@nocobase/app-server 0.11.1-alpha.5 → 2.0.0-beta.2

package/dist/session/provider.js

@@ -0,0 +1,69 @@
+import { randomBytes } from 'node:crypto';
+import { createSessionManager, createSessionMiddleware, } from '@nocobase/session';
+import { ServiceProvider, } from '@nocobase/service-provider';
+import { assertSecretIsNotPlaceholder } from '../config/placeholder-secret.js';
+import { defineHttpMiddleware, } from '../router/index.js';
+import { secretsServiceToken } from '../secrets/token.js';
+import { sessionManagerToken } from './token.js';
+export class SessionProvider extends ServiceProvider {
+    name = '@nocobase/app-server/session';
+    ephemeralSecret = randomBytes(32).toString('base64url');
+    register() {
+        this.app.container.singleton(sessionManagerToken, (container) => createSessionManager(resolveAppSessionConfig(this.app.config.get('session'), this.fallbackSecrets(container))));
+    }
+    async shutdown() {
+        await this.app.container.resolveIfCreated(sessionManagerToken)?.dispose();
+    }
+    /**
+     * The cookie keys used when `session.secret` is not set: derived from the secrets keys, current first, so adding a
+     * key keeps existing cookies readable. Without secrets keys, a key made up for this process.
+     */
+    fallbackSecrets(container) {
+        if (container.has(secretsServiceToken)) {
+            const secrets = container.resolve(secretsServiceToken);
+            if (secrets.ready) {
+                const [current, ...previous] = secrets.keyring(SESSION_COOKIE_PURPOSE);
+                return {
+                    secret: current.value,
+                    previousSecrets: previous.map((entry) => entry.value),
+                };
+            }
+        }
+        return { secret: this.ephemeralSecret, previousSecrets: [] };
+    }
+}
+/** The purpose session cookie keys are derived for from the secrets keys. */
+export const SESSION_COOKIE_PURPOSE = '@nocobase/session/cookie';
+export function resolveAppSessionConfig(configured, fallback) {
+    const { gcLottery: configuredGcLottery, secret, ...rest } = configured;
+    // Before the fallback below, because a placeholder is a value that was configured rather than one that was left
+    // unset, and silently replacing it with an ephemeral secret would hide the mistake rather than report it.
+    assertSecretIsNotPlaceholder(secret, 'session.secret');
+    const gcLottery = configuredGcLottery ?? { hits: 2, total: 100 };
+    if (gcLottery.hits > gcLottery.total) {
+        throw new Error('session.gcLottery.hits must not exceed session.gcLottery.total.');
+    }
+    const derived = typeof fallback === 'string'
+        ? { secret: fallback, previousSecrets: [] }
+        : fallback;
+    return {
+        ...rest,
+        ...(secret
+            ? { secret }
+            : {
+                secret: derived.secret,
+                previousSecrets: [
+                    ...derived.previousSecrets,
+                    ...(rest.previousSecrets ?? []),
+                ],
+            }),
+        gcLottery: [gcLottery.hits, gcLottery.total],
+    };
+}
+export const sessionHttpMiddleware = defineHttpMiddleware({
+    name: '@nocobase/app-server/session/http',
+    register(router, app) {
+        router.use('*', createSessionMiddleware(app.container.resolve(sessionManagerToken)));
+    },
+});
+//# sourceMappingURL=provider.js.map

package/dist/session/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/session/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAE/E,OAAO,EACL,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,OAAO,eAAgB,SAAQ,eAAqC;IACxD,IAAI,GAAW,8BAA8B,CAAC;IAC7C,eAAe,GAC9B,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAExB,QAAQ;QACtB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,EAAE,CAC9D,oBAAoB,CAClB,uBAAuB,CACrB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAwB,SAAS,CAAE,EACtD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAChC,CACF,CACF,CAAC;IACJ,CAAC;IAEe,KAAK,CAAC,QAAQ;QAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC5E,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,SAA0B;QAChD,IAAI,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;gBACvE,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,KAAK;oBACrB,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;iBACtD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAQjE,MAAM,UAAU,uBAAuB,CACrC,UAAiC,EACjC,QAAoC;IAEpC,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC;IACvE,gHAAgH;IAChH,0GAA0G;IAC1G,4BAA4B,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,mBAAmB,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACjE,IAAI,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,QAAQ;QAC1B,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE;QAC3C,CAAC,CAAC,QAAQ,CAAC;IACf,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,MAAM;YACR,CAAC,CAAC,EAAE,MAAM,EAAE;YACZ,CAAC,CAAC;gBACE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe,EAAE;oBACf,GAAG,OAAO,CAAC,eAAe;oBAC1B,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;iBAChC;aACF,CAAC;QACN,SAAS,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAChC,oBAAoB,CAAC;IACnB,IAAI,EAAE,mCAAmC;IACzC,QAAQ,CAAC,MAAY,EAAE,GAAyB;QAC9C,MAAM,CAAC,GAAG,CACR,GAAG,EACH,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/session/token.d.ts

@@ -0,0 +1,4 @@
+import { type ServiceToken } from '@nocobase/service-provider';
+import type { NocoBaseSessionManager } from '@nocobase/session';
+export declare const sessionManagerToken: ServiceToken<NocoBaseSessionManager>;
+//# sourceMappingURL=token.d.ts.map

package/dist/session/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/session/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,eAAO,MAAM,mBAAmB,EAAE,YAAY,CAAC,sBAAsB,CACI,CAAC"}

package/dist/session/token.js

@@ -0,0 +1,3 @@
+import { createServiceToken, } from '@nocobase/service-provider';
+export const sessionManagerToken = createServiceToken('@nocobase/session/manager');
+//# sourceMappingURL=token.js.map

package/dist/session/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/session/token.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,GAEnB,MAAM,4BAA4B,CAAC;AAIpC,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kBAAkB,CAAyB,2BAA2B,CAAC,CAAC"}

package/dist/spa/config.d.ts

@@ -0,0 +1,5 @@
+export interface SpaConfig {
+    readonly indexPath: string;
+    readonly viteDevUrl?: string | null;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/spa/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/spa/config.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC"}

package/dist/spa/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/dist/spa/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/spa/config.ts"],"names":[],"mappings":""}

package/dist/spa/content-types.d.ts

@@ -0,0 +1,2 @@
+export declare function contentTypeFor(filePath: string): string;
+//# sourceMappingURL=content-types.d.ts.map

package/dist/spa/content-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-types.d.ts","sourceRoot":"","sources":["../../src/spa/content-types.ts"],"names":[],"mappings":"AAsBA,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKvD"}

package/dist/spa/content-types.js

@@ -0,0 +1,25 @@
+import path from 'node:path';
+const contentTypes = {
+    '.css': 'text/css; charset=utf-8',
+    '.gif': 'image/gif',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.jpeg': 'image/jpeg',
+    '.jpg': 'image/jpeg',
+    '.js': 'text/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.wasm': 'application/wasm',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+};
+export function contentTypeFor(filePath) {
+    return (contentTypes[path.extname(filePath).toLowerCase()] ??
+        'application/octet-stream');
+}
+//# sourceMappingURL=content-types.js.map

package/dist/spa/content-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-types.js","sourceRoot":"","sources":["../../src/spa/content-types.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,iCAAiC;IACzC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,0BAA0B,CAC3B,CAAC;AACJ,CAAC"}

package/dist/spa/index.d.ts

@@ -0,0 +1,9 @@
+export * from './content-types.js';
+export * from './config.js';
+export * from './routes.js';
+export * from './provider.js';
+export * from './runtime-html.js';
+export * from './serve-index.js';
+export * from './static-assets.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/spa/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spa/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC"}

package/dist/spa/index.js

@@ -0,0 +1,9 @@
+export * from './content-types.js';
+export * from './config.js';
+export * from './routes.js';
+export * from './provider.js';
+export * from './runtime-html.js';
+export * from './serve-index.js';
+export * from './static-assets.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/spa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/spa/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC"}

package/dist/spa/provider.d.ts

@@ -0,0 +1,13 @@
+import { type AppRootRouteContribution } from '../router/index.js';
+import { type AppConfigAccessor } from '../config/index.js';
+export interface SpaRoutesApplication {
+    readonly config: AppConfigAccessor;
+    readonly mode: 'standalone' | 'embedded';
+    readonly publicBasePath: string;
+    /** Where the application's `package.json` is, read for the name and version the page shows. */
+    readonly paths: {
+        readonly rootDir: string;
+    };
+}
+export declare const spaRootRoutes: AppRootRouteContribution<SpaRoutesApplication>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/spa/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/spa/provider.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAM5B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED,eAAO,MAAM,aAAa,EAAE,wBAAwB,CAAC,oBAAoB,CAiCrE,CAAC"}

package/dist/spa/provider.js

@@ -0,0 +1,90 @@
+import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { Hono } from 'hono';
+import { defineRootRoutes, } from '../router/index.js';
+import { registerSpaRoutes } from './routes.js';
+import { createMountedOriginProxyHandler } from '../proxy/index.js';
+import { joinBasePath } from '../support/index.js';
+export const spaRootRoutes = defineRootRoutes((app) => {
+    const router = new Hono();
+    const identity = app.config.get('app');
+    const spa = app.config.get('spa');
+    const apiUrl = joinBasePath(app.publicBasePath, '/api');
+    const appPackage = readAppPackage(app.paths.rootDir);
+    registerSpaRoutes(router, {
+        basePath: identity.internalBasePath,
+        publicBasePath: app.publicBasePath,
+        handler: app.mode === 'standalone' && spa.viteDevUrl
+            ? createMountedOriginProxyHandler(new URL(spa.viteDevUrl), {
+                publicBasePath: app.publicBasePath,
+                unavailableMessage: 'Vite dev server is unavailable.',
+            })
+            : undefined,
+        indexPath: spa.indexPath,
+        clientConfig: createClientConfig(app.config.get('client') ?? {}, { appBasePath: app.publicBasePath, apiUrl }),
+        // Computed per page so a configuration reload reaches the next page load.
+        publicConfig: () => createPublicConfig((app.config.publicValues?.() ?? {}), 
+        // Read by path rather than through the definition, so these routes stay usable in an application composed
+        // without the i18n config registered. The browser falls back to its own default when nothing is published.
+        app.config.get('i18n.defaultLocale'), appPackage),
+    });
+    return router;
+});
+function createClientConfig(configured, runtime) {
+    return {
+        ...configured,
+        app: {
+            ...readConfigSection(configured.app),
+            basePath: runtime.appBasePath,
+        },
+        api: {
+            ...readConfigSection(configured.api),
+            baseURL: runtime.apiUrl,
+        },
+    };
+}
+/**
+ * What sections publish through `public`, plus what the runtime itself publishes. The browser starts in the same
+ * `i18n.defaultLocale` the server does, rather than a separate client-side copy that could disagree with it, and shows
+ * the application's `displayName` and `version` from its own `package.json` rather than values baked in at build time.
+ */
+function createPublicConfig(published, defaultLocale, appPackage) {
+    const withLocale = defaultLocale === undefined
+        ? published
+        : {
+            ...published,
+            i18n: { ...readConfigSection(published.i18n), defaultLocale },
+        };
+    if (!appPackage.displayName && !appPackage.version)
+        return withLocale;
+    return {
+        ...withLocale,
+        app: {
+            ...readConfigSection(withLocale.app),
+            ...(appPackage.displayName
+                ? { displayName: appPackage.displayName }
+                : {}),
+            ...(appPackage.version ? { version: appPackage.version } : {}),
+        },
+    };
+}
+function readAppPackage(rootDir) {
+    const packagePath = path.join(rootDir, 'package.json');
+    if (!existsSync(packagePath))
+        return {};
+    const value = JSON.parse(readFileSync(packagePath, 'utf8'));
+    if (typeof value !== 'object' || value === null)
+        return {};
+    const { displayName, version } = value;
+    return {
+        ...(typeof displayName === 'string' ? { displayName } : {}),
+        ...(typeof version === 'string' ? { version } : {}),
+    };
+}
+function readConfigSection(value) {
+    return isClientConfigMap(value) ? value : {};
+}
+function isClientConfigMap(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=provider.js.map

package/dist/spa/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/spa/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EACL,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAMhD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAWnD,MAAM,CAAC,MAAM,aAAa,GACxB,gBAAgB,CAAC,CAAC,GAAyB,EAAQ,EAAE;IACnD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAoB,KAAK,CAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAY,KAAK,CAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,iBAAiB,CAAC,MAAM,EAAE;QACxB,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;QACnC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EACL,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,UAAU;YACzC,CAAC,CAAC,+BAA+B,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;gBACvD,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,kBAAkB,EAAE,iCAAiC;aACtD,CAAC;YACJ,CAAC,CAAC,SAAS;QACf,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,YAAY,EAAE,kBAAkB,CAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAqB,QAAQ,CAAC,IAAI,EAAE,EAClD,EAAE,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,CAC5C;QACD,0EAA0E;QAC1E,YAAY,EAAE,GAAG,EAAE,CACjB,kBAAkB,CAChB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAuB;QACzD,0GAA0G;QAC1G,2GAA2G;QAC3G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAS,oBAAoB,CAAC,EAC5C,UAAU,CACX;KACJ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,SAAS,kBAAkB,CACzB,UAA8B,EAC9B,OAAkE;IAElE,OAAO;QACL,GAAG,UAAU;QACb,GAAG,EAAE;YACH,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC;YACpC,QAAQ,EAAE,OAAO,CAAC,WAAW;SAC9B;QACD,GAAG,EAAE;YACH,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,MAAM;SACxB;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,SAA6B,EAC7B,aAAiC,EACjC,UAA8B;IAE9B,MAAM,UAAU,GACd,aAAa,KAAK,SAAS;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,GAAG,SAAS;YACZ,IAAI,EAAE,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE;SAC9D,CAAC;IACR,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IACtE,OAAO;QACL,GAAG,UAAU;QACb,GAAG,EAAE;YACH,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC;YACpC,GAAG,CAAC,UAAU,CAAC,WAAW;gBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAY,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAgC,CAAC;IAClE,OAAO;QACL,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA6C;IAE7C,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA6C;IAE7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/spa/routes.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { RegisterSpaRoutesOptions } from './types.js';
+export declare function registerSpaRoutes(router: Hono, options: RegisterSpaRoutesOptions): void;
+//# sourceMappingURL=routes.d.ts.map

package/dist/spa/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/spa/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAOjC,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,YAAY,CAAC;AAE/E,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,IAAI,EACZ,OAAO,EAAE,wBAAwB,GAChC,IAAI,CA8CN"}

package/dist/spa/routes.js

@@ -0,0 +1,96 @@
+import path from 'node:path';
+import { joinBasePath, normalizeBasePath } from '../support/paths.js';
+import { injectSpaRuntimeHtml } from './runtime-html.js';
+import { serveSpaIndex } from './serve-index.js';
+import { serveSpaAsset } from './static-assets.js';
+export function registerSpaRoutes(router, options) {
+    const basePath = normalizeBasePath(options.basePath);
+    const handler = options.handler;
+    if (handler) {
+        router.all(basePath || '/', (context) => serveSpaHandler(context.req.raw, options));
+        router.all(`${basePath}/*`, (context) => serveSpaHandler(context.req.raw, options));
+        return;
+    }
+    const rootDir = path.dirname(options.indexPath);
+    const assetsRoutePath = joinBasePath(basePath, options.assetsPath ?? '/assets');
+    router.all(assetsRoutePath, (context) => serveSpaAsset(context.req.raw, {
+        rootDir,
+        basePath,
+    }));
+    router.all(`${assetsRoutePath}/*`, (context) => serveSpaAsset(context.req.raw, {
+        rootDir,
+        basePath,
+    }));
+    router.get(basePath || '/', () => serveSpaIndex(options.indexPath, {
+        clientConfig: options.clientConfig,
+        publicConfig: resolvePublicConfig(options),
+        publicBasePath: options.publicBasePath,
+    }));
+    router.get(`${basePath}/*`, () => serveSpaIndex(options.indexPath, {
+        clientConfig: options.clientConfig,
+        publicConfig: resolvePublicConfig(options),
+        publicBasePath: options.publicBasePath,
+    }));
+}
+async function serveSpaHandler(request, options) {
+    let upstreamRequest = request;
+    if (isSpaPageRequest(request, options)) {
+        // The upstream validators describe HTML before runtime configuration is injected.
+        const headers = new Headers(request.headers);
+        headers.delete('if-none-match');
+        headers.delete('if-modified-since');
+        upstreamRequest = new Request(request, { headers });
+    }
+    const response = await options.handler?.(upstreamRequest);
+    if (!response) {
+        throw new Error('SPA handler is not configured.');
+    }
+    const contentType = response.headers.get('content-type')?.toLowerCase();
+    if (!contentType?.includes('text/html')) {
+        return response;
+    }
+    const headers = new Headers(response.headers);
+    headers.delete('content-length');
+    headers.delete('etag');
+    headers.delete('last-modified');
+    headers.set('cache-control', 'no-cache');
+    return new Response(request.method === 'HEAD'
+        ? null
+        : injectSpaRuntimeHtml(await response.text(), {
+            clientConfig: options.clientConfig,
+            publicConfig: resolvePublicConfig(options),
+            publicBasePath: options.publicBasePath,
+        }), { headers, status: response.status, statusText: response.statusText });
+}
+function isSpaPageRequest(request, options) {
+    if (request.method !== 'GET' && request.method !== 'HEAD')
+        return false;
+    const destination = request.headers.get('sec-fetch-dest');
+    if (destination &&
+        !['document', 'iframe', 'frame', 'empty'].includes(destination)) {
+        return false;
+    }
+    const url = new URL(request.url);
+    // HTML can also be imported as a Vite module; those requests keep resource caching.
+    if (['html-proxy', 'import', 'raw', 'url', 'worker', 'sharedworker'].some((name) => url.searchParams.has(name)))
+        return false;
+    const basePath = normalizeBasePath(options.basePath);
+    const pathname = url.pathname.slice(basePath.length) || '/';
+    if (/^\/(?:@vite|@id|@fs)(?:\/|$)|^\/@react-refresh(?:\/|$)/u.test(pathname)) {
+        return false;
+    }
+    const assetsPath = normalizeBasePath(options.assetsPath ?? '/assets');
+    if (pathname === assetsPath || pathname.startsWith(`${assetsPath}/`))
+        return false;
+    const extension = path.posix.extname(pathname).toLowerCase();
+    if (extension && extension !== '.html')
+        return false;
+    const accept = request.headers.get('accept')?.toLowerCase();
+    return !accept || accept.includes('text/html') || accept.includes('*/*');
+}
+function resolvePublicConfig(options) {
+    return typeof options.publicConfig === 'function'
+        ? options.publicConfig()
+        : options.publicConfig;
+}
+//# sourceMappingURL=routes.js.map

package/dist/spa/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/spa/routes.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,MAAM,UAAU,iBAAiB,CAC/B,MAAY,EACZ,OAAiC;IAEjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CACtC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CACtC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAC1C,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,YAAY,CAClC,QAAQ,EACR,OAAO,CAAC,UAAU,IAAI,SAAS,CAChC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CACtC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;QAC7B,OAAO;QACP,QAAQ;KACT,CAAC,CACH,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC7C,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;QAC7B,OAAO;QACP,QAAQ;KACT,CAAC,CACH,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,EAAE,GAAG,EAAE,CAC/B,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,EAAE,GAAG,EAAE,CAC/B,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE;QAC/B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAgB,EAChB,OAAiC;IAEjC,IAAI,eAAe,GAAG,OAAO,CAAC;IAC9B,IAAI,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,kFAAkF;QAClF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,eAAe,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;IACxE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACzC,OAAO,IAAI,QAAQ,CACjB,OAAO,CAAC,MAAM,KAAK,MAAM;QACvB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,oBAAoB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC;YAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,EACN,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAgB,EAChB,OAAiC;IAEjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IACE,WAAW;QACX,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC/D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,oFAAoF;IACpF,IACE,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,IAAI,CACnE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CACrC;QAED,OAAO,KAAK,CAAC;IACf,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC5D,IACE,yDAAyD,CAAC,IAAI,CAAC,QAAQ,CAAC,EACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,SAAS,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5D,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAiC;IAEjC,OAAO,OAAO,OAAO,CAAC,YAAY,KAAK,UAAU;QAC/C,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE;QACxB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;AAC3B,CAAC"}

package/dist/spa/runtime-html.d.ts

@@ -0,0 +1,14 @@
+import type { SpaClientConfigMap } from './types.js';
+/**
+ * Renders what the browser needs into the page: the `lang` attribute, the page's relative URLs pointed at the mount
+ * path, and the client configuration data block, ahead of the entry module so that module-level code can already read it. Nothing
+ * is put on `window`: the configuration block is the client's only source of runtime values.
+ */
+export declare function injectSpaRuntimeHtml(html: string, options?: {
+    readonly clientConfig?: SpaClientConfigMap;
+    readonly publicConfig?: SpaClientConfigMap;
+    /** The path the application is mounted at, such as `/crm`, or `''` at the origin root. */
+    readonly publicBasePath?: string;
+}): string;
+export declare function escapeScriptJson(value: string): string;
+//# sourceMappingURL=runtime-html.d.ts.map

package/dist/spa/runtime-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-html.d.ts","sourceRoot":"","sources":["../../src/spa/runtime-html.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMrD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAC3C,0FAA0F;IAC1F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC7B,GACL,MAAM,CAqBR;AAyDD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtD"}

package/dist/spa/runtime-html.js

@@ -0,0 +1,85 @@
+const runtimeConfigElementId = 'nocobase-runtime-config';
+const defaultHtmlLocale = 'en-US';
+const defaultHtmlLocaleMarker = `<html lang="${defaultHtmlLocale}">`;
+/**
+ * Renders what the browser needs into the page: the `lang` attribute, the page's relative URLs pointed at the mount
+ * path, and the client configuration data block, ahead of the entry module so that module-level code can already read it. Nothing
+ * is put on `window`: the configuration block is the client's only source of runtime values.
+ */
+export function injectSpaRuntimeHtml(html, options = {}) {
+    const withUrls = options.publicBasePath === undefined
+        ? html
+        : resolveRelativeUrls(html, options.publicBasePath);
+    // SPA templates provide this stable pre-runtime marker. The client keeps `lang` synchronized after it starts.
+    const withLocale = withUrls.replace(defaultHtmlLocaleMarker, `<html lang="${escapeHtmlAttribute(readHtmlLocale(options.publicConfig ?? options.clientConfig))}">`);
+    const cleanHtml = stripExistingRuntimeConfig(withLocale);
+    const configHtml = createSpaRuntimeConfigHtml(options.clientConfig ?? {}, options.publicConfig);
+    const moduleScriptPattern = /<script\s+[^>]*type=["']module["'][^>]*>/i;
+    const moduleScriptMatch = cleanHtml.match(moduleScriptPattern);
+    if (moduleScriptMatch?.index === undefined) {
+        return `${cleanHtml}\n${configHtml}`;
+    }
+    return `${cleanHtml.slice(0, moduleScriptMatch.index)}${configHtml}${cleanHtml.slice(moduleScriptMatch.index)}`;
+}
+/**
+ * A build uses a relative base, so `index.html` names everything it references as `./…`: its entry chunk and
+ * stylesheet under `./assets/`, and every file from `public/` at the path it has there, such as `./favicon.svg`. The
+ * page is served for every route under the mount path, and against a deep route such as `/crm/admin/users` a
+ * relative URL resolves to `/crm/admin/…`, so every `./` URL is pointed at the mount path here — `meta` content such
+ * as `og:image` included, which Vite writes the same way. JavaScript chunks and CSS resolve against their own URLs and
+ * need nothing.
+ */
+function resolveRelativeUrls(html, publicBasePath) {
+    const trimmed = publicBasePath.trim().replace(/^\/+|\/+$/g, '');
+    const prefix = trimmed ? `/${trimmed}/` : '/';
+    return html.replace(/(\s(?:src|href|content)\s*=\s*["'])\.\//giu, (_match, attribute) => `${attribute}${prefix}`);
+}
+function readHtmlLocale(clientConfig) {
+    const i18nConfig = clientConfig?.i18n;
+    if (!isClientConfigMap(i18nConfig)) {
+        return defaultHtmlLocale;
+    }
+    const configuredLocale = i18nConfig.defaultLocale;
+    if (typeof configuredLocale !== 'string') {
+        return defaultHtmlLocale;
+    }
+    const locale = configuredLocale.trim();
+    if (!locale) {
+        return defaultHtmlLocale;
+    }
+    try {
+        Intl.getCanonicalLocales(locale);
+        return locale;
+    }
+    catch {
+        return defaultHtmlLocale;
+    }
+}
+function isClientConfigMap(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function escapeHtmlAttribute(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/"/g, '&quot;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+export function escapeScriptJson(value) {
+    return value
+        .replace(/</g, '\\u003C')
+        .replace(/>/g, '\\u003E')
+        .replace(/&/g, '\\u0026')
+        .replace(/\u2028/g, '\\u2028')
+        .replace(/\u2029/g, '\\u2029');
+}
+function stripExistingRuntimeConfig(html) {
+    const pattern = new RegExp(`<script\\s+[^>]*id=["']${runtimeConfigElementId}["'][^>]*>[\\s\\S]*?<\\/script>\\s*`, 'gi');
+    return html.replace(pattern, '');
+}
+function createSpaRuntimeConfigHtml(config, publicConfig) {
+    return `<script id="${runtimeConfigElementId}" type="application/json">${escapeScriptJson(JSON.stringify(publicConfig === undefined
+        ? { version: 1, config }
+        : { version: 1, config, public: publicConfig }))}</script>\n`;
+}
+//# sourceMappingURL=runtime-html.js.map

package/dist/spa/runtime-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-html.js","sourceRoot":"","sources":["../../src/spa/runtime-html.ts"],"names":[],"mappings":"AAEA,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,uBAAuB,GAAG,eAAe,iBAAiB,IAAI,CAAC;AAErE;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,UAKI,EAAE;IAEN,MAAM,QAAQ,GACZ,OAAO,CAAC,cAAc,KAAK,SAAS;QAClC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,8GAA8G;IAC9G,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CACjC,uBAAuB,EACvB,eAAe,mBAAmB,CAAC,cAAc,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CACrG,CAAC;IACF,MAAM,SAAS,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,0BAA0B,CAC3C,OAAO,CAAC,YAAY,IAAI,EAAE,EAC1B,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,MAAM,mBAAmB,GAAG,2CAA2C,CAAC;IACxE,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC/D,IAAI,iBAAiB,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,GAAG,SAAS,KAAK,UAAU,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;AAClH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,cAAsB;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CACjB,4CAA4C,EAC5C,CAAC,MAAM,EAAE,SAAiB,EAAE,EAAE,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,YAA4C;IAClE,MAAM,UAAU,GAAG,YAAY,EAAE,IAAI,CAAC;IACtC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,aAAa,CAAC;IAClD,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA6C;IAE7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,0BAA0B,sBAAsB,qCAAqC,EACrF,IAAI,CACL,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA0B,EAC1B,YAA4C;IAE5C,OAAO,eAAe,sBAAsB,6BAA6B,gBAAgB,CACvF,IAAI,CAAC,SAAS,CACZ,YAAY,KAAK,SAAS;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE;QACxB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CACjD,CACF,aAAa,CAAC;AACjB,CAAC"}

package/dist/spa/serve-index.d.ts

@@ -0,0 +1,9 @@
+import type { SpaClientConfigMap } from './types.js';
+export interface ServeSpaIndexOptions {
+    readonly clientConfig?: SpaClientConfigMap;
+    readonly publicConfig?: SpaClientConfigMap;
+    /** The path the application is mounted at, which the page's relative URLs are resolved against. */
+    readonly publicBasePath?: string;
+}
+export declare function serveSpaIndex(indexPath: string, options?: ServeSpaIndexOptions): Promise<Response>;
+//# sourceMappingURL=serve-index.d.ts.map

package/dist/spa/serve-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-index.d.ts","sourceRoot":"","sources":["../../src/spa/serve-index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAC3C,mGAAmG;IACnG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,QAAQ,CAAC,CAQnB"}

package/dist/spa/serve-index.js

@@ -0,0 +1,12 @@
+import { readFile } from 'node:fs/promises';
+import { injectSpaRuntimeHtml } from './runtime-html.js';
+export async function serveSpaIndex(indexPath, options = {}) {
+    const html = await readFile(indexPath, 'utf8');
+    return new Response(injectSpaRuntimeHtml(html, options), {
+        headers: {
+            'cache-control': 'no-cache',
+            'content-type': 'text/html; charset=utf-8',
+        },
+    });
+}
+//# sourceMappingURL=serve-index.js.map

package/dist/spa/serve-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-index.js","sourceRoot":"","sources":["../../src/spa/serve-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAUzD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,UAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,IAAI,QAAQ,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QACvD,OAAO,EAAE;YACP,eAAe,EAAE,UAAU;YAC3B,cAAc,EAAE,0BAA0B;SAC3C;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/spa/static-assets.d.ts

@@ -0,0 +1,7 @@
+export interface ServeSpaAssetOptions {
+    rootDir: string;
+    basePath: string;
+    cacheControl?: string;
+}
+export declare function serveSpaAsset(request: Request, options: ServeSpaAssetOptions): Promise<Response>;
+//# sourceMappingURL=static-assets.d.ts.map

package/dist/spa/static-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-assets.d.ts","sourceRoot":"","sources":["../../src/spa/static-assets.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAqBnB"}