nestjs-web-repl 2.1.3 → 2.2.0

package/dist/ui/monaco-assets.d.ts

@@ -0,0 +1,6 @@
+export declare function monacoVsDir(): string;
+export interface MonacoAsset {
+    buffer: Buffer;
+    contentType: string;
+}
+export declare function resolveMonacoFile(relPath: string): MonacoAsset | null;

package/dist/ui/monaco-assets.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.monacoVsDir = monacoVsDir;
+exports.resolveMonacoFile = resolveMonacoFile;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+// Resolve Monaco's `min/vs` directory. In a published install the build
+// step (scripts/copy-monaco.mjs) copied it next to this compiled module at
+// dist/ui/vs. When running from source (dev/test) that copy is absent, so
+// fall back to the monaco-editor devDependency resolved from node_modules.
+let cachedVsDir;
+function monacoVsDir() {
+    if (cachedVsDir)
+        return cachedVsDir;
+    const bundled = (0, node_path_1.join)(__dirname, 'vs');
+    cachedVsDir = (0, node_fs_1.existsSync)(bundled)
+        ? bundled
+        : (0, node_path_1.dirname)(require.resolve('monaco-editor/min/vs/loader.js'));
+    return cachedVsDir;
+}
+const MIME_BY_EXT = {
+    '.js': 'text/javascript',
+    '.css': 'text/css',
+    '.ttf': 'font/ttf',
+    '.map': 'application/json',
+};
+// Resolve one file under the vs root. Returns null for a miss, a directory,
+// OR any path that escapes the root -- the sole traversal guard for the
+// asset route. path.join neutralizes a leading "/" (absolute paths become
+// root-relative) and normalize collapses ".." so the startsWith check
+// reliably rejects escapes.
+function resolveMonacoFile(relPath) {
+    const root = monacoVsDir();
+    const full = (0, node_path_1.normalize)((0, node_path_1.join)(root, relPath));
+    if (full !== root && !full.startsWith(root + node_path_1.sep))
+        return null;
+    if (!(0, node_fs_1.existsSync)(full) || !(0, node_fs_1.statSync)(full).isFile())
+        return null;
+    const ext = (0, node_path_1.extname)(full).toLowerCase();
+    return {
+        buffer: (0, node_fs_1.readFileSync)(full),
+        contentType: MIME_BY_EXT[ext] ?? 'application/octet-stream',
+    };
+}

package/dist/ui/repl-ui.html.js

@@ -55,7 +55,7 @@ function renderReplUi(channel) {
   </div>
   <div id="editor"></div>
 </div>
-<script src="https://cdn.jsdelivr.net/npm/monaco-editor@0.52.0/min/vs/loader.js"></script>
+<script src="vs/loader.js"></script>
 <script>
   const channel = ${channelLiteral};
   const channelPath = encodeURIComponent(channel);
@@ -111,7 +111,7 @@ function renderReplUi(channel) {
   };
 
   let editor;
-  require.config({ paths: { vs: 'https://cdn.jsdelivr.net/npm/monaco-editor@0.52.0/min/vs' }});
+  require.config({ paths: { vs: new URL('vs', document.baseURI).href }});
   require(['vs/editor/editor.main'], function(){
     editor = monaco.editor.create(document.getElementById('editor'), {
       value: '', language: 'typescript', theme: 'vs-dark', minimap:{enabled:false}, automaticLayout:true