@xfe-repo/web-app 2.0.0-beta.1 → 2.0.0-beta.3

package/dist/cli.js

@@ -5,6 +5,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -22,105 +29,165 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/cli.ts
-var import_node_child_process = require("child_process");
-var import_node_fs3 = require("fs");
-var import_path2 = __toESM(require("path"));
-
 // src/config.ts
-var import_path = __toESM(require("path"));
-var import_fs = __toESM(require("fs"));
-var import_yaml = __toESM(require("yaml"));
-var loadXfeConfig = (root = process.cwd()) => {
-  const xfeConfigPath = import_path.default.join(root, "xfe.json");
-  if (!import_fs.default.existsSync(xfeConfigPath)) {
-    throw new Error("xfe.json \u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728\uFF0C\u8BF7\u5728\u9879\u76EE\u6839\u76EE\u5F55\u4E0B\u521B\u5EFA\u8BE5\u6587\u4EF6\u3002");
-  }
-  const xfeConfigContent = import_fs.default.readFileSync(xfeConfigPath, "utf8");
-  const config = JSON.parse(xfeConfigContent);
-  const renderMode = config.webapp?.renderMode;
-  if (renderMode !== void 0 && renderMode !== "client" && renderMode !== "server") {
-    throw new Error("xfe.json.webapp.renderMode \u53EA\u80FD\u4E3A client \u6216 server");
-  }
-  return config;
-};
-var configDeploy = () => {
-  const xfeConfig = loadXfeConfig();
-  if (!xfeConfig?.deploy) return;
-  const droneConfigFilePath = import_path.default.resolve(__dirname, "../deploy/.drone.yml");
-  import_fs.default.cpSync(droneConfigFilePath, xfeConfig.deploy.droneConfigPath || "./.drone.yml");
-  const valuesYamlFilePath = import_path.default.resolve(__dirname, "../deploy/helm/values.yaml");
-  const valuesYamlFile = import_fs.default.readFileSync(valuesYamlFilePath, "utf8");
-  const valuesYaml = import_yaml.default.parse(valuesYamlFile);
-  if (!valuesYaml.virtualService) valuesYaml.virtualService = {};
-  if (!valuesYaml.virtualService.hosts) valuesYaml.virtualService.hosts = { test: [], stage: [], prod: [] };
-  const {
-    virtualServiceEnabled = true,
-    hostsProd = [],
-    hostsStage = [],
-    hostsTest = [],
-    gateways = ["common-gateway-eshetang"]
-  } = xfeConfig.deploy;
-  const { targetK8s = "saas", targetNamespace = "" } = xfeConfig.deploy;
-  valuesYaml.virtualService.enabled = virtualServiceEnabled;
-  valuesYaml.virtualService.gateways = gateways;
-  valuesYaml.virtualService.hosts.prod = hostsProd;
-  valuesYaml.virtualService.hosts.stage = hostsStage;
-  valuesYaml.virtualService.hosts.test = hostsTest;
-  valuesYaml.targetK8s = targetK8s;
-  valuesYaml.namespace = targetNamespace;
-  const valuesYamlStr = import_yaml.default.stringify(valuesYaml, { defaultStringType: "QUOTE_SINGLE", defaultKeyType: "PLAIN" });
-  import_fs.default.writeFileSync(valuesYamlFilePath, valuesYamlStr, "utf8");
-};
-var getJwtEnv = async () => {
-  const xfeConfig = loadXfeConfig();
-  if (!xfeConfig?.jwt) return {};
-  const { aud = "" } = xfeConfig.jwt;
-  if (!aud) throw new Error("xfe.json \u4E2D\u7684 jwt \u914D\u7F6E\u4E0D\u5B8C\u6574\uFF0C\u8BF7\u786E\u4FDD\u5305\u542B aud \u5B57\u6BB5\u3002");
-  const jwkRes = await fetch(`https://app.eshetang.com/jwk?appId=${aud}`);
-  if (!jwkRes.ok) {
-    throw new Error(`\u8FDC\u7A0B\u83B7\u53D6\u5BC6\u94A5\u5931\u8D25: ${jwkRes.status} ${jwkRes.statusText}`);
+var import_node_fs, import_node_path, import_node_url, import_yaml, import_meta, DEFAULT_BUILD_DIRECTORY, BUILD_DIRECTORY_ARGUMENT, protectedDirectories, loadXfeConfig, getBuildDirectory, getServerEntry, configDeploy, getJwtEnv;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    import_node_fs = __toESM(require("fs"));
+    import_node_path = __toESM(require("path"));
+    import_node_url = require("url");
+    import_yaml = __toESM(require("yaml"));
+    import_meta = {};
+    DEFAULT_BUILD_DIRECTORY = "dist";
+    BUILD_DIRECTORY_ARGUMENT = "XFE_BUILD_DIRECTORY";
+    protectedDirectories = /* @__PURE__ */ new Set(["src", "types", "public", "node_modules", ".git"]);
+    loadXfeConfig = (root = process.cwd()) => {
+      const xfeConfigPath = import_node_path.default.join(root, "xfe.json");
+      if (!import_node_fs.default.existsSync(xfeConfigPath)) {
+        throw new Error("xfe.json \u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728\uFF0C\u8BF7\u5728\u9879\u76EE\u6839\u76EE\u5F55\u4E0B\u521B\u5EFA\u8BE5\u6587\u4EF6\u3002");
+      }
+      const xfeConfigContent = import_node_fs.default.readFileSync(xfeConfigPath, "utf8");
+      const config = JSON.parse(xfeConfigContent);
+      const renderMode = config.webapp?.renderMode;
+      if (renderMode !== void 0 && renderMode !== "client" && renderMode !== "server") {
+        throw new Error("xfe.json.webapp.renderMode \u53EA\u80FD\u4E3A client \u6216 server");
+      }
+      getBuildDirectory(root, config.webapp);
+      getServerEntry(root, config.webapp);
+      return config;
+    };
+    getBuildDirectory = (projectRoot, webapp = {}) => {
+      const configured = webapp?.buildDirectory === void 0 ? DEFAULT_BUILD_DIRECTORY : webapp.buildDirectory;
+      if (typeof configured !== "string" || !configured.trim() || /[\0\r\n]/.test(configured)) {
+        throw new Error("xfe.json.webapp.buildDirectory \u5FC5\u987B\u662F\u975E\u7A7A\u7684\u5355\u884C\u5B57\u7B26\u4E32");
+      }
+      const directory = configured.trim().replaceAll("\\", "/");
+      const root = import_node_path.default.resolve(projectRoot);
+      const output = import_node_path.default.resolve(root, directory);
+      const relative = import_node_path.default.relative(root, output);
+      const [firstDirectory = ""] = relative.split(import_node_path.default.sep);
+      const escapesProject = import_node_path.default.isAbsolute(directory) || Boolean(import_node_path.default.win32.parse(directory).root) || firstDirectory === "..";
+      const overwritesInput = !relative || protectedDirectories.has(firstDirectory.toLowerCase());
+      if (escapesProject || overwritesInput) {
+        throw new Error("xfe.json.webapp.buildDirectory \u5FC5\u987B\u662F\u9879\u76EE\u5185\u72EC\u7ACB\u7684\u8F93\u51FA\u76EE\u5F55\uFF0C\u4E0D\u80FD\u8986\u76D6\u9879\u76EE\u3001\u6E90\u7801\u6216\u4F9D\u8D56");
+      }
+      let currentDirectory = root;
+      for (const segment of relative.split(import_node_path.default.sep)) {
+        currentDirectory = import_node_path.default.join(currentDirectory, segment);
+        if (import_node_fs.default.lstatSync(currentDirectory, { throwIfNoEntry: false })?.isSymbolicLink()) {
+          throw new Error("xfe.json.webapp.buildDirectory \u4E0D\u80FD\u7ECF\u8FC7\u7B26\u53F7\u94FE\u63A5\uFF0C\u4EE5\u514D\u6E05\u7406\u5176\u4ED6\u76EE\u5F55");
+        }
+      }
+      return output;
+    };
+    getServerEntry = (projectRoot, webapp = {}) => {
+      const entry = webapp?.serverEntry;
+      if (entry === void 0) return;
+      if (typeof entry !== "string" || !entry.trim() || /[\0\r\n]/.test(entry)) {
+        throw new Error("xfe.json.webapp.serverEntry \u5FC5\u987B\u662F\u9879\u76EE\u5185\u7684 TypeScript / JavaScript \u76F8\u5BF9\u8DEF\u5F84");
+      }
+      const normalized = entry.trim().replaceAll("\\", "/");
+      const absolute = import_node_path.default.resolve(projectRoot, normalized);
+      const relative = import_node_path.default.relative(import_node_path.default.resolve(projectRoot), absolute);
+      const outside = Boolean(import_node_path.default.win32.parse(normalized).root) || relative.split(import_node_path.default.sep)[0] === "..";
+      if (outside || !/\.(?:[jt]sx?|m[jt]s)$/.test(relative)) {
+        throw new Error("xfe.json.webapp.serverEntry \u5FC5\u987B\u662F\u9879\u76EE\u5185\u7684 TypeScript / JavaScript \u76F8\u5BF9\u8DEF\u5F84");
+      }
+      return absolute;
+    };
+    configDeploy = () => {
+      const xfeConfig = loadXfeConfig();
+      if (!xfeConfig?.deploy) return;
+      const configDirectory = typeof __dirname === "string" ? __dirname : import_node_path.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
+      const projectRoot = process.cwd();
+      const buildDirectory = import_node_path.default.relative(projectRoot, getBuildDirectory(projectRoot, xfeConfig.webapp)).replaceAll(import_node_path.default.sep, "/");
+      const droneConfigFilePath = import_node_path.default.resolve(configDirectory, "../deploy/.drone.yml");
+      const droneTarget = import_node_path.default.resolve(projectRoot, xfeConfig.deploy.droneConfigPath || "./.drone.yml");
+      const defaultArgument = JSON.stringify(`${BUILD_DIRECTORY_ARGUMENT}=${DEFAULT_BUILD_DIRECTORY}`);
+      const configuredArgument = JSON.stringify(`${BUILD_DIRECTORY_ARGUMENT}=${buildDirectory}`);
+      const droneConfig = import_node_fs.default.readFileSync(droneConfigFilePath, "utf8").replace(defaultArgument, configuredArgument);
+      import_node_fs.default.mkdirSync(import_node_path.default.dirname(droneTarget), { recursive: true });
+      import_node_fs.default.writeFileSync(droneTarget, droneConfig);
+      const valuesYamlFilePath = import_node_path.default.resolve(configDirectory, "../deploy/helm/values.yaml");
+      const valuesYamlFile = import_node_fs.default.readFileSync(valuesYamlFilePath, "utf8");
+      const valuesYaml = import_yaml.default.parse(valuesYamlFile);
+      if (!valuesYaml.virtualService) valuesYaml.virtualService = {};
+      if (!valuesYaml.virtualService.hosts) valuesYaml.virtualService.hosts = { test: [], stage: [], prod: [] };
+      const {
+        virtualServiceEnabled = true,
+        hostsProd = [],
+        hostsStage = [],
+        hostsTest = [],
+        gateways = ["common-gateway-eshetang"]
+      } = xfeConfig.deploy;
+      const { targetK8s = "saas", targetNamespace = "" } = xfeConfig.deploy;
+      valuesYaml.virtualService.enabled = virtualServiceEnabled;
+      valuesYaml.virtualService.gateways = gateways;
+      valuesYaml.virtualService.hosts.prod = hostsProd;
+      valuesYaml.virtualService.hosts.stage = hostsStage;
+      valuesYaml.virtualService.hosts.test = hostsTest;
+      valuesYaml.targetK8s = targetK8s;
+      valuesYaml.namespace = targetNamespace;
+      const valuesYamlStr = import_yaml.default.stringify(valuesYaml, { defaultStringType: "QUOTE_SINGLE", defaultKeyType: "PLAIN" });
+      import_node_fs.default.writeFileSync(valuesYamlFilePath, valuesYamlStr, "utf8");
+    };
+    getJwtEnv = async () => {
+      const xfeConfig = loadXfeConfig();
+      if (!xfeConfig?.jwt) return {};
+      const { aud = "" } = xfeConfig.jwt;
+      if (!aud) throw new Error("xfe.json \u4E2D\u7684 jwt \u914D\u7F6E\u4E0D\u5B8C\u6574\uFF0C\u8BF7\u786E\u4FDD\u5305\u542B aud \u5B57\u6BB5\u3002");
+      const jwkRes = await fetch(`https://app.eshetang.com/jwk?appId=${aud}`);
+      if (!jwkRes.ok) {
+        throw new Error(`\u8FDC\u7A0B\u83B7\u53D6\u5BC6\u94A5\u5931\u8D25: ${jwkRes.status} ${jwkRes.statusText}`);
+      }
+      let JwkResponseJson;
+      try {
+        JwkResponseJson = await jwkRes.json();
+      } catch (err) {
+        throw new Error(`\u8FDC\u7A0B\u83B7\u53D6\u5BC6\u94A5\u5931\u8D25\uFF0C\u54CD\u5E94\u89E3\u6790\u9519\u8BEF: ${err.message}, response text: ${await jwkRes.text()}`);
+      }
+      const { keyId, privateKeyPkcs8 } = JwkResponseJson?.data || {};
+      if (!keyId || !privateKeyPkcs8) throw new Error(`\u672A\u83B7\u53D6\u5230\u9879\u76EE\u7B7E\u540D\u5BC6\u94A5, \u8BF7\u68C0\u67E5aud\u662F\u5426\u6B63\u786E: ${aud}`);
+      return { XFE_JWT_AUD: aud, XFE_JWT_KEY_ID: keyId, XFE_JWT_PRIVATE_KEY: privateKeyPkcs8 };
+    };
   }
-  let JwkResponseJson;
-  try {
-    JwkResponseJson = await jwkRes.json();
-  } catch (err) {
-    throw new Error(`\u8FDC\u7A0B\u83B7\u53D6\u5BC6\u94A5\u5931\u8D25\uFF0C\u54CD\u5E94\u89E3\u6790\u9519\u8BEF: ${err.message}, response text: ${await jwkRes.text()}`);
-  }
-  const { keyId, privateKeyPkcs8 } = JwkResponseJson?.data || {};
-  if (!keyId || !privateKeyPkcs8) throw new Error(`\u672A\u83B7\u53D6\u5230\u9879\u76EE\u7B7E\u540D\u5BC6\u94A5, \u8BF7\u68C0\u67E5aud\u662F\u5426\u6B63\u786E: ${aud}`);
-  return { XFE_JWT_AUD: aud, XFE_JWT_KEY_ID: keyId, XFE_JWT_PRIVATE_KEY: privateKeyPkcs8 };
-};
+});
 
 // src/framework.ts
-var import_node_fs = __toESM(require("fs"));
-var import_node_module = require("module");
-var import_node_path = __toESM(require("path"));
-var import_node_url = require("url");
-var import_meta = {};
-var frameworkDirectory = typeof __dirname === "string" ? __dirname : import_node_path.default.dirname((0, import_node_url.fileURLToPath)(import_meta.url));
-var requireFromFramework = (0, import_node_module.createRequire)(import_node_path.default.join(frameworkDirectory, "framework.js"));
-var extensions = [".tsx", ".ts", ".jsx", ".js"];
-var findSource = (directory, name) => extensions.map((extension) => import_node_path.default.join(directory, `${name}${extension}`)).find(import_node_fs.default.existsSync);
-var findValueExports = (file) => [...import_node_fs.default.readFileSync(file, "utf8").matchAll(/^\s*export\s+(?:async\s+)?(?:const|let|var|function|class)\s+([A-Za-z_$][\w$]*)/gm)].map(
-  ([, name]) => name
-);
-var importPath = (from, target) => {
-  const relative = import_node_path.default.relative(from, target).replace(import_node_path.default.extname(target), "").replaceAll(import_node_path.default.sep, "/");
-  return relative.startsWith(".") ? relative : `./${relative}`;
-};
-var writeGenerated = (file, content) => {
-  if (import_node_fs.default.existsSync(file) && import_node_fs.default.readFileSync(file, "utf8") === content) return;
-  import_node_fs.default.writeFileSync(file, content);
-};
-var defaultRootSource = (projectRoot, appDirectory) => {
-  const { webapp = {} } = loadXfeConfig(projectRoot);
-  const layoutSource = findSource(import_node_path.default.join(projectRoot, "src"), "layout");
-  const layoutExports = layoutSource ? findValueExports(layoutSource) : [];
-  const hasErrorView = layoutExports.includes("ErrorView");
-  const layoutImport = layoutSource ? `import AppLayout${hasErrorView ? ", { ErrorView }" : ""} from ${JSON.stringify(importPath(appDirectory, layoutSource))}
+var import_node_fs2, import_node_module, import_node_path2, import_node_url2, import_meta2, frameworkDirectory, requireFromFramework, extensions, findSource, findValueExports, importPath, writeGenerated, defaultRootSource, getFrameworkRoot, prepareFramework;
+var init_framework = __esm({
+  "src/framework.ts"() {
+    "use strict";
+    import_node_fs2 = __toESM(require("fs"));
+    import_node_module = require("module");
+    import_node_path2 = __toESM(require("path"));
+    import_node_url2 = require("url");
+    init_config();
+    import_meta2 = {};
+    frameworkDirectory = typeof __dirname === "string" ? __dirname : import_node_path2.default.dirname((0, import_node_url2.fileURLToPath)(import_meta2.url));
+    requireFromFramework = (0, import_node_module.createRequire)(import_node_path2.default.join(frameworkDirectory, "framework.js"));
+    extensions = [".tsx", ".ts", ".jsx", ".js"];
+    findSource = (directory, name) => extensions.map((extension) => import_node_path2.default.join(directory, `${name}${extension}`)).find(import_node_fs2.default.existsSync);
+    findValueExports = (file) => [...import_node_fs2.default.readFileSync(file, "utf8").matchAll(/^\s*export\s+(?:async\s+)?(?:const|let|var|function|class)\s+([A-Za-z_$][\w$]*)/gm)].map(
+      ([, name]) => name
+    );
+    importPath = (from, target) => {
+      const relative = import_node_path2.default.relative(from, target).replace(import_node_path2.default.extname(target), "").replaceAll(import_node_path2.default.sep, "/");
+      return relative.startsWith(".") ? relative : `./${relative}`;
+    };
+    writeGenerated = (file, content) => {
+      if (import_node_fs2.default.existsSync(file) && import_node_fs2.default.readFileSync(file, "utf8") === content) return;
+      import_node_fs2.default.writeFileSync(file, content);
+    };
+    defaultRootSource = (projectRoot, appDirectory) => {
+      const { webapp = {} } = loadXfeConfig(projectRoot);
+      const layoutSource = findSource(import_node_path2.default.join(projectRoot, "src"), "layout");
+      const layoutExports = layoutSource ? findValueExports(layoutSource) : [];
+      const hasErrorView = layoutExports.includes("ErrorView");
+      const layoutImport = layoutSource ? `import AppLayout${hasErrorView ? ", { ErrorView }" : ""} from ${JSON.stringify(importPath(appDirectory, layoutSource))}
 ` : "";
-  return `import { createElement, type ReactNode } from 'react'
+      return `import { createElement, type ReactNode } from 'react'
 import { Outlet } from 'react-router'
 import { Document, PageError, PageLoading } from '@xfe-repo/web-app/dist/root.mjs'
 ${layoutImport}
@@ -130,86 +197,270 @@ export default function Root() { return ${layoutSource ? "createElement(AppLayou
 export function ErrorBoundary() { return createElement(PageError, { ${hasErrorView ? "view: ErrorView" : ""} }) }
 export function HydrateFallback() { return createElement(PageLoading) }
 `;
-};
-var getFrameworkRoot = (projectRoot) => import_node_path.default.join(projectRoot, "node_modules/.cache/xfe-web/react-router");
-var prepareFramework = (projectRoot = process.cwd()) => {
-  const sourceDirectory = import_node_path.default.join(projectRoot, "src");
-  const rootSource = findSource(sourceDirectory, "root");
-  const appServerSource = findSource(sourceDirectory, "app.server");
-  const pagesSource = import_node_path.default.join(sourceDirectory, "pages");
-  if (!import_node_fs.default.existsSync(pagesSource)) throw new Error("\u672A\u627E\u5230 src/pages");
-  const rootDirectory = getFrameworkRoot(projectRoot);
-  const appDirectory = import_node_path.default.join(rootDirectory, "app");
-  import_node_fs.default.mkdirSync(appDirectory, { recursive: true });
-  const routerDirectory = import_node_path.default.dirname(requireFromFramework.resolve("react-router/package.json"));
-  const routerLink = import_node_path.default.join(rootDirectory, "node_modules/react-router");
-  import_node_fs.default.mkdirSync(import_node_path.default.dirname(routerLink), { recursive: true });
-  if (!import_node_fs.default.lstatSync(routerLink, { throwIfNoEntry: false })?.isSymbolicLink() || import_node_fs.default.readlinkSync(routerLink) !== routerDirectory) {
-    import_node_fs.default.rmSync(routerLink, { force: true });
-    import_node_fs.default.symlinkSync(routerDirectory, routerLink, "junction");
-  }
-  const rootTarget = import_node_path.default.join(appDirectory, "root.tsx");
-  const rootImport = rootSource ? importPath(appDirectory, rootSource) : "";
-  const rootExports = rootSource ? findValueExports(rootSource).filter((name) => name !== "middleware" || !appServerSource) : [];
-  const namedExports = rootExports.length ? `export { ${rootExports.join(", ")} } from ${JSON.stringify(rootImport)}
+    };
+    getFrameworkRoot = (projectRoot) => import_node_path2.default.join(projectRoot, "node_modules/.cache/xfe-web/react-router");
+    prepareFramework = (projectRoot = process.cwd()) => {
+      const sourceDirectory = import_node_path2.default.join(projectRoot, "src");
+      const rootSource = findSource(sourceDirectory, "root");
+      const appServerSource = findSource(sourceDirectory, "app.server");
+      const pagesSource = import_node_path2.default.join(sourceDirectory, "pages");
+      if (!import_node_fs2.default.existsSync(pagesSource)) throw new Error("\u672A\u627E\u5230 src/pages");
+      const rootDirectory = getFrameworkRoot(projectRoot);
+      const appDirectory = import_node_path2.default.join(rootDirectory, "app");
+      import_node_fs2.default.mkdirSync(appDirectory, { recursive: true });
+      const routerDirectory = import_node_path2.default.dirname(requireFromFramework.resolve("react-router/package.json"));
+      const routerLink = import_node_path2.default.join(rootDirectory, "node_modules/react-router");
+      import_node_fs2.default.mkdirSync(import_node_path2.default.dirname(routerLink), { recursive: true });
+      if (!import_node_fs2.default.lstatSync(routerLink, { throwIfNoEntry: false })?.isSymbolicLink() || import_node_fs2.default.readlinkSync(routerLink) !== routerDirectory) {
+        import_node_fs2.default.rmSync(routerLink, { force: true });
+        import_node_fs2.default.symlinkSync(routerDirectory, routerLink, "junction");
+      }
+      const rootTarget = import_node_path2.default.join(appDirectory, "root.tsx");
+      const rootImport = rootSource ? importPath(appDirectory, rootSource) : "";
+      const rootExports = rootSource ? findValueExports(rootSource).filter((name) => name !== "middleware" || !appServerSource) : [];
+      const namedExports = rootExports.length ? `export { ${rootExports.join(", ")} } from ${JSON.stringify(rootImport)}
 ` : "";
-  const errorBoundaryExport = rootExports.includes("ErrorBoundary") ? "" : "export { DefaultErrorBoundary as ErrorBoundary } from '@xfe-repo/web-router/errors'\n";
-  const middlewareExport = appServerSource ? `export { middleware } from ${JSON.stringify(importPath(appDirectory, appServerSource))}
+      const errorBoundaryExport = rootExports.includes("ErrorBoundary") ? "" : "export { DefaultErrorBoundary as ErrorBoundary } from '@xfe-repo/web-router/errors'\n";
+      const middlewareExport = appServerSource ? `export { middleware } from ${JSON.stringify(importPath(appDirectory, appServerSource))}
 ` : "";
-  writeGenerated(
-    rootTarget,
-    rootSource ? `export * from ${JSON.stringify(rootImport)}
+      writeGenerated(
+        rootTarget,
+        rootSource ? `export * from ${JSON.stringify(rootImport)}
 export { default } from ${JSON.stringify(rootImport)}
 ${namedExports}${errorBoundaryExport}${middlewareExport}` : `${defaultRootSource(projectRoot, appDirectory)}${middlewareExport}`
-  );
-  const pagesLink = import_node_path.default.join(appDirectory, "pages");
-  if (!import_node_fs.default.existsSync(pagesLink)) import_node_fs.default.symlinkSync(import_node_path.default.relative(appDirectory, pagesSource), pagesLink, "dir");
-  writeGenerated(
-    import_node_path.default.join(rootDirectory, "react-router.config.js"),
-    "export { default } from '@xfe-repo/web-app/dist/react-router-config.mjs'\n"
-  );
-  writeGenerated(
-    import_node_path.default.join(appDirectory, "routes.js"),
-    `import { collectPageRoutes } from '@xfe-repo/web-router/routes'
+      );
+      const pagesLink = import_node_path2.default.join(appDirectory, "pages");
+      if (!import_node_fs2.default.existsSync(pagesLink)) import_node_fs2.default.symlinkSync(import_node_path2.default.relative(appDirectory, pagesSource), pagesLink, "dir");
+      writeGenerated(
+        import_node_path2.default.join(rootDirectory, "react-router.config.js"),
+        "export { default } from '@xfe-repo/web-app/dist/react-router-config.mjs'\n"
+      );
+      writeGenerated(
+        import_node_path2.default.join(appDirectory, "routes.js"),
+        `import { collectPageRoutes } from '@xfe-repo/web-router/routes'
 export default collectPageRoutes(${JSON.stringify(appDirectory)})
 `
-  );
-  const defaultsDirectory = import_node_path.default.join(import_node_path.default.dirname(requireFromFramework.resolve("@react-router/dev/package.json")), "dist/config/defaults");
-  writeGenerated(
-    import_node_path.default.join(appDirectory, "entry.server.tsx"),
-    `export { default, streamTimeout } from ${JSON.stringify(importPath(appDirectory, import_node_path.default.join(defaultsDirectory, "entry.server.web.tsx")))}
+      );
+      const defaultsDirectory = import_node_path2.default.join(import_node_path2.default.dirname(requireFromFramework.resolve("@react-router/dev/package.json")), "dist/config/defaults");
+      writeGenerated(
+        import_node_path2.default.join(appDirectory, "entry.server.tsx"),
+        `export { default, streamTimeout } from ${JSON.stringify(importPath(appDirectory, import_node_path2.default.join(defaultsDirectory, "entry.server.web.tsx")))}
 `
+      );
+      const typeScriptConfig = import_node_path2.default.join(rootDirectory, "tsconfig.json");
+      writeGenerated(
+        typeScriptConfig,
+        JSON.stringify(
+          {
+            extends: import_node_path2.default.join(projectRoot, "tsconfig.json"),
+            compilerOptions: { rootDirs: [projectRoot, rootDirectory, import_node_path2.default.join(rootDirectory, ".react-router/types")] },
+            include: [
+              import_node_path2.default.join(sourceDirectory, "**/*"),
+              import_node_path2.default.join(projectRoot, "types/**/*"),
+              import_node_path2.default.join(appDirectory, "*.tsx"),
+              import_node_path2.default.join(rootDirectory, ".react-router/types/**/*")
+            ],
+            exclude: []
+          },
+          null,
+          2
+        )
+      );
+      return {
+        appDirectory,
+        rootDirectory,
+        viteConfig: import_node_path2.default.resolve(frameworkDirectory, "vite.mjs"),
+        typeScriptConfig
+      };
+    };
+  }
+});
+
+// src/node.ts
+var node_exports = {};
+__export(node_exports, {
+  buildNode: () => buildNode,
+  runNode: () => runNode
+});
+async function buildNode({ projectRoot, webapp }) {
+  const { build } = await import("esbuild");
+  const entry = getServerEntry(projectRoot, webapp);
+  if (!entry) throw new Error("\u7F3A\u5C11 xfe.json.webapp.serverEntry");
+  if (webapp.renderMode === "client") await (0, import_promises.rm)(import_node_path4.default.join(getBuildDirectory(projectRoot, webapp), "server"), { recursive: true, force: true });
+  await build({
+    absWorkingDir: projectRoot,
+    entryPoints: [entry],
+    outfile: import_node_path4.default.join(getBuildDirectory(projectRoot, webapp), NODE_OUTPUT),
+    tsconfig: import_node_path4.default.join(projectRoot, "tsconfig.json"),
+    bundle: true,
+    packages: "external",
+    platform: "node",
+    format: "esm",
+    target: "node22.22",
+    sourcemap: true
+  });
+}
+async function runNode({ projectRoot, webapp, development }) {
+  const entry = development ? getServerEntry(projectRoot, webapp) : import_node_path4.default.join(getBuildDirectory(projectRoot, webapp), NODE_OUTPUT);
+  if (!entry) throw new Error("\u7F3A\u5C11 xfe.json.webapp.serverEntry");
+  if (development) {
+    const { loadEnv } = await import("vite");
+    Object.assign(process.env, { ...loadEnv("development", projectRoot, ""), ...process.env });
+  } else process.env.NODE_ENV ??= "production";
+  const module2 = await import((0, import_node_url3.pathToFileURL)(entry).href);
+  if (typeof module2.default !== "function") throw new Error("serverEntry \u5FC5\u987B\u9ED8\u8BA4\u5BFC\u51FA Node \u670D\u52A1\u5DE5\u5382\u51FD\u6570");
+  const frontend = (0, import_express2.default)().disable("x-powered-by");
+  const application = await module2.default({ frontend, mode: development ? "development" : "production" });
+  const upgrades = /* @__PURE__ */ new Set();
+  let vite;
+  let closing;
+  const close = () => closing ??= disposeApplication(application, { vite, upgrades });
+  const onSignal = async () => {
+    try {
+      await close();
+    } catch (error) {
+      console.error("XFE Node \u5173\u95ED\u5931\u8D25:", error);
+      process.exit(1);
+    } finally {
+      process.off("SIGINT", onSignal);
+      process.off("SIGTERM", onSignal);
+    }
+  };
+  try {
+    const server = application?.server;
+    if (!(server instanceof import_node_http.Server) || server.listening) throw new Error("Node \u5DE5\u5382\u5FC5\u987B\u8FD4\u56DE\u5C1A\u672A listen \u7684 http.Server");
+    if (server.listenerCount("upgrade")) throw new Error("\u8BF7\u901A\u8FC7\u5DE5\u5382\u8FD4\u56DE\u7684 upgrade \u5904\u7406\u5347\u7EA7\uFF0C\u4E0D\u8981\u76F4\u63A5\u6CE8\u518C server \u7684 upgrade \u4E8B\u4EF6");
+    const hmrPath = import_node_path4.default.posix.join(webapp.basename || "/", HMR_PATH);
+    server.on(
+      "upgrade",
+      /** HMR 与业务互斥分流，升级连接由关闭流程统一回收。 */
+      (request, socket, head) => {
+        upgrades.add(socket);
+        socket.once(
+          "close",
+          /** 不保留已经断开的升级连接。 */
+          () => upgrades.delete(socket)
+        );
+        if (development && request.url?.split("?")[0] === hmrPath) {
+          if (!["vite-hmr", "vite-ping"].includes(String(request.headers["sec-websocket-protocol"]))) socket.destroy();
+          return;
+        }
+        if (application.upgrade) application.upgrade(request, socket, head);
+        else socket.destroy();
+      }
+    );
+    if (development) vite = await createDevelopmentServer(server, projectRoot);
+    await mountFrontend(frontend, { projectRoot, webapp, vite });
+    const listening = (0, import_node_events.once)(server, "listening");
+    const host = process.env.HOST || webapp.host || "0.0.0.0";
+    const port = Number(process.env.PORT ?? webapp.port ?? 3e3);
+    server.listen(port, host);
+    await listening;
+    console.info(`XFE Node: http://${host}:${port}`);
+    process.on("SIGINT", onSignal);
+    process.on("SIGTERM", onSignal);
+  } catch (error) {
+    await close();
+    throw error;
+  }
+}
+async function createDevelopmentServer(server, projectRoot) {
+  const { createServer } = await import("vite");
+  const framework = prepareFramework(projectRoot);
+  const events = [[process, "SIGINT"], [process, "SIGTERM"], [process.stdin, "end"]];
+  const snapshots = events.map(
+    /** 只记录当前监听，恢复时保留宿主和业务原有的处理器。 */
+    ([source, event]) => ({ source, event, listeners: new Set(source.listeners(event)) })
   );
-  const typeScriptConfig = import_node_path.default.join(rootDirectory, "tsconfig.json");
-  writeGenerated(
-    typeScriptConfig,
-    JSON.stringify(
-      {
-        extends: import_node_path.default.join(projectRoot, "tsconfig.json"),
-        compilerOptions: { rootDirs: [projectRoot, rootDirectory, import_node_path.default.join(rootDirectory, ".react-router/types")] },
-        include: [
-          import_node_path.default.join(sourceDirectory, "**/*"),
-          import_node_path.default.join(projectRoot, "types/**/*"),
-          import_node_path.default.join(appDirectory, "*.tsx"),
-          import_node_path.default.join(rootDirectory, ".react-router/types/**/*")
-        ],
-        exclude: []
-      },
-      null,
-      2
-    )
+  try {
+    return await createServer({
+      root: framework.rootDirectory,
+      configFile: framework.viteConfig,
+      server: { middlewareMode: true, ws: { server, path: HMR_PATH } },
+      appType: "custom"
+    });
+  } finally {
+    for (const { source, event, listeners } of snapshots) {
+      for (const listener of source.listeners(event)) {
+        if (!listeners.has(listener)) source.removeListener(event, listener);
+      }
+    }
+  }
+}
+async function mountFrontend(frontend, { projectRoot, webapp, vite }) {
+  let build;
+  if (vite) {
+    const { isRunnableDevEnvironment } = await import("vite");
+    const environment = vite.environments.ssr;
+    if (!isRunnableDevEnvironment(environment)) throw new Error("React Router \u5F00\u53D1\u73AF\u5883\u672A\u5C31\u7EEA");
+    frontend.use(vite.middlewares);
+    build = async () => environment.runner.import("virtual:react-router/server-build");
+  } else {
+    const directory = getBuildDirectory(projectRoot, webapp);
+    const basename = webapp.basename || "/";
+    frontend.use(import_node_path4.default.posix.join(basename, "assets"), import_express2.default.static(import_node_path4.default.join(directory, "client/assets"), { immutable: true, maxAge: "1y", fallthrough: false }));
+    frontend.use(basename, import_express2.default.static(import_node_path4.default.join(directory, "client")));
+    if (webapp.renderMode === "client") {
+      frontend.get(
+        import_node_path4.default.posix.join(basename, "{*path}"),
+        /** SPA 深链接始终返回构建后的首页。 */
+        (_request, response) => response.sendFile(import_node_path4.default.join(directory, "client/index.html"))
+      );
+      return;
+    }
+    build = await import((0, import_node_url3.pathToFileURL)(import_node_path4.default.join(directory, "server/index.js")).href);
+  }
+  const { createRequestHandler } = await import("@react-router/express");
+  frontend.use(createRequestHandler({ build, mode: vite ? "development" : "production" }));
+}
+async function disposeApplication(application, { vite, upgrades }) {
+  const server = application?.server instanceof import_node_http.Server ? application.server : void 0;
+  const forced = setTimeout(
+    /** 生产关闭时中断超过等待上限的普通 HTTP 请求。 */
+    () => server?.closeAllConnections(),
+    SHUTDOWN_TIMEOUT
   );
-  return {
-    appDirectory,
-    rootDirectory,
-    viteConfig: import_node_path.default.resolve(frameworkDirectory, "vite.mjs"),
-    typeScriptConfig
-  };
-};
+  forced.unref();
+  try {
+    const drained = server?.listening ? server[Symbol.asyncDispose]() : void 0;
+    for (const socket of upgrades) socket.destroy();
+    const results = await Promise.allSettled([drained, vite?.close()]);
+    await application?.close?.();
+    const failure = results.find((result) => result.status === "rejected");
+    if (failure?.status === "rejected") throw failure.reason;
+  } finally {
+    clearTimeout(forced);
+  }
+}
+var import_node_events, import_promises, import_node_http, import_node_path4, import_node_url3, import_express2, NODE_OUTPUT, HMR_PATH, SHUTDOWN_TIMEOUT;
+var init_node = __esm({
+  "src/node.ts"() {
+    "use strict";
+    import_node_events = require("events");
+    import_promises = require("fs/promises");
+    import_node_http = require("http");
+    import_node_path4 = __toESM(require("path"));
+    import_node_url3 = require("url");
+    import_express2 = __toESM(require("express"));
+    init_config();
+    init_framework();
+    NODE_OUTPUT = "server/node.mjs";
+    HMR_PATH = "/_xfe/hmr";
+    SHUTDOWN_TIMEOUT = 3e4;
+  }
+});
+
+// src/cli.ts
+var import_node_child_process = require("child_process");
+var import_node_events2 = require("events");
+var import_node_fs4 = require("fs");
+var import_path = __toESM(require("path"));
+init_config();
+init_framework();
 
 // src/serve.ts
-var import_node_fs2 = require("fs");
-var import_node_path2 = __toESM(require("path"));
+var import_node_fs3 = require("fs");
+var import_node_path3 = __toESM(require("path"));
 var import_express = __toESM(require("express"));
 var serveClient = ({
   directory,
@@ -217,8 +468,8 @@ var serveClient = ({
   port,
   basename = "/"
 }) => {
-  const indexFile = import_node_path2.default.join(directory, "index.html");
-  if (!(0, import_node_fs2.existsSync)(indexFile)) throw new Error(`\u672A\u627E\u5230 SPA \u5165\u53E3 ${indexFile}\uFF0C\u8BF7\u5148\u6267\u884C xfe-web build`);
+  const indexFile = import_node_path3.default.join(directory, "index.html");
+  if (!(0, import_node_fs3.existsSync)(indexFile)) throw new Error(`\u672A\u627E\u5230 SPA \u5165\u53E3 ${indexFile}\uFF0C\u8BF7\u5148\u6267\u884C xfe-web build`);
   const app = (0, import_express.default)().disable("x-powered-by");
   const router = import_express.default.Router();
   app.use((_request, response, next) => {
@@ -227,7 +478,7 @@ var serveClient = ({
   });
   app.use(
     "/assets",
-    import_express.default.static(import_node_path2.default.join(directory, "assets"), { immutable: true, maxAge: "1y" }),
+    import_express.default.static(import_node_path3.default.join(directory, "assets"), { immutable: true, maxAge: "1y" }),
     (_request, response) => response.status(404).end()
   );
   app.use(import_express.default.static(directory));
@@ -243,33 +494,53 @@ var serveClient = ({
 
 // src/cli.ts
 var [command, ...args] = process.argv.slice(2);
-var resolveBin = (packageName) => import_path2.default.join(import_path2.default.dirname(require.resolve(`${packageName}/package.json`)), packageName === "typescript" ? "lib/tsc.js" : "bin.cjs");
-var run = (packageName, commandArgs, options = {}) => {
-  const result = (0, import_node_child_process.spawnSync)(process.execPath, [resolveBin(packageName), ...commandArgs], {
-    stdio: "inherit",
-    env: options.env,
-    cwd: options.cwd
-  });
-  if (result.error) throw result.error;
-  if (result.status !== 0) process.exit(result.status ?? 1);
-};
+var binaries = { typescript: "lib/tsc.js", tsx: "dist/cli.mjs" };
+var resolveBin = (packageName) => import_path.default.join(import_path.default.dirname(require.resolve(`${packageName}/package.json`)), binaries[packageName] || "bin.cjs");
+async function run(options) {
+  const { packageName, args: args2, cwd, env } = options;
+  const child = (0, import_node_child_process.spawn)(process.execPath, [resolveBin(packageName), ...args2], { stdio: "inherit", env, cwd });
+  let stopping = false;
+  const forward = (signal) => {
+    if (stopping) return;
+    stopping = true;
+    child.kill(signal);
+  };
+  process.on("SIGINT", forward);
+  process.on("SIGTERM", forward);
+  try {
+    const [code] = await (0, import_node_events2.once)(child, "exit");
+    if (code !== 0 && !stopping) throw new Error(`${packageName} ${args2[0]} \u5931\u8D25\uFF0C\u9000\u51FA\u7801 ${code ?? 1}`);
+  } finally {
+    process.off("SIGINT", forward);
+    process.off("SIGTERM", forward);
+  }
+}
 async function main() {
   const projectRoot = process.cwd();
   if (command === "config") return configDeploy();
   if (command === "start") {
-    const { webapp = {} } = loadXfeConfig(projectRoot);
-    if (webapp.renderMode === "client") {
+    const { webapp: webapp2 = {} } = loadXfeConfig(projectRoot);
+    const buildDirectory = getBuildDirectory(projectRoot, webapp2);
+    if (webapp2.serverEntry) {
+      if (args.length) throw new Error("\u81EA\u5B9A\u4E49 Node \u670D\u52A1\u8BF7\u901A\u8FC7 HOST / PORT \u6216 xfe.json \u914D\u7F6E\u542F\u52A8\u5730\u5740");
+      Object.assign(process.env, await getJwtEnv());
+      const { runNode: runNode2 } = await Promise.resolve().then(() => (init_node(), node_exports));
+      return runNode2({ projectRoot, webapp: webapp2 });
+    }
+    if (webapp2.renderMode === "client") {
       serveClient({
-        directory: import_path2.default.join(projectRoot, "build/client"),
-        host: process.env.HOST || webapp.host || "0.0.0.0",
-        port: Number(process.env.PORT ?? webapp.port ?? 3e3),
-        basename: webapp.basename
+        directory: import_path.default.join(buildDirectory, "client"),
+        host: process.env.HOST || webapp2.host || "0.0.0.0",
+        port: Number(process.env.PORT ?? webapp2.port ?? 3e3),
+        basename: webapp2.basename
       });
       return;
     }
     const rootDirectory = getFrameworkRoot(projectRoot);
-    (0, import_node_fs3.mkdirSync)(rootDirectory, { recursive: true });
-    return run("@react-router/serve", [import_path2.default.join(projectRoot, "build/server/index.js"), ...args], {
+    (0, import_node_fs4.mkdirSync)(rootDirectory, { recursive: true });
+    return run({
+      packageName: "@react-router/serve",
+      args: [import_path.default.join(buildDirectory, "server/index.js"), ...args],
       cwd: rootDirectory,
       env: { ...process.env, ...await getJwtEnv() }
     });
@@ -281,13 +552,41 @@ async function main() {
   const env = { ...process.env, XFE_WEB_ROOT: projectRoot };
   const options = { cwd: framework.rootDirectory, env };
   if (command === "typegen" || command === "typecheck") {
-    run("@react-router/dev", ["typegen", ...command === "typegen" ? args : []], options);
-    if (command === "typecheck") run("typescript", ["--noEmit", "--project", framework.typeScriptConfig, ...args]);
+    await run({ packageName: "@react-router/dev", args: ["typegen", ...command === "typegen" ? args : []], ...options });
+    if (command === "typecheck") await run({ packageName: "typescript", args: ["--noEmit", "--project", framework.typeScriptConfig, ...args] });
     return;
   }
   Object.assign(env, await getJwtEnv());
   if (command === "build") delete env.XFE_JWT_PRIVATE_KEY;
-  run("@react-router/dev", [command, framework.rootDirectory, "--config", framework.viteConfig, ...args], options);
+  const { webapp = {} } = loadXfeConfig(projectRoot);
+  if (command === "dev" && webapp.serverEntry) {
+    if (args.length) throw new Error("\u81EA\u5B9A\u4E49 Node \u670D\u52A1\u8BF7\u901A\u8FC7 HOST / PORT \u6216 xfe.json \u914D\u7F6E\u542F\u52A8\u5730\u5740");
+    return run({
+      packageName: "tsx",
+      args: [
+        "watch",
+        "--clear-screen=false",
+        "--exclude",
+        "**/node_modules/**",
+        "--exclude",
+        import_path.default.resolve(__dirname, "../node_modules/**"),
+        "--exclude",
+        import_path.default.resolve(__dirname, "../node_modules/.vite-temp/**"),
+        "--exclude",
+        import_path.default.join(projectRoot, "src/pages/**"),
+        "--include",
+        webapp.serverEntry,
+        import_path.default.join(__dirname, "node-dev.js")
+      ],
+      cwd: projectRoot,
+      env
+    });
+  }
+  await run({ packageName: "@react-router/dev", args: [command, framework.rootDirectory, "--config", framework.viteConfig, ...args], ...options });
+  if (webapp.serverEntry) {
+    const { buildNode: buildNode2 } = await Promise.resolve().then(() => (init_node(), node_exports));
+    await buildNode2({ projectRoot, webapp });
+  }
 }
 main().catch((err) => {
   console.error("XFE Web CLI \u6267\u884C\u51FA\u9519:", err);