@verdaccio/middleware 8.0.7 → 8.1.0

package/build/middlewares/web/render-web.mjs

@@ -0,0 +1,85 @@
+import { setSecurityWebHeaders } from "./security.mjs";
+import renderHTML from "./utils/renderHTML.mjs";
+import { getUIOptions } from "./utils/ui-options.mjs";
+import { WebUrlsNamespace } from "./web-urls.mjs";
+import { HEADERS, HTTP_STATUS } from "@verdaccio/core";
+import buildDebug from "debug";
+import express from "express";
+import fs from "node:fs";
+import path from "node:path";
+import { isURLhasValidProtocol } from "@verdaccio/url";
+//#region src/middlewares/web/render-web.ts
+var debug = buildDebug("verdaccio:web:render");
+var sendFileCallback = (next) => (err) => {
+	if (!err) return;
+	if (err.status === HTTP_STATUS.NOT_FOUND) next();
+	else next(err);
+};
+function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {
+	const { staticPath, manifest, manifestFiles } = pluginOptions;
+	debug("static path %o", staticPath);
+	const router = express.Router();
+	if (typeof tokenMiddleware === "function") router.use(tokenMiddleware);
+	router.use(setSecurityWebHeaders);
+	router.get(WebUrlsNamespace.static + "*", function(req, res, next) {
+		const filename = req.params[0];
+		let file = `${staticPath}/${filename}`;
+		if (filename === "favicon.ico" && config?.web?.favicon) {
+			file = config?.web?.favicon;
+			if (isURLhasValidProtocol(file)) {
+				debug("redirect to favicon %s", file);
+				req.url = file;
+				return next();
+			}
+		}
+		debug("render static file %o", file);
+		res.sendFile(file, sendFileCallback(next));
+	});
+	function renderLogo(logo) {
+		if (logo && !isURLhasValidProtocol(logo)) {
+			const absoluteLocalFile = path.posix.resolve(logo);
+			debug("serve local logo %s", absoluteLocalFile);
+			try {
+				if (fs.existsSync(absoluteLocalFile) && typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === "undefined") {
+					logo = path.posix.join(WebUrlsNamespace.static, path.basename(logo));
+					router.get(logo, function(_req, res, next) {
+						debug("serve custom logo  web:%s - local:%s", logo, absoluteLocalFile);
+						res.sendFile(absoluteLocalFile, sendFileCallback(next));
+					});
+					debug("enabled custom logo %s", logo);
+				} else {
+					logo = void 0;
+					debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);
+				}
+			} catch {
+				logo = void 0;
+				debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);
+			}
+		}
+		return logo;
+	}
+	const logo = renderLogo(config?.web?.logo);
+	if (config?.web?.logo) config.web.logo = logo;
+	const logoDark = renderLogo(config?.web?.logoDark);
+	if (config?.web?.logoDark) config.web.logoDark = logoDark;
+	router.get(WebUrlsNamespace.static + "ui-options.js", function(req, res) {
+		const options = getUIOptions(config, req, res);
+		const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;
+		res.setHeader(HEADERS.CACHE_CONTROL, HEADERS.NO_CACHE);
+		res.setHeader(HEADERS.CONTENT_TYPE, HEADERS.JAVASCRIPT_CHARSET);
+		res.send(script);
+	});
+	router.get(WebUrlsNamespace.web + "*", function(req, res) {
+		renderHTML(config, manifest, manifestFiles, getUIOptions(config, req, res), res);
+		debug("render html section");
+	});
+	router.get(WebUrlsNamespace.root, function(req, res) {
+		renderHTML(config, manifest, manifestFiles, getUIOptions(config, req, res), res);
+		debug("render root");
+	});
+	return router;
+}
+//#endregion
+export { renderWebMiddleware };
+
+//# sourceMappingURL=render-web.mjs.map

package/build/middlewares/web/render-web.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-web.mjs","names":[],"sources":["../../../src/middlewares/web/render-web.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport express from 'express';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HEADERS, HTTP_STATUS } from '@verdaccio/core';\nimport { isURLhasValidProtocol } from '@verdaccio/url';\n\nimport { setSecurityWebHeaders } from './security';\nimport renderHTML from './utils/renderHTML';\nimport { getUIOptions } from './utils/ui-options';\nimport { WebUrlsNamespace } from './web-urls';\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst sendFileCallback = (next) => (err) => {\n  if (!err) {\n    return;\n  }\n  if (err.status === HTTP_STATUS.NOT_FOUND) {\n    next();\n  } else {\n    next(err);\n  }\n};\n\nexport function renderWebMiddleware(config, tokenMiddleware, pluginOptions) {\n  const { staticPath, manifest, manifestFiles } = pluginOptions;\n  debug('static path %o', staticPath);\n\n  const router = express.Router();\n  if (typeof tokenMiddleware === 'function') {\n    router.use(tokenMiddleware);\n  }\n\n  router.use(setSecurityWebHeaders);\n\n  // any match within the static is routed to the file system\n  router.get(WebUrlsNamespace.static + '*', function (req, res, next) {\n    const filename = req.params[0];\n    let file = `${staticPath}/${filename}`;\n    if (filename === 'favicon.ico' && config?.web?.favicon) {\n      file = config?.web?.favicon;\n      if (isURLhasValidProtocol(file)) {\n        debug('redirect to favicon %s', file);\n        req.url = file;\n        return next();\n      }\n    }\n    debug('render static file %o', file);\n    res.sendFile(file, sendFileCallback(next));\n  });\n\n  function renderLogo(logo: string | undefined): string | undefined {\n    // check the origin of the logo\n    if (logo && !isURLhasValidProtocol(logo)) {\n      // URI related to a local file\n      const absoluteLocalFile = path.posix.resolve(logo);\n      debug('serve local logo %s', absoluteLocalFile);\n      try {\n        // TODO: replace existsSync by async alternative\n        if (\n          fs.existsSync(absoluteLocalFile) &&\n          typeof fs.accessSync(absoluteLocalFile, fs.constants.R_OK) === 'undefined'\n        ) {\n          // Note: `path.join` will break on Windows, because it transforms `/` to `\\`\n          // Use POSIX version `path.posix.join` instead.\n          logo = path.posix.join(WebUrlsNamespace.static, path.basename(logo));\n          router.get(logo, function (_req, res, next) {\n            // @ts-ignore\n            debug('serve custom logo  web:%s - local:%s', logo, absoluteLocalFile);\n            res.sendFile(absoluteLocalFile, sendFileCallback(next));\n          });\n          debug('enabled custom logo %s', logo);\n        } else {\n          logo = undefined;\n          debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n        }\n      } catch {\n        logo = undefined;\n        debug(`web logo is wrong, path ${absoluteLocalFile} does not exist or is not readable`);\n      }\n    }\n    return logo;\n  }\n\n  const logo = renderLogo(config?.web?.logo);\n  if (config?.web?.logo) {\n    config.web.logo = logo;\n  }\n  const logoDark = renderLogo(config?.web?.logoDark);\n  if (config?.web?.logoDark) {\n    config.web.logoDark = logoDark;\n  }\n\n  // Serve external script that loads UI options\n  router.get(WebUrlsNamespace.static + 'ui-options.js', function (req, res) {\n    const options = getUIOptions(config, req, res);\n    const script = `window.__VERDACCIO_BASENAME_UI_OPTIONS=${JSON.stringify(options)};`;\n    res.setHeader(HEADERS.CACHE_CONTROL, HEADERS.NO_CACHE);\n    res.setHeader(HEADERS.CONTENT_TYPE, HEADERS.JAVASCRIPT_CHARSET);\n    res.send(script);\n  });\n\n  // Handle all web routes including security routes\n  router.get(WebUrlsNamespace.web + '*', function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render html section');\n  });\n\n  router.get(WebUrlsNamespace.root, function (req, res) {\n    const options = getUIOptions(config, req, res);\n    renderHTML(config, manifest, manifestFiles, options, res);\n    debug('render root');\n  });\n\n  return router;\n}\n"],"mappings":";;;;;;;;;;;AAaA,IAAM,QAAQ,WAAW,sBAAsB;AAE/C,IAAM,oBAAoB,UAAU,QAAQ;CAC1C,IAAI,CAAC,KACH;CAEF,IAAI,IAAI,WAAW,YAAY,WAC7B,KAAK;MAEL,KAAK,GAAG;AAEZ;AAEA,SAAgB,oBAAoB,QAAQ,iBAAiB,eAAe;CAC1E,MAAM,EAAE,YAAY,UAAU,kBAAkB;CAChD,MAAM,kBAAkB,UAAU;CAElC,MAAM,SAAS,QAAQ,OAAO;CAC9B,IAAI,OAAO,oBAAoB,YAC7B,OAAO,IAAI,eAAe;CAG5B,OAAO,IAAI,qBAAqB;CAGhC,OAAO,IAAI,iBAAiB,SAAS,KAAK,SAAU,KAAK,KAAK,MAAM;EAClE,MAAM,WAAW,IAAI,OAAO;EAC5B,IAAI,OAAO,GAAG,WAAW,GAAG;EAC5B,IAAI,aAAa,iBAAiB,QAAQ,KAAK,SAAS;GACtD,OAAO,QAAQ,KAAK;GACpB,IAAI,sBAAsB,IAAI,GAAG;IAC/B,MAAM,0BAA0B,IAAI;IACpC,IAAI,MAAM;IACV,OAAO,KAAK;GACd;EACF;EACA,MAAM,yBAAyB,IAAI;EACnC,IAAI,SAAS,MAAM,iBAAiB,IAAI,CAAC;CAC3C,CAAC;CAED,SAAS,WAAW,MAA8C;EAEhE,IAAI,QAAQ,CAAC,sBAAsB,IAAI,GAAG;GAExC,MAAM,oBAAoB,KAAK,MAAM,QAAQ,IAAI;GACjD,MAAM,uBAAuB,iBAAiB;GAC9C,IAAI;IAEF,IACE,GAAG,WAAW,iBAAiB,KAC/B,OAAO,GAAG,WAAW,mBAAmB,GAAG,UAAU,IAAI,MAAM,aAC/D;KAGA,OAAO,KAAK,MAAM,KAAK,iBAAiB,QAAQ,KAAK,SAAS,IAAI,CAAC;KACnE,OAAO,IAAI,MAAM,SAAU,MAAM,KAAK,MAAM;MAE1C,MAAM,wCAAwC,MAAM,iBAAiB;MACrE,IAAI,SAAS,mBAAmB,iBAAiB,IAAI,CAAC;KACxD,CAAC;KACD,MAAM,0BAA0B,IAAI;IACtC,OAAO;KACL,OAAO,KAAA;KACP,MAAM,2BAA2B,kBAAkB,mCAAmC;IACxF;GACF,QAAQ;IACN,OAAO,KAAA;IACP,MAAM,2BAA2B,kBAAkB,mCAAmC;GACxF;EACF;EACA,OAAO;CACT;CAEA,MAAM,OAAO,WAAW,QAAQ,KAAK,IAAI;CACzC,IAAI,QAAQ,KAAK,MACf,OAAO,IAAI,OAAO;CAEpB,MAAM,WAAW,WAAW,QAAQ,KAAK,QAAQ;CACjD,IAAI,QAAQ,KAAK,UACf,OAAO,IAAI,WAAW;CAIxB,OAAO,IAAI,iBAAiB,SAAS,iBAAiB,SAAU,KAAK,KAAK;EACxE,MAAM,UAAU,aAAa,QAAQ,KAAK,GAAG;EAC7C,MAAM,SAAS,0CAA0C,KAAK,UAAU,OAAO,EAAE;EACjF,IAAI,UAAU,QAAQ,eAAe,QAAQ,QAAQ;EACrD,IAAI,UAAU,QAAQ,cAAc,QAAQ,kBAAkB;EAC9D,IAAI,KAAK,MAAM;CACjB,CAAC;CAGD,OAAO,IAAI,iBAAiB,MAAM,KAAK,SAAU,KAAK,KAAK;EAEzD,WAAW,QAAQ,UAAU,eADb,aAAa,QAAQ,KAAK,GACE,GAAS,GAAG;EACxD,MAAM,qBAAqB;CAC7B,CAAC;CAED,OAAO,IAAI,iBAAiB,MAAM,SAAU,KAAK,KAAK;EAEpD,WAAW,QAAQ,UAAU,eADb,aAAa,QAAQ,KAAK,GACE,GAAS,GAAG;EACxD,MAAM,aAAa;CACrB,CAAC;CAED,OAAO;AACT"}

package/build/middlewares/web/security.js

@@ -1,44 +1,32 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.setSecurityWebHeaders = setSecurityWebHeaders;
-var _debug = _interopRequireDefault(require("debug"));
-var _core = require("@verdaccio/core");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:middleware:web:security');
+const require_runtime = require("../../_virtual/_rolldown/runtime.js");
+let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+//#region src/middlewares/web/security.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:web:security");
 function setSecurityWebHeaders(_req, res, next) {
-  // disable loading in frames (clickjacking, etc.)
-  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
-  const framesOptions = res.getHeader(_core.HEADERS.FRAMES_OPTIONS);
-  if (!framesOptions || !(framesOptions === 'deny' || framesOptions === 'sameorigin')) {
-    debug('Missing or invalid X-Frame-Options header; setting to "deny"');
-    res.header(_core.HEADERS.FRAMES_OPTIONS, 'deny');
-  }
-
-  // avoid establishing connections outside of domain
-  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy
-  if (!res.getHeader(_core.HEADERS.CSP)) {
-    debug('Missing Content-Security-Policy header; setting to "connect-src \'self\'"');
-    res.header(_core.HEADERS.CSP, "connect-src 'self'");
-  }
-
-  // respect the content type of the response
-  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options
-  const cto = res.getHeader(_core.HEADERS.CTO);
-  if (!cto || cto !== 'nosniff') {
-    debug('Missing or invalid X-Content-Type-Options header; setting to "nosniff"');
-    res.header(_core.HEADERS.CTO, 'nosniff');
-  }
-
-  // block rendering of the page in case of XSS attack
-  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection
-  const xss = res.getHeader(_core.HEADERS.XSS);
-  if (!xss || !(xss === '0' || xss.startsWith('1'))) {
-    debug('Missing or invalid X-XSS-Protection header; setting to "1; mode=block"');
-    res.header(_core.HEADERS.XSS, '1; mode=block');
-  }
-  next();
+	const framesOptions = res.getHeader(_verdaccio_core.HEADERS.FRAMES_OPTIONS);
+	if (!framesOptions || !(framesOptions === "deny" || framesOptions === "sameorigin")) {
+		debug$1("Missing or invalid X-Frame-Options header; setting to \"deny\"");
+		res.header(_verdaccio_core.HEADERS.FRAMES_OPTIONS, "deny");
+	}
+	if (!res.getHeader(_verdaccio_core.HEADERS.CSP)) {
+		debug$1("Missing Content-Security-Policy header; setting to \"connect-src 'self'\"");
+		res.header(_verdaccio_core.HEADERS.CSP, "connect-src 'self'");
+	}
+	const cto = res.getHeader(_verdaccio_core.HEADERS.CTO);
+	if (!cto || cto !== "nosniff") {
+		debug$1("Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"");
+		res.header(_verdaccio_core.HEADERS.CTO, "nosniff");
+	}
+	const xss = res.getHeader(_verdaccio_core.HEADERS.XSS);
+	if (!xss || !(xss === "0" || xss.startsWith("1"))) {
+		debug$1("Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"");
+		res.header(_verdaccio_core.HEADERS.XSS, "1; mode=block");
+	}
+	next();
 }
+//#endregion
+exports.setSecurityWebHeaders = setSecurityWebHeaders;
+
 //# sourceMappingURL=security.js.map

package/build/middlewares/web/security.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.js","names":["_debug","_interopRequireDefault","require","_core","e","__esModule","default","debug","buildDebug","setSecurityWebHeaders","_req","res","next","framesOptions","getHeader","HEADERS","FRAMES_OPTIONS","header","CSP","cto","CTO","xss","XSS","startsWith"],"sources":["../../../src/middlewares/web/security.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { HEADERS } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:middleware:web:security');\n\nexport function setSecurityWebHeaders(_req, res, next): void {\n  // disable loading in frames (clickjacking, etc.)\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options\n  const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);\n  if (!framesOptions || !(framesOptions === 'deny' || framesOptions === 'sameorigin')) {\n    debug('Missing or invalid X-Frame-Options header; setting to \"deny\"');\n    res.header(HEADERS.FRAMES_OPTIONS, 'deny');\n  }\n\n  // avoid establishing connections outside of domain\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy\n  if (!res.getHeader(HEADERS.CSP)) {\n    debug('Missing Content-Security-Policy header; setting to \"connect-src \\'self\\'\"');\n    res.header(HEADERS.CSP, \"connect-src 'self'\");\n  }\n\n  // respect the content type of the response\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options\n  const cto = res.getHeader(HEADERS.CTO);\n  if (!cto || cto !== 'nosniff') {\n    debug('Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"');\n    res.header(HEADERS.CTO, 'nosniff');\n  }\n\n  // block rendering of the page in case of XSS attack\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection\n  const xss = res.getHeader(HEADERS.XSS);\n  if (!xss || !(xss === '0' || xss.startsWith('1'))) {\n    debug('Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"');\n    res.header(HEADERS.XSS, '1; mode=block');\n  }\n  next();\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,KAAA,GAAAD,OAAA;AAA0C,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE1C,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,mCAAmC,CAAC;AAEtD,SAASC,qBAAqBA,CAACC,IAAI,EAAEC,GAAG,EAAEC,IAAI,EAAQ;EAC3D;EACA;EACA,MAAMC,aAAa,GAAGF,GAAG,CAACG,SAAS,CAACC,aAAO,CAACC,cAAc,CAAC;EAC3D,IAAI,CAACH,aAAa,IAAI,EAAEA,aAAa,KAAK,MAAM,IAAIA,aAAa,KAAK,YAAY,CAAC,EAAE;IACnFN,KAAK,CAAC,8DAA8D,CAAC;IACrEI,GAAG,CAACM,MAAM,CAACF,aAAO,CAACC,cAAc,EAAE,MAAM,CAAC;EAC5C;;EAEA;EACA;EACA,IAAI,CAACL,GAAG,CAACG,SAAS,CAACC,aAAO,CAACG,GAAG,CAAC,EAAE;IAC/BX,KAAK,CAAC,2EAA2E,CAAC;IAClFI,GAAG,CAACM,MAAM,CAACF,aAAO,CAACG,GAAG,EAAE,oBAAoB,CAAC;EAC/C;;EAEA;EACA;EACA,MAAMC,GAAG,GAAGR,GAAG,CAACG,SAAS,CAACC,aAAO,CAACK,GAAG,CAAC;EACtC,IAAI,CAACD,GAAG,IAAIA,GAAG,KAAK,SAAS,EAAE;IAC7BZ,KAAK,CAAC,wEAAwE,CAAC;IAC/EI,GAAG,CAACM,MAAM,CAACF,aAAO,CAACK,GAAG,EAAE,SAAS,CAAC;EACpC;;EAEA;EACA;EACA,MAAMC,GAAG,GAAGV,GAAG,CAACG,SAAS,CAACC,aAAO,CAACO,GAAG,CAAC;EACtC,IAAI,CAACD,GAAG,IAAI,EAAEA,GAAG,KAAK,GAAG,IAAIA,GAAG,CAACE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE;IACjDhB,KAAK,CAAC,wEAAwE,CAAC;IAC/EI,GAAG,CAACM,MAAM,CAACF,aAAO,CAACO,GAAG,EAAE,eAAe,CAAC;EAC1C;EACAV,IAAI,CAAC,CAAC;AACR","ignoreList":[]}
+{"version":3,"file":"security.js","names":[],"sources":["../../../src/middlewares/web/security.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { HEADERS } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:middleware:web:security');\n\nexport function setSecurityWebHeaders(_req, res, next): void {\n  // disable loading in frames (clickjacking, etc.)\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options\n  const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);\n  if (!framesOptions || !(framesOptions === 'deny' || framesOptions === 'sameorigin')) {\n    debug('Missing or invalid X-Frame-Options header; setting to \"deny\"');\n    res.header(HEADERS.FRAMES_OPTIONS, 'deny');\n  }\n\n  // avoid establishing connections outside of domain\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy\n  if (!res.getHeader(HEADERS.CSP)) {\n    debug('Missing Content-Security-Policy header; setting to \"connect-src \\'self\\'\"');\n    res.header(HEADERS.CSP, \"connect-src 'self'\");\n  }\n\n  // respect the content type of the response\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options\n  const cto = res.getHeader(HEADERS.CTO);\n  if (!cto || cto !== 'nosniff') {\n    debug('Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"');\n    res.header(HEADERS.CTO, 'nosniff');\n  }\n\n  // block rendering of the page in case of XSS attack\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection\n  const xss = res.getHeader(HEADERS.XSS);\n  if (!xss || !(xss === '0' || xss.startsWith('1'))) {\n    debug('Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"');\n    res.header(HEADERS.XSS, '1; mode=block');\n  }\n  next();\n}\n"],"mappings":";;;;;AAIA,IAAM,WAAA,GAAA,MAAA,SAAmB,mCAAmC;AAE5D,SAAgB,sBAAsB,MAAM,KAAK,MAAY;CAG3D,MAAM,gBAAgB,IAAI,UAAU,gBAAA,QAAQ,cAAc;CAC1D,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,UAAU,kBAAkB,eAAe;EACnF,QAAM,gEAA8D;EACpE,IAAI,OAAO,gBAAA,QAAQ,gBAAgB,MAAM;CAC3C;CAIA,IAAI,CAAC,IAAI,UAAU,gBAAA,QAAQ,GAAG,GAAG;EAC/B,QAAM,2EAA2E;EACjF,IAAI,OAAO,gBAAA,QAAQ,KAAK,oBAAoB;CAC9C;CAIA,MAAM,MAAM,IAAI,UAAU,gBAAA,QAAQ,GAAG;CACrC,IAAI,CAAC,OAAO,QAAQ,WAAW;EAC7B,QAAM,0EAAwE;EAC9E,IAAI,OAAO,gBAAA,QAAQ,KAAK,SAAS;CACnC;CAIA,MAAM,MAAM,IAAI,UAAU,gBAAA,QAAQ,GAAG;CACrC,IAAI,CAAC,OAAO,EAAE,QAAQ,OAAO,IAAI,WAAW,GAAG,IAAI;EACjD,QAAM,0EAAwE;EAC9E,IAAI,OAAO,gBAAA,QAAQ,KAAK,eAAe;CACzC;CACA,KAAK;AACP"}

package/build/middlewares/web/security.mjs

@@ -0,0 +1,30 @@
+import { HEADERS } from "@verdaccio/core";
+import buildDebug from "debug";
+//#region src/middlewares/web/security.ts
+var debug = buildDebug("verdaccio:middleware:web:security");
+function setSecurityWebHeaders(_req, res, next) {
+	const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);
+	if (!framesOptions || !(framesOptions === "deny" || framesOptions === "sameorigin")) {
+		debug("Missing or invalid X-Frame-Options header; setting to \"deny\"");
+		res.header(HEADERS.FRAMES_OPTIONS, "deny");
+	}
+	if (!res.getHeader(HEADERS.CSP)) {
+		debug("Missing Content-Security-Policy header; setting to \"connect-src 'self'\"");
+		res.header(HEADERS.CSP, "connect-src 'self'");
+	}
+	const cto = res.getHeader(HEADERS.CTO);
+	if (!cto || cto !== "nosniff") {
+		debug("Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"");
+		res.header(HEADERS.CTO, "nosniff");
+	}
+	const xss = res.getHeader(HEADERS.XSS);
+	if (!xss || !(xss === "0" || xss.startsWith("1"))) {
+		debug("Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"");
+		res.header(HEADERS.XSS, "1; mode=block");
+	}
+	next();
+}
+//#endregion
+export { setSecurityWebHeaders };
+
+//# sourceMappingURL=security.mjs.map

package/build/middlewares/web/security.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.mjs","names":[],"sources":["../../../src/middlewares/web/security.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport { HEADERS } from '@verdaccio/core';\n\nconst debug = buildDebug('verdaccio:middleware:web:security');\n\nexport function setSecurityWebHeaders(_req, res, next): void {\n  // disable loading in frames (clickjacking, etc.)\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options\n  const framesOptions = res.getHeader(HEADERS.FRAMES_OPTIONS);\n  if (!framesOptions || !(framesOptions === 'deny' || framesOptions === 'sameorigin')) {\n    debug('Missing or invalid X-Frame-Options header; setting to \"deny\"');\n    res.header(HEADERS.FRAMES_OPTIONS, 'deny');\n  }\n\n  // avoid establishing connections outside of domain\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy\n  if (!res.getHeader(HEADERS.CSP)) {\n    debug('Missing Content-Security-Policy header; setting to \"connect-src \\'self\\'\"');\n    res.header(HEADERS.CSP, \"connect-src 'self'\");\n  }\n\n  // respect the content type of the response\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Content-Type-Options\n  const cto = res.getHeader(HEADERS.CTO);\n  if (!cto || cto !== 'nosniff') {\n    debug('Missing or invalid X-Content-Type-Options header; setting to \"nosniff\"');\n    res.header(HEADERS.CTO, 'nosniff');\n  }\n\n  // block rendering of the page in case of XSS attack\n  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-XSS-Protection\n  const xss = res.getHeader(HEADERS.XSS);\n  if (!xss || !(xss === '0' || xss.startsWith('1'))) {\n    debug('Missing or invalid X-XSS-Protection header; setting to \"1; mode=block\"');\n    res.header(HEADERS.XSS, '1; mode=block');\n  }\n  next();\n}\n"],"mappings":";;;AAIA,IAAM,QAAQ,WAAW,mCAAmC;AAE5D,SAAgB,sBAAsB,MAAM,KAAK,MAAY;CAG3D,MAAM,gBAAgB,IAAI,UAAU,QAAQ,cAAc;CAC1D,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,UAAU,kBAAkB,eAAe;EACnF,MAAM,gEAA8D;EACpE,IAAI,OAAO,QAAQ,gBAAgB,MAAM;CAC3C;CAIA,IAAI,CAAC,IAAI,UAAU,QAAQ,GAAG,GAAG;EAC/B,MAAM,2EAA2E;EACjF,IAAI,OAAO,QAAQ,KAAK,oBAAoB;CAC9C;CAIA,MAAM,MAAM,IAAI,UAAU,QAAQ,GAAG;CACrC,IAAI,CAAC,OAAO,QAAQ,WAAW;EAC7B,MAAM,0EAAwE;EAC9E,IAAI,OAAO,QAAQ,KAAK,SAAS;CACnC;CAIA,MAAM,MAAM,IAAI,UAAU,QAAQ,GAAG;CACrC,IAAI,CAAC,OAAO,EAAE,QAAQ,OAAO,IAAI,WAAW,GAAG,IAAI;EACjD,MAAM,0EAAwE;EAC9E,IAAI,OAAO,QAAQ,KAAK,eAAe;CACzC;CACA,KAAK;AACP"}

package/build/middlewares/web/utils/manifest.js

@@ -1,24 +1,23 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.getManifestValue = getManifestValue;
-var _debug = _interopRequireDefault(require("debug"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:middleware:web:render:manifest');
-function getManifestValue(manifestItems, manifest, basePath = '') {
-  return manifestItems?.map(item => {
-    debug('resolve item %o', item);
-    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
-    debug('resolved item %o', resolvedItem);
-    return resolvedItem;
-  });
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+//#region src/middlewares/web/utils/manifest.ts
+var debug$1 = (0, debug.default)("verdaccio:middleware:web:render:manifest");
+function getManifestValue(manifestItems, manifest, basePath = "") {
+	return manifestItems?.map((item) => {
+		debug$1("resolve item %o", item);
+		const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
+		debug$1("resolved item %o", resolvedItem);
+		return resolvedItem;
+	});
 }
 function stripTrailingSlash(path) {
-  return path.replace(/\/$/, '');
+	return path.replace(/\/$/, "");
 }
 function stripLeadingSlash(path) {
-  return path.replace(/^\//, '');
+	return path.replace(/^\//, "");
 }
+//#endregion
+exports.getManifestValue = getManifestValue;
+
 //# sourceMappingURL=manifest.js.map

package/build/middlewares/web/utils/manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.js","names":["_debug","_interopRequireDefault","require","e","__esModule","default","debug","buildDebug","getManifestValue","manifestItems","manifest","basePath","map","item","resolvedItem","stripTrailingSlash","stripLeadingSlash","path","replace"],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAA+B,SAAAD,uBAAAE,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAS/B,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,0CAA0C,CAAC;AAE7D,SAASC,gBAAgBA,CAC9BC,aAAuB,EACvBC,QAAQ,EACRC,QAAgB,GAAG,EAAE,EACX;EACV,OAAOF,aAAa,EAAEG,GAAG,CAAEC,IAAI,IAAK;IAClCP,KAAK,CAAC,iBAAiB,EAAEO,IAAI,CAAC;IAC9B,MAAMC,YAAY,GAAG,GAAGC,kBAAkB,CAACJ,QAAQ,CAAC,IAAIK,iBAAiB,CAACN,QAAQ,CAACG,IAAI,CAAC,CAAC,EAAE;IAC3FP,KAAK,CAAC,kBAAkB,EAAEQ,YAAY,CAAC;IACvC,OAAOA,YAAY;EACrB,CAAC,CAAC;AACJ;AAEA,SAASC,kBAAkBA,CAACE,IAAY,EAAU;EAChD,OAAOA,IAAI,CAACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAChC;AAEA,SAASF,iBAAiBA,CAACC,IAAY,EAAU;EAC/C,OAAOA,IAAI,CAACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAChC","ignoreList":[]}
+{"version":3,"file":"manifest.js","names":[],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,0CAA0C;AAEnE,SAAgB,iBACd,eACA,UACA,WAAmB,IACT;CACV,OAAO,eAAe,KAAK,SAAS;EAClC,QAAM,mBAAmB,IAAI;EAC7B,MAAM,eAAe,GAAG,mBAAmB,QAAQ,EAAE,GAAG,kBAAkB,SAAS,KAAK;EACxF,QAAM,oBAAoB,YAAY;EACtC,OAAO;CACT,CAAC;AACH;AAEA,SAAS,mBAAmB,MAAsB;CAChD,OAAO,KAAK,QAAQ,OAAO,EAAE;AAC/B;AAEA,SAAS,kBAAkB,MAAsB;CAC/C,OAAO,KAAK,QAAQ,OAAO,EAAE;AAC/B"}

package/build/middlewares/web/utils/manifest.mjs

@@ -0,0 +1,21 @@
+import buildDebug from "debug";
+//#region src/middlewares/web/utils/manifest.ts
+var debug = buildDebug("verdaccio:middleware:web:render:manifest");
+function getManifestValue(manifestItems, manifest, basePath = "") {
+	return manifestItems?.map((item) => {
+		debug("resolve item %o", item);
+		const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;
+		debug("resolved item %o", resolvedItem);
+		return resolvedItem;
+	});
+}
+function stripTrailingSlash(path) {
+	return path.replace(/\/$/, "");
+}
+function stripLeadingSlash(path) {
+	return path.replace(/^\//, "");
+}
+//#endregion
+export { getManifestValue };
+
+//# sourceMappingURL=manifest.mjs.map

package/build/middlewares/web/utils/manifest.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/manifest.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nexport type Manifest = {\n  // goes on first place at the header\n  ico: string;\n  css: string[];\n  js: string[];\n};\n\nconst debug = buildDebug('verdaccio:middleware:web:render:manifest');\n\nexport function getManifestValue(\n  manifestItems: string[],\n  manifest,\n  basePath: string = ''\n): string[] {\n  return manifestItems?.map((item) => {\n    debug('resolve item %o', item);\n    const resolvedItem = `${stripTrailingSlash(basePath)}/${stripLeadingSlash(manifest[item])}`;\n    debug('resolved item %o', resolvedItem);\n    return resolvedItem;\n  });\n}\n\nfunction stripTrailingSlash(path: string): string {\n  return path.replace(/\\/$/, '');\n}\n\nfunction stripLeadingSlash(path: string): string {\n  return path.replace(/^\\//, '');\n}\n"],"mappings":";;AASA,IAAM,QAAQ,WAAW,0CAA0C;AAEnE,SAAgB,iBACd,eACA,UACA,WAAmB,IACT;CACV,OAAO,eAAe,KAAK,SAAS;EAClC,MAAM,mBAAmB,IAAI;EAC7B,MAAM,eAAe,GAAG,mBAAmB,QAAQ,EAAE,GAAG,kBAAkB,SAAS,KAAK;EACxF,MAAM,oBAAoB,YAAY;EACtC,OAAO;CACT,CAAC;AACH;AAEA,SAAS,mBAAmB,MAAsB;CAChD,OAAO,KAAK,QAAQ,OAAO,EAAE;AAC/B;AAEA,SAAS,kBAAkB,MAAsB;CAC/C,OAAO,KAAK,QAAQ,OAAO,EAAE;AAC/B"}

package/build/middlewares/web/utils/renderHTML.js

@@ -1,55 +1,51 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = renderHTML;
-var _debug = _interopRequireDefault(require("debug"));
-var _lruCache = _interopRequireDefault(require("lru-cache"));
-var _core = require("@verdaccio/core");
-var _template = _interopRequireDefault(require("./template"));
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-// Cache for rendered HTML templates: max 500 entries, 1 hour TTL
-const cache = new _lruCache.default({
-  max: 500,
-  ttl: 1000 * 60 * 60
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+const require_template = require("./template.js");
+let _verdaccio_core = require("@verdaccio/core");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let lru_cache = require("lru-cache");
+lru_cache = require_runtime.__toESM(lru_cache);
+//#region src/middlewares/web/utils/renderHTML.ts
+var cache = new lru_cache.default({
+	max: 500,
+	ttl: 1e3 * 60 * 60
 });
-const debug = (0, _debug.default)('verdaccio:web:render');
-const defaultManifestFiles = {
-  js: ['vendors.js', 'main.js'],
-  ico: 'favicon.ico',
-  css: []
+var debug$1 = (0, debug.default)("verdaccio:web:render");
+var defaultManifestFiles = {
+	js: ["vendors.js", "main.js"],
+	ico: "favicon.ico",
+	css: []
 };
 function renderHTML(config, manifest, manifestFiles, options, res) {
-  // @ts-ignore
-  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
-  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];
-  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];
-  const metaScripts = config?.web?.metaScripts || [];
-  let webPage;
-  const cacheKey = `template:${JSON.stringify(options)}`;
-  try {
-    webPage = cache.get(cacheKey);
-    if (!webPage) {
-      webPage = (0, _template.default)({
-        manifest: manifestFiles ?? defaultManifestFiles,
-        options,
-        scriptsBodyAfter,
-        metaScripts,
-        scriptsBodyBefore
-      }, manifest);
-      if (needHtmlCache) {
-        cache.set(cacheKey, webPage);
-        debug('set template cache');
-      }
-    } else {
-      debug('reuse template cache');
-    }
-  } catch (error) {
-    throw new Error(`theme could not be load, stack ${error.stack}`);
-  }
-  res.setHeader('Content-Type', _core.HEADERS.TEXT_HTML);
-  res.send(webPage);
-  debug('web rendered');
+	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
+	const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];
+	const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];
+	const metaScripts = config?.web?.metaScripts || [];
+	let webPage;
+	const cacheKey = `template:${JSON.stringify(options)}`;
+	try {
+		webPage = cache.get(cacheKey);
+		if (!webPage) {
+			webPage = require_template.default({
+				manifest: manifestFiles ?? defaultManifestFiles,
+				options,
+				scriptsBodyAfter,
+				metaScripts,
+				scriptsBodyBefore
+			}, manifest);
+			if (needHtmlCache) {
+				cache.set(cacheKey, webPage);
+				debug$1("set template cache");
+			}
+		} else debug$1("reuse template cache");
+	} catch (error) {
+		throw new Error(`theme could not be load, stack ${error.stack}`);
+	}
+	res.setHeader("Content-Type", _verdaccio_core.HEADERS.TEXT_HTML);
+	res.send(webPage);
+	debug$1("web rendered");
 }
+//#endregion
+exports.default = renderHTML;
+
 //# sourceMappingURL=renderHTML.js.map

package/build/middlewares/web/utils/renderHTML.js.map

@@ -1 +1 @@
-{"version":3,"file":"renderHTML.js","names":["_debug","_interopRequireDefault","require","_lruCache","_core","_template","e","__esModule","default","cache","LRUCache","max","ttl","debug","buildDebug","defaultManifestFiles","js","ico","css","renderHTML","config","manifest","manifestFiles","options","res","needHtmlCache","undefined","includes","web","html_cache","scriptsBodyBefore","scriptsbodyBefore","scriptsBodyAfter","metaScripts","webPage","cacheKey","JSON","stringify","get","renderTemplate","set","error","Error","stack","setHeader","HEADERS","TEXT_HTML","send"],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport LRUCache from 'lru-cache';\n\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\n\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  options: TemplateUIOptions,\n  res: Response\n) {\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n\n  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];\n  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];\n  const metaScripts = config?.web?.metaScripts || [];\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAEA,IAAAC,SAAA,GAAAF,sBAAA,CAAAC,OAAA;AAEA,IAAAE,KAAA,GAAAF,OAAA;AAIA,IAAAG,SAAA,GAAAJ,sBAAA,CAAAC,OAAA;AAAwC,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAGxC;AACA,MAAMG,KAAK,GAAG,IAAIC,iBAAQ,CAAC;EAAEC,GAAG,EAAE,GAAG;EAAEC,GAAG,EAAE,IAAI,GAAG,EAAE,GAAG;AAAG,CAAC,CAAC;AAE7D,MAAMC,KAAK,GAAG,IAAAC,cAAU,EAAC,sBAAsB,CAAC;AAEhD,MAAMC,oBAA8B,GAAG;EACrCC,EAAE,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;EAC7BC,GAAG,EAAE,aAAa;EAClBC,GAAG,EAAE;AACP,CAAC;AAEc,SAASC,UAAUA,CAChCC,MAAkB,EAClBC,QAAuB,EACvBC,aAA0C,EAC1CC,OAA0B,EAC1BC,GAAa,EACb;EACA;EACA,MAAMC,aAAa,GAAG,CAACC,SAAS,EAAE,IAAI,CAAC,CAACC,QAAQ,CAACP,MAAM,EAAEQ,GAAG,EAAEC,UAAU,CAAC,GACrE,IAAI,GACJT,MAAM,EAAEQ,GAAG,EAAEC,UAAU;EAE3B,MAAMC,iBAAiB,GAAGV,MAAM,EAAEQ,GAAG,EAAEE,iBAAiB,IAAIV,MAAM,EAAEQ,GAAG,EAAEG,iBAAiB,IAAI,EAAE;EAChG,MAAMC,gBAAgB,GAAGZ,MAAM,EAAEQ,GAAG,EAAEI,gBAAgB,IAAI,EAAE;EAC5D,MAAMC,WAAW,GAAGb,MAAM,EAAEQ,GAAG,EAAEK,WAAW,IAAI,EAAE;EAElD,IAAIC,OAAO;EAEX,MAAMC,QAAQ,GAAG,YAAYC,IAAI,CAACC,SAAS,CAACd,OAAO,CAAC,EAAE;EAEtD,IAAI;IACFW,OAAO,GAAGzB,KAAK,CAAC6B,GAAG,CAACH,QAAQ,CAAC;IAC7B,IAAI,CAACD,OAAO,EAAE;MACZA,OAAO,GAAG,IAAAK,iBAAc,EACtB;QACElB,QAAQ,EAAEC,aAAa,IAAIP,oBAAoB;QAC/CQ,OAAO;QACPS,gBAAgB;QAChBC,WAAW;QACXH;MACF,CAAC,EACDT,QACF,CAAC;MAED,IAAII,aAAa,EAAE;QACjBhB,KAAK,CAAC+B,GAAG,CAACL,QAAQ,EAAED,OAAO,CAAC;QAC5BrB,KAAK,CAAC,oBAAoB,CAAC;MAC7B;IACF,CAAC,MAAM;MACLA,KAAK,CAAC,sBAAsB,CAAC;IAC/B;EACF,CAAC,CAAC,OAAO4B,KAAU,EAAE;IACnB,MAAM,IAAIC,KAAK,CAAC,kCAAkCD,KAAK,CAACE,KAAK,EAAE,CAAC;EAClE;EACAnB,GAAG,CAACoB,SAAS,CAAC,cAAc,EAAEC,aAAO,CAACC,SAAS,CAAC;EAChDtB,GAAG,CAACuB,IAAI,CAACb,OAAO,CAAC;EACjBrB,KAAK,CAAC,cAAc,CAAC;AACvB","ignoreList":[]}
+{"version":3,"file":"renderHTML.js","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport LRUCache from 'lru-cache';\n\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\n\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  options: TemplateUIOptions,\n  res: Response\n) {\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n\n  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];\n  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];\n  const metaScripts = config?.web?.metaScripts || [];\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;;;;AAYA,IAAM,QAAQ,IAAI,UAAA,QAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;AAAG,CAAC;AAE5D,IAAM,WAAA,GAAA,MAAA,SAAmB,sBAAsB;AAE/C,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,SAAS;CAC5B,KAAK;CACL,KAAK,CAAC;AACR;AAEA,SAAwB,WACtB,QACA,UACA,eACA,SACA,KACA;CAEA,MAAM,gBAAgB,CAAC,KAAA,GAAW,IAAI,EAAE,SAAS,QAAQ,KAAK,UAAU,IACpE,OACA,QAAQ,KAAK;CAEjB,MAAM,oBAAoB,QAAQ,KAAK,qBAAqB,QAAQ,KAAK,qBAAqB,CAAC;CAC/F,MAAM,mBAAmB,QAAQ,KAAK,oBAAoB,CAAC;CAC3D,MAAM,cAAc,QAAQ,KAAK,eAAe,CAAC;CAEjD,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,OAAO;CAEnD,IAAI;EACF,UAAU,MAAM,IAAI,QAAQ;EAC5B,IAAI,CAAC,SAAS;GACZ,UAAU,iBAAA,QACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;GACF,GACA,QACF;GAEA,IAAI,eAAe;IACjB,MAAM,IAAI,UAAU,OAAO;IAC3B,QAAM,oBAAoB;GAC5B;EACF,OACE,QAAM,sBAAsB;CAEhC,SAAS,OAAY;EACnB,MAAM,IAAI,MAAM,kCAAkC,MAAM,OAAO;CACjE;CACA,IAAI,UAAU,gBAAgB,gBAAA,QAAQ,SAAS;CAC/C,IAAI,KAAK,OAAO;CAChB,QAAM,cAAc;AACtB"}

package/build/middlewares/web/utils/renderHTML.mjs

@@ -0,0 +1,48 @@
+import renderTemplate from "./template.mjs";
+import { HEADERS } from "@verdaccio/core";
+import buildDebug from "debug";
+import LRUCache from "lru-cache";
+//#region src/middlewares/web/utils/renderHTML.ts
+var cache = new LRUCache({
+	max: 500,
+	ttl: 1e3 * 60 * 60
+});
+var debug = buildDebug("verdaccio:web:render");
+var defaultManifestFiles = {
+	js: ["vendors.js", "main.js"],
+	ico: "favicon.ico",
+	css: []
+};
+function renderHTML(config, manifest, manifestFiles, options, res) {
+	const needHtmlCache = [void 0, null].includes(config?.web?.html_cache) ? true : config?.web?.html_cache;
+	const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];
+	const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];
+	const metaScripts = config?.web?.metaScripts || [];
+	let webPage;
+	const cacheKey = `template:${JSON.stringify(options)}`;
+	try {
+		webPage = cache.get(cacheKey);
+		if (!webPage) {
+			webPage = renderTemplate({
+				manifest: manifestFiles ?? defaultManifestFiles,
+				options,
+				scriptsBodyAfter,
+				metaScripts,
+				scriptsBodyBefore
+			}, manifest);
+			if (needHtmlCache) {
+				cache.set(cacheKey, webPage);
+				debug("set template cache");
+			}
+		} else debug("reuse template cache");
+	} catch (error) {
+		throw new Error(`theme could not be load, stack ${error.stack}`);
+	}
+	res.setHeader("Content-Type", HEADERS.TEXT_HTML);
+	res.send(webPage);
+	debug("web rendered");
+}
+//#endregion
+export { renderHTML as default };
+
+//# sourceMappingURL=renderHTML.mjs.map

package/build/middlewares/web/utils/renderHTML.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderHTML.mjs","names":[],"sources":["../../../../src/middlewares/web/utils/renderHTML.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport type { Response } from 'express';\nimport LRUCache from 'lru-cache';\n\nimport { HEADERS } from '@verdaccio/core';\nimport type { ConfigYaml, TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport renderTemplate from './template';\nimport type { AssetManifest } from './template';\n\n// Cache for rendered HTML templates: max 500 entries, 1 hour TTL\nconst cache = new LRUCache({ max: 500, ttl: 1000 * 60 * 60 });\n\nconst debug = buildDebug('verdaccio:web:render');\n\nconst defaultManifestFiles: Manifest = {\n  js: ['vendors.js', 'main.js'],\n  ico: 'favicon.ico',\n  css: [],\n};\n\nexport default function renderHTML(\n  config: ConfigYaml,\n  manifest: AssetManifest,\n  manifestFiles: Manifest | null | undefined,\n  options: TemplateUIOptions,\n  res: Response\n) {\n  // @ts-ignore\n  const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)\n    ? true\n    : config?.web?.html_cache;\n\n  const scriptsBodyBefore = config?.web?.scriptsBodyBefore || config?.web?.scriptsbodyBefore || [];\n  const scriptsBodyAfter = config?.web?.scriptsBodyAfter || [];\n  const metaScripts = config?.web?.metaScripts || [];\n\n  let webPage;\n\n  const cacheKey = `template:${JSON.stringify(options)}`;\n\n  try {\n    webPage = cache.get(cacheKey);\n    if (!webPage) {\n      webPage = renderTemplate(\n        {\n          manifest: manifestFiles ?? defaultManifestFiles,\n          options,\n          scriptsBodyAfter,\n          metaScripts,\n          scriptsBodyBefore,\n        },\n        manifest\n      );\n\n      if (needHtmlCache) {\n        cache.set(cacheKey, webPage);\n        debug('set template cache');\n      }\n    } else {\n      debug('reuse template cache');\n    }\n  } catch (error: any) {\n    throw new Error(`theme could not be load, stack ${error.stack}`);\n  }\n  res.setHeader('Content-Type', HEADERS.TEXT_HTML);\n  res.send(webPage);\n  debug('web rendered');\n}\n"],"mappings":";;;;;AAYA,IAAM,QAAQ,IAAI,SAAS;CAAE,KAAK;CAAK,KAAK,MAAO,KAAK;AAAG,CAAC;AAE5D,IAAM,QAAQ,WAAW,sBAAsB;AAE/C,IAAM,uBAAiC;CACrC,IAAI,CAAC,cAAc,SAAS;CAC5B,KAAK;CACL,KAAK,CAAC;AACR;AAEA,SAAwB,WACtB,QACA,UACA,eACA,SACA,KACA;CAEA,MAAM,gBAAgB,CAAC,KAAA,GAAW,IAAI,EAAE,SAAS,QAAQ,KAAK,UAAU,IACpE,OACA,QAAQ,KAAK;CAEjB,MAAM,oBAAoB,QAAQ,KAAK,qBAAqB,QAAQ,KAAK,qBAAqB,CAAC;CAC/F,MAAM,mBAAmB,QAAQ,KAAK,oBAAoB,CAAC;CAC3D,MAAM,cAAc,QAAQ,KAAK,eAAe,CAAC;CAEjD,IAAI;CAEJ,MAAM,WAAW,YAAY,KAAK,UAAU,OAAO;CAEnD,IAAI;EACF,UAAU,MAAM,IAAI,QAAQ;EAC5B,IAAI,CAAC,SAAS;GACZ,UAAU,eACR;IACE,UAAU,iBAAiB;IAC3B;IACA;IACA;IACA;GACF,GACA,QACF;GAEA,IAAI,eAAe;IACjB,MAAM,IAAI,UAAU,OAAO;IAC3B,MAAM,oBAAoB;GAC5B;EACF,OACE,MAAM,sBAAsB;CAEhC,SAAS,OAAY;EACnB,MAAM,IAAI,MAAM,kCAAkC,MAAM,OAAO;CACjE;CACA,IAAI,UAAU,gBAAgB,QAAQ,SAAS;CAC/C,IAAI,KAAK,OAAO;CAChB,MAAM,cAAc;AACtB"}

package/build/middlewares/web/utils/template.js

@@ -1,36 +1,35 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.default = renderTemplate;
-var _debug = _interopRequireDefault(require("debug"));
-var _manifest = require("./manifest");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-const debug = (0, _debug.default)('verdaccio:web:render:template');
+const require_runtime = require("../../../_virtual/_rolldown/runtime.js");
+const require_manifest = require("./manifest.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+//#region src/middlewares/web/utils/template.ts
+var debug$1 = (0, debug.default)("verdaccio:web:render:template");
 function renderTemplate(template, manifest) {
-  debug('template %o', template);
-  debug('manifest %o', manifest);
-  return `
+	debug$1("template %o", template);
+	debug$1("manifest %o", manifest);
+	return `
     <!DOCTYPE html>
       <html lang="en-us">
       <head>
         <meta charset="utf-8">
         <base href="${template?.options.base}">
-        <title>${template?.options?.title ?? ''}</title>
+        <title>${template?.options?.title ?? ""}</title>
         <link rel="icon" href="${template?.options.base}-/static/favicon.ico">
         <meta name="viewport" content="width=device-width, initial-scale=1">
-        <script src="${template?.options.base}-/static/ui-options.js"></script>
-        ${template.manifest.css?.length ? (0, _manifest.getManifestValue)(template.manifest.css, manifest, template?.options.base).map(item => `<link rel="stylesheet" href="${item}">`).join('\n        ') : ''}
-        ${template?.metaScripts ? template.metaScripts.join('') : ''}
+        <script src="${template?.options.base}-/static/ui-options.js"><\/script>
+        ${template.manifest.css?.length ? require_manifest.getManifestValue(template.manifest.css, manifest, template?.options.base).map((item) => `<link rel="stylesheet" href="${item}">`).join("\n        ") : ""}
+        ${template?.metaScripts ? template.metaScripts.join("") : ""}
       </head>
       <body class="body">
-        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}
+        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join("") : ""}
         <div id="root"></div>
-        ${(0, _manifest.getManifestValue)(template.manifest.js, manifest, template?.options.base).map(item => `<script type="module" src="${item}"></script>`).join(`\n        `)}
-        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}
+        ${require_manifest.getManifestValue(template.manifest.js, manifest, template?.options.base).map((item) => `<script type="module" src="${item}"><\/script>`).join(`\n        `)}
+        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join("") : ""}
       </body>
     </html>
   `;
 }
+//#endregion
+exports.default = renderTemplate;
+
 //# sourceMappingURL=template.js.map

package/build/middlewares/web/utils/template.js.map

@@ -1 +1 @@
-{"version":3,"file":"template.js","names":["_debug","_interopRequireDefault","require","_manifest","e","__esModule","default","debug","buildDebug","renderTemplate","template","manifest","options","base","title","css","length","getManifestValue","map","item","join","metaScripts","scriptsBodyBefore","js","scriptsBodyAfter"],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script src=\"${template?.options.base}-/static/ui-options.js\"></script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AAKA,IAAAC,SAAA,GAAAD,OAAA;AAA8C,SAAAD,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAE9C,MAAMG,KAAK,GAAG,IAAAC,cAAU,EAAC,+BAA+B,CAAC;AAc1C,SAASC,cAAcA,CAACC,QAAkB,EAAEC,QAAuB,EAAE;EAClFJ,KAAK,CAAC,aAAa,EAAEG,QAAQ,CAAC;EAC9BH,KAAK,CAAC,aAAa,EAAEI,QAAQ,CAAC;EAE9B,OAAO;AACT;AACA;AACA;AACA;AACA,sBAAsBD,QAAQ,EAAEE,OAAO,CAACC,IAAI;AAC5C,iBAAiBH,QAAQ,EAAEE,OAAO,EAAEE,KAAK,IAAI,EAAE;AAC/C,iCAAiCJ,QAAQ,EAAEE,OAAO,CAACC,IAAI;AACvD;AACA,uBAAuBH,QAAQ,EAAEE,OAAO,CAACC,IAAI;AAC7C,UACUH,QAAQ,CAACC,QAAQ,CAACI,GAAG,EAAEC,MAAM,GACzB,IAAAC,0BAAgB,EAACP,QAAQ,CAACC,QAAQ,CAACI,GAAG,EAAEJ,QAAQ,EAAED,QAAQ,EAAEE,OAAO,CAACC,IAAI,CAAC,CACtEK,GAAG,CAAEC,IAAI,IAAK,gCAAgCA,IAAI,IAAI,CAAC,CACvDC,IAAI,CAAC,YAAY,CAAC,GACrB,EAAE;AAChB,UACUV,QAAQ,EAAEW,WAAW,GAAGX,QAAQ,CAACW,WAAW,CAACD,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE;AACpE;AACA;AACA,UAAUV,QAAQ,EAAEY,iBAAiB,GAAGZ,QAAQ,CAACY,iBAAiB,CAACF,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE;AAChF;AACA,UAAU,IAAAH,0BAAgB,EAACP,QAAQ,CAACC,QAAQ,CAACY,EAAE,EAAEZ,QAAQ,EAAED,QAAQ,EAAEE,OAAO,CAACC,IAAI,CAAC,CACvEK,GAAG,CAAEC,IAAI,IAAK,8BAA8BA,IAAI,aAAa,CAAC,CAC9DC,IAAI,CAAC,YAAY,CAAC;AAC7B,UAAUV,QAAQ,EAAEc,gBAAgB,GAAGd,QAAQ,CAACc,gBAAgB,CAACJ,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE;AAC9E;AACA;AACA,GAAG;AACH","ignoreList":[]}
+{"version":3,"file":"template.js","names":[],"sources":["../../../../src/middlewares/web/utils/template.ts"],"sourcesContent":["import buildDebug from 'debug';\n\nimport type { TemplateUIOptions } from '@verdaccio/types';\n\nimport type { Manifest } from './manifest';\nimport { getManifestValue } from './manifest';\n\nconst debug = buildDebug('verdaccio:web:render:template');\n\nexport type Template = {\n  manifest: Manifest;\n  options: TemplateUIOptions;\n  metaScripts?: string[];\n  scriptsBodyAfter?: string[];\n  scriptsBodyBefore?: string[];\n};\n\nexport interface AssetManifest {\n  [key: string]: string;\n}\n\nexport default function renderTemplate(template: Template, manifest: AssetManifest) {\n  debug('template %o', template);\n  debug('manifest %o', manifest);\n\n  return `\n    <!DOCTYPE html>\n      <html lang=\"en-us\">\n      <head>\n        <meta charset=\"utf-8\">\n        <base href=\"${template?.options.base}\">\n        <title>${template?.options?.title ?? ''}</title>\n        <link rel=\"icon\" href=\"${template?.options.base}-/static/favicon.ico\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <script src=\"${template?.options.base}-/static/ui-options.js\"></script>\n        ${\n          template.manifest.css?.length\n            ? getManifestValue(template.manifest.css, manifest, template?.options.base)\n                .map((item) => `<link rel=\"stylesheet\" href=\"${item}\">`)\n                .join('\\n        ')\n            : ''\n        }\n        ${template?.metaScripts ? template.metaScripts.join('') : ''}\n      </head>\n      <body class=\"body\">\n        ${template?.scriptsBodyBefore ? template.scriptsBodyBefore.join('') : ''}\n        <div id=\"root\"></div>\n        ${getManifestValue(template.manifest.js, manifest, template?.options.base)\n          .map((item) => `<script type=\"module\" src=\"${item}\"></script>`)\n          .join(`\\n        `)}\n        ${template?.scriptsBodyAfter ? template.scriptsBodyAfter.join('') : ''}\n      </body>\n    </html>\n  `;\n}\n"],"mappings":";;;;;AAOA,IAAM,WAAA,GAAA,MAAA,SAAmB,+BAA+B;AAcxD,SAAwB,eAAe,UAAoB,UAAyB;CAClF,QAAM,eAAe,QAAQ;CAC7B,QAAM,eAAe,QAAQ;CAE7B,OAAO;;;;;sBAKa,UAAU,QAAQ,KAAK;iBAC5B,UAAU,SAAS,SAAS,GAAG;iCACf,UAAU,QAAQ,KAAK;;uBAEjC,UAAU,QAAQ,KAAK;UAEpC,SAAS,SAAS,KAAK,SACnB,iBAAA,iBAAiB,SAAS,SAAS,KAAK,UAAU,UAAU,QAAQ,IAAI,EACrE,KAAK,SAAS,gCAAgC,KAAK,GAAG,EACtD,KAAK,YAAY,IACpB,GACL;UACC,UAAU,cAAc,SAAS,YAAY,KAAK,EAAE,IAAI,GAAG;;;UAG3D,UAAU,oBAAoB,SAAS,kBAAkB,KAAK,EAAE,IAAI,GAAG;;UAEvE,iBAAA,iBAAiB,SAAS,SAAS,IAAI,UAAU,UAAU,QAAQ,IAAI,EACtE,KAAK,SAAS,8BAA8B,KAAK,aAAY,EAC7D,KAAK,YAAY,EAAE;UACpB,UAAU,mBAAmB,SAAS,iBAAiB,KAAK,EAAE,IAAI,GAAG;;;;AAI/E"}