@angular/ssr - npm Package Compare versions

Comparing version 21.2.13 to 21.2.14

fesm2022/_validation-chunk.mjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"_validation-chunk.mjs","sources":["../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/src/utils/validation.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Common X-Forwarded-* headers.\n */\nconst X_FORWARDED_HEADERS = new Set([\n  'x-forwarded-for',\n  'x-forwarded-host',\n  'x-forwarded-port',\n  'x-forwarded-proto',\n  'x-forwarded-prefix',\n]);\n\n/**\n * The set of headers that should be validated for host header injection attacks.\n */\nconst HOST_HEADERS_TO_VALIDATE: ReadonlyArray<string> = ['host', 'x-forwarded-host'];\n\n/**\n * Regular expression to validate that the port is a numeric value.\n */\nconst VALID_PORT_REGEX = /^\\d+$/;\n\n/**\n * Regular expression to validate that the protocol is either http or https (case-insensitive).\n */\nconst VALID_PROTO_REGEX = /^https?$/i;\n\n/**\n * Regular expression to validate that the prefix is valid.\n */\nconst VALID_PREFIX_REGEX = /^\\/([a-z0-9_-]+\\/)*[a-z0-9_-]*$/i;\n\n/**\n * Extracts the first value from a multi-value header string.\n *\n * @param value - A string or an array of strings representing the header values.\n *                If it's a string, values are expected to be comma-separated.\n * @returns The first trimmed value from the multi-value header, or `undefined` if the input is invalid or empty.\n *\n * @example\n * ```typescript\n * getFirstHeaderValue(\"value1, value2, value3\"); // \"value1\"\n * getFirstHeaderValue([\"value1\", \"value2\"]); // \"value1\"\n * getFirstHeaderValue(undefined); // undefined\n * ```\n */\nexport function getFirstHeaderValue(\n  value: string | string[] | undefined | null,\n): string | undefined {\n  return value?.toString().split(',', 1)[0]?.trim();\n}\n\n/**\n * Validates a request.\n *\n * @param request - The incoming `Request` object to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @param disableHostCheck - Whether to disable the host check.\n * @throws Error if any of the validated headers contain invalid values.\n */\nexport function validateRequest(\n  request: Request,\n  allowedHosts: ReadonlySet<string>,\n  disableHostCheck: boolean,\n): void {\n  validateHeaders(request, allowedHosts, disableHostCheck);\n\n  if (!disableHostCheck) {\n    validateUrl(new URL(request.url), allowedHosts);\n  }\n}\n\n/**\n * Validates that the hostname of a given URL is allowed.\n *\n * @param url - The URL object to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @throws Error if the hostname is not in the allowlist.\n */\nexport function validateUrl(url: URL, allowedHosts: ReadonlySet<string>): void {\n  const { hostname } = url;\n  if (!isHostAllowed(hostname, allowedHosts)) {\n    throw new Error(`URL with hostname \"${hostname}\" is not allowed.`);\n  }\n}\n\n/**\n * Sanitizes the proxy headers of a request by removing unallowed `X-Forwarded-*` headers.\n * If no headers need to be removed, the original request is returned without cloning.\n *\n * @param request - The incoming `Request` object to sanitize.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns An object containing the sanitized request, or the original request if no changes were needed.\n */\nexport function sanitizeRequestHeaders(\n  request: Request,\n  trustProxyHeaders: ReadonlySet<string>,\n): { request: Request; deoptToCSR: boolean } {\n  const keysToDelete: string[] = [];\n  let deoptToCSR = false;\n\n  for (const [key] of request.headers) {\n    const lowerKey = key.toLowerCase();\n    if (lowerKey.startsWith('x-forwarded-') && !isProxyHeaderAllowed(lowerKey, trustProxyHeaders)) {\n      // eslint-disable-next-line no-console\n      console.warn(\n        `Received \"${key}\" header but \"trustProxyHeaders\" was not set up to allow it.\\n` +\n          `For more information, see https://angular.dev/best-practices/security#configuring-trusted-proxy-headers`,\n      );\n      deoptToCSR = true;\n      keysToDelete.push(key);\n    }\n  }\n\n  if (keysToDelete.length === 0) {\n    return { request, deoptToCSR };\n  }\n\n  const clonedReq = new Request(request.clone(), {\n    signal: request.signal,\n  });\n\n  const headers = clonedReq.headers;\n  for (const key of keysToDelete) {\n    headers.delete(key);\n  }\n\n  return { request: clonedReq, deoptToCSR };\n}\n\n/**\n * Validates a specific host header value against the allowed hosts.\n *\n * @param headerName - The name of the header to validate (e.g., 'host', 'x-forwarded-host').\n * @param headerValue - The value of the header to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @throws Error if the header value is invalid or the hostname is not in the allowlist.\n */\nfunction verifyHostAllowed(\n  headerName: string,\n  headerValue: string,\n  allowedHosts: ReadonlySet<string>,\n): void {\n  const url = `http://${headerValue}`;\n  if (!URL.canParse(url)) {\n    throw new Error(`Header \"${headerName}\" contains an invalid value and cannot be parsed.`);\n  }\n\n  const { hostname, pathname, search, hash, username, password } = new URL(url);\n  if (pathname !== '/' || search || hash || username || password) {\n    throw new Error(\n      `Header \"${headerName}\" with value \"${headerValue}\" contains characters that are not allowed.`,\n    );\n  }\n\n  if (!isHostAllowed(hostname, allowedHosts)) {\n    throw new Error(`Header \"${headerName}\" with value \"${headerValue}\" is not allowed.`);\n  }\n}\n\n/**\n * Checks if the hostname is allowed.\n * @param hostname - The hostname to check.\n * @param allowedHosts - A set of allowed hostnames.\n * @returns `true` if the hostname is allowed, `false` otherwise.\n */\nfunction isHostAllowed(hostname: string, allowedHosts: ReadonlySet<string>): boolean {\n  if (allowedHosts.has('*') || allowedHosts.has(hostname)) {\n    return true;\n  }\n\n  for (const allowedHost of allowedHosts) {\n    if (!allowedHost.startsWith('*.')) {\n      continue;\n    }\n\n    const domain = allowedHost.slice(1);\n    if (hostname.endsWith(domain)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Validates the headers of an incoming request.\n *\n * @param request - The incoming `Request` object containing the headers to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @param disableHostCheck - Whether to disable the host check.\n * @throws Error if any of the validated headers contain invalid values.\n */\nfunction validateHeaders(\n  request: Request,\n  allowedHosts: ReadonlySet<string>,\n  disableHostCheck: boolean,\n): void {\n  const headers = request.headers;\n  for (const headerName of HOST_HEADERS_TO_VALIDATE) {\n    const headerValue = getFirstHeaderValue(headers.get(headerName));\n    if (headerValue && !disableHostCheck) {\n      verifyHostAllowed(headerName, headerValue, allowedHosts);\n    }\n  }\n\n  const xForwardedPort = getFirstHeaderValue(headers.get('x-forwarded-port'));\n  if (xForwardedPort && !VALID_PORT_REGEX.test(xForwardedPort)) {\n    throw new Error('Header \"x-forwarded-port\" must be a numeric value.');\n  }\n\n  const xForwardedProto = getFirstHeaderValue(headers.get('x-forwarded-proto'));\n  if (xForwardedProto && !VALID_PROTO_REGEX.test(xForwardedProto)) {\n    throw new Error('Header \"x-forwarded-proto\" must be either \"http\" or \"https\".');\n  }\n\n  const xForwardedPrefix = getFirstHeaderValue(headers.get('x-forwarded-prefix'));\n  if (xForwardedPrefix && !VALID_PREFIX_REGEX.test(xForwardedPrefix)) {\n    throw new Error(\n      'Header \"x-forwarded-prefix\" is invalid. It must start with a \"/\" and contain ' +\n        'only alphanumeric characters, hyphens, and underscores, separated by single slashes.',\n    );\n  }\n}\n\n/**\n * Checks if a specific proxy header is allowed.\n *\n * @param headerName - The name of the proxy header to check.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns `true` if the header is allowed, `false` otherwise.\n */\nexport function isProxyHeaderAllowed(\n  headerName: string,\n  trustProxyHeaders: ReadonlySet<string>,\n): boolean {\n  return trustProxyHeaders.has(headerName.toLowerCase());\n}\n\n/**\n * Normalizes the `trustProxyHeaders` option to a consistent representation.\n * @param trustProxyHeaders The input `trustProxyHeaders` value.\n * @returns A `Set<string>` of normalized header names.\n */\nexport function normalizeTrustProxyHeaders(\n  trustProxyHeaders: boolean | readonly string[] | undefined,\n): ReadonlySet<string> {\n  if (trustProxyHeaders === undefined) {\n    return new Set(['x-forwarded-host', 'x-forwarded-proto']);\n  }\n\n  if (trustProxyHeaders === false) {\n    return new Set();\n  }\n\n  if (trustProxyHeaders === true) {\n    return X_FORWARDED_HEADERS;\n  }\n\n  return new Set(trustProxyHeaders.map((h) => h.toLowerCase()));\n}\n"],"names":["X_FORWARDED_HEADERS","Set","HOST_HEADERS_TO_VALIDATE","VALID_PORT_REGEX","VALID_PROTO_REGEX","VALID_PREFIX_REGEX","getFirstHeaderValue","value","toString","split","trim","validateRequest","request","allowedHosts","disableHostCheck","validateHeaders","validateUrl","URL","url","hostname","isHostAllowed","Error","sanitizeRequestHeaders","trustProxyHeaders","keysToDelete","deoptToCSR","key","headers","lowerKey","toLowerCase","startsWith","isProxyHeaderAllowed","console","warn","push","length","clonedReq","Request","clone","signal","delete","verifyHostAllowed","headerName","headerValue","canParse","pathname","search","hash","username","password","has","allowedHost","domain","slice","endsWith","get","xForwardedPort","test","xForwardedProto","xForwardedPrefix","normalizeTrustProxyHeaders","undefined","map","h"],"mappings":"AAWA,MAAMA,mBAAmB,GAAG,IAAIC,GAAG,CAAC,CAClC,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;AAKF,MAAMC,wBAAwB,GAA0B,CAAC,MAAM,EAAE,kBAAkB,CAAC;AAKpF,MAAMC,gBAAgB,GAAG,OAAO;AAKhC,MAAMC,iBAAiB,GAAG,WAAW;AAKrC,MAAMC,kBAAkB,GAAG,kCAAkC;AAgBvD,SAAUC,mBAAmBA,CACjCC,KAA2C,EAAA;AAE3C,EAAA,OAAOA,KAAK,EAAEC,QAAQ,EAAE,CAACC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAEC,IAAI,EAAE;AACnD;SAUgBC,eAAeA,CAC7BC,OAAgB,EAChBC,YAAiC,EACjCC,gBAAyB,EAAA;AAEzBC,EAAAA,eAAe,CAACH,OAAO,EAAEC,YAAY,EAAEC,gBAAgB,CAAC;EAExD,IAAI,CAACA,gBAAgB,EAAE;IACrBE,WAAW,CAAC,IAAIC,GAAG,CAACL,OAAO,CAACM,GAAG,CAAC,EAAEL,YAAY,CAAC;AACjD,EAAA;AACF;AASM,SAAUG,WAAWA,CAACE,GAAQ,EAAEL,YAAiC,EAAA;EACrE,MAAM;AAAEM,IAAAA;AAAQ,GAAE,GAAGD,GAAG;AACxB,EAAA,IAAI,CAACE,aAAa,CAACD,QAAQ,EAAEN,YAAY,CAAC,EAAE;AAC1C,IAAA,MAAM,IAAIQ,KAAK,CAAC,CAAA,mBAAA,EAAsBF,QAAQ,mBAAmB,CAAC;AACpE,EAAA;AACF;AAUM,SAAUG,sBAAsBA,CACpCV,OAAgB,EAChBW,iBAAsC,EAAA;EAEtC,MAAMC,YAAY,GAAa,EAAE;EACjC,IAAIC,UAAU,GAAG,KAAK;EAEtB,KAAK,MAAM,CAACC,GAAG,CAAC,IAAId,OAAO,CAACe,OAAO,EAAE;AACnC,IAAA,MAAMC,QAAQ,GAAGF,GAAG,CAACG,WAAW,EAAE;AAClC,IAAA,IAAID,QAAQ,CAACE,UAAU,CAAC,cAAc,CAAC,IAAI,CAACC,oBAAoB,CAACH,QAAQ,EAAEL,iBAAiB,CAAC,EAAE;MAE7FS,OAAO,CAACC,IAAI,CACV,CAAA,UAAA,EAAaP,GAAG,CAAA,8DAAA,CAAgE,GAC9E,yGAAyG,CAC5G;AACDD,MAAAA,UAAU,GAAG,IAAI;AACjBD,MAAAA,YAAY,CAACU,IAAI,CAACR,GAAG,CAAC;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,YAAY,CAACW,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO;MAAEvB,OAAO;AAAEa,MAAAA;KAAY;AAChC,EAAA;EAEA,MAAMW,SAAS,GAAG,IAAIC,OAAO,CAACzB,OAAO,CAAC0B,KAAK,EAAE,EAAE;IAC7CC,MAAM,EAAE3B,OAAO,CAAC2B;AACjB,GAAA,CAAC;AAEF,EAAA,MAAMZ,OAAO,GAAGS,SAAS,CAACT,OAAO;AACjC,EAAA,KAAK,MAAMD,GAAG,IAAIF,YAAY,EAAE;AAC9BG,IAAAA,OAAO,CAACa,MAAM,CAACd,GAAG,CAAC;AACrB,EAAA;EAEA,OAAO;AAAEd,IAAAA,OAAO,EAAEwB,SAAS;AAAEX,IAAAA;GAAY;AAC3C;AAUA,SAASgB,iBAAiBA,CACxBC,UAAkB,EAClBC,WAAmB,EACnB9B,YAAiC,EAAA;AAEjC,EAAA,MAAMK,GAAG,GAAG,CAAA,OAAA,EAAUyB,WAAW,CAAA,CAAE;AACnC,EAAA,IAAI,CAAC1B,GAAG,CAAC2B,QAAQ,CAAC1B,GAAG,CAAC,EAAE;AACtB,IAAA,MAAM,IAAIG,KAAK,CAAC,CAAA,QAAA,EAAWqB,UAAU,mDAAmD,CAAC;AAC3F,EAAA;EAEA,MAAM;IAAEvB,QAAQ;IAAE0B,QAAQ;IAAEC,MAAM;IAAEC,IAAI;IAAEC,QAAQ;AAAEC,IAAAA;GAAU,GAAG,IAAIhC,GAAG,CAACC,GAAG,CAAC;EAC7E,IAAI2B,QAAQ,KAAK,GAAG,IAAIC,MAAM,IAAIC,IAAI,IAAIC,QAAQ,IAAIC,QAAQ,EAAE;IAC9D,MAAM,IAAI5B,KAAK,CACb,CAAA,QAAA,EAAWqB,UAAU,CAAA,cAAA,EAAiBC,WAAW,6CAA6C,CAC/F;AACH,EAAA;AAEA,EAAA,IAAI,CAACvB,aAAa,CAACD,QAAQ,EAAEN,YAAY,CAAC,EAAE;IAC1C,MAAM,IAAIQ,KAAK,CAAC,CAAA,QAAA,EAAWqB,UAAU,CAAA,cAAA,EAAiBC,WAAW,mBAAmB,CAAC;AACvF,EAAA;AACF;AAQA,SAASvB,aAAaA,CAACD,QAAgB,EAAEN,YAAiC,EAAA;AACxE,EAAA,IAAIA,YAAY,CAACqC,GAAG,CAAC,GAAG,CAAC,IAAIrC,YAAY,CAACqC,GAAG,CAAC/B,QAAQ,CAAC,EAAE;AACvD,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,KAAK,MAAMgC,WAAW,IAAItC,YAAY,EAAE;AACtC,IAAA,IAAI,CAACsC,WAAW,CAACrB,UAAU,CAAC,IAAI,CAAC,EAAE;AACjC,MAAA;AACF,IAAA;AAEA,IAAA,MAAMsB,MAAM,GAAGD,WAAW,CAACE,KAAK,CAAC,CAAC,CAAC;AACnC,IAAA,IAAIlC,QAAQ,CAACmC,QAAQ,CAACF,MAAM,CAAC,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AAEA,EAAA,OAAO,KAAK;AACd;AAUA,SAASrC,eAAeA,CACtBH,OAAgB,EAChBC,YAAiC,EACjCC,gBAAyB,EAAA;AAEzB,EAAA,MAAMa,OAAO,GAAGf,OAAO,CAACe,OAAO;AAC/B,EAAA,KAAK,MAAMe,UAAU,IAAIxC,wBAAwB,EAAE;IACjD,MAAMyC,WAAW,GAAGrC,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAACb,UAAU,CAAC,CAAC;AAChE,IAAA,IAAIC,WAAW,IAAI,CAAC7B,gBAAgB,EAAE;AACpC2B,MAAAA,iBAAiB,CAACC,UAAU,EAAEC,WAAW,EAAE9B,YAAY,CAAC;AAC1D,IAAA;AACF,EAAA;EAEA,MAAM2C,cAAc,GAAGlD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,kBAAkB,CAAC,CAAC;EAC3E,IAAIC,cAAc,IAAI,CAACrD,gBAAgB,CAACsD,IAAI,CAACD,cAAc,CAAC,EAAE;AAC5D,IAAA,MAAM,IAAInC,KAAK,CAAC,oDAAoD,CAAC;AACvE,EAAA;EAEA,MAAMqC,eAAe,GAAGpD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,mBAAmB,CAAC,CAAC;EAC7E,IAAIG,eAAe,IAAI,CAACtD,iBAAiB,CAACqD,IAAI,CAACC,eAAe,CAAC,EAAE;AAC/D,IAAA,MAAM,IAAIrC,KAAK,CAAC,8DAA8D,CAAC;AACjF,EAAA;EAEA,MAAMsC,gBAAgB,GAAGrD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,oBAAoB,CAAC,CAAC;EAC/E,IAAII,gBAAgB,IAAI,CAACtD,kBAAkB,CAACoD,IAAI,CAACE,gBAAgB,CAAC,EAAE;AAClE,IAAA,MAAM,IAAItC,KAAK,CACb,+EAA+E,GAC7E,sFAAsF,CACzF;AACH,EAAA;AACF;AASM,SAAUU,oBAAoBA,CAClCW,UAAkB,EAClBnB,iBAAsC,EAAA;EAEtC,OAAOA,iBAAiB,CAAC2B,GAAG,CAACR,UAAU,CAACb,WAAW,EAAE,CAAC;AACxD;AAOM,SAAU+B,0BAA0BA,CACxCrC,iBAA0D,EAAA;EAE1D,IAAIA,iBAAiB,KAAKsC,SAAS,EAAE;IACnC,OAAO,IAAI5D,GAAG,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;AAC3D,EAAA;EAEA,IAAIsB,iBAAiB,KAAK,KAAK,EAAE;IAC/B,OAAO,IAAItB,GAAG,EAAE;AAClB,EAAA;EAEA,IAAIsB,iBAAiB,KAAK,IAAI,EAAE;AAC9B,IAAA,OAAOvB,mBAAmB;AAC5B,EAAA;AAEA,EAAA,OAAO,IAAIC,GAAG,CAACsB,iBAAiB,CAACuC,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAAClC,WAAW,EAAE,CAAC,CAAC;AAC/D;;;;"}
+{"version":3,"file":"_validation-chunk.mjs","sources":["../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/src/utils/validation.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Common X-Forwarded-* headers.\n */\nconst X_FORWARDED_HEADERS = new Set([\n  'x-forwarded-for',\n  'x-forwarded-host',\n  'x-forwarded-port',\n  'x-forwarded-proto',\n  'x-forwarded-prefix',\n]);\n\n/**\n * The set of headers that should be validated for host header injection attacks.\n */\nconst HOST_HEADERS_TO_VALIDATE: ReadonlyArray<string> = ['host', 'x-forwarded-host'];\n\n/**\n * Regular expression to validate that the port is a numeric value.\n */\nconst VALID_PORT_REGEX = /^\\d+$/;\n\n/**\n * Regular expression to validate that the protocol is either http or https (case-insensitive).\n */\nconst VALID_PROTO_REGEX = /^https?$/i;\n\n/**\n * Regular expression to validate that the prefix is valid.\n */\nconst VALID_PREFIX_REGEX = /^\\/([a-z0-9_-]+\\/)*[a-z0-9_-]*$/i;\n\n/**\n * Extracts the first value from a multi-value header string.\n *\n * @param value - A string or an array of strings representing the header values.\n *                If it's a string, values are expected to be comma-separated.\n * @returns The first trimmed value from the multi-value header, or `undefined` if the input is invalid or empty.\n *\n * @example\n * ```typescript\n * getFirstHeaderValue(\"value1, value2, value3\"); // \"value1\"\n * getFirstHeaderValue([\"value1\", \"value2\"]); // \"value1\"\n * getFirstHeaderValue(undefined); // undefined\n * ```\n */\nexport function getFirstHeaderValue(\n  value: string | string[] | undefined | null,\n): string | undefined {\n  return value?.toString().split(',', 1)[0]?.trim();\n}\n\n/**\n * Validates a request.\n *\n * @param request - The incoming `Request` object to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @param disableHostCheck - Whether to disable the host check.\n * @throws Error if any of the validated headers contain invalid values.\n */\nexport function validateRequest(\n  request: Request,\n  allowedHosts: ReadonlySet<string>,\n  disableHostCheck: boolean,\n): void {\n  validateHeaders(request, allowedHosts, disableHostCheck);\n\n  if (!disableHostCheck) {\n    validateUrl(new URL(request.url), allowedHosts);\n  }\n}\n\n/**\n * Validates that the hostname of a given URL is allowed.\n *\n * @param url - The URL object to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @throws Error if the hostname is not in the allowlist.\n */\nexport function validateUrl(url: URL, allowedHosts: ReadonlySet<string>): void {\n  const { hostname } = url;\n  if (!isHostAllowed(hostname, allowedHosts)) {\n    throw new Error(`URL with hostname \"${hostname}\" is not allowed.`);\n  }\n}\n\n/**\n * Sanitizes the proxy headers of a request by removing unallowed `X-Forwarded-*` headers.\n * If no headers need to be removed, the original request is returned without cloning.\n *\n * @param request - The incoming `Request` object to sanitize.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns An object containing the sanitized request, or the original request if no changes were needed.\n */\nexport function sanitizeRequestHeaders(\n  request: Request,\n  trustProxyHeaders: ReadonlySet<string>,\n): { request: Request; deoptToCSR: boolean } {\n  const keysToDelete: string[] = [];\n  let deoptToCSR = false;\n\n  for (const [key] of request.headers) {\n    const lowerKey = key.toLowerCase();\n    if (lowerKey.startsWith('x-forwarded-') && !isProxyHeaderAllowed(lowerKey, trustProxyHeaders)) {\n      // eslint-disable-next-line no-console\n      console.warn(\n        `Received \"${key}\" header but \"trustProxyHeaders\" was not set up to allow it.\\n` +\n          `For more information, see https://angular.dev/best-practices/security#configuring-trusted-proxy-headers`,\n      );\n      deoptToCSR = true;\n      keysToDelete.push(key);\n    }\n  }\n\n  if (keysToDelete.length === 0) {\n    return { request, deoptToCSR };\n  }\n\n  const clonedReq = new Request(request.clone(), {\n    signal: request.signal,\n  });\n\n  const headers = clonedReq.headers;\n  for (const key of keysToDelete) {\n    headers.delete(key);\n  }\n\n  return { request: clonedReq, deoptToCSR };\n}\n\n/**\n * Validates a specific host header value against the allowed hosts.\n *\n * @param headerName - The name of the header to validate (e.g., 'host', 'x-forwarded-host').\n * @param headerValue - The value of the header to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @throws Error if the header value is invalid or the hostname is not in the allowlist.\n */\nfunction verifyHostAllowed(\n  headerName: string,\n  headerValue: string,\n  allowedHosts: ReadonlySet<string>,\n): void {\n  const url = `http://${headerValue}`;\n  if (!URL.canParse(url)) {\n    throw new Error(`Header \"${headerName}\" contains an invalid value and cannot be parsed.`);\n  }\n\n  const { hostname, pathname, search, hash, username, password } = new URL(url);\n  if (pathname !== '/' || search || hash || username || password) {\n    throw new Error(\n      `Header \"${headerName}\" with value \"${headerValue}\" contains characters that are not allowed.`,\n    );\n  }\n\n  if (!isHostAllowed(hostname, allowedHosts)) {\n    throw new Error(`Header \"${headerName}\" with value \"${headerValue}\" is not allowed.`);\n  }\n}\n\n/**\n * Checks if the hostname is allowed.\n * @param hostname - The hostname to check.\n * @param allowedHosts - A set of allowed hostnames.\n * @returns `true` if the hostname is allowed, `false` otherwise.\n */\nfunction isHostAllowed(hostname: string, allowedHosts: ReadonlySet<string>): boolean {\n  if (allowedHosts.has('*') || allowedHosts.has(hostname)) {\n    return true;\n  }\n\n  for (const allowedHost of allowedHosts) {\n    if (!allowedHost.startsWith('*.')) {\n      continue;\n    }\n\n    const domain = allowedHost.slice(1);\n    if (hostname.endsWith(domain)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Validates the headers of an incoming request.\n *\n * @param request - The incoming `Request` object containing the headers to validate.\n * @param allowedHosts - A set of allowed hostnames.\n * @param disableHostCheck - Whether to disable the host check.\n * @throws Error if any of the validated headers contain invalid values.\n */\nfunction validateHeaders(\n  request: Request,\n  allowedHosts: ReadonlySet<string>,\n  disableHostCheck: boolean,\n): void {\n  const headers = request.headers;\n  for (const headerName of HOST_HEADERS_TO_VALIDATE) {\n    const headerValue = getFirstHeaderValue(headers.get(headerName));\n    if (headerValue && !disableHostCheck) {\n      verifyHostAllowed(headerName, headerValue, allowedHosts);\n    }\n  }\n\n  const xForwardedPort = getFirstHeaderValue(headers.get('x-forwarded-port'));\n  if (xForwardedPort && !VALID_PORT_REGEX.test(xForwardedPort)) {\n    throw new Error('Header \"x-forwarded-port\" must be a numeric value.');\n  }\n\n  const xForwardedProto = getFirstHeaderValue(headers.get('x-forwarded-proto'));\n  if (xForwardedProto && !VALID_PROTO_REGEX.test(xForwardedProto)) {\n    throw new Error('Header \"x-forwarded-proto\" must be either \"http\" or \"https\".');\n  }\n\n  const xForwardedPrefix = getFirstHeaderValue(headers.get('x-forwarded-prefix'));\n  if (xForwardedPrefix && !VALID_PREFIX_REGEX.test(xForwardedPrefix)) {\n    throw new Error(\n      'Header \"x-forwarded-prefix\" is invalid. It must start with a \"/\" and contain ' +\n        'only alphanumeric characters, hyphens, and underscores, separated by single slashes.',\n    );\n  }\n}\n\n/**\n * Checks if a specific proxy header is allowed.\n *\n * @param headerName - The name of the proxy header to check.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns `true` if the header is allowed, `false` otherwise.\n */\nexport function isProxyHeaderAllowed(\n  headerName: string,\n  trustProxyHeaders: ReadonlySet<string>,\n): boolean {\n  return trustProxyHeaders.has(headerName.toLowerCase());\n}\n\n/**\n * Normalizes the `trustProxyHeaders` option to a consistent representation.\n * @param trustProxyHeaders The input `trustProxyHeaders` value.\n * @returns A `Set<string>` of normalized header names.\n */\nexport function normalizeTrustProxyHeaders(\n  trustProxyHeaders: boolean | readonly string[] | undefined,\n): ReadonlySet<string> {\n  if (trustProxyHeaders === undefined) {\n    return new Set(['x-forwarded-host', 'x-forwarded-proto']);\n  }\n\n  if (trustProxyHeaders === false) {\n    return new Set();\n  }\n\n  if (trustProxyHeaders === true) {\n    return X_FORWARDED_HEADERS;\n  }\n\n  return new Set(trustProxyHeaders.map((h) => h.toLowerCase()));\n}\n"],"names":["X_FORWARDED_HEADERS","Set","HOST_HEADERS_TO_VALIDATE","VALID_PORT_REGEX","VALID_PROTO_REGEX","VALID_PREFIX_REGEX","getFirstHeaderValue","value","toString","split","trim","validateRequest","request","allowedHosts","disableHostCheck","validateHeaders","validateUrl","URL","url","hostname","isHostAllowed","Error","sanitizeRequestHeaders","trustProxyHeaders","keysToDelete","deoptToCSR","key","headers","lowerKey","toLowerCase","startsWith","isProxyHeaderAllowed","console","warn","push","length","clonedReq","Request","clone","signal","delete","verifyHostAllowed","headerName","headerValue","canParse","pathname","search","hash","username","password","has","allowedHost","domain","slice","endsWith","get","xForwardedPort","test","xForwardedProto","xForwardedPrefix","normalizeTrustProxyHeaders","undefined","map","h"],"mappings":"AAWA,MAAMA,mBAAmB,GAAG,IAAIC,GAAG,CAAC,CAClC,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;AAKF,MAAMC,wBAAwB,GAA0B,CAAC,MAAM,EAAE,kBAAkB,CAAC;AAKpF,MAAMC,gBAAgB,GAAG,OAAO;AAKhC,MAAMC,iBAAiB,GAAG,WAAW;AAKrC,MAAMC,kBAAkB,GAAG,kCAAkC;AAgBvD,SAAUC,mBAAmBA,CACjCC,KAA2C,EAAA;AAE3C,EAAA,OAAOA,KAAK,EAAEC,QAAQ,EAAE,CAACC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAEC,IAAI,EAAE;AACnD;SAUgBC,eAAeA,CAC7BC,OAAgB,EAChBC,YAAiC,EACjCC,gBAAyB,EAAA;AAEzBC,EAAAA,eAAe,CAACH,OAAO,EAAEC,YAAY,EAAEC,gBAAgB,CAAC;EAExD,IAAI,CAACA,gBAAgB,EAAE;IACrBE,WAAW,CAAC,IAAIC,GAAG,CAACL,OAAO,CAACM,GAAG,CAAC,EAAEL,YAAY,CAAC;AACjD,EAAA;AACF;AASM,SAAUG,WAAWA,CAACE,GAAQ,EAAEL,YAAiC,EAAA;EACrE,MAAM;AAAEM,IAAAA;AAAQ,GAAE,GAAGD,GAAG;AACxB,EAAA,IAAI,CAACE,aAAa,CAACD,QAAQ,EAAEN,YAAY,CAAC,EAAE;AAC1C,IAAA,MAAM,IAAIQ,KAAK,CAAC,CAAA,mBAAA,EAAsBF,QAAQ,mBAAmB,CAAC;AACpE,EAAA;AACF;AAUM,SAAUG,sBAAsBA,CACpCV,OAAgB,EAChBW,iBAAsC,EAAA;EAEtC,MAAMC,YAAY,GAAa,EAAE;EACjC,IAAIC,UAAU,GAAG,KAAK;EAEtB,KAAK,MAAM,CAACC,GAAG,CAAC,IAAId,OAAO,CAACe,OAAO,EAAE;AACnC,IAAA,MAAMC,QAAQ,GAAGF,GAAG,CAACG,WAAW,EAAE;AAClC,IAAA,IAAID,QAAQ,CAACE,UAAU,CAAC,cAAc,CAAC,IAAI,CAACC,oBAAoB,CAACH,QAAQ,EAAEL,iBAAiB,CAAC,EAAE;MAE7FS,OAAO,CAACC,IAAI,CACV,CAAA,UAAA,EAAaP,GAAG,CAAA,8DAAA,CAAgE,GAC9E,yGAAyG,CAC5G;AACDD,MAAAA,UAAU,GAAG,IAAI;AACjBD,MAAAA,YAAY,CAACU,IAAI,CAACR,GAAG,CAAC;AACxB,IAAA;AACF,EAAA;AAEA,EAAA,IAAIF,YAAY,CAACW,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO;MAAEvB,OAAO;AAAEa,MAAAA;KAAY;AAChC,EAAA;EAEA,MAAMW,SAAS,GAAG,IAAIC,OAAO,CAACzB,OAAO,CAAC0B,KAAK,EAAE,EAAE;IAC7CC,MAAM,EAAE3B,OAAO,CAAC2B;AACjB,GAAA,CAAC;AAEF,EAAA,MAAMZ,OAAO,GAAGS,SAAS,CAACT,OAAO;AACjC,EAAA,KAAK,MAAMD,GAAG,IAAIF,YAAY,EAAE;AAC9BG,IAAAA,OAAO,CAACa,MAAM,CAACd,GAAG,CAAC;AACrB,EAAA;EAEA,OAAO;AAAEd,IAAAA,OAAO,EAAEwB,SAAS;AAAEX,IAAAA;GAAY;AAC3C;AAUA,SAASgB,iBAAiBA,CACxBC,UAAkB,EAClBC,WAAmB,EACnB9B,YAAiC,EAAA;AAEjC,EAAA,MAAMK,GAAG,GAAG,CAAA,OAAA,EAAUyB,WAAW,CAAA,CAAE;AACnC,EAAA,IAAI,CAAC1B,GAAG,CAAC2B,QAAQ,CAAC1B,GAAG,CAAC,EAAE;AACtB,IAAA,MAAM,IAAIG,KAAK,CAAC,CAAA,QAAA,EAAWqB,UAAU,mDAAmD,CAAC;AAC3F,EAAA;EAEA,MAAM;IAAEvB,QAAQ;IAAE0B,QAAQ;IAAEC,MAAM;IAAEC,IAAI;IAAEC,QAAQ;AAAEC,IAAAA;GAAU,GAAG,IAAIhC,GAAG,CAACC,GAAG,CAAC;EAC7E,IAAI2B,QAAQ,KAAK,GAAG,IAAIC,MAAM,IAAIC,IAAI,IAAIC,QAAQ,IAAIC,QAAQ,EAAE;IAC9D,MAAM,IAAI5B,KAAK,CACb,CAAA,QAAA,EAAWqB,UAAU,CAAA,cAAA,EAAiBC,WAAW,6CAA6C,CAC/F;AACH,EAAA;AAEA,EAAA,IAAI,CAACvB,aAAa,CAACD,QAAQ,EAAEN,YAAY,CAAC,EAAE;IAC1C,MAAM,IAAIQ,KAAK,CAAC,CAAA,QAAA,EAAWqB,UAAU,CAAA,cAAA,EAAiBC,WAAW,mBAAmB,CAAC;AACvF,EAAA;AACF;AAQA,SAASvB,aAAaA,CAACD,QAAgB,EAAEN,YAAiC,EAAA;AACxE,EAAA,IAAIA,YAAY,CAACqC,GAAG,CAAC,GAAG,CAAC,IAAIrC,YAAY,CAACqC,GAAG,CAAC/B,QAAQ,CAAC,EAAE;AACvD,IAAA,OAAO,IAAI;AACb,EAAA;AAEA,EAAA,KAAK,MAAMgC,WAAW,IAAItC,YAAY,EAAE;AACtC,IAAA,IAAI,CAACsC,WAAW,CAACrB,UAAU,CAAC,IAAI,CAAC,EAAE;AACjC,MAAA;AACF,IAAA;AAEA,IAAA,MAAMsB,MAAM,GAAGD,WAAW,CAACE,KAAK,CAAC,CAAC,CAAC;AACnC,IAAA,IAAIlC,QAAQ,CAACmC,QAAQ,CAACF,MAAM,CAAC,EAAE;AAC7B,MAAA,OAAO,IAAI;AACb,IAAA;AACF,EAAA;AAEA,EAAA,OAAO,KAAK;AACd;AAUA,SAASrC,eAAeA,CACtBH,OAAgB,EAChBC,YAAiC,EACjCC,gBAAyB,EAAA;AAEzB,EAAA,MAAMa,OAAO,GAAGf,OAAO,CAACe,OAAO;AAC/B,EAAA,KAAK,MAAMe,UAAU,IAAIxC,wBAAwB,EAAE;IACjD,MAAMyC,WAAW,GAAGrC,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAACb,UAAU,CAAC,CAAC;AAChE,IAAA,IAAIC,WAAW,IAAI,CAAC7B,gBAAgB,EAAE;AACpC2B,MAAAA,iBAAiB,CAACC,UAAU,EAAEC,WAAW,EAAE9B,YAAY,CAAC;AAC1D,IAAA;AACF,EAAA;EAEA,MAAM2C,cAAc,GAAGlD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,kBAAkB,CAAC,CAAC;EAC3E,IAAIC,cAAc,IAAI,CAACrD,gBAAgB,CAACsD,IAAI,CAACD,cAAc,CAAC,EAAE;AAC5D,IAAA,MAAM,IAAInC,KAAK,CAAC,oDAAoD,CAAC;AACvE,EAAA;EAEA,MAAMqC,eAAe,GAAGpD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,mBAAmB,CAAC,CAAC;EAC7E,IAAIG,eAAe,IAAI,CAACtD,iBAAiB,CAACqD,IAAI,CAACC,eAAe,CAAC,EAAE;AAC/D,IAAA,MAAM,IAAIrC,KAAK,CAAC,8DAA8D,CAAC;AACjF,EAAA;EAEA,MAAMsC,gBAAgB,GAAGrD,mBAAmB,CAACqB,OAAO,CAAC4B,GAAG,CAAC,oBAAoB,CAAC,CAAC;EAC/E,IAAII,gBAAgB,IAAI,CAACtD,kBAAkB,CAACoD,IAAI,CAACE,gBAAgB,CAAC,EAAE;AAClE,IAAA,MAAM,IAAItC,KAAK,CACb,+EAA+E,GAC7E,sFAAsF,CACzF;AACH,EAAA;AACF;AASM,SAAUU,oBAAoBA,CAClCW,UAAkB,EAClBnB,iBAAsC,EAAA;EAEtC,OAAOA,iBAAiB,CAAC2B,GAAG,CAACR,UAAU,CAACb,WAAW,EAAE,CAAC;AACxD;AAOM,SAAU+B,0BAA0BA,CACxCrC,iBAA0D,EAAA;EAE1D,IAAIA,iBAAiB,KAAKsC,SAAS,EAAE;IACnC,OAAO,IAAI5D,GAAG,CAAC,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;AAC3D,EAAA;EAEA,IAAIsB,iBAAiB,KAAK,KAAK,EAAE;IAC/B,OAAO,IAAItB,GAAG,EAAE;AAClB,EAAA;EAEA,IAAIsB,iBAAiB,KAAK,IAAI,EAAE;AAC9B,IAAA,OAAOvB,mBAAmB;AAC5B,EAAA;AAEA,EAAA,OAAO,IAAIC,GAAG,CAACsB,iBAAiB,CAACuC,GAAG,CAAEC,CAAC,IAAKA,CAAC,CAAClC,WAAW,EAAE,CAAC,CAAC;AAC/D;;;;"}

fesm2022/node.mjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"node.mjs","sources":["../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/environment-options.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/errors.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/inline-css-processor.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/peformance-profiler.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/common-engine.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/request.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/app-engine.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/handler.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/response.ts","../../../../../../darwin_arm64-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/module.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Retrieves the list of allowed hosts from the environment variable `NG_ALLOWED_HOSTS`.\n * @returns An array of allowed hosts.\n */\nexport function getAllowedHostsFromEnv(): ReadonlyArray<string> | undefined {\n  return getArrayFromEnv('NG_ALLOWED_HOSTS');\n}\n\n/**\n * Retrieves the list of trusted proxy headers from the environment variable `NG_TRUST_PROXY_HEADERS`.\n * @returns An array of trusted proxy headers.\n */\nexport function getTrustProxyHeadersFromEnv(): ReadonlyArray<string> | undefined {\n  return getArrayFromEnv('NG_TRUST_PROXY_HEADERS');\n}\n\nfunction getArrayFromEnv(envName: string): ReadonlyArray<string> | undefined {\n  const envValue = process.env[envName];\n  if (!envValue) {\n    return undefined;\n  }\n\n  const values: string[] = [];\n  for (const value of envValue.split(',')) {\n    const trimmed = value.trim();\n    if (trimmed.length > 0) {\n      values.push(trimmed);\n    }\n  }\n\n  return values;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Attaches listeners to the Node.js process to capture and handle unhandled rejections and uncaught exceptions.\n * Captured errors are logged to the console. This function logs errors to the console, preventing unhandled errors\n * from crashing the server. It is particularly useful for Zoneless apps, ensuring error handling without relying on Zone.js.\n *\n * @remarks\n * This function is a no-op if zone.js is available.\n * For Zone-based apps, similar functionality is provided by Zone.js itself. See the Zone.js implementation here:\n * https://github.com/angular/angular/blob/4a8d0b79001ec09bcd6f2d6b15117aa6aac1932c/packages/zone.js/lib/node/node.ts#L94%7C\n *\n * @internal\n */\nexport function attachNodeGlobalErrorHandlers(): void {\n  if (typeof Zone !== 'undefined') {\n    return;\n  }\n\n  // Ensure that the listeners are registered only once.\n  // Otherwise, multiple instances may be registered during edit/refresh.\n  const gThis: typeof globalThis & { ngAttachNodeGlobalErrorHandlersCalled?: boolean } = globalThis;\n  if (gThis.ngAttachNodeGlobalErrorHandlersCalled) {\n    return;\n  }\n\n  gThis.ngAttachNodeGlobalErrorHandlersCalled = true;\n\n  process\n    // eslint-disable-next-line no-console\n    .on('unhandledRejection', (error) => console.error('unhandledRejection', error))\n    // eslint-disable-next-line no-console\n    .on('uncaughtException', (error) => console.error('uncaughtException', error));\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ɵInlineCriticalCssProcessor as InlineCriticalCssProcessor } from '@angular/ssr';\nimport { readFile } from 'node:fs/promises';\n\nexport class CommonEngineInlineCriticalCssProcessor {\n  private readonly resourceCache = new Map<string, string>();\n\n  async process(html: string, outputPath: string | undefined): Promise<string> {\n    const beasties = new InlineCriticalCssProcessor(async (path) => {\n      let resourceContent = this.resourceCache.get(path);\n      if (resourceContent === undefined) {\n        resourceContent = await readFile(path, 'utf-8');\n        this.resourceCache.set(path, resourceContent);\n      }\n\n      return resourceContent;\n    }, outputPath);\n\n    return beasties.process(html);\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nconst PERFORMANCE_MARK_PREFIX = '🅰️';\n\nexport function printPerformanceLogs(): void {\n  let maxWordLength = 0;\n  const benchmarks: [step: string, value: string][] = [];\n\n  for (const { name, duration } of performance.getEntriesByType('measure')) {\n    if (!name.startsWith(PERFORMANCE_MARK_PREFIX)) {\n      continue;\n    }\n\n    // `🅰️:Retrieve SSG Page` -> `Retrieve SSG Page:`\n    const step = name.slice(PERFORMANCE_MARK_PREFIX.length + 1) + ':';\n    if (step.length > maxWordLength) {\n      maxWordLength = step.length;\n    }\n\n    benchmarks.push([step, `${duration.toFixed(1)}ms`]);\n    performance.clearMeasures(name);\n  }\n\n  /* eslint-disable no-console */\n  console.log('********** Performance results **********');\n  for (const [step, value] of benchmarks) {\n    const spaces = maxWordLength - step.length + 5;\n    console.log(step + ' '.repeat(spaces) + value);\n  }\n  console.log('*****************************************');\n  /* eslint-enable no-console */\n}\n\nexport async function runMethodAndMeasurePerf<T>(\n  label: string,\n  asyncMethod: () => Promise<T>,\n): Promise<T> {\n  const labelName = `${PERFORMANCE_MARK_PREFIX}:${label}`;\n  const startLabel = `start:${labelName}`;\n  const endLabel = `end:${labelName}`;\n\n  try {\n    performance.mark(startLabel);\n\n    return await asyncMethod();\n  } finally {\n    performance.mark(endLabel);\n    performance.measure(labelName, startLabel, endLabel);\n    performance.clearMarks(startLabel);\n    performance.clearMarks(endLabel);\n  }\n}\n\nexport function noopRunMethodAndMeasurePerf<T>(\n  label: string,\n  asyncMethod: () => Promise<T>,\n): Promise<T> {\n  return asyncMethod();\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ApplicationRef, StaticProvider, Type } from '@angular/core';\nimport { BootstrapContext } from '@angular/platform-browser';\nimport { renderApplication, renderModule, ɵSERVER_CONTEXT } from '@angular/platform-server';\nimport * as fs from 'node:fs';\nimport { dirname, join, normalize, resolve } from 'node:path';\nimport { URL } from 'node:url';\nimport { validateUrl } from '../../../src/utils/validation';\nimport { getAllowedHostsFromEnv } from '../environment-options';\nimport { attachNodeGlobalErrorHandlers } from '../errors';\nimport { CommonEngineInlineCriticalCssProcessor } from './inline-css-processor';\nimport {\n  noopRunMethodAndMeasurePerf,\n  printPerformanceLogs,\n  runMethodAndMeasurePerf,\n} from './peformance-profiler';\n\nconst SSG_MARKER_REGEXP = /ng-server-context=[\"']\\w*\\|?ssg\\|?\\w*[\"']/;\n\nexport interface CommonEngineOptions {\n  /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n  bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n  /** A set of platform level providers for all requests. */\n  providers?: StaticProvider[];\n\n  /** Enable request performance profiling data collection and printing the results in the server console. */\n  enablePerformanceProfiler?: boolean;\n\n  /** A set of hostnames that are allowed to access the server. */\n  allowedHosts?: readonly string[];\n}\n\nexport interface CommonEngineRenderOptions {\n  /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n  bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n  /** A set of platform level providers for the current request. */\n  providers?: StaticProvider[];\n  url?: string;\n  document?: string;\n  documentFilePath?: string;\n\n  /**\n   * Reduce render blocking requests by inlining critical CSS.\n   * Defaults to true.\n   */\n  inlineCriticalCss?: boolean;\n\n  /**\n   * Base path location of index file.\n   * Defaults to the 'documentFilePath' dirname when not provided.\n   */\n  publicPath?: string;\n}\n\n/**\n * A common engine to use to server render an application.\n */\n\nexport class CommonEngine {\n  private readonly templateCache = new Map<string, string>();\n  private readonly inlineCriticalCssProcessor = new CommonEngineInlineCriticalCssProcessor();\n  private readonly pageIsSSG = new Map<string, boolean>();\n  private readonly allowedHosts: ReadonlySet<string>;\n\n  constructor(private options?: CommonEngineOptions) {\n    this.allowedHosts = new Set(getAllowedHostsFromEnv() ?? this.options?.allowedHosts ?? []);\n\n    attachNodeGlobalErrorHandlers();\n  }\n\n  /**\n   * Render an HTML document for a specific URL with specified\n   * render options\n   */\n  async render(opts: CommonEngineRenderOptions): Promise<string> {\n    const { url } = opts;\n\n    if (url && URL.canParse(url)) {\n      const urlObj = new URL(url);\n      try {\n        validateUrl(urlObj, this.allowedHosts);\n      } catch (error) {\n        const isAllowedHostConfigured = this.allowedHosts.size > 0;\n        // eslint-disable-next-line no-console\n        console.error(\n          `ERROR: ${(error as Error).message}` +\n            'Please provide a list of allowed hosts in the \"allowedHosts\" option in the \"CommonEngine\" constructor.',\n          isAllowedHostConfigured\n            ? ''\n            : '\\nFalling back to client side rendering. This will become a 400 Bad Request in a future major version.',\n        );\n\n        if (!isAllowedHostConfigured) {\n          // Fallback to CSR to avoid a breaking change.\n          // TODO(alanagius): Return a 400 and remove this fallback in the next major version (v22).\n          let document = opts.document;\n          if (!document && opts.documentFilePath) {\n            document = opts.document ?? (await this.getDocument(opts.documentFilePath));\n          }\n\n          if (document) {\n            return document;\n          }\n        }\n\n        throw error;\n      }\n    }\n\n    const enablePerformanceProfiler = this.options?.enablePerformanceProfiler;\n\n    const runMethod = enablePerformanceProfiler\n      ? runMethodAndMeasurePerf\n      : noopRunMethodAndMeasurePerf;\n\n    let html = await runMethod('Retrieve SSG Page', () => this.retrieveSSGPage(opts));\n\n    if (html === undefined) {\n      html = await runMethod('Render Page', () => this.renderApplication(opts));\n\n      if (opts.inlineCriticalCss !== false) {\n        const content = await runMethod('Inline Critical CSS', () =>\n          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n          this.inlineCriticalCss(html!, opts),\n        );\n\n        html = content;\n      }\n    }\n\n    if (enablePerformanceProfiler) {\n      printPerformanceLogs();\n    }\n\n    return html;\n  }\n\n  private inlineCriticalCss(html: string, opts: CommonEngineRenderOptions): Promise<string> {\n    const outputPath =\n      opts.publicPath ?? (opts.documentFilePath ? dirname(opts.documentFilePath) : '');\n\n    return this.inlineCriticalCssProcessor.process(html, outputPath);\n  }\n\n  private async retrieveSSGPage(opts: CommonEngineRenderOptions): Promise<string | undefined> {\n    const { publicPath, documentFilePath, url } = opts;\n    if (!publicPath || !documentFilePath || url === undefined) {\n      return undefined;\n    }\n\n    const { pathname } = new URL(url, 'resolve://');\n    // Do not use `resolve` here as otherwise it can lead to path traversal vulnerability.\n    // See: https://portswigger.net/web-security/file-path-traversal\n    const pagePath = join(publicPath, pathname, 'index.html');\n\n    if (this.pageIsSSG.get(pagePath)) {\n      // Serve pre-rendered page.\n      return fs.promises.readFile(pagePath, 'utf-8');\n    }\n\n    if (!pagePath.startsWith(normalize(publicPath))) {\n      // Potential path traversal detected.\n      return undefined;\n    }\n\n    if (pagePath === resolve(documentFilePath) || !(await exists(pagePath))) {\n      // View matches with prerender path or file does not exist.\n      this.pageIsSSG.set(pagePath, false);\n\n      return undefined;\n    }\n\n    // Static file exists.\n    const content = await fs.promises.readFile(pagePath, 'utf-8');\n    const isSSG = SSG_MARKER_REGEXP.test(content);\n    this.pageIsSSG.set(pagePath, isSSG);\n\n    return isSSG ? content : undefined;\n  }\n\n  private async renderApplication(opts: CommonEngineRenderOptions): Promise<string> {\n    const moduleOrFactory = this.options?.bootstrap ?? opts.bootstrap;\n    if (!moduleOrFactory) {\n      throw new Error('A module or bootstrap option must be provided.');\n    }\n\n    const extraProviders: StaticProvider[] = [\n      { provide: ɵSERVER_CONTEXT, useValue: 'ssr' },\n      ...(opts.providers ?? []),\n      ...(this.options?.providers ?? []),\n    ];\n\n    let document = opts.document;\n    if (!document && opts.documentFilePath) {\n      document = await this.getDocument(opts.documentFilePath);\n    }\n\n    const commonRenderingOptions = {\n      url: opts.url,\n      document,\n      // Validation is already happened in the render method.\n      allowedHosts: ['*'],\n    };\n\n    return isBootstrapFn(moduleOrFactory)\n      ? renderApplication(moduleOrFactory, {\n          platformProviders: extraProviders,\n          ...commonRenderingOptions,\n        })\n      : renderModule(moduleOrFactory, { extraProviders, ...commonRenderingOptions });\n  }\n\n  /** Retrieve the document from the cache or the filesystem */\n  private async getDocument(filePath: string): Promise<string> {\n    let doc = this.templateCache.get(filePath);\n\n    if (!doc) {\n      doc = await fs.promises.readFile(filePath, 'utf-8');\n      this.templateCache.set(filePath, doc);\n    }\n\n    return doc;\n  }\n}\n\nasync function exists(path: fs.PathLike): Promise<boolean> {\n  try {\n    await fs.promises.access(path, fs.constants.F_OK);\n\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction isBootstrapFn(\n  value: unknown,\n): value is (context: BootstrapContext) => Promise<ApplicationRef> {\n  // We can differentiate between a module and a bootstrap function by reading compiler-generated `ɵmod` static property:\n  return typeof value === 'function' && !('ɵmod' in value);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingHttpHeaders, IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport {\n  getFirstHeaderValue,\n  isProxyHeaderAllowed,\n  normalizeTrustProxyHeaders,\n} from '../../src/utils/validation';\n\n/**\n * A set containing all the pseudo-headers defined in the HTTP/2 specification.\n *\n * This set can be used to filter out pseudo-headers from a list of headers,\n * as they are not allowed to be set directly using the `Node.js` Undici API or\n * the web `Headers` API.\n */\nconst HTTP2_PSEUDO_HEADERS: ReadonlySet<string> = new Set([\n  ':method',\n  ':scheme',\n  ':authority',\n  ':path',\n  ':status',\n]);\n\n/**\n * Converts a Node.js `IncomingMessage` or `Http2ServerRequest` into a\n * Web Standard `Request` object.\n *\n * This function adapts the Node.js request objects to a format that can\n * be used by web platform APIs.\n *\n * @param nodeRequest - The Node.js request object (`IncomingMessage` or `Http2ServerRequest`) to convert.\n * @param trustProxyHeaders - A boolean or an array of proxy headers to trust when constructing the request URL.\n *\n * @remarks\n * When `trustProxyHeaders` is enabled, headers such as `X-Forwarded-Host` and\n * `X-Forwarded-Prefix` should ideally be strictly validated at a higher infrastructure\n * level (e.g., at the reverse proxy or API gateway) before reaching the application.\n *\n * @returns A Web Standard `Request` object.\n */\nexport function createWebRequestFromNodeRequest(\n  nodeRequest: IncomingMessage | Http2ServerRequest,\n  trustProxyHeaders?: boolean | readonly string[],\n): Request {\n  const trustProxyHeadersNormalized = normalizeTrustProxyHeaders(trustProxyHeaders);\n  const { headers, method = 'GET' } = nodeRequest;\n  const withBody = method !== 'GET' && method !== 'HEAD';\n  const referrer = headers.referer && URL.canParse(headers.referer) ? headers.referer : undefined;\n\n  return new Request(createRequestUrl(nodeRequest, trustProxyHeadersNormalized), {\n    method,\n    headers: createRequestHeaders(headers),\n    body: withBody ? nodeRequest : undefined,\n    duplex: withBody ? 'half' : undefined,\n    referrer,\n  });\n}\n\n/**\n * Creates a `Headers` object from Node.js `IncomingHttpHeaders`.\n *\n * @param nodeHeaders - The Node.js `IncomingHttpHeaders` object to convert.\n * @returns A `Headers` object containing the converted headers.\n */\nfunction createRequestHeaders(nodeHeaders: IncomingHttpHeaders): Headers {\n  const headers = new Headers();\n\n  for (const [name, value] of Object.entries(nodeHeaders)) {\n    if (HTTP2_PSEUDO_HEADERS.has(name)) {\n      continue;\n    }\n\n    if (typeof value === 'string') {\n      headers.append(name, value);\n    } else if (Array.isArray(value)) {\n      for (const item of value) {\n        headers.append(name, item);\n      }\n    }\n  }\n\n  return headers;\n}\n\n/**\n * Creates a `URL` object from a Node.js `IncomingMessage`, taking into account the protocol, host, and port.\n *\n * @param nodeRequest - The Node.js `IncomingMessage` or `Http2ServerRequest` object to extract URL information from.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n *\n * @remarks\n * When `trustProxyHeaders` is enabled, headers such as `X-Forwarded-Host` and\n * `X-Forwarded-Prefix` should ideally be strictly validated at a higher infrastructure\n * level (e.g., at the reverse proxy or API gateway) before reaching the application.\n *\n * @returns A `URL` object representing the request URL.\n */\nexport function createRequestUrl(\n  nodeRequest: IncomingMessage | Http2ServerRequest,\n  trustProxyHeaders: ReadonlySet<string>,\n): URL {\n  const {\n    headers,\n    socket,\n    url = '',\n    originalUrl,\n  } = nodeRequest as IncomingMessage & { originalUrl?: string };\n\n  const protocol =\n    getAllowedProxyHeaderValue(headers, 'x-forwarded-proto', trustProxyHeaders) ??\n    ('encrypted' in socket && socket.encrypted ? 'https' : 'http');\n\n  const hostname =\n    getAllowedProxyHeaderValue(headers, 'x-forwarded-host', trustProxyHeaders) ??\n    headers.host ??\n    headers[':authority'];\n\n  if (Array.isArray(hostname)) {\n    throw new Error('host value cannot be an array.');\n  }\n\n  let hostnameWithPort = hostname;\n  if (!hostname?.includes(':')) {\n    const port = getAllowedProxyHeaderValue(headers, 'x-forwarded-port', trustProxyHeaders);\n    if (port) {\n      hostnameWithPort += `:${port}`;\n    }\n  }\n\n  return new URL(`${protocol}://${hostnameWithPort}${originalUrl ?? url}`);\n}\n\n/**\n * Gets the first value of an allowed proxy header.\n *\n * @param headers - The Node.js incoming HTTP headers.\n * @param headerName - The name of the proxy header to retrieve.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns The value of the allowed proxy header, or `undefined` if not allowed or not present.\n */\nfunction getAllowedProxyHeaderValue(\n  headers: IncomingHttpHeaders,\n  headerName: string,\n  trustProxyHeaders: ReadonlySet<string>,\n): string | undefined {\n  return isProxyHeaderAllowed(headerName, trustProxyHeaders)\n    ? getFirstHeaderValue(headers[headerName])\n    : undefined;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { AngularAppEngine } from '@angular/ssr';\nimport type { IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { AngularAppEngineOptions } from '../../src/app-engine';\nimport { getAllowedHostsFromEnv, getTrustProxyHeadersFromEnv } from './environment-options';\nimport { attachNodeGlobalErrorHandlers } from './errors';\nimport { createWebRequestFromNodeRequest } from './request';\n\n/**\n * Options for the Angular Node.js server application engine.\n */\nexport interface AngularNodeAppEngineOptions extends AngularAppEngineOptions {}\n\n/**\n * Angular server application engine.\n * Manages Angular server applications (including localized ones), handles rendering requests,\n * and optionally transforms index HTML before rendering.\n *\n * @remarks This class should be instantiated once and used as a singleton across the server-side\n * application to ensure consistent handling of rendering requests and resource management.\n */\nexport class AngularNodeAppEngine {\n  private readonly angularAppEngine: AngularAppEngine;\n  private readonly trustProxyHeaders?: boolean | readonly string[];\n\n  /**\n   * Creates a new instance of the Angular Node.js server application engine.\n   * @param options Options for the Angular Node.js server application engine.\n   */\n  constructor(options?: AngularNodeAppEngineOptions) {\n    const appEngineOptions: AngularAppEngineOptions = {\n      ...options,\n      allowedHosts: getAllowedHostsFromEnv() ?? options?.allowedHosts,\n      trustProxyHeaders: getTrustProxyHeadersFromEnv() ?? options?.trustProxyHeaders,\n    };\n\n    this.angularAppEngine = new AngularAppEngine(appEngineOptions);\n    this.trustProxyHeaders = appEngineOptions.trustProxyHeaders;\n\n    attachNodeGlobalErrorHandlers();\n  }\n\n  /**\n   * Handles an incoming HTTP request by serving prerendered content, performing server-side rendering,\n   * or delivering a static file for client-side rendered routes based on the `RenderMode` setting.\n   *\n   * This method adapts Node.js's `IncomingMessage`, `Http2ServerRequest` or `Request`\n   * to a format compatible with the `AngularAppEngine` and delegates the handling logic to it.\n   *\n   * @param request - The incoming HTTP request (`IncomingMessage`, `Http2ServerRequest` or `Request`).\n   * @param requestContext - Optional context for rendering, such as metadata associated with the request.\n   * @returns A promise that resolves to the resulting HTTP response object, or `null` if no matching Angular route is found.\n   *\n   * @remarks A request to `https://www.example.com/page/index.html` will serve or render the Angular route\n   * corresponding to `https://www.example.com/page`.\n   *\n   * @remarks\n   * To prevent potential Server-Side Request Forgery (SSRF), this function verifies the hostname\n   * of the `request.url` against a list of authorized hosts.\n   * If the hostname is not recognized and `allowedHosts` is not empty, a Client-Side Rendered (CSR) version of the\n   * page is returned otherwise a 400 Bad Request is returned.\n   *\n   * Resolution:\n   * Authorize your hostname by configuring `allowedHosts` in `angular.json` in:\n   * `projects.[project-name].architect.build.options.security.allowedHosts`.\n   * Alternatively, you can define the allowed hostname via the environment variable `process.env['NG_ALLOWED_HOSTS']`\n   * or pass it directly through the configuration options of `AngularNodeAppEngine`.\n   *\n   * For more information see: https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf\n   */\n  async handle(\n    request: IncomingMessage | Http2ServerRequest | Request,\n    requestContext?: unknown,\n  ): Promise<Response | null> {\n    const webRequest =\n      request instanceof Request\n        ? request\n        : createWebRequestFromNodeRequest(request, this.trustProxyHeaders);\n\n    return this.angularAppEngine.handle(webRequest, requestContext);\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http';\n\n/**\n * Represents a middleware function for handling HTTP requests in a Node.js environment.\n *\n * @param req - The incoming HTTP request object.\n * @param res - The outgoing HTTP response object.\n * @param next - A callback function that signals the completion of the middleware or forwards the error if provided.\n *\n * @returns A Promise that resolves to void or simply void. The handler can be asynchronous.\n */\nexport type NodeRequestHandlerFunction = (\n  req: IncomingMessage,\n  res: ServerResponse,\n  next: (err?: unknown) => void,\n) => Promise<void> | void;\n\n/**\n * Attaches metadata to the handler function to mark it as a special handler for Node.js environments.\n *\n * @typeParam T - The type of the handler function.\n * @param handler - The handler function to be defined and annotated.\n * @returns The same handler function passed as an argument, with metadata attached.\n *\n * @example\n * Usage in an Express application:\n * ```ts\n * const app = express();\n * export default createNodeRequestHandler(app);\n * ```\n *\n * @example\n * Usage in a Hono application:\n * ```ts\n * const app = new Hono();\n * export default createNodeRequestHandler(async (req, res, next) => {\n *   try {\n *     const webRes = await app.fetch(createWebRequestFromNodeRequest(req));\n *     if (webRes) {\n *       await writeResponseToNodeResponse(webRes, res);\n *     } else {\n *       next();\n *     }\n *   } catch (error) {\n *     next(error);\n *   }\n * });\n * ```\n *\n * @example\n * Usage in a Fastify application:\n * ```ts\n * const app = Fastify();\n * export default createNodeRequestHandler(async (req, res) => {\n *   await app.ready();\n *   app.server.emit('request', req, res);\n * });\n * ```\n */\nexport function createNodeRequestHandler<T extends NodeRequestHandlerFunction>(handler: T): T {\n  (handler as T & { __ng_node_request_handler__?: boolean })['__ng_node_request_handler__'] = true;\n\n  return handler;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { ServerResponse } from 'node:http';\nimport type { Http2ServerResponse } from 'node:http2';\n\n/**\n * Streams a web-standard `Response` into a Node.js `ServerResponse`\n * or `Http2ServerResponse`.\n *\n * This function adapts the web `Response` object to write its content\n * to a Node.js response object, handling both HTTP/1.1 and HTTP/2.\n *\n * @param source - The web-standard `Response` object to stream from.\n * @param destination - The Node.js response object (`ServerResponse` or `Http2ServerResponse`) to stream into.\n * @returns A promise that resolves once the streaming operation is complete.\n */\nexport async function writeResponseToNodeResponse(\n  source: Response,\n  destination: ServerResponse | Http2ServerResponse,\n): Promise<void> {\n  const { status, headers, body } = source;\n  destination.statusCode = status;\n\n  let cookieHeaderSet = false;\n  for (const [name, value] of headers.entries()) {\n    if (name === 'set-cookie') {\n      if (cookieHeaderSet) {\n        continue;\n      }\n\n      // Sets the 'set-cookie' header only once to ensure it is correctly applied.\n      // Concatenating 'set-cookie' values can lead to incorrect behavior, so we use a single value from `headers.getSetCookie()`.\n      destination.setHeader(name, headers.getSetCookie());\n      cookieHeaderSet = true;\n    } else {\n      destination.setHeader(name, value);\n    }\n  }\n\n  if ('flushHeaders' in destination) {\n    destination.flushHeaders();\n  }\n\n  if (!body) {\n    destination.end();\n\n    return;\n  }\n\n  try {\n    const reader = body.getReader();\n\n    destination.on('close', () => {\n      reader.cancel().catch((error) => {\n        // eslint-disable-next-line no-console\n        console.error(\n          `An error occurred while writing the response body for: ${destination.req.url}.`,\n          error,\n        );\n      });\n    });\n\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) {\n        destination.end();\n        break;\n      }\n\n      const canContinue = (destination as ServerResponse).write(value);\n      if (canContinue === false) {\n        // Explicitly check for `false`, as AWS may return `undefined` even though this is not valid.\n        // See: https://github.com/CodeGenieApp/serverless-express/issues/683\n        await new Promise<void>((resolve) => destination.once('drain', resolve));\n      }\n    }\n  } catch {\n    destination.end('Internal server error.');\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { argv } from 'node:process';\nimport { fileURLToPath } from 'node:url';\n\n/**\n * Determines whether the provided URL represents the main entry point module.\n *\n * This function checks if the provided URL corresponds to the main ESM module being executed directly.\n * It's useful for conditionally executing code that should only run when a module is the entry point,\n * such as starting a server or initializing an application.\n *\n * It performs two key checks:\n * 1. Verifies if the URL starts with 'file:', ensuring it is a local file.\n * 2. Compares the URL's resolved file path with the first command-line argument (`process.argv[1]`),\n *    which points to the file being executed.\n *\n * @param url The URL of the module to check. This should typically be `import.meta.url`.\n * @returns `true` if the provided URL represents the main entry point, otherwise `false`.\n */\nexport function isMainModule(url: string): boolean {\n  return url.startsWith('file:') && argv[1] === fileURLToPath(url);\n}\n"],"names":["getAllowedHostsFromEnv","getArrayFromEnv","getTrustProxyHeadersFromEnv","envName","envValue","process","env","undefined","values","value","split","trimmed","trim","length","push","attachNodeGlobalErrorHandlers","Zone","gThis","globalThis","ngAttachNodeGlobalErrorHandlersCalled","on","error","console","CommonEngineInlineCriticalCssProcessor","resourceCache","Map","html","outputPath","beasties","InlineCriticalCssProcessor","path","resourceContent","get","readFile","set","PERFORMANCE_MARK_PREFIX","printPerformanceLogs","maxWordLength","benchmarks","name","duration","performance","getEntriesByType","startsWith","step","slice","toFixed","clearMeasures","log","spaces","repeat","runMethodAndMeasurePerf","label","asyncMethod","labelName","startLabel","endLabel","mark","measure","clearMarks","noopRunMethodAndMeasurePerf","SSG_MARKER_REGEXP","CommonEngine","options","templateCache","inlineCriticalCssProcessor","pageIsSSG","allowedHosts","constructor","Set","render","opts","url","URL","canParse","urlObj","validateUrl","isAllowedHostConfigured","size","message","document","documentFilePath","getDocument","enablePerformanceProfiler","runMethod","retrieveSSGPage","renderApplication","inlineCriticalCss","content","publicPath","dirname","pathname","pagePath","join","fs","promises","normalize","resolve","exists","isSSG","test","moduleOrFactory","bootstrap","Error","extraProviders","provide","ɵSERVER_CONTEXT","useValue","providers","commonRenderingOptions","isBootstrapFn","platformProviders","renderModule","filePath","doc","access","constants","F_OK","HTTP2_PSEUDO_HEADERS","createWebRequestFromNodeRequest","nodeRequest","trustProxyHeaders","trustProxyHeadersNormalized","normalizeTrustProxyHeaders","headers","method","withBody","referrer","referer","Request","createRequestUrl","createRequestHeaders","body","duplex","nodeHeaders","Headers","Object","entries","has","append","Array","isArray","item","socket","originalUrl","protocol","getAllowedProxyHeaderValue","encrypted","hostname","host","hostnameWithPort","includes","port","headerName","isProxyHeaderAllowed","getFirstHeaderValue","AngularNodeAppEngine","angularAppEngine","appEngineOptions","AngularAppEngine","handle","request","requestContext","webRequest","createNodeRequestHandler","handler","writeResponseToNodeResponse","source","destination","status","statusCode","cookieHeaderSet","setHeader","getSetCookie","flushHeaders","end","reader","getReader","cancel","catch","req","done","read","canContinue","write","Promise","once","isMainModule","argv","fileURLToPath"],"mappings":";;;;;;;;;SAYgBA,sBAAsBA,GAAA;EACpC,OAAOC,eAAe,CAAC,kBAAkB,CAAC;AAC5C;SAMgBC,2BAA2BA,GAAA;EACzC,OAAOD,eAAe,CAAC,wBAAwB,CAAC;AAClD;AAEA,SAASA,eAAeA,CAACE,OAAe,EAAA;AACtC,EAAA,MAAMC,QAAQ,GAAGC,OAAO,CAACC,GAAG,CAACH,OAAO,CAAC;EACrC,IAAI,CAACC,QAAQ,EAAE;AACb,IAAA,OAAOG,SAAS;AAClB,EAAA;EAEA,MAAMC,MAAM,GAAa,EAAE;EAC3B,KAAK,MAAMC,KAAK,IAAIL,QAAQ,CAACM,KAAK,CAAC,GAAG,CAAC,EAAE;AACvC,IAAA,MAAMC,OAAO,GAAGF,KAAK,CAACG,IAAI,EAAE;AAC5B,IAAA,IAAID,OAAO,CAACE,MAAM,GAAG,CAAC,EAAE;AACtBL,MAAAA,MAAM,CAACM,IAAI,CAACH,OAAO,CAAC;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOH,MAAM;AACf;;SCnBgBO,6BAA6BA,GAAA;AAC3C,EAAA,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;AAC/B,IAAA;AACF,EAAA;EAIA,MAAMC,KAAK,GAA4EC,UAAU;EACjG,IAAID,KAAK,CAACE,qCAAqC,EAAE;AAC/C,IAAA;AACF,EAAA;EAEAF,KAAK,CAACE,qCAAqC,GAAG,IAAI;AAElDd,EAAAA,OAAA,CAEGe,EAAE,CAAC,oBAAoB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,oBAAoB,EAAEA,KAAK,CAAC,CAAA,CAE9ED,EAAE,CAAC,mBAAmB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC,CAAC;AAClF;;MC5BaE,sCAAsC,CAAA;AAChCC,EAAAA,aAAa,GAAG,IAAIC,GAAG,EAAkB;AAE1D,EAAA,MAAMpB,OAAOA,CAACqB,IAAY,EAAEC,UAA8B,EAAA;AACxD,IAAA,MAAMC,QAAQ,GAAG,IAAIC,2BAA0B,CAAC,MAAOC,IAAI,IAAI;MAC7D,IAAIC,eAAe,GAAG,IAAI,CAACP,aAAa,CAACQ,GAAG,CAACF,IAAI,CAAC;MAClD,IAAIC,eAAe,KAAKxB,SAAS,EAAE;AACjCwB,QAAAA,eAAe,GAAG,MAAME,QAAQ,CAACH,IAAI,EAAE,OAAO,CAAC;QAC/C,IAAI,CAACN,aAAa,CAACU,GAAG,CAACJ,IAAI,EAAEC,eAAe,CAAC;AAC/C,MAAA;AAEA,MAAA,OAAOA,eAAe;IACxB,CAAC,EAAEJ,UAAU,CAAC;AAEd,IAAA,OAAOC,QAAQ,CAACvB,OAAO,CAACqB,IAAI,CAAC;AAC/B,EAAA;AACD;;ACnBD,MAAMS,uBAAuB,GAAG,KAAK;SAErBC,oBAAoBA,GAAA;EAClC,IAAIC,aAAa,GAAG,CAAC;EACrB,MAAMC,UAAU,GAAoC,EAAE;AAEtD,EAAA,KAAK,MAAM;IAAEC,IAAI;AAAEC,IAAAA;AAAQ,GAAE,IAAIC,WAAW,CAACC,gBAAgB,CAAC,SAAS,CAAC,EAAE;AACxE,IAAA,IAAI,CAACH,IAAI,CAACI,UAAU,CAACR,uBAAuB,CAAC,EAAE;AAC7C,MAAA;AACF,IAAA;AAGA,IAAA,MAAMS,IAAI,GAAGL,IAAI,CAACM,KAAK,CAACV,uBAAuB,CAACtB,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG;AACjE,IAAA,IAAI+B,IAAI,CAAC/B,MAAM,GAAGwB,aAAa,EAAE;MAC/BA,aAAa,GAAGO,IAAI,CAAC/B,MAAM;AAC7B,IAAA;AAEAyB,IAAAA,UAAU,CAACxB,IAAI,CAAC,CAAC8B,IAAI,EAAE,CAAA,EAAGJ,QAAQ,CAACM,OAAO,CAAC,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC;AACnDL,IAAAA,WAAW,CAACM,aAAa,CAACR,IAAI,CAAC;AACjC,EAAA;AAGAjB,EAAAA,OAAO,CAAC0B,GAAG,CAAC,2CAA2C,CAAC;EACxD,KAAK,MAAM,CAACJ,IAAI,EAAEnC,KAAK,CAAC,IAAI6B,UAAU,EAAE;IACtC,MAAMW,MAAM,GAAGZ,aAAa,GAAGO,IAAI,CAAC/B,MAAM,GAAG,CAAC;AAC9CS,IAAAA,OAAO,CAAC0B,GAAG,CAACJ,IAAI,GAAG,GAAG,CAACM,MAAM,CAACD,MAAM,CAAC,GAAGxC,KAAK,CAAC;AAChD,EAAA;AACAa,EAAAA,OAAO,CAAC0B,GAAG,CAAC,2CAA2C,CAAC;AAE1D;AAEO,eAAeG,uBAAuBA,CAC3CC,KAAa,EACbC,WAA6B,EAAA;AAE7B,EAAA,MAAMC,SAAS,GAAG,CAAA,EAAGnB,uBAAuB,CAAA,CAAA,EAAIiB,KAAK,CAAA,CAAE;AACvD,EAAA,MAAMG,UAAU,GAAG,CAAA,MAAA,EAASD,SAAS,CAAA,CAAE;AACvC,EAAA,MAAME,QAAQ,GAAG,CAAA,IAAA,EAAOF,SAAS,CAAA,CAAE;EAEnC,IAAI;AACFb,IAAAA,WAAW,CAACgB,IAAI,CAACF,UAAU,CAAC;IAE5B,OAAO,MAAMF,WAAW,EAAE;AAC5B,EAAA,CAAA,SAAU;AACRZ,IAAAA,WAAW,CAACgB,IAAI,CAACD,QAAQ,CAAC;IAC1Bf,WAAW,CAACiB,OAAO,CAACJ,SAAS,EAAEC,UAAU,EAAEC,QAAQ,CAAC;AACpDf,IAAAA,WAAW,CAACkB,UAAU,CAACJ,UAAU,CAAC;AAClCd,IAAAA,WAAW,CAACkB,UAAU,CAACH,QAAQ,CAAC;AAClC,EAAA;AACF;AAEM,SAAUI,2BAA2BA,CACzCR,KAAa,EACbC,WAA6B,EAAA;EAE7B,OAAOA,WAAW,EAAE;AACtB;;ACxCA,MAAMQ,iBAAiB,GAAG,2CAA2C;MA2CxDC,YAAY,CAAA;EAMHC,OAAA;AALHC,EAAAA,aAAa,GAAG,IAAIvC,GAAG,EAAkB;AACzCwC,EAAAA,0BAA0B,GAAG,IAAI1C,sCAAsC,EAAE;AACzE2C,EAAAA,SAAS,GAAG,IAAIzC,GAAG,EAAmB;EACtC0C,YAAY;EAE7BC,WAAAA,CAAoBL,OAA6B,EAAA;IAA7B,IAAA,CAAAA,OAAO,GAAPA,OAAO;AACzB,IAAA,IAAI,CAACI,YAAY,GAAG,IAAIE,GAAG,CAACrE,sBAAsB,EAAE,IAAI,IAAI,CAAC+D,OAAO,EAAEI,YAAY,IAAI,EAAE,CAAC;AAEzFpD,IAAAA,6BAA6B,EAAE;AACjC,EAAA;EAMA,MAAMuD,MAAMA,CAACC,IAA+B,EAAA;IAC1C,MAAM;AAAEC,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAEpB,IAAIC,GAAG,IAAIC,KAAG,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE;AAC5B,MAAA,MAAMG,MAAM,GAAG,IAAIF,KAAG,CAACD,GAAG,CAAC;MAC3B,IAAI;AACFI,QAAAA,WAAW,CAACD,MAAM,EAAE,IAAI,CAACR,YAAY,CAAC;MACxC,CAAA,CAAE,OAAO9C,KAAK,EAAE;QACd,MAAMwD,uBAAuB,GAAG,IAAI,CAACV,YAAY,CAACW,IAAI,GAAG,CAAC;AAE1DxD,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,OAAA,EAAWA,KAAe,CAAC0D,OAAO,CAAA,CAAE,GAClC,wGAAwG,EAC1GF,uBAAA,GACI,EAAA,GACA,wGAAwG,CAC7G;QAED,IAAI,CAACA,uBAAuB,EAAE;AAG5B,UAAA,IAAIG,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,UAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;AACtCD,YAAAA,QAAQ,GAAGT,IAAI,CAACS,QAAQ,KAAK,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC,CAAC;AAC7E,UAAA;AAEA,UAAA,IAAID,QAAQ,EAAE;AACZ,YAAA,OAAOA,QAAQ;AACjB,UAAA;AACF,QAAA;AAEA,QAAA,MAAM3D,KAAK;AACb,MAAA;AACF,IAAA;AAEA,IAAA,MAAM8D,yBAAyB,GAAG,IAAI,CAACpB,OAAO,EAAEoB,yBAAyB;AAEzE,IAAA,MAAMC,SAAS,GAAGD,yBAAA,GACdhC,uBAAA,GACAS,2BAA2B;AAE/B,IAAA,IAAIlC,IAAI,GAAG,MAAM0D,SAAS,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAACC,eAAe,CAACd,IAAI,CAAC,CAAC;IAEjF,IAAI7C,IAAI,KAAKnB,SAAS,EAAE;AACtBmB,MAAAA,IAAI,GAAG,MAAM0D,SAAS,CAAC,aAAa,EAAE,MAAM,IAAI,CAACE,iBAAiB,CAACf,IAAI,CAAC,CAAC;AAEzE,MAAA,IAAIA,IAAI,CAACgB,iBAAiB,KAAK,KAAK,EAAE;AACpC,QAAA,MAAMC,OAAO,GAAG,MAAMJ,SAAS,CAAC,qBAAqB,EAAE,MAErD,IAAI,CAACG,iBAAiB,CAAC7D,IAAK,EAAE6C,IAAI,CAAC,CACpC;AAED7C,QAAAA,IAAI,GAAG8D,OAAO;AAChB,MAAA;AACF,IAAA;AAEA,IAAA,IAAIL,yBAAyB,EAAE;AAC7B/C,MAAAA,oBAAoB,EAAE;AACxB,IAAA;AAEA,IAAA,OAAOV,IAAI;AACb,EAAA;AAEQ6D,EAAAA,iBAAiBA,CAAC7D,IAAY,EAAE6C,IAA+B,EAAA;AACrE,IAAA,MAAM5C,UAAU,GACd4C,IAAI,CAACkB,UAAU,KAAKlB,IAAI,CAACU,gBAAgB,GAAGS,OAAO,CAACnB,IAAI,CAACU,gBAAgB,CAAC,GAAG,EAAE,CAAC;IAElF,OAAO,IAAI,CAAChB,0BAA0B,CAAC5D,OAAO,CAACqB,IAAI,EAAEC,UAAU,CAAC;AAClE,EAAA;EAEQ,MAAM0D,eAAeA,CAACd,IAA+B,EAAA;IAC3D,MAAM;MAAEkB,UAAU;MAAER,gBAAgB;AAAET,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAClD,IAAI,CAACkB,UAAU,IAAI,CAACR,gBAAgB,IAAIT,GAAG,KAAKjE,SAAS,EAAE;AACzD,MAAA,OAAOA,SAAS;AAClB,IAAA;IAEA,MAAM;AAAEoF,MAAAA;AAAQ,KAAE,GAAG,IAAIlB,KAAG,CAACD,GAAG,EAAE,YAAY,CAAC;IAG/C,MAAMoB,QAAQ,GAAGC,IAAI,CAACJ,UAAU,EAAEE,QAAQ,EAAE,YAAY,CAAC;IAEzD,IAAI,IAAI,CAACzB,SAAS,CAAClC,GAAG,CAAC4D,QAAQ,CAAC,EAAE;MAEhC,OAAOE,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAChD,IAAA;IAEA,IAAI,CAACA,QAAQ,CAACjD,UAAU,CAACqD,SAAS,CAACP,UAAU,CAAC,CAAC,EAAE;AAE/C,MAAA,OAAOlF,SAAS;AAClB,IAAA;AAEA,IAAA,IAAIqF,QAAQ,KAAKK,OAAO,CAAChB,gBAAgB,CAAC,IAAI,EAAE,MAAMiB,MAAM,CAACN,QAAQ,CAAC,CAAC,EAAE;MAEvE,IAAI,CAAC1B,SAAS,CAAChC,GAAG,CAAC0D,QAAQ,EAAE,KAAK,CAAC;AAEnC,MAAA,OAAOrF,SAAS;AAClB,IAAA;AAGA,IAAA,MAAMiF,OAAO,GAAG,MAAMM,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAC7D,IAAA,MAAMO,KAAK,GAAGtC,iBAAiB,CAACuC,IAAI,CAACZ,OAAO,CAAC;IAC7C,IAAI,CAACtB,SAAS,CAAChC,GAAG,CAAC0D,QAAQ,EAAEO,KAAK,CAAC;AAEnC,IAAA,OAAOA,KAAK,GAAGX,OAAO,GAAGjF,SAAS;AACpC,EAAA;EAEQ,MAAM+E,iBAAiBA,CAACf,IAA+B,EAAA;IAC7D,MAAM8B,eAAe,GAAG,IAAI,CAACtC,OAAO,EAAEuC,SAAS,IAAI/B,IAAI,CAAC+B,SAAS;IACjE,IAAI,CAACD,eAAe,EAAE;AACpB,MAAA,MAAM,IAAIE,KAAK,CAAC,gDAAgD,CAAC;AACnE,IAAA;IAEA,MAAMC,cAAc,GAAqB,CACvC;AAAEC,MAAAA,OAAO,EAAEC,eAAe;AAAEC,MAAAA,QAAQ,EAAE;AAAK,KAAE,EAC7C,IAAIpC,IAAI,CAACqC,SAAS,IAAI,EAAE,CAAC,EACzB,IAAI,IAAI,CAAC7C,OAAO,EAAE6C,SAAS,IAAI,EAAE,CAAC,CACnC;AAED,IAAA,IAAI5B,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,IAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;MACtCD,QAAQ,GAAG,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC;AAC1D,IAAA;AAEA,IAAA,MAAM4B,sBAAsB,GAAG;MAC7BrC,GAAG,EAAED,IAAI,CAACC,GAAG;MACbQ,QAAQ;MAERb,YAAY,EAAE,CAAC,GAAG;KACnB;IAED,OAAO2C,aAAa,CAACT,eAAe,CAAA,GAChCf,iBAAiB,CAACe,eAAe,EAAE;AACjCU,MAAAA,iBAAiB,EAAEP,cAAc;MACjC,GAAGK;KACJ,CAAA,GACDG,YAAY,CAACX,eAAe,EAAE;MAAEG,cAAc;MAAE,GAAGK;AAAsB,KAAE,CAAC;AAClF,EAAA;EAGQ,MAAM3B,WAAWA,CAAC+B,QAAgB,EAAA;IACxC,IAAIC,GAAG,GAAG,IAAI,CAAClD,aAAa,CAAChC,GAAG,CAACiF,QAAQ,CAAC;IAE1C,IAAI,CAACC,GAAG,EAAE;MACRA,GAAG,GAAG,MAAMpB,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAACgF,QAAQ,EAAE,OAAO,CAAC;MACnD,IAAI,CAACjD,aAAa,CAAC9B,GAAG,CAAC+E,QAAQ,EAAEC,GAAG,CAAC;AACvC,IAAA;AAEA,IAAA,OAAOA,GAAG;AACZ,EAAA;AACD;AAED,eAAehB,MAAMA,CAACpE,IAAiB,EAAA;EACrC,IAAI;AACF,IAAA,MAAMgE,EAAE,CAACC,QAAQ,CAACoB,MAAM,CAACrF,IAAI,EAAEgE,EAAE,CAACsB,SAAS,CAACC,IAAI,CAAC;AAEjD,IAAA,OAAO,IAAI;AACb,EAAA,CAAA,CAAE,MAAM;AACN,IAAA,OAAO,KAAK;AACd,EAAA;AACF;AAEA,SAASP,aAAaA,CACpBrG,KAAc,EAAA;EAGd,OAAO,OAAOA,KAAK,KAAK,UAAU,IAAI,EAAE,MAAM,IAAIA,KAAK,CAAC;AAC1D;;AClOA,MAAM6G,oBAAoB,GAAwB,IAAIjD,GAAG,CAAC,CACxD,SAAS,EACT,SAAS,EACT,YAAY,EACZ,OAAO,EACP,SAAS,CACV,CAAC;AAmBI,SAAUkD,+BAA+BA,CAC7CC,WAAiD,EACjDC,iBAA+C,EAAA;AAE/C,EAAA,MAAMC,2BAA2B,GAAGC,0BAA0B,CAACF,iBAAiB,CAAC;EACjF,MAAM;IAAEG,OAAO;AAAEC,IAAAA,MAAM,GAAG;AAAK,GAAE,GAAGL,WAAW;EAC/C,MAAMM,QAAQ,GAAGD,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM;AACtD,EAAA,MAAME,QAAQ,GAAGH,OAAO,CAACI,OAAO,IAAIvD,GAAG,CAACC,QAAQ,CAACkD,OAAO,CAACI,OAAO,CAAC,GAAGJ,OAAO,CAACI,OAAO,GAAGzH,SAAS;EAE/F,OAAO,IAAI0H,OAAO,CAACC,gBAAgB,CAACV,WAAW,EAAEE,2BAA2B,CAAC,EAAE;IAC7EG,MAAM;AACND,IAAAA,OAAO,EAAEO,oBAAoB,CAACP,OAAO,CAAC;AACtCQ,IAAAA,IAAI,EAAEN,QAAQ,GAAGN,WAAW,GAAGjH,SAAS;AACxC8H,IAAAA,MAAM,EAAEP,QAAQ,GAAG,MAAM,GAAGvH,SAAS;AACrCwH,IAAAA;AACD,GAAA,CAAC;AACJ;AAQA,SAASI,oBAAoBA,CAACG,WAAgC,EAAA;AAC5D,EAAA,MAAMV,OAAO,GAAG,IAAIW,OAAO,EAAE;AAE7B,EAAA,KAAK,MAAM,CAAChG,IAAI,EAAE9B,KAAK,CAAC,IAAI+H,MAAM,CAACC,OAAO,CAACH,WAAW,CAAC,EAAE;AACvD,IAAA,IAAIhB,oBAAoB,CAACoB,GAAG,CAACnG,IAAI,CAAC,EAAE;AAClC,MAAA;AACF,IAAA;AAEA,IAAA,IAAI,OAAO9B,KAAK,KAAK,QAAQ,EAAE;AAC7BmH,MAAAA,OAAO,CAACe,MAAM,CAACpG,IAAI,EAAE9B,KAAK,CAAC;IAC7B,CAAA,MAAO,IAAImI,KAAK,CAACC,OAAO,CAACpI,KAAK,CAAC,EAAE;AAC/B,MAAA,KAAK,MAAMqI,IAAI,IAAIrI,KAAK,EAAE;AACxBmH,QAAAA,OAAO,CAACe,MAAM,CAACpG,IAAI,EAAEuG,IAAI,CAAC;AAC5B,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,OAAOlB,OAAO;AAChB;AAeM,SAAUM,gBAAgBA,CAC9BV,WAAiD,EACjDC,iBAAsC,EAAA;EAEtC,MAAM;IACJG,OAAO;IACPmB,MAAM;AACNvE,IAAAA,GAAG,GAAG,EAAE;AACRwE,IAAAA;AAAW,GACZ,GAAGxB,WAAyD;EAE7D,MAAMyB,QAAQ,GACZC,0BAA0B,CAACtB,OAAO,EAAE,mBAAmB,EAAEH,iBAAiB,CAAC,KAC1E,WAAW,IAAIsB,MAAM,IAAIA,MAAM,CAACI,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhE,EAAA,MAAMC,QAAQ,GACZF,0BAA0B,CAACtB,OAAO,EAAE,kBAAkB,EAAEH,iBAAiB,CAAC,IAC1EG,OAAO,CAACyB,IAAI,IACZzB,OAAO,CAAC,YAAY,CAAC;AAEvB,EAAA,IAAIgB,KAAK,CAACC,OAAO,CAACO,QAAQ,CAAC,EAAE;AAC3B,IAAA,MAAM,IAAI7C,KAAK,CAAC,gCAAgC,CAAC;AACnD,EAAA;EAEA,IAAI+C,gBAAgB,GAAGF,QAAQ;AAC/B,EAAA,IAAI,CAACA,QAAQ,EAAEG,QAAQ,CAAC,GAAG,CAAC,EAAE;IAC5B,MAAMC,IAAI,GAAGN,0BAA0B,CAACtB,OAAO,EAAE,kBAAkB,EAAEH,iBAAiB,CAAC;AACvF,IAAA,IAAI+B,IAAI,EAAE;MACRF,gBAAgB,IAAI,CAAA,CAAA,EAAIE,IAAI,CAAA,CAAE;AAChC,IAAA;AACF,EAAA;AAEA,EAAA,OAAO,IAAI/E,GAAG,CAAC,CAAA,EAAGwE,QAAQ,CAAA,GAAA,EAAMK,gBAAgB,CAAA,EAAGN,WAAW,IAAIxE,GAAG,CAAA,CAAE,CAAC;AAC1E;AAUA,SAAS0E,0BAA0BA,CACjCtB,OAA4B,EAC5B6B,UAAkB,EAClBhC,iBAAsC,EAAA;AAEtC,EAAA,OAAOiC,oBAAoB,CAACD,UAAU,EAAEhC,iBAAiB,CAAA,GACrDkC,mBAAmB,CAAC/B,OAAO,CAAC6B,UAAU,CAAC,CAAA,GACvClJ,SAAS;AACf;;MC/HaqJ,oBAAoB,CAAA;EACdC,gBAAgB;EAChBpC,iBAAiB;EAMlCrD,WAAAA,CAAYL,OAAqC,EAAA;AAC/C,IAAA,MAAM+F,gBAAgB,GAA4B;AAChD,MAAA,GAAG/F,OAAO;AACVI,MAAAA,YAAY,EAAEnE,sBAAsB,EAAE,IAAI+D,OAAO,EAAEI,YAAY;AAC/DsD,MAAAA,iBAAiB,EAAEvH,2BAA2B,EAAE,IAAI6D,OAAO,EAAE0D;KAC9D;AAED,IAAA,IAAI,CAACoC,gBAAgB,GAAG,IAAIE,gBAAgB,CAACD,gBAAgB,CAAC;AAC9D,IAAA,IAAI,CAACrC,iBAAiB,GAAGqC,gBAAgB,CAACrC,iBAAiB;AAE3D1G,IAAAA,6BAA6B,EAAE;AACjC,EAAA;AA8BA,EAAA,MAAMiJ,MAAMA,CACVC,OAAuD,EACvDC,cAAwB,EAAA;AAExB,IAAA,MAAMC,UAAU,GACdF,OAAO,YAAYhC,OAAA,GACfgC,OAAA,GACA1C,+BAA+B,CAAC0C,OAAO,EAAE,IAAI,CAACxC,iBAAiB,CAAC;IAEtE,OAAO,IAAI,CAACoC,gBAAgB,CAACG,MAAM,CAACG,UAAU,EAAED,cAAc,CAAC;AACjE,EAAA;AACD;;ACtBK,SAAUE,wBAAwBA,CAAuCC,OAAU,EAAA;AACtFA,EAAAA,OAAyD,CAAC,6BAA6B,CAAC,GAAG,IAAI;AAEhG,EAAA,OAAOA,OAAO;AAChB;;ACjDO,eAAeC,2BAA2BA,CAC/CC,MAAgB,EAChBC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,MAAM;IAAE7C,OAAO;AAAEQ,IAAAA;AAAI,GAAE,GAAGmC,MAAM;EACxCC,WAAW,CAACE,UAAU,GAAGD,MAAM;EAE/B,IAAIE,eAAe,GAAG,KAAK;AAC3B,EAAA,KAAK,MAAM,CAACpI,IAAI,EAAE9B,KAAK,CAAC,IAAImH,OAAO,CAACa,OAAO,EAAE,EAAE;IAC7C,IAAIlG,IAAI,KAAK,YAAY,EAAE;AACzB,MAAA,IAAIoI,eAAe,EAAE;AACnB,QAAA;AACF,MAAA;MAIAH,WAAW,CAACI,SAAS,CAACrI,IAAI,EAAEqF,OAAO,CAACiD,YAAY,EAAE,CAAC;AACnDF,MAAAA,eAAe,GAAG,IAAI;AACxB,IAAA,CAAA,MAAO;AACLH,MAAAA,WAAW,CAACI,SAAS,CAACrI,IAAI,EAAE9B,KAAK,CAAC;AACpC,IAAA;AACF,EAAA;EAEA,IAAI,cAAc,IAAI+J,WAAW,EAAE;IACjCA,WAAW,CAACM,YAAY,EAAE;AAC5B,EAAA;EAEA,IAAI,CAAC1C,IAAI,EAAE;IACToC,WAAW,CAACO,GAAG,EAAE;AAEjB,IAAA;AACF,EAAA;EAEA,IAAI;AACF,IAAA,MAAMC,MAAM,GAAG5C,IAAI,CAAC6C,SAAS,EAAE;AAE/BT,IAAAA,WAAW,CAACpJ,EAAE,CAAC,OAAO,EAAE,MAAK;MAC3B4J,MAAM,CAACE,MAAM,EAAE,CAACC,KAAK,CAAE9J,KAAK,IAAI;AAE9BC,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,uDAAA,EAA0DmJ,WAAW,CAACY,GAAG,CAAC5G,GAAG,CAAA,CAAA,CAAG,EAChFnD,KAAK,CACN;AACH,MAAA,CAAC,CAAC;AACJ,IAAA,CAAC,CAAC;AAGF,IAAA,OAAO,IAAI,EAAE;MACX,MAAM;QAAEgK,IAAI;AAAE5K,QAAAA;AAAK,OAAE,GAAG,MAAMuK,MAAM,CAACM,IAAI,EAAE;AAC3C,MAAA,IAAID,IAAI,EAAE;QACRb,WAAW,CAACO,GAAG,EAAE;AACjB,QAAA;AACF,MAAA;AAEA,MAAA,MAAMQ,WAAW,GAAIf,WAA8B,CAACgB,KAAK,CAAC/K,KAAK,CAAC;MAChE,IAAI8K,WAAW,KAAK,KAAK,EAAE;AAGzB,QAAA,MAAM,IAAIE,OAAO,CAAQxF,OAAO,IAAKuE,WAAW,CAACkB,IAAI,CAAC,OAAO,EAAEzF,OAAO,CAAC,CAAC;AAC1E,MAAA;AACF,IAAA;AACF,EAAA,CAAA,CAAE,MAAM;AACNuE,IAAAA,WAAW,CAACO,GAAG,CAAC,wBAAwB,CAAC;AAC3C,EAAA;AACF;;AC5DM,SAAUY,YAAYA,CAACnH,GAAW,EAAA;AACtC,EAAA,OAAOA,GAAG,CAAC7B,UAAU,CAAC,OAAO,CAAC,IAAIiJ,IAAI,CAAC,CAAC,CAAC,KAAKC,aAAa,CAACrH,GAAG,CAAC;AAClE;;;;"}
+{"version":3,"file":"node.mjs","sources":["../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/environment-options.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/errors.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/inline-css-processor.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/peformance-profiler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/common-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/request.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/app-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/handler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/response.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/module.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Retrieves the list of allowed hosts from the environment variable `NG_ALLOWED_HOSTS`.\n * @returns An array of allowed hosts.\n */\nexport function getAllowedHostsFromEnv(): ReadonlyArray<string> | undefined {\n  return getArrayFromEnv('NG_ALLOWED_HOSTS');\n}\n\n/**\n * Retrieves the list of trusted proxy headers from the environment variable `NG_TRUST_PROXY_HEADERS`.\n * @returns An array of trusted proxy headers.\n */\nexport function getTrustProxyHeadersFromEnv(): ReadonlyArray<string> | undefined {\n  return getArrayFromEnv('NG_TRUST_PROXY_HEADERS');\n}\n\nfunction getArrayFromEnv(envName: string): ReadonlyArray<string> | undefined {\n  const envValue = process.env[envName];\n  if (!envValue) {\n    return undefined;\n  }\n\n  const values: string[] = [];\n  for (const value of envValue.split(',')) {\n    const trimmed = value.trim();\n    if (trimmed.length > 0) {\n      values.push(trimmed);\n    }\n  }\n\n  return values;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Attaches listeners to the Node.js process to capture and handle unhandled rejections and uncaught exceptions.\n * Captured errors are logged to the console. This function logs errors to the console, preventing unhandled errors\n * from crashing the server. It is particularly useful for Zoneless apps, ensuring error handling without relying on Zone.js.\n *\n * @remarks\n * This function is a no-op if zone.js is available.\n * For Zone-based apps, similar functionality is provided by Zone.js itself. See the Zone.js implementation here:\n * https://github.com/angular/angular/blob/4a8d0b79001ec09bcd6f2d6b15117aa6aac1932c/packages/zone.js/lib/node/node.ts#L94%7C\n *\n * @internal\n */\nexport function attachNodeGlobalErrorHandlers(): void {\n  if (typeof Zone !== 'undefined') {\n    return;\n  }\n\n  // Ensure that the listeners are registered only once.\n  // Otherwise, multiple instances may be registered during edit/refresh.\n  const gThis: typeof globalThis & { ngAttachNodeGlobalErrorHandlersCalled?: boolean } = globalThis;\n  if (gThis.ngAttachNodeGlobalErrorHandlersCalled) {\n    return;\n  }\n\n  gThis.ngAttachNodeGlobalErrorHandlersCalled = true;\n\n  process\n    // eslint-disable-next-line no-console\n    .on('unhandledRejection', (error) => console.error('unhandledRejection', error))\n    // eslint-disable-next-line no-console\n    .on('uncaughtException', (error) => console.error('uncaughtException', error));\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ɵInlineCriticalCssProcessor as InlineCriticalCssProcessor } from '@angular/ssr';\nimport { readFile } from 'node:fs/promises';\n\nexport class CommonEngineInlineCriticalCssProcessor {\n  private readonly resourceCache = new Map<string, string>();\n\n  async process(html: string, outputPath: string | undefined): Promise<string> {\n    const beasties = new InlineCriticalCssProcessor(async (path) => {\n      let resourceContent = this.resourceCache.get(path);\n      if (resourceContent === undefined) {\n        resourceContent = await readFile(path, 'utf-8');\n        this.resourceCache.set(path, resourceContent);\n      }\n\n      return resourceContent;\n    }, outputPath);\n\n    return beasties.process(html);\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nconst PERFORMANCE_MARK_PREFIX = '🅰️';\n\nexport function printPerformanceLogs(): void {\n  let maxWordLength = 0;\n  const benchmarks: [step: string, value: string][] = [];\n\n  for (const { name, duration } of performance.getEntriesByType('measure')) {\n    if (!name.startsWith(PERFORMANCE_MARK_PREFIX)) {\n      continue;\n    }\n\n    // `🅰️:Retrieve SSG Page` -> `Retrieve SSG Page:`\n    const step = name.slice(PERFORMANCE_MARK_PREFIX.length + 1) + ':';\n    if (step.length > maxWordLength) {\n      maxWordLength = step.length;\n    }\n\n    benchmarks.push([step, `${duration.toFixed(1)}ms`]);\n    performance.clearMeasures(name);\n  }\n\n  /* eslint-disable no-console */\n  console.log('********** Performance results **********');\n  for (const [step, value] of benchmarks) {\n    const spaces = maxWordLength - step.length + 5;\n    console.log(step + ' '.repeat(spaces) + value);\n  }\n  console.log('*****************************************');\n  /* eslint-enable no-console */\n}\n\nexport async function runMethodAndMeasurePerf<T>(\n  label: string,\n  asyncMethod: () => Promise<T>,\n): Promise<T> {\n  const labelName = `${PERFORMANCE_MARK_PREFIX}:${label}`;\n  const startLabel = `start:${labelName}`;\n  const endLabel = `end:${labelName}`;\n\n  try {\n    performance.mark(startLabel);\n\n    return await asyncMethod();\n  } finally {\n    performance.mark(endLabel);\n    performance.measure(labelName, startLabel, endLabel);\n    performance.clearMarks(startLabel);\n    performance.clearMarks(endLabel);\n  }\n}\n\nexport function noopRunMethodAndMeasurePerf<T>(\n  label: string,\n  asyncMethod: () => Promise<T>,\n): Promise<T> {\n  return asyncMethod();\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ApplicationRef, StaticProvider, Type } from '@angular/core';\nimport { BootstrapContext } from '@angular/platform-browser';\nimport { renderApplication, renderModule, ɵSERVER_CONTEXT } from '@angular/platform-server';\nimport * as fs from 'node:fs';\nimport { dirname, join, normalize, resolve } from 'node:path';\nimport { URL } from 'node:url';\nimport { validateUrl } from '../../../src/utils/validation';\nimport { getAllowedHostsFromEnv } from '../environment-options';\nimport { attachNodeGlobalErrorHandlers } from '../errors';\nimport { CommonEngineInlineCriticalCssProcessor } from './inline-css-processor';\nimport {\n  noopRunMethodAndMeasurePerf,\n  printPerformanceLogs,\n  runMethodAndMeasurePerf,\n} from './peformance-profiler';\n\nconst SSG_MARKER_REGEXP = /ng-server-context=[\"']\\w*\\|?ssg\\|?\\w*[\"']/;\n\nexport interface CommonEngineOptions {\n  /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n  bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n  /** A set of platform level providers for all requests. */\n  providers?: StaticProvider[];\n\n  /** Enable request performance profiling data collection and printing the results in the server console. */\n  enablePerformanceProfiler?: boolean;\n\n  /** A set of hostnames that are allowed to access the server. */\n  allowedHosts?: readonly string[];\n}\n\nexport interface CommonEngineRenderOptions {\n  /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n  bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n  /** A set of platform level providers for the current request. */\n  providers?: StaticProvider[];\n  url?: string;\n  document?: string;\n  documentFilePath?: string;\n\n  /**\n   * Reduce render blocking requests by inlining critical CSS.\n   * Defaults to true.\n   */\n  inlineCriticalCss?: boolean;\n\n  /**\n   * Base path location of index file.\n   * Defaults to the 'documentFilePath' dirname when not provided.\n   */\n  publicPath?: string;\n}\n\n/**\n * A common engine to use to server render an application.\n */\n\nexport class CommonEngine {\n  private readonly templateCache = new Map<string, string>();\n  private readonly inlineCriticalCssProcessor = new CommonEngineInlineCriticalCssProcessor();\n  private readonly pageIsSSG = new Map<string, boolean>();\n  private readonly allowedHosts: ReadonlySet<string>;\n\n  constructor(private options?: CommonEngineOptions) {\n    this.allowedHosts = new Set(getAllowedHostsFromEnv() ?? this.options?.allowedHosts ?? []);\n\n    attachNodeGlobalErrorHandlers();\n  }\n\n  /**\n   * Render an HTML document for a specific URL with specified\n   * render options\n   */\n  async render(opts: CommonEngineRenderOptions): Promise<string> {\n    const { url } = opts;\n\n    if (url && URL.canParse(url)) {\n      const urlObj = new URL(url);\n      try {\n        validateUrl(urlObj, this.allowedHosts);\n      } catch (error) {\n        const isAllowedHostConfigured = this.allowedHosts.size > 0;\n        // eslint-disable-next-line no-console\n        console.error(\n          `ERROR: ${(error as Error).message}` +\n            'Please provide a list of allowed hosts in the \"allowedHosts\" option in the \"CommonEngine\" constructor.',\n          isAllowedHostConfigured\n            ? ''\n            : '\\nFalling back to client side rendering. This will become a 400 Bad Request in a future major version.',\n        );\n\n        if (!isAllowedHostConfigured) {\n          // Fallback to CSR to avoid a breaking change.\n          // TODO(alanagius): Return a 400 and remove this fallback in the next major version (v22).\n          let document = opts.document;\n          if (!document && opts.documentFilePath) {\n            document = opts.document ?? (await this.getDocument(opts.documentFilePath));\n          }\n\n          if (document) {\n            return document;\n          }\n        }\n\n        throw error;\n      }\n    }\n\n    const enablePerformanceProfiler = this.options?.enablePerformanceProfiler;\n\n    const runMethod = enablePerformanceProfiler\n      ? runMethodAndMeasurePerf\n      : noopRunMethodAndMeasurePerf;\n\n    let html = await runMethod('Retrieve SSG Page', () => this.retrieveSSGPage(opts));\n\n    if (html === undefined) {\n      html = await runMethod('Render Page', () => this.renderApplication(opts));\n\n      if (opts.inlineCriticalCss !== false) {\n        const content = await runMethod('Inline Critical CSS', () =>\n          // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n          this.inlineCriticalCss(html!, opts),\n        );\n\n        html = content;\n      }\n    }\n\n    if (enablePerformanceProfiler) {\n      printPerformanceLogs();\n    }\n\n    return html;\n  }\n\n  private inlineCriticalCss(html: string, opts: CommonEngineRenderOptions): Promise<string> {\n    const outputPath =\n      opts.publicPath ?? (opts.documentFilePath ? dirname(opts.documentFilePath) : '');\n\n    return this.inlineCriticalCssProcessor.process(html, outputPath);\n  }\n\n  private async retrieveSSGPage(opts: CommonEngineRenderOptions): Promise<string | undefined> {\n    const { publicPath, documentFilePath, url } = opts;\n    if (!publicPath || !documentFilePath || url === undefined) {\n      return undefined;\n    }\n\n    const { pathname } = new URL(url, 'resolve://');\n    // Do not use `resolve` here as otherwise it can lead to path traversal vulnerability.\n    // See: https://portswigger.net/web-security/file-path-traversal\n    const pagePath = join(publicPath, pathname, 'index.html');\n\n    if (this.pageIsSSG.get(pagePath)) {\n      // Serve pre-rendered page.\n      return fs.promises.readFile(pagePath, 'utf-8');\n    }\n\n    if (!pagePath.startsWith(normalize(publicPath))) {\n      // Potential path traversal detected.\n      return undefined;\n    }\n\n    if (pagePath === resolve(documentFilePath) || !(await exists(pagePath))) {\n      // View matches with prerender path or file does not exist.\n      this.pageIsSSG.set(pagePath, false);\n\n      return undefined;\n    }\n\n    // Static file exists.\n    const content = await fs.promises.readFile(pagePath, 'utf-8');\n    const isSSG = SSG_MARKER_REGEXP.test(content);\n    this.pageIsSSG.set(pagePath, isSSG);\n\n    return isSSG ? content : undefined;\n  }\n\n  private async renderApplication(opts: CommonEngineRenderOptions): Promise<string> {\n    const moduleOrFactory = this.options?.bootstrap ?? opts.bootstrap;\n    if (!moduleOrFactory) {\n      throw new Error('A module or bootstrap option must be provided.');\n    }\n\n    const extraProviders: StaticProvider[] = [\n      { provide: ɵSERVER_CONTEXT, useValue: 'ssr' },\n      ...(opts.providers ?? []),\n      ...(this.options?.providers ?? []),\n    ];\n\n    let document = opts.document;\n    if (!document && opts.documentFilePath) {\n      document = await this.getDocument(opts.documentFilePath);\n    }\n\n    const commonRenderingOptions = {\n      url: opts.url,\n      document,\n      // Validation is already happened in the render method.\n      allowedHosts: ['*'],\n    };\n\n    return isBootstrapFn(moduleOrFactory)\n      ? renderApplication(moduleOrFactory, {\n          platformProviders: extraProviders,\n          ...commonRenderingOptions,\n        })\n      : renderModule(moduleOrFactory, { extraProviders, ...commonRenderingOptions });\n  }\n\n  /** Retrieve the document from the cache or the filesystem */\n  private async getDocument(filePath: string): Promise<string> {\n    let doc = this.templateCache.get(filePath);\n\n    if (!doc) {\n      doc = await fs.promises.readFile(filePath, 'utf-8');\n      this.templateCache.set(filePath, doc);\n    }\n\n    return doc;\n  }\n}\n\nasync function exists(path: fs.PathLike): Promise<boolean> {\n  try {\n    await fs.promises.access(path, fs.constants.F_OK);\n\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction isBootstrapFn(\n  value: unknown,\n): value is (context: BootstrapContext) => Promise<ApplicationRef> {\n  // We can differentiate between a module and a bootstrap function by reading compiler-generated `ɵmod` static property:\n  return typeof value === 'function' && !('ɵmod' in value);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingHttpHeaders, IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport {\n  getFirstHeaderValue,\n  isProxyHeaderAllowed,\n  normalizeTrustProxyHeaders,\n} from '../../src/utils/validation';\n\n/**\n * A set containing all the pseudo-headers defined in the HTTP/2 specification.\n *\n * This set can be used to filter out pseudo-headers from a list of headers,\n * as they are not allowed to be set directly using the `Node.js` Undici API or\n * the web `Headers` API.\n */\nconst HTTP2_PSEUDO_HEADERS: ReadonlySet<string> = new Set([\n  ':method',\n  ':scheme',\n  ':authority',\n  ':path',\n  ':status',\n]);\n\n/**\n * Converts a Node.js `IncomingMessage` or `Http2ServerRequest` into a\n * Web Standard `Request` object.\n *\n * This function adapts the Node.js request objects to a format that can\n * be used by web platform APIs.\n *\n * @param nodeRequest - The Node.js request object (`IncomingMessage` or `Http2ServerRequest`) to convert.\n * @param trustProxyHeaders - A boolean or an array of proxy headers to trust when constructing the request URL.\n *\n * @remarks\n * When `trustProxyHeaders` is enabled, headers such as `X-Forwarded-Host` and\n * `X-Forwarded-Prefix` should ideally be strictly validated at a higher infrastructure\n * level (e.g., at the reverse proxy or API gateway) before reaching the application.\n *\n * @returns A Web Standard `Request` object.\n */\nexport function createWebRequestFromNodeRequest(\n  nodeRequest: IncomingMessage | Http2ServerRequest,\n  trustProxyHeaders?: boolean | readonly string[],\n): Request {\n  const trustProxyHeadersNormalized = normalizeTrustProxyHeaders(trustProxyHeaders);\n  const { headers, method = 'GET' } = nodeRequest;\n  const withBody = method !== 'GET' && method !== 'HEAD';\n  const referrer = headers.referer && URL.canParse(headers.referer) ? headers.referer : undefined;\n\n  return new Request(createRequestUrl(nodeRequest, trustProxyHeadersNormalized), {\n    method,\n    headers: createRequestHeaders(headers),\n    body: withBody ? nodeRequest : undefined,\n    duplex: withBody ? 'half' : undefined,\n    referrer,\n  });\n}\n\n/**\n * Creates a `Headers` object from Node.js `IncomingHttpHeaders`.\n *\n * @param nodeHeaders - The Node.js `IncomingHttpHeaders` object to convert.\n * @returns A `Headers` object containing the converted headers.\n */\nfunction createRequestHeaders(nodeHeaders: IncomingHttpHeaders): Headers {\n  const headers = new Headers();\n\n  for (const [name, value] of Object.entries(nodeHeaders)) {\n    if (HTTP2_PSEUDO_HEADERS.has(name)) {\n      continue;\n    }\n\n    if (typeof value === 'string') {\n      headers.append(name, value);\n    } else if (Array.isArray(value)) {\n      for (const item of value) {\n        headers.append(name, item);\n      }\n    }\n  }\n\n  return headers;\n}\n\n/**\n * Creates a `URL` object from a Node.js `IncomingMessage`, taking into account the protocol, host, and port.\n *\n * @param nodeRequest - The Node.js `IncomingMessage` or `Http2ServerRequest` object to extract URL information from.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n *\n * @remarks\n * When `trustProxyHeaders` is enabled, headers such as `X-Forwarded-Host` and\n * `X-Forwarded-Prefix` should ideally be strictly validated at a higher infrastructure\n * level (e.g., at the reverse proxy or API gateway) before reaching the application.\n *\n * @returns A `URL` object representing the request URL.\n */\nexport function createRequestUrl(\n  nodeRequest: IncomingMessage | Http2ServerRequest,\n  trustProxyHeaders: ReadonlySet<string>,\n): URL {\n  const {\n    headers,\n    socket,\n    url = '',\n    originalUrl,\n  } = nodeRequest as IncomingMessage & { originalUrl?: string };\n\n  const protocol =\n    getAllowedProxyHeaderValue(headers, 'x-forwarded-proto', trustProxyHeaders) ??\n    ('encrypted' in socket && socket.encrypted ? 'https' : 'http');\n\n  const hostname =\n    getAllowedProxyHeaderValue(headers, 'x-forwarded-host', trustProxyHeaders) ??\n    headers.host ??\n    headers[':authority'];\n\n  if (Array.isArray(hostname)) {\n    throw new Error('host value cannot be an array.');\n  }\n\n  let hostnameWithPort = hostname;\n  if (!hostname?.includes(':')) {\n    const port = getAllowedProxyHeaderValue(headers, 'x-forwarded-port', trustProxyHeaders);\n    if (port) {\n      hostnameWithPort += `:${port}`;\n    }\n  }\n\n  return new URL(`${protocol}://${hostnameWithPort}${originalUrl ?? url}`);\n}\n\n/**\n * Gets the first value of an allowed proxy header.\n *\n * @param headers - The Node.js incoming HTTP headers.\n * @param headerName - The name of the proxy header to retrieve.\n * @param trustProxyHeaders - A set of allowed proxy headers.\n * @returns The value of the allowed proxy header, or `undefined` if not allowed or not present.\n */\nfunction getAllowedProxyHeaderValue(\n  headers: IncomingHttpHeaders,\n  headerName: string,\n  trustProxyHeaders: ReadonlySet<string>,\n): string | undefined {\n  return isProxyHeaderAllowed(headerName, trustProxyHeaders)\n    ? getFirstHeaderValue(headers[headerName])\n    : undefined;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { AngularAppEngine } from '@angular/ssr';\nimport type { IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { AngularAppEngineOptions } from '../../src/app-engine';\nimport { getAllowedHostsFromEnv, getTrustProxyHeadersFromEnv } from './environment-options';\nimport { attachNodeGlobalErrorHandlers } from './errors';\nimport { createWebRequestFromNodeRequest } from './request';\n\n/**\n * Options for the Angular Node.js server application engine.\n */\nexport interface AngularNodeAppEngineOptions extends AngularAppEngineOptions {}\n\n/**\n * Angular server application engine.\n * Manages Angular server applications (including localized ones), handles rendering requests,\n * and optionally transforms index HTML before rendering.\n *\n * @remarks This class should be instantiated once and used as a singleton across the server-side\n * application to ensure consistent handling of rendering requests and resource management.\n */\nexport class AngularNodeAppEngine {\n  private readonly angularAppEngine: AngularAppEngine;\n  private readonly trustProxyHeaders?: boolean | readonly string[];\n\n  /**\n   * Creates a new instance of the Angular Node.js server application engine.\n   * @param options Options for the Angular Node.js server application engine.\n   */\n  constructor(options?: AngularNodeAppEngineOptions) {\n    const appEngineOptions: AngularAppEngineOptions = {\n      ...options,\n      allowedHosts: getAllowedHostsFromEnv() ?? options?.allowedHosts,\n      trustProxyHeaders: getTrustProxyHeadersFromEnv() ?? options?.trustProxyHeaders,\n    };\n\n    this.angularAppEngine = new AngularAppEngine(appEngineOptions);\n    this.trustProxyHeaders = appEngineOptions.trustProxyHeaders;\n\n    attachNodeGlobalErrorHandlers();\n  }\n\n  /**\n   * Handles an incoming HTTP request by serving prerendered content, performing server-side rendering,\n   * or delivering a static file for client-side rendered routes based on the `RenderMode` setting.\n   *\n   * This method adapts Node.js's `IncomingMessage`, `Http2ServerRequest` or `Request`\n   * to a format compatible with the `AngularAppEngine` and delegates the handling logic to it.\n   *\n   * @param request - The incoming HTTP request (`IncomingMessage`, `Http2ServerRequest` or `Request`).\n   * @param requestContext - Optional context for rendering, such as metadata associated with the request.\n   * @returns A promise that resolves to the resulting HTTP response object, or `null` if no matching Angular route is found.\n   *\n   * @remarks A request to `https://www.example.com/page/index.html` will serve or render the Angular route\n   * corresponding to `https://www.example.com/page`.\n   *\n   * @remarks\n   * To prevent potential Server-Side Request Forgery (SSRF), this function verifies the hostname\n   * of the `request.url` against a list of authorized hosts.\n   * If the hostname is not recognized and `allowedHosts` is not empty, a Client-Side Rendered (CSR) version of the\n   * page is returned otherwise a 400 Bad Request is returned.\n   *\n   * Resolution:\n   * Authorize your hostname by configuring `allowedHosts` in `angular.json` in:\n   * `projects.[project-name].architect.build.options.security.allowedHosts`.\n   * Alternatively, you can define the allowed hostname via the environment variable `process.env['NG_ALLOWED_HOSTS']`\n   * or pass it directly through the configuration options of `AngularNodeAppEngine`.\n   *\n   * For more information see: https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf\n   */\n  async handle(\n    request: IncomingMessage | Http2ServerRequest | Request,\n    requestContext?: unknown,\n  ): Promise<Response | null> {\n    const webRequest =\n      request instanceof Request\n        ? request\n        : createWebRequestFromNodeRequest(request, this.trustProxyHeaders);\n\n    return this.angularAppEngine.handle(webRequest, requestContext);\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http';\n\n/**\n * Represents a middleware function for handling HTTP requests in a Node.js environment.\n *\n * @param req - The incoming HTTP request object.\n * @param res - The outgoing HTTP response object.\n * @param next - A callback function that signals the completion of the middleware or forwards the error if provided.\n *\n * @returns A Promise that resolves to void or simply void. The handler can be asynchronous.\n */\nexport type NodeRequestHandlerFunction = (\n  req: IncomingMessage,\n  res: ServerResponse,\n  next: (err?: unknown) => void,\n) => Promise<void> | void;\n\n/**\n * Attaches metadata to the handler function to mark it as a special handler for Node.js environments.\n *\n * @typeParam T - The type of the handler function.\n * @param handler - The handler function to be defined and annotated.\n * @returns The same handler function passed as an argument, with metadata attached.\n *\n * @example\n * Usage in an Express application:\n * ```ts\n * const app = express();\n * export default createNodeRequestHandler(app);\n * ```\n *\n * @example\n * Usage in a Hono application:\n * ```ts\n * const app = new Hono();\n * export default createNodeRequestHandler(async (req, res, next) => {\n *   try {\n *     const webRes = await app.fetch(createWebRequestFromNodeRequest(req));\n *     if (webRes) {\n *       await writeResponseToNodeResponse(webRes, res);\n *     } else {\n *       next();\n *     }\n *   } catch (error) {\n *     next(error);\n *   }\n * });\n * ```\n *\n * @example\n * Usage in a Fastify application:\n * ```ts\n * const app = Fastify();\n * export default createNodeRequestHandler(async (req, res) => {\n *   await app.ready();\n *   app.server.emit('request', req, res);\n * });\n * ```\n */\nexport function createNodeRequestHandler<T extends NodeRequestHandlerFunction>(handler: T): T {\n  (handler as T & { __ng_node_request_handler__?: boolean })['__ng_node_request_handler__'] = true;\n\n  return handler;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { ServerResponse } from 'node:http';\nimport type { Http2ServerResponse } from 'node:http2';\n\n/**\n * Streams a web-standard `Response` into a Node.js `ServerResponse`\n * or `Http2ServerResponse`.\n *\n * This function adapts the web `Response` object to write its content\n * to a Node.js response object, handling both HTTP/1.1 and HTTP/2.\n *\n * @param source - The web-standard `Response` object to stream from.\n * @param destination - The Node.js response object (`ServerResponse` or `Http2ServerResponse`) to stream into.\n * @returns A promise that resolves once the streaming operation is complete.\n */\nexport async function writeResponseToNodeResponse(\n  source: Response,\n  destination: ServerResponse | Http2ServerResponse,\n): Promise<void> {\n  const { status, headers, body } = source;\n  destination.statusCode = status;\n\n  let cookieHeaderSet = false;\n  for (const [name, value] of headers.entries()) {\n    if (name === 'set-cookie') {\n      if (cookieHeaderSet) {\n        continue;\n      }\n\n      // Sets the 'set-cookie' header only once to ensure it is correctly applied.\n      // Concatenating 'set-cookie' values can lead to incorrect behavior, so we use a single value from `headers.getSetCookie()`.\n      destination.setHeader(name, headers.getSetCookie());\n      cookieHeaderSet = true;\n    } else {\n      destination.setHeader(name, value);\n    }\n  }\n\n  if ('flushHeaders' in destination) {\n    destination.flushHeaders();\n  }\n\n  if (!body) {\n    destination.end();\n\n    return;\n  }\n\n  try {\n    const reader = body.getReader();\n\n    destination.on('close', () => {\n      reader.cancel().catch((error) => {\n        // eslint-disable-next-line no-console\n        console.error(\n          `An error occurred while writing the response body for: ${destination.req.url}.`,\n          error,\n        );\n      });\n    });\n\n    // eslint-disable-next-line no-constant-condition\n    while (true) {\n      const { done, value } = await reader.read();\n      if (done) {\n        destination.end();\n        break;\n      }\n\n      const canContinue = (destination as ServerResponse).write(value);\n      if (canContinue === false) {\n        // Explicitly check for `false`, as AWS may return `undefined` even though this is not valid.\n        // See: https://github.com/CodeGenieApp/serverless-express/issues/683\n        await new Promise<void>((resolve) => destination.once('drain', resolve));\n      }\n    }\n  } catch {\n    destination.end('Internal server error.');\n  }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { argv } from 'node:process';\nimport { fileURLToPath } from 'node:url';\n\n/**\n * Determines whether the provided URL represents the main entry point module.\n *\n * This function checks if the provided URL corresponds to the main ESM module being executed directly.\n * It's useful for conditionally executing code that should only run when a module is the entry point,\n * such as starting a server or initializing an application.\n *\n * It performs two key checks:\n * 1. Verifies if the URL starts with 'file:', ensuring it is a local file.\n * 2. Compares the URL's resolved file path with the first command-line argument (`process.argv[1]`),\n *    which points to the file being executed.\n *\n * @param url The URL of the module to check. This should typically be `import.meta.url`.\n * @returns `true` if the provided URL represents the main entry point, otherwise `false`.\n */\nexport function isMainModule(url: string): boolean {\n  return url.startsWith('file:') && argv[1] === fileURLToPath(url);\n}\n"],"names":["getAllowedHostsFromEnv","getArrayFromEnv","getTrustProxyHeadersFromEnv","envName","envValue","process","env","undefined","values","value","split","trimmed","trim","length","push","attachNodeGlobalErrorHandlers","Zone","gThis","globalThis","ngAttachNodeGlobalErrorHandlersCalled","on","error","console","CommonEngineInlineCriticalCssProcessor","resourceCache","Map","html","outputPath","beasties","InlineCriticalCssProcessor","path","resourceContent","get","readFile","set","PERFORMANCE_MARK_PREFIX","printPerformanceLogs","maxWordLength","benchmarks","name","duration","performance","getEntriesByType","startsWith","step","slice","toFixed","clearMeasures","log","spaces","repeat","runMethodAndMeasurePerf","label","asyncMethod","labelName","startLabel","endLabel","mark","measure","clearMarks","noopRunMethodAndMeasurePerf","SSG_MARKER_REGEXP","CommonEngine","options","templateCache","inlineCriticalCssProcessor","pageIsSSG","allowedHosts","constructor","Set","render","opts","url","URL","canParse","urlObj","validateUrl","isAllowedHostConfigured","size","message","document","documentFilePath","getDocument","enablePerformanceProfiler","runMethod","retrieveSSGPage","renderApplication","inlineCriticalCss","content","publicPath","dirname","pathname","pagePath","join","fs","promises","normalize","resolve","exists","isSSG","test","moduleOrFactory","bootstrap","Error","extraProviders","provide","ɵSERVER_CONTEXT","useValue","providers","commonRenderingOptions","isBootstrapFn","platformProviders","renderModule","filePath","doc","access","constants","F_OK","HTTP2_PSEUDO_HEADERS","createWebRequestFromNodeRequest","nodeRequest","trustProxyHeaders","trustProxyHeadersNormalized","normalizeTrustProxyHeaders","headers","method","withBody","referrer","referer","Request","createRequestUrl","createRequestHeaders","body","duplex","nodeHeaders","Headers","Object","entries","has","append","Array","isArray","item","socket","originalUrl","protocol","getAllowedProxyHeaderValue","encrypted","hostname","host","hostnameWithPort","includes","port","headerName","isProxyHeaderAllowed","getFirstHeaderValue","AngularNodeAppEngine","angularAppEngine","appEngineOptions","AngularAppEngine","handle","request","requestContext","webRequest","createNodeRequestHandler","handler","writeResponseToNodeResponse","source","destination","status","statusCode","cookieHeaderSet","setHeader","getSetCookie","flushHeaders","end","reader","getReader","cancel","catch","req","done","read","canContinue","write","Promise","once","isMainModule","argv","fileURLToPath"],"mappings":";;;;;;;;;SAYgBA,sBAAsBA,GAAA;EACpC,OAAOC,eAAe,CAAC,kBAAkB,CAAC;AAC5C;SAMgBC,2BAA2BA,GAAA;EACzC,OAAOD,eAAe,CAAC,wBAAwB,CAAC;AAClD;AAEA,SAASA,eAAeA,CAACE,OAAe,EAAA;AACtC,EAAA,MAAMC,QAAQ,GAAGC,OAAO,CAACC,GAAG,CAACH,OAAO,CAAC;EACrC,IAAI,CAACC,QAAQ,EAAE;AACb,IAAA,OAAOG,SAAS;AAClB,EAAA;EAEA,MAAMC,MAAM,GAAa,EAAE;EAC3B,KAAK,MAAMC,KAAK,IAAIL,QAAQ,CAACM,KAAK,CAAC,GAAG,CAAC,EAAE;AACvC,IAAA,MAAMC,OAAO,GAAGF,KAAK,CAACG,IAAI,EAAE;AAC5B,IAAA,IAAID,OAAO,CAACE,MAAM,GAAG,CAAC,EAAE;AACtBL,MAAAA,MAAM,CAACM,IAAI,CAACH,OAAO,CAAC;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOH,MAAM;AACf;;SCnBgBO,6BAA6BA,GAAA;AAC3C,EAAA,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;AAC/B,IAAA;AACF,EAAA;EAIA,MAAMC,KAAK,GAA4EC,UAAU;EACjG,IAAID,KAAK,CAACE,qCAAqC,EAAE;AAC/C,IAAA;AACF,EAAA;EAEAF,KAAK,CAACE,qCAAqC,GAAG,IAAI;AAElDd,EAAAA,OAAA,CAEGe,EAAE,CAAC,oBAAoB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,oBAAoB,EAAEA,KAAK,CAAC,CAAA,CAE9ED,EAAE,CAAC,mBAAmB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC,CAAC;AAClF;;MC5BaE,sCAAsC,CAAA;AAChCC,EAAAA,aAAa,GAAG,IAAIC,GAAG,EAAkB;AAE1D,EAAA,MAAMpB,OAAOA,CAACqB,IAAY,EAAEC,UAA8B,EAAA;AACxD,IAAA,MAAMC,QAAQ,GAAG,IAAIC,2BAA0B,CAAC,MAAOC,IAAI,IAAI;MAC7D,IAAIC,eAAe,GAAG,IAAI,CAACP,aAAa,CAACQ,GAAG,CAACF,IAAI,CAAC;MAClD,IAAIC,eAAe,KAAKxB,SAAS,EAAE;AACjCwB,QAAAA,eAAe,GAAG,MAAME,QAAQ,CAACH,IAAI,EAAE,OAAO,CAAC;QAC/C,IAAI,CAACN,aAAa,CAACU,GAAG,CAACJ,IAAI,EAAEC,eAAe,CAAC;AAC/C,MAAA;AAEA,MAAA,OAAOA,eAAe;IACxB,CAAC,EAAEJ,UAAU,CAAC;AAEd,IAAA,OAAOC,QAAQ,CAACvB,OAAO,CAACqB,IAAI,CAAC;AAC/B,EAAA;AACD;;ACnBD,MAAMS,uBAAuB,GAAG,KAAK;SAErBC,oBAAoBA,GAAA;EAClC,IAAIC,aAAa,GAAG,CAAC;EACrB,MAAMC,UAAU,GAAoC,EAAE;AAEtD,EAAA,KAAK,MAAM;IAAEC,IAAI;AAAEC,IAAAA;AAAQ,GAAE,IAAIC,WAAW,CAACC,gBAAgB,CAAC,SAAS,CAAC,EAAE;AACxE,IAAA,IAAI,CAACH,IAAI,CAACI,UAAU,CAACR,uBAAuB,CAAC,EAAE;AAC7C,MAAA;AACF,IAAA;AAGA,IAAA,MAAMS,IAAI,GAAGL,IAAI,CAACM,KAAK,CAACV,uBAAuB,CAACtB,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG;AACjE,IAAA,IAAI+B,IAAI,CAAC/B,MAAM,GAAGwB,aAAa,EAAE;MAC/BA,aAAa,GAAGO,IAAI,CAAC/B,MAAM;AAC7B,IAAA;AAEAyB,IAAAA,UAAU,CAACxB,IAAI,CAAC,CAAC8B,IAAI,EAAE,CAAA,EAAGJ,QAAQ,CAACM,OAAO,CAAC,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC;AACnDL,IAAAA,WAAW,CAACM,aAAa,CAACR,IAAI,CAAC;AACjC,EAAA;AAGAjB,EAAAA,OAAO,CAAC0B,GAAG,CAAC,2CAA2C,CAAC;EACxD,KAAK,MAAM,CAACJ,IAAI,EAAEnC,KAAK,CAAC,IAAI6B,UAAU,EAAE;IACtC,MAAMW,MAAM,GAAGZ,aAAa,GAAGO,IAAI,CAAC/B,MAAM,GAAG,CAAC;AAC9CS,IAAAA,OAAO,CAAC0B,GAAG,CAACJ,IAAI,GAAG,GAAG,CAACM,MAAM,CAACD,MAAM,CAAC,GAAGxC,KAAK,CAAC;AAChD,EAAA;AACAa,EAAAA,OAAO,CAAC0B,GAAG,CAAC,2CAA2C,CAAC;AAE1D;AAEO,eAAeG,uBAAuBA,CAC3CC,KAAa,EACbC,WAA6B,EAAA;AAE7B,EAAA,MAAMC,SAAS,GAAG,CAAA,EAAGnB,uBAAuB,CAAA,CAAA,EAAIiB,KAAK,CAAA,CAAE;AACvD,EAAA,MAAMG,UAAU,GAAG,CAAA,MAAA,EAASD,SAAS,CAAA,CAAE;AACvC,EAAA,MAAME,QAAQ,GAAG,CAAA,IAAA,EAAOF,SAAS,CAAA,CAAE;EAEnC,IAAI;AACFb,IAAAA,WAAW,CAACgB,IAAI,CAACF,UAAU,CAAC;IAE5B,OAAO,MAAMF,WAAW,EAAE;AAC5B,EAAA,CAAA,SAAU;AACRZ,IAAAA,WAAW,CAACgB,IAAI,CAACD,QAAQ,CAAC;IAC1Bf,WAAW,CAACiB,OAAO,CAACJ,SAAS,EAAEC,UAAU,EAAEC,QAAQ,CAAC;AACpDf,IAAAA,WAAW,CAACkB,UAAU,CAACJ,UAAU,CAAC;AAClCd,IAAAA,WAAW,CAACkB,UAAU,CAACH,QAAQ,CAAC;AAClC,EAAA;AACF;AAEM,SAAUI,2BAA2BA,CACzCR,KAAa,EACbC,WAA6B,EAAA;EAE7B,OAAOA,WAAW,EAAE;AACtB;;ACxCA,MAAMQ,iBAAiB,GAAG,2CAA2C;MA2CxDC,YAAY,CAAA;EAMHC,OAAA;AALHC,EAAAA,aAAa,GAAG,IAAIvC,GAAG,EAAkB;AACzCwC,EAAAA,0BAA0B,GAAG,IAAI1C,sCAAsC,EAAE;AACzE2C,EAAAA,SAAS,GAAG,IAAIzC,GAAG,EAAmB;EACtC0C,YAAY;EAE7BC,WAAAA,CAAoBL,OAA6B,EAAA;IAA7B,IAAA,CAAAA,OAAO,GAAPA,OAAO;AACzB,IAAA,IAAI,CAACI,YAAY,GAAG,IAAIE,GAAG,CAACrE,sBAAsB,EAAE,IAAI,IAAI,CAAC+D,OAAO,EAAEI,YAAY,IAAI,EAAE,CAAC;AAEzFpD,IAAAA,6BAA6B,EAAE;AACjC,EAAA;EAMA,MAAMuD,MAAMA,CAACC,IAA+B,EAAA;IAC1C,MAAM;AAAEC,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAEpB,IAAIC,GAAG,IAAIC,KAAG,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE;AAC5B,MAAA,MAAMG,MAAM,GAAG,IAAIF,KAAG,CAACD,GAAG,CAAC;MAC3B,IAAI;AACFI,QAAAA,WAAW,CAACD,MAAM,EAAE,IAAI,CAACR,YAAY,CAAC;MACxC,CAAA,CAAE,OAAO9C,KAAK,EAAE;QACd,MAAMwD,uBAAuB,GAAG,IAAI,CAACV,YAAY,CAACW,IAAI,GAAG,CAAC;AAE1DxD,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,OAAA,EAAWA,KAAe,CAAC0D,OAAO,CAAA,CAAE,GAClC,wGAAwG,EAC1GF,uBAAA,GACI,EAAA,GACA,wGAAwG,CAC7G;QAED,IAAI,CAACA,uBAAuB,EAAE;AAG5B,UAAA,IAAIG,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,UAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;AACtCD,YAAAA,QAAQ,GAAGT,IAAI,CAACS,QAAQ,KAAK,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC,CAAC;AAC7E,UAAA;AAEA,UAAA,IAAID,QAAQ,EAAE;AACZ,YAAA,OAAOA,QAAQ;AACjB,UAAA;AACF,QAAA;AAEA,QAAA,MAAM3D,KAAK;AACb,MAAA;AACF,IAAA;AAEA,IAAA,MAAM8D,yBAAyB,GAAG,IAAI,CAACpB,OAAO,EAAEoB,yBAAyB;AAEzE,IAAA,MAAMC,SAAS,GAAGD,yBAAA,GACdhC,uBAAA,GACAS,2BAA2B;AAE/B,IAAA,IAAIlC,IAAI,GAAG,MAAM0D,SAAS,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAACC,eAAe,CAACd,IAAI,CAAC,CAAC;IAEjF,IAAI7C,IAAI,KAAKnB,SAAS,EAAE;AACtBmB,MAAAA,IAAI,GAAG,MAAM0D,SAAS,CAAC,aAAa,EAAE,MAAM,IAAI,CAACE,iBAAiB,CAACf,IAAI,CAAC,CAAC;AAEzE,MAAA,IAAIA,IAAI,CAACgB,iBAAiB,KAAK,KAAK,EAAE;AACpC,QAAA,MAAMC,OAAO,GAAG,MAAMJ,SAAS,CAAC,qBAAqB,EAAE,MAErD,IAAI,CAACG,iBAAiB,CAAC7D,IAAK,EAAE6C,IAAI,CAAC,CACpC;AAED7C,QAAAA,IAAI,GAAG8D,OAAO;AAChB,MAAA;AACF,IAAA;AAEA,IAAA,IAAIL,yBAAyB,EAAE;AAC7B/C,MAAAA,oBAAoB,EAAE;AACxB,IAAA;AAEA,IAAA,OAAOV,IAAI;AACb,EAAA;AAEQ6D,EAAAA,iBAAiBA,CAAC7D,IAAY,EAAE6C,IAA+B,EAAA;AACrE,IAAA,MAAM5C,UAAU,GACd4C,IAAI,CAACkB,UAAU,KAAKlB,IAAI,CAACU,gBAAgB,GAAGS,OAAO,CAACnB,IAAI,CAACU,gBAAgB,CAAC,GAAG,EAAE,CAAC;IAElF,OAAO,IAAI,CAAChB,0BAA0B,CAAC5D,OAAO,CAACqB,IAAI,EAAEC,UAAU,CAAC;AAClE,EAAA;EAEQ,MAAM0D,eAAeA,CAACd,IAA+B,EAAA;IAC3D,MAAM;MAAEkB,UAAU;MAAER,gBAAgB;AAAET,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAClD,IAAI,CAACkB,UAAU,IAAI,CAACR,gBAAgB,IAAIT,GAAG,KAAKjE,SAAS,EAAE;AACzD,MAAA,OAAOA,SAAS;AAClB,IAAA;IAEA,MAAM;AAAEoF,MAAAA;AAAQ,KAAE,GAAG,IAAIlB,KAAG,CAACD,GAAG,EAAE,YAAY,CAAC;IAG/C,MAAMoB,QAAQ,GAAGC,IAAI,CAACJ,UAAU,EAAEE,QAAQ,EAAE,YAAY,CAAC;IAEzD,IAAI,IAAI,CAACzB,SAAS,CAAClC,GAAG,CAAC4D,QAAQ,CAAC,EAAE;MAEhC,OAAOE,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAChD,IAAA;IAEA,IAAI,CAACA,QAAQ,CAACjD,UAAU,CAACqD,SAAS,CAACP,UAAU,CAAC,CAAC,EAAE;AAE/C,MAAA,OAAOlF,SAAS;AAClB,IAAA;AAEA,IAAA,IAAIqF,QAAQ,KAAKK,OAAO,CAAChB,gBAAgB,CAAC,IAAI,EAAE,MAAMiB,MAAM,CAACN,QAAQ,CAAC,CAAC,EAAE;MAEvE,IAAI,CAAC1B,SAAS,CAAChC,GAAG,CAAC0D,QAAQ,EAAE,KAAK,CAAC;AAEnC,MAAA,OAAOrF,SAAS;AAClB,IAAA;AAGA,IAAA,MAAMiF,OAAO,GAAG,MAAMM,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAC7D,IAAA,MAAMO,KAAK,GAAGtC,iBAAiB,CAACuC,IAAI,CAACZ,OAAO,CAAC;IAC7C,IAAI,CAACtB,SAAS,CAAChC,GAAG,CAAC0D,QAAQ,EAAEO,KAAK,CAAC;AAEnC,IAAA,OAAOA,KAAK,GAAGX,OAAO,GAAGjF,SAAS;AACpC,EAAA;EAEQ,MAAM+E,iBAAiBA,CAACf,IAA+B,EAAA;IAC7D,MAAM8B,eAAe,GAAG,IAAI,CAACtC,OAAO,EAAEuC,SAAS,IAAI/B,IAAI,CAAC+B,SAAS;IACjE,IAAI,CAACD,eAAe,EAAE;AACpB,MAAA,MAAM,IAAIE,KAAK,CAAC,gDAAgD,CAAC;AACnE,IAAA;IAEA,MAAMC,cAAc,GAAqB,CACvC;AAAEC,MAAAA,OAAO,EAAEC,eAAe;AAAEC,MAAAA,QAAQ,EAAE;AAAK,KAAE,EAC7C,IAAIpC,IAAI,CAACqC,SAAS,IAAI,EAAE,CAAC,EACzB,IAAI,IAAI,CAAC7C,OAAO,EAAE6C,SAAS,IAAI,EAAE,CAAC,CACnC;AAED,IAAA,IAAI5B,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,IAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;MACtCD,QAAQ,GAAG,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC;AAC1D,IAAA;AAEA,IAAA,MAAM4B,sBAAsB,GAAG;MAC7BrC,GAAG,EAAED,IAAI,CAACC,GAAG;MACbQ,QAAQ;MAERb,YAAY,EAAE,CAAC,GAAG;KACnB;IAED,OAAO2C,aAAa,CAACT,eAAe,CAAA,GAChCf,iBAAiB,CAACe,eAAe,EAAE;AACjCU,MAAAA,iBAAiB,EAAEP,cAAc;MACjC,GAAGK;KACJ,CAAA,GACDG,YAAY,CAACX,eAAe,EAAE;MAAEG,cAAc;MAAE,GAAGK;AAAsB,KAAE,CAAC;AAClF,EAAA;EAGQ,MAAM3B,WAAWA,CAAC+B,QAAgB,EAAA;IACxC,IAAIC,GAAG,GAAG,IAAI,CAAClD,aAAa,CAAChC,GAAG,CAACiF,QAAQ,CAAC;IAE1C,IAAI,CAACC,GAAG,EAAE;MACRA,GAAG,GAAG,MAAMpB,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAACgF,QAAQ,EAAE,OAAO,CAAC;MACnD,IAAI,CAACjD,aAAa,CAAC9B,GAAG,CAAC+E,QAAQ,EAAEC,GAAG,CAAC;AACvC,IAAA;AAEA,IAAA,OAAOA,GAAG;AACZ,EAAA;AACD;AAED,eAAehB,MAAMA,CAACpE,IAAiB,EAAA;EACrC,IAAI;AACF,IAAA,MAAMgE,EAAE,CAACC,QAAQ,CAACoB,MAAM,CAACrF,IAAI,EAAEgE,EAAE,CAACsB,SAAS,CAACC,IAAI,CAAC;AAEjD,IAAA,OAAO,IAAI;AACb,EAAA,CAAA,CAAE,MAAM;AACN,IAAA,OAAO,KAAK;AACd,EAAA;AACF;AAEA,SAASP,aAAaA,CACpBrG,KAAc,EAAA;EAGd,OAAO,OAAOA,KAAK,KAAK,UAAU,IAAI,EAAE,MAAM,IAAIA,KAAK,CAAC;AAC1D;;AClOA,MAAM6G,oBAAoB,GAAwB,IAAIjD,GAAG,CAAC,CACxD,SAAS,EACT,SAAS,EACT,YAAY,EACZ,OAAO,EACP,SAAS,CACV,CAAC;AAmBI,SAAUkD,+BAA+BA,CAC7CC,WAAiD,EACjDC,iBAA+C,EAAA;AAE/C,EAAA,MAAMC,2BAA2B,GAAGC,0BAA0B,CAACF,iBAAiB,CAAC;EACjF,MAAM;IAAEG,OAAO;AAAEC,IAAAA,MAAM,GAAG;AAAK,GAAE,GAAGL,WAAW;EAC/C,MAAMM,QAAQ,GAAGD,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM;AACtD,EAAA,MAAME,QAAQ,GAAGH,OAAO,CAACI,OAAO,IAAIvD,GAAG,CAACC,QAAQ,CAACkD,OAAO,CAACI,OAAO,CAAC,GAAGJ,OAAO,CAACI,OAAO,GAAGzH,SAAS;EAE/F,OAAO,IAAI0H,OAAO,CAACC,gBAAgB,CAACV,WAAW,EAAEE,2BAA2B,CAAC,EAAE;IAC7EG,MAAM;AACND,IAAAA,OAAO,EAAEO,oBAAoB,CAACP,OAAO,CAAC;AACtCQ,IAAAA,IAAI,EAAEN,QAAQ,GAAGN,WAAW,GAAGjH,SAAS;AACxC8H,IAAAA,MAAM,EAAEP,QAAQ,GAAG,MAAM,GAAGvH,SAAS;AACrCwH,IAAAA;AACD,GAAA,CAAC;AACJ;AAQA,SAASI,oBAAoBA,CAACG,WAAgC,EAAA;AAC5D,EAAA,MAAMV,OAAO,GAAG,IAAIW,OAAO,EAAE;AAE7B,EAAA,KAAK,MAAM,CAAChG,IAAI,EAAE9B,KAAK,CAAC,IAAI+H,MAAM,CAACC,OAAO,CAACH,WAAW,CAAC,EAAE;AACvD,IAAA,IAAIhB,oBAAoB,CAACoB,GAAG,CAACnG,IAAI,CAAC,EAAE;AAClC,MAAA;AACF,IAAA;AAEA,IAAA,IAAI,OAAO9B,KAAK,KAAK,QAAQ,EAAE;AAC7BmH,MAAAA,OAAO,CAACe,MAAM,CAACpG,IAAI,EAAE9B,KAAK,CAAC;IAC7B,CAAA,MAAO,IAAImI,KAAK,CAACC,OAAO,CAACpI,KAAK,CAAC,EAAE;AAC/B,MAAA,KAAK,MAAMqI,IAAI,IAAIrI,KAAK,EAAE;AACxBmH,QAAAA,OAAO,CAACe,MAAM,CAACpG,IAAI,EAAEuG,IAAI,CAAC;AAC5B,MAAA;AACF,IAAA;AACF,EAAA;AAEA,EAAA,OAAOlB,OAAO;AAChB;AAeM,SAAUM,gBAAgBA,CAC9BV,WAAiD,EACjDC,iBAAsC,EAAA;EAEtC,MAAM;IACJG,OAAO;IACPmB,MAAM;AACNvE,IAAAA,GAAG,GAAG,EAAE;AACRwE,IAAAA;AAAW,GACZ,GAAGxB,WAAyD;EAE7D,MAAMyB,QAAQ,GACZC,0BAA0B,CAACtB,OAAO,EAAE,mBAAmB,EAAEH,iBAAiB,CAAC,KAC1E,WAAW,IAAIsB,MAAM,IAAIA,MAAM,CAACI,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhE,EAAA,MAAMC,QAAQ,GACZF,0BAA0B,CAACtB,OAAO,EAAE,kBAAkB,EAAEH,iBAAiB,CAAC,IAC1EG,OAAO,CAACyB,IAAI,IACZzB,OAAO,CAAC,YAAY,CAAC;AAEvB,EAAA,IAAIgB,KAAK,CAACC,OAAO,CAACO,QAAQ,CAAC,EAAE;AAC3B,IAAA,MAAM,IAAI7C,KAAK,CAAC,gCAAgC,CAAC;AACnD,EAAA;EAEA,IAAI+C,gBAAgB,GAAGF,QAAQ;AAC/B,EAAA,IAAI,CAACA,QAAQ,EAAEG,QAAQ,CAAC,GAAG,CAAC,EAAE;IAC5B,MAAMC,IAAI,GAAGN,0BAA0B,CAACtB,OAAO,EAAE,kBAAkB,EAAEH,iBAAiB,CAAC;AACvF,IAAA,IAAI+B,IAAI,EAAE;MACRF,gBAAgB,IAAI,CAAA,CAAA,EAAIE,IAAI,CAAA,CAAE;AAChC,IAAA;AACF,EAAA;AAEA,EAAA,OAAO,IAAI/E,GAAG,CAAC,CAAA,EAAGwE,QAAQ,CAAA,GAAA,EAAMK,gBAAgB,CAAA,EAAGN,WAAW,IAAIxE,GAAG,CAAA,CAAE,CAAC;AAC1E;AAUA,SAAS0E,0BAA0BA,CACjCtB,OAA4B,EAC5B6B,UAAkB,EAClBhC,iBAAsC,EAAA;AAEtC,EAAA,OAAOiC,oBAAoB,CAACD,UAAU,EAAEhC,iBAAiB,CAAA,GACrDkC,mBAAmB,CAAC/B,OAAO,CAAC6B,UAAU,CAAC,CAAA,GACvClJ,SAAS;AACf;;MC/HaqJ,oBAAoB,CAAA;EACdC,gBAAgB;EAChBpC,iBAAiB;EAMlCrD,WAAAA,CAAYL,OAAqC,EAAA;AAC/C,IAAA,MAAM+F,gBAAgB,GAA4B;AAChD,MAAA,GAAG/F,OAAO;AACVI,MAAAA,YAAY,EAAEnE,sBAAsB,EAAE,IAAI+D,OAAO,EAAEI,YAAY;AAC/DsD,MAAAA,iBAAiB,EAAEvH,2BAA2B,EAAE,IAAI6D,OAAO,EAAE0D;KAC9D;AAED,IAAA,IAAI,CAACoC,gBAAgB,GAAG,IAAIE,gBAAgB,CAACD,gBAAgB,CAAC;AAC9D,IAAA,IAAI,CAACrC,iBAAiB,GAAGqC,gBAAgB,CAACrC,iBAAiB;AAE3D1G,IAAAA,6BAA6B,EAAE;AACjC,EAAA;AA8BA,EAAA,MAAMiJ,MAAMA,CACVC,OAAuD,EACvDC,cAAwB,EAAA;AAExB,IAAA,MAAMC,UAAU,GACdF,OAAO,YAAYhC,OAAA,GACfgC,OAAA,GACA1C,+BAA+B,CAAC0C,OAAO,EAAE,IAAI,CAACxC,iBAAiB,CAAC;IAEtE,OAAO,IAAI,CAACoC,gBAAgB,CAACG,MAAM,CAACG,UAAU,EAAED,cAAc,CAAC;AACjE,EAAA;AACD;;ACtBK,SAAUE,wBAAwBA,CAAuCC,OAAU,EAAA;AACtFA,EAAAA,OAAyD,CAAC,6BAA6B,CAAC,GAAG,IAAI;AAEhG,EAAA,OAAOA,OAAO;AAChB;;ACjDO,eAAeC,2BAA2BA,CAC/CC,MAAgB,EAChBC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,MAAM;IAAE7C,OAAO;AAAEQ,IAAAA;AAAI,GAAE,GAAGmC,MAAM;EACxCC,WAAW,CAACE,UAAU,GAAGD,MAAM;EAE/B,IAAIE,eAAe,GAAG,KAAK;AAC3B,EAAA,KAAK,MAAM,CAACpI,IAAI,EAAE9B,KAAK,CAAC,IAAImH,OAAO,CAACa,OAAO,EAAE,EAAE;IAC7C,IAAIlG,IAAI,KAAK,YAAY,EAAE;AACzB,MAAA,IAAIoI,eAAe,EAAE;AACnB,QAAA;AACF,MAAA;MAIAH,WAAW,CAACI,SAAS,CAACrI,IAAI,EAAEqF,OAAO,CAACiD,YAAY,EAAE,CAAC;AACnDF,MAAAA,eAAe,GAAG,IAAI;AACxB,IAAA,CAAA,MAAO;AACLH,MAAAA,WAAW,CAACI,SAAS,CAACrI,IAAI,EAAE9B,KAAK,CAAC;AACpC,IAAA;AACF,EAAA;EAEA,IAAI,cAAc,IAAI+J,WAAW,EAAE;IACjCA,WAAW,CAACM,YAAY,EAAE;AAC5B,EAAA;EAEA,IAAI,CAAC1C,IAAI,EAAE;IACToC,WAAW,CAACO,GAAG,EAAE;AAEjB,IAAA;AACF,EAAA;EAEA,IAAI;AACF,IAAA,MAAMC,MAAM,GAAG5C,IAAI,CAAC6C,SAAS,EAAE;AAE/BT,IAAAA,WAAW,CAACpJ,EAAE,CAAC,OAAO,EAAE,MAAK;MAC3B4J,MAAM,CAACE,MAAM,EAAE,CAACC,KAAK,CAAE9J,KAAK,IAAI;AAE9BC,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,uDAAA,EAA0DmJ,WAAW,CAACY,GAAG,CAAC5G,GAAG,CAAA,CAAA,CAAG,EAChFnD,KAAK,CACN;AACH,MAAA,CAAC,CAAC;AACJ,IAAA,CAAC,CAAC;AAGF,IAAA,OAAO,IAAI,EAAE;MACX,MAAM;QAAEgK,IAAI;AAAE5K,QAAAA;AAAK,OAAE,GAAG,MAAMuK,MAAM,CAACM,IAAI,EAAE;AAC3C,MAAA,IAAID,IAAI,EAAE;QACRb,WAAW,CAACO,GAAG,EAAE;AACjB,QAAA;AACF,MAAA;AAEA,MAAA,MAAMQ,WAAW,GAAIf,WAA8B,CAACgB,KAAK,CAAC/K,KAAK,CAAC;MAChE,IAAI8K,WAAW,KAAK,KAAK,EAAE;AAGzB,QAAA,MAAM,IAAIE,OAAO,CAAQxF,OAAO,IAAKuE,WAAW,CAACkB,IAAI,CAAC,OAAO,EAAEzF,OAAO,CAAC,CAAC;AAC1E,MAAA;AACF,IAAA;AACF,EAAA,CAAA,CAAE,MAAM;AACNuE,IAAAA,WAAW,CAACO,GAAG,CAAC,wBAAwB,CAAC;AAC3C,EAAA;AACF;;AC5DM,SAAUY,YAAYA,CAACnH,GAAW,EAAA;AACtC,EAAA,OAAOA,GAAG,CAAC7B,UAAU,CAAC,OAAO,CAAC,IAAIiJ,IAAI,CAAC,CAAC,CAAC,KAAKC,aAAa,CAACrH,GAAG,CAAC;AAClE;;;;"}

package.json

 {
   "name": "@angular/ssr",
-  "version": "21.2.13",
+  "version": "21.2.14",
   "description": "Angular server side rendering utilities",
@@ -5,0 +5,0 @@ "type": "module",

No alert changes

Worsened metrics

Total package byte prevSize

1659141

-0.02%

No dependency changes