@vandenberghinc/volt 1.1.26 → 1.1.28

package/backend/dist/esm/{view.js → backend/src/view.js}

@@ -1,17 +1,17 @@
-/*
- * Author: Daan van den Bergh
- * Copyright: © 2022 - 2024 Daan van den Bergh.
+/**
+ * @author Daan van den Bergh
+ * @copyright © 2022 - 2025 Daan van den Bergh. All rights reserved
  */
 // ---------------------------------------------------------
 // Imports.
 import * as vlib from "@vandenberghinc/vlib";
 import * as vts from "@vandenberghinc/vlib/vts";
 import * as vhighlight from "@vandenberghinc/vhighlight";
-import Meta from "./meta.js";
-import logger from "./logger.js";
+import zlib from 'zlib';
+import { Meta } from "./meta.js";
 import { Route } from './route.js';
-import Frontend from './frontend.js';
-const { log, error } = logger;
+import { Frontend } from './frontend.js';
+import * as crypto from "crypto";
 const { debug } = vlib;
 // ---------------------------------------------------------
 // View.
@@ -101,7 +101,7 @@ export class View {
     static includes = [];
     static links = [];
     static body_style = null; // css string style.
-    static splash_screen = null; // SplashScreen object.
+    static splash_screen = undefined; // SplashScreen object.
     // Private static attributes,
     static _volt_css;
     static _vhighlight_css;
@@ -122,16 +122,16 @@ export class View {
     _src;
     _embedded_sources;
     is_js_ts_view;
-    html;
+    _html;
     raw_html;
     _bundle;
     payments;
     // vhighlight?: string | undefined;
     min_device_width;
-    _server;
-    _endpoint;
+    server;
+    endpoint;
     // Constructor.
-    constructor({ source = null, callback = null, includes = [], links = [], templates = {}, meta = new Meta(), jquery = false, lang = "en", body_style = null, splash_screen = null, tree_shaking = false, mangle = false, min_device_width = 600, _src, }) {
+    constructor({ source = null, callback = null, includes = [], links = [], templates = {}, meta = new Meta(), jquery = false, lang = "en", body_style = null, splash_screen = undefined, tree_shaking = false, mangle = false, min_device_width = 600, _src, }) {
         // Arguments.
         this.source = source;
         this.callback = callback;
@@ -167,7 +167,7 @@ export class View {
         // Drop duplicate includes.
         this.includes = vlib.Array.drop_duplicates(this.includes);
         // Attributes.
-        this.html = undefined;
+        this._html = undefined;
         this._bundle = undefined;
     }
     // Initialize.
@@ -178,48 +178,32 @@ export class View {
         if (endpoint === undefined) {
             throw Error("Invalid usage, define parameter \"endpoint\".");
         }
-        this._server = server;
-        this._endpoint = endpoint;
+        this.server = server;
+        this.endpoint = endpoint;
     }
     // Bundle the compiled typescript / javascript dynamically on demand to optimize server startup for development purposes.
     async _dynamic_bundle() {
         // Server & endpoint.
-        if (this._server === undefined || this._endpoint === undefined) {
+        if (this.server === undefined || this.endpoint === undefined) {
             throw Error("View has not been initialized with \"View._initialize()\" yet.");
         }
         // Bundle.
-        // const had_bundle = this.bundle !== undefined;
-        // if (bundle != null) {
-        //     // also accept already bundled for server.js in case multiple endpoint paths serve the same bundle.
-        //     this.bundle = bundle;
-        // } else {
-        debug(3, this._endpoint?.route?.id, `: Bundling entry path "${this.source_path?.str()}".`);
+        debug(3, this.endpoint?.route?.id, `: Bundling entry path "${this.source_path?.str()}".`);
         this._bundle = await vts.bundle({
-            entry_paths: [this.source_path?.str() ?? ""],
-            output: `/tmp/${this._endpoint.route.method}_${this.source_path.str().replace(/\//g, "_")}.js`, // esbuild requires an output path to resolve .css and .ttf files etc which can be imported by libraries (such as monaco-editor).
+            include: this.source_path ? [this.source_path?.str()] : [],
+            output: `/tmp/${this.endpoint.route.method}_${this.source_path.str().replace(/\//g, "_")}.js`, // esbuild requires an output path to resolve .css and .ttf files etc which can be imported by libraries (such as monaco-editor).
             minify: false, //this._server.production,
             platform: "browser",
-            // format: "esm",
-            format: "iife",
+            format: "esm",
+            // format: "iife", // can causes issues with node_modules imports.
             target: "es2022",
-            // target: "esnext",
-            // sourcemap: this._server.production ? false : "inline",
+            // sourcemap: this.server.production ? false : "inline",
             extract_inputs: true, // since bundle.inputs is used by server.js.
             tree_shaking: true,
         });
-        // console.log("Bundle:", this._bundle);
-        if (this._bundle.errors.length > 0) {
-            error(this._endpoint?.route?.id, `: Encountered an error while bundling "${this.source}".\n`, this._bundle.debug());
-            return;
-        }
-        // }
         // Set options based on inputs.
         this.payments = this._bundle.inputs.find((path) => path.endsWith("/modules/paddle.js"));
         // this.vhighlight = this.bundle.inputs.find((path: string) => path.endsWith("/vhighlight.js"));
-        // Rebuild html.
-        await this._build_html();
-        // Response.
-        // return this.bundle;
     }
     /** Ensure the view is bundled when required. */
     async ensure_bundle() {
@@ -227,39 +211,187 @@ export class View {
             return this._dynamic_bundle();
         }
     }
+    /** Create an error HTML file when errors are encountered during the bundle process. */
+    async _build_bundle_err_html() {
+        // Dont show in production.
+        if (this.server?.production) {
+            throw new Error("Encountered an error while bundling in production.");
+        }
+        // A nonce identifier.
+        const nonce_identifier = "{{__VOLT_NONCE__}}";
+        // Inspect bundle.
+        const bundle = await vts.inspect_bundle({
+            include: this.source_path ? [this.source_path?.str()] : [],
+            output: vlib.Path.tmp().join(`${this.endpoint?.route.method}_${this.source_path.str().replace(/\//g, "_")}.js`), // esbuild requires an output path to resolve .css and .ttf files etc which can be imported by libraries (such as monaco-editor).
+            minify: false, //this._server.production,
+            platform: "browser",
+            format: "esm",
+            // format: "iife", // can causes issues with node_modules imports.
+            target: "es2022",
+            tree_shaking: true,
+        });
+        // Log to server
+        this.server?.log.error(this.endpoint?.route?.id, `: Encountered an error while bundling "${this.source}".\n${bundle.debug({ limit: 25 })}`);
+        // HTML escape function
+        const escape_html = (str) => vlib.Color.to_html(str
+            .replace(/&/g, '&')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#39;'));
+        if (this.server?.production) {
+            this._html = `
+                <!DOCTYPE html>
+                <html lang='${this.lang}'>
+                <head>
+                    <meta charset="UTF-8">
+                    <meta name="viewport" content="width=device-width, initial-scale=1">
+                    <title>Bundling Error</title>
+                    <style nonce="${nonce_identifier}">
+                        body {
+                            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; padding: 2rem; background: #f5f5f5;
+                        }
+                        h1 {
+                            color: #d32f2f; margin-top: 0;
+                        }
+                        #error-container {
+                            max-width: 800px; margin: 0 auto; background: white; padding: 2rem; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1);
+                        }
+                    </style>
+                </head>
+                <body>
+                    <div id="error-container">
+                        <h1>Bundling Error</h1>
+                        <p>An error occurred while processing your request. Please contact support if this issue persists.</p>
+                    </div>
+                </body>
+                </html>
+                `.dedent(false);
+        }
+        else {
+            // Development mode - show full debug info
+            const formatted_import_chains = bundle.format_import_chains();
+            const formatted_errors = bundle.format_errors();
+            this._html = `
+                <!DOCTYPE html>
+                <html lang='${this.lang}'>
+                <head>
+                    <meta charset="UTF-8">
+                    <meta name="viewport" content="width=device-width, initial-scale=1">
+                    <title>Bundling Error - ${escape_html(this.source || 'Unknown')}</title>
+                    <style nonce="${nonce_identifier}">
+                        body {
+                            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+                            margin: 0;
+                            padding: 1rem;
+                            background: #1e1e1e;
+                            color: #d4d4d4;
+                        }
+                        .container {
+                            max-width: 1200px;
+                            margin: 0 auto;
+                        }
+                        h1 {
+                            color: #FFFFFF;
+                            font-size: 1.5rem;
+                            margin-bottom: 0.5rem;
+                        }
+                        .source {
+                            color: #C0C0C0;
+                            font-family: ui-monospace, SFMono-Regular, "SF Mono", Consolas, "Liberation Mono", Menlo, monospace;
+                            font-size: 0.875rem;
+                            margin-bottom: 1rem;
+                        }
+                        pre {
+                            background: #2d2d2d;
+                            border: 1px solid #3e3e3e;
+                            border-radius: 4px;
+                            padding: 1rem;
+                            overflow-x: auto;
+                            font-family: ui-monospace, SFMono-Regular, "SF Mono", Consolas, "Liberation Mono", Menlo, monospace;
+                            font-size: 0.875rem;
+                            line-height: 1.5;
+                            margin: 20px 0px 0px 0px;
+                        }
+                        .error-count {
+                            background: #f44336;
+                            color: white;
+                            padding: 0.25rem 0.5rem;
+                            border-radius: 4px;
+                            font-size: 0.875rem;
+                            display: inline-block;
+                            margin-bottom: 1rem;
+                        }
+                    </style>
+                </head>
+                <body>
+                    <div class="container">
+                        <h1>Bundle Error</h1>
+                        <div class="source">Source: ${escape_html(this.source || 'Unknown')}</div>
+                        <div class="error-count">${bundle.errors.length} error${bundle.errors.length === 1 ? '' : 's'}</div>
+                        <pre>${escape_html(bundle.debug({ limit: -1 }))}</pre>
+                        <!--<h2>Metafile</h2>
+                        <pre>${escape_html(bundle.metafile ?? "No metafile detected.")}</pre>
+                        <h2>Input files</h2>
+                        <pre>${escape_html(bundle.inputs.length ? bundle.inputs.join("\n") : "No input files detected.")}</pre>
+                        <h2>Import Chains</h2>
+                        <pre>${escape_html(formatted_import_chains.length
+                ? formatted_import_chains.join("\n")
+                : "No import chains detected.")}</pre>
+                        <h2>Encountered Errors</h2>
+                        <pre>${escape_html(formatted_errors.length ? formatted_errors.join("\n") : "No errors detected.")}</pre>
+                        -->
+                    </div>
+                </body>
+                </html>
+                `.dedent(false);
+        }
+        this.html_nonce_split = this._html.split(nonce_identifier);
+    }
     // Build html.
     async _build_html() {
+        // A nonce identifier.
+        const nonce_identifier = "{{__VOLT_NONCE__}}";
         // Server & endpoint.
-        if (this._server == null || this._endpoint == null) {
+        if (this.server == null || this.endpoint == null) {
             throw Error("View has not been initialized with \"View._initialize()\" yet.");
         }
         // Bundle js files automatically.
         if (this.is_js_ts_view && !this._bundle) {
             await this._dynamic_bundle();
         }
+        if (this._bundle != null && this._bundle.errors.length > 0) {
+            return this._build_bundle_err_html();
+        }
         // Vars.
-        const line_break = this._server.production ? "\n" : "\n";
+        const line_break = this.server.production ? "\n" : "\n";
         const has_bundle = this._bundle != null && typeof this._bundle === "object";
+        // console.log("Bundle:", this._bundle)
         // Initialize html.
-        this.html = "";
+        this._html = "";
         // Doctype.
-        this.html += `<!DOCTYPE html><html style='min-width:100%;min-height:100%;' lang='${this.lang}'>${line_break}`;
+        this._html += `<!DOCTYPE html><html lang='${this.lang}'>${line_break}`;
         // Headers.
-        this.html += `<head>${line_break}`;
+        this._html += `<head>${line_break}`;
         // Meta.
         if (this.meta) {
-            this.html += this.meta.build_html(this._server.full_domain) + line_break;
+            this._html += this.meta.build_html(this.server.full_domain) + line_break;
         }
         // this.html = "Hello World!";
         // return;
         // ------------------------------------------------------------------------------------------
         // Stylesheets & links.
+        // Default stylesheet to avoid inline `style=""`.
+        this._html += `<style nonce="${nonce_identifier}">` +
+            `html { min-width:100%;min-height:100%; }` +
+            `body { width:100vw;height:100vh;margin:0;padding:0;${this.body_style ?? ""} }` +
+            `</style>${line_break}`;
         // Embed stylesheet.
         const embed_stylesheet = (url, embed) => {
             if (embed == null &&
                 url != null &&
                 url.charAt(0) === "/") {
-                for (const endpoint of this._server.endpoints.values()) {
+                for (const endpoint of this.server.endpoints.values()) {
                     if (url === endpoint.route.endpoint_str) {
                         if (typeof endpoint.raw_data === "string") {
                             embed = endpoint.raw_data;
@@ -272,7 +404,7 @@ export class View {
                 }
             }
             if (embed) {
-                this.html += `<style>${line_break}${embed}${line_break}</style>${line_break}`;
+                this._html += `<style nonce="${nonce_identifier}">${line_break}${embed}${line_break}</style>${line_break}`;
                 if (url) {
                     this._embedded_sources.push(url);
                 }
@@ -302,8 +434,8 @@ export class View {
         embed_stylesheet(undefined, View._vhighlight_css);
         // Add custom stylesheet for minimum device width on smaller screens.
         if (this.min_device_width != null) {
-            this.html += `
-                <script>
+            this._html += `
+                <script nonce="${nonce_identifier}">
                 let has_min_width = false;
                 const viewport = document.querySelector('meta[name="viewport"]');
                 function set_min_width() {
@@ -329,7 +461,7 @@ export class View {
                 </script>
             `.dedent();
         }
-        // this.html += `<script>
+        // this.html += `<script nonce="${nonce_identifier}">
         // // This version prevents the infinite loop
         // let resizeTimeout;
         // let viewportChangeInProgress = false;
@@ -362,7 +494,7 @@ export class View {
         // Custom links.
         this.links.forEach((url) => {
             if (typeof url === "string") {
-                this.html += `<link rel="stylesheet" href="${url}">`;
+                this._html += `<link rel="stylesheet" href="${url}">`;
             }
             else if (typeof url === "object") {
                 // Embed content.
@@ -374,13 +506,13 @@ export class View {
                         include_link_async(url);
                     }
                     else {
-                        this.html += "<link";
+                        this._html += "<link";
                         Object.keys(url).forEach((key) => {
                             if (key !== "embed") {
-                                this.html += ` ${key}="${url[key]}"`;
+                                this._html += ` ${key}="${url[key]}"`;
                             }
                         });
-                        this.html += ">" + line_break;
+                        this._html += ">" + line_break;
                     }
                 }
             }
@@ -390,21 +522,17 @@ export class View {
         });
         // Add include links script.
         if (include_links_script) {
-            this.html += `<script>${line_break}${include_links_script}${line_break}</script>${line_break}`;
+            this._html += `<script nonce="${nonce_identifier}">${line_break}${include_links_script}${line_break}</script>${line_break}`;
         }
         // End headers.
-        this.html += "</head>" + line_break;
+        this._html += "</head>" + line_break;
         // ------------------------------------------------------------------------------------------
         // Body.
         // Body.
-        this.html += "<body id='body' style='width:100vw;height:100vh;margin:0;padding:0;";
-        if (this.body_style != null) {
-            this.html += this.body_style;
-        }
-        this.html += "'>" + line_break;
+        this._html += "<body id='body'>";
         // Create splash screen.
         if (this.splash_screen != null) {
-            this.html += this.splash_screen.html + line_break;
+            this._html += this.splash_screen.html + line_break;
         }
         // ------------------------------------------------------------------------------------------
         // Include scripts.
@@ -412,7 +540,7 @@ export class View {
         // Returns `false` when the endpoint is not found.
         const embed_script = (url) => {
             let embed;
-            for (const endpoint of this._server.endpoints.values()) {
+            for (const endpoint of this.server.endpoints.values()) {
                 if (url === endpoint.route.endpoint_str &&
                     (endpoint.raw_data != null || endpoint.data != null)) {
                     embed = endpoint;
@@ -422,10 +550,10 @@ export class View {
             if (embed && (embed.raw_data || embed.data)) {
                 // Dont embed code.
                 if (embed.content_type === "application/javascript") {
-                    this.html += `<script>${line_break}${embed.raw_data || embed.data}${line_break}</script>${line_break}`;
+                    this._html += `<script nonce="${nonce_identifier}">${line_break}${embed.raw_data || embed.data}${line_break}</script>${line_break}`;
                 }
                 else {
-                    this.html += `<script type='${embed.content_type}'>${line_break}${embed.raw_data || embed.data}${line_break}</script>${line_break}`;
+                    this._html += `<script nonce="${nonce_identifier}" type='${embed.content_type}'>${line_break}${embed.raw_data || embed.data}${line_break}</script>${line_break}`;
                 }
                 this._embedded_sources.push(url);
                 return true;
@@ -437,30 +565,30 @@ export class View {
         // 3rd party js includes.
         if (this.jquery) {
             // Keep first since it needs to be included before volt.
-            this.html += "<script src='https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js'></script>" + line_break;
+            this._html += `<script nonce="${nonce_identifier}" src='https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js'></script>${line_break}`;
         }
-        if (this._server.google_tag !== undefined) {
+        if (this.server.google_tag !== undefined) {
             // this.html += `<script async src="https://www.googletagmanager.com/gtag/js?id=${this._server.google_tag}" onload='volt.google._initialize()'></script>`;
-            include_js_script += `__volt_incl_js("https://www.googletagmanager.com/gtag/js?id=${this._server.google_tag}");${line_break}`;
+            include_js_script += `__volt_incl_js("https://www.googletagmanager.com/gtag/js?id=${this.server.google_tag}");${line_break}`;
         }
         // Primary volt includes do not add them to cached_code since they need to be included before any other includes.
         // Otherwise when including several files, most of them embedded and one not, then the not embedded will not have access to volt.
         // Since volt is 
-        // embed_script("/volt/volt.js", false);
+        // embed_script("/volt/api/v1/volt.js", false);
         // Add volt static aspect ratios.
         // @todo volt.static
-        this.html += `<script>${line_break}window.volt_statics_aspect_ratios = ${JSON.stringify(Object.fromEntries(this._server.statics_aspect_ratios))}${line_break}</script>${line_break}`;
+        this._html += `<script nonce="${nonce_identifier}">${line_break}window.volt_statics_aspect_ratios = ${JSON.stringify(Object.fromEntries(this.server.statics_aspect_ratios))}${line_break}</script>${line_break}`;
         // Embed other scripts.
-        if (this._server.payments) {
-            if (this._server.payments.type === "paddle") {
-                // embed_script("/volt/payments/paddle.js", false); // no longer required due to auto imports.
+        if (this.server.payments) {
+            if (this.server.payments.type === "paddle") {
+                // embed_script("/volt/api/v1/payments/paddle.js", false); // no longer required due to auto imports.
                 if (this.payments) {
                     include_js_script += `__volt_incl_js("https://cdn.paddle.com/paddle/v2/paddle.js");${line_break}`;
                 }
             }
         }
         // Add the include js script.
-        this.html += `<script>${line_break}${include_js_script.trimEnd()}${line_break}</script>${line_break}`;
+        this._html += `<script nonce="${nonce_identifier}">${line_break}${include_js_script.trimEnd()}${line_break}</script>${line_break}`;
         // Additional js includes.
         this.includes.forEach((url) => {
             // Embed content.
@@ -468,16 +596,16 @@ export class View {
             // Include.
             else {
                 if (typeof url === "string") {
-                    this.html += `<script src='${url}'></script>${line_break}`;
+                    this._html += `<script nonce="${nonce_identifier}" src='${url}'></script>${line_break}`;
                 }
                 else if (typeof url === "object") {
-                    this.html += "<script";
+                    this._html += `<script nonce="${nonce_identifier}"`;
                     Object.keys(url).forEach((key) => {
                         if (key !== "embed") {
-                            this.html += ` ${key}="${url[key]}"`;
+                            this._html += ` ${key}="${url[key]}"`;
                         }
                     });
-                    this.html += "></script>" + line_break;
+                    this._html += "></script>" + line_break;
                 }
                 else {
                     throw Error("Invalid type for a js include, the valid value types are \"string\" and \"object\".");
@@ -485,12 +613,12 @@ export class View {
             }
         });
         // Add direct source code.
-        if (has_bundle && typeof this._bundle.code === "string") {
-            this.html += `<script type='module'>${line_break}${this._bundle.code}${line_break}</script>${line_break}`;
+        if (has_bundle && this._bundle != null && typeof this._bundle.code === "string") {
+            this._html += `<script nonce="${nonce_identifier}" type='module'>${line_break}${this._bundle.code}${line_break}</script>${line_break}`;
         }
         // Include the source.
         else if (typeof this.source === "string") {
-            this.html += `<script>${line_break}${await new vlib.Path(this.source).load()}${line_break}</script>${line_break}`;
+            this._html += `<script nonce="${nonce_identifier}">${line_break}${await new vlib.Path(this.source).load()}${line_break}</script>${line_break}`;
         }
         // JS code.
         else if (this.callback != null) {
@@ -520,21 +648,73 @@ export class View {
             //     utils.set_compiled_cache(cache_path, code, code_hash);
             // }
             // Add.
-            this.html += `<script>${line_break}(${code})()${line_break}</script>${line_break}`;
+            this._html += `<script nonce="${nonce_identifier}">${line_break}(${code})()${line_break}</script>${line_break}`;
             // cached_code += `;(${code})();`;
         }
         // Close body.
-        this.html += "</body>" + line_break;
+        this._html += "</body>" + line_break;
         // End.
-        this.html += "</html>" + line_break;
+        this._html += "</html>" + line_break;
+        // Split by nonce.
+        this.html_nonce_split = this._html.split(nonce_identifier);
+        // console.log("Built HTML for endpoint", this.endpoint?.route?.endpoint_str + "\n" +this.html.slice(0, 25_000) + (this.html.length > 25_000 ? "..." : ""));
+    }
+    /** Retrieve the content length of the built html. */
+    async content_length() {
+        // Create nonce.
+        const nonce = crypto.randomBytes(16).toString('base64');
+        // Build html if needed.
+        if (!this._html) {
+            await this._build_html();
+        }
+        // Create html.
+        let html = this.html_nonce_split.join(nonce);
+        // Return.
+        return html.length;
+    }
+    /** Retrieve the HTML. */
+    async html(opts) {
+        // Create nonce.
+        const nonce = crypto.randomBytes(16).toString('base64');
+        // Build html if needed.
+        if (!this._html) {
+            await this._build_html();
+        }
+        // Create html.
+        let html = this.html_nonce_split.join(nonce);
+        // Content length.
+        const content_length = Buffer.byteLength(html, 'utf-8');
+        // Compress.
+        if (opts?.compress) {
+            html = zlib.gzipSync(html, { level: zlib.constants.Z_BEST_COMPRESSION });
+        }
+        // Return.
+        return {
+            html,
+            content_length,
+            nonce,
+        };
     }
     // Serve a client.
-    _serve(stream, status_code = 200) {
-        debug(2, this._endpoint?.route?.id, ": Serving HTML ", this.html?.slice(0, 50), "...");
+    async _serve(stream, status_code = 200, opts) {
+        debug(2, this.endpoint?.route?.id, ": Serving HTML ", this._html?.slice(0, 50), "...");
+        // Create html.
+        const html = await this.html(opts);
+        // Compute content length on view & when not defined.
+        stream.set_header("Content-Length", html.content_length.toString());
+        // Set nonce.
+        const csp = stream.get_header("Content-Security-Policy");
+        if (csp == null || typeof csp !== "string") {
+            throw new Error("Cannot serve HTML without a string typed Content-Security-Policy (CSP) header defined on the endpoint. This should by default be defined by the Server.");
+        }
+        const new_csp = csp.replace(/(script-src|style-src)([^;]*)/g, (_, g1, g2) => `${g1}${g2} 'nonce-${html.nonce}'`);
+        stream.set_header("Content-Security-Policy", new_csp);
+        // Generate a nonce here and use it both in the CSP header and the inline script.
         stream.send({
             status: status_code,
             headers: { "Content-Type": "text/html" },
-            body: this.html,
+            data: html.html,
         });
     }
+    html_nonce_split;
 }

package/backend/dist/{cjs → esm/backend/src}/volt.d.ts

@@ -1,4 +1,8 @@
-export { ExternalError, InternalError } from "./utils.js";
+/**
+ * @author Daan van den Bergh
+ * @copyright © 2022 - 2025 Daan van den Bergh. All rights reserved
+ */
+export * from "./errors/index.js";
 export * from "./status.js";
 export * from "./meta.js";
 export * from "./splash_screen.js";
@@ -9,7 +13,12 @@ export * from "./server.js";
 export * from "./database/database.js";
 export * from "./database/document.js";
 export * from "./database/collection.js";
+export * from "./database/quota/quota.js";
+export * from "./database/quota/safe_int.js";
 export * from "./rate_limit.js";
 export * from "./logger.js";
+export * from "./events.js";
+export { User } from "./users.js";
 export * as Mail from "./plugins/mail/ui.js";
 export * from "./frontend.js";
+export type { Request } from "../../frontend/src/modules/request.js";

package/backend/dist/esm/{volt.js → backend/src/volt.js}

@@ -1,11 +1,11 @@
-/*
- * Author: Daan van den Bergh
- * Copyright: © 2022 - 2024 Daan van den Bergh.
+/**
+ * @author Daan van den Bergh
+ * @copyright © 2022 - 2025 Daan van den Bergh. All rights reserved
  */
 // ---------------------------------------------------------
 // Exports.
 // Create volt lib.
-export { ExternalError, InternalError } from "./utils.js";
+export * from "./errors/index.js";
 export * from "./status.js";
 export * from "./meta.js";
 export * from "./splash_screen.js";
@@ -16,8 +16,11 @@ export * from "./server.js";
 export * from "./database/database.js";
 export * from "./database/document.js";
 export * from "./database/collection.js";
+export * from "./database/quota/quota.js";
+export * from "./database/quota/safe_int.js";
 export * from "./rate_limit.js";
 export * from "./logger.js";
+export * from "./events.js";
 // export * from "./file_watcher.js"
 export * as Mail from "./plugins/mail/ui.js";
 // export * as PDF from "./plugins/pdf.js"