@angular/ssr
Advanced tools
+1
-11
@@ -117,13 +117,3 @@ import { renderApplication, renderModule, ɵSERVER_CONTEXT as _SERVER_CONTEXT } from '@angular/platform-server'; | ||
| } catch (error) { | ||
| const isAllowedHostConfigured = this.allowedHosts.size > 0; | ||
| console.error(`ERROR: ${error.message}` + 'Please provide a list of allowed hosts in the "allowedHosts" option in the "CommonEngine" constructor.', isAllowedHostConfigured ? '' : '\nFalling back to client side rendering. This will become a 400 Bad Request in a future major version.'); | ||
| if (!isAllowedHostConfigured) { | ||
| let document = opts.document; | ||
| if (!document && opts.documentFilePath) { | ||
| document = opts.document ?? (await this.getDocument(opts.documentFilePath)); | ||
| } | ||
| if (document) { | ||
| return document; | ||
| } | ||
| } | ||
| console.error(`ERROR: ${error.message}` + 'Please provide a list of allowed hosts in the "allowedHosts" option in the "CommonEngine" constructor.'); | ||
| throw error; | ||
@@ -130,0 +120,0 @@ } |
@@ -1,1 +0,1 @@ | ||
| {"version":3,"file":"node.mjs","sources":["../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/environment-options.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/errors.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/inline-css-processor.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/peformance-profiler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/common-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/request.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/app-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/handler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/response.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/module.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Retrieves the list of allowed hosts from the environment variable `NG_ALLOWED_HOSTS`.\n * @returns An array of allowed hosts.\n */\nexport function getAllowedHostsFromEnv(): ReadonlyArray<string> {\n const allowedHosts: string[] = [];\n const envNgAllowedHosts = process.env['NG_ALLOWED_HOSTS'];\n if (!envNgAllowedHosts) {\n return allowedHosts;\n }\n\n const hosts = envNgAllowedHosts.split(',');\n for (const host of hosts) {\n const trimmed = host.trim();\n if (trimmed.length > 0) {\n allowedHosts.push(trimmed);\n }\n }\n\n return allowedHosts;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Attaches listeners to the Node.js process to capture and handle unhandled rejections and uncaught exceptions.\n * Captured errors are logged to the console. This function logs errors to the console, preventing unhandled errors\n * from crashing the server. It is particularly useful for Zoneless apps, ensuring error handling without relying on Zone.js.\n *\n * @remarks\n * This function is a no-op if zone.js is available.\n * For Zone-based apps, similar functionality is provided by Zone.js itself. See the Zone.js implementation here:\n * https://github.com/angular/angular/blob/4a8d0b79001ec09bcd6f2d6b15117aa6aac1932c/packages/zone.js/lib/node/node.ts#L94%7C\n *\n * @internal\n */\nexport function attachNodeGlobalErrorHandlers(): void {\n if (typeof Zone !== 'undefined') {\n return;\n }\n\n // Ensure that the listeners are registered only once.\n // Otherwise, multiple instances may be registered during edit/refresh.\n const gThis: typeof globalThis & { ngAttachNodeGlobalErrorHandlersCalled?: boolean } = globalThis;\n if (gThis.ngAttachNodeGlobalErrorHandlersCalled) {\n return;\n }\n\n gThis.ngAttachNodeGlobalErrorHandlersCalled = true;\n\n process\n // eslint-disable-next-line no-console\n .on('unhandledRejection', (error) => console.error('unhandledRejection', error))\n // eslint-disable-next-line no-console\n .on('uncaughtException', (error) => console.error('uncaughtException', error));\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ɵInlineCriticalCssProcessor as InlineCriticalCssProcessor } from '@angular/ssr';\nimport { readFile } from 'node:fs/promises';\n\nexport class CommonEngineInlineCriticalCssProcessor {\n private readonly resourceCache = new Map<string, string>();\n\n async process(html: string, outputPath: string | undefined): Promise<string> {\n const beasties = new InlineCriticalCssProcessor(async (path) => {\n let resourceContent = this.resourceCache.get(path);\n if (resourceContent === undefined) {\n resourceContent = await readFile(path, 'utf-8');\n this.resourceCache.set(path, resourceContent);\n }\n\n return resourceContent;\n }, outputPath);\n\n return beasties.process(html);\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nconst PERFORMANCE_MARK_PREFIX = '🅰️';\n\nexport function printPerformanceLogs(): void {\n let maxWordLength = 0;\n const benchmarks: [step: string, value: string][] = [];\n\n for (const { name, duration } of performance.getEntriesByType('measure')) {\n if (!name.startsWith(PERFORMANCE_MARK_PREFIX)) {\n continue;\n }\n\n // `🅰️:Retrieve SSG Page` -> `Retrieve SSG Page:`\n const step = name.slice(PERFORMANCE_MARK_PREFIX.length + 1) + ':';\n if (step.length > maxWordLength) {\n maxWordLength = step.length;\n }\n\n benchmarks.push([step, `${duration.toFixed(1)}ms`]);\n performance.clearMeasures(name);\n }\n\n /* eslint-disable no-console */\n console.log('********** Performance results **********');\n for (const [step, value] of benchmarks) {\n const spaces = maxWordLength - step.length + 5;\n console.log(step + ' '.repeat(spaces) + value);\n }\n console.log('*****************************************');\n /* eslint-enable no-console */\n}\n\nexport async function runMethodAndMeasurePerf<T>(\n label: string,\n asyncMethod: () => Promise<T>,\n): Promise<T> {\n const labelName = `${PERFORMANCE_MARK_PREFIX}:${label}`;\n const startLabel = `start:${labelName}`;\n const endLabel = `end:${labelName}`;\n\n try {\n performance.mark(startLabel);\n\n return await asyncMethod();\n } finally {\n performance.mark(endLabel);\n performance.measure(labelName, startLabel, endLabel);\n performance.clearMarks(startLabel);\n performance.clearMarks(endLabel);\n }\n}\n\nexport function noopRunMethodAndMeasurePerf<T>(\n label: string,\n asyncMethod: () => Promise<T>,\n): Promise<T> {\n return asyncMethod();\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ApplicationRef, StaticProvider, Type } from '@angular/core';\nimport { BootstrapContext } from '@angular/platform-browser';\nimport { renderApplication, renderModule, ɵSERVER_CONTEXT } from '@angular/platform-server';\nimport * as fs from 'node:fs';\nimport { dirname, join, normalize, resolve } from 'node:path';\nimport { URL } from 'node:url';\nimport { validateUrl } from '../../../src/utils/validation';\nimport { getAllowedHostsFromEnv } from '../environment-options';\nimport { attachNodeGlobalErrorHandlers } from '../errors';\nimport { CommonEngineInlineCriticalCssProcessor } from './inline-css-processor';\nimport {\n noopRunMethodAndMeasurePerf,\n printPerformanceLogs,\n runMethodAndMeasurePerf,\n} from './peformance-profiler';\n\nconst SSG_MARKER_REGEXP = /ng-server-context=[\"']\\w*\\|?ssg\\|?\\w*[\"']/;\n\nexport interface CommonEngineOptions {\n /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n /** A set of platform level providers for all requests. */\n providers?: StaticProvider[];\n\n /** Enable request performance profiling data collection and printing the results in the server console. */\n enablePerformanceProfiler?: boolean;\n\n /** A set of hostnames that are allowed to access the server. */\n allowedHosts?: readonly string[];\n}\n\nexport interface CommonEngineRenderOptions {\n /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n /** A set of platform level providers for the current request. */\n providers?: StaticProvider[];\n url?: string;\n document?: string;\n documentFilePath?: string;\n\n /**\n * Reduce render blocking requests by inlining critical CSS.\n * Defaults to true.\n */\n inlineCriticalCss?: boolean;\n\n /**\n * Base path location of index file.\n * Defaults to the 'documentFilePath' dirname when not provided.\n */\n publicPath?: string;\n}\n\n/**\n * A common engine to use to server render an application.\n */\n\nexport class CommonEngine {\n private readonly templateCache = new Map<string, string>();\n private readonly inlineCriticalCssProcessor = new CommonEngineInlineCriticalCssProcessor();\n private readonly pageIsSSG = new Map<string, boolean>();\n private readonly allowedHosts: ReadonlySet<string>;\n\n constructor(private options?: CommonEngineOptions) {\n this.allowedHosts = new Set([\n ...getAllowedHostsFromEnv(),\n ...(this.options?.allowedHosts ?? []),\n ]);\n\n attachNodeGlobalErrorHandlers();\n }\n\n /**\n * Render an HTML document for a specific URL with specified\n * render options\n */\n async render(opts: CommonEngineRenderOptions): Promise<string> {\n const { url } = opts;\n\n if (url && URL.canParse(url)) {\n const urlObj = new URL(url);\n try {\n validateUrl(urlObj, this.allowedHosts);\n } catch (error) {\n const isAllowedHostConfigured = this.allowedHosts.size > 0;\n // eslint-disable-next-line no-console\n console.error(\n `ERROR: ${(error as Error).message}` +\n 'Please provide a list of allowed hosts in the \"allowedHosts\" option in the \"CommonEngine\" constructor.',\n isAllowedHostConfigured\n ? ''\n : '\\nFalling back to client side rendering. This will become a 400 Bad Request in a future major version.',\n );\n\n if (!isAllowedHostConfigured) {\n // Fallback to CSR to avoid a breaking change.\n // TODO(alanagius): Return a 400 and remove this fallback in the next major version (v22).\n let document = opts.document;\n if (!document && opts.documentFilePath) {\n document = opts.document ?? (await this.getDocument(opts.documentFilePath));\n }\n\n if (document) {\n return document;\n }\n }\n\n throw error;\n }\n }\n\n const enablePerformanceProfiler = this.options?.enablePerformanceProfiler;\n\n const runMethod = enablePerformanceProfiler\n ? runMethodAndMeasurePerf\n : noopRunMethodAndMeasurePerf;\n\n let html = await runMethod('Retrieve SSG Page', () => this.retrieveSSGPage(opts));\n\n if (html === undefined) {\n html = await runMethod('Render Page', () => this.renderApplication(opts));\n\n if (opts.inlineCriticalCss !== false) {\n const content = await runMethod('Inline Critical CSS', () =>\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n this.inlineCriticalCss(html!, opts),\n );\n\n html = content;\n }\n }\n\n if (enablePerformanceProfiler) {\n printPerformanceLogs();\n }\n\n return html;\n }\n\n private inlineCriticalCss(html: string, opts: CommonEngineRenderOptions): Promise<string> {\n const outputPath =\n opts.publicPath ?? (opts.documentFilePath ? dirname(opts.documentFilePath) : '');\n\n return this.inlineCriticalCssProcessor.process(html, outputPath);\n }\n\n private async retrieveSSGPage(opts: CommonEngineRenderOptions): Promise<string | undefined> {\n const { publicPath, documentFilePath, url } = opts;\n if (!publicPath || !documentFilePath || url === undefined) {\n return undefined;\n }\n\n const { pathname } = new URL(url, 'resolve://');\n // Do not use `resolve` here as otherwise it can lead to path traversal vulnerability.\n // See: https://portswigger.net/web-security/file-path-traversal\n const pagePath = join(publicPath, pathname, 'index.html');\n\n if (this.pageIsSSG.get(pagePath)) {\n // Serve pre-rendered page.\n return fs.promises.readFile(pagePath, 'utf-8');\n }\n\n if (!pagePath.startsWith(normalize(publicPath))) {\n // Potential path traversal detected.\n return undefined;\n }\n\n if (pagePath === resolve(documentFilePath) || !(await exists(pagePath))) {\n // View matches with prerender path or file does not exist.\n this.pageIsSSG.set(pagePath, false);\n\n return undefined;\n }\n\n // Static file exists.\n const content = await fs.promises.readFile(pagePath, 'utf-8');\n const isSSG = SSG_MARKER_REGEXP.test(content);\n this.pageIsSSG.set(pagePath, isSSG);\n\n return isSSG ? content : undefined;\n }\n\n private async renderApplication(opts: CommonEngineRenderOptions): Promise<string> {\n const moduleOrFactory = this.options?.bootstrap ?? opts.bootstrap;\n if (!moduleOrFactory) {\n throw new Error('A module or bootstrap option must be provided.');\n }\n\n const extraProviders: StaticProvider[] = [\n { provide: ɵSERVER_CONTEXT, useValue: 'ssr' },\n ...(opts.providers ?? []),\n ...(this.options?.providers ?? []),\n ];\n\n let document = opts.document;\n if (!document && opts.documentFilePath) {\n document = await this.getDocument(opts.documentFilePath);\n }\n\n const commonRenderingOptions = {\n url: opts.url,\n document,\n };\n\n return isBootstrapFn(moduleOrFactory)\n ? renderApplication(moduleOrFactory, {\n platformProviders: extraProviders,\n ...commonRenderingOptions,\n })\n : renderModule(moduleOrFactory, { extraProviders, ...commonRenderingOptions });\n }\n\n /** Retrieve the document from the cache or the filesystem */\n private async getDocument(filePath: string): Promise<string> {\n let doc = this.templateCache.get(filePath);\n\n if (!doc) {\n doc = await fs.promises.readFile(filePath, 'utf-8');\n this.templateCache.set(filePath, doc);\n }\n\n return doc;\n }\n}\n\nasync function exists(path: fs.PathLike): Promise<boolean> {\n try {\n await fs.promises.access(path, fs.constants.F_OK);\n\n return true;\n } catch {\n return false;\n }\n}\n\nfunction isBootstrapFn(\n value: unknown,\n): value is (context: BootstrapContext) => Promise<ApplicationRef> {\n // We can differentiate between a module and a bootstrap function by reading compiler-generated `ɵmod` static property:\n return typeof value === 'function' && !('ɵmod' in value);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingHttpHeaders, IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { getFirstHeaderValue } from '../../src/utils/validation';\n\n/**\n * A set containing all the pseudo-headers defined in the HTTP/2 specification.\n *\n * This set can be used to filter out pseudo-headers from a list of headers,\n * as they are not allowed to be set directly using the `Node.js` Undici API or\n * the web `Headers` API.\n */\nconst HTTP2_PSEUDO_HEADERS = new Set([':method', ':scheme', ':authority', ':path', ':status']);\n\n/**\n * Converts a Node.js `IncomingMessage` or `Http2ServerRequest` into a\n * Web Standard `Request` object.\n *\n * This function adapts the Node.js request objects to a format that can\n * be used by web platform APIs.\n *\n * @param nodeRequest - The Node.js request object (`IncomingMessage` or `Http2ServerRequest`) to convert.\n * @returns A Web Standard `Request` object.\n */\nexport function createWebRequestFromNodeRequest(\n nodeRequest: IncomingMessage | Http2ServerRequest,\n): Request {\n const { headers, method = 'GET' } = nodeRequest;\n const withBody = method !== 'GET' && method !== 'HEAD';\n const referrer = headers.referer && URL.canParse(headers.referer) ? headers.referer : undefined;\n\n return new Request(createRequestUrl(nodeRequest), {\n method,\n headers: createRequestHeaders(headers),\n body: withBody ? nodeRequest : undefined,\n duplex: withBody ? 'half' : undefined,\n referrer,\n });\n}\n\n/**\n * Creates a `Headers` object from Node.js `IncomingHttpHeaders`.\n *\n * @param nodeHeaders - The Node.js `IncomingHttpHeaders` object to convert.\n * @returns A `Headers` object containing the converted headers.\n */\nfunction createRequestHeaders(nodeHeaders: IncomingHttpHeaders): Headers {\n const headers = new Headers();\n\n for (const [name, value] of Object.entries(nodeHeaders)) {\n if (HTTP2_PSEUDO_HEADERS.has(name)) {\n continue;\n }\n\n if (typeof value === 'string') {\n headers.append(name, value);\n } else if (Array.isArray(value)) {\n for (const item of value) {\n headers.append(name, item);\n }\n }\n }\n\n return headers;\n}\n\n/**\n * Creates a `URL` object from a Node.js `IncomingMessage`, taking into account the protocol, host, and port.\n *\n * @param nodeRequest - The Node.js `IncomingMessage` or `Http2ServerRequest` object to extract URL information from.\n * @returns A `URL` object representing the request URL.\n */\nexport function createRequestUrl(nodeRequest: IncomingMessage | Http2ServerRequest): URL {\n const {\n headers,\n socket,\n url = '',\n originalUrl,\n } = nodeRequest as IncomingMessage & { originalUrl?: string };\n const protocol =\n getFirstHeaderValue(headers['x-forwarded-proto']) ??\n ('encrypted' in socket && socket.encrypted ? 'https' : 'http');\n const hostname =\n getFirstHeaderValue(headers['x-forwarded-host']) ?? headers.host ?? headers[':authority'];\n\n if (Array.isArray(hostname)) {\n throw new Error('host value cannot be an array.');\n }\n\n let hostnameWithPort = hostname;\n if (!hostname?.includes(':')) {\n const port = getFirstHeaderValue(headers['x-forwarded-port']);\n if (port) {\n hostnameWithPort += `:${port}`;\n }\n }\n\n return new URL(`${protocol}://${hostnameWithPort}${originalUrl ?? url}`);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { AngularAppEngine } from '@angular/ssr';\nimport type { IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { AngularAppEngineOptions } from '../../src/app-engine';\nimport { getAllowedHostsFromEnv } from './environment-options';\nimport { attachNodeGlobalErrorHandlers } from './errors';\nimport { createWebRequestFromNodeRequest } from './request';\n\n/**\n * Options for the Angular Node.js server application engine.\n */\nexport interface AngularNodeAppEngineOptions extends AngularAppEngineOptions {}\n\n/**\n * Angular server application engine.\n * Manages Angular server applications (including localized ones), handles rendering requests,\n * and optionally transforms index HTML before rendering.\n *\n * @remarks This class should be instantiated once and used as a singleton across the server-side\n * application to ensure consistent handling of rendering requests and resource management.\n */\nexport class AngularNodeAppEngine {\n private readonly angularAppEngine: AngularAppEngine;\n\n /**\n * Creates a new instance of the Angular Node.js server application engine.\n * @param options Options for the Angular Node.js server application engine.\n */\n constructor(options?: AngularNodeAppEngineOptions) {\n this.angularAppEngine = new AngularAppEngine({\n ...options,\n allowedHosts: [...getAllowedHostsFromEnv(), ...(options?.allowedHosts ?? [])],\n });\n\n attachNodeGlobalErrorHandlers();\n }\n\n /**\n * Handles an incoming HTTP request by serving prerendered content, performing server-side rendering,\n * or delivering a static file for client-side rendered routes based on the `RenderMode` setting.\n *\n * This method adapts Node.js's `IncomingMessage`, `Http2ServerRequest` or `Request`\n * to a format compatible with the `AngularAppEngine` and delegates the handling logic to it.\n *\n * @param request - The incoming HTTP request (`IncomingMessage`, `Http2ServerRequest` or `Request`).\n * @param requestContext - Optional context for rendering, such as metadata associated with the request.\n * @returns A promise that resolves to the resulting HTTP response object, or `null` if no matching Angular route is found.\n *\n * @remarks A request to `https://www.example.com/page/index.html` will serve or render the Angular route\n * corresponding to `https://www.example.com/page`.\n *\n * @remarks\n * To prevent potential Server-Side Request Forgery (SSRF), this function verifies the hostname\n * of the `request.url` against a list of authorized hosts.\n * If the hostname is not recognized and `allowedHosts` is not empty, a Client-Side Rendered (CSR) version of the\n * page is returned otherwise a 400 Bad Request is returned.\n *\n * Resolution:\n * Authorize your hostname by configuring `allowedHosts` in `angular.json` in:\n * `projects.[project-name].architect.build.options.security.allowedHosts`.\n * Alternatively, you can define the allowed hostname via the environment variable `process.env['NG_ALLOWED_HOSTS']`\n * or pass it directly through the configuration options of `AngularNodeAppEngine`.\n *\n * For more information see: https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf\n */\n async handle(\n request: IncomingMessage | Http2ServerRequest | Request,\n requestContext?: unknown,\n ): Promise<Response | null> {\n const webRequest =\n request instanceof Request ? request : createWebRequestFromNodeRequest(request);\n\n return this.angularAppEngine.handle(webRequest, requestContext);\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http';\n\n/**\n * Represents a middleware function for handling HTTP requests in a Node.js environment.\n *\n * @param req - The incoming HTTP request object.\n * @param res - The outgoing HTTP response object.\n * @param next - A callback function that signals the completion of the middleware or forwards the error if provided.\n *\n * @returns A Promise that resolves to void or simply void. The handler can be asynchronous.\n */\nexport type NodeRequestHandlerFunction = (\n req: IncomingMessage,\n res: ServerResponse,\n next: (err?: unknown) => void,\n) => Promise<void> | void;\n\n/**\n * Attaches metadata to the handler function to mark it as a special handler for Node.js environments.\n *\n * @typeParam T - The type of the handler function.\n * @param handler - The handler function to be defined and annotated.\n * @returns The same handler function passed as an argument, with metadata attached.\n *\n * @example\n * Usage in an Express application:\n * ```ts\n * const app = express();\n * export default createNodeRequestHandler(app);\n * ```\n *\n * @example\n * Usage in a Hono application:\n * ```ts\n * const app = new Hono();\n * export default createNodeRequestHandler(async (req, res, next) => {\n * try {\n * const webRes = await app.fetch(createWebRequestFromNodeRequest(req));\n * if (webRes) {\n * await writeResponseToNodeResponse(webRes, res);\n * } else {\n * next();\n * }\n * } catch (error) {\n * next(error);\n * }\n * });\n * ```\n *\n * @example\n * Usage in a Fastify application:\n * ```ts\n * const app = Fastify();\n * export default createNodeRequestHandler(async (req, res) => {\n * await app.ready();\n * app.server.emit('request', req, res);\n * });\n * ```\n */\nexport function createNodeRequestHandler<T extends NodeRequestHandlerFunction>(handler: T): T {\n (handler as T & { __ng_node_request_handler__?: boolean })['__ng_node_request_handler__'] = true;\n\n return handler;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { ServerResponse } from 'node:http';\nimport type { Http2ServerResponse } from 'node:http2';\n\n/**\n * Streams a web-standard `Response` into a Node.js `ServerResponse`\n * or `Http2ServerResponse`.\n *\n * This function adapts the web `Response` object to write its content\n * to a Node.js response object, handling both HTTP/1.1 and HTTP/2.\n *\n * @param source - The web-standard `Response` object to stream from.\n * @param destination - The Node.js response object (`ServerResponse` or `Http2ServerResponse`) to stream into.\n * @returns A promise that resolves once the streaming operation is complete.\n */\nexport async function writeResponseToNodeResponse(\n source: Response,\n destination: ServerResponse | Http2ServerResponse,\n): Promise<void> {\n const { status, headers, body } = source;\n destination.statusCode = status;\n\n let cookieHeaderSet = false;\n for (const [name, value] of headers.entries()) {\n if (name === 'set-cookie') {\n if (cookieHeaderSet) {\n continue;\n }\n\n // Sets the 'set-cookie' header only once to ensure it is correctly applied.\n // Concatenating 'set-cookie' values can lead to incorrect behavior, so we use a single value from `headers.getSetCookie()`.\n destination.setHeader(name, headers.getSetCookie());\n cookieHeaderSet = true;\n } else {\n destination.setHeader(name, value);\n }\n }\n\n if ('flushHeaders' in destination) {\n destination.flushHeaders();\n }\n\n if (!body) {\n destination.end();\n\n return;\n }\n\n try {\n const reader = body.getReader();\n\n destination.on('close', () => {\n reader.cancel().catch((error) => {\n // eslint-disable-next-line no-console\n console.error(\n `An error occurred while writing the response body for: ${destination.req.url}.`,\n error,\n );\n });\n });\n\n // eslint-disable-next-line no-constant-condition\n while (true) {\n const { done, value } = await reader.read();\n if (done) {\n destination.end();\n break;\n }\n\n const canContinue = (destination as ServerResponse).write(value);\n if (canContinue === false) {\n // Explicitly check for `false`, as AWS may return `undefined` even though this is not valid.\n // See: https://github.com/CodeGenieApp/serverless-express/issues/683\n await new Promise<void>((resolve) => destination.once('drain', resolve));\n }\n }\n } catch {\n destination.end('Internal server error.');\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { argv } from 'node:process';\nimport { fileURLToPath } from 'node:url';\n\n/**\n * Determines whether the provided URL represents the main entry point module.\n *\n * This function checks if the provided URL corresponds to the main ESM module being executed directly.\n * It's useful for conditionally executing code that should only run when a module is the entry point,\n * such as starting a server or initializing an application.\n *\n * It performs two key checks:\n * 1. Verifies if the URL starts with 'file:', ensuring it is a local file.\n * 2. Compares the URL's resolved file path with the first command-line argument (`process.argv[1]`),\n * which points to the file being executed.\n *\n * @param url The URL of the module to check. This should typically be `import.meta.url`.\n * @returns `true` if the provided URL represents the main entry point, otherwise `false`.\n */\nexport function isMainModule(url: string): boolean {\n return url.startsWith('file:') && argv[1] === fileURLToPath(url);\n}\n"],"names":["getAllowedHostsFromEnv","allowedHosts","envNgAllowedHosts","process","env","hosts","split","host","trimmed","trim","length","push","attachNodeGlobalErrorHandlers","Zone","gThis","globalThis","ngAttachNodeGlobalErrorHandlersCalled","on","error","console","CommonEngineInlineCriticalCssProcessor","resourceCache","Map","html","outputPath","beasties","InlineCriticalCssProcessor","path","resourceContent","get","undefined","readFile","set","PERFORMANCE_MARK_PREFIX","printPerformanceLogs","maxWordLength","benchmarks","name","duration","performance","getEntriesByType","startsWith","step","slice","toFixed","clearMeasures","log","value","spaces","repeat","runMethodAndMeasurePerf","label","asyncMethod","labelName","startLabel","endLabel","mark","measure","clearMarks","noopRunMethodAndMeasurePerf","SSG_MARKER_REGEXP","CommonEngine","options","templateCache","inlineCriticalCssProcessor","pageIsSSG","constructor","Set","render","opts","url","URL","canParse","urlObj","validateUrl","isAllowedHostConfigured","size","message","document","documentFilePath","getDocument","enablePerformanceProfiler","runMethod","retrieveSSGPage","renderApplication","inlineCriticalCss","content","publicPath","dirname","pathname","pagePath","join","fs","promises","normalize","resolve","exists","isSSG","test","moduleOrFactory","bootstrap","Error","extraProviders","provide","ɵSERVER_CONTEXT","useValue","providers","commonRenderingOptions","isBootstrapFn","platformProviders","renderModule","filePath","doc","access","constants","F_OK","HTTP2_PSEUDO_HEADERS","createWebRequestFromNodeRequest","nodeRequest","headers","method","withBody","referrer","referer","Request","createRequestUrl","createRequestHeaders","body","duplex","nodeHeaders","Headers","Object","entries","has","append","Array","isArray","item","socket","originalUrl","protocol","getFirstHeaderValue","encrypted","hostname","hostnameWithPort","includes","port","AngularNodeAppEngine","angularAppEngine","AngularAppEngine","handle","request","requestContext","webRequest","createNodeRequestHandler","handler","writeResponseToNodeResponse","source","destination","status","statusCode","cookieHeaderSet","setHeader","getSetCookie","flushHeaders","end","reader","getReader","cancel","catch","req","done","read","canContinue","write","Promise","once","isMainModule","argv","fileURLToPath"],"mappings":";;;;;;;;;SAYgBA,sBAAsBA,GAAA;EACpC,MAAMC,YAAY,GAAa,EAAE;AACjC,EAAA,MAAMC,iBAAiB,GAAGC,OAAO,CAACC,GAAG,CAAC,kBAAkB,CAAC;EACzD,IAAI,CAACF,iBAAiB,EAAE;AACtB,IAAA,OAAOD,YAAY;AACrB;AAEA,EAAA,MAAMI,KAAK,GAAGH,iBAAiB,CAACI,KAAK,CAAC,GAAG,CAAC;AAC1C,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;AACxB,IAAA,MAAMG,OAAO,GAAGD,IAAI,CAACE,IAAI,EAAE;AAC3B,IAAA,IAAID,OAAO,CAACE,MAAM,GAAG,CAAC,EAAE;AACtBT,MAAAA,YAAY,CAACU,IAAI,CAACH,OAAO,CAAC;AAC5B;AACF;AAEA,EAAA,OAAOP,YAAY;AACrB;;SCRgBW,6BAA6BA,GAAA;AAC3C,EAAA,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;AAC/B,IAAA;AACF;EAIA,MAAMC,KAAK,GAA4EC,UAAU;EACjG,IAAID,KAAK,CAACE,qCAAqC,EAAE;AAC/C,IAAA;AACF;EAEAF,KAAK,CAACE,qCAAqC,GAAG,IAAI;AAElDb,EAAAA,OAAO,CAEJc,EAAE,CAAC,oBAAoB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,oBAAoB,EAAEA,KAAK,CAAC,CAAA,CAE9ED,EAAE,CAAC,mBAAmB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC,CAAC;AAClF;;MC5BaE,sCAAsC,CAAA;AAChCC,EAAAA,aAAa,GAAG,IAAIC,GAAG,EAAkB;AAE1D,EAAA,MAAMnB,OAAOA,CAACoB,IAAY,EAAEC,UAA8B,EAAA;AACxD,IAAA,MAAMC,QAAQ,GAAG,IAAIC,2BAA0B,CAAC,MAAOC,IAAI,IAAI;MAC7D,IAAIC,eAAe,GAAG,IAAI,CAACP,aAAa,CAACQ,GAAG,CAACF,IAAI,CAAC;MAClD,IAAIC,eAAe,KAAKE,SAAS,EAAE;AACjCF,QAAAA,eAAe,GAAG,MAAMG,QAAQ,CAACJ,IAAI,EAAE,OAAO,CAAC;QAC/C,IAAI,CAACN,aAAa,CAACW,GAAG,CAACL,IAAI,EAAEC,eAAe,CAAC;AAC/C;AAEA,MAAA,OAAOA,eAAe;KACvB,EAAEJ,UAAU,CAAC;AAEd,IAAA,OAAOC,QAAQ,CAACtB,OAAO,CAACoB,IAAI,CAAC;AAC/B;AACD;;ACnBD,MAAMU,uBAAuB,GAAG,KAAK;SAErBC,oBAAoBA,GAAA;EAClC,IAAIC,aAAa,GAAG,CAAC;EACrB,MAAMC,UAAU,GAAoC,EAAE;AAEtD,EAAA,KAAK,MAAM;IAAEC,IAAI;AAAEC,IAAAA;AAAU,GAAA,IAAIC,WAAW,CAACC,gBAAgB,CAAC,SAAS,CAAC,EAAE;AACxE,IAAA,IAAI,CAACH,IAAI,CAACI,UAAU,CAACR,uBAAuB,CAAC,EAAE;AAC7C,MAAA;AACF;AAGA,IAAA,MAAMS,IAAI,GAAGL,IAAI,CAACM,KAAK,CAACV,uBAAuB,CAACvB,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG;AACjE,IAAA,IAAIgC,IAAI,CAAChC,MAAM,GAAGyB,aAAa,EAAE;MAC/BA,aAAa,GAAGO,IAAI,CAAChC,MAAM;AAC7B;AAEA0B,IAAAA,UAAU,CAACzB,IAAI,CAAC,CAAC+B,IAAI,EAAE,CAAA,EAAGJ,QAAQ,CAACM,OAAO,CAAC,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC;AACnDL,IAAAA,WAAW,CAACM,aAAa,CAACR,IAAI,CAAC;AACjC;AAGAlB,EAAAA,OAAO,CAAC2B,GAAG,CAAC,2CAA2C,CAAC;EACxD,KAAK,MAAM,CAACJ,IAAI,EAAEK,KAAK,CAAC,IAAIX,UAAU,EAAE;IACtC,MAAMY,MAAM,GAAGb,aAAa,GAAGO,IAAI,CAAChC,MAAM,GAAG,CAAC;AAC9CS,IAAAA,OAAO,CAAC2B,GAAG,CAACJ,IAAI,GAAG,GAAG,CAACO,MAAM,CAACD,MAAM,CAAC,GAAGD,KAAK,CAAC;AAChD;AACA5B,EAAAA,OAAO,CAAC2B,GAAG,CAAC,2CAA2C,CAAC;AAE1D;AAEO,eAAeI,uBAAuBA,CAC3CC,KAAa,EACbC,WAA6B,EAAA;AAE7B,EAAA,MAAMC,SAAS,GAAG,CAAA,EAAGpB,uBAAuB,CAAA,CAAA,EAAIkB,KAAK,CAAE,CAAA;AACvD,EAAA,MAAMG,UAAU,GAAG,CAASD,MAAAA,EAAAA,SAAS,CAAE,CAAA;AACvC,EAAA,MAAME,QAAQ,GAAG,CAAOF,IAAAA,EAAAA,SAAS,CAAE,CAAA;EAEnC,IAAI;AACFd,IAAAA,WAAW,CAACiB,IAAI,CAACF,UAAU,CAAC;IAE5B,OAAO,MAAMF,WAAW,EAAE;AAC5B,GAAA,SAAU;AACRb,IAAAA,WAAW,CAACiB,IAAI,CAACD,QAAQ,CAAC;IAC1BhB,WAAW,CAACkB,OAAO,CAACJ,SAAS,EAAEC,UAAU,EAAEC,QAAQ,CAAC;AACpDhB,IAAAA,WAAW,CAACmB,UAAU,CAACJ,UAAU,CAAC;AAClCf,IAAAA,WAAW,CAACmB,UAAU,CAACH,QAAQ,CAAC;AAClC;AACF;AAEgB,SAAAI,2BAA2BA,CACzCR,KAAa,EACbC,WAA6B,EAAA;EAE7B,OAAOA,WAAW,EAAE;AACtB;;ACxCA,MAAMQ,iBAAiB,GAAG,2CAA2C;MA2CxDC,YAAY,CAAA;EAMHC,OAAA;AALHC,EAAAA,aAAa,GAAG,IAAIzC,GAAG,EAAkB;AACzC0C,EAAAA,0BAA0B,GAAG,IAAI5C,sCAAsC,EAAE;AACzE6C,EAAAA,SAAS,GAAG,IAAI3C,GAAG,EAAmB;EACtCrB,YAAY;EAE7BiE,WAAAA,CAAoBJ,OAA6B,EAAA;IAA7B,IAAO,CAAAA,OAAA,GAAPA,OAAO;IACzB,IAAI,CAAC7D,YAAY,GAAG,IAAIkE,GAAG,CAAC,CAC1B,GAAGnE,sBAAsB,EAAE,EAC3B,IAAI,IAAI,CAAC8D,OAAO,EAAE7D,YAAY,IAAI,EAAE,CAAC,CACtC,CAAC;AAEFW,IAAAA,6BAA6B,EAAE;AACjC;EAMA,MAAMwD,MAAMA,CAACC,IAA+B,EAAA;IAC1C,MAAM;AAAEC,MAAAA;AAAK,KAAA,GAAGD,IAAI;IAEpB,IAAIC,GAAG,IAAIC,KAAG,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE;AAC5B,MAAA,MAAMG,MAAM,GAAG,IAAIF,KAAG,CAACD,GAAG,CAAC;MAC3B,IAAI;AACFI,QAAAA,WAAW,CAACD,MAAM,EAAE,IAAI,CAACxE,YAAY,CAAC;OACxC,CAAE,OAAOiB,KAAK,EAAE;QACd,MAAMyD,uBAAuB,GAAG,IAAI,CAAC1E,YAAY,CAAC2E,IAAI,GAAG,CAAC;AAE1DzD,QAAAA,OAAO,CAACD,KAAK,CACX,CAAWA,OAAAA,EAAAA,KAAe,CAAC2D,OAAO,CAAA,CAAE,GAClC,wGAAwG,EAC1GF,uBAAuB,GACnB,EAAE,GACF,wGAAwG,CAC7G;QAED,IAAI,CAACA,uBAAuB,EAAE;AAG5B,UAAA,IAAIG,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,UAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;AACtCD,YAAAA,QAAQ,GAAGT,IAAI,CAACS,QAAQ,KAAK,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC,CAAC;AAC7E;AAEA,UAAA,IAAID,QAAQ,EAAE;AACZ,YAAA,OAAOA,QAAQ;AACjB;AACF;AAEA,QAAA,MAAM5D,KAAK;AACb;AACF;AAEA,IAAA,MAAM+D,yBAAyB,GAAG,IAAI,CAACnB,OAAO,EAAEmB,yBAAyB;AAEzE,IAAA,MAAMC,SAAS,GAAGD,yBAAyB,GACvC/B,uBAAuB,GACvBS,2BAA2B;AAE/B,IAAA,IAAIpC,IAAI,GAAG,MAAM2D,SAAS,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAACC,eAAe,CAACd,IAAI,CAAC,CAAC;IAEjF,IAAI9C,IAAI,KAAKO,SAAS,EAAE;AACtBP,MAAAA,IAAI,GAAG,MAAM2D,SAAS,CAAC,aAAa,EAAE,MAAM,IAAI,CAACE,iBAAiB,CAACf,IAAI,CAAC,CAAC;AAEzE,MAAA,IAAIA,IAAI,CAACgB,iBAAiB,KAAK,KAAK,EAAE;AACpC,QAAA,MAAMC,OAAO,GAAG,MAAMJ,SAAS,CAAC,qBAAqB,EAAE,MAErD,IAAI,CAACG,iBAAiB,CAAC9D,IAAK,EAAE8C,IAAI,CAAC,CACpC;AAED9C,QAAAA,IAAI,GAAG+D,OAAO;AAChB;AACF;AAEA,IAAA,IAAIL,yBAAyB,EAAE;AAC7B/C,MAAAA,oBAAoB,EAAE;AACxB;AAEA,IAAA,OAAOX,IAAI;AACb;AAEQ8D,EAAAA,iBAAiBA,CAAC9D,IAAY,EAAE8C,IAA+B,EAAA;AACrE,IAAA,MAAM7C,UAAU,GACd6C,IAAI,CAACkB,UAAU,KAAKlB,IAAI,CAACU,gBAAgB,GAAGS,OAAO,CAACnB,IAAI,CAACU,gBAAgB,CAAC,GAAG,EAAE,CAAC;IAElF,OAAO,IAAI,CAACf,0BAA0B,CAAC7D,OAAO,CAACoB,IAAI,EAAEC,UAAU,CAAC;AAClE;EAEQ,MAAM2D,eAAeA,CAACd,IAA+B,EAAA;IAC3D,MAAM;MAAEkB,UAAU;MAAER,gBAAgB;AAAET,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAClD,IAAI,CAACkB,UAAU,IAAI,CAACR,gBAAgB,IAAIT,GAAG,KAAKxC,SAAS,EAAE;AACzD,MAAA,OAAOA,SAAS;AAClB;IAEA,MAAM;AAAE2D,MAAAA;AAAQ,KAAE,GAAG,IAAIlB,KAAG,CAACD,GAAG,EAAE,YAAY,CAAC;IAG/C,MAAMoB,QAAQ,GAAGC,IAAI,CAACJ,UAAU,EAAEE,QAAQ,EAAE,YAAY,CAAC;IAEzD,IAAI,IAAI,CAACxB,SAAS,CAACpC,GAAG,CAAC6D,QAAQ,CAAC,EAAE;MAEhC,OAAOE,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAChD;IAEA,IAAI,CAACA,QAAQ,CAACjD,UAAU,CAACqD,SAAS,CAACP,UAAU,CAAC,CAAC,EAAE;AAE/C,MAAA,OAAOzD,SAAS;AAClB;AAEA,IAAA,IAAI4D,QAAQ,KAAKK,OAAO,CAAChB,gBAAgB,CAAC,IAAI,EAAE,MAAMiB,MAAM,CAACN,QAAQ,CAAC,CAAC,EAAE;MAEvE,IAAI,CAACzB,SAAS,CAACjC,GAAG,CAAC0D,QAAQ,EAAE,KAAK,CAAC;AAEnC,MAAA,OAAO5D,SAAS;AAClB;AAGA,IAAA,MAAMwD,OAAO,GAAG,MAAMM,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAAC2D,QAAQ,EAAE,OAAO,CAAC;AAC7D,IAAA,MAAMO,KAAK,GAAGrC,iBAAiB,CAACsC,IAAI,CAACZ,OAAO,CAAC;IAC7C,IAAI,CAACrB,SAAS,CAACjC,GAAG,CAAC0D,QAAQ,EAAEO,KAAK,CAAC;AAEnC,IAAA,OAAOA,KAAK,GAAGX,OAAO,GAAGxD,SAAS;AACpC;EAEQ,MAAMsD,iBAAiBA,CAACf,IAA+B,EAAA;IAC7D,MAAM8B,eAAe,GAAG,IAAI,CAACrC,OAAO,EAAEsC,SAAS,IAAI/B,IAAI,CAAC+B,SAAS;IACjE,IAAI,CAACD,eAAe,EAAE;AACpB,MAAA,MAAM,IAAIE,KAAK,CAAC,gDAAgD,CAAC;AACnE;IAEA,MAAMC,cAAc,GAAqB,CACvC;AAAEC,MAAAA,OAAO,EAAEC,eAAe;AAAEC,MAAAA,QAAQ,EAAE;AAAO,KAAA,EAC7C,IAAIpC,IAAI,CAACqC,SAAS,IAAI,EAAE,CAAC,EACzB,IAAI,IAAI,CAAC5C,OAAO,EAAE4C,SAAS,IAAI,EAAE,CAAC,CACnC;AAED,IAAA,IAAI5B,QAAQ,GAAGT,IAAI,CAACS,QAAQ;AAC5B,IAAA,IAAI,CAACA,QAAQ,IAAIT,IAAI,CAACU,gBAAgB,EAAE;MACtCD,QAAQ,GAAG,MAAM,IAAI,CAACE,WAAW,CAACX,IAAI,CAACU,gBAAgB,CAAC;AAC1D;AAEA,IAAA,MAAM4B,sBAAsB,GAAG;MAC7BrC,GAAG,EAAED,IAAI,CAACC,GAAG;AACbQ,MAAAA;KACD;IAED,OAAO8B,aAAa,CAACT,eAAe,CAAA,GAChCf,iBAAiB,CAACe,eAAe,EAAE;AACjCU,MAAAA,iBAAiB,EAAEP,cAAc;MACjC,GAAGK;KACJ,CAAA,GACDG,YAAY,CAACX,eAAe,EAAE;MAAEG,cAAc;MAAE,GAAGK;AAAwB,KAAA,CAAC;AAClF;EAGQ,MAAM3B,WAAWA,CAAC+B,QAAgB,EAAA;IACxC,IAAIC,GAAG,GAAG,IAAI,CAACjD,aAAa,CAAClC,GAAG,CAACkF,QAAQ,CAAC;IAE1C,IAAI,CAACC,GAAG,EAAE;MACRA,GAAG,GAAG,MAAMpB,EAAE,CAACC,QAAQ,CAAC9D,QAAQ,CAACgF,QAAQ,EAAE,OAAO,CAAC;MACnD,IAAI,CAAChD,aAAa,CAAC/B,GAAG,CAAC+E,QAAQ,EAAEC,GAAG,CAAC;AACvC;AAEA,IAAA,OAAOA,GAAG;AACZ;AACD;AAED,eAAehB,MAAMA,CAACrE,IAAiB,EAAA;EACrC,IAAI;AACF,IAAA,MAAMiE,EAAE,CAACC,QAAQ,CAACoB,MAAM,CAACtF,IAAI,EAAEiE,EAAE,CAACsB,SAAS,CAACC,IAAI,CAAC;AAEjD,IAAA,OAAO,IAAI;AACb,GAAA,CAAE,MAAM;AACN,IAAA,OAAO,KAAK;AACd;AACF;AAEA,SAASP,aAAaA,CACpB7D,KAAc,EAAA;EAGd,OAAO,OAAOA,KAAK,KAAK,UAAU,IAAI,EAAE,MAAM,IAAIA,KAAK,CAAC;AAC1D;;ACvOA,MAAMqE,oBAAoB,GAAG,IAAIjD,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAYxF,SAAUkD,+BAA+BA,CAC7CC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,OAAO;AAAEC,IAAAA,MAAM,GAAG;AAAK,GAAE,GAAGF,WAAW;EAC/C,MAAMG,QAAQ,GAAGD,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM;AACtD,EAAA,MAAME,QAAQ,GAAGH,OAAO,CAACI,OAAO,IAAIpD,GAAG,CAACC,QAAQ,CAAC+C,OAAO,CAACI,OAAO,CAAC,GAAGJ,OAAO,CAACI,OAAO,GAAG7F,SAAS;AAE/F,EAAA,OAAO,IAAI8F,OAAO,CAACC,gBAAgB,CAACP,WAAW,CAAC,EAAE;IAChDE,MAAM;AACND,IAAAA,OAAO,EAAEO,oBAAoB,CAACP,OAAO,CAAC;AACtCQ,IAAAA,IAAI,EAAEN,QAAQ,GAAGH,WAAW,GAAGxF,SAAS;AACxCkG,IAAAA,MAAM,EAAEP,QAAQ,GAAG,MAAM,GAAG3F,SAAS;AACrC4F,IAAAA;AACD,GAAA,CAAC;AACJ;AAQA,SAASI,oBAAoBA,CAACG,WAAgC,EAAA;AAC5D,EAAA,MAAMV,OAAO,GAAG,IAAIW,OAAO,EAAE;AAE7B,EAAA,KAAK,MAAM,CAAC7F,IAAI,EAAEU,KAAK,CAAC,IAAIoF,MAAM,CAACC,OAAO,CAACH,WAAW,CAAC,EAAE;AACvD,IAAA,IAAIb,oBAAoB,CAACiB,GAAG,CAAChG,IAAI,CAAC,EAAE;AAClC,MAAA;AACF;AAEA,IAAA,IAAI,OAAOU,KAAK,KAAK,QAAQ,EAAE;AAC7BwE,MAAAA,OAAO,CAACe,MAAM,CAACjG,IAAI,EAAEU,KAAK,CAAC;KAC7B,MAAO,IAAIwF,KAAK,CAACC,OAAO,CAACzF,KAAK,CAAC,EAAE;AAC/B,MAAA,KAAK,MAAM0F,IAAI,IAAI1F,KAAK,EAAE;AACxBwE,QAAAA,OAAO,CAACe,MAAM,CAACjG,IAAI,EAAEoG,IAAI,CAAC;AAC5B;AACF;AACF;AAEA,EAAA,OAAOlB,OAAO;AAChB;AAQM,SAAUM,gBAAgBA,CAACP,WAAiD,EAAA;EAChF,MAAM;IACJC,OAAO;IACPmB,MAAM;AACNpE,IAAAA,GAAG,GAAG,EAAE;AACRqE,IAAAA;AACD,GAAA,GAAGrB,WAAyD;EAC7D,MAAMsB,QAAQ,GACZC,mBAAmB,CAACtB,OAAO,CAAC,mBAAmB,CAAC,CAAC,KAChD,WAAW,IAAImB,MAAM,IAAIA,MAAM,CAACI,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAChE,EAAA,MAAMC,QAAQ,GACZF,mBAAmB,CAACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC,IAAIA,OAAO,CAAChH,IAAI,IAAIgH,OAAO,CAAC,YAAY,CAAC;AAE3F,EAAA,IAAIgB,KAAK,CAACC,OAAO,CAACO,QAAQ,CAAC,EAAE;AAC3B,IAAA,MAAM,IAAI1C,KAAK,CAAC,gCAAgC,CAAC;AACnD;EAEA,IAAI2C,gBAAgB,GAAGD,QAAQ;AAC/B,EAAA,IAAI,CAACA,QAAQ,EAAEE,QAAQ,CAAC,GAAG,CAAC,EAAE;IAC5B,MAAMC,IAAI,GAAGL,mBAAmB,CAACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7D,IAAA,IAAI2B,IAAI,EAAE;MACRF,gBAAgB,IAAI,CAAIE,CAAAA,EAAAA,IAAI,CAAE,CAAA;AAChC;AACF;AAEA,EAAA,OAAO,IAAI3E,GAAG,CAAC,CAAA,EAAGqE,QAAQ,CAAA,GAAA,EAAMI,gBAAgB,CAAA,EAAGL,WAAW,IAAIrE,GAAG,CAAA,CAAE,CAAC;AAC1E;;MC5Ea6E,oBAAoB,CAAA;EACdC,gBAAgB;EAMjClF,WAAAA,CAAYJ,OAAqC,EAAA;AAC/C,IAAA,IAAI,CAACsF,gBAAgB,GAAG,IAAIC,gBAAgB,CAAC;AAC3C,MAAA,GAAGvF,OAAO;AACV7D,MAAAA,YAAY,EAAE,CAAC,GAAGD,sBAAsB,EAAE,EAAE,IAAI8D,OAAO,EAAE7D,YAAY,IAAI,EAAE,CAAC;AAC7E,KAAA,CAAC;AAEFW,IAAAA,6BAA6B,EAAE;AACjC;AA8BA,EAAA,MAAM0I,MAAMA,CACVC,OAAuD,EACvDC,cAAwB,EAAA;IAExB,MAAMC,UAAU,GACdF,OAAO,YAAY3B,OAAO,GAAG2B,OAAO,GAAGlC,+BAA+B,CAACkC,OAAO,CAAC;IAEjF,OAAO,IAAI,CAACH,gBAAgB,CAACE,MAAM,CAACG,UAAU,EAAED,cAAc,CAAC;AACjE;AACD;;ACfK,SAAUE,wBAAwBA,CAAuCC,OAAU,EAAA;AACtFA,EAAAA,OAAyD,CAAC,6BAA6B,CAAC,GAAG,IAAI;AAEhG,EAAA,OAAOA,OAAO;AAChB;;ACjDO,eAAeC,2BAA2BA,CAC/CC,MAAgB,EAChBC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,MAAM;IAAExC,OAAO;AAAEQ,IAAAA;AAAI,GAAE,GAAG8B,MAAM;EACxCC,WAAW,CAACE,UAAU,GAAGD,MAAM;EAE/B,IAAIE,eAAe,GAAG,KAAK;AAC3B,EAAA,KAAK,MAAM,CAAC5H,IAAI,EAAEU,KAAK,CAAC,IAAIwE,OAAO,CAACa,OAAO,EAAE,EAAE;IAC7C,IAAI/F,IAAI,KAAK,YAAY,EAAE;AACzB,MAAA,IAAI4H,eAAe,EAAE;AACnB,QAAA;AACF;MAIAH,WAAW,CAACI,SAAS,CAAC7H,IAAI,EAAEkF,OAAO,CAAC4C,YAAY,EAAE,CAAC;AACnDF,MAAAA,eAAe,GAAG,IAAI;AACxB,KAAA,MAAO;AACLH,MAAAA,WAAW,CAACI,SAAS,CAAC7H,IAAI,EAAEU,KAAK,CAAC;AACpC;AACF;EAEA,IAAI,cAAc,IAAI+G,WAAW,EAAE;IACjCA,WAAW,CAACM,YAAY,EAAE;AAC5B;EAEA,IAAI,CAACrC,IAAI,EAAE;IACT+B,WAAW,CAACO,GAAG,EAAE;AAEjB,IAAA;AACF;EAEA,IAAI;AACF,IAAA,MAAMC,MAAM,GAAGvC,IAAI,CAACwC,SAAS,EAAE;AAE/BT,IAAAA,WAAW,CAAC7I,EAAE,CAAC,OAAO,EAAE,MAAK;MAC3BqJ,MAAM,CAACE,MAAM,EAAE,CAACC,KAAK,CAAEvJ,KAAK,IAAI;AAE9BC,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,uDAAA,EAA0D4I,WAAW,CAACY,GAAG,CAACpG,GAAG,CAAA,CAAA,CAAG,EAChFpD,KAAK,CACN;AACH,OAAC,CAAC;AACJ,KAAC,CAAC;AAGF,IAAA,OAAO,IAAI,EAAE;MACX,MAAM;QAAEyJ,IAAI;AAAE5H,QAAAA;AAAK,OAAE,GAAG,MAAMuH,MAAM,CAACM,IAAI,EAAE;AAC3C,MAAA,IAAID,IAAI,EAAE;QACRb,WAAW,CAACO,GAAG,EAAE;AACjB,QAAA;AACF;AAEA,MAAA,MAAMQ,WAAW,GAAIf,WAA8B,CAACgB,KAAK,CAAC/H,KAAK,CAAC;MAChE,IAAI8H,WAAW,KAAK,KAAK,EAAE;AAGzB,QAAA,MAAM,IAAIE,OAAO,CAAQhF,OAAO,IAAK+D,WAAW,CAACkB,IAAI,CAAC,OAAO,EAAEjF,OAAO,CAAC,CAAC;AAC1E;AACF;AACF,GAAA,CAAE,MAAM;AACN+D,IAAAA,WAAW,CAACO,GAAG,CAAC,wBAAwB,CAAC;AAC3C;AACF;;AC5DM,SAAUY,YAAYA,CAAC3G,GAAW,EAAA;AACtC,EAAA,OAAOA,GAAG,CAAC7B,UAAU,CAAC,OAAO,CAAC,IAAIyI,IAAI,CAAC,CAAC,CAAC,KAAKC,aAAa,CAAC7G,GAAG,CAAC;AAClE;;;;"} | ||
| {"version":3,"file":"node.mjs","sources":["../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/environment-options.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/errors.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/inline-css-processor.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/peformance-profiler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/common-engine/common-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/request.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/app-engine.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/handler.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/response.ts","../../../../../../k8-fastbuild-ST-fdfa778d11ba/bin/packages/angular/ssr/node/src/module.ts"],"sourcesContent":["/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Retrieves the list of allowed hosts from the environment variable `NG_ALLOWED_HOSTS`.\n * @returns An array of allowed hosts.\n */\nexport function getAllowedHostsFromEnv(): ReadonlyArray<string> {\n const allowedHosts: string[] = [];\n const envNgAllowedHosts = process.env['NG_ALLOWED_HOSTS'];\n if (!envNgAllowedHosts) {\n return allowedHosts;\n }\n\n const hosts = envNgAllowedHosts.split(',');\n for (const host of hosts) {\n const trimmed = host.trim();\n if (trimmed.length > 0) {\n allowedHosts.push(trimmed);\n }\n }\n\n return allowedHosts;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\n/**\n * Attaches listeners to the Node.js process to capture and handle unhandled rejections and uncaught exceptions.\n * Captured errors are logged to the console. This function logs errors to the console, preventing unhandled errors\n * from crashing the server. It is particularly useful for Zoneless apps, ensuring error handling without relying on Zone.js.\n *\n * @remarks\n * This function is a no-op if zone.js is available.\n * For Zone-based apps, similar functionality is provided by Zone.js itself. See the Zone.js implementation here:\n * https://github.com/angular/angular/blob/4a8d0b79001ec09bcd6f2d6b15117aa6aac1932c/packages/zone.js/lib/node/node.ts#L94%7C\n *\n * @internal\n */\nexport function attachNodeGlobalErrorHandlers(): void {\n if (typeof Zone !== 'undefined') {\n return;\n }\n\n // Ensure that the listeners are registered only once.\n // Otherwise, multiple instances may be registered during edit/refresh.\n const gThis: typeof globalThis & { ngAttachNodeGlobalErrorHandlersCalled?: boolean } = globalThis;\n if (gThis.ngAttachNodeGlobalErrorHandlersCalled) {\n return;\n }\n\n gThis.ngAttachNodeGlobalErrorHandlersCalled = true;\n\n process\n // eslint-disable-next-line no-console\n .on('unhandledRejection', (error) => console.error('unhandledRejection', error))\n // eslint-disable-next-line no-console\n .on('uncaughtException', (error) => console.error('uncaughtException', error));\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ɵInlineCriticalCssProcessor as InlineCriticalCssProcessor } from '@angular/ssr';\nimport { readFile } from 'node:fs/promises';\n\nexport class CommonEngineInlineCriticalCssProcessor {\n private readonly resourceCache = new Map<string, string>();\n\n async process(html: string, outputPath: string | undefined): Promise<string> {\n const beasties = new InlineCriticalCssProcessor(async (path) => {\n let resourceContent = this.resourceCache.get(path);\n if (resourceContent === undefined) {\n resourceContent = await readFile(path, 'utf-8');\n this.resourceCache.set(path, resourceContent);\n }\n\n return resourceContent;\n }, outputPath);\n\n return beasties.process(html);\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nconst PERFORMANCE_MARK_PREFIX = '🅰️';\n\nexport function printPerformanceLogs(): void {\n let maxWordLength = 0;\n const benchmarks: [step: string, value: string][] = [];\n\n for (const { name, duration } of performance.getEntriesByType('measure')) {\n if (!name.startsWith(PERFORMANCE_MARK_PREFIX)) {\n continue;\n }\n\n // `🅰️:Retrieve SSG Page` -> `Retrieve SSG Page:`\n const step = name.slice(PERFORMANCE_MARK_PREFIX.length + 1) + ':';\n if (step.length > maxWordLength) {\n maxWordLength = step.length;\n }\n\n benchmarks.push([step, `${duration.toFixed(1)}ms`]);\n performance.clearMeasures(name);\n }\n\n /* eslint-disable no-console */\n console.log('********** Performance results **********');\n for (const [step, value] of benchmarks) {\n const spaces = maxWordLength - step.length + 5;\n console.log(step + ' '.repeat(spaces) + value);\n }\n console.log('*****************************************');\n /* eslint-enable no-console */\n}\n\nexport async function runMethodAndMeasurePerf<T>(\n label: string,\n asyncMethod: () => Promise<T>,\n): Promise<T> {\n const labelName = `${PERFORMANCE_MARK_PREFIX}:${label}`;\n const startLabel = `start:${labelName}`;\n const endLabel = `end:${labelName}`;\n\n try {\n performance.mark(startLabel);\n\n return await asyncMethod();\n } finally {\n performance.mark(endLabel);\n performance.measure(labelName, startLabel, endLabel);\n performance.clearMarks(startLabel);\n performance.clearMarks(endLabel);\n }\n}\n\nexport function noopRunMethodAndMeasurePerf<T>(\n label: string,\n asyncMethod: () => Promise<T>,\n): Promise<T> {\n return asyncMethod();\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { ApplicationRef, StaticProvider, Type } from '@angular/core';\nimport { BootstrapContext } from '@angular/platform-browser';\nimport { renderApplication, renderModule, ɵSERVER_CONTEXT } from '@angular/platform-server';\nimport * as fs from 'node:fs';\nimport { dirname, join, normalize, resolve } from 'node:path';\nimport { URL } from 'node:url';\nimport { validateUrl } from '../../../src/utils/validation';\nimport { getAllowedHostsFromEnv } from '../environment-options';\nimport { attachNodeGlobalErrorHandlers } from '../errors';\nimport { CommonEngineInlineCriticalCssProcessor } from './inline-css-processor';\nimport {\n noopRunMethodAndMeasurePerf,\n printPerformanceLogs,\n runMethodAndMeasurePerf,\n} from './peformance-profiler';\n\nconst SSG_MARKER_REGEXP = /ng-server-context=[\"']\\w*\\|?ssg\\|?\\w*[\"']/;\n\nexport interface CommonEngineOptions {\n /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n /** A set of platform level providers for all requests. */\n providers?: StaticProvider[];\n\n /** Enable request performance profiling data collection and printing the results in the server console. */\n enablePerformanceProfiler?: boolean;\n\n /** A set of hostnames that are allowed to access the server. */\n allowedHosts?: readonly string[];\n}\n\nexport interface CommonEngineRenderOptions {\n /** A method that when invoked returns a promise that returns an `ApplicationRef` instance once resolved or an NgModule. */\n bootstrap?: Type<{}> | ((context: BootstrapContext) => Promise<ApplicationRef>);\n\n /** A set of platform level providers for the current request. */\n providers?: StaticProvider[];\n url?: string;\n document?: string;\n documentFilePath?: string;\n\n /**\n * Reduce render blocking requests by inlining critical CSS.\n * Defaults to true.\n */\n inlineCriticalCss?: boolean;\n\n /**\n * Base path location of index file.\n * Defaults to the 'documentFilePath' dirname when not provided.\n */\n publicPath?: string;\n}\n\n/**\n * A common engine to use to server render an application.\n */\n\nexport class CommonEngine {\n private readonly templateCache = new Map<string, string>();\n private readonly inlineCriticalCssProcessor = new CommonEngineInlineCriticalCssProcessor();\n private readonly pageIsSSG = new Map<string, boolean>();\n private readonly allowedHosts: ReadonlySet<string>;\n\n constructor(private options?: CommonEngineOptions) {\n this.allowedHosts = new Set([\n ...getAllowedHostsFromEnv(),\n ...(this.options?.allowedHosts ?? []),\n ]);\n\n attachNodeGlobalErrorHandlers();\n }\n\n /**\n * Render an HTML document for a specific URL with specified\n * render options\n */\n async render(opts: CommonEngineRenderOptions): Promise<string> {\n const { url } = opts;\n\n if (url && URL.canParse(url)) {\n const urlObj = new URL(url);\n try {\n validateUrl(urlObj, this.allowedHosts);\n } catch (error) {\n // eslint-disable-next-line no-console\n console.error(\n `ERROR: ${(error as Error).message}` +\n 'Please provide a list of allowed hosts in the \"allowedHosts\" option in the \"CommonEngine\" constructor.',\n );\n\n throw error;\n }\n }\n\n const enablePerformanceProfiler = this.options?.enablePerformanceProfiler;\n\n const runMethod = enablePerformanceProfiler\n ? runMethodAndMeasurePerf\n : noopRunMethodAndMeasurePerf;\n\n let html = await runMethod('Retrieve SSG Page', () => this.retrieveSSGPage(opts));\n\n if (html === undefined) {\n html = await runMethod('Render Page', () => this.renderApplication(opts));\n\n if (opts.inlineCriticalCss !== false) {\n const content = await runMethod('Inline Critical CSS', () =>\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n this.inlineCriticalCss(html!, opts),\n );\n\n html = content;\n }\n }\n\n if (enablePerformanceProfiler) {\n printPerformanceLogs();\n }\n\n return html;\n }\n\n private inlineCriticalCss(html: string, opts: CommonEngineRenderOptions): Promise<string> {\n const outputPath =\n opts.publicPath ?? (opts.documentFilePath ? dirname(opts.documentFilePath) : '');\n\n return this.inlineCriticalCssProcessor.process(html, outputPath);\n }\n\n private async retrieveSSGPage(opts: CommonEngineRenderOptions): Promise<string | undefined> {\n const { publicPath, documentFilePath, url } = opts;\n if (!publicPath || !documentFilePath || url === undefined) {\n return undefined;\n }\n\n const { pathname } = new URL(url, 'resolve://');\n // Do not use `resolve` here as otherwise it can lead to path traversal vulnerability.\n // See: https://portswigger.net/web-security/file-path-traversal\n const pagePath = join(publicPath, pathname, 'index.html');\n\n if (this.pageIsSSG.get(pagePath)) {\n // Serve pre-rendered page.\n return fs.promises.readFile(pagePath, 'utf-8');\n }\n\n if (!pagePath.startsWith(normalize(publicPath))) {\n // Potential path traversal detected.\n return undefined;\n }\n\n if (pagePath === resolve(documentFilePath) || !(await exists(pagePath))) {\n // View matches with prerender path or file does not exist.\n this.pageIsSSG.set(pagePath, false);\n\n return undefined;\n }\n\n // Static file exists.\n const content = await fs.promises.readFile(pagePath, 'utf-8');\n const isSSG = SSG_MARKER_REGEXP.test(content);\n this.pageIsSSG.set(pagePath, isSSG);\n\n return isSSG ? content : undefined;\n }\n\n private async renderApplication(opts: CommonEngineRenderOptions): Promise<string> {\n const moduleOrFactory = this.options?.bootstrap ?? opts.bootstrap;\n if (!moduleOrFactory) {\n throw new Error('A module or bootstrap option must be provided.');\n }\n\n const extraProviders: StaticProvider[] = [\n { provide: ɵSERVER_CONTEXT, useValue: 'ssr' },\n ...(opts.providers ?? []),\n ...(this.options?.providers ?? []),\n ];\n\n let document = opts.document;\n if (!document && opts.documentFilePath) {\n document = await this.getDocument(opts.documentFilePath);\n }\n\n const commonRenderingOptions = {\n url: opts.url,\n document,\n };\n\n return isBootstrapFn(moduleOrFactory)\n ? renderApplication(moduleOrFactory, {\n platformProviders: extraProviders,\n ...commonRenderingOptions,\n })\n : renderModule(moduleOrFactory, { extraProviders, ...commonRenderingOptions });\n }\n\n /** Retrieve the document from the cache or the filesystem */\n private async getDocument(filePath: string): Promise<string> {\n let doc = this.templateCache.get(filePath);\n\n if (!doc) {\n doc = await fs.promises.readFile(filePath, 'utf-8');\n this.templateCache.set(filePath, doc);\n }\n\n return doc;\n }\n}\n\nasync function exists(path: fs.PathLike): Promise<boolean> {\n try {\n await fs.promises.access(path, fs.constants.F_OK);\n\n return true;\n } catch {\n return false;\n }\n}\n\nfunction isBootstrapFn(\n value: unknown,\n): value is (context: BootstrapContext) => Promise<ApplicationRef> {\n // We can differentiate between a module and a bootstrap function by reading compiler-generated `ɵmod` static property:\n return typeof value === 'function' && !('ɵmod' in value);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingHttpHeaders, IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { getFirstHeaderValue } from '../../src/utils/validation';\n\n/**\n * A set containing all the pseudo-headers defined in the HTTP/2 specification.\n *\n * This set can be used to filter out pseudo-headers from a list of headers,\n * as they are not allowed to be set directly using the `Node.js` Undici API or\n * the web `Headers` API.\n */\nconst HTTP2_PSEUDO_HEADERS = new Set([':method', ':scheme', ':authority', ':path', ':status']);\n\n/**\n * Converts a Node.js `IncomingMessage` or `Http2ServerRequest` into a\n * Web Standard `Request` object.\n *\n * This function adapts the Node.js request objects to a format that can\n * be used by web platform APIs.\n *\n * @param nodeRequest - The Node.js request object (`IncomingMessage` or `Http2ServerRequest`) to convert.\n * @returns A Web Standard `Request` object.\n */\nexport function createWebRequestFromNodeRequest(\n nodeRequest: IncomingMessage | Http2ServerRequest,\n): Request {\n const { headers, method = 'GET' } = nodeRequest;\n const withBody = method !== 'GET' && method !== 'HEAD';\n const referrer = headers.referer && URL.canParse(headers.referer) ? headers.referer : undefined;\n\n return new Request(createRequestUrl(nodeRequest), {\n method,\n headers: createRequestHeaders(headers),\n body: withBody ? nodeRequest : undefined,\n duplex: withBody ? 'half' : undefined,\n referrer,\n });\n}\n\n/**\n * Creates a `Headers` object from Node.js `IncomingHttpHeaders`.\n *\n * @param nodeHeaders - The Node.js `IncomingHttpHeaders` object to convert.\n * @returns A `Headers` object containing the converted headers.\n */\nfunction createRequestHeaders(nodeHeaders: IncomingHttpHeaders): Headers {\n const headers = new Headers();\n\n for (const [name, value] of Object.entries(nodeHeaders)) {\n if (HTTP2_PSEUDO_HEADERS.has(name)) {\n continue;\n }\n\n if (typeof value === 'string') {\n headers.append(name, value);\n } else if (Array.isArray(value)) {\n for (const item of value) {\n headers.append(name, item);\n }\n }\n }\n\n return headers;\n}\n\n/**\n * Creates a `URL` object from a Node.js `IncomingMessage`, taking into account the protocol, host, and port.\n *\n * @param nodeRequest - The Node.js `IncomingMessage` or `Http2ServerRequest` object to extract URL information from.\n * @returns A `URL` object representing the request URL.\n */\nexport function createRequestUrl(nodeRequest: IncomingMessage | Http2ServerRequest): URL {\n const {\n headers,\n socket,\n url = '',\n originalUrl,\n } = nodeRequest as IncomingMessage & { originalUrl?: string };\n const protocol =\n getFirstHeaderValue(headers['x-forwarded-proto']) ??\n ('encrypted' in socket && socket.encrypted ? 'https' : 'http');\n const hostname =\n getFirstHeaderValue(headers['x-forwarded-host']) ?? headers.host ?? headers[':authority'];\n\n if (Array.isArray(hostname)) {\n throw new Error('host value cannot be an array.');\n }\n\n let hostnameWithPort = hostname;\n if (!hostname?.includes(':')) {\n const port = getFirstHeaderValue(headers['x-forwarded-port']);\n if (port) {\n hostnameWithPort += `:${port}`;\n }\n }\n\n return new URL(`${protocol}://${hostnameWithPort}${originalUrl ?? url}`);\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { AngularAppEngine } from '@angular/ssr';\nimport type { IncomingMessage } from 'node:http';\nimport type { Http2ServerRequest } from 'node:http2';\nimport { AngularAppEngineOptions } from '../../src/app-engine';\nimport { getAllowedHostsFromEnv } from './environment-options';\nimport { attachNodeGlobalErrorHandlers } from './errors';\nimport { createWebRequestFromNodeRequest } from './request';\n\n/**\n * Options for the Angular Node.js server application engine.\n */\nexport interface AngularNodeAppEngineOptions extends AngularAppEngineOptions {}\n\n/**\n * Angular server application engine.\n * Manages Angular server applications (including localized ones), handles rendering requests,\n * and optionally transforms index HTML before rendering.\n *\n * @remarks This class should be instantiated once and used as a singleton across the server-side\n * application to ensure consistent handling of rendering requests and resource management.\n */\nexport class AngularNodeAppEngine {\n private readonly angularAppEngine: AngularAppEngine;\n\n /**\n * Creates a new instance of the Angular Node.js server application engine.\n * @param options Options for the Angular Node.js server application engine.\n */\n constructor(options?: AngularNodeAppEngineOptions) {\n this.angularAppEngine = new AngularAppEngine({\n ...options,\n allowedHosts: [...getAllowedHostsFromEnv(), ...(options?.allowedHosts ?? [])],\n });\n\n attachNodeGlobalErrorHandlers();\n }\n\n /**\n * Handles an incoming HTTP request by serving prerendered content, performing server-side rendering,\n * or delivering a static file for client-side rendered routes based on the `RenderMode` setting.\n *\n * This method adapts Node.js's `IncomingMessage`, `Http2ServerRequest` or `Request`\n * to a format compatible with the `AngularAppEngine` and delegates the handling logic to it.\n *\n * @param request - The incoming HTTP request (`IncomingMessage`, `Http2ServerRequest` or `Request`).\n * @param requestContext - Optional context for rendering, such as metadata associated with the request.\n * @returns A promise that resolves to the resulting HTTP response object, or `null` if no matching Angular route is found.\n *\n * @remarks A request to `https://www.example.com/page/index.html` will serve or render the Angular route\n * corresponding to `https://www.example.com/page`.\n *\n * @remarks\n * To prevent potential Server-Side Request Forgery (SSRF), this function verifies the hostname\n * of the `request.url` against a list of authorized hosts.\n * If the hostname is not recognized a 400 Bad Request is returned.\n *\n * Resolution:\n * Authorize your hostname by configuring `allowedHosts` in `angular.json` in:\n * `projects.[project-name].architect.build.options.security.allowedHosts`.\n * Alternatively, you can define the allowed hostname via the environment variable `process.env['NG_ALLOWED_HOSTS']`\n * or pass it directly through the configuration options of `AngularNodeAppEngine`.\n *\n * For more information see: https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf\n */\n async handle(\n request: IncomingMessage | Http2ServerRequest | Request,\n requestContext?: unknown,\n ): Promise<Response | null> {\n const webRequest =\n request instanceof Request ? request : createWebRequestFromNodeRequest(request);\n\n return this.angularAppEngine.handle(webRequest, requestContext);\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { IncomingMessage, ServerResponse } from 'node:http';\n\n/**\n * Represents a middleware function for handling HTTP requests in a Node.js environment.\n *\n * @param req - The incoming HTTP request object.\n * @param res - The outgoing HTTP response object.\n * @param next - A callback function that signals the completion of the middleware or forwards the error if provided.\n *\n * @returns A Promise that resolves to void or simply void. The handler can be asynchronous.\n */\nexport type NodeRequestHandlerFunction = (\n req: IncomingMessage,\n res: ServerResponse,\n next: (err?: unknown) => void,\n) => Promise<void> | void;\n\n/**\n * Attaches metadata to the handler function to mark it as a special handler for Node.js environments.\n *\n * @typeParam T - The type of the handler function.\n * @param handler - The handler function to be defined and annotated.\n * @returns The same handler function passed as an argument, with metadata attached.\n *\n * @example\n * Usage in an Express application:\n * ```ts\n * const app = express();\n * export default createNodeRequestHandler(app);\n * ```\n *\n * @example\n * Usage in a Hono application:\n * ```ts\n * const app = new Hono();\n * export default createNodeRequestHandler(async (req, res, next) => {\n * try {\n * const webRes = await app.fetch(createWebRequestFromNodeRequest(req));\n * if (webRes) {\n * await writeResponseToNodeResponse(webRes, res);\n * } else {\n * next();\n * }\n * } catch (error) {\n * next(error);\n * }\n * });\n * ```\n *\n * @example\n * Usage in a Fastify application:\n * ```ts\n * const app = Fastify();\n * export default createNodeRequestHandler(async (req, res) => {\n * await app.ready();\n * app.server.emit('request', req, res);\n * });\n * ```\n */\nexport function createNodeRequestHandler<T extends NodeRequestHandlerFunction>(handler: T): T {\n (handler as T & { __ng_node_request_handler__?: boolean })['__ng_node_request_handler__'] = true;\n\n return handler;\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport type { ServerResponse } from 'node:http';\nimport type { Http2ServerResponse } from 'node:http2';\n\n/**\n * Streams a web-standard `Response` into a Node.js `ServerResponse`\n * or `Http2ServerResponse`.\n *\n * This function adapts the web `Response` object to write its content\n * to a Node.js response object, handling both HTTP/1.1 and HTTP/2.\n *\n * @param source - The web-standard `Response` object to stream from.\n * @param destination - The Node.js response object (`ServerResponse` or `Http2ServerResponse`) to stream into.\n * @returns A promise that resolves once the streaming operation is complete.\n */\nexport async function writeResponseToNodeResponse(\n source: Response,\n destination: ServerResponse | Http2ServerResponse,\n): Promise<void> {\n const { status, headers, body } = source;\n destination.statusCode = status;\n\n let cookieHeaderSet = false;\n for (const [name, value] of headers.entries()) {\n if (name === 'set-cookie') {\n if (cookieHeaderSet) {\n continue;\n }\n\n // Sets the 'set-cookie' header only once to ensure it is correctly applied.\n // Concatenating 'set-cookie' values can lead to incorrect behavior, so we use a single value from `headers.getSetCookie()`.\n destination.setHeader(name, headers.getSetCookie());\n cookieHeaderSet = true;\n } else {\n destination.setHeader(name, value);\n }\n }\n\n if ('flushHeaders' in destination) {\n destination.flushHeaders();\n }\n\n if (!body) {\n destination.end();\n\n return;\n }\n\n try {\n const reader = body.getReader();\n\n destination.on('close', () => {\n reader.cancel().catch((error) => {\n // eslint-disable-next-line no-console\n console.error(\n `An error occurred while writing the response body for: ${destination.req.url}.`,\n error,\n );\n });\n });\n\n // eslint-disable-next-line no-constant-condition\n while (true) {\n const { done, value } = await reader.read();\n if (done) {\n destination.end();\n break;\n }\n\n const canContinue = (destination as ServerResponse).write(value);\n if (canContinue === false) {\n // Explicitly check for `false`, as AWS may return `undefined` even though this is not valid.\n // See: https://github.com/CodeGenieApp/serverless-express/issues/683\n await new Promise<void>((resolve) => destination.once('drain', resolve));\n }\n }\n } catch {\n destination.end('Internal server error.');\n }\n}\n","/**\n * @license\n * Copyright Google LLC All Rights Reserved.\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://angular.dev/license\n */\n\nimport { argv } from 'node:process';\nimport { fileURLToPath } from 'node:url';\n\n/**\n * Determines whether the provided URL represents the main entry point module.\n *\n * This function checks if the provided URL corresponds to the main ESM module being executed directly.\n * It's useful for conditionally executing code that should only run when a module is the entry point,\n * such as starting a server or initializing an application.\n *\n * It performs two key checks:\n * 1. Verifies if the URL starts with 'file:', ensuring it is a local file.\n * 2. Compares the URL's resolved file path with the first command-line argument (`process.argv[1]`),\n * which points to the file being executed.\n *\n * @param url The URL of the module to check. This should typically be `import.meta.url`.\n * @returns `true` if the provided URL represents the main entry point, otherwise `false`.\n */\nexport function isMainModule(url: string): boolean {\n return url.startsWith('file:') && argv[1] === fileURLToPath(url);\n}\n"],"names":["getAllowedHostsFromEnv","allowedHosts","envNgAllowedHosts","process","env","hosts","split","host","trimmed","trim","length","push","attachNodeGlobalErrorHandlers","Zone","gThis","globalThis","ngAttachNodeGlobalErrorHandlersCalled","on","error","console","CommonEngineInlineCriticalCssProcessor","resourceCache","Map","html","outputPath","beasties","InlineCriticalCssProcessor","path","resourceContent","get","undefined","readFile","set","PERFORMANCE_MARK_PREFIX","printPerformanceLogs","maxWordLength","benchmarks","name","duration","performance","getEntriesByType","startsWith","step","slice","toFixed","clearMeasures","log","value","spaces","repeat","runMethodAndMeasurePerf","label","asyncMethod","labelName","startLabel","endLabel","mark","measure","clearMarks","noopRunMethodAndMeasurePerf","SSG_MARKER_REGEXP","CommonEngine","options","templateCache","inlineCriticalCssProcessor","pageIsSSG","constructor","Set","render","opts","url","URL","canParse","urlObj","validateUrl","message","enablePerformanceProfiler","runMethod","retrieveSSGPage","renderApplication","inlineCriticalCss","content","publicPath","documentFilePath","dirname","pathname","pagePath","join","fs","promises","normalize","resolve","exists","isSSG","test","moduleOrFactory","bootstrap","Error","extraProviders","provide","ɵSERVER_CONTEXT","useValue","providers","document","getDocument","commonRenderingOptions","isBootstrapFn","platformProviders","renderModule","filePath","doc","access","constants","F_OK","HTTP2_PSEUDO_HEADERS","createWebRequestFromNodeRequest","nodeRequest","headers","method","withBody","referrer","referer","Request","createRequestUrl","createRequestHeaders","body","duplex","nodeHeaders","Headers","Object","entries","has","append","Array","isArray","item","socket","originalUrl","protocol","getFirstHeaderValue","encrypted","hostname","hostnameWithPort","includes","port","AngularNodeAppEngine","angularAppEngine","AngularAppEngine","handle","request","requestContext","webRequest","createNodeRequestHandler","handler","writeResponseToNodeResponse","source","destination","status","statusCode","cookieHeaderSet","setHeader","getSetCookie","flushHeaders","end","reader","getReader","cancel","catch","req","done","read","canContinue","write","Promise","once","isMainModule","argv","fileURLToPath"],"mappings":";;;;;;;;;SAYgBA,sBAAsBA,GAAA;EACpC,MAAMC,YAAY,GAAa,EAAE;AACjC,EAAA,MAAMC,iBAAiB,GAAGC,OAAO,CAACC,GAAG,CAAC,kBAAkB,CAAC;EACzD,IAAI,CAACF,iBAAiB,EAAE;AACtB,IAAA,OAAOD,YAAY;AACrB;AAEA,EAAA,MAAMI,KAAK,GAAGH,iBAAiB,CAACI,KAAK,CAAC,GAAG,CAAC;AAC1C,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;AACxB,IAAA,MAAMG,OAAO,GAAGD,IAAI,CAACE,IAAI,EAAE;AAC3B,IAAA,IAAID,OAAO,CAACE,MAAM,GAAG,CAAC,EAAE;AACtBT,MAAAA,YAAY,CAACU,IAAI,CAACH,OAAO,CAAC;AAC5B;AACF;AAEA,EAAA,OAAOP,YAAY;AACrB;;SCRgBW,6BAA6BA,GAAA;AAC3C,EAAA,IAAI,OAAOC,IAAI,KAAK,WAAW,EAAE;AAC/B,IAAA;AACF;EAIA,MAAMC,KAAK,GAA4EC,UAAU;EACjG,IAAID,KAAK,CAACE,qCAAqC,EAAE;AAC/C,IAAA;AACF;EAEAF,KAAK,CAACE,qCAAqC,GAAG,IAAI;AAElDb,EAAAA,OAAO,CAEJc,EAAE,CAAC,oBAAoB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,oBAAoB,EAAEA,KAAK,CAAC,CAAA,CAE9ED,EAAE,CAAC,mBAAmB,EAAGC,KAAK,IAAKC,OAAO,CAACD,KAAK,CAAC,mBAAmB,EAAEA,KAAK,CAAC,CAAC;AAClF;;MC5BaE,sCAAsC,CAAA;AAChCC,EAAAA,aAAa,GAAG,IAAIC,GAAG,EAAkB;AAE1D,EAAA,MAAMnB,OAAOA,CAACoB,IAAY,EAAEC,UAA8B,EAAA;AACxD,IAAA,MAAMC,QAAQ,GAAG,IAAIC,2BAA0B,CAAC,MAAOC,IAAI,IAAI;MAC7D,IAAIC,eAAe,GAAG,IAAI,CAACP,aAAa,CAACQ,GAAG,CAACF,IAAI,CAAC;MAClD,IAAIC,eAAe,KAAKE,SAAS,EAAE;AACjCF,QAAAA,eAAe,GAAG,MAAMG,QAAQ,CAACJ,IAAI,EAAE,OAAO,CAAC;QAC/C,IAAI,CAACN,aAAa,CAACW,GAAG,CAACL,IAAI,EAAEC,eAAe,CAAC;AAC/C;AAEA,MAAA,OAAOA,eAAe;KACvB,EAAEJ,UAAU,CAAC;AAEd,IAAA,OAAOC,QAAQ,CAACtB,OAAO,CAACoB,IAAI,CAAC;AAC/B;AACD;;ACnBD,MAAMU,uBAAuB,GAAG,KAAK;SAErBC,oBAAoBA,GAAA;EAClC,IAAIC,aAAa,GAAG,CAAC;EACrB,MAAMC,UAAU,GAAoC,EAAE;AAEtD,EAAA,KAAK,MAAM;IAAEC,IAAI;AAAEC,IAAAA;AAAU,GAAA,IAAIC,WAAW,CAACC,gBAAgB,CAAC,SAAS,CAAC,EAAE;AACxE,IAAA,IAAI,CAACH,IAAI,CAACI,UAAU,CAACR,uBAAuB,CAAC,EAAE;AAC7C,MAAA;AACF;AAGA,IAAA,MAAMS,IAAI,GAAGL,IAAI,CAACM,KAAK,CAACV,uBAAuB,CAACvB,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG;AACjE,IAAA,IAAIgC,IAAI,CAAChC,MAAM,GAAGyB,aAAa,EAAE;MAC/BA,aAAa,GAAGO,IAAI,CAAChC,MAAM;AAC7B;AAEA0B,IAAAA,UAAU,CAACzB,IAAI,CAAC,CAAC+B,IAAI,EAAE,CAAA,EAAGJ,QAAQ,CAACM,OAAO,CAAC,CAAC,CAAC,CAAA,EAAA,CAAI,CAAC,CAAC;AACnDL,IAAAA,WAAW,CAACM,aAAa,CAACR,IAAI,CAAC;AACjC;AAGAlB,EAAAA,OAAO,CAAC2B,GAAG,CAAC,2CAA2C,CAAC;EACxD,KAAK,MAAM,CAACJ,IAAI,EAAEK,KAAK,CAAC,IAAIX,UAAU,EAAE;IACtC,MAAMY,MAAM,GAAGb,aAAa,GAAGO,IAAI,CAAChC,MAAM,GAAG,CAAC;AAC9CS,IAAAA,OAAO,CAAC2B,GAAG,CAACJ,IAAI,GAAG,GAAG,CAACO,MAAM,CAACD,MAAM,CAAC,GAAGD,KAAK,CAAC;AAChD;AACA5B,EAAAA,OAAO,CAAC2B,GAAG,CAAC,2CAA2C,CAAC;AAE1D;AAEO,eAAeI,uBAAuBA,CAC3CC,KAAa,EACbC,WAA6B,EAAA;AAE7B,EAAA,MAAMC,SAAS,GAAG,CAAA,EAAGpB,uBAAuB,CAAA,CAAA,EAAIkB,KAAK,CAAE,CAAA;AACvD,EAAA,MAAMG,UAAU,GAAG,CAASD,MAAAA,EAAAA,SAAS,CAAE,CAAA;AACvC,EAAA,MAAME,QAAQ,GAAG,CAAOF,IAAAA,EAAAA,SAAS,CAAE,CAAA;EAEnC,IAAI;AACFd,IAAAA,WAAW,CAACiB,IAAI,CAACF,UAAU,CAAC;IAE5B,OAAO,MAAMF,WAAW,EAAE;AAC5B,GAAA,SAAU;AACRb,IAAAA,WAAW,CAACiB,IAAI,CAACD,QAAQ,CAAC;IAC1BhB,WAAW,CAACkB,OAAO,CAACJ,SAAS,EAAEC,UAAU,EAAEC,QAAQ,CAAC;AACpDhB,IAAAA,WAAW,CAACmB,UAAU,CAACJ,UAAU,CAAC;AAClCf,IAAAA,WAAW,CAACmB,UAAU,CAACH,QAAQ,CAAC;AAClC;AACF;AAEgB,SAAAI,2BAA2BA,CACzCR,KAAa,EACbC,WAA6B,EAAA;EAE7B,OAAOA,WAAW,EAAE;AACtB;;ACxCA,MAAMQ,iBAAiB,GAAG,2CAA2C;MA2CxDC,YAAY,CAAA;EAMHC,OAAA;AALHC,EAAAA,aAAa,GAAG,IAAIzC,GAAG,EAAkB;AACzC0C,EAAAA,0BAA0B,GAAG,IAAI5C,sCAAsC,EAAE;AACzE6C,EAAAA,SAAS,GAAG,IAAI3C,GAAG,EAAmB;EACtCrB,YAAY;EAE7BiE,WAAAA,CAAoBJ,OAA6B,EAAA;IAA7B,IAAO,CAAAA,OAAA,GAAPA,OAAO;IACzB,IAAI,CAAC7D,YAAY,GAAG,IAAIkE,GAAG,CAAC,CAC1B,GAAGnE,sBAAsB,EAAE,EAC3B,IAAI,IAAI,CAAC8D,OAAO,EAAE7D,YAAY,IAAI,EAAE,CAAC,CACtC,CAAC;AAEFW,IAAAA,6BAA6B,EAAE;AACjC;EAMA,MAAMwD,MAAMA,CAACC,IAA+B,EAAA;IAC1C,MAAM;AAAEC,MAAAA;AAAK,KAAA,GAAGD,IAAI;IAEpB,IAAIC,GAAG,IAAIC,KAAG,CAACC,QAAQ,CAACF,GAAG,CAAC,EAAE;AAC5B,MAAA,MAAMG,MAAM,GAAG,IAAIF,KAAG,CAACD,GAAG,CAAC;MAC3B,IAAI;AACFI,QAAAA,WAAW,CAACD,MAAM,EAAE,IAAI,CAACxE,YAAY,CAAC;OACxC,CAAE,OAAOiB,KAAK,EAAE;QAEdC,OAAO,CAACD,KAAK,CACX,CAAWA,OAAAA,EAAAA,KAAe,CAACyD,OAAO,CAAA,CAAE,GAClC,wGAAwG,CAC3G;AAED,QAAA,MAAMzD,KAAK;AACb;AACF;AAEA,IAAA,MAAM0D,yBAAyB,GAAG,IAAI,CAACd,OAAO,EAAEc,yBAAyB;AAEzE,IAAA,MAAMC,SAAS,GAAGD,yBAAyB,GACvC1B,uBAAuB,GACvBS,2BAA2B;AAE/B,IAAA,IAAIpC,IAAI,GAAG,MAAMsD,SAAS,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAACC,eAAe,CAACT,IAAI,CAAC,CAAC;IAEjF,IAAI9C,IAAI,KAAKO,SAAS,EAAE;AACtBP,MAAAA,IAAI,GAAG,MAAMsD,SAAS,CAAC,aAAa,EAAE,MAAM,IAAI,CAACE,iBAAiB,CAACV,IAAI,CAAC,CAAC;AAEzE,MAAA,IAAIA,IAAI,CAACW,iBAAiB,KAAK,KAAK,EAAE;AACpC,QAAA,MAAMC,OAAO,GAAG,MAAMJ,SAAS,CAAC,qBAAqB,EAAE,MAErD,IAAI,CAACG,iBAAiB,CAACzD,IAAK,EAAE8C,IAAI,CAAC,CACpC;AAED9C,QAAAA,IAAI,GAAG0D,OAAO;AAChB;AACF;AAEA,IAAA,IAAIL,yBAAyB,EAAE;AAC7B1C,MAAAA,oBAAoB,EAAE;AACxB;AAEA,IAAA,OAAOX,IAAI;AACb;AAEQyD,EAAAA,iBAAiBA,CAACzD,IAAY,EAAE8C,IAA+B,EAAA;AACrE,IAAA,MAAM7C,UAAU,GACd6C,IAAI,CAACa,UAAU,KAAKb,IAAI,CAACc,gBAAgB,GAAGC,OAAO,CAACf,IAAI,CAACc,gBAAgB,CAAC,GAAG,EAAE,CAAC;IAElF,OAAO,IAAI,CAACnB,0BAA0B,CAAC7D,OAAO,CAACoB,IAAI,EAAEC,UAAU,CAAC;AAClE;EAEQ,MAAMsD,eAAeA,CAACT,IAA+B,EAAA;IAC3D,MAAM;MAAEa,UAAU;MAAEC,gBAAgB;AAAEb,MAAAA;AAAG,KAAE,GAAGD,IAAI;IAClD,IAAI,CAACa,UAAU,IAAI,CAACC,gBAAgB,IAAIb,GAAG,KAAKxC,SAAS,EAAE;AACzD,MAAA,OAAOA,SAAS;AAClB;IAEA,MAAM;AAAEuD,MAAAA;AAAQ,KAAE,GAAG,IAAId,KAAG,CAACD,GAAG,EAAE,YAAY,CAAC;IAG/C,MAAMgB,QAAQ,GAAGC,IAAI,CAACL,UAAU,EAAEG,QAAQ,EAAE,YAAY,CAAC;IAEzD,IAAI,IAAI,CAACpB,SAAS,CAACpC,GAAG,CAACyD,QAAQ,CAAC,EAAE;MAEhC,OAAOE,EAAE,CAACC,QAAQ,CAAC1D,QAAQ,CAACuD,QAAQ,EAAE,OAAO,CAAC;AAChD;IAEA,IAAI,CAACA,QAAQ,CAAC7C,UAAU,CAACiD,SAAS,CAACR,UAAU,CAAC,CAAC,EAAE;AAE/C,MAAA,OAAOpD,SAAS;AAClB;AAEA,IAAA,IAAIwD,QAAQ,KAAKK,OAAO,CAACR,gBAAgB,CAAC,IAAI,EAAE,MAAMS,MAAM,CAACN,QAAQ,CAAC,CAAC,EAAE;MAEvE,IAAI,CAACrB,SAAS,CAACjC,GAAG,CAACsD,QAAQ,EAAE,KAAK,CAAC;AAEnC,MAAA,OAAOxD,SAAS;AAClB;AAGA,IAAA,MAAMmD,OAAO,GAAG,MAAMO,EAAE,CAACC,QAAQ,CAAC1D,QAAQ,CAACuD,QAAQ,EAAE,OAAO,CAAC;AAC7D,IAAA,MAAMO,KAAK,GAAGjC,iBAAiB,CAACkC,IAAI,CAACb,OAAO,CAAC;IAC7C,IAAI,CAAChB,SAAS,CAACjC,GAAG,CAACsD,QAAQ,EAAEO,KAAK,CAAC;AAEnC,IAAA,OAAOA,KAAK,GAAGZ,OAAO,GAAGnD,SAAS;AACpC;EAEQ,MAAMiD,iBAAiBA,CAACV,IAA+B,EAAA;IAC7D,MAAM0B,eAAe,GAAG,IAAI,CAACjC,OAAO,EAAEkC,SAAS,IAAI3B,IAAI,CAAC2B,SAAS;IACjE,IAAI,CAACD,eAAe,EAAE;AACpB,MAAA,MAAM,IAAIE,KAAK,CAAC,gDAAgD,CAAC;AACnE;IAEA,MAAMC,cAAc,GAAqB,CACvC;AAAEC,MAAAA,OAAO,EAAEC,eAAe;AAAEC,MAAAA,QAAQ,EAAE;AAAO,KAAA,EAC7C,IAAIhC,IAAI,CAACiC,SAAS,IAAI,EAAE,CAAC,EACzB,IAAI,IAAI,CAACxC,OAAO,EAAEwC,SAAS,IAAI,EAAE,CAAC,CACnC;AAED,IAAA,IAAIC,QAAQ,GAAGlC,IAAI,CAACkC,QAAQ;AAC5B,IAAA,IAAI,CAACA,QAAQ,IAAIlC,IAAI,CAACc,gBAAgB,EAAE;MACtCoB,QAAQ,GAAG,MAAM,IAAI,CAACC,WAAW,CAACnC,IAAI,CAACc,gBAAgB,CAAC;AAC1D;AAEA,IAAA,MAAMsB,sBAAsB,GAAG;MAC7BnC,GAAG,EAAED,IAAI,CAACC,GAAG;AACbiC,MAAAA;KACD;IAED,OAAOG,aAAa,CAACX,eAAe,CAAA,GAChChB,iBAAiB,CAACgB,eAAe,EAAE;AACjCY,MAAAA,iBAAiB,EAAET,cAAc;MACjC,GAAGO;KACJ,CAAA,GACDG,YAAY,CAACb,eAAe,EAAE;MAAEG,cAAc;MAAE,GAAGO;AAAwB,KAAA,CAAC;AAClF;EAGQ,MAAMD,WAAWA,CAACK,QAAgB,EAAA;IACxC,IAAIC,GAAG,GAAG,IAAI,CAAC/C,aAAa,CAAClC,GAAG,CAACgF,QAAQ,CAAC;IAE1C,IAAI,CAACC,GAAG,EAAE;MACRA,GAAG,GAAG,MAAMtB,EAAE,CAACC,QAAQ,CAAC1D,QAAQ,CAAC8E,QAAQ,EAAE,OAAO,CAAC;MACnD,IAAI,CAAC9C,aAAa,CAAC/B,GAAG,CAAC6E,QAAQ,EAAEC,GAAG,CAAC;AACvC;AAEA,IAAA,OAAOA,GAAG;AACZ;AACD;AAED,eAAelB,MAAMA,CAACjE,IAAiB,EAAA;EACrC,IAAI;AACF,IAAA,MAAM6D,EAAE,CAACC,QAAQ,CAACsB,MAAM,CAACpF,IAAI,EAAE6D,EAAE,CAACwB,SAAS,CAACC,IAAI,CAAC;AAEjD,IAAA,OAAO,IAAI;AACb,GAAA,CAAE,MAAM;AACN,IAAA,OAAO,KAAK;AACd;AACF;AAEA,SAASP,aAAaA,CACpB3D,KAAc,EAAA;EAGd,OAAO,OAAOA,KAAK,KAAK,UAAU,IAAI,EAAE,MAAM,IAAIA,KAAK,CAAC;AAC1D;;ACtNA,MAAMmE,oBAAoB,GAAG,IAAI/C,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAYxF,SAAUgD,+BAA+BA,CAC7CC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,OAAO;AAAEC,IAAAA,MAAM,GAAG;AAAK,GAAE,GAAGF,WAAW;EAC/C,MAAMG,QAAQ,GAAGD,MAAM,KAAK,KAAK,IAAIA,MAAM,KAAK,MAAM;AACtD,EAAA,MAAME,QAAQ,GAAGH,OAAO,CAACI,OAAO,IAAIlD,GAAG,CAACC,QAAQ,CAAC6C,OAAO,CAACI,OAAO,CAAC,GAAGJ,OAAO,CAACI,OAAO,GAAG3F,SAAS;AAE/F,EAAA,OAAO,IAAI4F,OAAO,CAACC,gBAAgB,CAACP,WAAW,CAAC,EAAE;IAChDE,MAAM;AACND,IAAAA,OAAO,EAAEO,oBAAoB,CAACP,OAAO,CAAC;AACtCQ,IAAAA,IAAI,EAAEN,QAAQ,GAAGH,WAAW,GAAGtF,SAAS;AACxCgG,IAAAA,MAAM,EAAEP,QAAQ,GAAG,MAAM,GAAGzF,SAAS;AACrC0F,IAAAA;AACD,GAAA,CAAC;AACJ;AAQA,SAASI,oBAAoBA,CAACG,WAAgC,EAAA;AAC5D,EAAA,MAAMV,OAAO,GAAG,IAAIW,OAAO,EAAE;AAE7B,EAAA,KAAK,MAAM,CAAC3F,IAAI,EAAEU,KAAK,CAAC,IAAIkF,MAAM,CAACC,OAAO,CAACH,WAAW,CAAC,EAAE;AACvD,IAAA,IAAIb,oBAAoB,CAACiB,GAAG,CAAC9F,IAAI,CAAC,EAAE;AAClC,MAAA;AACF;AAEA,IAAA,IAAI,OAAOU,KAAK,KAAK,QAAQ,EAAE;AAC7BsE,MAAAA,OAAO,CAACe,MAAM,CAAC/F,IAAI,EAAEU,KAAK,CAAC;KAC7B,MAAO,IAAIsF,KAAK,CAACC,OAAO,CAACvF,KAAK,CAAC,EAAE;AAC/B,MAAA,KAAK,MAAMwF,IAAI,IAAIxF,KAAK,EAAE;AACxBsE,QAAAA,OAAO,CAACe,MAAM,CAAC/F,IAAI,EAAEkG,IAAI,CAAC;AAC5B;AACF;AACF;AAEA,EAAA,OAAOlB,OAAO;AAChB;AAQM,SAAUM,gBAAgBA,CAACP,WAAiD,EAAA;EAChF,MAAM;IACJC,OAAO;IACPmB,MAAM;AACNlE,IAAAA,GAAG,GAAG,EAAE;AACRmE,IAAAA;AACD,GAAA,GAAGrB,WAAyD;EAC7D,MAAMsB,QAAQ,GACZC,mBAAmB,CAACtB,OAAO,CAAC,mBAAmB,CAAC,CAAC,KAChD,WAAW,IAAImB,MAAM,IAAIA,MAAM,CAACI,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAChE,EAAA,MAAMC,QAAQ,GACZF,mBAAmB,CAACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC,IAAIA,OAAO,CAAC9G,IAAI,IAAI8G,OAAO,CAAC,YAAY,CAAC;AAE3F,EAAA,IAAIgB,KAAK,CAACC,OAAO,CAACO,QAAQ,CAAC,EAAE;AAC3B,IAAA,MAAM,IAAI5C,KAAK,CAAC,gCAAgC,CAAC;AACnD;EAEA,IAAI6C,gBAAgB,GAAGD,QAAQ;AAC/B,EAAA,IAAI,CAACA,QAAQ,EAAEE,QAAQ,CAAC,GAAG,CAAC,EAAE;IAC5B,MAAMC,IAAI,GAAGL,mBAAmB,CAACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAC7D,IAAA,IAAI2B,IAAI,EAAE;MACRF,gBAAgB,IAAI,CAAIE,CAAAA,EAAAA,IAAI,CAAE,CAAA;AAChC;AACF;AAEA,EAAA,OAAO,IAAIzE,GAAG,CAAC,CAAA,EAAGmE,QAAQ,CAAA,GAAA,EAAMI,gBAAgB,CAAA,EAAGL,WAAW,IAAInE,GAAG,CAAA,CAAE,CAAC;AAC1E;;MC5Ea2E,oBAAoB,CAAA;EACdC,gBAAgB;EAMjChF,WAAAA,CAAYJ,OAAqC,EAAA;AAC/C,IAAA,IAAI,CAACoF,gBAAgB,GAAG,IAAIC,gBAAgB,CAAC;AAC3C,MAAA,GAAGrF,OAAO;AACV7D,MAAAA,YAAY,EAAE,CAAC,GAAGD,sBAAsB,EAAE,EAAE,IAAI8D,OAAO,EAAE7D,YAAY,IAAI,EAAE,CAAC;AAC7E,KAAA,CAAC;AAEFW,IAAAA,6BAA6B,EAAE;AACjC;AA6BA,EAAA,MAAMwI,MAAMA,CACVC,OAAuD,EACvDC,cAAwB,EAAA;IAExB,MAAMC,UAAU,GACdF,OAAO,YAAY3B,OAAO,GAAG2B,OAAO,GAAGlC,+BAA+B,CAACkC,OAAO,CAAC;IAEjF,OAAO,IAAI,CAACH,gBAAgB,CAACE,MAAM,CAACG,UAAU,EAAED,cAAc,CAAC;AACjE;AACD;;ACdK,SAAUE,wBAAwBA,CAAuCC,OAAU,EAAA;AACtFA,EAAAA,OAAyD,CAAC,6BAA6B,CAAC,GAAG,IAAI;AAEhG,EAAA,OAAOA,OAAO;AAChB;;ACjDO,eAAeC,2BAA2BA,CAC/CC,MAAgB,EAChBC,WAAiD,EAAA;EAEjD,MAAM;IAAEC,MAAM;IAAExC,OAAO;AAAEQ,IAAAA;AAAI,GAAE,GAAG8B,MAAM;EACxCC,WAAW,CAACE,UAAU,GAAGD,MAAM;EAE/B,IAAIE,eAAe,GAAG,KAAK;AAC3B,EAAA,KAAK,MAAM,CAAC1H,IAAI,EAAEU,KAAK,CAAC,IAAIsE,OAAO,CAACa,OAAO,EAAE,EAAE;IAC7C,IAAI7F,IAAI,KAAK,YAAY,EAAE;AACzB,MAAA,IAAI0H,eAAe,EAAE;AACnB,QAAA;AACF;MAIAH,WAAW,CAACI,SAAS,CAAC3H,IAAI,EAAEgF,OAAO,CAAC4C,YAAY,EAAE,CAAC;AACnDF,MAAAA,eAAe,GAAG,IAAI;AACxB,KAAA,MAAO;AACLH,MAAAA,WAAW,CAACI,SAAS,CAAC3H,IAAI,EAAEU,KAAK,CAAC;AACpC;AACF;EAEA,IAAI,cAAc,IAAI6G,WAAW,EAAE;IACjCA,WAAW,CAACM,YAAY,EAAE;AAC5B;EAEA,IAAI,CAACrC,IAAI,EAAE;IACT+B,WAAW,CAACO,GAAG,EAAE;AAEjB,IAAA;AACF;EAEA,IAAI;AACF,IAAA,MAAMC,MAAM,GAAGvC,IAAI,CAACwC,SAAS,EAAE;AAE/BT,IAAAA,WAAW,CAAC3I,EAAE,CAAC,OAAO,EAAE,MAAK;MAC3BmJ,MAAM,CAACE,MAAM,EAAE,CAACC,KAAK,CAAErJ,KAAK,IAAI;AAE9BC,QAAAA,OAAO,CAACD,KAAK,CACX,CAAA,uDAAA,EAA0D0I,WAAW,CAACY,GAAG,CAAClG,GAAG,CAAA,CAAA,CAAG,EAChFpD,KAAK,CACN;AACH,OAAC,CAAC;AACJ,KAAC,CAAC;AAGF,IAAA,OAAO,IAAI,EAAE;MACX,MAAM;QAAEuJ,IAAI;AAAE1H,QAAAA;AAAK,OAAE,GAAG,MAAMqH,MAAM,CAACM,IAAI,EAAE;AAC3C,MAAA,IAAID,IAAI,EAAE;QACRb,WAAW,CAACO,GAAG,EAAE;AACjB,QAAA;AACF;AAEA,MAAA,MAAMQ,WAAW,GAAIf,WAA8B,CAACgB,KAAK,CAAC7H,KAAK,CAAC;MAChE,IAAI4H,WAAW,KAAK,KAAK,EAAE;AAGzB,QAAA,MAAM,IAAIE,OAAO,CAAQlF,OAAO,IAAKiE,WAAW,CAACkB,IAAI,CAAC,OAAO,EAAEnF,OAAO,CAAC,CAAC;AAC1E;AACF;AACF,GAAA,CAAE,MAAM;AACNiE,IAAAA,WAAW,CAACO,GAAG,CAAC,wBAAwB,CAAC;AAC3C;AACF;;AC5DM,SAAUY,YAAYA,CAACzG,GAAW,EAAA;AACtC,EAAA,OAAOA,GAAG,CAAC7B,UAAU,CAAC,OAAO,CAAC,IAAIuI,IAAI,CAAC,CAAC,CAAC,KAAKC,aAAa,CAAC3G,GAAG,CAAC;AAClE;;;;"} |
+11
-33
@@ -1364,19 +1364,2 @@ import { validateRequest, cloneRequestAndPatchHeaders } from './_validation-chunk.mjs'; | ||
| } | ||
| async serveClientSidePage() { | ||
| const { | ||
| manifest: { | ||
| locale | ||
| }, | ||
| assets | ||
| } = this; | ||
| const html = await assets.getServerAsset('index.csr.html').text(); | ||
| return new Response(html, { | ||
| headers: new Headers({ | ||
| 'Content-Type': 'text/html;charset=UTF-8', | ||
| ...(locale !== undefined ? { | ||
| 'Content-Language': locale | ||
| } : {}) | ||
| }) | ||
| }); | ||
| } | ||
| } | ||
@@ -1493,3 +1476,3 @@ let angularServerApp; | ||
| } catch (error) { | ||
| return this.handleValidationError(error, request); | ||
| return this.handleValidationError(request.url, error); | ||
| } | ||
@@ -1507,3 +1490,3 @@ const { | ||
| if (onHeaderValidationError) { | ||
| promises.push(onHeaderValidationError.then(error => this.handleValidationError(error, securedRequest))); | ||
| promises.push(onHeaderValidationError.then(error => this.handleValidationError(securedRequest.url, error))); | ||
| } | ||
@@ -1584,17 +1567,12 @@ promises.push(serverApp.handle(securedRequest, requestContext)); | ||
| } | ||
| async handleValidationError(error, request) { | ||
| const isAllowedHostConfigured = this.allowedHosts.size > 0; | ||
| handleValidationError(url, error) { | ||
| const errorMessage = error.message; | ||
| console.error(`ERROR: Bad Request ("${request.url}").\n` + errorMessage + (isAllowedHostConfigured ? '' : '\nFalling back to client side rendering. This will become a 400 Bad Request in a future major version.') + '\n\nFor more information, see https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf'); | ||
| if (isAllowedHostConfigured) { | ||
| return new Response(errorMessage, { | ||
| status: 400, | ||
| statusText: 'Bad Request', | ||
| headers: { | ||
| 'Content-Type': 'text/plain' | ||
| } | ||
| }); | ||
| } | ||
| const serverApp = await this.getAngularServerAppForRequest(request); | ||
| return serverApp?.serveClientSidePage() ?? null; | ||
| console.error(`ERROR: Bad Request ("${url}").\n` + errorMessage + '\n\nFor more information, see https://angular.dev/best-practices/security#preventing-server-side-request-forgery-ssrf'); | ||
| return new Response(errorMessage, { | ||
| status: 400, | ||
| statusText: 'Bad Request', | ||
| headers: { | ||
| 'Content-Type': 'text/plain' | ||
| } | ||
| }); | ||
| } | ||
@@ -1601,0 +1579,0 @@ } |
+12
-12
| { | ||
| "name": "@angular/ssr", | ||
| "version": "21.2.1", | ||
| "version": "22.0.0-next.0", | ||
| "description": "Angular server side rendering utilities", | ||
@@ -20,6 +20,6 @@ "type": "module", | ||
| "peerDependencies": { | ||
| "@angular/common": "^21.0.0", | ||
| "@angular/core": "^21.0.0", | ||
| "@angular/platform-server": "^21.0.0", | ||
| "@angular/router": "^21.0.0" | ||
| "@angular/common": "^22.0.0-next.0", | ||
| "@angular/core": "^22.0.0-next.0", | ||
| "@angular/platform-server": "^22.0.0-next.0", | ||
| "@angular/router": "^22.0.0-next.0" | ||
| }, | ||
@@ -33,8 +33,8 @@ "peerDependenciesMeta": { | ||
| "@angular-devkit/schematics": "workspace:*", | ||
| "@angular/common": "21.2.0", | ||
| "@angular/compiler": "21.2.0", | ||
| "@angular/core": "21.2.0", | ||
| "@angular/platform-browser": "21.2.0", | ||
| "@angular/platform-server": "21.2.0", | ||
| "@angular/router": "21.2.0", | ||
| "@angular/common": "22.0.0-next.0", | ||
| "@angular/compiler": "22.0.0-next.0", | ||
| "@angular/core": "22.0.0-next.0", | ||
| "@angular/platform-browser": "22.0.0-next.0", | ||
| "@angular/platform-server": "22.0.0-next.0", | ||
| "@angular/router": "22.0.0-next.0", | ||
| "@schematics/angular": "workspace:*", | ||
@@ -47,3 +47,3 @@ "beasties": "0.4.1" | ||
| "type": "git", | ||
| "url": "https://github.com/angular/angular-cli.git" | ||
| "url": "git+https://github.com/angular/angular-cli.git" | ||
| }, | ||
@@ -50,0 +50,0 @@ "module": "./fesm2022/ssr.mjs", |
@@ -140,4 +140,4 @@ /** | ||
| * of the `request.url` against a list of authorized hosts. | ||
| * If the hostname is not recognized and `allowedHosts` is not empty, a Client-Side Rendered (CSR) version of the | ||
| * page is returned otherwise a 400 Bad Request is returned. | ||
| * If the hostname is not recognized a 400 Bad Request is returned. | ||
| * | ||
| * Resolution: | ||
@@ -194,6 +194,5 @@ * Authorize your hostname by configuring `allowedHosts` in `angular.json` in: | ||
| * | ||
| * @param url - The URL of the request. | ||
| * @param error - The validation error to handle. | ||
| * @param request - The HTTP request that caused the validation error. | ||
| * @returns A promise that resolves to a `Response` object with a 400 status code if allowed hosts are configured, | ||
| * or `null` if allowed hosts are not configured (in which case the request is served client-side). | ||
| * @returns A `Response` object with a 400 status code. | ||
| */ | ||
@@ -200,0 +199,0 @@ private handleValidationError; |
+1
-2
@@ -95,4 +95,3 @@ import { Type, ApplicationRef, StaticProvider } from '@angular/core'; | ||
| * of the `request.url` against a list of authorized hosts. | ||
| * If the hostname is not recognized and `allowedHosts` is not empty, a Client-Side Rendered (CSR) version of the | ||
| * page is returned otherwise a 400 Bad Request is returned. | ||
| * If the hostname is not recognized a 400 Bad Request is returned. | ||
| * | ||
@@ -99,0 +98,0 @@ * Resolution: |
Sorry, the diff of this file is too big to display
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
1633948
-0.32%15215
-0.23%1
Infinity%