camstack 1.2.105 → 1.2.106

package/dist/cli.js

@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-P5VZSWZR.js");
+  await import("./launcher-3C6CQU54.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-P5VZSWZR.js");
+  await import("./launcher-3C6CQU54.js");
 }
 
 // src/commands/setup.ts

package/dist/{launcher-P5VZSWZR.js → launcher-3C6CQU54.js}

@@ -412781,8 +412781,8 @@ var require_session_cookie = __commonJS({
     function shouldRedirectToLogin(method, accept) {
       return method === "GET" && typeof accept === "string" && accept.includes("text/html");
     }
-    function loginRedirectUrl(originalUrl) {
-      return `/login?next=${encodeURIComponent(originalUrl)}`;
+    function loginRedirectUrl(originalUrl, mountPrefix = null) {
+      return `${mountPrefix ?? ""}/login?next=${encodeURIComponent(originalUrl)}`;
     }
     function isEmbedRedirectTarget(next) {
       if (!next.startsWith("/addon/stream-broker/embed/"))
@@ -413959,6 +413959,97 @@ var require_spa_static = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/static/spa-mount.js
+var require_spa_mount = __commonJS({
+  "../../server/backend/dist/api/static/spa-mount.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports && exports.__importStar || /* @__PURE__ */ (function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    })();
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.FORWARDED_PREFIX_HEADER = void 0;
+    exports.parseForwardedPrefix = parseForwardedPrefix;
+    exports.injectSpaMount = injectSpaMount;
+    exports.sendSpaShell = sendSpaShell;
+    var fs = __importStar(__require("fs/promises"));
+    var spa_static_1 = require_spa_static();
+    exports.FORWARDED_PREFIX_HEADER = "x-forwarded-prefix";
+    var FORWARDED_PREFIX_VARY = "X-Forwarded-Prefix";
+    var MOUNT_META_NAME = "camstack-mount";
+    var PREFIX_RE = /^\/[A-Za-z0-9_\-.]+(?:\/[A-Za-z0-9_\-.]+)*$/;
+    var MAX_PREFIX_LENGTH = 512;
+    function parseForwardedPrefix(value) {
+      if (typeof value !== "string")
+        return null;
+      if (value.length === 0 || value.length > MAX_PREFIX_LENGTH)
+        return null;
+      const trimmed = value.endsWith("/") ? value.slice(0, -1) : value;
+      if (trimmed === "")
+        return null;
+      if (!PREFIX_RE.test(trimmed))
+        return null;
+      if (trimmed.split("/").some((segment) => segment === ".." || segment === "."))
+        return null;
+      return trimmed;
+    }
+    function injectSpaMount(html, prefix) {
+      const match = /<head(?:\s[^>]*)?>/i.exec(html);
+      if (match === null)
+        return html;
+      const mount = `${prefix}/`;
+      const injected = `<base href="${mount}"><meta name="${MOUNT_META_NAME}" content="${mount}">`;
+      const at = match.index + match[0].length;
+      return `${html.slice(0, at)}${injected}${html.slice(at)}`;
+    }
+    async function sendSpaShell(reply, indexPath, headers) {
+      reply.header("cache-control", (0, spa_static_1.spaShellCacheControl)());
+      reply.header("vary", FORWARDED_PREFIX_VARY);
+      let html;
+      try {
+        html = await fs.readFile(indexPath, "utf8");
+      } catch {
+        return reply.status(503).send({ error: "Admin UI shell unavailable" });
+      }
+      const prefix = parseForwardedPrefix(headers[exports.FORWARDED_PREFIX_HEADER]);
+      return reply.type("text/html").send(prefix === null ? html : injectSpaMount(html, prefix));
+    }
+  }
+});
+
 // ../../server/backend/dist/boot/integration-id-backfill.js
 var require_integration_id_backfill = __commonJS({
   "../../server/backend/dist/boot/integration-id-backfill.js"(exports) {
@@ -429580,6 +429671,7 @@ var require_main4 = __commonJS({
     var sse_no_compression_js_1 = require_sse_no_compression();
     var precompressed_asset_js_1 = require_precompressed_asset();
     var spa_static_1 = require_spa_static();
+    var spa_mount_1 = require_spa_mount();
     var cap_providers_1 = require_cap_providers();
     var logging_settings_1 = require_logging_settings();
     var request_census_settings_1 = require_request_census_settings();
@@ -430207,7 +430299,7 @@ var require_main4 = __commonJS({
               return reply.status(404).send({ error: "Not found" });
             }
             if (method === "GET" && spaIndexHtml) {
-              return reply.header("cache-control", (0, spa_static_1.spaShellCacheControl)()).type("text/html").send(fs.createReadStream(spaIndexHtml));
+              return (0, spa_mount_1.sendSpaShell)(reply, spaIndexHtml, request.headers);
             }
             return reply.status(404).send({ error: "Not found" });
           }
@@ -430217,7 +430309,7 @@ var require_main4 = __commonJS({
             if (!authHeader && !cookieToken) {
               if ((0, session_cookie_js_1.shouldRedirectToLogin)(request.method, request.headers.accept)) {
                 const qs = request.url.includes("?") ? request.url.slice(request.url.indexOf("?")) : "";
-                return reply.redirect((0, session_cookie_js_1.loginRedirectUrl)(fullPath + qs));
+                return reply.redirect((0, session_cookie_js_1.loginRedirectUrl)(fullPath + qs, (0, spa_mount_1.parseForwardedPrefix)(request.headers["x-forwarded-prefix"])));
               }
               return reply.status(401).send({ error: "Unauthorized" });
             }
@@ -430419,7 +430511,7 @@ var require_main4 = __commonJS({
           return reply.status(503).send({ error: "Admin UI is starting" });
         }
         const pathOnly = url.split("?")[0] ?? url;
-        if (/\.[a-zA-Z0-9]+$/.test(pathOnly)) {
+        if (pathOnly !== "/index.html" && /\.[a-zA-Z0-9]+$/.test(pathOnly)) {
           const rel = pathOnly.replace(/^\/+/, "");
           const abs = path.join(staticDir, rel);
           if ((abs === staticDir || abs.startsWith(staticDir + path.sep)) && fs.existsSync(abs)) {
@@ -430428,8 +430520,7 @@ var require_main4 = __commonJS({
           }
           return reply.callNotFound();
         }
-        reply.header("cache-control", (0, spa_static_1.spaShellCacheControl)());
-        return reply.type("text/html").send(fs.createReadStream(indexPath));
+        return (0, spa_mount_1.sendSpaShell)(reply, indexPath, request.headers);
       });
       const resolveAdminUi = async () => {
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.105",
+  "version": "1.2.106",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",