@withl5e/l5e 1.0.0 → 1.0.1-rc.0

package/dist/server-DPBLtja1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-DPBLtja1.js","names":["serialize"],"sources":["../src/core/bundler.ts","../src/core/script-bundle-policy.ts","../src/core/server.ts"],"sourcesContent":["/// <reference path=\"./jsx-types.d.ts\" />\nimport { createHash } from 'node:crypto';\nimport fs from 'node:fs/promises';\nimport { createRequire } from 'node:module';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport type { InputOptions, OutputChunk, OutputOptions, Plugin } from 'rolldown';\nimport type { ScriptBundlePolicy } from './script-bundle-policy';\n\nlet rolldownModulePromise: Promise<typeof import('rolldown')> | null = null;\n\n/**\n * Resolve Rolldown lazily from the installed framework package. A bare static\n * import can be hoisted when the framework is bundled into a consumer's SSR\n * output, which breaks pnpm's strict dependency layout. Anchoring resolution at\n * @withl5e/l5e keeps the runtime dependency owned by the package that declares it.\n */\nfunction loadRolldown(): Promise<typeof import('rolldown')> {\n  if (!rolldownModulePromise) {\n    rolldownModulePromise = (async () => {\n      const require = createRequire(import.meta.url);\n      const frameworkEntry = require.resolve('@withl5e/l5e/server');\n      const frameworkRequire = createRequire(frameworkEntry);\n      const rolldownPath = frameworkRequire.resolve('rolldown');\n      return (await import(\n        /* @vite-ignore */ pathToFileURL(rolldownPath).href\n      )) as typeof import('rolldown');\n    })();\n  }\n  return rolldownModulePromise;\n}\n\ninterface BundledFile {\n  content: string;\n  hash: string;\n  filename: string;\n  mimeType: string;\n}\n\ninterface BundleResult {\n  hash: string;\n  filename: string;\n  content: string;\n}\n\nconst EMPTY_RESULT: BundleResult = { hash: '', filename: '', content: '' };\n\n// Memory map để lưu bundled files\nconst bundledFilesMap = new Map<string, BundledFile>();\n\n/**\n * Single-flight map: cacheKey → promise của lần bundle đang chạy (hoặc đã xong).\n * Vì promise được giữ lại sau khi resolve, map này vừa là in-flight dedup vừa là\n * result cache. Bundle lỗi bị xoá khỏi map để request sau được thử lại.\n */\nconst bundlePromises = new Map<string, Promise<BundleResult>>();\n\n/**\n * Chạy `work` đúng một lần cho mỗi cacheKey, kể cả khi nhiều request đến đồng thời.\n */\nfunction dedupe(cacheKey: string, work: () => Promise<BundleResult>): Promise<BundleResult> {\n  const pending = bundlePromises.get(cacheKey);\n  if (pending) {\n    return pending;\n  }\n\n  const promise = work().catch((error) => {\n    bundlePromises.delete(cacheKey);\n    throw error;\n  });\n  bundlePromises.set(cacheKey, promise);\n  return promise;\n}\n\n/**\n * Generate hash từ content\n */\nfunction generateHash(content: string): string {\n  return createHash('sha256').update(content).digest('hex').substring(0, 16);\n}\n\n// Rolldown coi id bắt đầu bằng \\0 là virtual — nó sẽ không cố đọc từ đĩa.\nconst VIRTUAL_ENTRY_ID = '\\0l5e:bundle-entry';\n\n/**\n * Entry của mỗi lần bundle chỉ là một danh sách import. Giữ nó trong memory thay\n * vì ghi ra đĩa: hai request đồng thời cùng một tập script sinh ra cùng nội dung\n * entry, nên file tạm dùng chung path sẽ bị request này xoá trong lúc Rolldown của\n * request kia còn đang đọc.\n */\nfunction virtualEntryPlugin(entryContent: string): Plugin {\n  return {\n    name: 'l5e-virtual-entry',\n    resolveId(source) {\n      return source === VIRTUAL_ENTRY_ID ? VIRTUAL_ENTRY_ID : null;\n    },\n    load(id) {\n      return id === VIRTUAL_ENTRY_ID ? entryContent : null;\n    },\n  };\n}\n\n/** Inline page roots only; their emitted dependencies retain canonical URLs. */\nfunction preserveBuildChunksPlugin(policy: ScriptBundlePolicy): Plugin {\n  return {\n    name: 'preserve-build-chunks',\n    resolveId(source, importer) {\n      if (!importer || source === VIRTUAL_ENTRY_ID) return null;\n      const file = path.isAbsolute(source)\n        ? path.normalize(source)\n        : source.startsWith('.')\n          ? path.resolve(path.dirname(importer), source)\n          : null;\n      if (!file) return null;\n      // The virtual entry is the only place where an unshared page entry may\n      // be inlined. Never traverse an emitted dependency to re-bundle its body.\n      if (importer === VIRTUAL_ENTRY_ID && !policy.isPreserved(file)) return null;\n      return { id: policy.assetUrl(file), external: 'absolute' };\n    },\n  };\n}\n\nasync function runScriptBundle(\n  uniquePaths: string[],\n  policy: ScriptBundlePolicy,\n): Promise<BundleResult> {\n  const entryContent = uniquePaths\n    .map((p) => {\n      const filePath = policy.fileForScript(p);\n      return `import ${JSON.stringify(filePath)};`;\n    })\n    .join('\\n');\n\n  const rolldownOptions: InputOptions = {\n    input: VIRTUAL_ENTRY_ID,\n    plugins: [virtualEntryPlugin(entryContent), preserveBuildChunksPlugin(policy)],\n    platform: 'neutral',\n    tsconfig: false,\n    // Runtime scripts are imported for their side effects. Do not let an app's\n    // package.json sideEffects flag erase those entry imports.\n    // Rolldown 1.2 still consults package metadata for boolean `true`, so use\n    // an explicit callback to override consumer `sideEffects: false`.\n    treeshake: { moduleSideEffects: () => true },\n    external: (id) => {\n      // External node_modules\n      if (!id.startsWith('.') && !path.isAbsolute(id) && id !== VIRTUAL_ENTRY_ID) {\n        return true;\n      }\n\n      // Emitted file imports are resolved by preserveBuildChunksPlugin.\n      return false;\n    },\n  };\n\n  const outputOptions: OutputOptions = {\n    format: 'es',\n    codeSplitting: true,\n    minify: false,\n    entryFileNames: 'bundle-[hash].js',\n    chunkFileNames: 'bundle-[hash].js',\n  };\n\n  const { rolldown } = await loadRolldown();\n  const bundle = await rolldown(rolldownOptions);\n  let output;\n  try {\n    ({ output } = await bundle.generate(outputOptions));\n  } finally {\n    await bundle.close();\n  }\n\n  for (const chunk of output) {\n    if (chunk.type !== 'chunk') {\n      continue;\n    }\n    bundledFilesMap.set(chunk.fileName, {\n      content: chunk.code || '',\n      hash: generateHash(chunk.code || ''),\n      filename: chunk.fileName,\n      mimeType: 'application/javascript',\n    });\n  }\n\n  const entryChunk = output.find(\n    (item): item is OutputChunk =>\n      item.type === 'chunk' && item.isEntry && item.facadeModuleId === VIRTUAL_ENTRY_ID,\n  );\n  if (!entryChunk) {\n    throw new Error('[bundler] rolldown produced no entry chunk');\n  }\n\n  return {\n    hash: generateHash(entryChunk.code || ''),\n    filename: entryChunk.fileName,\n    content: entryChunk.code || '',\n  };\n}\n\n/**\n * Bundle JavaScript files từ dist/client thành 1 file\n * Trong production, các file đã được build sẵn trong dist/client\n */\nexport async function bundleScripts(\n  scriptPaths: string[],\n  distClientDir: string,\n  policy?: ScriptBundlePolicy,\n): Promise<BundleResult> {\n  if (scriptPaths.length === 0) {\n    return EMPTY_RESULT;\n  }\n\n  if (!policy || policy.directory !== path.resolve(distClientDir)) {\n    console.warn('[bundler] No matching build manifest; serving original script entries.');\n    return EMPTY_RESULT;\n  }\n\n  const uniquePaths = [...new Set(scriptPaths)].sort();\n  const cacheKey = `scripts:${policy.cacheKey}:${JSON.stringify(uniquePaths)}`;\n\n  try {\n    return await dedupe(cacheKey, () => runScriptBundle(uniquePaths, policy));\n  } catch (error) {\n    console.error('[bundler] Error bundling scripts:', error);\n    return EMPTY_RESULT;\n  }\n}\n\nasync function runCssBundle(uniquePaths: string[], distClientDir: string): Promise<BundleResult> {\n  const cssContents: string[] = [];\n\n  for (const cssPath of uniquePaths) {\n    // cssPath có thể là \"/assets/xxx.css\" hoặc từ manifest\n    const filePath = cssPath.startsWith('/')\n      ? path.join(distClientDir, cssPath.substring(1))\n      : path.join(distClientDir, cssPath);\n\n    try {\n      const content = await fs.readFile(filePath, 'utf-8');\n      cssContents.push(`/* ${cssPath} */\\n${content}\\n`);\n    } catch (err) {\n      console.warn(`[bundler] Failed to read CSS file: ${cssPath}`, err);\n    }\n  }\n\n  const bundledContent = cssContents.join('\\n\\n');\n  const hash = generateHash(bundledContent);\n  const filename = `bundle-${hash}.css`;\n\n  bundledFilesMap.set(filename, {\n    content: bundledContent,\n    hash,\n    filename,\n    mimeType: 'text/css',\n  });\n\n  return { hash, filename, content: bundledContent };\n}\n\n/**\n * Bundle CSS files từ dist/client thành 1 file\n * Trong production, các file đã được build sẵn trong dist/client\n */\nexport async function bundleCss(cssPaths: string[], distClientDir: string): Promise<BundleResult> {\n  if (cssPaths.length === 0) {\n    return EMPTY_RESULT;\n  }\n\n  const uniquePaths = [...new Set(cssPaths)].sort();\n  const cacheKey = `css:${JSON.stringify([path.resolve(distClientDir), uniquePaths])}`;\n\n  try {\n    return await dedupe(cacheKey, () => runCssBundle(uniquePaths, distClientDir));\n  } catch (error) {\n    console.error('[bundler] Error bundling CSS:', error);\n    return EMPTY_RESULT;\n  }\n}\n\n/**\n * Get bundled file từ map\n */\nexport function getBundledFile(filename: string): BundledFile | undefined {\n  return bundledFilesMap.get(filename);\n}\n\n/**\n * Clear bundled files map (useful for testing)\n */\nexport function clearBundledFiles(): void {\n  bundledFilesMap.clear();\n  bundlePromises.clear();\n}\n","import { createHash } from 'node:crypto';\nimport { realpathSync } from 'node:fs';\nimport path from 'node:path';\nimport type { Manifest } from 'vite';\nimport { withAssetBase } from './global-style';\n\n/** Preserve the emitted module boundaries chosen by the application's build. */\nexport function createScriptBundlePolicy(manifest: Manifest, distClientDir: string, base = '/') {\n  const directory = path.resolve(distClientDir);\n  // Rolldown resolves entry importers through symlinks/junctions. Use the same\n  // physical directory for identity while retaining the caller's output scope.\n  const assetDirectory = realpathSync(directory);\n  const files = new Set<string>();\n  const preserved = new Set<string>();\n  const jsEntries = Object.entries(manifest).filter(([, entry]) => /\\.[cm]?js$/.test(entry.file));\n\n  function absoluteFile(file: string) {\n    const absolute = path.resolve(assetDirectory, file);\n    const relative = path.relative(assetDirectory, absolute);\n    if (\n      !relative ||\n      relative === '..' ||\n      relative.startsWith(`..${path.sep}`) ||\n      path.isAbsolute(relative)\n    ) {\n      throw new Error(`[bundler] Asset is outside the client output: ${file}`);\n    }\n    return absolute;\n  }\n\n  for (const [key, entry] of jsEntries) {\n    const file = absoluteFile(entry.file);\n    files.add(file);\n    if (\n      !entry.isEntry ||\n      entry.isDynamicEntry ||\n      key === 'src/client.global.ts' ||\n      /(?:^|\\/)react\\//.test(entry.src || key)\n    )\n      preserved.add(file);\n  }\n\n  // Index the whole build, not just this request's roots. This also protects an\n  // entry imported by another entry, even when both are selected on this page.\n  for (const [, entry] of jsEntries) {\n    for (const key of [...(entry.imports || []), ...(entry.dynamicImports || [])]) {\n      const dependency = manifest[key];\n      if (!dependency || !files.has(absoluteFile(dependency.file))) {\n        throw new Error(`[bundler] Missing JavaScript manifest dependency: ${key}`);\n      }\n      preserved.add(absoluteFile(dependency.file));\n    }\n  }\n\n  const cacheKey = createHash('sha256')\n    .update(JSON.stringify([directory, assetDirectory, base, manifest]))\n    .digest('hex');\n\n  return {\n    cacheKey,\n    directory,\n    fileForScript(script: string) {\n      const file = absoluteFile(script.replace(/^\\/+/, ''));\n      if (!files.has(file)) throw new Error(`[bundler] Script is missing from manifest: ${script}`);\n      return file;\n    },\n    isPreserved(file: string) {\n      return preserved.has(file);\n    },\n    assetUrl(file: string) {\n      if (!files.has(file)) throw new Error(`[bundler] Import is missing from manifest: ${file}`);\n      return withAssetBase(base, path.relative(assetDirectory, file).replace(/\\\\/g, '/'));\n    },\n  };\n}\n\nexport type ScriptBundlePolicy = ReturnType<typeof createScriptBundlePolicy>;\n","import type { Request as ExpressRequest, Response as ExpressResponse } from 'express';\nimport { existsSync } from 'fs';\nimport fs from 'node:fs/promises';\nimport path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport requestIp from 'request-ip';\nimport serialize from 'serialize-javascript';\nimport type { ViteDevServer } from 'vite';\nimport { createContext, type MiddlewareHandler, type RewritePayload } from '../middleware';\nimport { bundleCss, bundleScripts, getBundledFile } from './bundler';\nimport type { RenderResult, RequestInfo } from './entry-server';\nimport { resolveGlobalStyleHref, withAssetBase } from './global-style';\nimport { createScriptBundlePolicy, type ScriptBundlePolicy } from './script-bundle-policy';\nimport type { Manifest } from 'vite';\nimport { escapeProp } from './render';\nimport { createHeadersFromExpressRequest, parseCookies } from './request';\n\nexport interface ServerOptions {\n  root?: string;\n  port?: number;\n  base?: string;\n  publicDir?: string;\n  setupApp?: (app: any) => void | Promise<void>;\n  app?: any; // Express\n  /**\n   * Externalize React island props into a single `<script id=\"_l5e_data_\">` at\n   * the end of the document (referenced by `data-island-idx`) instead of inlining\n   * a large `data-island-props` attribute on each element — keeps the SSR HTML\n   * lean so crawlers read content first. Default true; set false for the legacy\n   * inline behavior.\n   */\n  externalizeIslandProps?: boolean;\n}\n\nexport interface ServerContext {\n  app: any; // Express app\n  vite?: ViteDevServer;\n}\n\n/**\n * Apply or replace lang attribute on <html> tag\n */\nexport function applyHtmlLang(template: string, lang: string): string {\n  // Escape so a loader-supplied lang (possibly derived from user input) cannot\n  // break out of the attribute / <html> tag (XSS). escapeProp handles \", <, >, &.\n  const safeLang = escapeProp(lang);\n  return template.replace(/<html\\b([^>]*)>/i, (match, attrs) => {\n    // Check if lang already exists\n    if (/\\blang\\s*=/i.test(attrs)) {\n      // Replace existing lang value (function replacer avoids $-pattern issues)\n      return match.replace(/lang\\s*=\\s*\"[^\"]*\"/i, () => `lang=\"${safeLang}\"`);\n    } else {\n      // Add lang attribute\n      return `<html lang=\"${safeLang}\"${attrs}>`;\n    }\n  });\n}\n\ntype EntryServerModule = {\n  render: (\n    url: string,\n    requestInfo?: RequestInfo,\n    options?: { externalizeIslandProps?: boolean },\n  ) => Promise<RenderResult>;\n  loadMiddleware?: () => Promise<MiddlewareHandler | undefined>;\n};\n\nfunction getRequestUrl(req: ExpressRequest): URL {\n  return new URL(`${req.protocol}://${req.get('host')}${req.originalUrl}`);\n}\n\nfunction getRenderUrl(urlObject: URL, base: string): string {\n  const requestPath = `${urlObject.pathname}${urlObject.search}`;\n  return requestPath.replace(base, '') || '/';\n}\n\nfunction createWebRequestFromExpress(req: ExpressRequest): globalThis.Request {\n  const init: RequestInit & { duplex?: 'half' } = {\n    method: req.method,\n    headers: createHeadersFromExpressRequest(req),\n  };\n\n  if (req.method !== 'GET' && req.method !== 'HEAD') {\n    init.body = req as unknown as BodyInit;\n    init.duplex = 'half';\n  }\n\n  return new globalThis.Request(getRequestUrl(req).href, init);\n}\n\nfunction createRequestInfo(\n  req: ExpressRequest,\n  webRequest: globalThis.Request,\n  base: string,\n  locals: Record<string, unknown>,\n): RequestInfo {\n  const urlObject = new URL(webRequest.url);\n  const renderUrl = getRenderUrl(urlObject, base);\n  const normalizedPath = renderUrl.startsWith('/') ? renderUrl : `/${renderUrl}`;\n  const headers: Record<string, string> = {};\n  webRequest.headers.forEach((value, key) => {\n    headers[key] = value;\n  });\n\n  return {\n    url: urlObject,\n    path: normalizedPath,\n    pathname: urlObject.pathname,\n    method: webRequest.method,\n    headers,\n    cookies: parseCookies(webRequest.headers.get('cookie') ?? undefined),\n    query: Object.fromEntries(urlObject.searchParams.entries()),\n    ip: requestIp.getClientIp(req) ?? undefined,\n    locals,\n  };\n}\n\nfunction createRewriteRequest(\n  payload: RewritePayload | undefined,\n  currentRequest: globalThis.Request,\n  currentUrl: URL,\n): globalThis.Request {\n  if (!payload) {\n    return currentRequest;\n  }\n\n  if (payload instanceof globalThis.Request) {\n    return payload;\n  }\n\n  if (payload instanceof URL) {\n    return new globalThis.Request(payload.href, currentRequest.clone());\n  }\n\n  return new globalThis.Request(new URL(payload, currentUrl).href, currentRequest.clone());\n}\n\nasync function sendWebResponse(\n  req: ExpressRequest,\n  res: ExpressResponse,\n  response: globalThis.Response,\n): Promise<void> {\n  res.status(response.status);\n  const setCookieValues = getSetCookieHeaders(response.headers);\n  response.headers.forEach((value, key) => {\n    if (key.toLowerCase() === 'set-cookie') {\n      return;\n    }\n    res.setHeader(key, value);\n  });\n  if (setCookieValues.length > 0) {\n    res.setHeader('Set-Cookie', setCookieValues);\n  }\n\n  if (req.method === 'HEAD') {\n    res.end();\n    return;\n  }\n\n  const body = Buffer.from(await response.arrayBuffer());\n  res.send(body);\n}\n\nfunction getSetCookieHeaders(headers: Headers): string[] {\n  const getSetCookie = (headers as Headers & { getSetCookie?: () => string[] }).getSetCookie;\n  if (typeof getSetCookie === 'function') {\n    return getSetCookie.call(headers);\n  }\n\n  const raw = (headers as Headers & { raw?: () => Record<string, string[]> }).raw?.();\n  if (raw?.['set-cookie']) {\n    return raw['set-cookie'];\n  }\n\n  const value = headers.get('set-cookie');\n  return value ? splitSetCookieHeader(value) : [];\n}\n\nfunction splitSetCookieHeader(value: string): string[] {\n  const cookies: string[] = [];\n  let start = 0;\n\n  for (let i = 0; i < value.length; i++) {\n    if (value[i] !== ',') continue;\n\n    const rest = value.slice(i + 1);\n    if (/^\\s*[^=;,]+=/.test(rest)) {\n      cookies.push(value.slice(start, i).trim());\n      start = i + 1;\n    }\n  }\n\n  cookies.push(value.slice(start).trim());\n  return cookies.filter(Boolean);\n}\n\nfunction createRawResponse(rendered: RenderResult): globalThis.Response | null {\n  if (!rendered.rawResponse) {\n    return null;\n  }\n\n  const { body, contentType, statusCode, headers } = rendered.rawResponse;\n  const responseHeaders = new Headers(headers);\n  responseHeaders.set('Content-Type', contentType);\n\n  return new globalThis.Response(body as BodyInit, {\n    status: statusCode || 200,\n    headers: responseHeaders,\n  });\n}\n\nasync function createPageResponse({\n  rendered,\n  template,\n  manifest,\n  root,\n  distClientDir,\n  isProduction,\n  assetBase,\n  scriptPolicy,\n}: {\n  rendered: RenderResult;\n  template: string;\n  manifest?: Record<string, any>;\n  root: string;\n  distClientDir: string;\n  isProduction: boolean;\n  assetBase: string;\n  scriptPolicy?: ScriptBundlePolicy;\n}): Promise<globalThis.Response> {\n  const rawResponse = createRawResponse(rendered);\n  if (rawResponse) {\n    return rawResponse;\n  }\n\n  if (rendered.redirect) {\n    return new globalThis.Response(null, {\n      status: rendered.redirect.statusCode,\n      headers: {\n        Location: rendered.redirect.url,\n      },\n    });\n  }\n\n  let scriptSrcList: string[] = rendered.scripts || [];\n  let cssSrcList: string[] = rendered.styles || [];\n  const islandEntries = rendered.islands || [];\n  let cacheTags: string[] = rendered.cacheTags || [];\n  const maxAge: number | undefined = rendered.maxAge;\n  const sMaxAge: number | undefined = rendered.sMaxAge;\n  const swr: number | undefined = rendered.swr;\n\n  let extraHead = '';\n  const emittedStyles = new Set<string>();\n  const appendStylesheet = (href: string, crossorigin = false) => {\n    if (emittedStyles.has(href)) return;\n    emittedStyles.add(href);\n    extraHead += `<link rel=\"stylesheet\"${crossorigin ? ' crossorigin' : ''} href=\"${escapeProp(href)}\">`;\n  };\n  let globalScripts: string[] = [];\n  let islandRegistryScript = '';\n\n  const globalStyleHref = resolveGlobalStyleHref({\n    root,\n    manifest,\n    isProduction,\n    base: assetBase,\n  });\n  if (globalStyleHref) appendStylesheet(globalStyleHref, isProduction);\n\n  // Externalized island props → a single JSON script at the end of the document.\n  // serialize-javascript with isJSON escapes `<`, `>`, `&` (and U+2028/2029) so the\n  // props can't break out of the <script> block or inject markup (XSS). The runtime\n  // reads it via `document.getElementById('_l5e_data_')` + JSON.parse.\n  let islandDataScript = '';\n  if (rendered.islandData && rendered.islandData.length > 0) {\n    islandDataScript = `<script type=\"application/json\" id=\"_l5e_data_\">${serialize(\n      rendered.islandData,\n      { isJSON: true },\n    )}</script>`;\n  }\n\n  if (isProduction && manifest) {\n    scriptSrcList = scriptSrcList.filter(\n      (src) => src.replace(/^\\//, '') !== 'src/client.global.ts',\n    );\n    cssSrcList = cssSrcList.filter((src) => !src.includes('.global.'));\n\n    const cssFiles = new Set<string>();\n    const preloadFiles = new Set<string>();\n\n    function collectFromEntry(entryKey: string): { file: string | null } {\n      const entry = manifest![entryKey];\n      if (!entry) return { file: null };\n\n      if (entry.css) entry.css.forEach((css: string) => cssFiles.add(css));\n      if (entry.imports) {\n        entry.imports.forEach((importKey: string) => {\n          const importedChunk = manifest![importKey];\n          if (importedChunk?.file) preloadFiles.add(importedChunk.file);\n          if (importedChunk?.css) {\n            importedChunk.css.forEach((css: string) => cssFiles.add(css));\n          }\n          if (importedChunk?.imports) {\n            importedChunk.imports.forEach((key: string) => {\n              const chunk = manifest![key];\n              if (chunk?.file) preloadFiles.add(chunk.file);\n              if (chunk?.css) chunk.css.forEach((css: string) => cssFiles.add(css));\n            });\n          }\n        });\n      }\n\n      return { file: entry.file };\n    }\n\n    const mappedScripts: string[] = [];\n    for (const src of scriptSrcList) {\n      const entryKey = src.replace(/^\\//, '');\n      const { file } = collectFromEntry(entryKey);\n      if (file) mappedScripts.push(`/${file}`);\n    }\n\n    const mappedCssFiles: string[] = [];\n    for (const src of cssSrcList) {\n      const entryKey = src.replace(/^\\//, '');\n      const { file } = collectFromEntry(entryKey);\n      if (file) {\n        mappedCssFiles.push(`/${file}`);\n        cssFiles.add(file);\n      }\n    }\n\n    if (mappedScripts.length > 0) {\n      const bundledScript = await bundleScripts(mappedScripts, distClientDir, scriptPolicy);\n      scriptSrcList = bundledScript.filename\n        ? [withAssetBase(assetBase, bundledScript.filename)]\n        : mappedScripts.map((file) => withAssetBase(assetBase, file));\n    }\n\n    if (mappedCssFiles.length > 0) {\n      const bundledCss = await bundleCss(mappedCssFiles, distClientDir);\n      if (bundledCss.filename) {\n        cssSrcList = [withAssetBase(assetBase, bundledCss.filename)];\n      }\n    }\n\n    const globalEntry = manifest['src/client.global.ts'];\n    if (globalEntry) {\n      if (globalEntry.css && globalEntry.css.length > 0) {\n        globalEntry.css.forEach((cssFile: string) => {\n          appendStylesheet(withAssetBase(assetBase, cssFile), true);\n        });\n      }\n      if (globalEntry.file) {\n        globalScripts.push(withAssetBase(assetBase, globalEntry.file));\n      }\n    }\n\n    if (islandEntries.length > 0) {\n      const islandMap: Record<string, string> = {};\n      for (const island of islandEntries) {\n        const entry = manifest[island.src];\n        if (entry?.file) {\n          islandMap[island.key] = withAssetBase(assetBase, entry.file);\n        }\n      }\n      if (Object.keys(islandMap).length > 0) {\n        islandRegistryScript = `<script>window.__L5E_ISLANDS__=${serialize(islandMap)}</script>`;\n      }\n    }\n\n    if (cssSrcList.length > 0) {\n      cssSrcList.forEach((file) => appendStylesheet(file, true));\n    }\n  }\n\n  if (!isProduction) {\n    // Registry đã dedupe, nhưng vẫn lọc lại ở đây để dev không bao giờ ra thẻ trùng\n    [...new Set(cssSrcList)].forEach((src) => appendStylesheet(src));\n  }\n\n  let allScripts = [...globalScripts, ...scriptSrcList];\n\n  if (!isProduction) {\n    const globalTsPath = path.join(root, 'src', 'client.global.ts');\n    if (existsSync(globalTsPath)) {\n      allScripts = ['/src/client.global.ts', ...allScripts];\n    }\n\n    // useClientJs('/src/client.global.ts') do user tự gọi sẽ trùng với entry\n    // được prepend ở trên — registry không bắt được ca này nên dedupe lại\n    allScripts = [...new Set(allScripts)];\n\n    if (islandEntries.length > 0) {\n      const islandMap: Record<string, string> = {};\n      for (const island of islandEntries) {\n        islandMap[island.key] = `/${island.src}`;\n      }\n      islandRegistryScript = `<script>window.__L5E_ISLANDS__=${serialize(islandMap)}</script>`;\n    }\n  }\n\n  const scriptsHtml =\n    islandDataScript +\n    islandRegistryScript +\n    allScripts.map((src) => `<script type=\"module\" src=\"${src}\"></script>`).join('');\n\n  const templateWithLang = rendered.lang ? applyHtmlLang(template, rendered.lang) : template;\n\n  // Replacer fns (not strings) so `$`-sequences in rendered HTML — e.g. an SSR\n  // island body or user text containing \"$$\" / \"$&\" — aren't interpreted as\n  // special String.replace replacement patterns.\n  const html = rendered.rawHtml\n    ? rendered.html || ''\n    : templateWithLang\n        .replace(`<!--app-head-->`, () => (rendered.head ?? '') + extraHead)\n        .replace(`<!--app-html-->`, () => rendered.html ?? '')\n        .replace(`<!--app-scripts-->`, () => scriptsHtml);\n\n  const headers = new Headers({\n    'Content-Type': 'text/html',\n  });\n\n  const cacheControlParts: string[] = [];\n  const cdnCacheControlParts: string[] = [];\n  if (maxAge !== undefined) {\n    cacheControlParts.push(`max-age=${maxAge}`);\n    cdnCacheControlParts.push(`max-age=${maxAge}`);\n  }\n\n  if (sMaxAge !== undefined) {\n    cdnCacheControlParts.push(`s-maxage=${sMaxAge}`);\n  }\n\n  // ko cho phép browser swr\n  if (swr !== undefined) {\n    cdnCacheControlParts.push(`stale-while-revalidate=${swr}`);\n  }\n\n  if ((cacheControlParts.length > 0 || cdnCacheControlParts.length > 0) && isProduction) {\n    cacheControlParts.push('public');\n    cacheControlParts.push('must-revalidate');\n\n    cdnCacheControlParts.push('public');\n\n    headers.set('Cache-Control', cacheControlParts.join(', '));\n    headers.set('CDN-Cache-Control', cdnCacheControlParts.join(', '));\n  }\n\n  if (process.env.NODE_ENV === 'production') {\n    cacheTags = optimizeCacheTags(cacheTags);\n  }\n  headers.set('Cache-Tag', ['global', ...cacheTags].join(','));\n\n  return new globalThis.Response(html, {\n    status: rendered.statusCode || 200,\n    headers,\n  });\n}\n\nexport async function createServer(options: ServerOptions = {}): Promise<ServerContext> {\n  const root = options.root || process.cwd();\n  const base = options.base || '/';\n  const isProduction = process.env.NODE_ENV === 'production';\n  const externalizeIslandProps = options.externalizeIslandProps ?? true;\n\n  // Cached production assets\n  const templateHtml = isProduction\n    ? await fs.readFile(path.join(root, './index.html'), 'utf-8')\n    : '';\n\n  // Create http server\n  // @ts-ignore\n  const express = (await import('express')).default;\n  const app = options.app || express();\n\n  // Serve static files from public directory\n  if (options.publicDir) {\n    const publicPath = path.isAbsolute(options.publicDir)\n      ? options.publicDir\n      : path.join(root, options.publicDir);\n\n    if (existsSync(publicPath)) {\n      app.use(express.static(publicPath));\n    }\n  }\n\n  // Add Vite or respective production middlewares\n  let vite: ViteDevServer | undefined;\n  const distClientDir = path.join(root, './dist/client');\n  // A production server owns one immutable build. Share its manifest/policy\n  // across requests, just like its cached HTML template and SSR module.\n  const productionManifest: Manifest | undefined = isProduction\n    ? JSON.parse(await fs.readFile(path.join(distClientDir, '.vite/manifest.json'), 'utf-8'))\n    : undefined;\n  let scriptPolicy: ScriptBundlePolicy | undefined;\n  if (productionManifest) {\n    try {\n      scriptPolicy = createScriptBundlePolicy(productionManifest, distClientDir, base);\n    } catch (error) {\n      console.warn('[bundler] Invalid build manifest; serving original script entries.', error);\n    }\n  }\n\n  if (!isProduction) {\n    const { createServer } = await import('vite');\n    const configFile = path.join(root, 'vite.config.js');\n    vite = await createServer({\n      root,\n      configFile,\n      server: { middlewareMode: true },\n      appType: 'custom',\n      base,\n      optimizeDeps: {\n        exclude: ['@withl5e/l5e', 'file-type'],\n      },\n      ssr: {\n        resolve: {\n          conditions: ['development', 'default'],\n        },\n      },\n      resolve: {\n        conditions: ['development', 'default'],\n      },\n    });\n    app.use(vite.middlewares);\n  } else {\n    // @ts-ignore\n    const compression = (await import('compression')).default;\n    // @ts-ignore\n    const sirv = (await import('sirv')).default;\n    app.use(compression());\n    app.use(base, sirv(distClientDir, { extensions: [] }));\n\n    // Route để serve bundled files từ memory map\n    // Đặt route này trÆ°á»›c route HTML để catch request trÆ°á»›c\n    app.get(\n      withAssetBase(base, 'bundle-:hash.:ext'),\n      async (req: ExpressRequest, res: ExpressResponse) => {\n        try {\n          const { hash, ext } = req.params;\n          const filename = `bundle-${hash}.${ext}`;\n          const bundledFile = getBundledFile(filename);\n\n          if (!bundledFile) {\n            return res.status(404).send('Bundled file not found');\n          }\n\n          res.set({\n            'Content-Type': bundledFile.mimeType,\n            'Cache-Control': 'public, max-age=31536000, immutable',\n          });\n          res.send(bundledFile.content);\n        } catch (e: any) {\n          console.error('[server] Error serving bundled file:', e);\n          res.status(500).end('Internal server error');\n        }\n      },\n    );\n  }\n\n  // Action routes — JSON body parsing scoped to action endpoints only\n  app.use('/_l5e/action', express.json({ limit: '100kb' }));\n\n  // Validate action key format: actionName_hexHash\n  const ACTION_KEY_RE = /^[a-zA-Z]\\w+_[0-9a-f]{1,4}$/;\n\n  // Load action registry and viewActions glob from virtual module (dev) or built bundle (prod)\n  let prodActionRegistry: Record<string, { modulePath: string; actionName: string }> | null = null;\n  let prodViewActions: Record<string, () => Promise<any>> | null = null;\n\n  async function getActionRegistry(): Promise<\n    Record<string, { modulePath: string; actionName: string }>\n  > {\n    if (!isProduction) {\n      const mod = await vite!.ssrLoadModule('virtual:l5e-actions');\n      return mod.actionRegistry || {};\n    }\n    if (!prodActionRegistry) {\n      const registryPath = path.join(root, './dist/server/action-registry.json');\n      const json = await fs.readFile(registryPath, 'utf-8');\n      prodActionRegistry = JSON.parse(json);\n    }\n    return prodActionRegistry!;\n  }\n\n  async function getViewActions(): Promise<Record<string, () => Promise<any>>> {\n    if (!isProduction) {\n      const mod = await vite!.ssrLoadModule('virtual:l5e-actions');\n      return mod.viewActions || {};\n    }\n    if (!prodViewActions) {\n      const entryServerPath = path.join(root, './dist/server/entry-server.js');\n      const mod = await import(pathToFileURL(entryServerPath).href);\n      prodViewActions = mod.viewActions || {};\n    }\n    return prodViewActions!;\n  }\n\n  // Action route handler — hashed action keys\n  // URL: /_l5e/action/:actionKey  (e.g., /_l5e/action/loadMoreComments_a1b2)\n  app.all('/_l5e/action/:actionKey', async (req: ExpressRequest, res: ExpressResponse) => {\n    try {\n      const { actionKey } = req.params;\n\n      // Validate action key format\n      if (!ACTION_KEY_RE.test(actionKey)) {\n        return res.status(400).send('Invalid action key');\n      }\n\n      // Look up action in registry\n      const registry = await getActionRegistry();\n      const entry = registry[actionKey];\n      if (!entry) {\n        return res.status(404).send('Action not found');\n      }\n\n      const { modulePath, actionName } = entry;\n\n      // Import action module via viewActions glob (works in both dev and prod)\n      let actionModule: any;\n      if (!isProduction) {\n        try {\n          actionModule = await vite!.ssrLoadModule(`/src/${modulePath}/actions.tsx`);\n        } catch {\n          actionModule = await vite!.ssrLoadModule(`/src/${modulePath}/actions.ts`);\n        }\n      } else {\n        const viewActions = await getViewActions();\n        // Find matching glob entry by modulePath\n        const globKey = viewActions[`/src/${modulePath}/actions.tsx`]\n          ? `/src/${modulePath}/actions.tsx`\n          : viewActions[`/src/${modulePath}/actions.ts`]\n            ? `/src/${modulePath}/actions.ts`\n            : null;\n        if (!globKey) {\n          return res.status(404).send('Action module not found');\n        }\n        actionModule = await viewActions[globKey]();\n      }\n\n      // Look up exported action — use hasOwnProperty to avoid prototype pollution\n      if (!Object.prototype.hasOwnProperty.call(actionModule, actionName)) {\n        return res.status(404).send('Action not found');\n      }\n      const action = actionModule[actionName];\n      if (!action || !action.handler) {\n        return res.status(404).send('Action not found');\n      }\n\n      // Enforce the action's declared HTTP method. Previously `app.all` accepted\n      // any method and `action.method` was ignored, so a state-changing POST\n      // action could be triggered via GET (e.g. <img src>) — a CSRF vector.\n      const allowedMethod = (action.method || 'GET').toUpperCase();\n      if (req.method.toUpperCase() !== allowedMethod) {\n        return res.status(405).set('Allow', allowedMethod).send('Method Not Allowed');\n      }\n\n      // Run the request through the middleware chain first — same as the HTML\n      // handler — so `locals` (locale, country, preview flags, ...) is\n      // populated for actions too. Previously this endpoint built its own\n      // bare `requestInfo` and never invoked middleware at all, so `locals`\n      // (and thus `getLocale()`) was always empty inside an action handler.\n      //\n      // Crucially, the action must run *inside* the `next` callback passed to\n      // the middleware — not after `await`ing the middleware call — because a\n      // middleware like `fromFetchMiddleware(paraglideMiddleware)` calls\n      // `next()` synchronously inside a library-owned `AsyncLocalStorage.run()`\n      // scope. Running the action afterward, once that scope has already\n      // closed, would silently lose the library's own ambient `getLocale()`.\n      const entryServerPath = path.join(root, './dist/server/entry-server.js');\n      const entryServerModule: EntryServerModule = isProduction\n        ? await import(pathToFileURL(entryServerPath).href)\n        : await vite!.ssrLoadModule('@withl5e/l5e/entry-server');\n      const { runInRenderContext } = await (isProduction\n        ? import(pathToFileURL(entryServerPath).href)\n        : vite!.ssrLoadModule('@withl5e/l5e/jsx-runtime'));\n      const { renderJsxToHtmlString } = await (isProduction\n        ? import(pathToFileURL(entryServerPath).href)\n        : vite!.ssrLoadModule('@withl5e/l5e'));\n\n      const locals: Record<string, unknown> = {};\n      const initialRequest = createWebRequestFromExpress(req);\n      const middlewareContext = createContext({\n        request: initialRequest,\n        locals,\n        clientAddress: requestIp.getClientIp(req) ?? undefined,\n      });\n\n      const loadedMiddleware = await entryServerModule.loadMiddleware?.();\n      const middlewareHandler: MiddlewareHandler =\n        typeof loadedMiddleware === 'function'\n          ? loadedMiddleware\n          : (_ctx, dummyNext) => dummyNext();\n\n      // If middleware short-circuits (returns its own Response — a redirect, a\n      // 403, ...) instead of calling `next`, this callback never runs and that\n      // response wins, same as it would for a page request.\n      const response = await middlewareHandler(middlewareContext, async (payload) => {\n        const nextRequest = createRewriteRequest(\n          payload,\n          middlewareContext.request,\n          middlewareContext.url,\n        );\n        const requestInfo = {\n          ...createRequestInfo(req, nextRequest, base, locals),\n          path: req.originalUrl,\n          body: req.body,\n        };\n\n        const html = await runInRenderContext(\n          async () => {\n            const jsx = await action.handler(requestInfo);\n            return renderJsxToHtmlString(jsx);\n          },\n          requestInfo,\n          modulePath,\n        );\n\n        return new Response(html, { headers: { 'Content-Type': 'text/html' } });\n      });\n\n      await sendWebResponse(req, res, response);\n    } catch (e: any) {\n      vite?.ssrFixStacktrace?.(e);\n      console.error('[l5e] Action error:', e.stack || e);\n      res.status(500).send('Internal server error');\n    }\n  });\n\n  // Serve HTML\n  app.use(async (req: ExpressRequest, res: ExpressResponse) => {\n    try {\n      const url = req.originalUrl.replace(base, '');\n\n      let template: string;\n      let render: (\n        url: string,\n        requestInfo?: any,\n        options?: { externalizeIslandProps?: boolean },\n      ) => Promise<any>;\n      let loadMiddleware: EntryServerModule['loadMiddleware'];\n      let manifest: Record<string, any> | undefined;\n\n      if (!isProduction) {\n        // Always read fresh template in development\n        template = await fs.readFile(path.join(root, './index.html'), 'utf-8');\n        template = await vite!.transformIndexHtml(url, template);\n\n        // Inject Vite HMR client for hot reload\n        if (!template.includes('@vite/client')) {\n          template = template.replace(\n            '</head>',\n            '<script type=\"module\" src=\"/@vite/client\"></script></head>',\n          );\n        }\n\n        const entryServer = (await vite!.ssrLoadModule(\n          '@withl5e/l5e/entry-server',\n        )) as EntryServerModule;\n        render = entryServer.render;\n        loadMiddleware = entryServer.loadMiddleware;\n      } else {\n        template = templateHtml;\n        const entryServerPath = path.join(root, './dist/server/entry-server.js');\n        const entryServer = (await import(\n          pathToFileURL(entryServerPath).href\n        )) as EntryServerModule;\n        render = entryServer.render;\n        loadMiddleware = entryServer.loadMiddleware;\n        manifest = productionManifest;\n      }\n\n      const loadedMiddleware = await loadMiddleware?.();\n      const handler: MiddlewareHandler =\n        typeof loadedMiddleware === 'function' ? loadedMiddleware : (_ctx, next) => next();\n\n      const locals: Record<string, unknown> = {};\n      const initialRequest = createWebRequestFromExpress(req);\n      const context = createContext({\n        request: initialRequest,\n        requestInfo: createRequestInfo(req, initialRequest, base, locals),\n        locals,\n        clientAddress: requestIp.getClientIp(req),\n      });\n\n      const renderResponse = async (webRequest: globalThis.Request) => {\n        const nextRequestInfo = createRequestInfo(req, webRequest, base, locals);\n        const nextUrl = getRenderUrl(nextRequestInfo.url!, base);\n        const nextRendered = await render(nextUrl, nextRequestInfo, {\n          externalizeIslandProps,\n        });\n        return createPageResponse({\n          rendered: nextRendered,\n          template,\n          manifest,\n          root,\n          distClientDir,\n          isProduction,\n          assetBase: isProduction ? base : vite!.config.base,\n          scriptPolicy,\n        });\n      };\n\n      const next = async (payload?: RewritePayload) => {\n        const nextRequest = createRewriteRequest(payload, context.request, context.url);\n        context.request = nextRequest;\n        context.url = new URL(nextRequest.url);\n        context.cookies = parseCookies(nextRequest.headers.get('cookie') ?? undefined);\n        context.requestInfo = createRequestInfo(req, nextRequest, base, locals);\n        return renderResponse(nextRequest);\n      };\n\n      context.rewrite = (payload: RewritePayload) => next(payload);\n\n      const response = await handler(context, next);\n      await sendWebResponse(req, res, response);\n    } catch (e: any) {\n      vite?.ssrFixStacktrace?.(e);\n      console.error(e.stack);\n      // Never leak stack traces to the client in production (info disclosure).\n      res.status(500).end(isProduction ? 'Internal Server Error' : e.stack);\n    }\n  });\n\n  return { app, vite };\n}\n\nexport async function startServer(options: ServerOptions = {}): Promise<void> {\n  const port = options.port || 5173;\n\n  // Create Express app first\n  // @ts-ignore\n  const express = (await import('express')).default;\n  const app = express();\n\n  // Call callback if provided to allow custom routes before setting up L5E server\n  if (options.setupApp) {\n    console.log('setupApp');\n    await options.setupApp(app);\n  }\n\n  const { app: serverApp } = await createServer({ ...options, app });\n\n  serverApp.listen(port, () => {\n    console.log(`Server started at http://localhost:${port}`);\n  });\n}\n\nconst MAX_TAGS = 1000;\n\nexport function hashTag(tag: string): string {\n  // global tag is not hashed, better for ci/cd\n  if (tag === 'global') {\n    return 'global';\n  }\n\n  let hash = 0;\n  for (let i = 0; i < tag.length; i++) {\n    const char = tag.charCodeAt(i);\n    hash = (hash << 5) - hash + char;\n    hash = hash & hash; // Convert to 32bit integer\n  }\n  return Math.abs(hash).toString(36).substring(0, 8);\n}\n\nexport function optimizeCacheTags(tags: Set<string> | string[]): string[] {\n  const _tags = Array.isArray(tags) ? tags : [...tags];\n  const result = _tags.slice(0, MAX_TAGS).map(hashTag);\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;mCASI,IAAmE;AAQvE,SAAS,IAAmD;CAY1D,OAXA,AACE,OAAyB,YAAY;EAEnC,IAAM,IADU,EAAc,YAAY,GACb,CAAC,CAAC,QAAQ,qBAAqB,GAEtD,IADmB,EAAc,CACH,CAAC,CAAC,QAAQ,UAAU;EACxD,OAAQ,MAAM;;GACO,EAAc,CAAY,CAAC,CAAC;;CAEnD,EAAA,CAAG,GAEE;AACT;AAeA,IAAM,IAA6B;CAAE,MAAM;CAAI,UAAU;CAAI,SAAS;AAAG,GAGnE,oBAAkB,IAAI,IAAyB,GAO/C,oBAAiB,IAAI,IAAmC;AAK9D,SAAS,EAAO,GAAkB,GAA0D;CAC1F,IAAM,IAAU,EAAe,IAAI,CAAQ;CAC3C,IAAI,GACF,OAAO;CAGT,IAAM,IAAU,EAAK,CAAC,CAAC,OAAO,MAAU;EAEtC,MADA,EAAe,OAAO,CAAQ,GACxB;CACR,CAAC;CAED,OADA,EAAe,IAAI,GAAU,CAAO,GAC7B;AACT;AAKA,SAAS,EAAa,GAAyB;CAC7C,OAAO,EAAW,QAAQ,CAAC,CAAC,OAAO,CAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,GAAG,EAAE;AAC3E;AAGA,IAAM,IAAmB;AAQzB,SAAS,EAAmB,GAA8B;CACxD,OAAO;EACL,MAAM;EACN,UAAU,GAAQ;GAChB,OAAO,MAAW,IAAmB,IAAmB;EAC1D;EACA,KAAK,GAAI;GACP,OAAO,MAAO,IAAmB,IAAe;EAClD;CACF;AACF;AAGA,SAAS,EAA0B,GAAoC;CACrE,OAAO;EACL,MAAM;EACN,UAAU,GAAQ,GAAU;GAC1B,IAAI,CAAC,KAAY,MAAW,GAAkB,OAAO;GACrD,IAAM,IAAO,EAAK,WAAW,CAAM,IAC/B,EAAK,UAAU,CAAM,IACrB,EAAO,WAAW,GAAG,IACnB,EAAK,QAAQ,EAAK,QAAQ,CAAQ,GAAG,CAAM,IAC3C;GAKN,OAJI,CAAC,KAGD,MAAa,KAAoB,CAAC,EAAO,YAAY,CAAI,IAAU,OAChE;IAAE,IAAI,EAAO,SAAS,CAAI;IAAG,UAAU;GAAW;EAC3D;CACF;AACF;AAEA,eAAe,EACb,GACA,GACuB;CAQvB,IAAM,IAAgC;EACpC,OAAO;EACP,SAAS,CAAC,EATS,EAClB,KAAK,MAAM;GACV,IAAM,IAAW,EAAO,cAAc,CAAC;GACvC,OAAO,UAAU,KAAK,UAAU,CAAQ,EAAE;EAC5C,CAAC,CAAC,CACD,KAAK,IAIuB,CAAY,GAAG,EAA0B,CAAM,CAAC;EAC7E,UAAU;EACV,UAAU;EAKV,WAAW,EAAE,yBAAyB,GAAK;EAC3C,WAAW,MAEL,CAAC,EAAG,WAAW,GAAG,KAAK,CAAC,EAAK,WAAW,CAAE,KAAK,MAAO;CAO9D,GAEM,IAA+B;EACnC,QAAQ;EACR,eAAe;EACf,QAAQ;EACR,gBAAgB;EAChB,gBAAgB;CAClB,GAEM,EAAE,gBAAa,MAAM,EAAa,GAClC,IAAS,MAAM,EAAS,CAAe,GACzC;CACJ,IAAI;EACF,CAAC,cAAa,MAAM,EAAO,SAAS,CAAa;CACnD,UAAU;EACR,MAAM,EAAO,MAAM;CACrB;CAEA,KAAK,IAAM,KAAS,GACd,EAAM,SAAS,WAGnB,EAAgB,IAAI,EAAM,UAAU;EAClC,SAAS,EAAM,QAAQ;EACvB,MAAM,EAAa,EAAM,QAAQ,EAAE;EACnC,UAAU,EAAM;EAChB,UAAU;CACZ,CAAC;CAGH,IAAM,IAAa,EAAO,MACvB,MACC,EAAK,SAAS,WAAW,EAAK,WAAW,EAAK,mBAAmB,CACrE;CACA,IAAI,CAAC,GACH,MAAU,MAAM,4CAA4C;CAG9D,OAAO;EACL,MAAM,EAAa,EAAW,QAAQ,EAAE;EACxC,UAAU,EAAW;EACrB,SAAS,EAAW,QAAQ;CAC9B;AACF;AAMA,eAAsB,EACpB,GACA,GACA,GACuB;CACvB,IAAI,EAAY,WAAW,GACzB,OAAO;CAGT,IAAI,CAAC,KAAU,EAAO,cAAc,EAAK,QAAQ,CAAa,GAE5D,OADA,QAAQ,KAAK,wEAAwE,GAC9E;CAGT,IAAM,IAAc,CAAC,GAAG,IAAI,IAAI,CAAW,CAAC,CAAC,CAAC,KAAK,GAC7C,IAAW,WAAW,EAAO,SAAS,GAAG,KAAK,UAAU,CAAW;CAEzE,IAAI;EACF,OAAO,MAAM,EAAO,SAAgB,EAAgB,GAAa,CAAM,CAAC;CAC1E,SAAS,GAAO;EAEd,OADA,QAAQ,MAAM,qCAAqC,CAAK,GACjD;CACT;AACF;AAEA,eAAe,EAAa,GAAuB,GAA8C;CAC/F,IAAM,IAAwB,CAAC;CAE/B,KAAK,IAAM,KAAW,GAAa;EAEjC,IAAM,IAAW,EAAQ,WAAW,GAAG,IACnC,EAAK,KAAK,GAAe,EAAQ,UAAU,CAAC,CAAC,IAC7C,EAAK,KAAK,GAAe,CAAO;EAEpC,IAAI;GACF,IAAM,IAAU,MAAM,EAAG,SAAS,GAAU,OAAO;GACnD,EAAY,KAAK,MAAM,EAAQ,OAAO,EAAQ,GAAG;EACnD,SAAS,GAAK;GACZ,QAAQ,KAAK,sCAAsC,KAAW,CAAG;EACnE;CACF;CAEA,IAAM,IAAiB,EAAY,KAAK,MAAM,GACxC,IAAO,EAAa,CAAc,GAClC,IAAW,UAAU,EAAK;CAShC,OAPA,EAAgB,IAAI,GAAU;EAC5B,SAAS;EACT;EACA;EACA,UAAU;CACZ,CAAC,GAEM;EAAE;EAAM;EAAU,SAAS;CAAe;AACnD;AAMA,eAAsB,EAAU,GAAoB,GAA8C;CAChG,IAAI,EAAS,WAAW,GACtB,OAAO;CAGT,IAAM,IAAc,CAAC,GAAG,IAAI,IAAI,CAAQ,CAAC,CAAC,CAAC,KAAK,GAC1C,IAAW,OAAO,KAAK,UAAU,CAAC,EAAK,QAAQ,CAAa,GAAG,CAAW,CAAC;CAEjF,IAAI;EACF,OAAO,MAAM,EAAO,SAAgB,EAAa,GAAa,CAAa,CAAC;CAC9E,SAAS,GAAO;EAEd,OADA,QAAQ,MAAM,iCAAiC,CAAK,GAC7C;CACT;AACF;AAKA,SAAgB,EAAe,GAA2C;CACxE,OAAO,EAAgB,IAAI,CAAQ;AACrC;;;ACpRA,SAAgB,EAAyB,GAAoB,GAAuB,IAAO,KAAK;CAC9F,IAAM,IAAY,EAAK,QAAQ,CAAa,GAGtC,IAAiB,EAAa,CAAS,GACvC,oBAAQ,IAAI,IAAY,GACxB,oBAAY,IAAI,IAAY,GAC5B,IAAY,OAAO,QAAQ,CAAQ,CAAC,CAAC,QAAQ,GAAG,OAAW,aAAa,KAAK,EAAM,IAAI,CAAC;CAE9F,SAAS,EAAa,GAAc;EAClC,IAAM,IAAW,EAAK,QAAQ,GAAgB,CAAI,GAC5C,IAAW,EAAK,SAAS,GAAgB,CAAQ;EACvD,IACE,CAAC,KACD,MAAa,QACb,EAAS,WAAW,KAAK,EAAK,KAAK,KACnC,EAAK,WAAW,CAAQ,GAExB,MAAU,MAAM,iDAAiD,GAAM;EAEzE,OAAO;CACT;CAEA,KAAK,IAAM,CAAC,GAAK,MAAU,GAAW;EACpC,IAAM,IAAO,EAAa,EAAM,IAAI;EAEpC,AADA,EAAM,IAAI,CAAI,IAEZ,CAAC,EAAM,WACP,EAAM,kBACN,MAAQ,0BACR,kBAAkB,KAAK,EAAM,OAAO,CAAG,MAEvC,EAAU,IAAI,CAAI;CACtB;CAIA,KAAK,IAAM,GAAG,MAAU,GACtB,KAAK,IAAM,KAAO,CAAC,GAAI,EAAM,WAAW,CAAC,GAAI,GAAI,EAAM,kBAAkB,CAAC,CAAE,GAAG;EAC7E,IAAM,IAAa,EAAS;EAC5B,IAAI,CAAC,KAAc,CAAC,EAAM,IAAI,EAAa,EAAW,IAAI,CAAC,GACzD,MAAU,MAAM,qDAAqD,GAAK;EAE5E,EAAU,IAAI,EAAa,EAAW,IAAI,CAAC;CAC7C;CAOF,OAAO;EACL,UALe,EAAW,QAAQ,CAAC,CAClC,OAAO,KAAK,UAAU;GAAC;GAAW;GAAgB;GAAM;EAAQ,CAAC,CAAC,CAAC,CACnE,OAAO,KAGD;EACP;EACA,cAAc,GAAgB;GAC5B,IAAM,IAAO,EAAa,EAAO,QAAQ,QAAQ,EAAE,CAAC;GACpD,IAAI,CAAC,EAAM,IAAI,CAAI,GAAG,MAAU,MAAM,8CAA8C,GAAQ;GAC5F,OAAO;EACT;EACA,YAAY,GAAc;GACxB,OAAO,EAAU,IAAI,CAAI;EAC3B;EACA,SAAS,GAAc;GACrB,IAAI,CAAC,EAAM,IAAI,CAAI,GAAG,MAAU,MAAM,8CAA8C,GAAM;GAC1F,OAAO,EAAc,GAAM,EAAK,SAAS,GAAgB,CAAI,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC;EACpF;CACF;AACF;;;AChCA,SAAgB,EAAc,GAAkB,GAAsB;CAGpE,IAAM,IAAW,EAAW,CAAI;CAChC,OAAO,EAAS,QAAQ,qBAAqB,GAAO,MAE9C,cAAc,KAAK,CAAK,IAEnB,EAAM,QAAQ,6BAA6B,SAAS,EAAS,EAAE,IAG/D,eAAe,EAAS,GAAG,EAAM,EAE3C;AACH;AAWA,SAAS,EAAc,GAA0B;CAC/C,OAAO,IAAI,IAAI,GAAG,EAAI,SAAS,KAAK,EAAI,IAAI,MAAM,IAAI,EAAI,aAAa;AACzE;AAEA,SAAS,EAAa,GAAgB,GAAsB;CAE1D,OAAO,GADgB,EAAU,WAAW,EAAU,SACnC,QAAQ,GAAM,EAAE,KAAK;AAC1C;AAEA,SAAS,EAA4B,GAAyC;CAC5E,IAAM,IAA0C;EAC9C,QAAQ,EAAI;EACZ,SAAS,EAAgC,CAAG;CAC9C;CAOA,OALI,EAAI,WAAW,SAAS,EAAI,WAAW,WACzC,EAAK,OAAO,GACZ,EAAK,SAAS,SAGT,IAAI,WAAW,QAAQ,EAAc,CAAG,CAAC,CAAC,MAAM,CAAI;AAC7D;AAEA,SAAS,EACP,GACA,GACA,GACA,GACa;CACb,IAAM,IAAY,IAAI,IAAI,EAAW,GAAG,GAClC,IAAY,EAAa,GAAW,CAAI,GACxC,IAAiB,EAAU,WAAW,GAAG,IAAI,IAAY,IAAI,KAC7D,IAAkC,CAAC;CAKzC,OAJA,EAAW,QAAQ,SAAS,GAAO,MAAQ;EACzC,EAAQ,KAAO;CACjB,CAAC,GAEM;EACL,KAAK;EACL,MAAM;EACN,UAAU,EAAU;EACpB,QAAQ,EAAW;EACnB;EACA,SAAS,EAAa,EAAW,QAAQ,IAAI,QAAQ,KAAK,KAAA,CAAS;EACnE,OAAO,OAAO,YAAY,EAAU,aAAa,QAAQ,CAAC;EAC1D,IAAI,EAAU,YAAY,CAAG,KAAK,KAAA;EAClC;CACF;AACF;AAEA,SAAS,EACP,GACA,GACA,GACoB;CAapB,OAZK,IAID,aAAmB,WAAW,UACzB,IAGL,aAAmB,MACd,IAAI,WAAW,QAAQ,EAAQ,MAAM,EAAe,MAAM,CAAC,IAG7D,IAAI,WAAW,QAAQ,IAAI,IAAI,GAAS,CAAU,CAAC,CAAC,MAAM,EAAe,MAAM,CAAC,IAX9E;AAYX;AAEA,eAAe,EACb,GACA,GACA,GACe;CACf,EAAI,OAAO,EAAS,MAAM;CAC1B,IAAM,IAAkB,EAAoB,EAAS,OAAO;CAW5D,IAVA,EAAS,QAAQ,SAAS,GAAO,MAAQ;EACnC,EAAI,YAAY,MAAM,gBAG1B,EAAI,UAAU,GAAK,CAAK;CAC1B,CAAC,GACG,EAAgB,SAAS,KAC3B,EAAI,UAAU,cAAc,CAAe,GAGzC,EAAI,WAAW,QAAQ;EACzB,EAAI,IAAI;EACR;CACF;CAEA,IAAM,IAAO,OAAO,KAAK,MAAM,EAAS,YAAY,CAAC;CACrD,EAAI,KAAK,CAAI;AACf;AAEA,SAAS,EAAoB,GAA4B;CACvD,IAAM,IAAgB,EAAwD;CAC9E,IAAI,OAAO,KAAiB,YAC1B,OAAO,EAAa,KAAK,CAAO;CAGlC,IAAM,IAAO,EAA+D,MAAM;CAClF,IAAI,IAAM,eACR,OAAO,EAAI;CAGb,IAAM,IAAQ,EAAQ,IAAI,YAAY;CACtC,OAAO,IAAQ,EAAqB,CAAK,IAAI,CAAC;AAChD;AAEA,SAAS,EAAqB,GAAyB;CACrD,IAAM,IAAoB,CAAC,GACvB,IAAQ;CAEZ,KAAK,IAAI,IAAI,GAAG,IAAI,EAAM,QAAQ,KAAK;EACrC,IAAI,EAAM,OAAO,KAAK;EAEtB,IAAM,IAAO,EAAM,MAAM,IAAI,CAAC;EAC9B,AAAI,eAAe,KAAK,CAAI,MAC1B,EAAQ,KAAK,EAAM,MAAM,GAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GACzC,IAAQ,IAAI;CAEhB;CAGA,OADA,EAAQ,KAAK,EAAM,MAAM,CAAK,CAAC,CAAC,KAAK,CAAC,GAC/B,EAAQ,OAAO,OAAO;AAC/B;AAEA,SAAS,EAAkB,GAAoD;CAC7E,IAAI,CAAC,EAAS,aACZ,OAAO;CAGT,IAAM,EAAE,SAAM,gBAAa,eAAY,eAAY,EAAS,aACtD,IAAkB,IAAI,QAAQ,CAAO;CAG3C,OAFA,EAAgB,IAAI,gBAAgB,CAAW,GAExC,IAAI,WAAW,SAAS,GAAkB;EAC/C,QAAQ,KAAc;EACtB,SAAS;CACX,CAAC;AACH;AAEA,eAAe,EAAmB,EAChC,aACA,aACA,aACA,SACA,kBACA,iBACA,cACA,mBAU+B;CAC/B,IAAM,IAAc,EAAkB,CAAQ;CAC9C,IAAI,GACF,OAAO;CAGT,IAAI,EAAS,UACX,OAAO,IAAI,WAAW,SAAS,MAAM;EACnC,QAAQ,EAAS,SAAS;EAC1B,SAAS,EACP,UAAU,EAAS,SAAS,IAC9B;CACF,CAAC;CAGH,IAAI,IAA0B,EAAS,WAAW,CAAC,GAC/C,IAAuB,EAAS,UAAU,CAAC,GACzC,IAAgB,EAAS,WAAW,CAAC,GACvC,IAAsB,EAAS,aAAa,CAAC,GAC3C,IAA6B,EAAS,QACtC,IAA8B,EAAS,SACvC,IAA0B,EAAS,KAErC,IAAY,IACV,oBAAgB,IAAI,IAAY,GAChC,KAAoB,GAAc,IAAc,OAAU;EAC1D,EAAc,IAAI,CAAI,MAC1B,EAAc,IAAI,CAAI,GACtB,KAAa,yBAAyB,IAAc,iBAAiB,GAAG,SAAS,EAAW,CAAI,EAAE;CACpG,GACI,IAA0B,CAAC,GAC3B,IAAuB,IAErB,IAAkB,EAAuB;EAC7C;EACA;EACA;EACA,MAAM;CACR,CAAC;CACD,AAAI,KAAiB,EAAiB,GAAiB,CAAY;CAMnE,IAAI,IAAmB;CAQvB,IAPI,EAAS,cAAc,EAAS,WAAW,SAAS,MACtD,IAAmB,oDAAA,GAAmDA,EAAAA,QAAAA,CACpE,EAAS,YACT,EAAE,QAAQ,GAAK,CACjB,EAAE,cAGA,KAAgB,GAAU;EAI5B,AAHA,IAAgB,EAAc,QAC3B,MAAQ,EAAI,QAAQ,OAAO,EAAE,MAAM,sBACtC,GACA,IAAa,EAAW,QAAQ,MAAQ,CAAC,EAAI,SAAS,UAAU,CAAC;EAEjE,IAAM,oBAAW,IAAI,IAAY,GAC3B,oBAAe,IAAI,IAAY;EAErC,SAAS,EAAiB,GAA2C;GACnE,IAAM,IAAQ,EAAU;GAqBxB,OApBK,KAED,EAAM,OAAK,EAAM,IAAI,SAAS,MAAgB,EAAS,IAAI,CAAG,CAAC,GAC/D,EAAM,WACR,EAAM,QAAQ,SAAS,MAAsB;IAC3C,IAAM,IAAgB,EAAU;IAKhC,AAJI,GAAe,QAAM,EAAa,IAAI,EAAc,IAAI,GACxD,GAAe,OACjB,EAAc,IAAI,SAAS,MAAgB,EAAS,IAAI,CAAG,CAAC,GAE1D,GAAe,WACjB,EAAc,QAAQ,SAAS,MAAgB;KAC7C,IAAM,IAAQ,EAAU;KAExB,AADI,GAAO,QAAM,EAAa,IAAI,EAAM,IAAI,GACxC,GAAO,OAAK,EAAM,IAAI,SAAS,MAAgB,EAAS,IAAI,CAAG,CAAC;IACtE,CAAC;GAEL,CAAC,GAGI,EAAE,MAAM,EAAM,KAAK,KApBP,EAAE,MAAM,KAAK;EAqBlC;EAEA,IAAM,IAA0B,CAAC;EACjC,KAAK,IAAM,KAAO,GAAe;GAE/B,IAAM,EAAE,YAAS,EADA,EAAI,QAAQ,OAAO,EACK,CAAC;GAC1C,AAAI,KAAM,EAAc,KAAK,IAAI,GAAM;EACzC;EAEA,IAAM,IAA2B,CAAC;EAClC,KAAK,IAAM,KAAO,GAAY;GAE5B,IAAM,EAAE,YAAS,EADA,EAAI,QAAQ,OAAO,EACK,CAAC;GAC1C,AAAI,MACF,EAAe,KAAK,IAAI,GAAM,GAC9B,EAAS,IAAI,CAAI;EAErB;EAEA,IAAI,EAAc,SAAS,GAAG;GAC5B,IAAM,IAAgB,MAAM,EAAc,GAAe,GAAe,CAAY;GACpF,IAAgB,EAAc,WAC1B,CAAC,EAAc,GAAW,EAAc,QAAQ,CAAC,IACjD,EAAc,KAAK,MAAS,EAAc,GAAW,CAAI,CAAC;EAChE;EAEA,IAAI,EAAe,SAAS,GAAG;GAC7B,IAAM,IAAa,MAAM,EAAU,GAAgB,CAAa;GAChE,AAAI,EAAW,aACb,IAAa,CAAC,EAAc,GAAW,EAAW,QAAQ,CAAC;EAE/D;EAEA,IAAM,IAAc,EAAS;EAY7B,IAXI,MACE,EAAY,OAAO,EAAY,IAAI,SAAS,KAC9C,EAAY,IAAI,SAAS,MAAoB;GAC3C,EAAiB,EAAc,GAAW,CAAO,GAAG,EAAI;EAC1D,CAAC,GAEC,EAAY,QACd,EAAc,KAAK,EAAc,GAAW,EAAY,IAAI,CAAC,IAI7D,EAAc,SAAS,GAAG;GAC5B,IAAM,IAAoC,CAAC;GAC3C,KAAK,IAAM,KAAU,GAAe;IAClC,IAAM,IAAQ,EAAS,EAAO;IAC9B,AAAI,GAAO,SACT,EAAU,EAAO,OAAO,EAAc,GAAW,EAAM,IAAI;GAE/D;GACA,AAAI,OAAO,KAAK,CAAS,CAAC,CAAC,SAAS,MAClC,IAAuB,mCAAA,GAAkCA,EAAAA,QAAAA,CAAU,CAAS,EAAE;EAElF;EAEA,AAAI,EAAW,SAAS,KACtB,EAAW,SAAS,MAAS,EAAiB,GAAM,EAAI,CAAC;CAE7D;CAEA,AAAK,KAEH,CAAC,GAAG,IAAI,IAAI,CAAU,CAAC,CAAC,CAAC,SAAS,MAAQ,EAAiB,CAAG,CAAC;CAGjE,IAAI,IAAa,CAAC,GAAG,GAAe,GAAG,CAAa;CAEpD,IAAI,CAAC,GAAc;EACjB,IAAM,IAAe,EAAK,KAAK,GAAM,OAAO,kBAAkB;EAS9D,IARI,EAAW,CAAY,MACzB,IAAa,CAAC,yBAAyB,GAAG,CAAU,IAKtD,IAAa,CAAC,GAAG,IAAI,IAAI,CAAU,CAAC,GAEhC,EAAc,SAAS,GAAG;GAC5B,IAAM,IAAoC,CAAC;GAC3C,KAAK,IAAM,KAAU,GACnB,EAAU,EAAO,OAAO,IAAI,EAAO;GAErC,IAAuB,mCAAA,GAAkCA,EAAAA,QAAAA,CAAU,CAAS,EAAE;EAChF;CACF;CAEA,IAAM,IACJ,IACA,IACA,EAAW,KAAK,MAAQ,8BAA8B,EAAI,aAAY,CAAC,CAAC,KAAK,EAAE,GAE3E,IAAmB,EAAS,OAAO,EAAc,GAAU,EAAS,IAAI,IAAI,GAK5E,IAAO,EAAS,UAClB,EAAS,QAAQ,KACjB,EACG,QAAQ,0BAA0B,EAAS,QAAQ,MAAM,CAAS,CAAC,CACnE,QAAQ,yBAAyB,EAAS,QAAQ,EAAE,CAAC,CACrD,QAAQ,4BAA4B,CAAW,GAEhD,IAAU,IAAI,QAAQ,EAC1B,gBAAgB,YAClB,CAAC,GAEK,IAA8B,CAAC,GAC/B,IAAiC,CAAC;CA8BxC,OA7BI,MAAW,KAAA,MACb,EAAkB,KAAK,WAAW,GAAQ,GAC1C,EAAqB,KAAK,WAAW,GAAQ,IAG3C,MAAY,KAAA,KACd,EAAqB,KAAK,YAAY,GAAS,GAI7C,MAAQ,KAAA,KACV,EAAqB,KAAK,0BAA0B,GAAK,IAGtD,EAAkB,SAAS,KAAK,EAAqB,SAAS,MAAM,MACvE,EAAkB,KAAK,QAAQ,GAC/B,EAAkB,KAAK,iBAAiB,GAExC,EAAqB,KAAK,QAAQ,GAElC,EAAQ,IAAI,iBAAiB,EAAkB,KAAK,IAAI,CAAC,GACzD,EAAQ,IAAI,qBAAqB,EAAqB,KAAK,IAAI,CAAC,IAGlE,QAAA,IAAA,aAA6B,iBAC3B,IAAY,EAAkB,CAAS,IAEzC,EAAQ,IAAI,aAAa,CAAC,UAAU,GAAG,CAAS,CAAC,CAAC,KAAK,GAAG,CAAC,GAEpD,IAAI,WAAW,SAAS,GAAM;EACnC,QAAQ,EAAS,cAAc;EAC/B;CACF,CAAC;AACH;AAEA,eAAsB,EAAa,IAAyB,CAAC,GAA2B;CACtF,IAAM,IAAO,EAAQ,QAAQ,QAAQ,IAAI,GACnC,IAAO,EAAQ,QAAQ,KACvB,IAAA,QAAA,IAAA,aAAwC,cACxC,IAAyB,EAAQ,0BAA0B,IAG3D,IAAe,IACjB,MAAM,EAAG,SAAS,EAAK,KAAK,GAAM,cAAc,GAAG,OAAO,IAC1D,IAIE,KAAW,MAAM,OAAO,WAAA,CAAY,SACpC,IAAM,EAAQ,OAAO,EAAQ;CAGnC,IAAI,EAAQ,WAAW;EACrB,IAAM,IAAa,EAAK,WAAW,EAAQ,SAAS,IAChD,EAAQ,YACR,EAAK,KAAK,GAAM,EAAQ,SAAS;EAErC,AAAI,EAAW,CAAU,KACvB,EAAI,IAAI,EAAQ,OAAO,CAAU,CAAC;CAEtC;CAGA,IAAI,GACE,IAAgB,EAAK,KAAK,GAAM,eAAe,GAG/C,IAA2C,IAC7C,KAAK,MAAM,MAAM,EAAG,SAAS,EAAK,KAAK,GAAe,qBAAqB,GAAG,OAAO,CAAC,IACtF,KAAA,GACA;CACJ,IAAI,GACF,IAAI;EACF,IAAe,EAAyB,GAAoB,GAAe,CAAI;CACjF,SAAS,GAAO;EACd,QAAQ,KAAK,sEAAsE,CAAK;CAC1F;CAGF,IAAK,GAsBE;EAEL,IAAM,KAAe,MAAM,OAAO,eAAA,CAAgB,SAE5C,KAAQ,MAAM,OAAO,QAAA,CAAS;EAMpC,AALA,EAAI,IAAI,EAAY,CAAC,GACrB,EAAI,IAAI,GAAM,EAAK,GAAe,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,GAIrD,EAAI,IACF,EAAc,GAAM,mBAAmB,GACvC,OAAO,GAAqB,MAAyB;GACnD,IAAI;IACF,IAAM,EAAE,SAAM,WAAQ,EAAI,QAEpB,IAAc,EAAe,UADR,EAAK,GAAG,GACQ;IAE3C,IAAI,CAAC,GACH,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,wBAAwB;IAOtD,AAJA,EAAI,IAAI;KACN,gBAAgB,EAAY;KAC5B,iBAAiB;IACnB,CAAC,GACD,EAAI,KAAK,EAAY,OAAO;GAC9B,SAAS,GAAQ;IAEf,AADA,QAAQ,MAAM,wCAAwC,CAAC,GACvD,EAAI,OAAO,GAAG,CAAC,CAAC,IAAI,uBAAuB;GAC7C;EACF,CACF;CACF,OAvDmB;EACjB,IAAM,EAAE,oBAAiB,MAAM,OAAO;EAoBtC,AAlBA,IAAO,MAAM,EAAa;GACxB;GACA,YAHiB,EAAK,KAAK,GAAM,gBAGxB;GACT,QAAQ,EAAE,gBAAgB,GAAK;GAC/B,SAAS;GACT;GACA,cAAc,EACZ,SAAS,CAAC,gBAAgB,WAAW,EACvC;GACA,KAAK,EACH,SAAS,EACP,YAAY,CAAC,eAAe,SAAS,EACvC,EACF;GACA,SAAS,EACP,YAAY,CAAC,eAAe,SAAS,EACvC;EACF,CAAC,GACD,EAAI,IAAI,EAAK,WAAW;CAC1B;CAoCA,EAAI,IAAI,gBAAgB,EAAQ,KAAK,EAAE,OAAO,QAAQ,CAAC,CAAC;CAGxD,IAAM,IAAgB,+BAGlB,IAAwF,MACxF,IAA6D;CAEjE,eAAe,IAEb;EACA,IAAI,CAAC,GAEH,QAAO,MADW,EAAM,cAAc,qBAAqB,EAAA,CAChD,kBAAkB,CAAC;EAEhC,IAAI,CAAC,GAAoB;GACvB,IAAM,IAAe,EAAK,KAAK,GAAM,oCAAoC,GACnE,IAAO,MAAM,EAAG,SAAS,GAAc,OAAO;GACpD,IAAqB,KAAK,MAAM,CAAI;EACtC;EACA,OAAO;CACT;CAEA,eAAe,IAA8D;EAC3E,IAAI,CAAC,GAEH,QAAO,MADW,EAAM,cAAc,qBAAqB,EAAA,CAChD,eAAe,CAAC;EAE7B,IAAI,CAAC,GAAiB;GACpB,IAAM,IAAkB,EAAK,KAAK,GAAM,+BAA+B;GAEvE,KAAkB,MADA,OAAO,EAAc,CAAe,CAAC,CAAC,MAAA,CAClC,eAAe,CAAC;EACxC;EACA,OAAO;CACT;CAoOA,OAhOA,EAAI,IAAI,2BAA2B,OAAO,GAAqB,MAAyB;EACtF,IAAI;GACF,IAAM,EAAE,iBAAc,EAAI;GAG1B,IAAI,CAAC,EAAc,KAAK,CAAS,GAC/B,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,oBAAoB;GAKlD,IAAM,KAAQ,MADS,EAAkB,EAAA,CAClB;GACvB,IAAI,CAAC,GACH,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,kBAAkB;GAGhD,IAAM,EAAE,eAAY,kBAAe,GAG/B;GACJ,IAAK,GAME;IACL,IAAM,IAAc,MAAM,EAAe,GAEnC,IAAU,EAAY,QAAQ,EAAW,iBAC3C,QAAQ,EAAW,gBACnB,EAAY,QAAQ,EAAW,gBAC7B,QAAQ,EAAW,eACnB;IACN,IAAI,CAAC,GACH,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,yBAAyB;IAEvD,IAAe,MAAM,EAAY,EAAQ,CAAC;GAC5C,OAjBE,IAAI;IACF,IAAe,MAAM,EAAM,cAAc,QAAQ,EAAW,aAAa;GAC3E,QAAQ;IACN,IAAe,MAAM,EAAM,cAAc,QAAQ,EAAW,YAAY;GAC1E;GAgBF,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,GAAc,CAAU,GAChE,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,kBAAkB;GAEhD,IAAM,IAAS,EAAa;GAC5B,IAAI,CAAC,KAAU,CAAC,EAAO,SACrB,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,kBAAkB;GAMhD,IAAM,KAAiB,EAAO,UAAU,MAAA,CAAO,YAAY;GAC3D,IAAI,EAAI,OAAO,YAAY,MAAM,GAC/B,OAAO,EAAI,OAAO,GAAG,CAAC,CAAC,IAAI,SAAS,CAAa,CAAC,CAAC,KAAK,oBAAoB;GAe9E,IAAM,IAAkB,EAAK,KAAK,GAAM,+BAA+B,GACjE,IAAuC,IACzC,MAAM,OAAO,EAAc,CAAe,CAAC,CAAC,QAC5C,MAAM,EAAM,cAAc,2BAA2B,GACnD,EAAE,0BAAuB,OAAO,IAClC,OAAO,EAAc,CAAe,CAAC,CAAC,QACtC,EAAM,cAAc,0BAA0B,IAC5C,EAAE,6BAA0B,OAAO,IACrC,OAAO,EAAc,CAAe,CAAC,CAAC,QACtC,EAAM,cAAc,cAAc,IAEhC,IAAkC,CAAC,GACnC,IAAiB,EAA4B,CAAG,GAChD,IAAoB,EAAc;IACtC,SAAS;IACT;IACA,eAAe,EAAU,YAAY,CAAG,KAAK,KAAA;GAC/C,CAAC,GAEK,IAAmB,MAAM,EAAkB,iBAAiB;GAiClE,MAAM,EAAgB,GAAK,GAAK,OA/B9B,OAAO,KAAqB,aACxB,KACC,GAAM,MAAc,EAAU,EAAA,CAKI,GAAmB,OAAO,MAAY;IAM7E,IAAM,IAAc;KAClB,GAAG,EAAkB,GANH,EAClB,GACA,EAAkB,SAClB,EAAkB,GAGkB,GAAG,GAAM,CAAM;KACnD,MAAM,EAAI;KACV,MAAM,EAAI;IACZ,GAEM,IAAO,MAAM,EACjB,YAAY;KACV,IAAM,IAAM,MAAM,EAAO,QAAQ,CAAW;KAC5C,OAAO,EAAsB,CAAG;IAClC,GACA,GACA,CACF;IAEA,OAAO,IAAI,SAAS,GAAM,EAAE,SAAS,EAAE,gBAAgB,YAAY,EAAE,CAAC;GACxE,CAAC,CAEuC;EAC1C,SAAS,GAAQ;GAGf,AAFA,GAAM,mBAAmB,CAAC,GAC1B,QAAQ,MAAM,uBAAuB,EAAE,SAAS,CAAC,GACjD,EAAI,OAAO,GAAG,CAAC,CAAC,KAAK,uBAAuB;EAC9C;CACF,CAAC,GAGD,EAAI,IAAI,OAAO,GAAqB,MAAyB;EAC3D,IAAI;GACF,IAAM,IAAM,EAAI,YAAY,QAAQ,GAAM,EAAE,GAExC,GACA,GAKA,GACA;GAEJ,IAAK,GAkBE;IACL,IAAW;IACX,IAAM,IAAkB,EAAK,KAAK,GAAM,+BAA+B,GACjE,IAAe,MAAM,OACzB,EAAc,CAAe,CAAC,CAAC;IAIjC,AAFA,IAAS,EAAY,QACrB,IAAiB,EAAY,gBAC7B,IAAW;GACb,OA3BmB;IAMjB,AAJA,IAAW,MAAM,EAAG,SAAS,EAAK,KAAK,GAAM,cAAc,GAAG,OAAO,GACrE,IAAW,MAAM,EAAM,mBAAmB,GAAK,CAAQ,GAGlD,EAAS,SAAS,cAAc,MACnC,IAAW,EAAS,QAClB,WACA,iEACF;IAGF,IAAM,IAAe,MAAM,EAAM,cAC/B,2BACF;IAEA,AADA,IAAS,EAAY,QACrB,IAAiB,EAAY;GAC/B;GAWA,IAAM,IAAmB,MAAM,IAAiB,GAC1C,IACJ,OAAO,KAAqB,aAAa,KAAoB,GAAM,MAAS,EAAK,GAE7E,IAAkC,CAAC,GACnC,IAAiB,EAA4B,CAAG,GAChD,IAAU,EAAc;IAC5B,SAAS;IACT,aAAa,EAAkB,GAAK,GAAgB,GAAM,CAAM;IAChE;IACA,eAAe,EAAU,YAAY,CAAG;GAC1C,CAAC,GAEK,IAAiB,OAAO,MAAmC;IAC/D,IAAM,IAAkB,EAAkB,GAAK,GAAY,GAAM,CAAM,GACjE,IAAU,EAAa,EAAgB,KAAM,CAAI;IAIvD,OAAO,EAAmB;KACxB,UAAU,MAJe,EAAO,GAAS,GAAiB,EAC1D,0BACF,CAAC;KAGC;KACA;KACA;KACA;KACA;KACA,WAAW,IAAe,IAAO,EAAM,OAAO;KAC9C;IACF,CAAC;GACH,GAEM,IAAO,OAAO,MAA6B;IAC/C,IAAM,IAAc,EAAqB,GAAS,EAAQ,SAAS,EAAQ,GAAG;IAK9E,OAJA,EAAQ,UAAU,GAClB,EAAQ,MAAM,IAAI,IAAI,EAAY,GAAG,GACrC,EAAQ,UAAU,EAAa,EAAY,QAAQ,IAAI,QAAQ,KAAK,KAAA,CAAS,GAC7E,EAAQ,cAAc,EAAkB,GAAK,GAAa,GAAM,CAAM,GAC/D,EAAe,CAAW;GACnC;GAKA,AAHA,EAAQ,WAAW,MAA4B,EAAK,CAAO,GAG3D,MAAM,EAAgB,GAAK,GAAK,MADT,EAAQ,GAAS,CAAI,CACJ;EAC1C,SAAS,GAAQ;GAIf,AAHA,GAAM,mBAAmB,CAAC,GAC1B,QAAQ,MAAM,EAAE,KAAK,GAErB,EAAI,OAAO,GAAG,CAAC,CAAC,IAAI,IAAe,0BAA0B,EAAE,KAAK;EACtE;CACF,CAAC,GAEM;EAAE;EAAK;CAAK;AACrB;AAEA,eAAsB,EAAY,IAAyB,CAAC,GAAkB;CAC5E,IAAM,IAAO,EAAQ,QAAQ,MAIvB,KAAW,MAAM,OAAO,WAAA,CAAY,SACpC,IAAM,EAAQ;CAGpB,AAAI,EAAQ,aACV,QAAQ,IAAI,UAAU,GACtB,MAAM,EAAQ,SAAS,CAAG;CAG5B,IAAM,EAAE,KAAK,MAAc,MAAM,EAAa;EAAE,GAAG;EAAS;CAAI,CAAC;CAEjE,EAAU,OAAO,SAAY;EAC3B,QAAQ,IAAI,sCAAsC,GAAM;CAC1D,CAAC;AACH;AAEA,IAAM,IAAW;AAEjB,SAAgB,EAAQ,GAAqB;CAE3C,IAAI,MAAQ,UACV,OAAO;CAGT,IAAI,IAAO;CACX,KAAK,IAAI,IAAI,GAAG,IAAI,EAAI,QAAQ,KAAK;EACnC,IAAM,IAAO,EAAI,WAAW,CAAC;EAE7B,AADA,KAAQ,KAAQ,KAAK,IAAO,GAC5B,KAAc;CAChB;CACA,OAAO,KAAK,IAAI,CAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;AACnD;AAEA,SAAgB,EAAkB,GAAwC;CAGxE,QAFc,MAAM,QAAQ,CAAI,IAAI,IAAO,CAAC,GAAG,CAAI,EAAA,CAC9B,MAAM,GAAG,CAAQ,CAAC,CAAC,IAAI,CAChC;AACd"}

package/dist/server.js

@@ -1,2 +1,2 @@
-import { a as e, i as t, n, r, t as i } from "./server-5BEwGAL4.js";
+import { a as e, i as t, n, r, t as i } from "./server-DPBLtja1.js";
 export { i as applyHtmlLang, n as createServer, r as hashTag, t as optimizeCacheTags, e as startServer };

package/dist/vite-plugin.js

@@ -1,4 +1,4 @@
-import { t as e } from "./global-style-BhiGjxVU.js";
+import { t as e } from "./global-style-Cgno-yNl.js";
 import { existsSync as t, mkdirSync as n, readFileSync as r, readdirSync as i, rmSync as a, statSync as o, writeFileSync as s } from "fs";
 import { transform as c } from "esbuild";
 import { dirname as l, join as u, relative as d, resolve as f } from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withl5e/l5e",
-  "version": "1.0.0",
+  "version": "1.0.1-rc.0",
   "description": "HTML-first SSR MPA framework with loaders, middleware, islands, actions, swap, SEO and cache controls.",
   "type": "module",
   "license": "MIT",

package/src/core/bundler.ts

@@ -5,6 +5,7 @@ import { createRequire } from 'node:module';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 import type { InputOptions, OutputChunk, OutputOptions, Plugin } from 'rolldown';
+import type { ScriptBundlePolicy } from './script-bundle-policy';
 
 let rolldownModulePromise: Promise<typeof import('rolldown')> | null = null;
 
@@ -99,60 +100,40 @@ function virtualEntryPlugin(entryContent: string): Plugin {
   };
 }
 
-/**
- * Rewrite vendor/chunk/global imports thành web path và để chúng external.
- * Global files (*.global.*) đã được client.global.ts load — bundle lại sẽ tạo
- * module instance trùng (vd nanostores).
- */
-function vendorPathRewriterPlugin(distClientDir: string): Plugin {
-  const toWebPath = (absolutePath: string) =>
-    '/' + path.relative(distClientDir, absolutePath).replace(/\\/g, '/');
-
+/** Inline page roots only; their emitted dependencies retain canonical URLs. */
+function preserveBuildChunksPlugin(policy: ScriptBundlePolicy): Plugin {
   return {
-    name: 'vendor-path-rewriter',
+    name: 'preserve-build-chunks',
     resolveId(source, importer) {
-      if (
-        !source.includes('vendor-') &&
-        !source.includes('chunk-') &&
-        !source.includes('.global')
-      ) {
-        return null;
-      }
-
-      if (path.isAbsolute(source)) {
-        // e.g. C:\...\dist\client\assets\vendor-react-XXX.js -> /assets/vendor-react-XXX.js
-        return { id: toWebPath(source), external: 'absolute' };
-      }
-
-      if (importer && source.startsWith('.')) {
-        // Relative path như ./auth.global-BOVr81Z5.js — resolve từ importer
-        return {
-          id: toWebPath(path.resolve(path.dirname(importer), source)),
-          external: 'absolute',
-        };
-      }
-
-      return null;
+      if (!importer || source === VIRTUAL_ENTRY_ID) return null;
+      const file = path.isAbsolute(source)
+        ? path.normalize(source)
+        : source.startsWith('.')
+          ? path.resolve(path.dirname(importer), source)
+          : null;
+      if (!file) return null;
+      // The virtual entry is the only place where an unshared page entry may
+      // be inlined. Never traverse an emitted dependency to re-bundle its body.
+      if (importer === VIRTUAL_ENTRY_ID && !policy.isPreserved(file)) return null;
+      return { id: policy.assetUrl(file), external: 'absolute' };
     },
   };
 }
 
 async function runScriptBundle(
   uniquePaths: string[],
-  distClientDir: string,
+  policy: ScriptBundlePolicy,
 ): Promise<BundleResult> {
   const entryContent = uniquePaths
     .map((p) => {
-      const filePath = p.startsWith('/')
-        ? path.join(distClientDir, p.substring(1))
-        : path.join(distClientDir, p);
+      const filePath = policy.fileForScript(p);
       return `import ${JSON.stringify(filePath)};`;
     })
     .join('\n');
 
   const rolldownOptions: InputOptions = {
     input: VIRTUAL_ENTRY_ID,
-    plugins: [virtualEntryPlugin(entryContent), vendorPathRewriterPlugin(distClientDir)],
+    plugins: [virtualEntryPlugin(entryContent), preserveBuildChunksPlugin(policy)],
     platform: 'neutral',
     tsconfig: false,
     // Runtime scripts are imported for their side effects. Do not let an app's
@@ -166,7 +147,7 @@ async function runScriptBundle(
         return true;
       }
 
-      // Vendor/chunk/global do plugin resolveId lo phần rewrite path
+      // Emitted file imports are resolved by preserveBuildChunksPlugin.
       return false;
     },
   };
@@ -222,26 +203,29 @@ async function runScriptBundle(
 export async function bundleScripts(
   scriptPaths: string[],
   distClientDir: string,
+  policy?: ScriptBundlePolicy,
 ): Promise<BundleResult> {
   if (scriptPaths.length === 0) {
     return EMPTY_RESULT;
   }
 
+  if (!policy || policy.directory !== path.resolve(distClientDir)) {
+    console.warn('[bundler] No matching build manifest; serving original script entries.');
+    return EMPTY_RESULT;
+  }
+
   const uniquePaths = [...new Set(scriptPaths)].sort();
-  const cacheKey = `scripts:${uniquePaths.join(',')}`;
+  const cacheKey = `scripts:${policy.cacheKey}:${JSON.stringify(uniquePaths)}`;
 
   try {
-    return await dedupe(cacheKey, () => runScriptBundle(uniquePaths, distClientDir));
+    return await dedupe(cacheKey, () => runScriptBundle(uniquePaths, policy));
   } catch (error) {
     console.error('[bundler] Error bundling scripts:', error);
     return EMPTY_RESULT;
   }
 }
 
-async function runCssBundle(
-  uniquePaths: string[],
-  distClientDir: string,
-): Promise<BundleResult> {
+async function runCssBundle(uniquePaths: string[], distClientDir: string): Promise<BundleResult> {
   const cssContents: string[] = [];
 
   for (const cssPath of uniquePaths) {
@@ -276,16 +260,13 @@ async function runCssBundle(
  * Bundle CSS files từ dist/client thành 1 file
  * Trong production, các file đã được build sẵn trong dist/client
  */
-export async function bundleCss(
-  cssPaths: string[],
-  distClientDir: string,
-): Promise<BundleResult> {
+export async function bundleCss(cssPaths: string[], distClientDir: string): Promise<BundleResult> {
   if (cssPaths.length === 0) {
     return EMPTY_RESULT;
   }
 
   const uniquePaths = [...new Set(cssPaths)].sort();
-  const cacheKey = `css:${uniquePaths.join(',')}`;
+  const cacheKey = `css:${JSON.stringify([path.resolve(distClientDir), uniquePaths])}`;
 
   try {
     return await dedupe(cacheKey, () => runCssBundle(uniquePaths, distClientDir));

package/src/core/script-bundle-policy.ts

@@ -0,0 +1,77 @@
+import { createHash } from 'node:crypto';
+import { realpathSync } from 'node:fs';
+import path from 'node:path';
+import type { Manifest } from 'vite';
+import { withAssetBase } from './global-style';
+
+/** Preserve the emitted module boundaries chosen by the application's build. */
+export function createScriptBundlePolicy(manifest: Manifest, distClientDir: string, base = '/') {
+  const directory = path.resolve(distClientDir);
+  // Rolldown resolves entry importers through symlinks/junctions. Use the same
+  // physical directory for identity while retaining the caller's output scope.
+  const assetDirectory = realpathSync(directory);
+  const files = new Set<string>();
+  const preserved = new Set<string>();
+  const jsEntries = Object.entries(manifest).filter(([, entry]) => /\.[cm]?js$/.test(entry.file));
+
+  function absoluteFile(file: string) {
+    const absolute = path.resolve(assetDirectory, file);
+    const relative = path.relative(assetDirectory, absolute);
+    if (
+      !relative ||
+      relative === '..' ||
+      relative.startsWith(`..${path.sep}`) ||
+      path.isAbsolute(relative)
+    ) {
+      throw new Error(`[bundler] Asset is outside the client output: ${file}`);
+    }
+    return absolute;
+  }
+
+  for (const [key, entry] of jsEntries) {
+    const file = absoluteFile(entry.file);
+    files.add(file);
+    if (
+      !entry.isEntry ||
+      entry.isDynamicEntry ||
+      key === 'src/client.global.ts' ||
+      /(?:^|\/)react\//.test(entry.src || key)
+    )
+      preserved.add(file);
+  }
+
+  // Index the whole build, not just this request's roots. This also protects an
+  // entry imported by another entry, even when both are selected on this page.
+  for (const [, entry] of jsEntries) {
+    for (const key of [...(entry.imports || []), ...(entry.dynamicImports || [])]) {
+      const dependency = manifest[key];
+      if (!dependency || !files.has(absoluteFile(dependency.file))) {
+        throw new Error(`[bundler] Missing JavaScript manifest dependency: ${key}`);
+      }
+      preserved.add(absoluteFile(dependency.file));
+    }
+  }
+
+  const cacheKey = createHash('sha256')
+    .update(JSON.stringify([directory, assetDirectory, base, manifest]))
+    .digest('hex');
+
+  return {
+    cacheKey,
+    directory,
+    fileForScript(script: string) {
+      const file = absoluteFile(script.replace(/^\/+/, ''));
+      if (!files.has(file)) throw new Error(`[bundler] Script is missing from manifest: ${script}`);
+      return file;
+    },
+    isPreserved(file: string) {
+      return preserved.has(file);
+    },
+    assetUrl(file: string) {
+      if (!files.has(file)) throw new Error(`[bundler] Import is missing from manifest: ${file}`);
+      return withAssetBase(base, path.relative(assetDirectory, file).replace(/\\/g, '/'));
+    },
+  };
+}
+
+export type ScriptBundlePolicy = ReturnType<typeof createScriptBundlePolicy>;

package/src/core/server.ts

@@ -9,7 +9,9 @@ import type { ViteDevServer } from 'vite';
 import { createContext, type MiddlewareHandler, type RewritePayload } from '../middleware';
 import { bundleCss, bundleScripts, getBundledFile } from './bundler';
 import type { RenderResult, RequestInfo } from './entry-server';
-import { resolveGlobalStyleHref } from './global-style';
+import { resolveGlobalStyleHref, withAssetBase } from './global-style';
+import { createScriptBundlePolicy, type ScriptBundlePolicy } from './script-bundle-policy';
+import type { Manifest } from 'vite';
 import { escapeProp } from './render';
 import { createHeadersFromExpressRequest, parseCookies } from './request';
 
@@ -215,6 +217,7 @@ async function createPageResponse({
   distClientDir,
   isProduction,
   assetBase,
+  scriptPolicy,
 }: {
   rendered: RenderResult;
   template: string;
@@ -223,6 +226,7 @@ async function createPageResponse({
   distClientDir: string;
   isProduction: boolean;
   assetBase: string;
+  scriptPolicy?: ScriptBundlePolicy;
 }): Promise<globalThis.Response> {
   const rawResponse = createRawResponse(rendered);
   if (rawResponse) {
@@ -277,7 +281,9 @@ async function createPageResponse({
   }
 
   if (isProduction && manifest) {
-    scriptSrcList = scriptSrcList.filter((src) => !src.includes('.global.'));
+    scriptSrcList = scriptSrcList.filter(
+      (src) => src.replace(/^\//, '') !== 'src/client.global.ts',
+    );
     cssSrcList = cssSrcList.filter((src) => !src.includes('.global.'));
 
     const cssFiles = new Set<string>();
@@ -326,14 +332,16 @@ async function createPageResponse({
     }
 
     if (mappedScripts.length > 0) {
-      const bundledScript = await bundleScripts(mappedScripts, distClientDir);
-      scriptSrcList = bundledScript.filename ? [`/${bundledScript.filename}`] : mappedScripts;
+      const bundledScript = await bundleScripts(mappedScripts, distClientDir, scriptPolicy);
+      scriptSrcList = bundledScript.filename
+        ? [withAssetBase(assetBase, bundledScript.filename)]
+        : mappedScripts.map((file) => withAssetBase(assetBase, file));
     }
 
     if (mappedCssFiles.length > 0) {
       const bundledCss = await bundleCss(mappedCssFiles, distClientDir);
       if (bundledCss.filename) {
-        cssSrcList = [`/${bundledCss.filename}`];
+        cssSrcList = [withAssetBase(assetBase, bundledCss.filename)];
       }
     }
 
@@ -341,11 +349,11 @@ async function createPageResponse({
     if (globalEntry) {
       if (globalEntry.css && globalEntry.css.length > 0) {
         globalEntry.css.forEach((cssFile: string) => {
-          appendStylesheet(`/${cssFile}`, true);
+          appendStylesheet(withAssetBase(assetBase, cssFile), true);
         });
       }
       if (globalEntry.file) {
-        globalScripts.push(`/${globalEntry.file}`);
+        globalScripts.push(withAssetBase(assetBase, globalEntry.file));
       }
     }
 
@@ -354,7 +362,7 @@ async function createPageResponse({
       for (const island of islandEntries) {
         const entry = manifest[island.src];
         if (entry?.file) {
-          islandMap[island.key] = `/${entry.file}`;
+          islandMap[island.key] = withAssetBase(assetBase, entry.file);
         }
       }
       if (Object.keys(islandMap).length > 0) {
@@ -406,9 +414,9 @@ async function createPageResponse({
   const html = rendered.rawHtml
     ? rendered.html || ''
     : templateWithLang
-      .replace(`<!--app-head-->`, () => (rendered.head ?? '') + extraHead)
-      .replace(`<!--app-html-->`, () => rendered.html ?? '')
-      .replace(`<!--app-scripts-->`, () => scriptsHtml);
+        .replace(`<!--app-head-->`, () => (rendered.head ?? '') + extraHead)
+        .replace(`<!--app-html-->`, () => rendered.html ?? '')
+        .replace(`<!--app-scripts-->`, () => scriptsHtml);
 
   const headers = new Headers({
     'Content-Type': 'text/html',
@@ -436,7 +444,6 @@ async function createPageResponse({
 
     cdnCacheControlParts.push('public');
 
-
     headers.set('Cache-Control', cacheControlParts.join(', '));
     headers.set('CDN-Cache-Control', cdnCacheControlParts.join(', '));
   }
@@ -482,6 +489,19 @@ export async function createServer(options: ServerOptions = {}): Promise<ServerC
   // Add Vite or respective production middlewares
   let vite: ViteDevServer | undefined;
   const distClientDir = path.join(root, './dist/client');
+  // A production server owns one immutable build. Share its manifest/policy
+  // across requests, just like its cached HTML template and SSR module.
+  const productionManifest: Manifest | undefined = isProduction
+    ? JSON.parse(await fs.readFile(path.join(distClientDir, '.vite/manifest.json'), 'utf-8'))
+    : undefined;
+  let scriptPolicy: ScriptBundlePolicy | undefined;
+  if (productionManifest) {
+    try {
+      scriptPolicy = createScriptBundlePolicy(productionManifest, distClientDir, base);
+    } catch (error) {
+      console.warn('[bundler] Invalid build manifest; serving original script entries.', error);
+    }
+  }
 
   if (!isProduction) {
     const { createServer } = await import('vite');
@@ -516,7 +536,7 @@ export async function createServer(options: ServerOptions = {}): Promise<ServerC
     // Route để serve bundled files từ memory map
     // Đặt route này trước route HTML để catch request trước
     app.get(
-      `${base === '/' ? '' : base}/bundle-:hash.:ext`,
+      withAssetBase(base, 'bundle-:hash.:ext'),
       async (req: ExpressRequest, res: ExpressResponse) => {
         try {
           const { hash, ext } = req.params;
@@ -670,13 +690,19 @@ export async function createServer(options: ServerOptions = {}): Promise<ServerC
 
       const loadedMiddleware = await entryServerModule.loadMiddleware?.();
       const middlewareHandler: MiddlewareHandler =
-        typeof loadedMiddleware === 'function' ? loadedMiddleware : (_ctx, dummyNext) => dummyNext();
+        typeof loadedMiddleware === 'function'
+          ? loadedMiddleware
+          : (_ctx, dummyNext) => dummyNext();
 
       // If middleware short-circuits (returns its own Response — a redirect, a
       // 403, ...) instead of calling `next`, this callback never runs and that
       // response wins, same as it would for a page request.
       const response = await middlewareHandler(middlewareContext, async (payload) => {
-        const nextRequest = createRewriteRequest(payload, middlewareContext.request, middlewareContext.url);
+        const nextRequest = createRewriteRequest(
+          payload,
+          middlewareContext.request,
+          middlewareContext.url,
+        );
         const requestInfo = {
           ...createRequestInfo(req, nextRequest, base, locals),
           path: req.originalUrl,
@@ -743,12 +769,7 @@ export async function createServer(options: ServerOptions = {}): Promise<ServerC
         )) as EntryServerModule;
         render = entryServer.render;
         loadMiddleware = entryServer.loadMiddleware;
-        // Read manifest to map hashed assets
-        const manifestJson = await fs.readFile(
-          path.join(root, './dist/client/.vite/manifest.json'),
-          'utf-8',
-        );
-        manifest = JSON.parse(manifestJson);
+        manifest = productionManifest;
       }
 
       const loadedMiddleware = await loadMiddleware?.();
@@ -778,6 +799,7 @@ export async function createServer(options: ServerOptions = {}): Promise<ServerC
           distClientDir,
           isProduction,
           assetBase: isProduction ? base : vite!.config.base,
+          scriptPolicy,
         });
       };