@rsbuild/core 0.7.2 → 0.7.4

package/dist/index.js

@@ -23,12 +23,12 @@ var __publicField = (obj, key, value) => {
   return value;
 };
 
-// ../../node_modules/.pnpm/@modern-js+module-tools@2.50.0_eslint@9.4.0_typescript@5.4.5/node_modules/@modern-js/module-tools/shims/esm.js
+// ../../node_modules/.pnpm/@modern-js+module-tools@2.52.0_eslint@9.4.0_typescript@5.4.5/node_modules/@modern-js/module-tools/shims/esm.js
 import { fileURLToPath } from "url";
 import path from "path";
 var getFilename, getDirname, __dirname, __filename;
 var init_esm = __esm({
-  "../../node_modules/.pnpm/@modern-js+module-tools@2.50.0_eslint@9.4.0_typescript@5.4.5/node_modules/@modern-js/module-tools/shims/esm.js"() {
+  "../../node_modules/.pnpm/@modern-js+module-tools@2.52.0_eslint@9.4.0_typescript@5.4.5/node_modules/@modern-js/module-tools/shims/esm.js"() {
     "use strict";
     getFilename = () => fileURLToPath(import.meta.url);
     getDirname = () => path.dirname(getFilename());
@@ -118,19 +118,53 @@ var init_format = __esm({
 
 // src/constants.ts
 import { join } from "path";
-var PLUGIN_SWC_NAME, PLUGIN_CSS_NAME, LOADER_PATH, STATIC_PATH, COMPILED_PATH, TS_CONFIG_FILE, HTML_REGEX, CSS_REGEX;
+var ROOT_DIST_DIR, HTML_DIST_DIR, SERVER_DIST_DIR, SERVICE_WORKER_DIST_DIR, JS_DIST_DIR, CSS_DIST_DIR, SVG_DIST_DIR, FONT_DIST_DIR, WASM_DIST_DIR, IMAGE_DIST_DIR, MEDIA_DIST_DIR, LOADER_PATH, STATIC_PATH, COMPILED_PATH, TS_CONFIG_FILE, DEFAULT_PORT, DEFAULT_DATA_URL_SIZE, DEFAULT_MOUNT_ID, DEFAULT_DEV_HOST, HTML_REGEX, CSS_REGEX, PLUGIN_SWC_NAME, PLUGIN_CSS_NAME, FONT_EXTENSIONS, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, AUDIO_EXTENSIONS;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
     init_esm();
-    PLUGIN_SWC_NAME = "rsbuild:swc";
-    PLUGIN_CSS_NAME = "rsbuild:css";
+    ROOT_DIST_DIR = "dist";
+    HTML_DIST_DIR = "/";
+    SERVER_DIST_DIR = "server";
+    SERVICE_WORKER_DIST_DIR = "worker";
+    JS_DIST_DIR = "static/js";
+    CSS_DIST_DIR = "static/css";
+    SVG_DIST_DIR = "static/svg";
+    FONT_DIST_DIR = "static/font";
+    WASM_DIST_DIR = "static/wasm";
+    IMAGE_DIST_DIR = "static/image";
+    MEDIA_DIST_DIR = "static/media";
     LOADER_PATH = join(__dirname);
     STATIC_PATH = join(__dirname, "../static");
     COMPILED_PATH = join(__dirname, "../compiled");
     TS_CONFIG_FILE = "tsconfig.json";
+    DEFAULT_PORT = 3e3;
+    DEFAULT_DATA_URL_SIZE = 4096;
+    DEFAULT_MOUNT_ID = "root";
+    DEFAULT_DEV_HOST = "0.0.0.0";
     HTML_REGEX = /\.html$/;
     CSS_REGEX = /\.css$/;
+    PLUGIN_SWC_NAME = "rsbuild:swc";
+    PLUGIN_CSS_NAME = "rsbuild:css";
+    FONT_EXTENSIONS = ["woff", "woff2", "eot", "ttf", "otf", "ttc"];
+    IMAGE_EXTENSIONS = [
+      "png",
+      "jpg",
+      "jpeg",
+      "pjpeg",
+      "pjp",
+      "gif",
+      "bmp",
+      "webp",
+      "ico",
+      "apng",
+      "avif",
+      "tif",
+      "tiff",
+      "jfif"
+    ];
+    VIDEO_EXTENSIONS = ["mp4", "webm", "ogg", "mov"];
+    AUDIO_EXTENSIONS = ["mp3", "wav", "flac", "aac", "m4a", "opus"];
   }
 });
 
@@ -371,6 +405,7 @@ var init_mergeConfig = __esm({
       "output.cssModules.auto",
       "output.targets",
       "output.emitAssets",
+      "server.open",
       "server.printUrls",
       "dev.startUrl",
       "provider"
@@ -459,27 +494,15 @@ var init_restart = __esm({
 import fs from "fs";
 import { isAbsolute, join as join2 } from "path";
 import {
-  CSS_DIST_DIR,
   DEFAULT_ASSET_PREFIX as DEFAULT_ASSET_PREFIX2,
-  DEFAULT_DATA_URL_SIZE,
-  DEFAULT_DEV_HOST,
-  DEFAULT_MOUNT_ID,
-  DEFAULT_PORT,
-  FONT_DIST_DIR,
-  HTML_DIST_DIR,
-  IMAGE_DIST_DIR,
-  JS_DIST_DIR,
-  MEDIA_DIST_DIR,
-  ROOT_DIST_DIR,
-  SERVER_DIST_DIR,
-  SERVICE_WORKER_DIST_DIR,
-  SVG_DIST_DIR,
-  WASM_DIST_DIR,
+  RspackChain,
   color as color3,
   debounce,
+  fse as fse2,
   getNodeEnv,
   isObject,
-  logger as logger2
+  logger as logger2,
+  upperFirst
 } from "@rsbuild/shared";
 function getDefaultEntry(root) {
   const files = [
@@ -583,6 +606,55 @@ async function loadConfig({
     throw err;
   }
 }
+async function outputInspectConfigFiles({
+  rsbuildConfig,
+  rawRsbuildConfig,
+  bundlerConfigs,
+  inspectOptions,
+  configType
+}) {
+  const { outputPath } = inspectOptions;
+  const files = [
+    {
+      path: join2(outputPath, "rsbuild.config.mjs"),
+      label: "Rsbuild Config",
+      content: rawRsbuildConfig
+    },
+    ...bundlerConfigs.map((content, index) => {
+      const suffix = rsbuildConfig.output.targets[index];
+      const outputFile = `${configType}.config.${suffix}.mjs`;
+      let outputFilePath = join2(outputPath, outputFile);
+      if (fse2.existsSync(outputFilePath)) {
+        outputFilePath = outputFilePath.replace(/\.mjs$/, `.${Date.now()}.mjs`);
+      }
+      return {
+        path: outputFilePath,
+        label: `${upperFirst(configType)} Config (${suffix})`,
+        content
+      };
+    })
+  ];
+  await Promise.all(
+    files.map(
+      (item) => fse2.outputFile(item.path, `export default ${item.content}`)
+    )
+  );
+  const fileInfos = files.map(
+    (item) => `  - ${color3.bold(color3.yellow(item.label))}: ${color3.underline(
+      item.path
+    )}`
+  ).join("\n");
+  logger2.success(
+    `Inspect config succeed, open following files to view the content: 
+
+${fileInfos}
+`
+  );
+}
+async function stringifyConfig(config, verbose) {
+  const stringify = RspackChain.toString;
+  return stringify(config, { verbose });
+}
 var getDefaultDevConfig, getDefaultServerConfig, getDefaultSourceConfig, getDefaultHtmlConfig, getDefaultSecurityConfig, getDefaultToolsConfig, getDefaultPerformanceConfig, getDefaultOutputConfig, createDefaultConfig, withDefaultConfig, normalizeConfig, resolveConfigPath;
 var init_config = __esm({
   "src/config.ts"() {
@@ -604,6 +676,7 @@ var init_config = __esm({
     getDefaultServerConfig = () => ({
       port: DEFAULT_PORT,
       host: DEFAULT_DEV_HOST,
+      open: false,
       htmlFallback: "index",
       compress: true,
       printUrls: true,
@@ -636,7 +709,10 @@ var init_config = __esm({
       scriptLoading: "defer"
     });
     getDefaultSecurityConfig = () => ({
-      nonce: ""
+      nonce: "",
+      sri: {
+        enable: false
+      }
     });
     getDefaultToolsConfig = () => ({
       cssExtract: {
@@ -757,8 +833,8 @@ var init_config = __esm({
 import fs2 from "fs";
 import { join as join3 } from "path";
 import { getNodeEnv as getNodeEnv2 } from "@rsbuild/shared";
-import { expand } from "../compiled/dotenv-expand/index.js";
 import { parse } from "../compiled/dotenv/index.js";
+import { expand } from "../compiled/dotenv-expand/index.js";
 function loadEnv({
   cwd = process.cwd(),
   mode = getNodeEnv2(),
@@ -889,17 +965,16 @@ import {
   castArray as castArray2,
   color as color4,
   createVirtualModule,
-  mergeChainedOptions
+  reduceConfigsMergeContext
 } from "@rsbuild/shared";
 function getEntryObject(config, target) {
   if (!config.source?.entry) {
     return {};
   }
-  return mergeChainedOptions({
-    defaults: {},
-    options: config.source?.entry,
-    utils: { target },
-    useObjectParam: true
+  return reduceConfigsMergeContext({
+    initial: {},
+    config: config.source?.entry,
+    ctx: { target }
   });
 }
 var pluginEntry;
@@ -967,7 +1042,7 @@ async function createContextByConfig(options, bundlerType, config = {}) {
   return {
     entry: getEntryObject(config, "web"),
     targets: config.output?.targets || [],
-    version: "0.7.2",
+    version: "0.7.4",
     rootPath,
     distPath,
     cachePath,
@@ -1369,9 +1444,7 @@ __export(inspectConfig_exports, {
 import { isAbsolute as isAbsolute3, join as join6 } from "path";
 import {
   getNodeEnv as getNodeEnv3,
-  outputInspectConfigFiles,
-  setNodeEnv,
-  stringifyConfig
+  setNodeEnv
 } from "@rsbuild/shared";
 async function inspectConfig({
   context,
@@ -1432,6 +1505,7 @@ var init_inspectConfig = __esm({
   "src/provider/inspectConfig.ts"() {
     "use strict";
     init_esm();
+    init_config();
     init_initConfigs();
   }
 });
@@ -1443,8 +1517,8 @@ import {
   chainToConfig,
   debug as debug2,
   getNodeEnv as getNodeEnv4,
-  mergeChainedOptions as mergeChainedOptions2,
-  modifyBundlerChain
+  modifyBundlerChain,
+  reduceConfigsAsyncWithContext
 } from "@rsbuild/shared";
 import { rspack as rspack2 } from "@rspack/core";
 async function modifyRspackConfig(context, rspackConfig, utils) {
@@ -1454,10 +1528,10 @@ async function modifyRspackConfig(context, rspackConfig, utils) {
     utils
   );
   if (context.config.tools?.rspack) {
-    modifiedConfig = mergeChainedOptions2({
-      defaults: modifiedConfig,
-      options: context.config.tools.rspack,
-      utils,
+    modifiedConfig = await reduceConfigsAsyncWithContext({
+      initial: modifiedConfig,
+      config: context.config.tools.rspack,
+      ctx: utils,
       mergeFn: utils.mergeConfig
     });
   }
@@ -2189,8 +2263,6 @@ var init_getDevMiddlewares = __esm({
 import net from "net";
 import os from "os";
 import {
-  DEFAULT_DEV_HOST as DEFAULT_DEV_HOST2,
-  DEFAULT_PORT as DEFAULT_PORT2,
   color as color8,
   deepmerge,
   isFunction as isFunction4,
@@ -2266,6 +2338,7 @@ var init_helper = __esm({
   "src/server/helper.ts"() {
     "use strict";
     init_esm();
+    init_constants();
     formatPrefix = (prefix) => {
       if (!prefix) {
         return "/";
@@ -2340,10 +2413,10 @@ var init_helper = __esm({
       config,
       getPortSilently
     }) => {
-      const host = config.server.host || DEFAULT_DEV_HOST2;
+      const host = config.server.host || DEFAULT_DEV_HOST;
       const port = await getPort({
         host,
-        port: config.server.port || DEFAULT_PORT2,
+        port: config.server.port || DEFAULT_PORT,
         strictPort: config.server.strictPort || false,
         silent: getPortSilently
       });
@@ -2417,7 +2490,7 @@ var init_helper = __esm({
       port,
       host
     }) => {
-      if (host && host !== DEFAULT_DEV_HOST2) {
+      if (host && host !== DEFAULT_DEV_HOST) {
         return [
           {
             label: isLoopbackHost(host) ? LOCAL_LABEL : NETWORK_LABEL,
@@ -2800,7 +2873,6 @@ __export(devServer_exports, {
 });
 import fs3 from "fs";
 import {
-  ROOT_DIST_DIR as ROOT_DIST_DIR2,
   debug as debug6,
   getNodeEnv as getNodeEnv5,
   getPublicPathFromCompiler,
@@ -2892,7 +2964,7 @@ async function createDevServer(options, createDevMiddleware2, config, {
     dev: devConfig,
     server: serverConfig,
     output: {
-      distPath: config.output.distPath.root || ROOT_DIST_DIR2
+      distPath: config.output.distPath.root || ROOT_DIST_DIR
     },
     outputFileSystem
   });
@@ -2965,6 +3037,7 @@ var init_devServer = __esm({
   "src/server/devServer.ts"() {
     "use strict";
     init_esm();
+    init_constants();
     init_getDevMiddlewares();
     init_helper();
     init_httpServer();
@@ -2982,7 +3055,6 @@ __export(prodServer_exports, {
 });
 import { join as join8 } from "path";
 import {
-  ROOT_DIST_DIR as ROOT_DIST_DIR3,
   getNodeEnv as getNodeEnv6,
   isDebug as isDebug4,
   setNodeEnv as setNodeEnv3
@@ -3002,7 +3074,7 @@ async function startProdServer(context, config, { getPortSilently } = {}) {
     {
       pwd: context.rootPath,
       output: {
-        path: config.output.distPath.root || ROOT_DIST_DIR3,
+        path: config.output.distPath.root || ROOT_DIST_DIR,
         assetPrefix: config.output.assetPrefix
       },
       serverConfig
@@ -3062,6 +3134,7 @@ var init_prodServer = __esm({
   "src/server/prodServer.ts"() {
     "use strict";
     init_esm();
+    init_constants();
     init_helper();
     init_httpServer();
     init_middlewares();
@@ -3325,12 +3398,12 @@ var init_basic = __esm({
       name: "rsbuild:basic",
       setup(api) {
         api.modifyBundlerChain(
-          (chain, { env, isProd: isProd4, target, bundler, CHAIN_ID: CHAIN_ID3 }) => {
+          (chain, { env, isProd: isProd5, target, bundler, CHAIN_ID: CHAIN_ID3 }) => {
             const config = api.getNormalizedConfig();
             chain.name(TARGET_ID_MAP2[target]);
             chain.devtool(getJsSourceMap(config));
             chain.context(api.context.rootPath);
-            chain.mode(isProd4 ? "production" : "development");
+            chain.mode(isProd5 ? "production" : "development");
             chain.merge({
               infrastructureLogging: {
                 // Using `error` level to avoid `cache.PackFileCacheStrategy` logs
@@ -3343,9 +3416,9 @@ var init_basic = __esm({
                 exportsPresence: "error"
               }
             });
-            const isMinimize = isProd4 && config.output.minify !== false;
+            const isMinimize = isProd5 && config.output.minify !== false;
             chain.optimization.minimize(isMinimize);
-            const usingHMR = isUsingHMR(config, { target, isProd: isProd4 });
+            const usingHMR = isUsingHMR(config, { target, isProd: isProd5 });
             if (usingHMR) {
               chain.plugin(CHAIN_ID3.PLUGIN.HMR).use(bundler.HotModuleReplacementPlugin);
             }
@@ -3370,17 +3443,17 @@ __export(cache_exports, {
 });
 import crypto from "crypto";
 import { isAbsolute as isAbsolute5, join as join9 } from "path";
-import { fse as fse2 } from "@rsbuild/shared";
+import { fse as fse3 } from "@rsbuild/shared";
 async function validateCache(cacheDirectory, buildDependencies) {
   const configFile = join9(cacheDirectory, "buildDependencies.json");
   if (await isFileExists(configFile)) {
-    const prevBuildDependencies = await fse2.readJSON(configFile);
+    const prevBuildDependencies = await fse3.readJSON(configFile);
     if (JSON.stringify(prevBuildDependencies) === JSON.stringify(buildDependencies)) {
       return;
     }
-    await fse2.remove(cacheDirectory);
+    await fse3.remove(cacheDirectory);
   }
-  await fse2.outputJSON(configFile, buildDependencies);
+  await fse3.outputJSON(configFile, buildDependencies);
 }
 function getDigestHash(digest) {
   const fsHash = crypto.createHash("md5");
@@ -3516,7 +3589,8 @@ import {
   getBrowserslistWithDefault as getBrowserslistWithDefault2,
   isFunction as isFunction5,
   isPlainObject as isPlainObject2,
-  mergeChainedOptions as mergeChainedOptions3
+  reduceConfigs,
+  reduceConfigsWithContext
 } from "@rsbuild/shared";
 async function loadUserPostcssrc(root) {
   const cached = userPostcssrcCache.get(root);
@@ -3540,7 +3614,7 @@ async function applyCSSRule({
   rule,
   config,
   context,
-  utils: { target, isProd: isProd4, CHAIN_ID: CHAIN_ID3 },
+  utils: { target, isProd: isProd5, CHAIN_ID: CHAIN_ID3 },
   importLoaders = 1
 }) {
   const browserslist = await getBrowserslistWithDefault2(
@@ -3549,7 +3623,7 @@ async function applyCSSRule({
     target
   );
   const enableExtractCSS = isUseCssExtract(config, target);
-  const localIdentName = getCSSModulesLocalIdentName(config, isProd4);
+  const localIdentName = getCSSModulesLocalIdentName(config, isProd5);
   const cssLoaderOptions = getCSSLoaderOptions({
     config,
     importLoaders,
@@ -3560,9 +3634,9 @@ async function applyCSSRule({
     if (enableExtractCSS) {
       rule.use(CHAIN_ID3.USE.MINI_CSS_EXTRACT).loader(getCssExtractPlugin().loader).options(config.tools.cssExtract.loaderOptions).end();
     } else {
-      const styleLoaderOptions = mergeChainedOptions3({
-        defaults: {},
-        options: config.tools.styleLoader
+      const styleLoaderOptions = reduceConfigs({
+        initial: {},
+        config: config.tools.styleLoader
       });
       rule.use(CHAIN_ID3.USE.STYLE).loader(getCompiledPath("style-loader")).options(styleLoaderOptions).end();
     }
@@ -3591,8 +3665,8 @@ var init_css = __esm({
     init_pluginHelper();
     enableNativeCss = (config) => !config.output.injectStyles;
     isUseCssExtract = (config, target) => !config.output.injectStyles && target !== "node" && target !== "web-worker";
-    getCSSModulesLocalIdentName = (config, isProd4) => config.output.cssModules.localIdentName || // Using shorter classname in production to reduce bundle size
-    (isProd4 ? "[local]-[hash:base64:6]" : "[path][name]__[local]-[hash:base64:6]");
+    getCSSModulesLocalIdentName = (config, isProd5) => config.output.cssModules.localIdentName || // Using shorter classname in production to reduce bundle size
+    (isProd5 ? "[local]-[hash:base64:6]" : "[path][name]__[local]-[hash:base64:6]");
     normalizeCssLoaderOptions = (options, exportOnlyLocals) => {
       if (options.modules && exportOnlyLocals) {
         let { modules } = options;
@@ -3629,12 +3703,12 @@ var init_css = __esm({
       });
       if (!hasAutoprefixer) {
         const { default: autoprefixer } = await import("@rsbuild/shared/autoprefixer");
-        const autoprefixerOptions = mergeChainedOptions3({
-          defaults: {
+        const autoprefixerOptions = reduceConfigs({
+          initial: {
             flexbox: "no-2009",
             overrideBrowserslist: browserslist
           },
-          options: config.tools.autoprefixer
+          config: config.tools.autoprefixer
         });
         pluginObjects.push(autoprefixer(autoprefixerOptions));
       }
@@ -3669,10 +3743,10 @@ var init_css = __esm({
         },
         sourceMap: config.output.sourceMap.css
       };
-      const mergedConfig = mergeChainedOptions3({
-        defaults: defaultPostcssConfig,
-        options: config.tools.postcss,
-        utils
+      const mergedConfig = reduceConfigsWithContext({
+        initial: defaultPostcssConfig,
+        config: config.tools.postcss,
+        ctx: utils
       });
       if (extraPlugins.length) {
         mergedConfig?.postcssOptions?.plugins.push(...extraPlugins);
@@ -3696,9 +3770,9 @@ var init_css = __esm({
         },
         sourceMap: config.output.sourceMap.css
       };
-      const mergedCssLoaderOptions = mergeChainedOptions3({
-        defaults: defaultOptions2,
-        options: config.tools.cssLoader,
+      const mergedCssLoaderOptions = reduceConfigs({
+        initial: defaultOptions2,
+        config: config.tools.cssLoader,
         mergeFn: deepmerge2
       });
       const cssLoaderOptions = normalizeCssLoaderOptions(
@@ -3741,20 +3815,18 @@ __export(output_exports, {
 import { posix } from "path";
 import {
   DEFAULT_ASSET_PREFIX as DEFAULT_ASSET_PREFIX3,
-  DEFAULT_DEV_HOST as DEFAULT_DEV_HOST3,
-  DEFAULT_PORT as DEFAULT_PORT3,
   getDistPath as getDistPath3,
   getFilename as getFilename2
 } from "@rsbuild/shared";
 import { rspack as rspack5 } from "@rspack/core";
 function getPublicPath({
-  isProd: isProd4,
+  isProd: isProd5,
   config,
   context
 }) {
   const { dev, output } = config;
   let publicPath = DEFAULT_ASSET_PREFIX3;
-  if (isProd4) {
+  if (isProd5) {
     if (typeof output.assetPrefix === "string") {
       publicPath = output.assetPrefix;
     }
@@ -3762,9 +3834,9 @@ function getPublicPath({
     publicPath = dev.assetPrefix;
   } else if (dev.assetPrefix === true) {
     const protocol = context.devServer?.https ? "https" : "http";
-    const hostname = context.devServer?.hostname || DEFAULT_DEV_HOST3;
-    const port = context.devServer?.port || DEFAULT_PORT3;
-    if (hostname === DEFAULT_DEV_HOST3) {
+    const hostname = context.devServer?.hostname || DEFAULT_DEV_HOST;
+    const port = context.devServer?.port || DEFAULT_PORT;
+    if (hostname === DEFAULT_DEV_HOST) {
       const localHostname = "localhost";
       publicPath = `${protocol}://${localHostname}:${port}/`;
     } else {
@@ -3778,6 +3850,7 @@ var init_output = __esm({
   "src/plugins/output.ts"() {
     "use strict";
     init_esm();
+    init_constants();
     init_helpers();
     init_pluginHelper();
     init_css();
@@ -3785,20 +3858,34 @@ var init_output = __esm({
       name: "rsbuild:output",
       setup(api) {
         api.modifyBundlerChain(
-          async (chain, { CHAIN_ID: CHAIN_ID3, target, isProd: isProd4, isServer, isServiceWorker }) => {
+          async (chain, { CHAIN_ID: CHAIN_ID3, target, isProd: isProd5, isServer, isServiceWorker }) => {
             const config = api.getNormalizedConfig();
             const publicPath = getPublicPath({
               config,
-              isProd: isProd4,
+              isProd: isProd5,
               context: api.context
             });
             const jsPath = getDistPath3(config, "js");
             const jsAsyncPath = getDistPath3(config, "jsAsync");
-            const jsFilename = getFilename2(config, "js", isProd4);
-            chain.output.path(api.context.distPath).filename(posix.join(jsPath, jsFilename)).chunkFilename(posix.join(jsAsyncPath, jsFilename)).publicPath(publicPath).pathinfo(false).hashFunction("xxhash64");
+            const jsFilename = getFilename2(config, "js", isProd5);
+            const isJsFilenameFn = typeof jsFilename === "function";
+            chain.output.path(api.context.distPath).filename(
+              isJsFilenameFn ? (...args) => {
+                const name = jsFilename(...args);
+                return posix.join(jsPath, name);
+              } : posix.join(jsPath, jsFilename)
+            ).chunkFilename(
+              isJsFilenameFn ? (...args) => {
+                const name = jsFilename(...args);
+                return posix.join(jsAsyncPath, name);
+              } : posix.join(jsAsyncPath, jsFilename)
+            ).publicPath(publicPath).pathinfo(false).hashFunction("xxhash64");
             if (isServer) {
               const serverPath = getDistPath3(config, "server");
-              chain.output.path(posix.join(api.context.distPath, serverPath)).filename("[name].js").chunkFilename("[name].js").libraryTarget("commonjs2");
+              chain.output.path(posix.join(api.context.distPath, serverPath)).filename("[name].js").chunkFilename("[name].js").library({
+                ...chain.output.get("library") || {},
+                type: "commonjs2"
+              });
             }
             if (isServiceWorker) {
               const workerPath = getDistPath3(config, "worker");
@@ -3813,7 +3900,7 @@ var init_output = __esm({
             if (isUseCssExtract(config, target)) {
               const extractPluginOptions = config.tools.cssExtract.pluginOptions;
               const cssPath = getDistPath3(config, "css");
-              const cssFilename = getFilename2(config, "css", isProd4);
+              const cssFilename = getFilename2(config, "css", isProd5);
               const cssAsyncPath = getDistPath3(config, "cssAsync");
               chain.plugin(CHAIN_ID3.PLUGIN.MINI_CSS_EXTRACT).use(getCssExtractPlugin(), [
                 {
@@ -3837,7 +3924,7 @@ __export(resolve_exports, {
 });
 import {
   castArray as castArray4,
-  mergeChainedOptions as mergeChainedOptions4
+  reduceConfigsWithContext as reduceConfigsWithContext2
 } from "@rsbuild/shared";
 function applyFullySpecified({
   chain,
@@ -3867,10 +3954,10 @@ function applyAlias({
   if (!alias) {
     return;
   }
-  const mergedAlias = mergeChainedOptions4({
-    defaults: {},
-    options: alias,
-    utils: { target }
+  const mergedAlias = reduceConfigsWithContext2({
+    initial: {},
+    config: alias,
+    ctx: { target }
   });
   for (const name of Object.keys(mergedAlias)) {
     const values = castArray4(mergedAlias[name]);
@@ -3929,7 +4016,7 @@ __export(fileSize_exports, {
   pluginFileSize: () => pluginFileSize
 });
 import path7 from "path";
-import { JS_REGEX, fse as fse3 } from "@rsbuild/shared";
+import { JS_REGEX, fse as fse4 } from "@rsbuild/shared";
 import { color as color9, logger as logger11 } from "@rsbuild/shared";
 async function printHeader(longestFileLength, longestLabelLength) {
   const longestLengths = [longestFileLength, longestLabelLength];
@@ -3950,7 +4037,7 @@ async function printFileSizes(config, stats, rootPath) {
   const { default: gzipSize } = await import("@rsbuild/shared/gzip-size");
   const formatAsset = (asset, distPath, distFolder) => {
     const fileName = asset.name.split("?")[0];
-    const contents = fse3.readFileSync(path7.join(distPath, fileName));
+    const contents = fse4.readFileSync(path7.join(distPath, fileName));
     const size = contents.length;
     const gzippedSize = gzipSize.sync(contents);
     return {
@@ -4103,15 +4190,15 @@ __export(cleanOutput_exports, {
   pluginCleanOutput: () => pluginCleanOutput
 });
 import { sep } from "path";
-import { color as color10, fse as fse4, logger as logger12 } from "@rsbuild/shared";
+import { color as color10, fse as fse5, logger as logger12 } from "@rsbuild/shared";
 var emptyDir, addTrailingSep, isStrictSubdir, pluginCleanOutput;
 var init_cleanOutput = __esm({
   "src/plugins/cleanOutput.ts"() {
     "use strict";
     init_esm();
     emptyDir = async (dir) => {
-      if (await fse4.pathExists(dir)) {
-        await fse4.emptyDir(dir);
+      if (await fse5.pathExists(dir)) {
+        await fse5.emptyDir(dir);
       }
     };
     addTrailingSep = (dir) => dir.endsWith(sep) ? dir : dir + sep;
@@ -4158,14 +4245,7 @@ __export(asset_exports, {
   pluginAsset: () => pluginAsset
 });
 import path8 from "path";
-import {
-  AUDIO_EXTENSIONS,
-  FONT_EXTENSIONS,
-  IMAGE_EXTENSIONS,
-  VIDEO_EXTENSIONS,
-  getDistPath as getDistPath4,
-  getFilename as getFilename3
-} from "@rsbuild/shared";
+import { getDistPath as getDistPath4, getFilename as getFilename3 } from "@rsbuild/shared";
 function getRegExpForExts(exts) {
   const matcher = exts.map((ext) => ext.trim()).map((ext) => ext.startsWith(".") ? ext.slice(1) : ext).join("|");
   return new RegExp(
@@ -4178,6 +4258,7 @@ var init_asset = __esm({
   "src/plugins/asset.ts"() {
     "use strict";
     init_esm();
+    init_constants();
     chainStaticAssetRule = ({
       emit,
       rule,
@@ -4202,12 +4283,12 @@ var init_asset = __esm({
     pluginAsset = () => ({
       name: "rsbuild:asset",
       setup(api) {
-        api.modifyBundlerChain((chain, { isProd: isProd4, target }) => {
+        api.modifyBundlerChain((chain, { isProd: isProd5, target }) => {
           const config = api.getNormalizedConfig();
           const createAssetRule = (assetType, exts, emit2) => {
             const regExp = getRegExpForExts(exts);
             const distDir = getDistPath4(config, assetType);
-            const filename = getFilename3(config, assetType, isProd4);
+            const filename = getFilename3(config, assetType, isProd5);
             const { dataUriLimit } = config.output;
             const maxSize = typeof dataUriLimit === "number" ? dataUriLimit : dataUriLimit[assetType];
             const rule = chain.module.rule(assetType).test(regExp);
@@ -4290,9 +4371,9 @@ var init_minimize = __esm({
       }
       return options;
     };
-    parseMinifyOptions = (config, isProd4 = true) => {
+    parseMinifyOptions = (config, isProd5 = true) => {
       const minify = config.output.minify;
-      if (minify === false || !isProd4) {
+      if (minify === false || !isProd5) {
         return {
           minifyJs: false,
           minifyCss: false,
@@ -4324,9 +4405,9 @@ var init_minimize = __esm({
         if (api.context.bundlerType === "webpack") {
           return;
         }
-        api.modifyBundlerChain(async (chain, { isProd: isProd4 }) => {
+        api.modifyBundlerChain(async (chain, { isProd: isProd5 }) => {
           const config = api.getNormalizedConfig();
-          const isMinimize = isProd4 && config.output.minify !== false;
+          const isMinimize = isProd5 && config.output.minify !== false;
           if (!isMinimize) {
             return;
           }
@@ -4534,13 +4615,18 @@ var init_HtmlBasicPlugin = __esm({
               addTitleTag(headTags, data.plugin.options?.title);
             }
             addFavicon(headTags, favicon);
-            const result = await this.modifyTagsFn({
+            const tags = {
               headTags: headTags.map(formatBasicTag),
               bodyTags: bodyTags.map(formatBasicTag)
-            });
+            };
+            const modified = this.modifyTagsFn ? await this.modifyTagsFn(tags, {
+              compilation,
+              assetPrefix: data.publicPath,
+              filename: data.outputName
+            }) : tags;
             Object.assign(data, {
-              headTags: result.headTags.map(fromBasicTag),
-              bodyTags: result.bodyTags.map(fromBasicTag)
+              headTags: modified.headTags.map(fromBasicTag),
+              bodyTags: modified.bodyTags.map(fromBasicTag)
             });
             if (tagConfig) {
               const hash = compilation.hash ?? "";
@@ -4636,18 +4722,16 @@ __export(html_exports, {
 });
 import path9, { isAbsolute as isAbsolute6 } from "path";
 import {
-  applyToCompiler as applyToCompiler2,
   castArray as castArray5,
   color as color11,
-  createVirtualModule as createVirtualModule2,
   deepmerge as deepmerge4,
-  fse as fse5,
+  fse as fse6,
   getDistPath as getDistPath5,
   isHtmlDisabled,
-  isNil,
   isPlainObject as isPlainObject3,
   isURL,
-  mergeChainedOptions as mergeChainedOptions5
+  reduceConfigsMergeContext as reduceConfigsMergeContext2,
+  reduceConfigsWithContext as reduceConfigsWithContext3
 } from "@rsbuild/shared";
 function applyRemoveConsole(options, config) {
   const { removeConsole } = config.performance;
@@ -4681,8 +4765,8 @@ function getTerserMinifyOptions(config) {
   const finalOptions = applyRemoveConsole(options, config);
   return finalOptions;
 }
-async function getHtmlMinifyOptions(isProd4, config) {
-  if (!isProd4 || !config.output.minify || !parseMinifyOptions(config).minifyHtml) {
+async function getHtmlMinifyOptions(isProd5, config) {
+  if (!isProd5 || !config.output.minify || !parseMinifyOptions(config).minifyHtml) {
     return false;
   }
   const minifyJS = getTerserMinifyOptions(config);
@@ -4703,29 +4787,25 @@ async function getHtmlMinifyOptions(isProd4, config) {
   return typeof htmlMinifyOptions === "object" ? deepmerge4(htmlMinifyDefaultOptions, htmlMinifyOptions) : htmlMinifyDefaultOptions;
 }
 function getTitle(entryName, config) {
-  return mergeChainedOptions5({
-    defaults: "",
-    options: config.html.title,
-    utils: { entryName },
-    useObjectParam: true
+  return reduceConfigsMergeContext2({
+    initial: "",
+    config: config.html.title,
+    ctx: { entryName }
   });
 }
 function getInject(entryName, config) {
-  return mergeChainedOptions5({
-    defaults: "head",
-    options: config.html.inject,
-    utils: { entryName },
-    useObjectParam: true,
-    isFalsy: isNil
+  return reduceConfigsMergeContext2({
+    initial: "head",
+    config: config.html.inject,
+    ctx: { entryName }
   });
 }
 async function getTemplate(entryName, config, rootPath) {
   const DEFAULT_TEMPLATE = path9.resolve(STATIC_PATH, "template.html");
-  const templatePath = mergeChainedOptions5({
-    defaults: DEFAULT_TEMPLATE,
-    options: config.html.template,
-    utils: { entryName },
-    useObjectParam: true
+  const templatePath = reduceConfigsMergeContext2({
+    initial: DEFAULT_TEMPLATE,
+    config: config.html.template,
+    ctx: { entryName }
   });
   if (templatePath === DEFAULT_TEMPLATE) {
     return {
@@ -4743,26 +4823,24 @@ async function getTemplate(entryName, config, rootPath) {
     }
     existTemplatePath.push(absolutePath);
   }
-  const templateContent = await fse5.readFile(absolutePath, "utf-8");
+  const templateContent = await fse6.readFile(absolutePath, "utf-8");
   return {
     templatePath: absolutePath,
     templateContent
   };
 }
 function getFavicon(entryName, config) {
-  return mergeChainedOptions5({
-    defaults: "",
-    options: config.html.favicon,
-    utils: { entryName },
-    useObjectParam: true
+  return reduceConfigsMergeContext2({
+    initial: "",
+    config: config.html.favicon,
+    ctx: { entryName }
   });
 }
 function getMetaTags(entryName, config, templateContent) {
-  const metaTags = mergeChainedOptions5({
-    defaults: {},
-    options: config.html.meta,
-    utils: { entryName },
-    useObjectParam: true
+  const metaTags = reduceConfigsMergeContext2({
+    initial: {},
+    config: config.html.meta,
+    ctx: { entryName }
   });
   if (templateContent && metaTags.charset) {
     const charsetRegExp = /<meta[^>]+charset=["'][^>]*>/i;
@@ -4787,10 +4865,10 @@ function getTemplateParameters(entryName, config, assetPrefix) {
         options: pluginOptions
       }
     };
-    return mergeChainedOptions5({
-      defaults: defaultOptions2,
-      options: templateParameters,
-      utils: { entryName }
+    return reduceConfigsWithContext3({
+      initial: defaultOptions2,
+      config: templateParameters,
+      ctx: { entryName }
     });
   };
 }
@@ -4838,12 +4916,12 @@ var init_html = __esm({
       name: "rsbuild:html",
       setup(api) {
         api.modifyBundlerChain(
-          async (chain, { HtmlPlugin, isProd: isProd4, CHAIN_ID: CHAIN_ID3, target }) => {
+          async (chain, { HtmlPlugin, isProd: isProd5, CHAIN_ID: CHAIN_ID3, target }) => {
             const config = api.getNormalizedConfig();
             if (isHtmlDisabled(config, target)) {
               return;
             }
-            const minify = await getHtmlMinifyOptions(isProd4, config);
+            const minify = await getHtmlMinifyOptions(isProd5, config);
             const assetPrefix = getPublicPathFromChain(chain, false);
             const entries = chain.entryPoints.entries() || {};
             const entryNames = Object.keys(entries);
@@ -4852,11 +4930,7 @@ var init_html = __esm({
             const finalOptions = await Promise.all(
               entryNames.map(async (entryName) => {
                 const entryValue = entries[entryName].values();
-                const chunks = getChunks(
-                  entryName,
-                  // EntryDescription type is different between webpack and Rspack
-                  entryValue
-                );
+                const chunks = getChunks(entryName, entryValue);
                 const inject = getInject(entryName, config);
                 const filename = htmlPaths[entryName];
                 const { templatePath, templateContent } = await getTemplate(
@@ -4902,13 +4976,10 @@ var init_html = __esm({
                     pluginOptions.favicon = favicon;
                   }
                 }
-                const finalOptions2 = mergeChainedOptions5({
-                  defaults: pluginOptions,
-                  options: typeof config.tools.htmlPlugin === "boolean" ? {} : config.tools.htmlPlugin,
-                  utils: {
-                    entryName,
-                    entryValue
-                  }
+                const finalOptions2 = reduceConfigsWithContext3({
+                  initial: pluginOptions,
+                  config: typeof config.tools.htmlPlugin === "boolean" ? {} : config.tools.htmlPlugin,
+                  ctx: { entryName, entryValue }
                 });
                 return finalOptions2;
               })
@@ -4933,52 +5004,21 @@ var init_html = __esm({
             }
           }
         );
-        api.onAfterCreateCompiler(({ compiler }) => {
-          const { nonce } = api.getNormalizedConfig().security;
-          if (!nonce) {
-            return;
-          }
-          applyToCompiler2(compiler, (compiler2) => {
-            const { plugins } = compiler2.options;
-            const hasHTML = plugins.some(
-              (plugin) => plugin && plugin.constructor.name === "HtmlBasicPlugin"
-            );
-            if (!hasHTML) {
-              return;
-            }
-            const injectCode = createVirtualModule2(
-              `__webpack_nonce__ = "${nonce}";`
-            );
-            new compiler2.webpack.EntryPlugin(compiler2.context, injectCode, {
-              name: void 0
-            }).apply(compiler2);
-          });
-        });
         api.modifyHTMLTags({
           // ensure `crossorigin` and `nonce` can be applied to all tags
           order: "post",
           handler: ({ headTags, bodyTags }) => {
             const config = api.getNormalizedConfig();
             const { crossorigin } = config.html;
-            const { nonce } = config.security;
             const allTags = [...headTags, ...bodyTags];
             if (crossorigin) {
               const formattedCrossorigin = crossorigin === true ? "anonymous" : crossorigin;
               for (const tag of allTags) {
                 if (tag.tag === "script" && tag.attrs?.src || tag.tag === "link" && tag.attrs?.rel === "stylesheet") {
-                  tag.attrs ||= {};
                   tag.attrs.crossorigin ??= formattedCrossorigin;
                 }
               }
             }
-            if (nonce) {
-              for (const tag of allTags) {
-                if (tag.tag === "script" || tag.tag === "style") {
-                  tag.attrs ??= {};
-                  tag.attrs.nonce = nonce;
-                }
-              }
-            }
             return { headTags, bodyTags };
           }
         });
@@ -5188,7 +5228,7 @@ import {
   getBrowserslistWithDefault as getBrowserslistWithDefault3,
   getCoreJsVersion,
   isWebTarget,
-  mergeChainedOptions as mergeChainedOptions6
+  reduceConfigs as reduceConfigs2
 } from "@rsbuild/shared";
 async function getDefaultSwcConfig(config, rootPath, target) {
   return {
@@ -5294,9 +5334,9 @@ var init_swc = __esm({
                 await applyCoreJs(swcConfig, chain, polyfillMode);
               }
             }
-            const mergedSwcConfig = mergeChainedOptions6({
-              defaults: swcConfig,
-              options: config.tools.swc,
+            const mergedSwcConfig = reduceConfigs2({
+              initial: swcConfig,
+              config: config.tools.swc,
               mergeFn: deepmerge5
             });
             rule.use(CHAIN_ID3.USE.SWC).loader(builtinSwcLoaderName).options(mergedSwcConfig);
@@ -5545,10 +5585,7 @@ var init_splitChunks = __esm({
               rootPath: api.context.rootPath,
               polyfill: config.output.polyfill
             });
-            chain.optimization.splitChunks(
-              // @ts-expect-error splitChunks type mismatch
-              splitChunksOptions
-            );
+            chain.optimization.splitChunks(splitChunksOptions);
           }
         );
       }
@@ -5556,16 +5593,22 @@ var init_splitChunks = __esm({
   }
 });
 
-// src/plugins/startUrl.ts
-var startUrl_exports = {};
-__export(startUrl_exports, {
+// src/plugins/open.ts
+var open_exports = {};
+__export(open_exports, {
   openBrowser: () => openBrowser,
-  pluginStartUrl: () => pluginStartUrl,
-  replacePlaceholder: () => replacePlaceholder
+  pluginOpen: () => pluginOpen,
+  replacePlaceholder: () => replacePlaceholder,
+  resolveUrl: () => resolveUrl
 });
 import { exec } from "child_process";
 import { promisify } from "util";
-import { castArray as castArray6, debug as debug7, logger as logger13 } from "@rsbuild/shared";
+import {
+  canParse,
+  castArray as castArray6,
+  debug as debug7,
+  logger as logger13
+} from "@rsbuild/shared";
 async function openBrowser(url2) {
   const shouldTryOpenChromeWithAppleScript = process.platform === "darwin";
   if (shouldTryOpenChromeWithAppleScript) {
@@ -5598,30 +5641,45 @@ async function openBrowser(url2) {
     return false;
   }
 }
-function pluginStartUrl() {
+function resolveUrl(str, base) {
+  if (canParse(str)) {
+    return str;
+  }
+  try {
+    const url2 = new URL(str, base);
+    return url2.href;
+  } catch (e) {
+    throw new Error(
+      "[rsbuild:open]: Invalid input: not a valid URL or pathname"
+    );
+  }
+}
+function pluginOpen() {
   return {
-    name: "rsbuild:start-url",
+    name: "rsbuild:open",
     setup(api) {
       const onStartServer = async (params) => {
         const { port, routes } = params;
         const config = api.getNormalizedConfig();
-        const { startUrl, beforeStartUrl } = config.dev;
+        const { beforeStartUrl } = config.dev;
+        const open = config.server.open || config.dev.startUrl;
         const { https } = api.context.devServer || {};
         const isCodesandbox = process.env.CSB === "true";
-        const shouldOpen = Boolean(startUrl) && !isCodesandbox;
+        const shouldOpen = Boolean(open) && !isCodesandbox;
         if (!shouldOpen) {
           return;
         }
         const urls = [];
-        if (startUrl === true || !startUrl) {
-          const protocol = https ? "https" : "http";
+        const protocol = https ? "https" : "http";
+        const baseUrl = `${protocol}://localhost:${port}`;
+        if (open === true || !open) {
           if (routes.length) {
-            urls.push(`${protocol}://localhost:${port}${routes[0].pathname}`);
+            urls.push(`${baseUrl}${routes[0].pathname}`);
           }
         } else {
           urls.push(
-            ...castArray6(startUrl).map(
-              (item) => replacePlaceholder(item, port)
+            ...castArray6(open).map(
+              (item) => resolveUrl(replacePlaceholder(item, port), baseUrl)
             )
           );
         }
@@ -5647,8 +5705,8 @@ function pluginStartUrl() {
   };
 }
 var execAsync, supportedChromiumBrowsers, getTargetBrowser, replacePlaceholder, openedURLs;
-var init_startUrl = __esm({
-  "src/plugins/startUrl.ts"() {
+var init_open = __esm({
+  "src/plugins/open.ts"() {
     "use strict";
     init_esm();
     init_constants();
@@ -6060,12 +6118,6 @@ var init_extractChunks = __esm({
 // src/rspack/preload/helpers/determineAsValue.ts
 import path12 from "path";
 import { URL as URL2 } from "url";
-import {
-  AUDIO_EXTENSIONS as AUDIO_EXTENSIONS2,
-  FONT_EXTENSIONS as FONT_EXTENSIONS2,
-  IMAGE_EXTENSIONS as IMAGE_EXTENSIONS2,
-  VIDEO_EXTENSIONS as VIDEO_EXTENSIONS2
-} from "@rsbuild/shared";
 function determineAsValue({
   href,
   file
@@ -6075,16 +6127,16 @@ function determineAsValue({
   if (["css"].includes(extension)) {
     return "style";
   }
-  if (IMAGE_EXTENSIONS2.includes(extension)) {
+  if (IMAGE_EXTENSIONS.includes(extension)) {
     return "image";
   }
-  if (VIDEO_EXTENSIONS2.includes(extension)) {
+  if (VIDEO_EXTENSIONS.includes(extension)) {
     return "video";
   }
-  if (AUDIO_EXTENSIONS2.includes(extension)) {
+  if (AUDIO_EXTENSIONS.includes(extension)) {
     return "audio";
   }
-  if (FONT_EXTENSIONS2.includes(extension)) {
+  if (FONT_EXTENSIONS.includes(extension)) {
     return "font";
   }
   if (["vtt"].includes(extension)) {
@@ -6096,6 +6148,7 @@ var init_determineAsValue = __esm({
   "src/rspack/preload/helpers/determineAsValue.ts"() {
     "use strict";
     init_esm();
+    init_constants();
   }
 });
 
@@ -6166,7 +6219,7 @@ __export(HtmlPreloadOrPrefetchPlugin_exports, {
 });
 import {
   getPublicPathFromCompiler as getPublicPathFromCompiler4,
-  upperFirst,
+  upperFirst as upperFirst2,
   withPublicPath as withPublicPath3
 } from "@rsbuild/shared";
 function filterResourceHints(resourceHints, scripts) {
@@ -6268,7 +6321,7 @@ var init_HtmlPreloadOrPrefetchPlugin = __esm({
       apply(compiler) {
         compiler.hooks.compilation.tap(this.constructor.name, (compilation) => {
           getHTMLPlugin().getHooks(compilation).beforeAssetTagGeneration.tap(
-            `HTML${upperFirst(this.type)}Plugin`,
+            `HTML${upperFirst2(this.type)}Plugin`,
             (htmlPluginData) => {
               this.resourceHints = generateLinks(
                 this.options,
@@ -6281,7 +6334,7 @@ var init_HtmlPreloadOrPrefetchPlugin = __esm({
             }
           );
           getHTMLPlugin().getHooks(compilation).alterAssetTags.tap(
-            `HTML${upperFirst(this.type)}Plugin`,
+            `HTML${upperFirst2(this.type)}Plugin`,
             (htmlPluginData) => {
               if (this.resourceHints) {
                 htmlPluginData.assetTags.styles = [
@@ -6413,7 +6466,7 @@ __export(server_exports, {
   pluginServer: () => pluginServer
 });
 import { isAbsolute as isAbsolute7, join as join11 } from "path";
-import { fse as fse6 } from "@rsbuild/shared";
+import { fse as fse7 } from "@rsbuild/shared";
 var pluginServer;
 var init_server = __esm({
   "src/plugins/server.ts"() {
@@ -6430,11 +6483,11 @@ var init_server = __esm({
               return;
             }
             const publicDir = isAbsolute7(name) ? name : join11(api.context.rootPath, name);
-            if (!fse6.existsSync(publicDir)) {
+            if (!fse7.existsSync(publicDir)) {
               return;
             }
             try {
-              await fse6.copy(publicDir, api.context.distPath, {
+              await fse7.copy(publicDir, api.context.distPath, {
                 // dereference symlinks
                 dereference: true
               });
@@ -6549,7 +6602,6 @@ var init_manifest = __esm({
       name: "rsbuild:manifest",
       setup(api) {
         api.modifyBundlerChain(async (chain, { CHAIN_ID: CHAIN_ID3 }) => {
-          const htmlPaths = api.getHTMLPaths();
           const {
             output: { manifest }
           } = api.getNormalizedConfig();
@@ -6558,6 +6610,7 @@ var init_manifest = __esm({
           }
           const fileName = typeof manifest === "string" ? manifest : "manifest.json";
           const { RspackManifestPlugin } = await import("../compiled/rspack-manifest-plugin/index.js");
+          const htmlPaths = api.getHTMLPaths();
           chain.plugin(CHAIN_ID3.PLUGIN.MANIFEST).use(RspackManifestPlugin, [
             {
               fileName,
@@ -6686,7 +6739,7 @@ __export(rspackProfile_exports, {
 });
 import inspector from "inspector";
 import path13 from "path";
-import { fse as fse7 } from "@rsbuild/shared";
+import { fse as fse8 } from "@rsbuild/shared";
 import { logger as logger15 } from "@rsbuild/shared";
 import { rspack as rspack9 } from "@rspack/core";
 var stopProfiler, pluginRspackProfile;
@@ -6703,7 +6756,7 @@ var init_rspackProfile = __esm({
           logger15.error("Failed to generate JS CPU profile:", error);
           return;
         }
-        fse7.writeFileSync(output, JSON.stringify(param.profile));
+        fse8.writeFileSync(output, JSON.stringify(param.profile));
       });
     };
     pluginRspackProfile = () => ({
@@ -6729,7 +6782,7 @@ var init_rspackProfile = __esm({
         const cpuProfilePath = path13.join(profileDir, "jscpuprofile.json");
         const loggingFilePath = path13.join(profileDir, "logging.json");
         const onStart = () => {
-          fse7.ensureDirSync(profileDir);
+          fse8.ensureDirSync(profileDir);
           if (enableProfileTrace) {
             rspack9.experimental_registerGlobalTrace(
               "trace",
@@ -6753,7 +6806,7 @@ var init_rspackProfile = __esm({
               logging: "verbose",
               loggingTrace: true
             });
-            fse7.writeFileSync(loggingFilePath, JSON.stringify(logging));
+            fse8.writeFileSync(loggingFilePath, JSON.stringify(logging));
           }
         });
         api.onExit(() => {
@@ -6782,8 +6835,8 @@ var init_lazyCompilation = __esm({
     pluginLazyCompilation = () => ({
       name: "rsbuild:lazy-compilation",
       setup(api) {
-        api.modifyBundlerChain((chain, { isProd: isProd4, target }) => {
-          if (isProd4 || target !== "web") {
+        api.modifyBundlerChain((chain, { isProd: isProd5, target }) => {
+          if (isProd5 || target !== "web") {
             return;
           }
           const config = api.getNormalizedConfig();
@@ -6791,12 +6844,10 @@ var init_lazyCompilation = __esm({
           if (!options) {
             return;
           }
-          const clientRegExp = /[\\/]core[\\/]dist[\\/]client[\\/]/;
           const cssRegExp = /\.(?:css|less|sass|scss|styl|stylus)$/;
           const isExcludedModule = (name) => {
             return (
-              // alway include Rsbuild client code, such as HMR
-              clientRegExp.test(name) || // exclude CSS files because Rspack does not support it yet
+              // exclude CSS files because Rspack does not support it yet
               // TODO: remove this after Rspack supporting it
               cssRegExp.test(name)
             );
@@ -6843,6 +6894,229 @@ var init_lazyCompilation = __esm({
   }
 });
 
+// src/plugins/sri.ts
+var sri_exports = {};
+__export(sri_exports, {
+  pluginSri: () => pluginSri
+});
+import crypto2 from "crypto";
+import {
+  isHtmlDisabled as isHtmlDisabled4,
+  isProd as isProd4,
+  logger as logger16,
+  removeLeadingSlash as removeLeadingSlash2
+} from "@rsbuild/shared";
+var getAssetName, pluginSri;
+var init_sri = __esm({
+  "src/plugins/sri.ts"() {
+    "use strict";
+    init_esm();
+    init_constants();
+    getAssetName = (url2, assetPrefix) => {
+      if (url2.startsWith(assetPrefix)) {
+        return removeLeadingSlash2(url2.replace(assetPrefix, ""));
+      }
+      return removeLeadingSlash2(url2);
+    };
+    pluginSri = () => ({
+      name: "rsbuild:sri",
+      setup(api) {
+        const placeholder = "RSBUILD_INTEGRITY_PLACEHOLDER:";
+        const getAlgorithm = () => {
+          const config = api.getNormalizedConfig();
+          const { sri } = config.security;
+          const enable = sri.enable === "auto" ? isProd4() : sri.enable;
+          if (!enable) {
+            return null;
+          }
+          const { algorithm = "sha384" } = sri;
+          return algorithm;
+        };
+        api.modifyHTMLTags({
+          // ensure `sri` can be applied to all tags
+          order: "post",
+          handler(tags, { assetPrefix }) {
+            const algorithm = getAlgorithm();
+            if (!algorithm) {
+              return tags;
+            }
+            const allTags = [...tags.headTags, ...tags.bodyTags];
+            for (const tag of allTags) {
+              let url2 = "";
+              if (!tag.attrs) {
+                continue;
+              }
+              if (tag.tag === "script" && typeof tag.attrs.src === "string") {
+                url2 = tag.attrs.src;
+              } else if (tag.tag === "link" && tag.attrs.rel === "stylesheet" && typeof tag.attrs.href === "string") {
+                url2 = tag.attrs.href;
+              }
+              if (!url2) {
+                continue;
+              }
+              const assetName = getAssetName(url2, assetPrefix);
+              if (!assetName) {
+                continue;
+              }
+              tag.attrs.integrity ??= `${placeholder}${assetName}`;
+            }
+            return tags;
+          }
+        });
+        const replaceIntegrity = (htmlContent, assets, algorithm, integrityCache) => {
+          const regex = /integrity="RSBUILD_INTEGRITY_PLACEHOLDER:([^"]+)"/g;
+          const matches = htmlContent.matchAll(regex);
+          let replacedHtml = htmlContent;
+          const calcIntegrity = (algorithm2, assetName, data) => {
+            if (integrityCache.has(assetName)) {
+              return integrityCache.get(assetName);
+            }
+            const hash = crypto2.createHash(algorithm2).update(data).digest().toString("base64");
+            const integrity = `${algorithm2}-${hash}`;
+            integrityCache.set(assetName, integrity);
+            return integrity;
+          };
+          for (const match of matches) {
+            const assetName = match[1];
+            if (!assetName) {
+              continue;
+            }
+            if (assets[assetName]) {
+              const integrity = calcIntegrity(
+                algorithm,
+                assetName,
+                assets[assetName].buffer()
+              );
+              replacedHtml = replacedHtml.replaceAll(
+                `integrity="${placeholder}${assetName}"`,
+                `integrity="${integrity}"`
+              );
+            } else {
+              logger16.debug(
+                `[rsbuild:sri] failed to generate integrity for ${assetName}.`
+              );
+              replacedHtml = replacedHtml.replace(
+                `integrity="${placeholder}${assetName}"`,
+                ""
+              );
+            }
+          }
+          return replacedHtml;
+        };
+        class SriReplaceIntegrityPlugin {
+          constructor(algorithm) {
+            __publicField(this, "algorithm");
+            this.algorithm = algorithm;
+          }
+          apply(compiler) {
+            compiler.hooks.compilation.tap(
+              "SriReplaceIntegrityPlugin",
+              (compilation) => {
+                compilation.hooks.processAssets.tapPromise(
+                  {
+                    name: "SriReplaceIntegrityPlugin",
+                    // use to final stage to get the final asset content
+                    stage: compiler.webpack.Compilation.PROCESS_ASSETS_STAGE_REPORT
+                  },
+                  async (assets) => {
+                    const integrityCache = /* @__PURE__ */ new Map();
+                    for (const asset of Object.keys(assets)) {
+                      if (!HTML_REGEX.test(asset)) {
+                        continue;
+                      }
+                      const htmlContent = assets[asset].source();
+                      if (!htmlContent.includes(placeholder)) {
+                        continue;
+                      }
+                      assets[asset] = new compiler.webpack.sources.RawSource(
+                        replaceIntegrity(
+                          htmlContent,
+                          assets,
+                          this.algorithm,
+                          integrityCache
+                        )
+                      );
+                    }
+                  }
+                );
+              }
+            );
+          }
+        }
+        api.modifyBundlerChain((chain, { target }) => {
+          const config = api.getNormalizedConfig();
+          if (isHtmlDisabled4(config, target)) {
+            return;
+          }
+          const algorithm = getAlgorithm();
+          if (!algorithm) {
+            return;
+          }
+          chain.plugin("rsbuild-sri-replace").use(SriReplaceIntegrityPlugin, [algorithm]);
+        });
+      }
+    });
+  }
+});
+
+// src/plugins/nonce.ts
+var nonce_exports = {};
+__export(nonce_exports, {
+  pluginNonce: () => pluginNonce
+});
+import { applyToCompiler as applyToCompiler2, createVirtualModule as createVirtualModule2 } from "@rsbuild/shared";
+var pluginNonce;
+var init_nonce = __esm({
+  "src/plugins/nonce.ts"() {
+    "use strict";
+    init_esm();
+    pluginNonce = () => ({
+      name: "rsbuild:nonce",
+      setup(api) {
+        api.onAfterCreateCompiler(({ compiler }) => {
+          const { nonce } = api.getNormalizedConfig().security;
+          if (!nonce) {
+            return;
+          }
+          applyToCompiler2(compiler, (compiler2) => {
+            const { plugins } = compiler2.options;
+            const hasHTML = plugins.some(
+              (plugin) => plugin && plugin.constructor.name === "HtmlBasicPlugin"
+            );
+            if (!hasHTML) {
+              return;
+            }
+            const injectCode = createVirtualModule2(
+              `__webpack_nonce__ = "${nonce}";`
+            );
+            new compiler2.webpack.EntryPlugin(compiler2.context, injectCode, {
+              name: void 0
+            }).apply(compiler2);
+          });
+        });
+        api.modifyHTMLTags({
+          // ensure `nonce` can be applied to all tags
+          order: "post",
+          handler: ({ headTags, bodyTags }) => {
+            const config = api.getNormalizedConfig();
+            const { nonce } = config.security;
+            const allTags = [...headTags, ...bodyTags];
+            if (nonce) {
+              for (const tag of allTags) {
+                if (tag.tag === "script" || tag.tag === "style") {
+                  tag.attrs ??= {};
+                  tag.attrs.nonce = nonce;
+                }
+              }
+            }
+            return { headTags, bodyTags };
+          }
+        });
+      }
+    });
+  }
+});
+
 // src/createRsbuild.ts
 var createRsbuild_exports = {};
 __export(createRsbuild_exports, {
@@ -6871,7 +7145,7 @@ async function applyDefaultPlugins(pluginManager, context) {
   const { pluginSwc: pluginSwc2 } = await Promise.resolve().then(() => (init_swc(), swc_exports));
   const { pluginExternals: pluginExternals2 } = await Promise.resolve().then(() => (init_externals(), externals_exports));
   const { pluginSplitChunks: pluginSplitChunks2 } = await Promise.resolve().then(() => (init_splitChunks(), splitChunks_exports));
-  const { pluginStartUrl: pluginStartUrl2 } = await Promise.resolve().then(() => (init_startUrl(), startUrl_exports));
+  const { pluginOpen: pluginOpen2 } = await Promise.resolve().then(() => (init_open(), open_exports));
   const { pluginInlineChunk: pluginInlineChunk2 } = await Promise.resolve().then(() => (init_inlineChunk(), inlineChunk_exports));
   const { pluginBundleAnalyzer: pluginBundleAnalyzer2 } = await Promise.resolve().then(() => (init_bundleAnalyzer(), bundleAnalyzer_exports));
   const { pluginRsdoctor: pluginRsdoctor2 } = await Promise.resolve().then(() => (init_rsdoctor(), rsdoctor_exports));
@@ -6882,6 +7156,8 @@ async function applyDefaultPlugins(pluginManager, context) {
   const { pluginModuleFederation: pluginModuleFederation2 } = await Promise.resolve().then(() => (init_moduleFederation(), moduleFederation_exports));
   const { pluginRspackProfile: pluginRspackProfile2 } = await Promise.resolve().then(() => (init_rspackProfile(), rspackProfile_exports));
   const { pluginLazyCompilation: pluginLazyCompilation2 } = await Promise.resolve().then(() => (init_lazyCompilation(), lazyCompilation_exports));
+  const { pluginSri: pluginSri2 } = await Promise.resolve().then(() => (init_sri(), sri_exports));
+  const { pluginNonce: pluginNonce2 } = await Promise.resolve().then(() => (init_nonce(), nonce_exports));
   pluginManager.addPlugins([
     pluginBasic2(),
     pluginEntry2(),
@@ -6893,8 +7169,8 @@ async function applyDefaultPlugins(pluginManager, context) {
     // cleanOutput plugin should before the html plugin
     pluginCleanOutput2(),
     pluginAsset2(),
-    pluginHtml2(async (tags) => {
-      const result = await context.hooks.modifyHTMLTags.call(tags);
+    pluginHtml2(async (...args) => {
+      const result = await context.hooks.modifyHTMLTags.call(...args);
       return result[0];
     }),
     pluginWasm2(),
@@ -6907,7 +7183,7 @@ async function applyDefaultPlugins(pluginManager, context) {
     pluginSwc2(),
     pluginExternals2(),
     pluginSplitChunks2(),
-    pluginStartUrl2(),
+    pluginOpen2(),
     pluginInlineChunk2(),
     pluginBundleAnalyzer2(),
     pluginRsdoctor2(),
@@ -6917,7 +7193,9 @@ async function applyDefaultPlugins(pluginManager, context) {
     pluginManifest2(),
     pluginModuleFederation2(),
     pluginRspackProfile2(),
-    pluginLazyCompilation2()
+    pluginLazyCompilation2(),
+    pluginSri2(),
+    pluginNonce2()
   ]);
 }
 async function createRsbuild(options = {}) {
@@ -7017,7 +7295,7 @@ var init_createRsbuild = __esm({
 });
 
 // src/cli/init.ts
-import { isDev as isDev2, logger as logger16 } from "@rsbuild/shared";
+import { isDev as isDev2, logger as logger17 } from "@rsbuild/shared";
 async function init({
   cliOptions,
   isRestart
@@ -7053,9 +7331,9 @@ async function init({
       ...envs.publicVars,
       ...config.source.define
     };
-    if (commonOpts.open && !config.dev?.startUrl) {
-      config.dev ||= {};
-      config.dev.startUrl = commonOpts.open;
+    if (commonOpts.open && !config.server?.open) {
+      config.server ||= {};
+      config.server.open = commonOpts.open;
     }
     if (commonOpts.host) {
       config.server ||= {};
@@ -7071,7 +7349,7 @@ async function init({
     });
   } catch (err) {
     if (isRestart) {
-      logger16.error(err);
+      logger17.error(err);
     } else {
       throw err;
     }
@@ -7108,10 +7386,12 @@ __export(internal_exports, {
   initHooks: () => initHooks,
   initPlugins: () => initPlugins,
   initRsbuildConfig: () => initRsbuildConfig,
+  outputInspectConfigFiles: () => outputInspectConfigFiles,
   prepareCli: () => prepareCli,
   runCli: () => runCli,
   setHTMLPlugin: () => setHTMLPlugin,
-  startProdServer: () => startProdServer
+  startProdServer: () => startProdServer,
+  stringifyConfig: () => stringifyConfig
 });
 init_esm();
 
@@ -7121,7 +7401,7 @@ init_helpers();
 init_init();
 import { existsSync } from "fs";
 import { join as join12 } from "path";
-import { color as color13, logger as logger17 } from "@rsbuild/shared";
+import { color as color13, logger as logger18 } from "@rsbuild/shared";
 import { program } from "../compiled/commander/index.js";
 var applyCommonOptions = (command) => {
   command.option(
@@ -7136,7 +7416,7 @@ var applyServerOptions = (command) => {
   command.option("-o --open [url]", "open the page in browser on startup").option("--port <port>", "specify a port number for server to listen").option("--host <host>", "specify the host that the server listens to");
 };
 function runCli() {
-  program.name("rsbuild").usage("<command> [options]").version("0.7.2");
+  program.name("rsbuild").usage("<command> [options]").version("0.7.4");
   const devCommand = program.command("dev");
   const buildCommand = program.command("build");
   const previewCommand = program.command("preview");
@@ -7150,8 +7430,8 @@ function runCli() {
       const rsbuild = await init({ cliOptions: options });
       await rsbuild?.startDevServer();
     } catch (err) {
-      logger17.error("Failed to start dev server.");
-      logger17.error(err);
+      logger18.error("Failed to start dev server.");
+      logger18.error(err);
       process.exit(1);
     }
   });
@@ -7162,8 +7442,8 @@ function runCli() {
         watch: options.watch
       });
     } catch (err) {
-      logger17.error("Failed to build.");
-      logger17.error(err);
+      logger18.error("Failed to build.");
+      logger18.error(err);
       process.exit(1);
     }
   });
@@ -7189,8 +7469,8 @@ function runCli() {
       }
       await rsbuild?.preview();
     } catch (err) {
-      logger17.error("Failed to start preview server.");
-      logger17.error(err);
+      logger18.error("Failed to start preview server.");
+      logger18.error(err);
       process.exit(1);
     }
   });
@@ -7204,8 +7484,8 @@ function runCli() {
         writeToDisk: true
       });
     } catch (err) {
-      logger17.error("Failed to inspect config.");
-      logger17.error(err);
+      logger18.error("Failed to inspect config.");
+      logger18.error(err);
       process.exit(1);
     }
   });
@@ -7214,7 +7494,7 @@ function runCli() {
 
 // src/cli/prepare.ts
 init_esm();
-import { logger as logger18 } from "@rsbuild/shared";
+import { logger as logger19 } from "@rsbuild/shared";
 function initNodeEnv() {
   if (!process.env.NODE_ENV) {
     const command = process.argv[2];
@@ -7227,7 +7507,7 @@ function prepareCli() {
   if (!npm_execpath || npm_execpath.includes("npx-cli.js") || npm_execpath.includes(".bun")) {
     console.log();
   }
-  logger18.greet(`  ${`Rsbuild v${"0.7.2"}`}
+  logger19.greet(`  ${`Rsbuild v${"0.7.4"}`}
 `);
 }
 
@@ -7235,6 +7515,7 @@ function prepareCli() {
 init_pluginManager();
 init_initHooks();
 init_initConfigs();
+init_config();
 init_pluginHelper();
 init_helpers();
 init_rspackConfig();
@@ -7253,8 +7534,8 @@ init_createRsbuild();
 init_config();
 init_mergeConfig();
 init_constants();
-import { logger as logger19 } from "@rsbuild/shared";
-var version = "0.7.2";
+import { logger as logger20 } from "@rsbuild/shared";
+var version = "0.7.4";
 export {
   PLUGIN_CSS_NAME,
   PLUGIN_SWC_NAME,
@@ -7263,7 +7544,7 @@ export {
   defineConfig,
   loadConfig,
   loadEnv,
-  logger19 as logger,
+  logger20 as logger,
   mergeRsbuildConfig,
   rspack10 as rspack,
   version