @param {function} [options.cspSettingsHook] A hook allowing\n * to customize [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)\n * settings for [helmet](https://github.com/helmetjs/helmet)'s\n * `contentSecurityPolicy` middleware on per-request basis.\n *\n * If provided it should be a with signature: \\\n * `(defaultSettings: object, req: object)` &rArr; `object` \\\n * which gets the default settings (also used without the hook),\n * and the incoming request object. The hook response will be passed\n * as options to the helmet `contentSecurityPolicy` middleware.\n *\n * Currently, the default settings is the following object in production\n * environment:\n * ```js\n * {\n *   directives: {\n *     defaultSrc: [\"'self'\"],\n *     baseUri: [\"'self'\"],\n *     blockAllMixedContent: [],\n *     fontSrc: [\"'self'\", 'https:', 'data:'],\n *     frameAncestors: [\"'self'\"],\n *     frameSrc: [\"'self'\", 'https://*.youtube.com'],\n *     imgSrc: [\"'self'\", 'data:'],\n *     objectSrc: [\"'none'\"],\n *     scriptSrc: [\"'self'\", \"'unsafe-eval'\", `'nonce-UNIQUE_NONCE_VALUE'`],\n *     scriptSrcAttr: [\"'none'\"],\n *     styleSrc: [\"'self'\", 'https:', \"'unsafe-inline'\"],\n *     upgradeInsecureRequests: [] // Removed in dev mode.\n *   }\n * }\n * ```\n * It matches the default value used by Helmet with a few updates:\n * - YouTube host is whitelisted in the `frameSrc` directive to ensure\n *   the {@link YouTubeVideo} component works.\n * - An unique per-request nonce is added to `scriptSrc` directive to\n *   whitelist auxiliary scripts injected by react-utils. The actual nonce\n *   value can be fetched by host code via `.nonce` field of `req` argument\n *   of `.beforeRender` hook.\n * - `upgradeInsecureRequests` directive is removed in development mode,\n *   to simplify local testing with http requests.\n * @param {string} [options.defaultLoggerLogLevel='info'] Log level for\n * the default logger, which is created if no `logger` option provided.\n * @param {boolean} [options.devMode] Pass in `true` to start the server in\n * development mode.\n * @param {string} [options.favicon] Path to the favicon to use by the server.\n * By default no favicon is used.\n * @param {object} [options.https] If provided, HTTPS server will be started,\n * instead of HTTP otherwise. The object should provide SSL certificate and key\n * via two string fields: `cert`, and `key`.\n * @param {string} [options.https.cert] SSL Certificate.\n * @param {string} [options.https.key] SSL key.\n * @param {boolean} [options.httpsRedirect=true] Pass in `true` to enable\n * automatic redirection of all incoming HTTP requests to HTTPS.\n *\n * To smoothly use it at `localhost` you need to run the server in HTTPS mode,\n * and also properly create and install a self-signed SSL sertificate on your\n * system. This article is helpful:\n * [How to get HTTPS working on your local development environment in 5 minutes](https://medium.freecodecamp.org/how-to-get-https-working-on-your-local-development-environment-in-5-minutes-7af615770eec)\n * @param {Logger} [options.logger] The logger to use at server side.\n * By default [`winston`](https://www.npmjs.com/package/winston) logger\n * with console transport is used. The logger you provide, or the default\n * `winston` logger otherwise, will be attached to the created ExpressJS server\n * object.\n * @param {function} [options.onExpressJsSetup] An async callback\n * (`(server) => Promise`) to be triggered when most of the server\n * configuration is completed, just before the server-side renderer,\n * and the default error handler are attached. You can use it to mount\n * custom API routes. The server-side logger can be accessed as `server.logger`.\n * @param {number|string} [options.port=3000] The port to start the server on.\n * @param {number} [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param {function} [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` &ndash; the cache key for the response;\n * - `maxage?: number` &ndash; the maximum age of cached result in ms.\n *   If undefined - infinite age is assumed.\n * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @return Resolves to an object with created Express and HTTP servers.\n */\nexport default async function launchServer(\n  webpackConfig: Configuration,\n  options: OptionsT = {},\n): Promise<{\n  expressServer: ServerT;\n  httpServer: http.Server;\n}> {\n  /* Options normalization. */\n  const ops = cloneDeep(options);\n\n  // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing\n  ops.port = normalizePort(ops.port || process.env.PORT || 3000);\n  defaults(ops, { httpsRedirect: true });\n\n  // TODO: Need a separate type for normalized options, which guarantees\n  // the logger is set!\n  ops.logger ??= newDefaultLogger({\n    defaultLogLevel: ops.defaultLoggerLogLevel,\n  });\n\n  /* Creates servers, resolves and sets the port. */\n  const expressServer = await serverFactory(webpackConfig, ops);\n\n  let httpServer: http.Server;\n  if (ops.https) {\n    httpServer = https.createServer({\n      cert: ops.https.cert,\n      key: ops.https.key,\n    }, expressServer as unknown as () => void);\n  } else httpServer = http.createServer(expressServer as unknown as () => void);\n\n  /* Sets error handler for HTTP(S) server. */\n  httpServer.on('error', (error: Error) => {\n    if ((error as { syscall?: string }).syscall !== 'listen') throw error;\n    const bind = isString(ops.port) ? `Pipe ${ops.port}` : `Port ${ops.port}`;\n\n    /* Human-readable message for some specific listen errors. */\n    switch ((error as { code?: string }).code) {\n      case 'EACCES':\n        ops.logger!.error(`${bind} requires elevated privileges`);\n        return process.exit(1);\n      case 'EADDRINUSE':\n        ops.logger!.error(`${bind} is already in use`);\n        return process.exit(1);\n      case undefined:\n      default:\n        throw error;\n    }\n  });\n\n  /* Listening event handler for HTTP(S) server. */\n  httpServer.on('listening', () => {\n    const addr = httpServer.address()!;\n    const bind = isString(addr) ? `pipe ${addr}` : `port ${addr.port}`;\n    ops.logger!.info(`Server listening on ${bind} in ${\n      process.env.NODE_ENV} mode`);\n  });\n\n  httpServer.listen(ops.port);\n\n  return {\n    expressServer,\n    httpServer,\n  };\n}\n\nlaunchServer.SCRIPT_LOCATIONS = SCRIPT_LOCATIONS;\nlaunchServer.getDefaultCspSettings = getDefaultCspSettings;\nlaunchServer.errors = errors;\n"],"mappings":";;;;;;;;;;;;;;;;;;;AACAA,OAAA;AAEA,IAAAC,SAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,UAAA,GAAAD,sBAAA,CAAAF,OAAA;AAEA,IAAAI,UAAA,GAAAF,sBAAA,CAAAF,OAAA;AACA,IAAAK,SAAA,GAAAH,sBAAA,CAAAF,OAAA;AACA,IAAAM,SAAA,GAAAJ,sBAAA,CAAAF,OAAA;AACA,IAAAO,SAAA,GAAAL,sBAAA,CAAAF,OAAA;AACA,IAAAQ,SAAA,GAAAN,sBAAA,CAAAF,OAAA;AACA,IAAAS,SAAA,GAAAP,sBAAA,CAAAF,OAAA;AAKAA,OAAA;AAIA,IAAAU,OAAA,GAAAC,uBAAA,CAAAX,OAAA;AAMA,IAAAY,SAAA,GAAAZ,OAAA;AAEA,IAAAa,MAAA,GAAAb,OAAA;AAAe,SAAAW,wBAAAG,CAAA,EAAAC,CAAA,6BAAAC,OAAA,MAAAC,CAAA,OAAAD,OAAA,IAAAE,CAAA,OAAAF,OAAA,YAAAL,uBAAA,YAAAA,CAAAG,CAAA,EAAAC,CAAA,SAAAA,CAAA,IAAAD,CAAA,IAAAA,CAAA,CAAAK,UAAA,SAAAL,CAAA,MAAAM,CAAA,EAAAC,CAAA,EAAAC,CAAA,KAAAC,SAAA,QAAAC,OAAA,EAAAV,CAAA,iBAAAA,CAAA,uBAAAA,CAAA,yBAAAA,CAAA,SAAAQ,CAAA,MAAAF,CAAA,GAAAL,CAAA,GAAAG,CAAA,GAAAD,CAAA,QAAAG,CAAA,CAAAK,GAAA,CAAAX,CAAA,UAAAM,CAAA,CAAAM,GAAA,CAAAZ,CAAA,GAAAM,CAAA,CAAAO,GAAA,CAAAb,CAAA,EAAAQ,CAAA,gBAAAP,CAAA,IAAAD,CAAA,gBAAAC,CAAA,OAAAa,cAAA,CAAAC,IAAA,CAAAf,CAAA,EAAAC,CAAA,OAAAM,CAAA,IAAAD,CAAA,GAAAU,MAAA,CAAAC,cAAA,KAAAD,MAAA,CAAAE,wBAAA,CAAAlB,CAAA,EAAAC,CAAA,OAAAM,CAAA,CAAAK,GAAA,IAAAL,CAAA,CAAAM,GAAA,IAAAP,CAAA,CAAAE,CAAA,EAAAP,CAAA,EAAAM,CAAA,IAAAC,CAAA,CAAAP,CAAA,IAAAD,CAAA,CAAAC,CAAA,WAAAO,CAAA,KAAAR,CAAA,EAAAC,CAAA;AA5Bf;;AAaA;AACA;AACA;;AAwBA;AACA;AACA;AACA;AACA;AACA;AACA,SAASkB,aAAaA,CAACC,KAAsB,EAAE;EAC7C,MAAMC,IAAI,GAAG,IAAAC,iBAAQ,EAACF,KAAK,CAAC;EAC5B,IAAI,IAAAG,iBAAQ,EAACF,IAAI,CAAC,EAAE,OAAOA,IAAI,CAAC,CAAC;EACjC,IAAI,CAAC,IAAAG,iBAAQ,EAACH,IAAI,CAAC,EAAE,OAAOD,KAAK,CAAC,CAAC;EACnC,OAAO,KAAK;AACd;AAYA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACe,eAAeK,YAAYA,CACxCC,aAA4B,EAC5BC,OAAiB,GAAG,CAAC,CAAC,EAIrB;EACD;EACA,MAAMC,GAAG,GAAG,IAAAC,kBAAS,EAACF,OAAO,CAAC;;EAE9B;EACAC,GAAG,CAACP,IAAI,GAAGF,aAAa,CAACS,GAAG,CAACP,IAAI,IAAIS,OAAO,CAACC,GAAG,CAACC,IAAI,IAAI,IAAI,CAAC;EAC9D,IAAAC,iBAAQ,EAACL,GAAG,EAAE;IAAEM,aAAa,EAAE;EAAK,CAAC,CAAC;;EAEtC;EACA;EACAN,GAAG,CAACO,MAAM,KAAK,IAAAC,0BAAgB,EAAC;IAC9BC,eAAe,EAAET,GAAG,CAACU;EACvB,CAAC,CAAC;;EAEF;EACA,MAAMC,aAAa,GAAG,MAAM,IAAAC,eAAa,EAACd,aAAa,EAAEE,GAAG,CAAC;EAE7D,IAAIa,UAAuB;EAC3B,IAAIb,GAAG,CAACc,KAAK,EAAE;IACbD,UAAU,GAAGC,kBAAK,CAACC,YAAY,CAAC;MAC9BC,IAAI,EAAEhB,GAAG,CAACc,KAAK,CAACE,IAAI;MACpBC,GAAG,EAAEjB,GAAG,CAACc,KAAK,CAACG;IACjB,CAAC,EAAEN,aAAsC,CAAC;EAC5C,CAAC,MAAME,UAAU,GAAGK,iBAAI,CAACH,YAAY,CAACJ,aAAsC,CAAC;;EAE7E;EACAE,UAAU,CAACM,EAAE,CAAC,OAAO,EAAGC,KAAY,IAAK;IACvC,IAAKA,KAAK,CAA0BC,OAAO,KAAK,QAAQ,EAAE,MAAMD,KAAK;IACrE,MAAME,IAAI,GAAG,IAAAC,iBAAQ,EAACvB,GAAG,CAACP,IAAI,CAAC,GAAG,QAAQO,GAAG,CAACP,IAAI,EAAE,GAAG,QAAQO,GAAG,CAACP,IAAI,EAAE;;IAEzE;IACA,QAAS2B,KAAK,CAAuBI,IAAI;MACvC,KAAK,QAAQ;QACXxB,GAAG,CAACO,MAAM,CAAEa,KAAK,CAAC,GAAGE,IAAI,+BAA+B,CAAC;QACzD,OAAOpB,OAAO,CAACuB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAK,YAAY;QACfzB,GAAG,CAACO,MAAM,CAAEa,KAAK,CAAC,GAAGE,IAAI,oBAAoB,CAAC;QAC9C,OAAOpB,OAAO,CAACuB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAKC,SAAS;MACd;QACE,MAAMN,KAAK;IACf;EACF,CAAC,CAAC;;EAEF;EACAP,UAAU,CAACM,EAAE,CAAC,WAAW,EAAE,MAAM;IAC/B,MAAMQ,IAAI,GAAGd,UAAU,CAACe,OAAO,CAAC,CAAE;IAClC,MAAMN,IAAI,GAAG,IAAAC,iBAAQ,EAACI,IAAI,CAAC,GAAG,QAAQA,IAAI,EAAE,GAAG,QAAQA,IAAI,CAAClC,IAAI,EAAE;IAClEO,GAAG,CAACO,MAAM,CAAEsB,IAAI,CAAC,uBAAuBP,IAAI,OAC1CpB,OAAO,CAACC,GAAG,CAAC2B,QAAQ,OAAO,CAAC;EAChC,CAAC,CAAC;EAEFjB,UAAU,CAACkB,MAAM,CAAC/B,GAAG,CAACP,IAAI,CAAC;EAE3B,OAAO;IACLkB,aAAa;IACbE;EACF,CAAC;AACH;AAEAhB,YAAY,CAACmC,gBAAgB,GAAGA,0BAAgB;AAChDnC,YAAY,CAACoC,qBAAqB,GAAGA,6BAAqB;AAC1DpC,YAAY,CAACqC,MAAM,GAAGA,aAAM","ignoreList":[]}
+{"version":3,"file":"index.js","names":["http","https","cloneDeep","defaults","serverFactory","getDefaultCspSettings","SCRIPT_LOCATIONS","newDefaultLogger","errors","normalizePort","value","port","parseInt","Number","isFinite","launchServer","webpackConfig","options","ops","process","env","PORT","httpsRedirect","logger","defaultLogLevel","defaultLoggerLogLevel","expressServer","httpServer","createServer","cert","key","on","error","syscall","bind","code","exit","undefined","addr","address","info","NODE_ENV","listen"],"sources":["../../../src/server/index.ts"],"sourcesContent":["// eslint-disable-next-line import/no-unassigned-import\nimport 'source-map-support/register.js';\n\nimport http from 'node:http';\nimport https from 'node:https';\n\nimport { cloneDeep, defaults } from 'lodash-es';\n\n// Polyfill required by ReactJS.\n// TODO: Double-check, if it is still required by React v19?\n// eslint-disable-next-line import/no-unassigned-import\nimport 'raf/polyfill.js';\n\nimport type { Configuration } from 'webpack';\n\nimport serverFactory, {\n  type OptionsT as ServerOptionsT,\n  type ServerT,\n  getDefaultCspSettings,\n} from './server';\n\nimport { SCRIPT_LOCATIONS, newDefaultLogger } from './renderer';\n\nimport { errors } from './utils';\n\nexport type {\n  BeforeRenderResT,\n  BeforeRenderT,\n  ConfigT,\n  ServerSsrContext,\n} from './renderer';\n\nexport { errors, getDefaultCspSettings, type ServerT };\n\n/**\n * Normalizes a port into a number, string, or false.\n * TODO: Drop this function?\n * @param value Port name or number.\n * @return Port number (Number), name (String).\n */\nfunction normalizePort(value: number | string) {\n  const port = typeof value === 'string' ? parseInt(value) : value;\n  if (Number.isFinite(port)) return port; /* port number */\n  return value; /* named pipe */\n}\n\ntype OptionsT = ServerOptionsT & {\n  https?: {\n    cert: string;\n    key: string;\n  };\n\n  // TODO: Should we limit it to number | string, and throw if it is different value?\n  port?: false | number | string;\n};\n\n/**\n * Creates and launches web-server for ReactJS application. Allows zero\n * or detailed configuration, supports server-side rendering,\n * and development tools, including Hot Module Reloading (HMR).\n *\n * NOTE: Many of options defined below are passed down to the server and\n * renderer factories, and their declared default values are set in those\n * factories, rather than here.\n *\n * @param {object} webpackConfig Webpack configuration used to build\n * the frontend bundle. In production mode the server will read out of it\n * `context`, `publicPath`, and a few other parameters, necessary to locate\n * and serve the app bundle. In development mode the server will use entire\n * provided config to build the app bundle in memory, and further watch and\n * update it via HMR.\n * @param {object} [options] Additional parameters.\n * @param {Component} [options.Application] The root ReactJS component of\n * the app to use for the server-side rendering. When not provided\n * the server-side rendering is disabled.\n * @param {function} [options.beforeExpressJsError] Asynchronous callback\n * (`(server) => Promise<boolean>`) to be executed just before the default error\n * handler is added to ExpressJS server. If the callback is provided and its\n * result resolves to a truthy value, `react-utils` won't attach the default\n * error handler.\n * @param {function} [options.beforeExpressJsSetup] Asynchronous callback\n * (`(server) => Promise) to be executed right after ExpressJS server creation,\n * before any configuration is performed.\n * @param {BeforeRenderHook} [options.beforeRender] The hook to run just before\n * the server-side rendering. For each incoming request, it will be executed\n * just before the HTML markup is generated at the server. It allows to load\n * and provide the data necessary for server-side rendering, and also to inject\n * additional configuration and scripts into the generated HTML code.\n * @param {boolean} [options.noCsp] Set `true` to disable\n * Content-Security-Policy (CSP) headers altogether.\n * @param {function} [options.cspSettingsHook] A hook allowing\n * to customize [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP)\n * settings for [helmet](https://github.com/helmetjs/helmet)'s\n * `contentSecurityPolicy` middleware on per-request basis.\n *\n * If provided it should be a with signature: \\\n * `(defaultSettings: object, req: object)` &rArr; `object` \\\n * which gets the default settings (also used without the hook),\n * and the incoming request object. The hook response will be passed\n * as options to the helmet `contentSecurityPolicy` middleware.\n *\n * Currently, the default settings is the following object in production\n * environment:\n * ```js\n * {\n *   directives: {\n *     defaultSrc: [\"'self'\"],\n *     baseUri: [\"'self'\"],\n *     blockAllMixedContent: [],\n *     fontSrc: [\"'self'\", 'https:', 'data:'],\n *     frameAncestors: [\"'self'\"],\n *     frameSrc: [\"'self'\", 'https://*.youtube.com'],\n *     imgSrc: [\"'self'\", 'data:'],\n *     objectSrc: [\"'none'\"],\n *     scriptSrc: [\"'self'\", \"'unsafe-eval'\", `'nonce-UNIQUE_NONCE_VALUE'`],\n *     scriptSrcAttr: [\"'none'\"],\n *     styleSrc: [\"'self'\", 'https:', \"'unsafe-inline'\"],\n *     upgradeInsecureRequests: [] // Removed in dev mode.\n *   }\n * }\n * ```\n * It matches the default value used by Helmet with a few updates:\n * - YouTube host is whitelisted in the `frameSrc` directive to ensure\n *   the {@link YouTubeVideo} component works.\n * - An unique per-request nonce is added to `scriptSrc` directive to\n *   whitelist auxiliary scripts injected by react-utils. The actual nonce\n *   value can be fetched by host code via `.nonce` field of `req` argument\n *   of `.beforeRender` hook.\n * - `upgradeInsecureRequests` directive is removed in development mode,\n *   to simplify local testing with http requests.\n * @param {string} [options.defaultLoggerLogLevel='info'] Log level for\n * the default logger, which is created if no `logger` option provided.\n * @param {boolean} [options.devMode] Pass in `true` to start the server in\n * development mode.\n * @param {string} [options.favicon] Path to the favicon to use by the server.\n * By default no favicon is used.\n * @param {object} [options.https] If provided, HTTPS server will be started,\n * instead of HTTP otherwise. The object should provide SSL certificate and key\n * via two string fields: `cert`, and `key`.\n * @param {string} [options.https.cert] SSL Certificate.\n * @param {string} [options.https.key] SSL key.\n * @param {boolean} [options.httpsRedirect=true] Pass in `true` to enable\n * automatic redirection of all incoming HTTP requests to HTTPS.\n *\n * To smoothly use it at `localhost` you need to run the server in HTTPS mode,\n * and also properly create and install a self-signed SSL sertificate on your\n * system. This article is helpful:\n * [How to get HTTPS working on your local development environment in 5 minutes](https://medium.freecodecamp.org/how-to-get-https-working-on-your-local-development-environment-in-5-minutes-7af615770eec)\n * @param {Logger} [options.logger] The logger to use at server side.\n * By default [`winston`](https://www.npmjs.com/package/winston) logger\n * with console transport is used. The logger you provide, or the default\n * `winston` logger otherwise, will be attached to the created ExpressJS server\n * object.\n * @param {function} [options.onExpressJsSetup] An async callback\n * (`(server) => Promise`) to be triggered when most of the server\n * configuration is completed, just before the server-side renderer,\n * and the default error handler are attached. You can use it to mount\n * custom API routes. The server-side logger can be accessed as `server.logger`.\n * @param {number|string} [options.port=3000] The port to start the server on.\n * @param {number} [options.staticCacheSize=1.e7] The maximum\n * static cache size in bytes. Defaults to ~10 MB.\n * @param {function} [options.staticCacheController] When given, it activates,\n * and controls the static caching of generated HTML markup. When this function\n * is provided, on each incoming request it is triggered with the request\n * passed in as the argument. To attempt to serve the response from the cache\n * it should return the object with the following fields:\n * - `key: string` &ndash; the cache key for the response;\n * - `maxage?: number` &ndash; the maximum age of cached result in ms.\n *   If undefined - infinite age is assumed.\n * @param {number} [options.maxSsrRounds=10] Maximum number of SSR rounds.\n * @param {number} [options.ssrTimeout=1000] SSR timeout in milliseconds,\n * defaults to 1 second.\n * @return Resolves to an object with created Express and HTTP servers.\n */\nexport default async function launchServer(\n  webpackConfig: Configuration,\n  options: OptionsT = {},\n): Promise<{\n  expressServer: ServerT;\n  httpServer: http.Server;\n}> {\n  /* Options normalization. */\n  const ops = cloneDeep(options);\n\n  // eslint-disable-next-line @typescript-eslint/prefer-nullish-coalescing\n  ops.port = normalizePort(ops.port || process.env.PORT || 3000);\n  defaults(ops, { httpsRedirect: true });\n\n  // TODO: Need a separate type for normalized options, which guarantees\n  // the logger is set!\n  ops.logger ??= newDefaultLogger({\n    defaultLogLevel: ops.defaultLoggerLogLevel,\n  });\n\n  /* Creates servers, resolves and sets the port. */\n  const expressServer = await serverFactory(webpackConfig, ops);\n\n  let httpServer: http.Server;\n  if (ops.https) {\n    httpServer = https.createServer({\n      cert: ops.https.cert,\n      key: ops.https.key,\n    }, expressServer as unknown as () => void);\n  } else httpServer = http.createServer(expressServer as unknown as () => void);\n\n  /* Sets error handler for HTTP(S) server. */\n  httpServer.on('error', (error: Error) => {\n    if ((error as { syscall?: string }).syscall !== 'listen') throw error;\n    const bind = typeof ops.port === 'string' ? `Pipe ${ops.port}` : `Port ${ops.port}`;\n\n    /* Human-readable message for some specific listen errors. */\n    switch ((error as { code?: string }).code) {\n      case 'EACCES':\n        ops.logger!.error(`${bind} requires elevated privileges`);\n        return process.exit(1);\n      case 'EADDRINUSE':\n        ops.logger!.error(`${bind} is already in use`);\n        return process.exit(1);\n      case undefined:\n      default:\n        throw error;\n    }\n  });\n\n  /* Listening event handler for HTTP(S) server. */\n  httpServer.on('listening', () => {\n    const addr = httpServer.address()!;\n    const bind = typeof addr === 'string' ? `pipe ${addr}` : `port ${addr.port}`;\n    ops.logger!.info(`Server listening on ${bind} in ${\n      process.env.NODE_ENV} mode`);\n  });\n\n  httpServer.listen(ops.port);\n\n  return {\n    expressServer,\n    httpServer,\n  };\n}\n\nlaunchServer.SCRIPT_LOCATIONS = SCRIPT_LOCATIONS;\nlaunchServer.getDefaultCspSettings = getDefaultCspSettings;\nlaunchServer.errors = errors;\n"],"mappings":"AAAA;AACA,OAAO,gCAAgC;AAEvC,OAAOA,IAAI,MAAM,WAAW;AAC5B,OAAOC,KAAK,MAAM,YAAY;AAE9B,SAASC,SAAS,EAAEC,QAAQ,QAAQ,WAAW;;AAE/C;AACA;AACA;AACA,OAAO,iBAAiB;AAAA,OAIjBC,aAAa,IAGlBC,qBAAqB;AAAA,SAGdC,gBAAgB,EAAEC,gBAAgB;AAAA,SAElCC,MAAM;AASf,SAASA,MAAM,EAAEH,qBAAqB;;AAEtC;AACA;AACA;AACA;AACA;AACA;AACA,SAASI,aAAaA,CAACC,KAAsB,EAAE;EAC7C,MAAMC,IAAI,GAAG,OAAOD,KAAK,KAAK,QAAQ,GAAGE,QAAQ,CAACF,KAAK,CAAC,GAAGA,KAAK;EAChE,IAAIG,MAAM,CAACC,QAAQ,CAACH,IAAI,CAAC,EAAE,OAAOA,IAAI,CAAC,CAAC;EACxC,OAAOD,KAAK,CAAC,CAAC;AACh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eAAe,eAAeK,YAAYA,CACxCC,aAA4B,EAC5BC,OAAiB,GAAG,CAAC,CAAC,EAIrB;EACD;EACA,MAAMC,GAAG,GAAGhB,SAAS,CAACe,OAAO,CAAC;;EAE9B;EACAC,GAAG,CAACP,IAAI,GAAGF,aAAa,CAACS,GAAG,CAACP,IAAI,IAAIQ,OAAO,CAACC,GAAG,CAACC,IAAI,IAAI,IAAI,CAAC;EAC9DlB,QAAQ,CAACe,GAAG,EAAE;IAAEI,aAAa,EAAE;EAAK,CAAC,CAAC;;EAEtC;EACA;EACAJ,GAAG,CAACK,MAAM,KAAKhB,gBAAgB,CAAC;IAC9BiB,eAAe,EAAEN,GAAG,CAACO;EACvB,CAAC,CAAC;;EAEF;EACA,MAAMC,aAAa,GAAG,MAAMtB,aAAa,CAACY,aAAa,EAAEE,GAAG,CAAC;EAE7D,IAAIS,UAAuB;EAC3B,IAAIT,GAAG,CAACjB,KAAK,EAAE;IACb0B,UAAU,GAAG1B,KAAK,CAAC2B,YAAY,CAAC;MAC9BC,IAAI,EAAEX,GAAG,CAACjB,KAAK,CAAC4B,IAAI;MACpBC,GAAG,EAAEZ,GAAG,CAACjB,KAAK,CAAC6B;IACjB,CAAC,EAAEJ,aAAsC,CAAC;EAC5C,CAAC,MAAMC,UAAU,GAAG3B,IAAI,CAAC4B,YAAY,CAACF,aAAsC,CAAC;;EAE7E;EACAC,UAAU,CAACI,EAAE,CAAC,OAAO,EAAGC,KAAY,IAAK;IACvC,IAAKA,KAAK,CAA0BC,OAAO,KAAK,QAAQ,EAAE,MAAMD,KAAK;IACrE,MAAME,IAAI,GAAG,OAAOhB,GAAG,CAACP,IAAI,KAAK,QAAQ,GAAG,QAAQO,GAAG,CAACP,IAAI,EAAE,GAAG,QAAQO,GAAG,CAACP,IAAI,EAAE;;IAEnF;IACA,QAASqB,KAAK,CAAuBG,IAAI;MACvC,KAAK,QAAQ;QACXjB,GAAG,CAACK,MAAM,CAAES,KAAK,CAAC,GAAGE,IAAI,+BAA+B,CAAC;QACzD,OAAOf,OAAO,CAACiB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAK,YAAY;QACflB,GAAG,CAACK,MAAM,CAAES,KAAK,CAAC,GAAGE,IAAI,oBAAoB,CAAC;QAC9C,OAAOf,OAAO,CAACiB,IAAI,CAAC,CAAC,CAAC;MACxB,KAAKC,SAAS;MACd;QACE,MAAML,KAAK;IACf;EACF,CAAC,CAAC;;EAEF;EACAL,UAAU,CAACI,EAAE,CAAC,WAAW,EAAE,MAAM;IAC/B,MAAMO,IAAI,GAAGX,UAAU,CAACY,OAAO,CAAC,CAAE;IAClC,MAAML,IAAI,GAAG,OAAOI,IAAI,KAAK,QAAQ,GAAG,QAAQA,IAAI,EAAE,GAAG,QAAQA,IAAI,CAAC3B,IAAI,EAAE;IAC5EO,GAAG,CAACK,MAAM,CAAEiB,IAAI,CAAC,uBAAuBN,IAAI,OAC1Cf,OAAO,CAACC,GAAG,CAACqB,QAAQ,OAAO,CAAC;EAChC,CAAC,CAAC;EAEFd,UAAU,CAACe,MAAM,CAACxB,GAAG,CAACP,IAAI,CAAC;EAE3B,OAAO;IACLe,aAAa;IACbC;EACF,CAAC;AACH;AAEAZ,YAAY,CAACT,gBAAgB,GAAGA,gBAAgB;AAChDS,YAAY,CAACV,qBAAqB,GAAGA,qBAAqB;AAC1DU,YAAY,CAACP,MAAM,GAAGA,MAAM","ignoreList":[]}

package/build/development/server/renderer.js

@@ -1,41 +1,30 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.ServerSsrContext = exports.SCRIPT_LOCATIONS = void 0;
-exports.default = factory;
-exports.isBrotliAcceptable = isBrotliAcceptable;
-exports.newDefaultLogger = newDefaultLogger;
-var _nodeFs = _interopRequireDefault(require("node:fs"));
-var _nodePath = _interopRequireDefault(require("node:path"));
-var _nodeStream = require("node:stream");
-var _nodeZlib = require("node:zlib");
-var _winston = _interopRequireDefault(require("winston"));
-var _reactGlobalState = require("@dr.pogodin/react-global-state");
-var _jsUtils = require("@dr.pogodin/js-utils");
-var _clone = _interopRequireDefault(require("lodash/clone"));
-var _cloneDeep = _interopRequireDefault(require("lodash/cloneDeep"));
-var _defaults = _interopRequireDefault(require("lodash/defaults"));
-var _get = _interopRequireDefault(require("lodash/get"));
-var _isString = _interopRequireDefault(require("lodash/isString"));
-var _mapValues = _interopRequireDefault(require("lodash/mapValues"));
-var _omit = _interopRequireDefault(require("lodash/omit"));
-var _config = _interopRequireDefault(require("config"));
-var _nodeForge = _interopRequireDefault(require("node-forge"));
-var _static = require("react-dom/static");
-var _reactHelmet = require("@dr.pogodin/react-helmet");
-var _reactRouter = require("react-router");
-var _serializeJavascript = _interopRequireDefault(require("serialize-javascript"));
-var _buildInfo = require("../shared/utils/isomorphy/buildInfo");
-var _Cache = _interopRequireDefault(require("./Cache"));
-var _jsxRuntime = require("react/jsx-runtime");
 /**
  * ExpressJS middleware for server-side rendering of a ReactJS app.
  */
 
-const sanitizedConfig = (0, _omit.default)(_config.default, 'SECRET');
+import { Buffer } from 'node:buffer';
+import { createCipheriv, randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { Writable } from 'node:stream';
+import { brotliCompress, brotliDecompress } from 'node:zlib';
+import winston from 'winston';
+import { GlobalStateProvider, SsrContext } from '@dr.pogodin/react-global-state';
+import { timer } from '@dr.pogodin/js-utils';
+import { cloneDeep, defaults, get, mapValues } from 'lodash-es';
+import config from 'config';
+import { prerenderToNodeStream } from 'react-dom/static';
+import { HelmetProvider } from '@dr.pogodin/react-helmet';
+import { StaticRouter } from 'react-router';
+import serializeJs from 'serialize-javascript';
+import { setBuildInfo } from "../shared/utils/isomorphy/buildInfo.js";
+import Cache from "./Cache.js"; // @ts-expect-error "Property 'SECRET' does not exist on type 'IConfig'."
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+import { jsx as _jsx } from "react/jsx-runtime";
+const {
+  SECRET,
+  ...sanitizedConfig
+} = config;
 
 // Note: These type definitions for logger are copied from Winston logger,
 // then simplified to make it easier to fit an alternative logger into this
@@ -46,17 +35,17 @@ const sanitizedConfig = (0, _omit.default)(_config.default, 'SECRET');
 
 // eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 
-let SCRIPT_LOCATIONS = exports.SCRIPT_LOCATIONS = /*#__PURE__*/function (SCRIPT_LOCATIONS) {
+export let SCRIPT_LOCATIONS = /*#__PURE__*/function (SCRIPT_LOCATIONS) {
   SCRIPT_LOCATIONS["BODY_OPEN"] = "BODY_OPEN";
   SCRIPT_LOCATIONS["DEFAULT"] = "DEFAULT";
   SCRIPT_LOCATIONS["HEAD_OPEN"] = "HEAD_OPEN";
   return SCRIPT_LOCATIONS;
 }({});
-class ServerSsrContext extends _reactGlobalState.SsrContext {
+export class ServerSsrContext extends SsrContext {
   chunks = [];
   status = 200;
   constructor(req, chunkGroups, initialState) {
-    super((0, _cloneDeep.default)(initialState) ?? {});
+    super(cloneDeep(initialState) ?? {});
     this.chunkGroups = chunkGroups;
     this.req = req;
   }
@@ -70,10 +59,9 @@ class ServerSsrContext extends _reactGlobalState.SsrContext {
  * @param context Webpack context path used during the build.
  * @return Resolves to the build-time information.
  */
-exports.ServerSsrContext = ServerSsrContext;
 function getBuildInfo(context) {
-  const url = _nodePath.default.resolve(context, '.build-info');
-  return JSON.parse(_nodeFs.default.readFileSync(url, 'utf8'));
+  const url = path.resolve(context, '.build-info');
+  return JSON.parse(fs.readFileSync(url, 'utf8'));
 }
 
 /**
@@ -85,10 +73,10 @@ function getBuildInfo(context) {
  * @return
  */
 function readChunkGroupsJson(buildDir) {
-  const url = _nodePath.default.resolve(buildDir, '__chunk_groups__.json');
+  const url = path.resolve(buildDir, '__chunk_groups__.json');
   let res;
   try {
-    res = JSON.parse(_nodeFs.default.readFileSync(url, 'utf8'));
+    res = JSON.parse(fs.readFileSync(url, 'utf8'));
   } catch {
     // TODO: Should we message the error here somehow?
     res = null;
@@ -98,27 +86,15 @@ function readChunkGroupsJson(buildDir) {
 
 /**
  * Prepares a new Cipher for data encryption.
- * @param key Encryption key (32-bit random key is expected, see
- *  node-forge documentation, in case of doubts).
- * @return Resolves to the object with two fields:
+ * @param key Encryption key (32-bit random, Base64-encoded key is expected).
+ * @return Returns a tuple of:
  *  1. cipher - a new Cipher, ready for encryption;
  *  2. iv - initial vector used by the cipher.
  */
-async function prepareCipher(key) {
-  return new Promise((resolve, reject) => {
-    _nodeForge.default.random.getBytes(32, (err, iv) => {
-      if (err) reject(err);else {
-        const cipher = _nodeForge.default.cipher.createCipher('AES-CBC', key);
-        cipher.start({
-          iv
-        });
-        resolve({
-          cipher,
-          iv
-        });
-      }
-    });
-  });
+function prepareCipher(key) {
+  const iv = randomBytes(16);
+  const cipher = createCipheriv('AES-256-CBC', Buffer.from(key, 'base64'), iv);
+  return [cipher, iv];
 }
 
 /**
@@ -126,7 +102,7 @@ async function prepareCipher(key) {
  * are acceptable to the caller.
  * @param req
  */
-function isBrotliAcceptable(req) {
+export function isBrotliAcceptable(req) {
   const acceptable = req.get('accept-encoding');
   if (acceptable) {
     const ops = acceptable.split(',');
@@ -161,7 +137,7 @@ function groupExtraScripts(scripts = []) {
     [SCRIPT_LOCATIONS.HEAD_OPEN]: ''
   };
   for (const script of scripts) {
-    if ((0, _isString.default)(script)) {
+    if (typeof script === 'string') {
       if (script) res[SCRIPT_LOCATIONS.DEFAULT] += script;
     } else if (script.code) {
       if (script.location in res) res[script.location] += script.code;else throw Error(`Invalid location "${script.location}"`);
@@ -176,14 +152,14 @@ function groupExtraScripts(scripts = []) {
  * @param {string} [options.defaultLogLevel='info']
  * @return {object}
  */
-function newDefaultLogger({
+export function newDefaultLogger({
   defaultLogLevel = 'info'
 } = {}) {
   const {
     format,
     transports
-  } = _winston.default;
-  return _winston.default.createLogger({
+  } = winston;
+  return winston.createLogger({
     format: format.combine(format.splat(), format.timestamp(), format.colorize(), format.printf(({
       level,
       message,
@@ -233,8 +209,10 @@ function newDefaultLogger({
  *   If undefined - infinite age is assumed.
  * @return Created middleware.
  */
-function factory(webpackConfig, options) {
-  const ops = (0, _defaults.default)((0, _clone.default)(options), {
+export default function factory(webpackConfig, options) {
+  const ops = defaults({
+    ...options
+  }, {
     beforeRender: async () => Promise.resolve({}),
     maxSsrRounds: 10,
     ssrTimeout: 1000,
@@ -248,18 +226,18 @@ function factory(webpackConfig, options) {
     defaultLogLevel: ops.defaultLoggerLogLevel
   });
   const buildInfo = ops.buildInfo ?? getBuildInfo(webpackConfig.context);
-  (0, _buildInfo.setBuildInfo)(buildInfo);
+  setBuildInfo(buildInfo);
 
   // publicPath from webpack.output has a trailing slash at the end.
   const {
     publicPath,
     path: outputPath
   } = webpackConfig.output;
-  const manifestLink = _nodeFs.default.existsSync(`${outputPath}/manifest.json`) ? `<link rel="manifest" href="${publicPath}manifest.json">` : '';
+  const manifestLink = fs.existsSync(`${outputPath}/manifest.json`) ? `<link rel="manifest" href="${publicPath}manifest.json">` : '';
 
   // eslint-disable-next-line @typescript-eslint/consistent-type-definitions
 
-  const cache = ops.staticCacheController ? new _Cache.default(ops.staticCacheSize) : null;
+  const cache = ops.staticCacheController ? new Cache(ops.staticCacheSize) : null;
   const CHUNK_GROUPS = readChunkGroupsJson(outputPath);
 
   // TODO: Look at it later.
@@ -286,7 +264,7 @@ function factory(webpackConfig, options) {
               res.send(buffer);
             } else {
               await new Promise((done, failed) => {
-                (0, _nodeZlib.brotliDecompress)(buffer, (error, html) => {
+                brotliDecompress(buffer, (error, html) => {
                   if (error) failed(error);else {
                     let h = html.toString();
                     if (!ops.noCsp) {
@@ -310,17 +288,12 @@ function factory(webpackConfig, options) {
         }
       }
       const brr = ops.beforeRender(req, sanitizedConfig);
-      const [{
+      const {
         configToInject,
         extraScripts,
         initialState
-      }, {
-        cipher,
-        iv
-      }] = await Promise.all([
-      // NOTE: Written this way to avoid triggering the "await-thenable"
-      // ESLint rule.
-      brr instanceof Promise ? brr : Promise.resolve(brr), prepareCipher(buildInfo.key)]);
+      } = await brr;
+      const [cipher, iv] = prepareCipher(buildInfo.key);
       let helmet;
 
       // Gets the mapping between code chunk names and their asset files.
@@ -328,9 +301,9 @@ function factory(webpackConfig, options) {
       // attached to the request (in dev mode), or from a file output during
       // the build (in prod mode).
       let chunkGroups;
-      const webpackStats = (0, _get.default)(res.locals, 'webpack.devMiddleware.stats');
+      const webpackStats = get(res.locals, 'webpack.devMiddleware.stats');
       if (webpackStats) {
-        chunkGroups = (0, _mapValues.default)(webpackStats.toJson({
+        chunkGroups = mapValues(webpackStats.toJson({
           all: false,
           chunkGroups: true
         }).namedChunkGroups, item => item.assets?.map(({
@@ -375,14 +348,14 @@ function factory(webpackConfig, options) {
           // TODO: prerenderToNodeStream has (abort) "signal" option,
           // and we should wire it up to the SSR timeout below.
           const helmetContext = {};
-          void (0, _static.prerenderToNodeStream)(/*#__PURE__*/(0, _jsxRuntime.jsx)(_reactGlobalState.GlobalStateProvider, {
+          void prerenderToNodeStream(/*#__PURE__*/_jsx(GlobalStateProvider, {
             initialState: ssrContext.state,
             ssrContext: ssrContext,
-            children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactRouter.StaticRouter, {
+            children: /*#__PURE__*/_jsx(StaticRouter, {
               location: req.url,
-              children: /*#__PURE__*/(0, _jsxRuntime.jsx)(_reactHelmet.HelmetProvider, {
+              children: /*#__PURE__*/_jsx(HelmetProvider, {
                 context: helmetContext,
-                children: /*#__PURE__*/(0, _jsxRuntime.jsx)(App2, {})
+                children: /*#__PURE__*/_jsx(App2, {})
               })
             })
           }), {
@@ -400,7 +373,7 @@ function factory(webpackConfig, options) {
           stream = await renderPass();
           if (!ssrContext.dirty) break;
           const timeout = ops.ssrTimeout + ssrStart - Date.now();
-          bailed = timeout <= 0 || !(await Promise.race([Promise.allSettled(ssrContext.pending), (0, _jsUtils.timer)(timeout).then(() => false)]));
+          bailed = timeout <= 0 || !(await Promise.race([Promise.allSettled(ssrContext.pending), timer(timeout).then(() => false)]));
           if (bailed) break;
         }
         let logMsg;
@@ -417,7 +390,7 @@ function factory(webpackConfig, options) {
           return;
         }
         await new Promise(ready => {
-          stream.pipe(new _nodeStream.Writable({
+          stream.pipe(new Writable({
             destroy: ready,
             write: (chunk, _, done) => {
               appHtmlMarkup += chunk.toString();
@@ -432,7 +405,7 @@ function factory(webpackConfig, options) {
        * contains decryption key and is able to decode it at the client side.
        * Hovewer, for a number of reasons, encryption of injected data is still
        * better than injection of a plain text. */
-      const payload = (0, _serializeJavascript.default)({
+      const payload = serializeJs({
         CHUNK_GROUPS: chunkGroups,
         CONFIG: configToInject ?? sanitizedConfig,
         ISTATE: ssrContext.state
@@ -440,9 +413,7 @@ function factory(webpackConfig, options) {
         ignoreFunction: true,
         unsafe: true
       });
-      cipher.update(_nodeForge.default.util.createBuffer(payload, 'utf8'));
-      cipher.finish();
-      const INJ = _nodeForge.default.util.encode64(`${iv}${cipher.output.data}`);
+      const INJ = Buffer.concat([iv, cipher.update(payload, 'utf8'), cipher.final()]).toString('base64');
       const chunkSet = new Set();
 
       // TODO: "main" chunk has to be added explicitly,
@@ -501,7 +472,7 @@ function factory(webpackConfig, options) {
         // Note: waiting for the caching to complete is not strictly necessary,
         // but it greately simplifies testing, and error reporting.
         await new Promise((done, failed) => {
-          (0, _nodeZlib.brotliCompress)(html, (error, buffer) => {
+          brotliCompress(html, (error, buffer) => {
             if (error) failed(error);else {
               const b = buffer;
               b.nonce = req.nonce;