@rsbuild/core 0.7.2 → 0.7.4

package/dist/index.cjs

@@ -114,19 +114,53 @@ var init_format = __esm({
 });
 
 // src/constants.ts
-var import_node_path, PLUGIN_SWC_NAME, PLUGIN_CSS_NAME, LOADER_PATH, STATIC_PATH, COMPILED_PATH, TS_CONFIG_FILE, HTML_REGEX, CSS_REGEX;
+var import_node_path, ROOT_DIST_DIR, HTML_DIST_DIR, SERVER_DIST_DIR, SERVICE_WORKER_DIST_DIR, JS_DIST_DIR, CSS_DIST_DIR, SVG_DIST_DIR, FONT_DIST_DIR, WASM_DIST_DIR, IMAGE_DIST_DIR, MEDIA_DIST_DIR, LOADER_PATH, STATIC_PATH, COMPILED_PATH, TS_CONFIG_FILE, DEFAULT_PORT, DEFAULT_DATA_URL_SIZE, DEFAULT_MOUNT_ID, DEFAULT_DEV_HOST, HTML_REGEX, CSS_REGEX, PLUGIN_SWC_NAME, PLUGIN_CSS_NAME, FONT_EXTENSIONS, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, AUDIO_EXTENSIONS;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
     import_node_path = require("path");
-    PLUGIN_SWC_NAME = "rsbuild:swc";
-    PLUGIN_CSS_NAME = "rsbuild:css";
+    ROOT_DIST_DIR = "dist";
+    HTML_DIST_DIR = "/";
+    SERVER_DIST_DIR = "server";
+    SERVICE_WORKER_DIST_DIR = "worker";
+    JS_DIST_DIR = "static/js";
+    CSS_DIST_DIR = "static/css";
+    SVG_DIST_DIR = "static/svg";
+    FONT_DIST_DIR = "static/font";
+    WASM_DIST_DIR = "static/wasm";
+    IMAGE_DIST_DIR = "static/image";
+    MEDIA_DIST_DIR = "static/media";
     LOADER_PATH = (0, import_node_path.join)(__dirname);
     STATIC_PATH = (0, import_node_path.join)(__dirname, "../static");
     COMPILED_PATH = (0, import_node_path.join)(__dirname, "../compiled");
     TS_CONFIG_FILE = "tsconfig.json";
+    DEFAULT_PORT = 3e3;
+    DEFAULT_DATA_URL_SIZE = 4096;
+    DEFAULT_MOUNT_ID = "root";
+    DEFAULT_DEV_HOST = "0.0.0.0";
     HTML_REGEX = /\.html$/;
     CSS_REGEX = /\.css$/;
+    PLUGIN_SWC_NAME = "rsbuild:swc";
+    PLUGIN_CSS_NAME = "rsbuild:css";
+    FONT_EXTENSIONS = ["woff", "woff2", "eot", "ttf", "otf", "ttc"];
+    IMAGE_EXTENSIONS = [
+      "png",
+      "jpg",
+      "jpeg",
+      "pjpeg",
+      "pjp",
+      "gif",
+      "bmp",
+      "webp",
+      "ico",
+      "apng",
+      "avif",
+      "tif",
+      "tiff",
+      "jfif"
+    ];
+    VIDEO_EXTENSIONS = ["mp4", "webm", "ogg", "mov"];
+    AUDIO_EXTENSIONS = ["mp3", "wav", "flac", "aac", "m4a", "opus"];
   }
 });
 
@@ -355,6 +389,7 @@ var init_mergeConfig = __esm({
       "output.cssModules.auto",
       "output.targets",
       "output.emitAssets",
+      "server.open",
       "server.printUrls",
       "dev.startUrl",
       "provider"
@@ -541,6 +576,55 @@ async function loadConfig({
     throw err;
   }
 }
+async function outputInspectConfigFiles({
+  rsbuildConfig,
+  rawRsbuildConfig,
+  bundlerConfigs,
+  inspectOptions,
+  configType
+}) {
+  const { outputPath } = inspectOptions;
+  const files = [
+    {
+      path: (0, import_node_path4.join)(outputPath, "rsbuild.config.mjs"),
+      label: "Rsbuild Config",
+      content: rawRsbuildConfig
+    },
+    ...bundlerConfigs.map((content, index) => {
+      const suffix = rsbuildConfig.output.targets[index];
+      const outputFile = `${configType}.config.${suffix}.mjs`;
+      let outputFilePath = (0, import_node_path4.join)(outputPath, outputFile);
+      if (import_shared5.fse.existsSync(outputFilePath)) {
+        outputFilePath = outputFilePath.replace(/\.mjs$/, `.${Date.now()}.mjs`);
+      }
+      return {
+        path: outputFilePath,
+        label: `${(0, import_shared5.upperFirst)(configType)} Config (${suffix})`,
+        content
+      };
+    })
+  ];
+  await Promise.all(
+    files.map(
+      (item) => import_shared5.fse.outputFile(item.path, `export default ${item.content}`)
+    )
+  );
+  const fileInfos = files.map(
+    (item) => `  - ${import_shared5.color.bold(import_shared5.color.yellow(item.label))}: ${import_shared5.color.underline(
+      item.path
+    )}`
+  ).join("\n");
+  import_shared5.logger.success(
+    `Inspect config succeed, open following files to view the content: 
+
+${fileInfos}
+`
+  );
+}
+async function stringifyConfig(config, verbose) {
+  const stringify = import_shared5.RspackChain.toString;
+  return stringify(config, { verbose });
+}
 var import_node_fs, import_node_path4, import_shared5, getDefaultDevConfig, getDefaultServerConfig, getDefaultSourceConfig, getDefaultHtmlConfig, getDefaultSecurityConfig, getDefaultToolsConfig, getDefaultPerformanceConfig, getDefaultOutputConfig, createDefaultConfig, withDefaultConfig, normalizeConfig, resolveConfigPath;
 var init_config = __esm({
   "src/config.ts"() {
@@ -562,8 +646,9 @@ var init_config = __esm({
       }
     });
     getDefaultServerConfig = () => ({
-      port: import_shared5.DEFAULT_PORT,
-      host: import_shared5.DEFAULT_DEV_HOST,
+      port: DEFAULT_PORT,
+      host: DEFAULT_DEV_HOST,
+      open: false,
       htmlFallback: "index",
       compress: true,
       printUrls: true,
@@ -590,13 +675,16 @@ var init_config = __esm({
       },
       title: "Rsbuild App",
       inject: "head",
-      mountId: import_shared5.DEFAULT_MOUNT_ID,
+      mountId: DEFAULT_MOUNT_ID,
       crossorigin: false,
       outputStructure: "flat",
       scriptLoading: "defer"
     });
     getDefaultSecurityConfig = () => ({
-      nonce: ""
+      nonce: "",
+      sri: {
+        enable: false
+      }
     });
     getDefaultToolsConfig = () => ({
       cssExtract: {
@@ -619,27 +707,27 @@ var init_config = __esm({
     getDefaultOutputConfig = () => ({
       targets: ["web"],
       distPath: {
-        root: import_shared5.ROOT_DIST_DIR,
-        js: import_shared5.JS_DIST_DIR,
-        css: import_shared5.CSS_DIST_DIR,
-        svg: import_shared5.SVG_DIST_DIR,
-        font: import_shared5.FONT_DIST_DIR,
-        html: import_shared5.HTML_DIST_DIR,
-        wasm: import_shared5.WASM_DIST_DIR,
-        image: import_shared5.IMAGE_DIST_DIR,
-        media: import_shared5.MEDIA_DIST_DIR,
-        server: import_shared5.SERVER_DIST_DIR,
-        worker: import_shared5.SERVICE_WORKER_DIST_DIR
+        root: ROOT_DIST_DIR,
+        js: JS_DIST_DIR,
+        css: CSS_DIST_DIR,
+        svg: SVG_DIST_DIR,
+        font: FONT_DIST_DIR,
+        html: HTML_DIST_DIR,
+        wasm: WASM_DIST_DIR,
+        image: IMAGE_DIST_DIR,
+        media: MEDIA_DIST_DIR,
+        server: SERVER_DIST_DIR,
+        worker: SERVICE_WORKER_DIST_DIR
       },
       assetPrefix: import_shared5.DEFAULT_ASSET_PREFIX,
       filename: {},
       charset: "ascii",
       polyfill: "usage",
       dataUriLimit: {
-        svg: import_shared5.DEFAULT_DATA_URL_SIZE,
-        font: import_shared5.DEFAULT_DATA_URL_SIZE,
-        image: import_shared5.DEFAULT_DATA_URL_SIZE,
-        media: import_shared5.DEFAULT_DATA_URL_SIZE
+        svg: DEFAULT_DATA_URL_SIZE,
+        font: DEFAULT_DATA_URL_SIZE,
+        image: DEFAULT_DATA_URL_SIZE,
+        media: DEFAULT_DATA_URL_SIZE
       },
       legalComments: "linked",
       injectStyles: false,
@@ -765,15 +853,15 @@ function loadEnv({
     publicVars
   };
 }
-var import_node_fs2, import_node_path5, import_shared6, import_dotenv_expand, import_dotenv;
+var import_node_fs2, import_node_path5, import_shared6, import_dotenv, import_dotenv_expand;
 var init_loadEnv = __esm({
   "src/loadEnv.ts"() {
     "use strict";
     import_node_fs2 = __toESM(require("fs"));
     import_node_path5 = require("path");
     import_shared6 = require("@rsbuild/shared");
-    import_dotenv_expand = require("../compiled/dotenv-expand/index.js");
     import_dotenv = require("../compiled/dotenv/index.js");
+    import_dotenv_expand = require("../compiled/dotenv-expand/index.js");
     init_helpers();
   }
 });
@@ -849,11 +937,10 @@ function getEntryObject(config, target) {
   if (!config.source?.entry) {
     return {};
   }
-  return (0, import_shared8.mergeChainedOptions)({
-    defaults: {},
-    options: config.source?.entry,
-    utils: { target },
-    useObjectParam: true
+  return (0, import_shared8.reduceConfigsMergeContext)({
+    initial: {},
+    config: config.source?.entry,
+    ctx: { target }
   });
 }
 var import_shared8, pluginEntry;
@@ -916,7 +1003,7 @@ async function createContextByConfig(options, bundlerType, config = {}) {
   return {
     entry: getEntryObject(config, "web"),
     targets: config.output?.targets || [],
-    version: "0.7.2",
+    version: "0.7.4",
     rootPath,
     distPath,
     cachePath,
@@ -1333,13 +1420,13 @@ async function inspectConfig({
     ...context.normalizedConfig,
     pluginNames: pluginManager.getPlugins().map((p) => p.name)
   };
-  const rawRsbuildConfig = await (0, import_shared12.stringifyConfig)(
+  const rawRsbuildConfig = await stringifyConfig(
     rsbuildDebugConfig,
     inspectOptions.verbose
   );
   const rawBundlerConfigs = await Promise.all(
     rspackConfigs.map(
-      (config) => (0, import_shared12.stringifyConfig)(config, inspectOptions.verbose)
+      (config) => stringifyConfig(config, inspectOptions.verbose)
     )
   );
   let outputPath = inspectOptions.outputPath || context.distPath;
@@ -1347,7 +1434,7 @@ async function inspectConfig({
     outputPath = (0, import_node_path8.join)(context.rootPath, outputPath);
   }
   if (inspectOptions.writeToDisk) {
-    await (0, import_shared12.outputInspectConfigFiles)({
+    await outputInspectConfigFiles({
       rsbuildConfig: context.normalizedConfig,
       rawRsbuildConfig,
       bundlerConfigs: rawBundlerConfigs,
@@ -1373,6 +1460,7 @@ var init_inspectConfig = __esm({
     "use strict";
     import_node_path8 = require("path");
     import_shared12 = require("@rsbuild/shared");
+    init_config();
     init_initConfigs();
   }
 });
@@ -1385,10 +1473,10 @@ async function modifyRspackConfig(context, rspackConfig, utils) {
     utils
   );
   if (context.config.tools?.rspack) {
-    modifiedConfig = (0, import_shared13.mergeChainedOptions)({
-      defaults: modifiedConfig,
-      options: context.config.tools.rspack,
-      utils,
+    modifiedConfig = await (0, import_shared13.reduceConfigsAsyncWithContext)({
+      initial: modifiedConfig,
+      config: context.config.tools.rspack,
+      ctx: utils,
       mergeFn: utils.mergeConfig
     });
   }
@@ -2161,6 +2249,7 @@ var init_helper = __esm({
     import_node_net = __toESM(require("net"));
     import_node_os = __toESM(require("os"));
     import_shared20 = require("@rsbuild/shared");
+    init_constants();
     formatPrefix = (prefix) => {
       if (!prefix) {
         return "/";
@@ -2235,10 +2324,10 @@ var init_helper = __esm({
       config,
       getPortSilently
     }) => {
-      const host = config.server.host || import_shared20.DEFAULT_DEV_HOST;
+      const host = config.server.host || DEFAULT_DEV_HOST;
       const port = await getPort({
         host,
-        port: config.server.port || import_shared20.DEFAULT_PORT,
+        port: config.server.port || DEFAULT_PORT,
         strictPort: config.server.strictPort || false,
         silent: getPortSilently
       });
@@ -2312,7 +2401,7 @@ var init_helper = __esm({
       port,
       host
     }) => {
-      if (host && host !== import_shared20.DEFAULT_DEV_HOST) {
+      if (host && host !== DEFAULT_DEV_HOST) {
         return [
           {
             label: isLoopbackHost(host) ? LOCAL_LABEL : NETWORK_LABEL,
@@ -2774,7 +2863,7 @@ async function createDevServer(options, createDevMiddleware2, config, {
     dev: devConfig,
     server: serverConfig,
     output: {
-      distPath: config.output.distPath.root || import_shared22.ROOT_DIST_DIR
+      distPath: config.output.distPath.root || ROOT_DIST_DIR
     },
     outputFileSystem
   });
@@ -2849,6 +2938,7 @@ var init_devServer = __esm({
     "use strict";
     import_node_fs3 = __toESM(require("fs"));
     import_shared22 = require("@rsbuild/shared");
+    init_constants();
     init_getDevMiddlewares();
     init_helper();
     init_httpServer();
@@ -2879,7 +2969,7 @@ async function startProdServer(context, config, { getPortSilently } = {}) {
     {
       pwd: context.rootPath,
       output: {
-        path: config.output.distPath.root || import_shared23.ROOT_DIST_DIR,
+        path: config.output.distPath.root || ROOT_DIST_DIR,
         assetPrefix: config.output.assetPrefix
       },
       serverConfig
@@ -2940,6 +3030,7 @@ var init_prodServer = __esm({
     "use strict";
     import_node_path11 = require("path");
     import_shared23 = require("@rsbuild/shared");
+    init_constants();
     init_helper();
     init_httpServer();
     init_middlewares();
@@ -3200,12 +3291,12 @@ var init_basic = __esm({
       name: "rsbuild:basic",
       setup(api) {
         api.modifyBundlerChain(
-          (chain, { env, isProd: isProd4, target, bundler, CHAIN_ID: CHAIN_ID3 }) => {
+          (chain, { env, isProd: isProd5, target, bundler, CHAIN_ID: CHAIN_ID3 }) => {
             const config = api.getNormalizedConfig();
             chain.name(import_shared25.TARGET_ID_MAP[target]);
             chain.devtool((0, import_shared25.getJsSourceMap)(config));
             chain.context(api.context.rootPath);
-            chain.mode(isProd4 ? "production" : "development");
+            chain.mode(isProd5 ? "production" : "development");
             chain.merge({
               infrastructureLogging: {
                 // Using `error` level to avoid `cache.PackFileCacheStrategy` logs
@@ -3218,9 +3309,9 @@ var init_basic = __esm({
                 exportsPresence: "error"
               }
             });
-            const isMinimize = isProd4 && config.output.minify !== false;
+            const isMinimize = isProd5 && config.output.minify !== false;
             chain.optimization.minimize(isMinimize);
-            const usingHMR = (0, import_shared25.isUsingHMR)(config, { target, isProd: isProd4 });
+            const usingHMR = (0, import_shared25.isUsingHMR)(config, { target, isProd: isProd5 });
             if (usingHMR) {
               chain.plugin(CHAIN_ID3.PLUGIN.HMR).use(bundler.HotModuleReplacementPlugin);
             }
@@ -3402,7 +3493,7 @@ async function applyCSSRule({
   rule,
   config,
   context,
-  utils: { target, isProd: isProd4, CHAIN_ID: CHAIN_ID3 },
+  utils: { target, isProd: isProd5, CHAIN_ID: CHAIN_ID3 },
   importLoaders = 1
 }) {
   const browserslist = await (0, import_shared28.getBrowserslistWithDefault)(
@@ -3411,7 +3502,7 @@ async function applyCSSRule({
     target
   );
   const enableExtractCSS = isUseCssExtract(config, target);
-  const localIdentName = getCSSModulesLocalIdentName(config, isProd4);
+  const localIdentName = getCSSModulesLocalIdentName(config, isProd5);
   const cssLoaderOptions = getCSSLoaderOptions({
     config,
     importLoaders,
@@ -3422,9 +3513,9 @@ async function applyCSSRule({
     if (enableExtractCSS) {
       rule.use(CHAIN_ID3.USE.MINI_CSS_EXTRACT).loader(getCssExtractPlugin().loader).options(config.tools.cssExtract.loaderOptions).end();
     } else {
-      const styleLoaderOptions = (0, import_shared28.mergeChainedOptions)({
-        defaults: {},
-        options: config.tools.styleLoader
+      const styleLoaderOptions = (0, import_shared28.reduceConfigs)({
+        initial: {},
+        config: config.tools.styleLoader
       });
       rule.use(CHAIN_ID3.USE.STYLE).loader(getCompiledPath("style-loader")).options(styleLoaderOptions).end();
     }
@@ -3454,8 +3545,8 @@ var init_css = __esm({
     init_pluginHelper();
     enableNativeCss = (config) => !config.output.injectStyles;
     isUseCssExtract = (config, target) => !config.output.injectStyles && target !== "node" && target !== "web-worker";
-    getCSSModulesLocalIdentName = (config, isProd4) => config.output.cssModules.localIdentName || // Using shorter classname in production to reduce bundle size
-    (isProd4 ? "[local]-[hash:base64:6]" : "[path][name]__[local]-[hash:base64:6]");
+    getCSSModulesLocalIdentName = (config, isProd5) => config.output.cssModules.localIdentName || // Using shorter classname in production to reduce bundle size
+    (isProd5 ? "[local]-[hash:base64:6]" : "[path][name]__[local]-[hash:base64:6]");
     normalizeCssLoaderOptions = (options, exportOnlyLocals) => {
       if (options.modules && exportOnlyLocals) {
         let { modules } = options;
@@ -3492,12 +3583,12 @@ var init_css = __esm({
       });
       if (!hasAutoprefixer) {
         const { default: autoprefixer } = await import("@rsbuild/shared/autoprefixer");
-        const autoprefixerOptions = (0, import_shared28.mergeChainedOptions)({
-          defaults: {
+        const autoprefixerOptions = (0, import_shared28.reduceConfigs)({
+          initial: {
             flexbox: "no-2009",
             overrideBrowserslist: browserslist
           },
-          options: config.tools.autoprefixer
+          config: config.tools.autoprefixer
         });
         pluginObjects.push(autoprefixer(autoprefixerOptions));
       }
@@ -3532,10 +3623,10 @@ var init_css = __esm({
         },
         sourceMap: config.output.sourceMap.css
       };
-      const mergedConfig = (0, import_shared28.mergeChainedOptions)({
-        defaults: defaultPostcssConfig,
-        options: config.tools.postcss,
-        utils
+      const mergedConfig = (0, import_shared28.reduceConfigsWithContext)({
+        initial: defaultPostcssConfig,
+        config: config.tools.postcss,
+        ctx: utils
       });
       if (extraPlugins.length) {
         mergedConfig?.postcssOptions?.plugins.push(...extraPlugins);
@@ -3559,9 +3650,9 @@ var init_css = __esm({
         },
         sourceMap: config.output.sourceMap.css
       };
-      const mergedCssLoaderOptions = (0, import_shared28.mergeChainedOptions)({
-        defaults: defaultOptions2,
-        options: config.tools.cssLoader,
+      const mergedCssLoaderOptions = (0, import_shared28.reduceConfigs)({
+        initial: defaultOptions2,
+        config: config.tools.cssLoader,
         mergeFn: import_shared28.deepmerge
       });
       const cssLoaderOptions = normalizeCssLoaderOptions(
@@ -3602,13 +3693,13 @@ __export(output_exports, {
   pluginOutput: () => pluginOutput
 });
 function getPublicPath({
-  isProd: isProd4,
+  isProd: isProd5,
   config,
   context
 }) {
   const { dev, output } = config;
   let publicPath = import_shared29.DEFAULT_ASSET_PREFIX;
-  if (isProd4) {
+  if (isProd5) {
     if (typeof output.assetPrefix === "string") {
       publicPath = output.assetPrefix;
     }
@@ -3616,9 +3707,9 @@ function getPublicPath({
     publicPath = dev.assetPrefix;
   } else if (dev.assetPrefix === true) {
     const protocol = context.devServer?.https ? "https" : "http";
-    const hostname = context.devServer?.hostname || import_shared29.DEFAULT_DEV_HOST;
-    const port = context.devServer?.port || import_shared29.DEFAULT_PORT;
-    if (hostname === import_shared29.DEFAULT_DEV_HOST) {
+    const hostname = context.devServer?.hostname || DEFAULT_DEV_HOST;
+    const port = context.devServer?.port || DEFAULT_PORT;
+    if (hostname === DEFAULT_DEV_HOST) {
       const localHostname = "localhost";
       publicPath = `${protocol}://${localHostname}:${port}/`;
     } else {
@@ -3634,6 +3725,7 @@ var init_output = __esm({
     import_node_path15 = require("path");
     import_shared29 = require("@rsbuild/shared");
     import_core5 = require("@rspack/core");
+    init_constants();
     init_helpers();
     init_pluginHelper();
     init_css();
@@ -3641,20 +3733,34 @@ var init_output = __esm({
       name: "rsbuild:output",
       setup(api) {
         api.modifyBundlerChain(
-          async (chain, { CHAIN_ID: CHAIN_ID3, target, isProd: isProd4, isServer, isServiceWorker }) => {
+          async (chain, { CHAIN_ID: CHAIN_ID3, target, isProd: isProd5, isServer, isServiceWorker }) => {
             const config = api.getNormalizedConfig();
             const publicPath = getPublicPath({
               config,
-              isProd: isProd4,
+              isProd: isProd5,
               context: api.context
             });
             const jsPath = (0, import_shared29.getDistPath)(config, "js");
             const jsAsyncPath = (0, import_shared29.getDistPath)(config, "jsAsync");
-            const jsFilename = (0, import_shared29.getFilename)(config, "js", isProd4);
-            chain.output.path(api.context.distPath).filename(import_node_path15.posix.join(jsPath, jsFilename)).chunkFilename(import_node_path15.posix.join(jsAsyncPath, jsFilename)).publicPath(publicPath).pathinfo(false).hashFunction("xxhash64");
+            const jsFilename = (0, import_shared29.getFilename)(config, "js", isProd5);
+            const isJsFilenameFn = typeof jsFilename === "function";
+            chain.output.path(api.context.distPath).filename(
+              isJsFilenameFn ? (...args) => {
+                const name = jsFilename(...args);
+                return import_node_path15.posix.join(jsPath, name);
+              } : import_node_path15.posix.join(jsPath, jsFilename)
+            ).chunkFilename(
+              isJsFilenameFn ? (...args) => {
+                const name = jsFilename(...args);
+                return import_node_path15.posix.join(jsAsyncPath, name);
+              } : import_node_path15.posix.join(jsAsyncPath, jsFilename)
+            ).publicPath(publicPath).pathinfo(false).hashFunction("xxhash64");
             if (isServer) {
               const serverPath = (0, import_shared29.getDistPath)(config, "server");
-              chain.output.path(import_node_path15.posix.join(api.context.distPath, serverPath)).filename("[name].js").chunkFilename("[name].js").libraryTarget("commonjs2");
+              chain.output.path(import_node_path15.posix.join(api.context.distPath, serverPath)).filename("[name].js").chunkFilename("[name].js").library({
+                ...chain.output.get("library") || {},
+                type: "commonjs2"
+              });
             }
             if (isServiceWorker) {
               const workerPath = (0, import_shared29.getDistPath)(config, "worker");
@@ -3669,7 +3775,7 @@ var init_output = __esm({
             if (isUseCssExtract(config, target)) {
               const extractPluginOptions = config.tools.cssExtract.pluginOptions;
               const cssPath = (0, import_shared29.getDistPath)(config, "css");
-              const cssFilename = (0, import_shared29.getFilename)(config, "css", isProd4);
+              const cssFilename = (0, import_shared29.getFilename)(config, "css", isProd5);
               const cssAsyncPath = (0, import_shared29.getDistPath)(config, "cssAsync");
               chain.plugin(CHAIN_ID3.PLUGIN.MINI_CSS_EXTRACT).use(getCssExtractPlugin(), [
                 {
@@ -3719,10 +3825,10 @@ function applyAlias({
   if (!alias) {
     return;
   }
-  const mergedAlias = (0, import_shared30.mergeChainedOptions)({
-    defaults: {},
-    options: alias,
-    utils: { target }
+  const mergedAlias = (0, import_shared30.reduceConfigsWithContext)({
+    initial: {},
+    config: alias,
+    ctx: { target }
   });
   for (const name of Object.keys(mergedAlias)) {
     const values = (0, import_shared30.castArray)(mergedAlias[name]);
@@ -4020,6 +4126,7 @@ var init_asset = __esm({
     "use strict";
     import_node_path18 = __toESM(require("path"));
     import_shared34 = require("@rsbuild/shared");
+    init_constants();
     chainStaticAssetRule = ({
       emit,
       rule,
@@ -4044,12 +4151,12 @@ var init_asset = __esm({
     pluginAsset = () => ({
       name: "rsbuild:asset",
       setup(api) {
-        api.modifyBundlerChain((chain, { isProd: isProd4, target }) => {
+        api.modifyBundlerChain((chain, { isProd: isProd5, target }) => {
           const config = api.getNormalizedConfig();
           const createAssetRule = (assetType, exts, emit2) => {
             const regExp = getRegExpForExts(exts);
             const distDir = (0, import_shared34.getDistPath)(config, assetType);
-            const filename = (0, import_shared34.getFilename)(config, assetType, isProd4);
+            const filename = (0, import_shared34.getFilename)(config, assetType, isProd5);
             const { dataUriLimit } = config.output;
             const maxSize = typeof dataUriLimit === "number" ? dataUriLimit : dataUriLimit[assetType];
             const rule = chain.module.rule(assetType).test(regExp);
@@ -4062,14 +4169,14 @@ var init_asset = __esm({
             });
           };
           const emit = config.output.emitAssets({ target });
-          createAssetRule("image", import_shared34.IMAGE_EXTENSIONS, emit);
+          createAssetRule("image", IMAGE_EXTENSIONS, emit);
           createAssetRule("svg", ["svg"], emit);
           createAssetRule(
             "media",
-            [...import_shared34.VIDEO_EXTENSIONS, ...import_shared34.AUDIO_EXTENSIONS],
+            [...VIDEO_EXTENSIONS, ...AUDIO_EXTENSIONS],
             emit
           );
-          createAssetRule("font", import_shared34.FONT_EXTENSIONS, emit);
+          createAssetRule("font", FONT_EXTENSIONS, emit);
         });
       }
     });
@@ -4127,9 +4234,9 @@ var init_minimize = __esm({
       }
       return options;
     };
-    parseMinifyOptions = (config, isProd4 = true) => {
+    parseMinifyOptions = (config, isProd5 = true) => {
       const minify = config.output.minify;
-      if (minify === false || !isProd4) {
+      if (minify === false || !isProd5) {
         return {
           minifyJs: false,
           minifyCss: false,
@@ -4161,9 +4268,9 @@ var init_minimize = __esm({
         if (api.context.bundlerType === "webpack") {
           return;
         }
-        api.modifyBundlerChain(async (chain, { isProd: isProd4 }) => {
+        api.modifyBundlerChain(async (chain, { isProd: isProd5 }) => {
           const config = api.getNormalizedConfig();
-          const isMinimize = isProd4 && config.output.minify !== false;
+          const isMinimize = isProd5 && config.output.minify !== false;
           if (!isMinimize) {
             return;
           }
@@ -4366,13 +4473,18 @@ var init_HtmlBasicPlugin = __esm({
               addTitleTag(headTags, data.plugin.options?.title);
             }
             addFavicon(headTags, favicon);
-            const result = await this.modifyTagsFn({
+            const tags = {
               headTags: headTags.map(formatBasicTag),
               bodyTags: bodyTags.map(formatBasicTag)
-            });
+            };
+            const modified = this.modifyTagsFn ? await this.modifyTagsFn(tags, {
+              compilation,
+              assetPrefix: data.publicPath,
+              filename: data.outputName
+            }) : tags;
             Object.assign(data, {
-              headTags: result.headTags.map(fromBasicTag),
-              bodyTags: result.bodyTags.map(fromBasicTag)
+              headTags: modified.headTags.map(fromBasicTag),
+              bodyTags: modified.bodyTags.map(fromBasicTag)
             });
             if (tagConfig) {
               const hash = compilation.hash ?? "";
@@ -4497,8 +4609,8 @@ function getTerserMinifyOptions(config) {
   const finalOptions = applyRemoveConsole(options, config);
   return finalOptions;
 }
-async function getHtmlMinifyOptions(isProd4, config) {
-  if (!isProd4 || !config.output.minify || !parseMinifyOptions(config).minifyHtml) {
+async function getHtmlMinifyOptions(isProd5, config) {
+  if (!isProd5 || !config.output.minify || !parseMinifyOptions(config).minifyHtml) {
     return false;
   }
   const minifyJS = getTerserMinifyOptions(config);
@@ -4519,29 +4631,25 @@ async function getHtmlMinifyOptions(isProd4, config) {
   return typeof htmlMinifyOptions === "object" ? (0, import_shared38.deepmerge)(htmlMinifyDefaultOptions, htmlMinifyOptions) : htmlMinifyDefaultOptions;
 }
 function getTitle(entryName, config) {
-  return (0, import_shared38.mergeChainedOptions)({
-    defaults: "",
-    options: config.html.title,
-    utils: { entryName },
-    useObjectParam: true
+  return (0, import_shared38.reduceConfigsMergeContext)({
+    initial: "",
+    config: config.html.title,
+    ctx: { entryName }
   });
 }
 function getInject(entryName, config) {
-  return (0, import_shared38.mergeChainedOptions)({
-    defaults: "head",
-    options: config.html.inject,
-    utils: { entryName },
-    useObjectParam: true,
-    isFalsy: import_shared38.isNil
+  return (0, import_shared38.reduceConfigsMergeContext)({
+    initial: "head",
+    config: config.html.inject,
+    ctx: { entryName }
   });
 }
 async function getTemplate(entryName, config, rootPath) {
   const DEFAULT_TEMPLATE = import_node_path20.default.resolve(STATIC_PATH, "template.html");
-  const templatePath = (0, import_shared38.mergeChainedOptions)({
-    defaults: DEFAULT_TEMPLATE,
-    options: config.html.template,
-    utils: { entryName },
-    useObjectParam: true
+  const templatePath = (0, import_shared38.reduceConfigsMergeContext)({
+    initial: DEFAULT_TEMPLATE,
+    config: config.html.template,
+    ctx: { entryName }
   });
   if (templatePath === DEFAULT_TEMPLATE) {
     return {
@@ -4566,19 +4674,17 @@ async function getTemplate(entryName, config, rootPath) {
   };
 }
 function getFavicon(entryName, config) {
-  return (0, import_shared38.mergeChainedOptions)({
-    defaults: "",
-    options: config.html.favicon,
-    utils: { entryName },
-    useObjectParam: true
+  return (0, import_shared38.reduceConfigsMergeContext)({
+    initial: "",
+    config: config.html.favicon,
+    ctx: { entryName }
   });
 }
 function getMetaTags(entryName, config, templateContent) {
-  const metaTags = (0, import_shared38.mergeChainedOptions)({
-    defaults: {},
-    options: config.html.meta,
-    utils: { entryName },
-    useObjectParam: true
+  const metaTags = (0, import_shared38.reduceConfigsMergeContext)({
+    initial: {},
+    config: config.html.meta,
+    ctx: { entryName }
   });
   if (templateContent && metaTags.charset) {
     const charsetRegExp = /<meta[^>]+charset=["'][^>]*>/i;
@@ -4603,10 +4709,10 @@ function getTemplateParameters(entryName, config, assetPrefix) {
         options: pluginOptions
       }
     };
-    return (0, import_shared38.mergeChainedOptions)({
-      defaults: defaultOptions2,
-      options: templateParameters,
-      utils: { entryName }
+    return (0, import_shared38.reduceConfigsWithContext)({
+      initial: defaultOptions2,
+      config: templateParameters,
+      ctx: { entryName }
     });
   };
 }
@@ -4655,12 +4761,12 @@ var init_html = __esm({
       name: "rsbuild:html",
       setup(api) {
         api.modifyBundlerChain(
-          async (chain, { HtmlPlugin, isProd: isProd4, CHAIN_ID: CHAIN_ID3, target }) => {
+          async (chain, { HtmlPlugin, isProd: isProd5, CHAIN_ID: CHAIN_ID3, target }) => {
             const config = api.getNormalizedConfig();
             if ((0, import_shared38.isHtmlDisabled)(config, target)) {
               return;
             }
-            const minify = await getHtmlMinifyOptions(isProd4, config);
+            const minify = await getHtmlMinifyOptions(isProd5, config);
             const assetPrefix = getPublicPathFromChain(chain, false);
             const entries = chain.entryPoints.entries() || {};
             const entryNames = Object.keys(entries);
@@ -4669,11 +4775,7 @@ var init_html = __esm({
             const finalOptions = await Promise.all(
               entryNames.map(async (entryName) => {
                 const entryValue = entries[entryName].values();
-                const chunks = getChunks(
-                  entryName,
-                  // EntryDescription type is different between webpack and Rspack
-                  entryValue
-                );
+                const chunks = getChunks(entryName, entryValue);
                 const inject = getInject(entryName, config);
                 const filename = htmlPaths[entryName];
                 const { templatePath, templateContent } = await getTemplate(
@@ -4719,13 +4821,10 @@ var init_html = __esm({
                     pluginOptions.favicon = favicon;
                   }
                 }
-                const finalOptions2 = (0, import_shared38.mergeChainedOptions)({
-                  defaults: pluginOptions,
-                  options: typeof config.tools.htmlPlugin === "boolean" ? {} : config.tools.htmlPlugin,
-                  utils: {
-                    entryName,
-                    entryValue
-                  }
+                const finalOptions2 = (0, import_shared38.reduceConfigsWithContext)({
+                  initial: pluginOptions,
+                  config: typeof config.tools.htmlPlugin === "boolean" ? {} : config.tools.htmlPlugin,
+                  ctx: { entryName, entryValue }
                 });
                 return finalOptions2;
               })
@@ -4750,52 +4849,21 @@ var init_html = __esm({
             }
           }
         );
-        api.onAfterCreateCompiler(({ compiler }) => {
-          const { nonce } = api.getNormalizedConfig().security;
-          if (!nonce) {
-            return;
-          }
-          (0, import_shared38.applyToCompiler)(compiler, (compiler2) => {
-            const { plugins } = compiler2.options;
-            const hasHTML = plugins.some(
-              (plugin) => plugin && plugin.constructor.name === "HtmlBasicPlugin"
-            );
-            if (!hasHTML) {
-              return;
-            }
-            const injectCode = (0, import_shared38.createVirtualModule)(
-              `__webpack_nonce__ = "${nonce}";`
-            );
-            new compiler2.webpack.EntryPlugin(compiler2.context, injectCode, {
-              name: void 0
-            }).apply(compiler2);
-          });
-        });
         api.modifyHTMLTags({
           // ensure `crossorigin` and `nonce` can be applied to all tags
           order: "post",
           handler: ({ headTags, bodyTags }) => {
             const config = api.getNormalizedConfig();
             const { crossorigin } = config.html;
-            const { nonce } = config.security;
             const allTags = [...headTags, ...bodyTags];
             if (crossorigin) {
               const formattedCrossorigin = crossorigin === true ? "anonymous" : crossorigin;
               for (const tag of allTags) {
                 if (tag.tag === "script" && tag.attrs?.src || tag.tag === "link" && tag.attrs?.rel === "stylesheet") {
-                  tag.attrs ||= {};
                   tag.attrs.crossorigin ??= formattedCrossorigin;
                 }
               }
             }
-            if (nonce) {
-              for (const tag of allTags) {
-                if (tag.tag === "script" || tag.tag === "style") {
-                  tag.attrs ??= {};
-                  tag.attrs.nonce = nonce;
-                }
-              }
-            }
             return { headTags, bodyTags };
           }
         });
@@ -5096,9 +5164,9 @@ var init_swc = __esm({
                 await applyCoreJs(swcConfig, chain, polyfillMode);
               }
             }
-            const mergedSwcConfig = (0, import_shared42.mergeChainedOptions)({
-              defaults: swcConfig,
-              options: config.tools.swc,
+            const mergedSwcConfig = (0, import_shared42.reduceConfigs)({
+              initial: swcConfig,
+              config: config.tools.swc,
               mergeFn: import_shared42.deepmerge
             });
             rule.use(CHAIN_ID3.USE.SWC).loader(builtinSwcLoaderName).options(mergedSwcConfig);
@@ -5342,10 +5410,7 @@ var init_splitChunks = __esm({
               rootPath: api.context.rootPath,
               polyfill: config.output.polyfill
             });
-            chain.optimization.splitChunks(
-              // @ts-expect-error splitChunks type mismatch
-              splitChunksOptions
-            );
+            chain.optimization.splitChunks(splitChunksOptions);
           }
         );
       }
@@ -5353,12 +5418,13 @@ var init_splitChunks = __esm({
   }
 });
 
-// src/plugins/startUrl.ts
-var startUrl_exports = {};
-__export(startUrl_exports, {
+// src/plugins/open.ts
+var open_exports = {};
+__export(open_exports, {
   openBrowser: () => openBrowser,
-  pluginStartUrl: () => pluginStartUrl,
-  replacePlaceholder: () => replacePlaceholder
+  pluginOpen: () => pluginOpen,
+  replacePlaceholder: () => replacePlaceholder,
+  resolveUrl: () => resolveUrl
 });
 async function openBrowser(url2) {
   const shouldTryOpenChromeWithAppleScript = process.platform === "darwin";
@@ -5392,30 +5458,45 @@ async function openBrowser(url2) {
     return false;
   }
 }
-function pluginStartUrl() {
+function resolveUrl(str, base) {
+  if ((0, import_shared44.canParse)(str)) {
+    return str;
+  }
+  try {
+    const url2 = new URL(str, base);
+    return url2.href;
+  } catch (e) {
+    throw new Error(
+      "[rsbuild:open]: Invalid input: not a valid URL or pathname"
+    );
+  }
+}
+function pluginOpen() {
   return {
-    name: "rsbuild:start-url",
+    name: "rsbuild:open",
     setup(api) {
       const onStartServer = async (params) => {
         const { port, routes } = params;
         const config = api.getNormalizedConfig();
-        const { startUrl, beforeStartUrl } = config.dev;
+        const { beforeStartUrl } = config.dev;
+        const open = config.server.open || config.dev.startUrl;
         const { https } = api.context.devServer || {};
         const isCodesandbox = process.env.CSB === "true";
-        const shouldOpen = Boolean(startUrl) && !isCodesandbox;
+        const shouldOpen = Boolean(open) && !isCodesandbox;
         if (!shouldOpen) {
           return;
         }
         const urls = [];
-        if (startUrl === true || !startUrl) {
-          const protocol = https ? "https" : "http";
+        const protocol = https ? "https" : "http";
+        const baseUrl = `${protocol}://localhost:${port}`;
+        if (open === true || !open) {
           if (routes.length) {
-            urls.push(`${protocol}://localhost:${port}${routes[0].pathname}`);
+            urls.push(`${baseUrl}${routes[0].pathname}`);
           }
         } else {
           urls.push(
-            ...(0, import_shared44.castArray)(startUrl).map(
-              (item) => replacePlaceholder(item, port)
+            ...(0, import_shared44.castArray)(open).map(
+              (item) => resolveUrl(replacePlaceholder(item, port), baseUrl)
             )
           );
         }
@@ -5441,8 +5522,8 @@ function pluginStartUrl() {
   };
 }
 var import_node_child_process, import_node_util, import_shared44, execAsync, supportedChromiumBrowsers, getTargetBrowser, replacePlaceholder, openedURLs;
-var init_startUrl = __esm({
-  "src/plugins/startUrl.ts"() {
+var init_open = __esm({
+  "src/plugins/open.ts"() {
     "use strict";
     import_node_child_process = require("child_process");
     import_node_util = require("util");
@@ -5850,16 +5931,16 @@ function determineAsValue({
   if (["css"].includes(extension)) {
     return "style";
   }
-  if (import_shared49.IMAGE_EXTENSIONS.includes(extension)) {
+  if (IMAGE_EXTENSIONS.includes(extension)) {
     return "image";
   }
-  if (import_shared49.VIDEO_EXTENSIONS.includes(extension)) {
+  if (VIDEO_EXTENSIONS.includes(extension)) {
     return "video";
   }
-  if (import_shared49.AUDIO_EXTENSIONS.includes(extension)) {
+  if (AUDIO_EXTENSIONS.includes(extension)) {
     return "audio";
   }
-  if (import_shared49.FONT_EXTENSIONS.includes(extension)) {
+  if (FONT_EXTENSIONS.includes(extension)) {
     return "font";
   }
   if (["vtt"].includes(extension)) {
@@ -5867,13 +5948,13 @@ function determineAsValue({
   }
   return "script";
 }
-var import_node_path25, import_node_url3, import_shared49;
+var import_node_path25, import_node_url3;
 var init_determineAsValue = __esm({
   "src/rspack/preload/helpers/determineAsValue.ts"() {
     "use strict";
     import_node_path25 = __toESM(require("path"));
     import_node_url3 = require("url");
-    import_shared49 = require("@rsbuild/shared");
+    init_constants();
   }
 });
 
@@ -5981,10 +6062,10 @@ function generateLinks(options, type, compilation, htmlPluginData, HTMLCount) {
   );
   const sortedFilteredFiles = filteredFiles.sort();
   const links = [];
-  const publicPath = (0, import_shared50.getPublicPathFromCompiler)(compilation.compiler);
+  const publicPath = (0, import_shared49.getPublicPathFromCompiler)(compilation.compiler);
   const { crossOriginLoading } = compilation.compiler.options.output;
   for (const file of sortedFilteredFiles) {
-    const href = (0, import_shared50.withPublicPath)(file, publicPath);
+    const href = (0, import_shared49.withPublicPath)(file, publicPath);
     const attributes = {
       href,
       rel: type
@@ -6012,11 +6093,11 @@ function generateLinks(options, type, compilation, htmlPluginData, HTMLCount) {
   }
   return links;
 }
-var import_shared50, defaultOptions, HtmlPreloadOrPrefetchPlugin;
+var import_shared49, defaultOptions, HtmlPreloadOrPrefetchPlugin;
 var init_HtmlPreloadOrPrefetchPlugin = __esm({
   "src/rspack/preload/HtmlPreloadOrPrefetchPlugin.ts"() {
     "use strict";
-    import_shared50 = require("@rsbuild/shared");
+    import_shared49 = require("@rsbuild/shared");
     init_pluginHelper();
     init_helpers2();
     defaultOptions = {
@@ -6038,7 +6119,7 @@ var init_HtmlPreloadOrPrefetchPlugin = __esm({
       apply(compiler) {
         compiler.hooks.compilation.tap(this.constructor.name, (compilation) => {
           getHTMLPlugin().getHooks(compilation).beforeAssetTagGeneration.tap(
-            `HTML${(0, import_shared50.upperFirst)(this.type)}Plugin`,
+            `HTML${(0, import_shared49.upperFirst)(this.type)}Plugin`,
             (htmlPluginData) => {
               this.resourceHints = generateLinks(
                 this.options,
@@ -6051,7 +6132,7 @@ var init_HtmlPreloadOrPrefetchPlugin = __esm({
             }
           );
           getHTMLPlugin().getHooks(compilation).alterAssetTags.tap(
-            `HTML${(0, import_shared50.upperFirst)(this.type)}Plugin`,
+            `HTML${(0, import_shared49.upperFirst)(this.type)}Plugin`,
             (htmlPluginData) => {
               if (this.resourceHints) {
                 htmlPluginData.assetTags.styles = [
@@ -6076,11 +6157,11 @@ var resourceHints_exports = {};
 __export(resourceHints_exports, {
   pluginResourceHints: () => pluginResourceHints
 });
-var import_shared51, generateLinks2, pluginResourceHints;
+var import_shared50, generateLinks2, pluginResourceHints;
 var init_resourceHints = __esm({
   "src/plugins/resourceHints.ts"() {
     "use strict";
-    import_shared51 = require("@rsbuild/shared");
+    import_shared50 = require("@rsbuild/shared");
     generateLinks2 = (options, rel) => options.map((option) => ({
       tag: "link",
       attrs: {
@@ -6115,7 +6196,7 @@ var init_resourceHints = __esm({
           const {
             performance: { preload, prefetch }
           } = config;
-          if ((0, import_shared51.isHtmlDisabled)(config, target)) {
+          if ((0, import_shared50.isHtmlDisabled)(config, target)) {
             return;
           }
           const HTMLCount = chain.entryPoints.values().length;
@@ -6178,12 +6259,12 @@ var server_exports = {};
 __export(server_exports, {
   pluginServer: () => pluginServer
 });
-var import_node_path26, import_shared52, pluginServer;
+var import_node_path26, import_shared51, pluginServer;
 var init_server = __esm({
   "src/plugins/server.ts"() {
     "use strict";
     import_node_path26 = require("path");
-    import_shared52 = require("@rsbuild/shared");
+    import_shared51 = require("@rsbuild/shared");
     pluginServer = () => ({
       name: "rsbuild:server",
       setup(api) {
@@ -6195,11 +6276,11 @@ var init_server = __esm({
               return;
             }
             const publicDir = (0, import_node_path26.isAbsolute)(name) ? name : (0, import_node_path26.join)(api.context.rootPath, name);
-            if (!import_shared52.fse.existsSync(publicDir)) {
+            if (!import_shared51.fse.existsSync(publicDir)) {
               return;
             }
             try {
-              await import_shared52.fse.copy(publicDir, api.context.distPath, {
+              await import_shared51.fse.copy(publicDir, api.context.distPath, {
                 // dereference symlinks
                 dereference: true
               });
@@ -6313,7 +6394,6 @@ var init_manifest = __esm({
       name: "rsbuild:manifest",
       setup(api) {
         api.modifyBundlerChain(async (chain, { CHAIN_ID: CHAIN_ID3 }) => {
-          const htmlPaths = api.getHTMLPaths();
           const {
             output: { manifest }
           } = api.getNormalizedConfig();
@@ -6322,6 +6402,7 @@ var init_manifest = __esm({
           }
           const fileName = typeof manifest === "string" ? manifest : "manifest.json";
           const { RspackManifestPlugin } = await import("../compiled/rspack-manifest-plugin/index.js");
+          const htmlPaths = api.getHTMLPaths();
           chain.plugin(CHAIN_ID3.PLUGIN.MANIFEST).use(RspackManifestPlugin, [
             {
               fileName,
@@ -6366,18 +6447,18 @@ function pluginModuleFederation() {
           chain.plugin("mf-patch-split-chunks").use(PatchSplitChunksPlugin, [options.name]);
         }
         const publicPath = chain.output.get("publicPath");
-        if (publicPath === import_shared53.DEFAULT_ASSET_PREFIX) {
+        if (publicPath === import_shared52.DEFAULT_ASSET_PREFIX) {
           chain.output.set("publicPath", "auto");
         }
       });
     }
   };
 }
-var import_shared53, import_core8, PatchSplitChunksPlugin;
+var import_shared52, import_core8, PatchSplitChunksPlugin;
 var init_moduleFederation = __esm({
   "src/plugins/moduleFederation.ts"() {
     "use strict";
-    import_shared53 = require("@rsbuild/shared");
+    import_shared52 = require("@rsbuild/shared");
     import_core8 = require("@rspack/core");
     PatchSplitChunksPlugin = class {
       constructor(name) {
@@ -6445,14 +6526,14 @@ __export(rspackProfile_exports, {
   pluginRspackProfile: () => pluginRspackProfile,
   stopProfiler: () => stopProfiler
 });
-var import_node_inspector, import_node_path27, import_shared54, import_shared55, import_core9, stopProfiler, pluginRspackProfile;
+var import_node_inspector, import_node_path27, import_shared53, import_shared54, import_core9, stopProfiler, pluginRspackProfile;
 var init_rspackProfile = __esm({
   "src/plugins/rspackProfile.ts"() {
     "use strict";
     import_node_inspector = __toESM(require("inspector"));
     import_node_path27 = __toESM(require("path"));
+    import_shared53 = require("@rsbuild/shared");
     import_shared54 = require("@rsbuild/shared");
-    import_shared55 = require("@rsbuild/shared");
     import_core9 = require("@rspack/core");
     stopProfiler = (output, profileSession) => {
       if (!profileSession) {
@@ -6460,10 +6541,10 @@ var init_rspackProfile = __esm({
       }
       profileSession.post("Profiler.stop", (error, param) => {
         if (error) {
-          import_shared55.logger.error("Failed to generate JS CPU profile:", error);
+          import_shared54.logger.error("Failed to generate JS CPU profile:", error);
           return;
         }
-        import_shared54.fse.writeFileSync(output, JSON.stringify(param.profile));
+        import_shared53.fse.writeFileSync(output, JSON.stringify(param.profile));
       });
     };
     pluginRspackProfile = () => ({
@@ -6489,7 +6570,7 @@ var init_rspackProfile = __esm({
         const cpuProfilePath = import_node_path27.default.join(profileDir, "jscpuprofile.json");
         const loggingFilePath = import_node_path27.default.join(profileDir, "logging.json");
         const onStart = () => {
-          import_shared54.fse.ensureDirSync(profileDir);
+          import_shared53.fse.ensureDirSync(profileDir);
           if (enableProfileTrace) {
             import_core9.rspack.experimental_registerGlobalTrace(
               "trace",
@@ -6513,7 +6594,7 @@ var init_rspackProfile = __esm({
               logging: "verbose",
               loggingTrace: true
             });
-            import_shared54.fse.writeFileSync(loggingFilePath, JSON.stringify(logging));
+            import_shared53.fse.writeFileSync(loggingFilePath, JSON.stringify(logging));
           }
         });
         api.onExit(() => {
@@ -6521,7 +6602,7 @@ var init_rspackProfile = __esm({
             import_core9.rspack.experimental_cleanupGlobalTrace();
           }
           stopProfiler(cpuProfilePath, profileSession);
-          import_shared55.logger.info(`Saved Rspack profile file to ${profileDir}`);
+          import_shared54.logger.info(`Saved Rspack profile file to ${profileDir}`);
         });
       }
     });
@@ -6533,16 +6614,16 @@ var lazyCompilation_exports = {};
 __export(lazyCompilation_exports, {
   pluginLazyCompilation: () => pluginLazyCompilation
 });
-var import_shared56, pluginLazyCompilation;
+var import_shared55, pluginLazyCompilation;
 var init_lazyCompilation = __esm({
   "src/plugins/lazyCompilation.ts"() {
     "use strict";
-    import_shared56 = require("@rsbuild/shared");
+    import_shared55 = require("@rsbuild/shared");
     pluginLazyCompilation = () => ({
       name: "rsbuild:lazy-compilation",
       setup(api) {
-        api.modifyBundlerChain((chain, { isProd: isProd4, target }) => {
-          if (isProd4 || target !== "web") {
+        api.modifyBundlerChain((chain, { isProd: isProd5, target }) => {
+          if (isProd5 || target !== "web") {
             return;
           }
           const config = api.getNormalizedConfig();
@@ -6550,12 +6631,10 @@ var init_lazyCompilation = __esm({
           if (!options) {
             return;
           }
-          const clientRegExp = /[\\/]core[\\/]dist[\\/]client[\\/]/;
           const cssRegExp = /\.(?:css|less|sass|scss|styl|stylus)$/;
           const isExcludedModule = (name) => {
             return (
-              // alway include Rsbuild client code, such as HMR
-              clientRegExp.test(name) || // exclude CSS files because Rspack does not support it yet
+              // exclude CSS files because Rspack does not support it yet
               // TODO: remove this after Rspack supporting it
               cssRegExp.test(name)
             );
@@ -6585,7 +6664,7 @@ var init_lazyCompilation = __esm({
                 if (!name || isExcludedModule(name)) {
                   return false;
                 }
-                if ((0, import_shared56.isRegExp)(test)) {
+                if ((0, import_shared55.isRegExp)(test)) {
                   return name ? test.test(name) : false;
                 }
                 return test(module2);
@@ -6602,6 +6681,222 @@ var init_lazyCompilation = __esm({
   }
 });
 
+// src/plugins/sri.ts
+var sri_exports = {};
+__export(sri_exports, {
+  pluginSri: () => pluginSri
+});
+var import_node_crypto2, import_shared56, getAssetName, pluginSri;
+var init_sri = __esm({
+  "src/plugins/sri.ts"() {
+    "use strict";
+    import_node_crypto2 = __toESM(require("crypto"));
+    import_shared56 = require("@rsbuild/shared");
+    init_constants();
+    getAssetName = (url2, assetPrefix) => {
+      if (url2.startsWith(assetPrefix)) {
+        return (0, import_shared56.removeLeadingSlash)(url2.replace(assetPrefix, ""));
+      }
+      return (0, import_shared56.removeLeadingSlash)(url2);
+    };
+    pluginSri = () => ({
+      name: "rsbuild:sri",
+      setup(api) {
+        const placeholder = "RSBUILD_INTEGRITY_PLACEHOLDER:";
+        const getAlgorithm = () => {
+          const config = api.getNormalizedConfig();
+          const { sri } = config.security;
+          const enable = sri.enable === "auto" ? (0, import_shared56.isProd)() : sri.enable;
+          if (!enable) {
+            return null;
+          }
+          const { algorithm = "sha384" } = sri;
+          return algorithm;
+        };
+        api.modifyHTMLTags({
+          // ensure `sri` can be applied to all tags
+          order: "post",
+          handler(tags, { assetPrefix }) {
+            const algorithm = getAlgorithm();
+            if (!algorithm) {
+              return tags;
+            }
+            const allTags = [...tags.headTags, ...tags.bodyTags];
+            for (const tag of allTags) {
+              let url2 = "";
+              if (!tag.attrs) {
+                continue;
+              }
+              if (tag.tag === "script" && typeof tag.attrs.src === "string") {
+                url2 = tag.attrs.src;
+              } else if (tag.tag === "link" && tag.attrs.rel === "stylesheet" && typeof tag.attrs.href === "string") {
+                url2 = tag.attrs.href;
+              }
+              if (!url2) {
+                continue;
+              }
+              const assetName = getAssetName(url2, assetPrefix);
+              if (!assetName) {
+                continue;
+              }
+              tag.attrs.integrity ??= `${placeholder}${assetName}`;
+            }
+            return tags;
+          }
+        });
+        const replaceIntegrity = (htmlContent, assets, algorithm, integrityCache) => {
+          const regex = /integrity="RSBUILD_INTEGRITY_PLACEHOLDER:([^"]+)"/g;
+          const matches = htmlContent.matchAll(regex);
+          let replacedHtml = htmlContent;
+          const calcIntegrity = (algorithm2, assetName, data) => {
+            if (integrityCache.has(assetName)) {
+              return integrityCache.get(assetName);
+            }
+            const hash = import_node_crypto2.default.createHash(algorithm2).update(data).digest().toString("base64");
+            const integrity = `${algorithm2}-${hash}`;
+            integrityCache.set(assetName, integrity);
+            return integrity;
+          };
+          for (const match of matches) {
+            const assetName = match[1];
+            if (!assetName) {
+              continue;
+            }
+            if (assets[assetName]) {
+              const integrity = calcIntegrity(
+                algorithm,
+                assetName,
+                assets[assetName].buffer()
+              );
+              replacedHtml = replacedHtml.replaceAll(
+                `integrity="${placeholder}${assetName}"`,
+                `integrity="${integrity}"`
+              );
+            } else {
+              import_shared56.logger.debug(
+                `[rsbuild:sri] failed to generate integrity for ${assetName}.`
+              );
+              replacedHtml = replacedHtml.replace(
+                `integrity="${placeholder}${assetName}"`,
+                ""
+              );
+            }
+          }
+          return replacedHtml;
+        };
+        class SriReplaceIntegrityPlugin {
+          constructor(algorithm) {
+            __publicField(this, "algorithm");
+            this.algorithm = algorithm;
+          }
+          apply(compiler) {
+            compiler.hooks.compilation.tap(
+              "SriReplaceIntegrityPlugin",
+              (compilation) => {
+                compilation.hooks.processAssets.tapPromise(
+                  {
+                    name: "SriReplaceIntegrityPlugin",
+                    // use to final stage to get the final asset content
+                    stage: compiler.webpack.Compilation.PROCESS_ASSETS_STAGE_REPORT
+                  },
+                  async (assets) => {
+                    const integrityCache = /* @__PURE__ */ new Map();
+                    for (const asset of Object.keys(assets)) {
+                      if (!HTML_REGEX.test(asset)) {
+                        continue;
+                      }
+                      const htmlContent = assets[asset].source();
+                      if (!htmlContent.includes(placeholder)) {
+                        continue;
+                      }
+                      assets[asset] = new compiler.webpack.sources.RawSource(
+                        replaceIntegrity(
+                          htmlContent,
+                          assets,
+                          this.algorithm,
+                          integrityCache
+                        )
+                      );
+                    }
+                  }
+                );
+              }
+            );
+          }
+        }
+        api.modifyBundlerChain((chain, { target }) => {
+          const config = api.getNormalizedConfig();
+          if ((0, import_shared56.isHtmlDisabled)(config, target)) {
+            return;
+          }
+          const algorithm = getAlgorithm();
+          if (!algorithm) {
+            return;
+          }
+          chain.plugin("rsbuild-sri-replace").use(SriReplaceIntegrityPlugin, [algorithm]);
+        });
+      }
+    });
+  }
+});
+
+// src/plugins/nonce.ts
+var nonce_exports = {};
+__export(nonce_exports, {
+  pluginNonce: () => pluginNonce
+});
+var import_shared57, pluginNonce;
+var init_nonce = __esm({
+  "src/plugins/nonce.ts"() {
+    "use strict";
+    import_shared57 = require("@rsbuild/shared");
+    pluginNonce = () => ({
+      name: "rsbuild:nonce",
+      setup(api) {
+        api.onAfterCreateCompiler(({ compiler }) => {
+          const { nonce } = api.getNormalizedConfig().security;
+          if (!nonce) {
+            return;
+          }
+          (0, import_shared57.applyToCompiler)(compiler, (compiler2) => {
+            const { plugins } = compiler2.options;
+            const hasHTML = plugins.some(
+              (plugin) => plugin && plugin.constructor.name === "HtmlBasicPlugin"
+            );
+            if (!hasHTML) {
+              return;
+            }
+            const injectCode = (0, import_shared57.createVirtualModule)(
+              `__webpack_nonce__ = "${nonce}";`
+            );
+            new compiler2.webpack.EntryPlugin(compiler2.context, injectCode, {
+              name: void 0
+            }).apply(compiler2);
+          });
+        });
+        api.modifyHTMLTags({
+          // ensure `nonce` can be applied to all tags
+          order: "post",
+          handler: ({ headTags, bodyTags }) => {
+            const config = api.getNormalizedConfig();
+            const { nonce } = config.security;
+            const allTags = [...headTags, ...bodyTags];
+            if (nonce) {
+              for (const tag of allTags) {
+                if (tag.tag === "script" || tag.tag === "style") {
+                  tag.attrs ??= {};
+                  tag.attrs.nonce = nonce;
+                }
+              }
+            }
+            return { headTags, bodyTags };
+          }
+        });
+      }
+    });
+  }
+});
+
 // src/createRsbuild.ts
 var createRsbuild_exports = {};
 __export(createRsbuild_exports, {
@@ -6629,7 +6924,7 @@ async function applyDefaultPlugins(pluginManager, context) {
   const { pluginSwc: pluginSwc2 } = await Promise.resolve().then(() => (init_swc(), swc_exports));
   const { pluginExternals: pluginExternals2 } = await Promise.resolve().then(() => (init_externals(), externals_exports));
   const { pluginSplitChunks: pluginSplitChunks2 } = await Promise.resolve().then(() => (init_splitChunks(), splitChunks_exports));
-  const { pluginStartUrl: pluginStartUrl2 } = await Promise.resolve().then(() => (init_startUrl(), startUrl_exports));
+  const { pluginOpen: pluginOpen2 } = await Promise.resolve().then(() => (init_open(), open_exports));
   const { pluginInlineChunk: pluginInlineChunk2 } = await Promise.resolve().then(() => (init_inlineChunk(), inlineChunk_exports));
   const { pluginBundleAnalyzer: pluginBundleAnalyzer2 } = await Promise.resolve().then(() => (init_bundleAnalyzer(), bundleAnalyzer_exports));
   const { pluginRsdoctor: pluginRsdoctor2 } = await Promise.resolve().then(() => (init_rsdoctor(), rsdoctor_exports));
@@ -6640,6 +6935,8 @@ async function applyDefaultPlugins(pluginManager, context) {
   const { pluginModuleFederation: pluginModuleFederation2 } = await Promise.resolve().then(() => (init_moduleFederation(), moduleFederation_exports));
   const { pluginRspackProfile: pluginRspackProfile2 } = await Promise.resolve().then(() => (init_rspackProfile(), rspackProfile_exports));
   const { pluginLazyCompilation: pluginLazyCompilation2 } = await Promise.resolve().then(() => (init_lazyCompilation(), lazyCompilation_exports));
+  const { pluginSri: pluginSri2 } = await Promise.resolve().then(() => (init_sri(), sri_exports));
+  const { pluginNonce: pluginNonce2 } = await Promise.resolve().then(() => (init_nonce(), nonce_exports));
   pluginManager.addPlugins([
     pluginBasic2(),
     pluginEntry2(),
@@ -6651,8 +6948,8 @@ async function applyDefaultPlugins(pluginManager, context) {
     // cleanOutput plugin should before the html plugin
     pluginCleanOutput2(),
     pluginAsset2(),
-    pluginHtml2(async (tags) => {
-      const result = await context.hooks.modifyHTMLTags.call(tags);
+    pluginHtml2(async (...args) => {
+      const result = await context.hooks.modifyHTMLTags.call(...args);
       return result[0];
     }),
     pluginWasm2(),
@@ -6665,7 +6962,7 @@ async function applyDefaultPlugins(pluginManager, context) {
     pluginSwc2(),
     pluginExternals2(),
     pluginSplitChunks2(),
-    pluginStartUrl2(),
+    pluginOpen2(),
     pluginInlineChunk2(),
     pluginBundleAnalyzer2(),
     pluginRsdoctor2(),
@@ -6675,7 +6972,9 @@ async function applyDefaultPlugins(pluginManager, context) {
     pluginManifest2(),
     pluginModuleFederation2(),
     pluginRspackProfile2(),
-    pluginLazyCompilation2()
+    pluginLazyCompilation2(),
+    pluginSri2(),
+    pluginNonce2()
   ]);
 }
 async function createRsbuild(options = {}) {
@@ -6693,9 +6992,9 @@ async function createRsbuild(options = {}) {
   );
   const pluginAPI = getPluginAPI({ context, pluginManager });
   context.pluginAPI = pluginAPI;
-  (0, import_shared57.debug)("add default plugins");
+  (0, import_shared58.debug)("add default plugins");
   await applyDefaultPlugins(pluginManager, context);
-  (0, import_shared57.debug)("add default plugins done");
+  (0, import_shared58.debug)("add default plugins done");
   const provider = rsbuildConfig.provider || await getRspackProvider();
   const providerInstance = await provider({
     context,
@@ -6704,13 +7003,13 @@ async function createRsbuild(options = {}) {
     setCssExtractPlugin
   });
   const rsbuild = {
-    ...(0, import_shared57.pick)(pluginManager, [
+    ...(0, import_shared58.pick)(pluginManager, [
       "addPlugins",
       "getPlugins",
       "removePlugins",
       "isPluginExists"
     ]),
-    ...(0, import_shared57.pick)(pluginAPI, [
+    ...(0, import_shared58.pick)(pluginAPI, [
       "onBeforeBuild",
       "onBeforeCreateCompiler",
       "onBeforeStartDevServer",
@@ -6726,7 +7025,7 @@ async function createRsbuild(options = {}) {
       "getRsbuildConfig",
       "getNormalizedConfig"
     ]),
-    ...(0, import_shared57.pick)(providerInstance, [
+    ...(0, import_shared58.pick)(providerInstance, [
       "build",
       "preview",
       "initConfigs",
@@ -6743,11 +7042,11 @@ async function createRsbuild(options = {}) {
   }
   return rsbuild;
 }
-var import_shared57, getRspackProvider, pickRsbuildConfig;
+var import_shared58, getRspackProvider, pickRsbuildConfig;
 var init_createRsbuild = __esm({
   "src/createRsbuild.ts"() {
     "use strict";
-    import_shared57 = require("@rsbuild/shared");
+    import_shared58 = require("@rsbuild/shared");
     init_createContext();
     init_initPlugins();
     init_pluginHelper();
@@ -6769,7 +7068,7 @@ var init_createRsbuild = __esm({
         "moduleFederation",
         "_privateMeta"
       ];
-      return (0, import_shared57.pick)(rsbuildConfig, keys);
+      return (0, import_shared58.pick)(rsbuildConfig, keys);
     };
   }
 });
@@ -6788,7 +7087,7 @@ async function init({
       cwd: root,
       mode: cliOptions?.envMode
     });
-    if ((0, import_shared58.isDev)()) {
+    if ((0, import_shared59.isDev)()) {
       onBeforeRestartServer(envs.cleanup);
     }
     const { content: config, filePath: configFilePath } = await loadConfig({
@@ -6810,9 +7109,9 @@ async function init({
       ...envs.publicVars,
       ...config.source.define
     };
-    if (commonOpts.open && !config.dev?.startUrl) {
-      config.dev ||= {};
-      config.dev.startUrl = commonOpts.open;
+    if (commonOpts.open && !config.server?.open) {
+      config.server ||= {};
+      config.server.open = commonOpts.open;
     }
     if (commonOpts.host) {
       config.server ||= {};
@@ -6828,17 +7127,17 @@ async function init({
     });
   } catch (err) {
     if (isRestart) {
-      import_shared58.logger.error(err);
+      import_shared59.logger.error(err);
     } else {
       throw err;
     }
   }
 }
-var import_shared58, commonOpts;
+var import_shared59, commonOpts;
 var init_init = __esm({
   "src/cli/init.ts"() {
     "use strict";
-    import_shared58 = require("@rsbuild/shared");
+    import_shared59 = require("@rsbuild/shared");
     init_config();
     init_loadEnv();
     init_restart();
@@ -6856,7 +7155,7 @@ __export(src_exports, {
   defineConfig: () => defineConfig,
   loadConfig: () => loadConfig,
   loadEnv: () => loadEnv,
-  logger: () => import_shared61.logger,
+  logger: () => import_shared62.logger,
   mergeRsbuildConfig: () => mergeRsbuildConfig,
   rspack: () => import_core10.rspack,
   version: () => version
@@ -6879,16 +7178,18 @@ __export(internal_exports, {
   initHooks: () => initHooks,
   initPlugins: () => initPlugins,
   initRsbuildConfig: () => initRsbuildConfig,
+  outputInspectConfigFiles: () => outputInspectConfigFiles,
   prepareCli: () => prepareCli,
   runCli: () => runCli,
   setHTMLPlugin: () => setHTMLPlugin,
-  startProdServer: () => startProdServer
+  startProdServer: () => startProdServer,
+  stringifyConfig: () => stringifyConfig
 });
 
 // src/cli/commands.ts
 var import_node_fs5 = require("fs");
 var import_node_path28 = require("path");
-var import_shared59 = require("@rsbuild/shared");
+var import_shared60 = require("@rsbuild/shared");
 var import_commander = require("../compiled/commander/index.js");
 init_helpers();
 init_init();
@@ -6905,7 +7206,7 @@ var applyServerOptions = (command) => {
   command.option("-o --open [url]", "open the page in browser on startup").option("--port <port>", "specify a port number for server to listen").option("--host <host>", "specify the host that the server listens to");
 };
 function runCli() {
-  import_commander.program.name("rsbuild").usage("<command> [options]").version("0.7.2");
+  import_commander.program.name("rsbuild").usage("<command> [options]").version("0.7.4");
   const devCommand = import_commander.program.command("dev");
   const buildCommand = import_commander.program.command("build");
   const previewCommand = import_commander.program.command("preview");
@@ -6919,8 +7220,8 @@ function runCli() {
       const rsbuild = await init({ cliOptions: options });
       await rsbuild?.startDevServer();
     } catch (err) {
-      import_shared59.logger.error("Failed to start dev server.");
-      import_shared59.logger.error(err);
+      import_shared60.logger.error("Failed to start dev server.");
+      import_shared60.logger.error(err);
       process.exit(1);
     }
   });
@@ -6931,8 +7232,8 @@ function runCli() {
         watch: options.watch
       });
     } catch (err) {
-      import_shared59.logger.error("Failed to build.");
-      import_shared59.logger.error(err);
+      import_shared60.logger.error("Failed to build.");
+      import_shared60.logger.error(err);
       process.exit(1);
     }
   });
@@ -6943,14 +7244,14 @@ function runCli() {
         const { distPath } = rsbuild.context;
         if (!(0, import_node_fs5.existsSync)(distPath)) {
           throw new Error(
-            `The output directory ${import_shared59.color.yellow(
+            `The output directory ${import_shared60.color.yellow(
               distPath
             )} does not exist, please build the project before previewing.`
           );
         }
         if (isEmptyDir(distPath)) {
           throw new Error(
-            `The output directory ${import_shared59.color.yellow(
+            `The output directory ${import_shared60.color.yellow(
               distPath
             )} is empty, please build the project before previewing.`
           );
@@ -6958,8 +7259,8 @@ function runCli() {
       }
       await rsbuild?.preview();
     } catch (err) {
-      import_shared59.logger.error("Failed to start preview server.");
-      import_shared59.logger.error(err);
+      import_shared60.logger.error("Failed to start preview server.");
+      import_shared60.logger.error(err);
       process.exit(1);
     }
   });
@@ -6973,8 +7274,8 @@ function runCli() {
         writeToDisk: true
       });
     } catch (err) {
-      import_shared59.logger.error("Failed to inspect config.");
-      import_shared59.logger.error(err);
+      import_shared60.logger.error("Failed to inspect config.");
+      import_shared60.logger.error(err);
       process.exit(1);
     }
   });
@@ -6982,7 +7283,7 @@ function runCli() {
 }
 
 // src/cli/prepare.ts
-var import_shared60 = require("@rsbuild/shared");
+var import_shared61 = require("@rsbuild/shared");
 function initNodeEnv() {
   if (!process.env.NODE_ENV) {
     const command = process.argv[2];
@@ -6995,7 +7296,7 @@ function prepareCli() {
   if (!npm_execpath || npm_execpath.includes("npx-cli.js") || npm_execpath.includes(".bun")) {
     console.log();
   }
-  import_shared60.logger.greet(`  ${`Rsbuild v${"0.7.2"}`}
+  import_shared61.logger.greet(`  ${`Rsbuild v${"0.7.4"}`}
 `);
 }
 
@@ -7003,6 +7304,7 @@ function prepareCli() {
 init_pluginManager();
 init_initHooks();
 init_initConfigs();
+init_config();
 init_pluginHelper();
 init_helpers();
 init_rspackConfig();
@@ -7018,10 +7320,10 @@ init_prodServer();
 init_loadEnv();
 init_createRsbuild();
 init_config();
-var import_shared61 = require("@rsbuild/shared");
+var import_shared62 = require("@rsbuild/shared");
 init_mergeConfig();
 init_constants();
-var version = "0.7.2";
+var version = "0.7.4";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   PLUGIN_CSS_NAME,