vite 5.1.6 → 5.2.0-beta.1

package/dist/node/chunks/{dep-jvB8WLp9.js → dep-Zq4BZdyw.js}

@@ -13,6 +13,7 @@ import * as require$$0$2 from 'fs';
 import require$$0__default, { existsSync, readFileSync, statSync as statSync$1, readdirSync } from 'fs';
 import require$$0$5 from 'events';
 import require$$5 from 'assert';
+import { exec, execSync } from 'node:child_process';
 import { createServer as createServer$3, STATUS_CODES, get as get$2 } from 'node:http';
 import { createServer as createServer$2, get as get$1 } from 'node:https';
 import require$$0$6 from 'util';
@@ -23,10 +24,9 @@ import require$$0$7 from 'stream';
 import require$$2 from 'os';
 import require$$2$1 from 'child_process';
 import os$4 from 'node:os';
-import { exec } from 'node:child_process';
 import { createHash as createHash$2 } from 'node:crypto';
 import { promises } from 'node:dns';
-import require$$0$a from 'crypto';
+import require$$3$1 from 'crypto';
 import require$$0$8, { createRequire as createRequire$2 } from 'module';
 import assert$1 from 'node:assert';
 import v8 from 'node:v8';
@@ -36,11 +36,11 @@ import { EventEmitter as EventEmitter$4 } from 'node:events';
 import { parseAst, parseAstAsync } from 'rollup/parseAst';
 import * as qs from 'querystring';
 import readline from 'node:readline';
-import require$$0$b from 'zlib';
-import require$$0$c from 'buffer';
+import zlib$1 from 'zlib';
+import require$$0$a from 'buffer';
 import require$$1$1 from 'https';
 import require$$4$2 from 'tls';
-import zlib$1, { gzip } from 'node:zlib';
+import { gzip } from 'node:zlib';
 
 import { fileURLToPath as __cjs_fileURLToPath } from 'node:url';
 import { dirname as __cjs_dirname } from 'node:path';
@@ -10827,7 +10827,7 @@ function remapping(input, loader, options) {
 
 var src$2 = {exports: {}};
 
-var node$1 = {exports: {}};
+var browser$3 = {exports: {}};
 
 /**
  * Helpers.
@@ -11282,281 +11282,6 @@ function requireCommon () {
 	return common$b;
 }
 
-/**
- * Module dependencies.
- */
-
-var hasRequiredNode$1;
-
-function requireNode$1 () {
-	if (hasRequiredNode$1) return node$1.exports;
-	hasRequiredNode$1 = 1;
-	(function (module, exports) {
-		const tty = require$$0$3;
-		const util = require$$0$6;
-
-		/**
-		 * This is the Node.js implementation of `debug()`.
-		 */
-
-		exports.init = init;
-		exports.log = log;
-		exports.formatArgs = formatArgs;
-		exports.save = save;
-		exports.load = load;
-		exports.useColors = useColors;
-		exports.destroy = util.deprecate(
-			() => {},
-			'Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.'
-		);
-
-		/**
-		 * Colors.
-		 */
-
-		exports.colors = [6, 2, 3, 4, 5, 1];
-
-		try {
-			// Optional dependency (as in, doesn't need to be installed, NOT like optionalDependencies in package.json)
-			// eslint-disable-next-line import/no-extraneous-dependencies
-			const supportsColor = require('supports-color');
-
-			if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
-				exports.colors = [
-					20,
-					21,
-					26,
-					27,
-					32,
-					33,
-					38,
-					39,
-					40,
-					41,
-					42,
-					43,
-					44,
-					45,
-					56,
-					57,
-					62,
-					63,
-					68,
-					69,
-					74,
-					75,
-					76,
-					77,
-					78,
-					79,
-					80,
-					81,
-					92,
-					93,
-					98,
-					99,
-					112,
-					113,
-					128,
-					129,
-					134,
-					135,
-					148,
-					149,
-					160,
-					161,
-					162,
-					163,
-					164,
-					165,
-					166,
-					167,
-					168,
-					169,
-					170,
-					171,
-					172,
-					173,
-					178,
-					179,
-					184,
-					185,
-					196,
-					197,
-					198,
-					199,
-					200,
-					201,
-					202,
-					203,
-					204,
-					205,
-					206,
-					207,
-					208,
-					209,
-					214,
-					215,
-					220,
-					221
-				];
-			}
-		} catch (error) {
-			// Swallow - we only care if `supports-color` is available; it doesn't have to be.
-		}
-
-		/**
-		 * Build up the default `inspectOpts` object from the environment variables.
-		 *
-		 *   $ DEBUG_COLORS=no DEBUG_DEPTH=10 DEBUG_SHOW_HIDDEN=enabled node script.js
-		 */
-
-		exports.inspectOpts = Object.keys(process.env).filter(key => {
-			return /^debug_/i.test(key);
-		}).reduce((obj, key) => {
-			// Camel-case
-			const prop = key
-				.substring(6)
-				.toLowerCase()
-				.replace(/_([a-z])/g, (_, k) => {
-					return k.toUpperCase();
-				});
-
-			// Coerce string value into JS value
-			let val = process.env[key];
-			if (/^(yes|on|true|enabled)$/i.test(val)) {
-				val = true;
-			} else if (/^(no|off|false|disabled)$/i.test(val)) {
-				val = false;
-			} else if (val === 'null') {
-				val = null;
-			} else {
-				val = Number(val);
-			}
-
-			obj[prop] = val;
-			return obj;
-		}, {});
-
-		/**
-		 * Is stdout a TTY? Colored output is enabled when `true`.
-		 */
-
-		function useColors() {
-			return 'colors' in exports.inspectOpts ?
-				Boolean(exports.inspectOpts.colors) :
-				tty.isatty(process.stderr.fd);
-		}
-
-		/**
-		 * Adds ANSI color escape codes if enabled.
-		 *
-		 * @api public
-		 */
-
-		function formatArgs(args) {
-			const {namespace: name, useColors} = this;
-
-			if (useColors) {
-				const c = this.color;
-				const colorCode = '\u001B[3' + (c < 8 ? c : '8;5;' + c);
-				const prefix = `  ${colorCode};1m${name} \u001B[0m`;
-
-				args[0] = prefix + args[0].split('\n').join('\n' + prefix);
-				args.push(colorCode + 'm+' + module.exports.humanize(this.diff) + '\u001B[0m');
-			} else {
-				args[0] = getDate() + name + ' ' + args[0];
-			}
-		}
-
-		function getDate() {
-			if (exports.inspectOpts.hideDate) {
-				return '';
-			}
-			return new Date().toISOString() + ' ';
-		}
-
-		/**
-		 * Invokes `util.format()` with the specified arguments and writes to stderr.
-		 */
-
-		function log(...args) {
-			return process.stderr.write(util.format(...args) + '\n');
-		}
-
-		/**
-		 * Save `namespaces`.
-		 *
-		 * @param {String} namespaces
-		 * @api private
-		 */
-		function save(namespaces) {
-			if (namespaces) {
-				process.env.DEBUG = namespaces;
-			} else {
-				// If you set a process.env field to null or undefined, it gets cast to the
-				// string 'null' or 'undefined'. Just delete instead.
-				delete process.env.DEBUG;
-			}
-		}
-
-		/**
-		 * Load `namespaces`.
-		 *
-		 * @return {String} returns the previously persisted debug modes
-		 * @api private
-		 */
-
-		function load() {
-			return process.env.DEBUG;
-		}
-
-		/**
-		 * Init logic for `debug` instances.
-		 *
-		 * Create a new `inspectOpts` object in case `useColors` is set
-		 * differently for a particular `debug` instance.
-		 */
-
-		function init(debug) {
-			debug.inspectOpts = {};
-
-			const keys = Object.keys(exports.inspectOpts);
-			for (let i = 0; i < keys.length; i++) {
-				debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
-			}
-		}
-
-		module.exports = requireCommon()(exports);
-
-		const {formatters} = module.exports;
-
-		/**
-		 * Map %o to `util.inspect()`, all on a single line.
-		 */
-
-		formatters.o = function (v) {
-			this.inspectOpts.colors = this.useColors;
-			return util.inspect(v, this.inspectOpts)
-				.split('\n')
-				.map(str => str.trim())
-				.join(' ');
-		};
-
-		/**
-		 * Map %O to `util.inspect()`, allowing multiple lines if needed.
-		 */
-
-		formatters.O = function (v) {
-			this.inspectOpts.colors = this.useColors;
-			return util.inspect(v, this.inspectOpts);
-		}; 
-	} (node$1, node$1.exports));
-	return node$1.exports;
-}
-
-var browser$3 = {exports: {}};
-
 /* eslint-env browser */
 
 var hasRequiredBrowser$1;
@@ -11836,6 +11561,281 @@ function requireBrowser$1 () {
 	return browser$3.exports;
 }
 
+var node$1 = {exports: {}};
+
+/**
+ * Module dependencies.
+ */
+
+var hasRequiredNode$1;
+
+function requireNode$1 () {
+	if (hasRequiredNode$1) return node$1.exports;
+	hasRequiredNode$1 = 1;
+	(function (module, exports) {
+		const tty = require$$0$3;
+		const util = require$$0$6;
+
+		/**
+		 * This is the Node.js implementation of `debug()`.
+		 */
+
+		exports.init = init;
+		exports.log = log;
+		exports.formatArgs = formatArgs;
+		exports.save = save;
+		exports.load = load;
+		exports.useColors = useColors;
+		exports.destroy = util.deprecate(
+			() => {},
+			'Instance method `debug.destroy()` is deprecated and no longer does anything. It will be removed in the next major version of `debug`.'
+		);
+
+		/**
+		 * Colors.
+		 */
+
+		exports.colors = [6, 2, 3, 4, 5, 1];
+
+		try {
+			// Optional dependency (as in, doesn't need to be installed, NOT like optionalDependencies in package.json)
+			// eslint-disable-next-line import/no-extraneous-dependencies
+			const supportsColor = require('supports-color');
+
+			if (supportsColor && (supportsColor.stderr || supportsColor).level >= 2) {
+				exports.colors = [
+					20,
+					21,
+					26,
+					27,
+					32,
+					33,
+					38,
+					39,
+					40,
+					41,
+					42,
+					43,
+					44,
+					45,
+					56,
+					57,
+					62,
+					63,
+					68,
+					69,
+					74,
+					75,
+					76,
+					77,
+					78,
+					79,
+					80,
+					81,
+					92,
+					93,
+					98,
+					99,
+					112,
+					113,
+					128,
+					129,
+					134,
+					135,
+					148,
+					149,
+					160,
+					161,
+					162,
+					163,
+					164,
+					165,
+					166,
+					167,
+					168,
+					169,
+					170,
+					171,
+					172,
+					173,
+					178,
+					179,
+					184,
+					185,
+					196,
+					197,
+					198,
+					199,
+					200,
+					201,
+					202,
+					203,
+					204,
+					205,
+					206,
+					207,
+					208,
+					209,
+					214,
+					215,
+					220,
+					221
+				];
+			}
+		} catch (error) {
+			// Swallow - we only care if `supports-color` is available; it doesn't have to be.
+		}
+
+		/**
+		 * Build up the default `inspectOpts` object from the environment variables.
+		 *
+		 *   $ DEBUG_COLORS=no DEBUG_DEPTH=10 DEBUG_SHOW_HIDDEN=enabled node script.js
+		 */
+
+		exports.inspectOpts = Object.keys(process.env).filter(key => {
+			return /^debug_/i.test(key);
+		}).reduce((obj, key) => {
+			// Camel-case
+			const prop = key
+				.substring(6)
+				.toLowerCase()
+				.replace(/_([a-z])/g, (_, k) => {
+					return k.toUpperCase();
+				});
+
+			// Coerce string value into JS value
+			let val = process.env[key];
+			if (/^(yes|on|true|enabled)$/i.test(val)) {
+				val = true;
+			} else if (/^(no|off|false|disabled)$/i.test(val)) {
+				val = false;
+			} else if (val === 'null') {
+				val = null;
+			} else {
+				val = Number(val);
+			}
+
+			obj[prop] = val;
+			return obj;
+		}, {});
+
+		/**
+		 * Is stdout a TTY? Colored output is enabled when `true`.
+		 */
+
+		function useColors() {
+			return 'colors' in exports.inspectOpts ?
+				Boolean(exports.inspectOpts.colors) :
+				tty.isatty(process.stderr.fd);
+		}
+
+		/**
+		 * Adds ANSI color escape codes if enabled.
+		 *
+		 * @api public
+		 */
+
+		function formatArgs(args) {
+			const {namespace: name, useColors} = this;
+
+			if (useColors) {
+				const c = this.color;
+				const colorCode = '\u001B[3' + (c < 8 ? c : '8;5;' + c);
+				const prefix = `  ${colorCode};1m${name} \u001B[0m`;
+
+				args[0] = prefix + args[0].split('\n').join('\n' + prefix);
+				args.push(colorCode + 'm+' + module.exports.humanize(this.diff) + '\u001B[0m');
+			} else {
+				args[0] = getDate() + name + ' ' + args[0];
+			}
+		}
+
+		function getDate() {
+			if (exports.inspectOpts.hideDate) {
+				return '';
+			}
+			return new Date().toISOString() + ' ';
+		}
+
+		/**
+		 * Invokes `util.format()` with the specified arguments and writes to stderr.
+		 */
+
+		function log(...args) {
+			return process.stderr.write(util.format(...args) + '\n');
+		}
+
+		/**
+		 * Save `namespaces`.
+		 *
+		 * @param {String} namespaces
+		 * @api private
+		 */
+		function save(namespaces) {
+			if (namespaces) {
+				process.env.DEBUG = namespaces;
+			} else {
+				// If you set a process.env field to null or undefined, it gets cast to the
+				// string 'null' or 'undefined'. Just delete instead.
+				delete process.env.DEBUG;
+			}
+		}
+
+		/**
+		 * Load `namespaces`.
+		 *
+		 * @return {String} returns the previously persisted debug modes
+		 * @api private
+		 */
+
+		function load() {
+			return process.env.DEBUG;
+		}
+
+		/**
+		 * Init logic for `debug` instances.
+		 *
+		 * Create a new `inspectOpts` object in case `useColors` is set
+		 * differently for a particular `debug` instance.
+		 */
+
+		function init(debug) {
+			debug.inspectOpts = {};
+
+			const keys = Object.keys(exports.inspectOpts);
+			for (let i = 0; i < keys.length; i++) {
+				debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+			}
+		}
+
+		module.exports = requireCommon()(exports);
+
+		const {formatters} = module.exports;
+
+		/**
+		 * Map %o to `util.inspect()`, all on a single line.
+		 */
+
+		formatters.o = function (v) {
+			this.inspectOpts.colors = this.useColors;
+			return util.inspect(v, this.inspectOpts)
+				.split('\n')
+				.map(str => str.trim())
+				.join(' ');
+		};
+
+		/**
+		 * Map %O to `util.inspect()`, allowing multiple lines if needed.
+		 */
+
+		formatters.O = function (v) {
+			this.inspectOpts.colors = this.useColors;
+			return util.inspect(v, this.inspectOpts);
+		}; 
+	} (node$1, node$1.exports));
+	return node$1.exports;
+}
+
 /**
  * Detect Electron renderer / nwjs process, which is node, but we should
  * treat as a browser.
@@ -11858,7 +11858,7 @@ if (process.versions.pnp) {
     catch { }
 }
 function invalidatePackageData(packageCache, pkgPath) {
-    const pkgDir = path$o.dirname(pkgPath);
+    const pkgDir = normalizePath$3(path$o.dirname(pkgPath));
     packageCache.forEach((pkg, cacheKey) => {
         if (pkg.dir === pkgDir) {
             packageCache.delete(cacheKey);
@@ -11946,27 +11946,34 @@ function findNearestMainPackageData(basedir, packageCache) {
 }
 function loadPackageData(pkgPath) {
     const data = JSON.parse(fs$l.readFileSync(pkgPath, 'utf-8'));
-    const pkgDir = path$o.dirname(pkgPath);
+    const pkgDir = normalizePath$3(path$o.dirname(pkgPath));
     const { sideEffects } = data;
     let hasSideEffects;
     if (typeof sideEffects === 'boolean') {
         hasSideEffects = () => sideEffects;
     }
     else if (Array.isArray(sideEffects)) {
-        const finalPackageSideEffects = sideEffects.map((sideEffect) => {
-            /*
-             * The array accepts simple glob patterns to the relevant files... Patterns like *.css, which do not include a /, will be treated like **\/*.css.
-             * https://webpack.js.org/guides/tree-shaking/
-             * https://github.com/vitejs/vite/pull/11807
-             */
-            if (sideEffect.includes('/')) {
-                return sideEffect;
-            }
-            return `**/${sideEffect}`;
-        });
-        hasSideEffects = createFilter(finalPackageSideEffects, null, {
-            resolve: pkgDir,
-        });
+        if (sideEffects.length <= 0) {
+            // createFilter always returns true if `includes` is an empty array
+            // but here we want it to always return false
+            hasSideEffects = () => false;
+        }
+        else {
+            const finalPackageSideEffects = sideEffects.map((sideEffect) => {
+                /*
+                 * The array accepts simple glob patterns to the relevant files... Patterns like *.css, which do not include a /, will be treated like **\/*.css.
+                 * https://webpack.js.org/guides/tree-shaking/
+                 * https://github.com/vitejs/vite/pull/11807
+                 */
+                if (sideEffect.includes('/')) {
+                    return sideEffect;
+                }
+                return `**/${sideEffect}`;
+            });
+            hasSideEffects = createFilter(finalPackageSideEffects, null, {
+                resolve: pkgDir,
+            });
+        }
     }
     else {
         hasSideEffects = () => null;
@@ -12638,6 +12645,8 @@ function joinSrcset(ret) {
         .map(({ url, descriptor }) => url + (descriptor ? ` ${descriptor}` : ''))
         .join(', ');
 }
+// NOTE: The returned `url` should perhaps be decoded so all handled URLs within Vite are consistently decoded.
+// However, this may also require a refactor for `cssReplacer` to accept decoded URLs instead.
 function splitSrcSetDescriptor(srcs) {
     return splitSrcSet(srcs)
         .map((s) => {
@@ -13162,6 +13171,13 @@ function displayTime(time) {
     // display: {X}m {Y}s
     return `${mins}m${seconds < 1 ? '' : ` ${seconds.toFixed(0)}s`}`;
 }
+/**
+ * Like `encodeURI`, but only replacing `%` as `%25`. This is useful for environments
+ * that can handle un-encoded URIs, where `%` is the only ambiguous character.
+ */
+function partialEncodeURI(uri) {
+    return uri.replaceAll('%', '%25');
+}
 
 /* eslint no-console: 0 */
 const LogLevels = {
@@ -14607,6 +14623,13 @@ const debug$h = createDebugger('vite:esbuild');
 const IIFE_BEGIN_RE = /(const|var)\s+\S+\s*=\s*function\([^()]*\)\s*\{\s*"use strict";/;
 const validExtensionRE = /\.\w+$/;
 const jsxExtensionsRE = /\.(?:j|t)sx\b/;
+// the final build should always support dynamic import and import.meta.
+// if they need to be polyfilled, plugin-legacy should be used.
+// plugin-legacy detects these two features when checking for modern code.
+const defaultEsbuildSupported = {
+    'dynamic-import': true,
+    'import-meta': true,
+};
 let server;
 async function transformWithEsbuild(code, filename, options, inMap) {
     let loader = options?.loader;
@@ -14755,6 +14778,10 @@ function esbuildPlugin(config) {
         // Also transforming multiple times with keepNames enabled breaks
         // tree-shaking. (#9164)
         keepNames: false,
+        supported: {
+            ...defaultEsbuildSupported,
+            ...esbuildTransformOptions.supported,
+        },
     };
     return {
         name: 'vite:esbuild',
@@ -14860,12 +14887,8 @@ function resolveEsbuildTranspileOptions(config, format) {
         loader: 'js',
         target: target || undefined,
         format: rollupToEsbuildFormatMap[format],
-        // the final build should always support dynamic import and import.meta.
-        // if they need to be polyfilled, plugin-legacy should be used.
-        // plugin-legacy detects these two features when checking for modern code.
         supported: {
-            'dynamic-import': true,
-            'import-meta': true,
+            ...defaultEsbuildSupported,
             ...esbuildOptions.supported,
         },
     };
@@ -15281,7 +15304,7 @@ function terserPlugin(config) {
     };
 }
 
-const mimes$1 = {
+const mimes = {
   "3g2": "video/3gpp2",
   "3gp": "video/3gpp",
   "3gpp": "video/3gpp",
@@ -15721,7 +15744,7 @@ const mimes$1 = {
 function lookup(extn) {
 	let tmp = ('' + extn).trim().toLowerCase();
 	let idx = tmp.lastIndexOf('.');
-	return mimes$1[!~idx ? tmp : tmp.substring(++idx)];
+	return mimes[!~idx ? tmp : tmp.substring(++idx)];
 }
 
 const publicFilesMap = new WeakMap();
@@ -15774,11 +15797,11 @@ const generatedAssets = new WeakMap();
 // add own dictionary entry by directly assigning mrmime
 function registerCustomMime() {
     // https://github.com/lukeed/mrmime/issues/3
-    mimes$1['ico'] = 'image/x-icon';
+    mimes['ico'] = 'image/x-icon';
     // https://developer.mozilla.org/en-US/docs/Web/Media/Formats/Containers#flac
-    mimes$1['flac'] = 'audio/flac';
+    mimes['flac'] = 'audio/flac';
     // https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Common_types
-    mimes$1['eot'] = 'application/vnd.ms-fontobject';
+    mimes['eot'] = 'application/vnd.ms-fontobject';
 }
 function renderAssetUrlInJS(ctx, config, chunk, opts, code) {
     const toRelativeRuntime = createToImportMetaURLBasedRelativeRuntime(opts.format, config.isWorker);
@@ -15798,7 +15821,7 @@ function renderAssetUrlInJS(ctx, config, chunk, opts, code) {
         const filename = file + postfix;
         const replacement = toOutputFilePathInJS(filename, 'asset', chunk.fileName, 'js', config, toRelativeRuntime);
         const replacementString = typeof replacement === 'string'
-            ? JSON.stringify(replacement).slice(1, -1)
+            ? JSON.stringify(encodeURI(replacement)).slice(1, -1)
             : `"+${replacement.runtime}+"`;
         s.update(match.index, match.index + full.length, replacementString);
     }
@@ -15811,7 +15834,7 @@ function renderAssetUrlInJS(ctx, config, chunk, opts, code) {
         const publicUrl = publicAssetUrlMap.get(hash).slice(1);
         const replacement = toOutputFilePathInJS(publicUrl, 'public', chunk.fileName, 'js', config, toRelativeRuntime);
         const replacementString = typeof replacement === 'string'
-            ? JSON.stringify(replacement).slice(1, -1)
+            ? JSON.stringify(encodeURI(replacement)).slice(1, -1)
             : `"+${replacement.runtime}+"`;
         s.update(match.index, match.index + full.length, replacementString);
     }
@@ -15876,7 +15899,14 @@ function assetPlugin(config) {
                     url = injectQuery(url, `t=${mod.lastHMRTimestamp}`);
                 }
             }
-            return `export default ${JSON.stringify(url)}`;
+            return {
+                code: `export default ${JSON.stringify(url.startsWith('data:') ? url : encodeURI(url))}`,
+                // Force rollup to keep this module from being shared between other entry points if it's an entrypoint.
+                // If the resulting chunk is empty, it will be removed in generateBundle.
+                moduleSideEffects: config.command === 'build' && this.getModuleInfo(id)?.isEntry
+                    ? 'no-treeshake'
+                    : false,
+            };
         },
         renderChunk(code, chunk, opts) {
             const s = renderAssetUrlInJS(this, config, chunk, opts, code);
@@ -15893,6 +15923,16 @@ function assetPlugin(config) {
             }
         },
         generateBundle(_, bundle) {
+            // Remove empty entry point file
+            for (const file in bundle) {
+                const chunk = bundle[file];
+                if (chunk.type === 'chunk' &&
+                    chunk.isEntry &&
+                    chunk.moduleIds.length === 1 &&
+                    config.assetsInclude(chunk.moduleIds[0])) {
+                    delete bundle[file];
+                }
+            }
             // do not emit assets for SSR build
             if (config.command === 'build' &&
                 config.build.ssr &&
@@ -15978,7 +16018,7 @@ async function fileToBuiltUrl(id, config, pluginContext, skipPublicCheck = false
     const file = cleanUrl(id);
     const content = await fsp.readFile(file);
     let url;
-    if (shouldInline(config, file, id, content, forceInline)) {
+    if (shouldInline(config, file, id, content, pluginContext, forceInline)) {
         if (config.build.lib && isGitLfsPlaceholder(content)) {
             config.logger.warn(colors$1.yellow(`Inlined file ${id} was not downloaded via Git LFS`));
         }
@@ -16019,9 +16059,11 @@ async function urlToBuiltUrl(url, importer, config, pluginContext, forceInline)
     // skip public check since we just did it above
     true, forceInline);
 }
-const shouldInline = (config, file, id, content, forceInline) => {
+const shouldInline = (config, file, id, content, pluginContext, forceInline) => {
     if (config.build.lib)
         return true;
+    if (pluginContext.getModuleInfo(id)?.isEntry)
+        return false;
     if (forceInline !== undefined)
         return forceInline;
     let limit;
@@ -16095,6 +16137,7 @@ function manifestPlugin(config) {
             function createChunk(chunk) {
                 const manifestChunk = {
                     file: chunk.fileName,
+                    name: chunk.name,
                 };
                 if (chunk.facadeModuleId) {
                     manifestChunk.src = getChunkName(chunk);
@@ -19877,8 +19920,8 @@ function fastqueue (context, worker, concurrency) {
 
   var self = {
     push: push,
-    drain: noop$4,
-    saturated: noop$4,
+    drain: noop$3,
+    saturated: noop$3,
     pause: pause,
     paused: false,
     concurrency: concurrency,
@@ -19888,7 +19931,7 @@ function fastqueue (context, worker, concurrency) {
     length: length,
     getQueue: getQueue,
     unshift: unshift,
-    empty: noop$4,
+    empty: noop$3,
     kill: kill,
     killAndDrain: killAndDrain,
     error: error
@@ -19947,7 +19990,7 @@ function fastqueue (context, worker, concurrency) {
     current.context = context;
     current.release = release;
     current.value = value;
-    current.callback = done || noop$4;
+    current.callback = done || noop$3;
     current.errorHandler = errorHandler;
 
     if (_running === self.concurrency || self.paused) {
@@ -19971,7 +20014,7 @@ function fastqueue (context, worker, concurrency) {
     current.context = context;
     current.release = release;
     current.value = value;
-    current.callback = done || noop$4;
+    current.callback = done || noop$3;
 
     if (_running === self.concurrency || self.paused) {
       if (queueHead) {
@@ -20015,14 +20058,14 @@ function fastqueue (context, worker, concurrency) {
   function kill () {
     queueHead = null;
     queueTail = null;
-    self.drain = noop$4;
+    self.drain = noop$3;
   }
 
   function killAndDrain () {
     queueHead = null;
     queueTail = null;
     self.drain();
-    self.drain = noop$4;
+    self.drain = noop$3;
   }
 
   function error (handler) {
@@ -20030,13 +20073,13 @@ function fastqueue (context, worker, concurrency) {
   }
 }
 
-function noop$4 () {}
+function noop$3 () {}
 
 function Task () {
   this.value = null;
-  this.callback = noop$4;
+  this.callback = noop$3;
   this.next = null;
-  this.release = noop$4;
+  this.release = noop$3;
   this.context = null;
   this.errorHandler = null;
 
@@ -20047,7 +20090,7 @@ function Task () {
     var errorHandler = self.errorHandler;
     var val = self.value;
     self.value = null;
-    self.callback = noop$4;
+    self.callback = noop$3;
     if (self.errorHandler) {
       errorHandler(err, val);
     }
@@ -20095,7 +20138,7 @@ function queueAsPromised (context, worker, concurrency) {
     // Let's fork the promise chain to
     // make the error bubble up to the user but
     // not lead to a unhandledRejection
-    p.catch(noop$4);
+    p.catch(noop$3);
 
     return p
   }
@@ -20114,7 +20157,7 @@ function queueAsPromised (context, worker, concurrency) {
     // Let's fork the promise chain to
     // make the error bubble up to the user but
     // not lead to a unhandledRejection
-    p.catch(noop$4);
+    p.catch(noop$3);
 
     return p
   }
@@ -29760,7 +29803,7 @@ var require$$4 = {
 const fs$9 = require$$0__default;
 const path$9 = require$$0$4;
 const os$2 = require$$2;
-const crypto$1 = require$$0$a;
+const crypto$1 = require$$3$1;
 const packageJson = require$$4;
 
 const version$1 = packageJson.version;
@@ -30428,7 +30471,7 @@ function traverseNodes(node, visitor) {
 }
 async function traverseHtml(html, filePath, visitor) {
     // lazy load compiler
-    const { parse } = await import('./dep-kjUoH5nk.js');
+    const { parse } = await import('./dep-CrWVpuYf.js');
     const ast = parse(html, {
         scriptingEnabled: false,
         sourceCodeLocationInfo: true,
@@ -30516,8 +30559,10 @@ function handleParseError(parserError, html, filePath) {
  */
 function buildHtmlPlugin(config) {
     const [preHooks, normalHooks, postHooks] = resolveHtmlTransforms(config.plugins, config.logger);
+    preHooks.unshift(injectCspNonceMetaTagHook(config));
     preHooks.unshift(preImportMapHook(config));
     preHooks.push(htmlEnvHook(config));
+    postHooks.push(injectNonceAttributeTagHook(config));
     postHooks.push(postImportMapHook());
     const processedHtml = new Map();
     const isExcludedUrl = (url) => url[0] === '#' || isExternalUrl(url) || isDataUrl(url);
@@ -30610,7 +30655,7 @@ function buildHtmlPlugin(config) {
                         const isPublicFile = !!(url && checkPublicFile(url, config));
                         if (isPublicFile) {
                             // referencing public dir url, prefix with base
-                            overwriteAttrValue(s, sourceCodeLocation, toOutputPublicFilePath(url));
+                            overwriteAttrValue(s, sourceCodeLocation, partialEncodeURI(toOutputPublicFilePath(url)));
                         }
                         if (isModule) {
                             inlineModuleIndex++;
@@ -30654,23 +30699,25 @@ function buildHtmlPlugin(config) {
                             if (p.value && assetAttrs.includes(attrKey)) {
                                 if (attrKey === 'srcset') {
                                     assetUrlsPromises.push((async () => {
-                                        const processedUrl = await processSrcSet(p.value, async ({ url }) => {
+                                        const processedEncodedUrl = await processSrcSet(p.value, async ({ url }) => {
                                             const decodedUrl = decodeURI(url);
                                             if (!isExcludedUrl(decodedUrl)) {
                                                 const result = await processAssetUrl(url);
-                                                return result !== decodedUrl ? result : url;
+                                                return result !== decodedUrl
+                                                    ? encodeURI(result)
+                                                    : url;
                                             }
                                             return url;
                                         });
-                                        if (processedUrl !== p.value) {
-                                            overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), processedUrl);
+                                        if (processedEncodedUrl !== p.value) {
+                                            overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), processedEncodedUrl);
                                         }
                                     })());
                                 }
                                 else {
                                     const url = decodeURI(p.value);
                                     if (checkPublicFile(url, config)) {
-                                        overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), toOutputPublicFilePath(url));
+                                        overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), partialEncodeURI(toOutputPublicFilePath(url)));
                                     }
                                     else if (!isExcludedUrl(url)) {
                                         if (node.nodeName === 'link' &&
@@ -30692,14 +30739,12 @@ function buildHtmlPlugin(config) {
                                             // to `false` to force no inline. If `undefined`, it leaves to the default heuristics.
                                             const isNoInlineLink = node.nodeName === 'link' &&
                                                 node.attrs.some((p) => p.name === 'rel' &&
-                                                    p.value
-                                                        .split(spaceRe)
-                                                        .some((v) => noInlineLinkRels.has(v.toLowerCase())));
+                                                    parseRelAttr(p.value).some((v) => noInlineLinkRels.has(v)));
                                             const shouldInline = isNoInlineLink ? false : undefined;
                                             assetUrlsPromises.push((async () => {
                                                 const processedUrl = await processAssetUrl(url, shouldInline);
                                                 if (processedUrl !== url) {
-                                                    overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), processedUrl);
+                                                    overwriteAttrValue(s, getAttrSourceCodeLocation(node, attrKey), partialEncodeURI(processedUrl));
                                                 }
                                             })());
                                         }
@@ -30749,10 +30794,10 @@ function buildHtmlPlugin(config) {
                 // emit <script>import("./aaa")</script> asset
                 for (const { start, end, url } of scriptUrls) {
                     if (checkPublicFile(url, config)) {
-                        s.update(start, end, toOutputPublicFilePath(url));
+                        s.update(start, end, partialEncodeURI(toOutputPublicFilePath(url)));
                     }
                     else if (!isExcludedUrl(url)) {
-                        s.update(start, end, await urlToBuiltUrl(url, id, config, this));
+                        s.update(start, end, partialEncodeURI(await urlToBuiltUrl(url, id, config, this)));
                     }
                 }
                 // ignore <link rel="stylesheet"> if its url can't be resolved
@@ -30943,13 +30988,13 @@ function buildHtmlPlugin(config) {
                     if (chunk) {
                         chunk.viteMetadata.importedAssets.add(cleanUrl(file));
                     }
-                    return toOutputAssetFilePath(file) + postfix;
+                    return encodeURI(toOutputAssetFilePath(file)) + postfix;
                 });
                 result = result.replace(publicAssetUrlRE, (_, fileHash) => {
                     const publicAssetPath = toOutputPublicAssetFilePath(getPublicAssetFilename(fileHash, config));
-                    return urlCanParse(publicAssetPath)
+                    return encodeURI(urlCanParse(publicAssetPath)
                         ? publicAssetPath
-                        : normalizePath$3(publicAssetPath);
+                        : normalizePath$3(publicAssetPath));
                 });
                 if (chunk && canInlineEntry) {
                     inlineEntryChunk.add(chunk.fileName);
@@ -30968,6 +31013,9 @@ function buildHtmlPlugin(config) {
         },
     };
 }
+function parseRelAttr(attr) {
+    return attr.split(spaceRe).map((v) => v.toLowerCase());
+}
 // <tag style="... url(...) or image-set(...) ..."></tag>
 // extract inline styles as virtual css
 function findNeedTransformStyleAttribute(node) {
@@ -31030,6 +31078,21 @@ function postImportMapHook() {
         return html;
     };
 }
+function injectCspNonceMetaTagHook(config) {
+    return () => {
+        if (!config.html?.cspNonce)
+            return;
+        return [
+            {
+                tag: 'meta',
+                injectTo: 'head',
+                // use nonce attribute so that it's hidden
+                // https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/nonce#accessing_nonces_and_nonce_hiding
+                attrs: { property: 'csp-nonce', nonce: config.html.cspNonce },
+            },
+        ];
+    };
+}
 /**
  * Support `%ENV_NAME%` syntax in html files
  */
@@ -31071,6 +31134,27 @@ function htmlEnvHook(config) {
         });
     };
 }
+function injectNonceAttributeTagHook(config) {
+    const processRelType = new Set(['stylesheet', 'modulepreload', 'preload']);
+    return async (html, { filename }) => {
+        const nonce = config.html?.cspNonce;
+        if (!nonce)
+            return;
+        const s = new MagicString(html);
+        await traverseHtml(html, filename, (node) => {
+            if (!nodeIsElement(node)) {
+                return;
+            }
+            if (node.nodeName === 'script' ||
+                (node.nodeName === 'link' &&
+                    node.attrs.some((attr) => attr.name === 'rel' &&
+                        parseRelAttr(attr.value).some((a) => processRelType.has(a))))) {
+                s.appendRight(node.sourceCodeLocation.startTag.endOffset - 1, ` nonce="${nonce}"`);
+            }
+        });
+        return s.toString();
+    };
+}
 function resolveHtmlTransforms(plugins, logger) {
     const preHooks = [];
     const normalHooks = [];
@@ -31539,7 +31623,7 @@ function cssPostPlugin(config) {
                 map: { mappings: '' },
                 // avoid the css module from being tree-shaken so that we can retrieve
                 // it in renderChunk()
-                moduleSideEffects: inlined ? false : 'no-treeshake',
+                moduleSideEffects: modulesCode || inlined ? false : 'no-treeshake',
             };
         },
         async renderChunk(code, chunk, opts) {
@@ -31581,14 +31665,14 @@ function cssPostPlugin(config) {
                 chunkCSS = chunkCSS.replace(assetUrlRE, (_, fileHash, postfix = '') => {
                     const filename = this.getFileName(fileHash) + postfix;
                     chunk.viteMetadata.importedAssets.add(cleanUrl(filename));
-                    return toOutputFilePathInCss(filename, 'asset', cssAssetName, 'css', config, toRelative);
+                    return encodeURI(toOutputFilePathInCss(filename, 'asset', cssAssetName, 'css', config, toRelative));
                 });
                 // resolve public URL from CSS paths
                 if (encodedPublicUrls) {
                     const relativePathToPublicFromCSS = path$o.posix.relative(cssAssetDirname, '');
                     chunkCSS = chunkCSS.replace(publicAssetUrlRE, (_, hash) => {
                         const publicUrl = publicAssetUrlMap.get(hash).slice(1);
-                        return toOutputFilePathInCss(publicUrl, 'public', cssAssetName, 'css', config, () => `${relativePathToPublicFromCSS}/${publicUrl}`);
+                        return encodeURI(toOutputFilePathInCss(publicUrl, 'public', cssAssetName, 'css', config, () => `${relativePathToPublicFromCSS}/${publicUrl}`));
                     });
                 }
                 return chunkCSS;
@@ -31639,7 +31723,7 @@ function cssPostPlugin(config) {
                         .set(referenceId, { originalName: originalFilename });
                     const replacement = toOutputFilePathInJS(this.getFileName(referenceId), 'asset', chunk.fileName, 'js', config, toRelativeRuntime);
                     const replacementString = typeof replacement === 'string'
-                        ? JSON.stringify(replacement).slice(1, -1)
+                        ? JSON.stringify(encodeURI(replacement)).slice(1, -1)
                         : `"+${replacement.runtime}+"`;
                     s.update(start, end, replacementString);
                 }
@@ -32173,8 +32257,8 @@ function createCachedImport(imp) {
         return cached;
     };
 }
-const importPostcssImport = createCachedImport(() => import('./dep-sFlFG1c_.js').then(function (n) { return n.i; }));
-const importPostcssModules = createCachedImport(() => import('./dep-pxQDj-UY.js').then(function (n) { return n.i; }));
+const importPostcssImport = createCachedImport(() => import('./dep-Q9IC80br.js').then(function (n) { return n.i; }));
+const importPostcssModules = createCachedImport(() => import('./dep-BC11CTkQ.js').then(function (n) { return n.i; }));
 const importPostcss = createCachedImport(() => import('postcss'));
 const preprocessorWorkerControllerCache = new WeakMap();
 let alwaysFakeWorkerWorkerControllerCache;
@@ -40470,7 +40554,7 @@ function isVirtualModule(id) {
 
 var src = {exports: {}};
 
-var node = {exports: {}};
+var browser = {exports: {}};
 
 var debug$f = {exports: {}};
 
@@ -40846,266 +40930,6 @@ function requireDebug () {
 	return debug$f.exports;
 }
 
-/**
- * Module dependencies.
- */
-
-var hasRequiredNode;
-
-function requireNode () {
-	if (hasRequiredNode) return node.exports;
-	hasRequiredNode = 1;
-	(function (module, exports) {
-		var tty = require$$0$3;
-		var util = require$$0$6;
-
-		/**
-		 * This is the Node.js implementation of `debug()`.
-		 *
-		 * Expose `debug()` as the module.
-		 */
-
-		exports = module.exports = requireDebug();
-		exports.init = init;
-		exports.log = log;
-		exports.formatArgs = formatArgs;
-		exports.save = save;
-		exports.load = load;
-		exports.useColors = useColors;
-
-		/**
-		 * Colors.
-		 */
-
-		exports.colors = [6, 2, 3, 4, 5, 1];
-
-		/**
-		 * Build up the default `inspectOpts` object from the environment variables.
-		 *
-		 *   $ DEBUG_COLORS=no DEBUG_DEPTH=10 DEBUG_SHOW_HIDDEN=enabled node script.js
-		 */
-
-		exports.inspectOpts = Object.keys(process.env).filter(function (key) {
-		  return /^debug_/i.test(key);
-		}).reduce(function (obj, key) {
-		  // camel-case
-		  var prop = key
-		    .substring(6)
-		    .toLowerCase()
-		    .replace(/_([a-z])/g, function (_, k) { return k.toUpperCase() });
-
-		  // coerce string value into JS value
-		  var val = process.env[key];
-		  if (/^(yes|on|true|enabled)$/i.test(val)) val = true;
-		  else if (/^(no|off|false|disabled)$/i.test(val)) val = false;
-		  else if (val === 'null') val = null;
-		  else val = Number(val);
-
-		  obj[prop] = val;
-		  return obj;
-		}, {});
-
-		/**
-		 * The file descriptor to write the `debug()` calls to.
-		 * Set the `DEBUG_FD` env variable to override with another value. i.e.:
-		 *
-		 *   $ DEBUG_FD=3 node script.js 3>debug.log
-		 */
-
-		var fd = parseInt(process.env.DEBUG_FD, 10) || 2;
-
-		if (1 !== fd && 2 !== fd) {
-		  util.deprecate(function(){}, 'except for stderr(2) and stdout(1), any other usage of DEBUG_FD is deprecated. Override debug.log if you want to use a different log function (https://git.io/debug_fd)')();
-		}
-
-		var stream = 1 === fd ? process.stdout :
-		             2 === fd ? process.stderr :
-		             createWritableStdioStream(fd);
-
-		/**
-		 * Is stdout a TTY? Colored output is enabled when `true`.
-		 */
-
-		function useColors() {
-		  return 'colors' in exports.inspectOpts
-		    ? Boolean(exports.inspectOpts.colors)
-		    : tty.isatty(fd);
-		}
-
-		/**
-		 * Map %o to `util.inspect()`, all on a single line.
-		 */
-
-		exports.formatters.o = function(v) {
-		  this.inspectOpts.colors = this.useColors;
-		  return util.inspect(v, this.inspectOpts)
-		    .split('\n').map(function(str) {
-		      return str.trim()
-		    }).join(' ');
-		};
-
-		/**
-		 * Map %o to `util.inspect()`, allowing multiple lines if needed.
-		 */
-
-		exports.formatters.O = function(v) {
-		  this.inspectOpts.colors = this.useColors;
-		  return util.inspect(v, this.inspectOpts);
-		};
-
-		/**
-		 * Adds ANSI color escape codes if enabled.
-		 *
-		 * @api public
-		 */
-
-		function formatArgs(args) {
-		  var name = this.namespace;
-		  var useColors = this.useColors;
-
-		  if (useColors) {
-		    var c = this.color;
-		    var prefix = '  \u001b[3' + c + ';1m' + name + ' ' + '\u001b[0m';
-
-		    args[0] = prefix + args[0].split('\n').join('\n' + prefix);
-		    args.push('\u001b[3' + c + 'm+' + exports.humanize(this.diff) + '\u001b[0m');
-		  } else {
-		    args[0] = new Date().toUTCString()
-		      + ' ' + name + ' ' + args[0];
-		  }
-		}
-
-		/**
-		 * Invokes `util.format()` with the specified arguments and writes to `stream`.
-		 */
-
-		function log() {
-		  return stream.write(util.format.apply(util, arguments) + '\n');
-		}
-
-		/**
-		 * Save `namespaces`.
-		 *
-		 * @param {String} namespaces
-		 * @api private
-		 */
-
-		function save(namespaces) {
-		  if (null == namespaces) {
-		    // If you set a process.env field to null or undefined, it gets cast to the
-		    // string 'null' or 'undefined'. Just delete instead.
-		    delete process.env.DEBUG;
-		  } else {
-		    process.env.DEBUG = namespaces;
-		  }
-		}
-
-		/**
-		 * Load `namespaces`.
-		 *
-		 * @return {String} returns the previously persisted debug modes
-		 * @api private
-		 */
-
-		function load() {
-		  return process.env.DEBUG;
-		}
-
-		/**
-		 * Copied from `node/src/node.js`.
-		 *
-		 * XXX: It's lame that node doesn't expose this API out-of-the-box. It also
-		 * relies on the undocumented `tty_wrap.guessHandleType()` which is also lame.
-		 */
-
-		function createWritableStdioStream (fd) {
-		  var stream;
-		  var tty_wrap = process.binding('tty_wrap');
-
-		  // Note stream._type is used for test-module-load-list.js
-
-		  switch (tty_wrap.guessHandleType(fd)) {
-		    case 'TTY':
-		      stream = new tty.WriteStream(fd);
-		      stream._type = 'tty';
-
-		      // Hack to have stream not keep the event loop alive.
-		      // See https://github.com/joyent/node/issues/1726
-		      if (stream._handle && stream._handle.unref) {
-		        stream._handle.unref();
-		      }
-		      break;
-
-		    case 'FILE':
-		      var fs = require$$0__default;
-		      stream = new fs.SyncWriteStream(fd, { autoClose: false });
-		      stream._type = 'fs';
-		      break;
-
-		    case 'PIPE':
-		    case 'TCP':
-		      var net = require$$4$1;
-		      stream = new net.Socket({
-		        fd: fd,
-		        readable: false,
-		        writable: true
-		      });
-
-		      // FIXME Should probably have an option in net.Socket to create a
-		      // stream from an existing fd which is writable only. But for now
-		      // we'll just add this hack and set the `readable` member to false.
-		      // Test: ./node test/fixtures/echo.js < /etc/passwd
-		      stream.readable = false;
-		      stream.read = null;
-		      stream._type = 'pipe';
-
-		      // FIXME Hack to have stream not keep the event loop alive.
-		      // See https://github.com/joyent/node/issues/1726
-		      if (stream._handle && stream._handle.unref) {
-		        stream._handle.unref();
-		      }
-		      break;
-
-		    default:
-		      // Probably an error on in uv_guess_handle()
-		      throw new Error('Implement me. Unknown stream file type!');
-		  }
-
-		  // For supporting legacy API we put the FD here.
-		  stream.fd = fd;
-
-		  stream._isStdio = true;
-
-		  return stream;
-		}
-
-		/**
-		 * Init logic for `debug` instances.
-		 *
-		 * Create a new `inspectOpts` object in case `useColors` is set
-		 * differently for a particular `debug` instance.
-		 */
-
-		function init (debug) {
-		  debug.inspectOpts = {};
-
-		  var keys = Object.keys(exports.inspectOpts);
-		  for (var i = 0; i < keys.length; i++) {
-		    debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
-		  }
-		}
-
-		/**
-		 * Enable namespaces listed in `process.env.DEBUG` initially.
-		 */
-
-		exports.enable(load()); 
-	} (node, node.exports));
-	return node.exports;
-}
-
-var browser = {exports: {}};
-
 /**
  * This is the web browser implementation of `debug()`.
  *
@@ -41301,6 +41125,266 @@ function requireBrowser () {
 	return browser.exports;
 }
 
+var node = {exports: {}};
+
+/**
+ * Module dependencies.
+ */
+
+var hasRequiredNode;
+
+function requireNode () {
+	if (hasRequiredNode) return node.exports;
+	hasRequiredNode = 1;
+	(function (module, exports) {
+		var tty = require$$0$3;
+		var util = require$$0$6;
+
+		/**
+		 * This is the Node.js implementation of `debug()`.
+		 *
+		 * Expose `debug()` as the module.
+		 */
+
+		exports = module.exports = requireDebug();
+		exports.init = init;
+		exports.log = log;
+		exports.formatArgs = formatArgs;
+		exports.save = save;
+		exports.load = load;
+		exports.useColors = useColors;
+
+		/**
+		 * Colors.
+		 */
+
+		exports.colors = [6, 2, 3, 4, 5, 1];
+
+		/**
+		 * Build up the default `inspectOpts` object from the environment variables.
+		 *
+		 *   $ DEBUG_COLORS=no DEBUG_DEPTH=10 DEBUG_SHOW_HIDDEN=enabled node script.js
+		 */
+
+		exports.inspectOpts = Object.keys(process.env).filter(function (key) {
+		  return /^debug_/i.test(key);
+		}).reduce(function (obj, key) {
+		  // camel-case
+		  var prop = key
+		    .substring(6)
+		    .toLowerCase()
+		    .replace(/_([a-z])/g, function (_, k) { return k.toUpperCase() });
+
+		  // coerce string value into JS value
+		  var val = process.env[key];
+		  if (/^(yes|on|true|enabled)$/i.test(val)) val = true;
+		  else if (/^(no|off|false|disabled)$/i.test(val)) val = false;
+		  else if (val === 'null') val = null;
+		  else val = Number(val);
+
+		  obj[prop] = val;
+		  return obj;
+		}, {});
+
+		/**
+		 * The file descriptor to write the `debug()` calls to.
+		 * Set the `DEBUG_FD` env variable to override with another value. i.e.:
+		 *
+		 *   $ DEBUG_FD=3 node script.js 3>debug.log
+		 */
+
+		var fd = parseInt(process.env.DEBUG_FD, 10) || 2;
+
+		if (1 !== fd && 2 !== fd) {
+		  util.deprecate(function(){}, 'except for stderr(2) and stdout(1), any other usage of DEBUG_FD is deprecated. Override debug.log if you want to use a different log function (https://git.io/debug_fd)')();
+		}
+
+		var stream = 1 === fd ? process.stdout :
+		             2 === fd ? process.stderr :
+		             createWritableStdioStream(fd);
+
+		/**
+		 * Is stdout a TTY? Colored output is enabled when `true`.
+		 */
+
+		function useColors() {
+		  return 'colors' in exports.inspectOpts
+		    ? Boolean(exports.inspectOpts.colors)
+		    : tty.isatty(fd);
+		}
+
+		/**
+		 * Map %o to `util.inspect()`, all on a single line.
+		 */
+
+		exports.formatters.o = function(v) {
+		  this.inspectOpts.colors = this.useColors;
+		  return util.inspect(v, this.inspectOpts)
+		    .split('\n').map(function(str) {
+		      return str.trim()
+		    }).join(' ');
+		};
+
+		/**
+		 * Map %o to `util.inspect()`, allowing multiple lines if needed.
+		 */
+
+		exports.formatters.O = function(v) {
+		  this.inspectOpts.colors = this.useColors;
+		  return util.inspect(v, this.inspectOpts);
+		};
+
+		/**
+		 * Adds ANSI color escape codes if enabled.
+		 *
+		 * @api public
+		 */
+
+		function formatArgs(args) {
+		  var name = this.namespace;
+		  var useColors = this.useColors;
+
+		  if (useColors) {
+		    var c = this.color;
+		    var prefix = '  \u001b[3' + c + ';1m' + name + ' ' + '\u001b[0m';
+
+		    args[0] = prefix + args[0].split('\n').join('\n' + prefix);
+		    args.push('\u001b[3' + c + 'm+' + exports.humanize(this.diff) + '\u001b[0m');
+		  } else {
+		    args[0] = new Date().toUTCString()
+		      + ' ' + name + ' ' + args[0];
+		  }
+		}
+
+		/**
+		 * Invokes `util.format()` with the specified arguments and writes to `stream`.
+		 */
+
+		function log() {
+		  return stream.write(util.format.apply(util, arguments) + '\n');
+		}
+
+		/**
+		 * Save `namespaces`.
+		 *
+		 * @param {String} namespaces
+		 * @api private
+		 */
+
+		function save(namespaces) {
+		  if (null == namespaces) {
+		    // If you set a process.env field to null or undefined, it gets cast to the
+		    // string 'null' or 'undefined'. Just delete instead.
+		    delete process.env.DEBUG;
+		  } else {
+		    process.env.DEBUG = namespaces;
+		  }
+		}
+
+		/**
+		 * Load `namespaces`.
+		 *
+		 * @return {String} returns the previously persisted debug modes
+		 * @api private
+		 */
+
+		function load() {
+		  return process.env.DEBUG;
+		}
+
+		/**
+		 * Copied from `node/src/node.js`.
+		 *
+		 * XXX: It's lame that node doesn't expose this API out-of-the-box. It also
+		 * relies on the undocumented `tty_wrap.guessHandleType()` which is also lame.
+		 */
+
+		function createWritableStdioStream (fd) {
+		  var stream;
+		  var tty_wrap = process.binding('tty_wrap');
+
+		  // Note stream._type is used for test-module-load-list.js
+
+		  switch (tty_wrap.guessHandleType(fd)) {
+		    case 'TTY':
+		      stream = new tty.WriteStream(fd);
+		      stream._type = 'tty';
+
+		      // Hack to have stream not keep the event loop alive.
+		      // See https://github.com/joyent/node/issues/1726
+		      if (stream._handle && stream._handle.unref) {
+		        stream._handle.unref();
+		      }
+		      break;
+
+		    case 'FILE':
+		      var fs = require$$0__default;
+		      stream = new fs.SyncWriteStream(fd, { autoClose: false });
+		      stream._type = 'fs';
+		      break;
+
+		    case 'PIPE':
+		    case 'TCP':
+		      var net = require$$4$1;
+		      stream = new net.Socket({
+		        fd: fd,
+		        readable: false,
+		        writable: true
+		      });
+
+		      // FIXME Should probably have an option in net.Socket to create a
+		      // stream from an existing fd which is writable only. But for now
+		      // we'll just add this hack and set the `readable` member to false.
+		      // Test: ./node test/fixtures/echo.js < /etc/passwd
+		      stream.readable = false;
+		      stream.read = null;
+		      stream._type = 'pipe';
+
+		      // FIXME Hack to have stream not keep the event loop alive.
+		      // See https://github.com/joyent/node/issues/1726
+		      if (stream._handle && stream._handle.unref) {
+		        stream._handle.unref();
+		      }
+		      break;
+
+		    default:
+		      // Probably an error on in uv_guess_handle()
+		      throw new Error('Implement me. Unknown stream file type!');
+		  }
+
+		  // For supporting legacy API we put the FD here.
+		  stream.fd = fd;
+
+		  stream._isStdio = true;
+
+		  return stream;
+		}
+
+		/**
+		 * Init logic for `debug` instances.
+		 *
+		 * Create a new `inspectOpts` object in case `useColors` is set
+		 * differently for a particular `debug` instance.
+		 */
+
+		function init (debug) {
+		  debug.inspectOpts = {};
+
+		  var keys = Object.keys(exports.inspectOpts);
+		  for (var i = 0; i < keys.length; i++) {
+		    debug.inspectOpts[keys[i]] = exports.inspectOpts[keys[i]];
+		  }
+		}
+
+		/**
+		 * Enable namespaces listed in `process.env.DEBUG` initially.
+		 */
+
+		exports.enable(load()); 
+	} (node, node.exports));
+	return node.exports;
+}
+
 /**
  * Detect Electron renderer process, which is node, but we should
  * treat as a browser.
@@ -47348,7 +47432,7 @@ var etag_1 = etag;
  * @private
  */
 
-var crypto = require$$0$a;
+var crypto = require$$3$1;
 var Stats = require$$0__default.Stats;
 
 /**
@@ -47653,7 +47737,8 @@ function resolvePlugin(resolveOptions) {
                 // externalize if building for SSR, otherwise redirect to empty module
                 if (isBuiltin(id)) {
                     if (ssr) {
-                        if (ssrNoExternal === true &&
+                        if (targetWeb &&
+                            ssrNoExternal === true &&
                             // if both noExternal and external are true, noExternal will take the higher priority and bundle it.
                             // only if the id is explicitly listed in external, we will externalize it and skip this error.
                             (ssrExternal === true || !ssrExternal?.includes(id))) {
@@ -47859,7 +47944,17 @@ function tryNodeResolve(id, importer, options, targetWeb, depsOptimizer, ssr = f
     else {
         basedir = root;
     }
-    const pkg = resolvePackageData(pkgId, basedir, preserveSymlinks, packageCache);
+    let selfPkg = null;
+    if (!isBuiltin(id) && !id.includes('\0') && bareImportRE.test(id)) {
+        // check if it's a self reference dep.
+        const selfPackageData = findNearestPackageData(basedir, packageCache);
+        selfPkg =
+            selfPackageData?.data.exports && selfPackageData?.data.name === pkgId
+                ? selfPackageData
+                : null;
+    }
+    const pkg = selfPkg ||
+        resolvePackageData(pkgId, basedir, preserveSymlinks, packageCache);
     if (!pkg) {
         // if import can't be found, check if it's an optional peer dep.
         // if so, we can resolve to a special id that errors only when imported.
@@ -48713,6 +48808,7 @@ function extractJsonErrorPosition(errorMessage, inputLength) {
 
 const ERR_OPTIMIZE_DEPS_PROCESSING_ERROR = 'ERR_OPTIMIZE_DEPS_PROCESSING_ERROR';
 const ERR_OUTDATED_OPTIMIZED_DEP = 'ERR_OUTDATED_OPTIMIZED_DEP';
+const ERR_FILE_NOT_FOUND_IN_OPTIMIZED_DEP_DIR = 'ERR_FILE_NOT_FOUND_IN_OPTIMIZED_DEP_DIR';
 const debug$a = createDebugger('vite:optimize-deps');
 function optimizedDepsPlugin(config) {
     return {
@@ -48767,8 +48863,12 @@ function optimizedDepsPlugin(config) {
                     return await fsp.readFile(file, 'utf-8');
                 }
                 catch (e) {
-                    // Outdated non-entry points (CHUNK), loaded after a rerun
-                    throwOutdatedRequest(id);
+                    const newMetadata = depsOptimizer.metadata;
+                    if (optimizedDepInfoFromFile(newMetadata, file)) {
+                        // Outdated non-entry points (CHUNK), loaded after a rerun
+                        throwOutdatedRequest(id);
+                    }
+                    throwFileNotFoundInOptimizedDep(id);
                 }
             }
         },
@@ -48790,6 +48890,15 @@ function throwOutdatedRequest(id) {
     // send a 504 status code request timeout
     throw err;
 }
+function throwFileNotFoundInOptimizedDep(id) {
+    const err = new Error(`The file does not exist at "${id}" which is in the optimize deps directory. ` +
+        `The dependency might be incompatible with the dep optimizer. ` +
+        `Try adding it to \`optimizeDeps.exclude\`.`);
+    err.code = ERR_FILE_NOT_FOUND_IN_OPTIMIZED_DEP_DIR;
+    // This error will be caught by the transform middleware that will
+    // send a 404 status code not found
+    throw err;
+}
 
 const nonJsRe = /\.json(?:$|\?)/;
 const isNonJsRequest = (request) => nonJsRe.test(request);
@@ -49444,7 +49553,7 @@ function webWorkerPlugin(config) {
                     const filename = fileNameHash.get(hash);
                     const replacement = toOutputFilePathInJS(filename, 'asset', chunk.fileName, 'js', config, toRelativeRuntime);
                     const replacementString = typeof replacement === 'string'
-                        ? JSON.stringify(replacement).slice(1, -1)
+                        ? JSON.stringify(encodeURI(replacement)).slice(1, -1)
                         : `"+${replacement.runtime}+"`;
                     s.update(match.index, match.index + full.length, replacementString);
                 }
@@ -49577,6 +49686,10 @@ function getAliasPatterns(entries) {
     }
     return Object.entries(entries).map(([find]) => find);
 }
+function getAliasPatternMatcher(entries) {
+    const patterns = getAliasPatterns(entries);
+    return (importee) => patterns.some((pattern) => matches(pattern, importee));
+}
 
 function err(e, pos) {
     const error = new Error(e);
@@ -50441,7 +50554,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 */
-const noop$3 = () => { };
+const noop$2 = () => { };
 const ERR_CLOSED_SERVER = 'ERR_CLOSED_SERVER';
 function throwClosedServerError() {
     const err = new Error('The server is being restarted or closed. Request is outdated');
@@ -50474,11 +50587,11 @@ async function createPluginContainer(config, moduleGraph, watcher) {
             rollupVersion,
             watchMode: true,
         },
-        debug: noop$3,
-        info: noop$3,
-        warn: noop$3,
+        debug: noop$2,
+        info: noop$2,
+        warn: noop$2,
         // @ts-expect-error noop
-        error: noop$3,
+        error: noop$2,
     };
     function warnIncompatibleMethod(method, plugin) {
         logger.warn(colors$1.cyan(`[plugin:${plugin}] `) +
@@ -50640,8 +50753,8 @@ async function createPluginContainer(config, moduleGraph, watcher) {
             // the the error middleware.
             throw formatError(e, position, this);
         }
-        debug = noop$3;
-        info = noop$3;
+        debug = noop$2;
+        info = noop$2;
     }
     function formatError(e, position, ctx) {
         const err = (typeof e === 'string' ? new Error(e) : e);
@@ -51731,7 +51844,6 @@ async function createDepsOptimizer(config, server) {
         isOptimizedDepFile: createIsOptimizedDepFile(config),
         isOptimizedDepUrl: createIsOptimizedDepUrl(config),
         getOptimizedDepId: (depInfo) => `${depInfo.file}?v=${depInfo.browserHash}`,
-        delayDepsOptimizerUntil,
         close,
         options,
     };
@@ -51773,15 +51885,15 @@ async function createDepsOptimizer(config, server) {
     // from the first request before resolving to minimize full page reloads.
     // On warm start or after the first optimization is run, we use a simpler
     // debounce strategy each time a new dep is discovered.
-    let crawlEndFinder;
+    let waitingForCrawlEnd = false;
     if (!cachedMetadata) {
-        crawlEndFinder = setupOnCrawlEnd(onCrawlEnd);
+        server._onCrawlEnd(onCrawlEnd);
+        waitingForCrawlEnd = true;
     }
     let optimizationResult;
     let discover;
     async function close() {
         closed = true;
-        crawlEndFinder?.cancel();
         await Promise.allSettled([
             discover?.cancel(),
             depsOptimizer.scanProcessing,
@@ -51843,7 +51955,7 @@ async function createDepsOptimizer(config, server) {
                             optimizationResult.result.then((result) => {
                                 // Check if the crawling of static imports has already finished. In that
                                 // case, the result is handled by the onCrawlEnd callback
-                                if (!crawlEndFinder)
+                                if (!waitingForCrawlEnd)
                                     return;
                                 optimizationResult = undefined; // signal that we'll be using the result
                                 runOptimizer(result);
@@ -52038,16 +52150,14 @@ async function createDepsOptimizer(config, server) {
         enqueuedRerun?.();
     }
     function fullReload() {
-        if (server) {
-            // Cached transform results have stale imports (resolved to
-            // old locations) so they need to be invalidated before the page is
-            // reloaded.
-            server.moduleGraph.invalidateAll();
-            server.hot.send({
-                type: 'full-reload',
-                path: '*',
-            });
-        }
+        // Cached transform results have stale imports (resolved to
+        // old locations) so they need to be invalidated before the page is
+        // reloaded.
+        server.moduleGraph.invalidateAll();
+        server.hot.send({
+            type: 'full-reload',
+            path: '*',
+        });
     }
     async function rerun() {
         // debounce time to wait for new missing deps finished, issue a new
@@ -52081,7 +52191,7 @@ async function createDepsOptimizer(config, server) {
         // We'll wait until the user codebase is eagerly processed by Vite so
         // we can get a list of every missing dependency before giving to the
         // browser a dependency that may be outdated, thus avoiding full page reloads
-        if (!crawlEndFinder) {
+        if (!waitingForCrawlEnd) {
             // Debounced rerun, let other missing dependencies be discovered before
             // the running next optimizeDeps
             debouncedProcessing();
@@ -52129,7 +52239,7 @@ async function createDepsOptimizer(config, server) {
     // be crawled if the browser requests them right away).
     async function onCrawlEnd() {
         // switch after this point to a simple debounce strategy
-        crawlEndFinder = undefined;
+        waitingForCrawlEnd = false;
         debug$8?.(colors$1.green(`✨ static imports crawl ended`));
         if (closed) {
             return;
@@ -52205,57 +52315,6 @@ async function createDepsOptimizer(config, server) {
             debouncedProcessing(0);
         }
     }
-    function delayDepsOptimizerUntil(id, done) {
-        if (crawlEndFinder && !depsOptimizer.isOptimizedDepFile(id)) {
-            crawlEndFinder.delayDepsOptimizerUntil(id, done);
-        }
-    }
-}
-const callCrawlEndIfIdleAfterMs = 50;
-function setupOnCrawlEnd(onCrawlEnd) {
-    const registeredIds = new Set();
-    const seenIds = new Set();
-    let timeoutHandle;
-    let cancelled = false;
-    function cancel() {
-        cancelled = true;
-    }
-    let crawlEndCalled = false;
-    function callOnCrawlEnd() {
-        if (!cancelled && !crawlEndCalled) {
-            crawlEndCalled = true;
-            onCrawlEnd();
-        }
-    }
-    function delayDepsOptimizerUntil(id, done) {
-        if (!seenIds.has(id)) {
-            seenIds.add(id);
-            registeredIds.add(id);
-            done()
-                .catch(() => { })
-                .finally(() => markIdAsDone(id));
-        }
-    }
-    function markIdAsDone(id) {
-        registeredIds.delete(id);
-        checkIfCrawlEndAfterTimeout();
-    }
-    function checkIfCrawlEndAfterTimeout() {
-        if (cancelled || registeredIds.size > 0)
-            return;
-        if (timeoutHandle)
-            clearTimeout(timeoutHandle);
-        timeoutHandle = setTimeout(callOnCrawlEndWhenIdle, callCrawlEndIfIdleAfterMs);
-    }
-    async function callOnCrawlEndWhenIdle() {
-        if (cancelled || registeredIds.size > 0)
-            return;
-        callOnCrawlEnd();
-    }
-    return {
-        delayDepsOptimizerUntil,
-        cancel,
-    };
 }
 async function createDevSsrDepsOptimizer(config) {
     const metadata = await optimizeServerSsrDeps(config);
@@ -52270,7 +52329,6 @@ async function createDevSsrDepsOptimizer(config) {
         // noop, there is no scanning during dev SSR
         // the optimizer blocks the server start
         run: () => { },
-        delayDepsOptimizerUntil: (id, done) => { },
         close: async () => { },
         options: config.ssr.optimizeDeps,
     };
@@ -52680,8 +52738,7 @@ async function prepareEsbuildOptimizerRun(resolvedConfig, depsInfo, ssr, process
         charset: 'utf8',
         ...esbuildOptions,
         supported: {
-            'dynamic-import': true,
-            'import-meta': true,
+            ...defaultEsbuildSupported,
             ...esbuildOptions.supported,
         },
     });
@@ -53164,7 +53221,7 @@ function parse$5(req) {
 	return req._parsedUrl = { pathname, search, query, raw };
 }
 
-const noop$2 = () => {};
+const noop$1 = () => {};
 
 function isMatch(uri, arr) {
 	for (let i=0; i < arr.length; i++) {
@@ -53280,7 +53337,7 @@ function sirv (dir, opts={}) {
 	dir = resolve$3(dir || '.');
 
 	let isNotFound = opts.onNoMatch || is404;
-	let setHeaders = opts.setHeaders || noop$2;
+	let setHeaders = opts.setHeaders || noop$1;
 
 	let extensions = opts.extensions || ['html', 'htm'];
 	let gzips = opts.gzip && extensions.map(x => `${x}.gz`).concat('gz');
@@ -53637,7 +53694,10 @@ async function doTransform(url, server, options, timestamp) {
             return cached;
     }
     const result = loadAndTransform(id, url, server, options, timestamp, module, resolved);
-    getDepsOptimizer(config, ssr)?.delayDepsOptimizerUntil(id, () => result);
+    const depsOptimizer = getDepsOptimizer(config, ssr);
+    if (!depsOptimizer?.isOptimizedDepFile(id)) {
+        server._registerRequestProcessing(id, () => result);
+    }
     return result;
 }
 async function getCachedTransformResult(url, module, server, ssr, timestamp) {
@@ -54260,7 +54320,7 @@ async function ssrTransformScript(code, inMap, url, originalCode) {
     const declaredConst = new Set();
     // hoist at the start of the file, after the hashbang
     const hoistIndex = code.match(hashbangRE)?.[0].length ?? 0;
-    function defineImport(source, metadata) {
+    function defineImport(index, source, metadata) {
         deps.add(source);
         const importId = `__vite_ssr_import_${uid++}__`;
         // Reduce metadata to undefined if it's all default values
@@ -54271,7 +54331,7 @@ async function ssrTransformScript(code, inMap, url, originalCode) {
         const metadataStr = metadata ? `, ${JSON.stringify(metadata)}` : '';
         // There will be an error if the module is called before it is imported,
         // so the module import statement is hoisted to the top
-        s.appendLeft(hoistIndex, `const ${importId} = await ${ssrImportKey}(${JSON.stringify(source)}${metadataStr});\n`);
+        s.appendLeft(index, `const ${importId} = await ${ssrImportKey}(${JSON.stringify(source)}${metadataStr});\n`);
         return importId;
     }
     function defineExport(position, name, local = name) {
@@ -54284,7 +54344,7 @@ async function ssrTransformScript(code, inMap, url, originalCode) {
         // import { baz } from 'foo' --> baz -> __import_foo__.baz
         // import * as ok from 'foo' --> ok -> __import_foo__
         if (node.type === 'ImportDeclaration') {
-            const importId = defineImport(node.source.value, {
+            const importId = defineImport(hoistIndex, node.source.value, {
                 importedNames: node.specifiers
                     .map((s) => {
                     if (s.type === 'ImportSpecifier')
@@ -54334,12 +54394,11 @@ async function ssrTransformScript(code, inMap, url, originalCode) {
                 s.remove(node.start, node.end);
                 if (node.source) {
                     // export { foo, bar } from './foo'
-                    const importId = defineImport(node.source.value, {
+                    const importId = defineImport(node.start, node.source.value, {
                         importedNames: node.specifiers.map((s) => s.local.name),
                     });
-                    // hoist re-exports near the defined import so they are immediately exported
                     for (const spec of node.specifiers) {
-                        defineExport(hoistIndex, spec.exported.name, `${importId}.${spec.local.name}`);
+                        defineExport(node.start, spec.exported.name, `${importId}.${spec.local.name}`);
                     }
                 }
                 else {
@@ -54374,13 +54433,12 @@ async function ssrTransformScript(code, inMap, url, originalCode) {
         // export * from './foo'
         if (node.type === 'ExportAllDeclaration') {
             s.remove(node.start, node.end);
-            const importId = defineImport(node.source.value);
-            // hoist re-exports near the defined import so they are immediately exported
+            const importId = defineImport(node.start, node.source.value);
             if (node.exported) {
-                defineExport(hoistIndex, node.exported.name, `${importId}`);
+                defineExport(node.start, node.exported.name, `${importId}`);
             }
             else {
-                s.appendLeft(hoistIndex, `${ssrExportAllKey}(${importId});\n`);
+                s.appendLeft(node.start, `${ssrExportAllKey}(${importId});\n`);
             }
         }
     }
@@ -54806,7 +54864,11 @@ async function instantiateModule(url, server, context = { global }, urlStack = [
     // Tolerate circular imports by ensuring the module can be
     // referenced before it's been instantiated.
     mod.ssrModule = ssrModule;
+    // replace '/' with '\\' on Windows to match Node.js
+    const osNormalizedFilename = isWindows$5 ? path$o.resolve(mod.file) : mod.file;
     const ssrImportMeta = {
+        dirname: path$o.dirname(osNormalizedFilename),
+        filename: osNormalizedFilename,
         // The filesystem URL, matching native Node.js modules
         url: pathToFileURL(mod.file).toString(),
     };
@@ -55392,56 +55454,6 @@ var open$1 = /*@__PURE__*/getDefaultExportFromCjs(open_1);
 
 var crossSpawn = {exports: {}};
 
-var mode;
-var hasRequiredMode;
-
-function requireMode () {
-	if (hasRequiredMode) return mode;
-	hasRequiredMode = 1;
-	mode = isexe;
-	isexe.sync = sync;
-
-	var fs = require$$0__default;
-
-	function isexe (path, options, cb) {
-	  fs.stat(path, function (er, stat) {
-	    cb(er, er ? false : checkStat(stat, options));
-	  });
-	}
-
-	function sync (path, options) {
-	  return checkStat(fs.statSync(path), options)
-	}
-
-	function checkStat (stat, options) {
-	  return stat.isFile() && checkMode(stat, options)
-	}
-
-	function checkMode (stat, options) {
-	  var mod = stat.mode;
-	  var uid = stat.uid;
-	  var gid = stat.gid;
-
-	  var myUid = options.uid !== undefined ?
-	    options.uid : process.getuid && process.getuid();
-	  var myGid = options.gid !== undefined ?
-	    options.gid : process.getgid && process.getgid();
-
-	  var u = parseInt('100', 8);
-	  var g = parseInt('010', 8);
-	  var o = parseInt('001', 8);
-	  var ug = u | g;
-
-	  var ret = (mod & o) ||
-	    (mod & g) && gid === myGid ||
-	    (mod & u) && uid === myUid ||
-	    (mod & ug) && myUid === 0;
-
-	  return ret
-	}
-	return mode;
-}
-
 var windows;
 var hasRequiredWindows;
 
@@ -55493,6 +55505,56 @@ function requireWindows () {
 	return windows;
 }
 
+var mode;
+var hasRequiredMode;
+
+function requireMode () {
+	if (hasRequiredMode) return mode;
+	hasRequiredMode = 1;
+	mode = isexe;
+	isexe.sync = sync;
+
+	var fs = require$$0__default;
+
+	function isexe (path, options, cb) {
+	  fs.stat(path, function (er, stat) {
+	    cb(er, er ? false : checkStat(stat, options));
+	  });
+	}
+
+	function sync (path, options) {
+	  return checkStat(fs.statSync(path), options)
+	}
+
+	function checkStat (stat, options) {
+	  return stat.isFile() && checkMode(stat, options)
+	}
+
+	function checkMode (stat, options) {
+	  var mod = stat.mode;
+	  var uid = stat.uid;
+	  var gid = stat.gid;
+
+	  var myUid = options.uid !== undefined ?
+	    options.uid : process.getuid && process.getuid();
+	  var myGid = options.gid !== undefined ?
+	    options.gid : process.getgid && process.getgid();
+
+	  var u = parseInt('100', 8);
+	  var g = parseInt('010', 8);
+	  var o = parseInt('001', 8);
+	  var ug = u | g;
+
+	  var ret = (mod & o) ||
+	    (mod & g) && gid === myGid ||
+	    (mod & u) && uid === myUid ||
+	    (mod & ug) && myUid === 0;
+
+	  return ret
+	}
+	return mode;
+}
+
 var core;
 if (process.platform === 'win32' || commonjsGlobal.TESTING_WINDOWS) {
   core = requireWindows();
@@ -56578,7 +56640,7 @@ let Limiter$1 = class Limiter {
 
 var limiter = Limiter$1;
 
-const zlib = require$$0$b;
+const zlib = zlib$1;
 
 const bufferUtil = bufferUtilExports;
 const Limiter = limiter;
@@ -57093,7 +57155,7 @@ function inflateOnError(err) {
 
 var validation = {exports: {}};
 
-const { isUtf8 } = require$$0$c;
+const { isUtf8 } = require$$0$a;
 
 //
 // Allowed token characters:
@@ -57966,7 +58028,7 @@ function throwErrorNextTick(err) {
 }
 
 /* eslint no-unused-vars: ["error", { "varsIgnorePattern": "^Duplex" }] */
-const { randomFillSync } = require$$0$a;
+const { randomFillSync } = require$$3$1;
 
 const PerMessageDeflate$2 = permessageDeflate;
 const { EMPTY_BUFFER: EMPTY_BUFFER$1 } = constants;
@@ -58939,7 +59001,7 @@ const https$2 = require$$1$1;
 const http$3 = require$$1;
 const net = require$$4$1;
 const tls = require$$4$2;
-const { randomBytes, createHash: createHash$1 } = require$$0$a;
+const { randomBytes, createHash: createHash$1 } = require$$3$1;
 const { URL: URL$2 } = require$$0$9;
 
 const PerMessageDeflate$1 = permessageDeflate;
@@ -58953,7 +59015,7 @@ const {
   kListener,
   kStatusCode,
   kWebSocket: kWebSocket$1,
-  NOOP
+  NOOP: NOOP$1
 } = constants;
 const {
   EventTarget: { addEventListener, removeEventListener }
@@ -60149,7 +60211,7 @@ function receiverOnMessage(data, isBinary) {
 function receiverOnPing(data) {
   const websocket = this[kWebSocket$1];
 
-  if (websocket._autoPong) websocket.pong(data, !this._isServer, NOOP);
+  if (websocket._autoPong) websocket.pong(data, !this._isServer, NOOP$1);
   websocket.emit('ping', data);
 }
 
@@ -60258,7 +60320,7 @@ function socketOnError$1() {
   const websocket = this[kWebSocket$1];
 
   this.removeListener('error', socketOnError$1);
-  this.on('error', NOOP);
+  this.on('error', NOOP$1);
 
   if (websocket) {
     websocket._readyState = WebSocket$1.CLOSING;
@@ -60331,7 +60393,7 @@ var subprotocol$1 = { parse };
 
 const EventEmitter = require$$0$5;
 const http$2 = require$$1;
-const { createHash } = require$$0$a;
+const { createHash } = require$$3$1;
 
 const extension = extension$1;
 const PerMessageDeflate = permessageDeflate;
@@ -62458,7 +62520,7 @@ function wrap(protocols) {
 }
 
 /* istanbul ignore next */
-function noop$1() { /* empty */ }
+function noop() { /* empty */ }
 
 // from https://github.com/nodejs/node/blob/master/lib/internal/url.js
 function urlToOptions(urlObject) {
@@ -62514,7 +62576,7 @@ function abortRequest(request) {
   for (var e = 0; e < events.length; e++) {
     request.removeListener(events[e], eventHandlers[events[e]]);
   }
-  request.on("error", noop$1);
+  request.on("error", noop);
   request.abort();
 }
 
@@ -63578,6 +63640,15 @@ function transformMiddleware(server) {
                 // error but a normal part of the missing deps discovery flow
                 return;
             }
+            if (e?.code === ERR_FILE_NOT_FOUND_IN_OPTIMIZED_DEP_DIR) {
+                // Skip if response has already been sent
+                if (!res.writableEnded) {
+                    res.statusCode = 404;
+                    res.end();
+                }
+                server.config.logger.warn(colors$1.yellow(e.message));
+                return;
+            }
             if (e?.code === ERR_LOAD_URL) {
                 // Let other middleware handle if we can't load the url via transformRequest
                 return next();
@@ -63615,11 +63686,13 @@ function createDevHtmlTransformFn(config) {
     const [preHooks, normalHooks, postHooks] = resolveHtmlTransforms(config.plugins, config.logger);
     const transformHooks = [
         preImportMapHook(config),
+        injectCspNonceMetaTagHook(config),
         ...preHooks,
         htmlEnvHook(config),
         devHtmlHook,
         ...normalHooks,
         ...postHooks,
+        injectNonceAttributeTagHook(config),
         postImportMapHook(),
     ];
     return (server, url, html, originalUrl) => {
@@ -64406,6 +64479,19 @@ async function _createServer(inlineConfig = {}, options) {
     const closeHttpServer = createServerCloseFn(httpServer);
     let exitProcess;
     const devHtmlTransformFn = createDevHtmlTransformFn(config);
+    const onCrawlEndCallbacks = [];
+    const crawlEndFinder = setupOnCrawlEnd(() => {
+        onCrawlEndCallbacks.forEach((cb) => cb());
+    });
+    function waitForRequestsIdle(ignoredId) {
+        return crawlEndFinder.waitForRequestsIdle(ignoredId);
+    }
+    function _registerRequestProcessing(id, done) {
+        crawlEndFinder.registerRequestProcessing(id, done);
+    }
+    function _onCrawlEnd(cb) {
+        onCrawlEndCallbacks.push(cb);
+    }
     let server = {
         config,
         middlewares,
@@ -64513,6 +64599,7 @@ async function _createServer(inlineConfig = {}, options) {
                 watcher.close(),
                 hot.close(),
                 container.close(),
+                crawlEndFinder?.cancel(),
                 getDepsOptimizer(server.config)?.close(),
                 getDepsOptimizer(server.config, true)?.close(),
                 closeHttpServer(),
@@ -64552,6 +64639,9 @@ async function _createServer(inlineConfig = {}, options) {
             }
             return server._restartPromise;
         },
+        waitForRequestsIdle,
+        _registerRequestProcessing,
+        _onCrawlEnd,
         _setInternalServer(_server) {
             // Rebind internal the server variable so functions reference the user
             // server instance after a restart
@@ -64840,6 +64930,22 @@ function resolveServerOptions(root, raw, logger) {
     if (!allowDirs) {
         allowDirs = [searchForWorkspaceRoot(root)];
     }
+    if (process.versions.pnp) {
+        try {
+            const enableGlobalCache = execSync('yarn config get enableGlobalCache', { cwd: root })
+                .toString()
+                .trim() === 'true';
+            const yarnCacheDir = execSync(`yarn config get ${enableGlobalCache ? 'globalFolder' : 'cacheFolder'}`, { cwd: root })
+                .toString()
+                .trim();
+            allowDirs.push(yarnCacheDir);
+        }
+        catch (e) {
+            logger.warn(`Get yarn cache dir error: ${e.message}`, {
+                timestamp: true,
+            });
+        }
+    }
     allowDirs = allowDirs.map((i) => resolvedAllowDir(root, i));
     // only push client dir when vite itself is outside-of-root
     const resolvedClientDir = resolvedAllowDir(root, CLIENT_DIR);
@@ -64932,6 +65038,64 @@ async function restartServerWithUrls(server) {
         server.printUrls();
     }
 }
+const callCrawlEndIfIdleAfterMs = 50;
+function setupOnCrawlEnd(onCrawlEnd) {
+    const registeredIds = new Set();
+    const seenIds = new Set();
+    const onCrawlEndPromiseWithResolvers = promiseWithResolvers();
+    let timeoutHandle;
+    let cancelled = false;
+    function cancel() {
+        cancelled = true;
+    }
+    let crawlEndCalled = false;
+    function callOnCrawlEnd() {
+        if (!cancelled && !crawlEndCalled) {
+            crawlEndCalled = true;
+            onCrawlEnd();
+        }
+        onCrawlEndPromiseWithResolvers.resolve();
+    }
+    function registerRequestProcessing(id, done) {
+        if (!seenIds.has(id)) {
+            seenIds.add(id);
+            registeredIds.add(id);
+            done()
+                .catch(() => { })
+                .finally(() => markIdAsDone(id));
+        }
+    }
+    function waitForRequestsIdle(ignoredId) {
+        if (ignoredId) {
+            seenIds.add(ignoredId);
+            markIdAsDone(ignoredId);
+        }
+        return onCrawlEndPromiseWithResolvers.promise;
+    }
+    function markIdAsDone(id) {
+        if (registeredIds.has(id)) {
+            registeredIds.delete(id);
+            checkIfCrawlEndAfterTimeout();
+        }
+    }
+    function checkIfCrawlEndAfterTimeout() {
+        if (cancelled || registeredIds.size > 0)
+            return;
+        if (timeoutHandle)
+            clearTimeout(timeoutHandle);
+        timeoutHandle = setTimeout(callOnCrawlEndWhenIdle, callCrawlEndIfIdleAfterMs);
+    }
+    async function callOnCrawlEndWhenIdle() {
+        if (cancelled || registeredIds.size > 0)
+            return;
+        callOnCrawlEnd();
+    }
+    return {
+        registerRequestProcessing,
+        waitForRequestsIdle,
+        cancel,
+    };
+}
 
 var index = {
 	__proto__: null,
@@ -65591,6 +65755,7 @@ function importAnalysisPlugin(config) {
     const fsUtils = getFsUtils(config);
     const clientPublicPath = path$o.posix.join(base, CLIENT_PUBLIC_PATH);
     const enablePartialAccept = config.experimental?.hmrPartialAccept;
+    const matchAlias = getAliasPatternMatcher(config.resolve.alias);
     let server;
     let _env;
     let _ssrEnv;
@@ -65834,7 +65999,7 @@ function importAnalysisPlugin(config) {
                         return;
                     }
                     // skip ssr external
-                    if (ssr) {
+                    if (ssr && !matchAlias(specifier)) {
                         if (shouldExternalizeForSSR(specifier, importer, config)) {
                             return;
                         }
@@ -65895,7 +66060,7 @@ function importAnalysisPlugin(config) {
                             rewriteDone = true;
                         }
                         if (!rewriteDone) {
-                            const rewrittenUrl = JSON.stringify(url);
+                            const rewrittenUrl = JSON.stringify(partialEncodeURI(url));
                             const s = isDynamicImport ? start : start - 1;
                             const e = isDynamicImport ? end : end + 1;
                             str().overwrite(s, e, rewrittenUrl, {
@@ -66229,6 +66394,11 @@ function preload(baseModule, deps, importerUrl) {
     // @ts-expect-error __VITE_IS_MODERN__ will be replaced with boolean later
     if (__VITE_IS_MODERN__ && deps && deps.length > 0) {
         const links = document.getElementsByTagName('link');
+        const cspNonceMeta = document.querySelector('meta[property=csp-nonce]');
+        // `.nonce` should be used to get along with nonce hiding (https://developer.mozilla.org/en-US/docs/Web/HTML/Global_attributes/nonce#accessing_nonces_and_nonce_hiding)
+        // Firefox 67-74 uses modern chunks and supports CSP nonce, but does not support `.nonce`
+        // in that case fallback to getAttribute
+        const cspNonce = cspNonceMeta?.nonce || cspNonceMeta?.getAttribute('nonce');
         promise = Promise.all(deps.map((dep) => {
             // @ts-expect-error assetsURL is declared before preload.toString()
             dep = assetsURL(dep, importerUrl);
@@ -66261,6 +66431,9 @@ function preload(baseModule, deps, importerUrl) {
                 link.crossOrigin = '';
             }
             link.href = dep;
+            if (cspNonce) {
+                link.setAttribute('nonce', cspNonce);
+            }
             document.head.appendChild(link);
             if (isCss) {
                 return new Promise((res, rej) => {
@@ -67322,7 +67495,7 @@ function escapeId(id) {
     return id.replace(backSlashRegEx, '\\\\').replace(quoteNewlineRegEx, '\\$1');
 }
 const getResolveUrl = (path, URL = 'URL') => `new ${URL}(${path}).href`;
-const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${escapeId(relativePath)}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.src || document.baseURI`);
+const getRelativeUrlFromDocument = (relativePath, umd = false) => getResolveUrl(`'${escapeId(partialEncodeURI(relativePath))}', ${umd ? `typeof document === 'undefined' ? location.href : ` : ''}document.currentScript && document.currentScript.src || document.baseURI`);
 const getFileUrlFromFullPath = (path) => `require('u' + 'rl').pathToFileURL(${path}).href`;
 const getFileUrlFromRelativePath = (path) => getFileUrlFromFullPath(`__dirname + '/${escapeId(path)}'`);
 const relativeUrlMechanisms = {
@@ -67332,16 +67505,16 @@ const relativeUrlMechanisms = {
         return getResolveUrl(`require.toUrl('${escapeId(relativePath)}'), document.baseURI`);
     },
     cjs: (relativePath) => `(typeof document === 'undefined' ? ${getFileUrlFromRelativePath(relativePath)} : ${getRelativeUrlFromDocument(relativePath)})`,
-    es: (relativePath) => getResolveUrl(`'${escapeId(relativePath)}', import.meta.url`),
+    es: (relativePath) => getResolveUrl(`'${escapeId(partialEncodeURI(relativePath))}', import.meta.url`),
     iife: (relativePath) => getRelativeUrlFromDocument(relativePath),
     // NOTE: make sure rollup generate `module` params
-    system: (relativePath) => getResolveUrl(`'${escapeId(relativePath)}', module.meta.url`),
+    system: (relativePath) => getResolveUrl(`'${escapeId(partialEncodeURI(relativePath))}', module.meta.url`),
     umd: (relativePath) => `(typeof document === 'undefined' && typeof location === 'undefined' ? ${getFileUrlFromRelativePath(relativePath)} : ${getRelativeUrlFromDocument(relativePath, true)})`,
 };
 /* end of copy */
 const customRelativeUrlMechanisms = {
     ...relativeUrlMechanisms,
-    'worker-iife': (relativePath) => getResolveUrl(`'${escapeId(relativePath)}', self.location.href`),
+    'worker-iife': (relativePath) => getResolveUrl(`'${escapeId(partialEncodeURI(relativePath))}', self.location.href`),
 };
 function toOutputFilePathInJS(filename, type, hostId, hostType, config, toRelative) {
     const { renderBuiltUrl } = config.experimental;
@@ -67432,111 +67605,119 @@ var build$1 = {
 	toOutputFilePathWithoutRuntime: toOutputFilePathWithoutRuntime
 };
 
-/* eslint-disable */
-//@ts-nocheck
-//TODO: replace this code with https://github.com/lukeed/polka/pull/148 once it's released
-// This is based on https://github.com/preactjs/wmr/blob/main/packages/wmr/src/lib/polkompress.js
-// MIT Licensed https://github.com/preactjs/wmr/blob/main/LICENSE
-/* global Buffer */
-const noop = () => { };
-const mimes = /text|javascript|\/json|xml/i;
-const threshold = 1024;
-const level = -1;
-let brotli = false;
-const getChunkSize = (chunk, enc) => (chunk ? Buffer.byteLength(chunk, enc) : 0);
-function compression() {
-    const brotliOpts = (typeof brotli === 'object' && brotli) || {};
-    const gzipOpts = {};
-    // disable Brotli on Node<12.7 where it is unsupported:
-    if (!zlib$1.createBrotliCompress)
-        brotli = false;
-    return function viteCompressionMiddleware(req, res, next = noop) {
-        const accept = req.headers['accept-encoding'] + '';
-        const encoding = ((brotli && accept.match(/\bbr\b/)) ||
-            (accept.match(/\bgzip\b/)) ||
-            [])[0];
-        // skip if no response body or no supported encoding:
-        if (req.method === 'HEAD' || !encoding)
-            return next();
-        /** @type {zlib.Gzip | zlib.BrotliCompress} */
-        let compress;
-        let pendingStatus;
-        /** @type {[string, function][]?} */
-        let pendingListeners = [];
-        let started = false;
-        let size = 0;
-        function start() {
-            started = true;
-            size = res.getHeader('Content-Length') | 0 || size;
-            const compressible = mimes.test(String(res.getHeader('Content-Type') || 'text/plain'));
-            const cleartext = !res.getHeader('Content-Encoding');
-            const listeners = pendingListeners || [];
-            if (compressible && cleartext && size >= threshold) {
-                res.setHeader('Content-Encoding', encoding);
-                res.removeHeader('Content-Length');
-                if (encoding === 'br') {
-                    const params = {
-                        [zlib$1.constants.BROTLI_PARAM_QUALITY]: level,
-                        [zlib$1.constants.BROTLI_PARAM_SIZE_HINT]: size,
-                    };
-                    compress = zlib$1.createBrotliCompress({
-                        params: Object.assign(params, brotliOpts),
-                    });
-                }
-                else {
-                    compress = zlib$1.createGzip(Object.assign({ level }, gzipOpts));
-                }
-                // backpressure
-                compress.on('data', (chunk) => write.call(res, chunk) === false && compress.pause());
-                on.call(res, 'drain', () => compress.resume());
-                compress.on('end', () => end.call(res));
-                listeners.forEach((p) => compress.on.apply(compress, p));
-            }
-            else {
-                pendingListeners = null;
-                listeners.forEach((p) => on.apply(res, p));
-            }
-            writeHead.call(res, pendingStatus || res.statusCode);
-        }
-        const { end, write, on, writeHead } = res;
-        res.writeHead = function (status, reason, headers) {
-            if (typeof reason !== 'string')
-                [headers, reason] = [reason, headers];
-            if (headers)
-                for (let i in headers)
-                    res.setHeader(i, headers[i]);
-            pendingStatus = status;
-            return this;
-        };
-        res.write = function (chunk, enc, cb) {
-            size += getChunkSize(chunk, enc);
-            if (!started)
-                start();
-            if (!compress)
-                return write.apply(this, arguments);
-            return compress.write.apply(compress, arguments);
-        };
-        res.end = function (chunk, enc, cb) {
-            if (arguments.length > 0 && typeof chunk !== 'function') {
-                size += getChunkSize(chunk, enc);
-            }
-            if (!started)
-                start();
-            if (!compress)
-                return end.apply(this, arguments);
-            return compress.end.apply(compress, arguments);
-        };
-        res.on = function (type, listener) {
-            if (!pendingListeners || type !== 'drain')
-                on.call(this, type, listener);
-            else if (compress)
-                compress.on(type, listener);
-            else
-                pendingListeners.push([type, listener]);
-            return this;
-        };
-        next();
-    };
+// NOTE: supports Node 6.x
+
+
+const NOOP = () => {};
+const MIMES = /text|javascript|\/json|xml/i;
+
+/**
+ * @param {any} chunk
+ * @param {BufferEncoding} enc
+ * @returns {number}
+ */
+function getChunkSize(chunk, enc) {
+	return chunk ? Buffer.byteLength(chunk, enc) : 0;
+}
+
+/**
+ * @param {import('./index.d.mts').Options} [options]
+ * @returns {import('./index.d.mts').Middleware}
+ */
+function compression ({ threshold = 1024, level = -1, brotli = false, gzip = true, mimes = MIMES } = {}) {
+	const brotliOpts = (typeof brotli === 'object' && brotli) || {};
+	const gzipOpts = (typeof gzip === 'object' && gzip) || {};
+
+	// disable Brotli on Node<12.7 where it is unsupported:
+	if (!zlib$1.createBrotliCompress) brotli = false;
+
+	return (req, res, next = NOOP) => {
+		const accept = req.headers['accept-encoding'] + '';
+		const encoding = ((brotli && accept.match(/\bbr\b/)) || (gzip && accept.match(/\bgzip\b/)) || [])[0];
+
+		// skip if no response body or no supported encoding:
+		if (req.method === 'HEAD' || !encoding) return next();
+
+		/** @type {zlib.Gzip | zlib.BrotliCompress} */
+		let compress;
+		/** @type {Array<[string, function]>?} */
+		let pendingListeners = [];
+		let pendingStatus = 0;
+		let started = false;
+		let size = 0;
+
+		function start() {
+			started = true;
+			// @ts-ignore
+			size = res.getHeader('Content-Length') | 0 || size;
+			const compressible = mimes.test(
+				String(res.getHeader('Content-Type') || 'text/plain')
+			);
+			const cleartext = !res.getHeader('Content-Encoding');
+			const listeners = pendingListeners || [];
+
+			if (compressible && cleartext && size >= threshold) {
+				res.setHeader('Content-Encoding', encoding);
+				res.removeHeader('Content-Length');
+				if (encoding === 'br') {
+					compress = zlib$1.createBrotliCompress({
+						params: Object.assign({
+							[zlib$1.constants.BROTLI_PARAM_QUALITY]: level,
+							[zlib$1.constants.BROTLI_PARAM_SIZE_HINT]: size,
+						}, brotliOpts)
+					});
+				} else {
+					compress = zlib$1.createGzip(
+						Object.assign({ level }, gzipOpts)
+					);
+				}
+				// backpressure
+				compress.on('data', chunk => write.call(res, chunk) || compress.pause());
+				on.call(res, 'drain', () => compress.resume());
+				compress.on('end', () => end.call(res));
+				listeners.forEach(p => compress.on.apply(compress, p));
+			} else {
+				pendingListeners = null;
+				listeners.forEach(p => on.apply(res, p));
+			}
+
+			writeHead.call(res, pendingStatus || res.statusCode);
+		}
+
+		const { end, write, on, writeHead } = res;
+
+		res.writeHead = function (status, reason, headers) {
+			if (typeof reason !== 'string') [headers, reason] = [reason, headers];
+			if (headers) for (let k in headers) res.setHeader(k, headers[k]);
+			pendingStatus = status;
+			return this;
+		};
+
+		res.write = function (chunk, enc) {
+			size += getChunkSize(chunk, enc);
+			if (!started) start();
+			if (!compress) return write.apply(this, arguments);
+			return compress.write.apply(compress, arguments);
+		};
+
+		res.end = function (chunk, enc) {
+			if (arguments.length > 0 && typeof chunk !== 'function') {
+				size += getChunkSize(chunk, enc);
+			}
+			if (!started) start();
+			if (!compress) return end.apply(this, arguments);
+			return compress.end.apply(compress, arguments);
+		};
+
+		res.on = function (type, listener) {
+			if (!pendingListeners) on.call(this, type, listener);
+			else if (compress) compress.on(type, listener);
+			else pendingListeners.push([type, listener]);
+			return this;
+		};
+
+		next();
+	};
 }
 
 function resolvePreviewOptions(preview, server) {
@@ -68158,6 +68339,8 @@ async function bundleConfigFile(fileName, isESM) {
             __dirname: dirnameVarName,
             __filename: filenameVarName,
             'import.meta.url': importMetaUrlVarName,
+            'import.meta.dirname': dirnameVarName,
+            'import.meta.filename': filenameVarName,
         },
         plugins: [
             {