Server source code is exposed to the public if sourcemaps are enabled

@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+Clean server sourcemaps from static output

@@ -205,15 +205,16 @@ class AstroBuilder {
 			key: keyPromise,
 		};
 
-		const { internals, ssrOutputChunkNames, contentFileNames } = await viteBuild(opts);
+		const { internals, ssrOutputChunkNames } =
+			await viteBuild(opts);
 
 		const hasServerIslands = this.settings.serverIslandNameMap.size > 0;
 		// Error if there are server islands but no adapter provided.
 		if (hasServerIslands && this.settings.buildOutput !== 'server') {
 			throw new AstroError(AstroErrorData.NoAdapterInstalledServerIslands);
 		}
 
-		await staticBuild(opts, internals, ssrOutputChunkNames, contentFileNames);
+		await staticBuild(opts, internals, ssrOutputChunkNames);
 
 		// Write any additionally generated assets to disk.
 		this.timer.assetsStart = performance.now();

@@ -92,7 +92,6 @@ export async function viteBuild(opts: StaticBuildOptions) {
 	const ssrOutputs = viteBuildReturnToRollupOutputs(ssrOutput);
 	const clientOutputs = viteBuildReturnToRollupOutputs(clientOutput ?? []);
 	await runPostBuildHooks(container, ssrOutputs, clientOutputs);
-	let contentFileNames: string[] | undefined = undefined;
 	settings.timer.end('Client build');
 
 	// Free up memory
@@ -112,20 +111,19 @@ export async function viteBuild(opts: StaticBuildOptions) {
 		}
 	}
 
-	return { internals, ssrOutputChunkNames, contentFileNames };
+	return { internals, ssrOutputChunkNames };
 }
 
 export async function staticBuild(
 	opts: StaticBuildOptions,
 	internals: BuildInternals,
 	ssrOutputChunkNames: string[],
-	contentFileNames?: string[],
 ) {
 	const { settings } = opts;
 	if (settings.buildOutput === 'static') {
 		settings.timer.start('Static generate');
 		await generatePages(opts, internals);
-		await cleanServerOutput(opts, ssrOutputChunkNames, contentFileNames, internals);
+		await cleanServerOutput(opts, ssrOutputChunkNames, internals);
 		settings.timer.end('Static generate');
 	} else if (settings.buildOutput === 'server') {
 		settings.timer.start('Server generate');
@@ -354,14 +352,12 @@ async function cleanStaticOutput(opts: StaticBuildOptions, internals: BuildInter
 async function cleanServerOutput(
 	opts: StaticBuildOptions,
 	ssrOutputChunkNames: string[],
-	contentFileNames: string[] | undefined,
 	internals: BuildInternals,
 ) {
 	const out = getOutDirWithinCwd(opts.settings.config.outDir);
 	// The SSR output chunks for Astro are all .mjs files
 	const files = ssrOutputChunkNames
-		.filter((f) => f.endsWith('.mjs'))
-		.concat(contentFileNames ?? []);
+		.filter((f) => f.endsWith('.mjs'));
 	if (internals.manifestFileName) {
 		files.push(internals.manifestFileName);
 	}
@@ -370,7 +366,11 @@ async function cleanServerOutput(
 		await Promise.all(
 			files.map(async (filename) => {
 				const url = new URL(filename, out);
-				await fs.promises.rm(url);
+				const map = new URL(url + '.map');
+				await Promise.all([
+					fs.promises.rm(url),
+					fs.promises.rm(new URL(map)).catch((e) => {})
+				]);
 			}),
 		);
 
@@ -426,6 +426,8 @@ async function ssrMoveAssets(opts: StaticBuildOptions) {
 		cwd: fileURLToPath(serverAssets),
 	});
 
+	console.log("FILES2", files);
+
 	if (files.length > 0) {
 		await Promise.all(
 			files.map(async function moveAsset(filename) {

@@ -167,6 +167,14 @@ describe('Astro basic build', () => {
 		assert.doesNotMatch(otherHtml, /<style/);
 	});
 
+	it('server sourcemaps not included in output', async () => {
+		const files = await fixture.readdir('/');
+		const hasSourcemaps = files.some(fileName => {
+			return fileName.endsWith('.map');
+		});
+		assert.equal(hasSourcemaps, false, 'no sourcemap files in output');
+	});
+
 	describe('preview', () => {
 		it('returns 200 for valid URLs', async () => {
 			const result = await fixture.fetch('/');

@@ -6,5 +6,10 @@ import { defineConfig } from 'astro/config';
 export default defineConfig({
 	integrations: [preact(), mdx()],
 	// make sure CLI flags have precedence
-  server: () => ({ port: 4321 })
+  server: () => ({ port: 4321 }),
+  vite: {
+  	build: {
+  		sourcemap: true,
+  	}
+  }
 });

@@ -17,7 +17,13 @@ describe('Sourcemap', async () => {
 	});
 
 	it('Builds non-empty sourcemap', async () => {
-		const map = await fixture.readFile('renderers.mjs.map');
-		assert.equal(map.includes('"sources":[]'), false);
+		const assets = await fixture.readdir('/_astro');
+		const maps = assets.filter(file => file.endsWith('.map'));
+		assert.ok(maps.length > 0, 'got source maps');
+		for(const mapName of maps) {
+			const filename = `/_astro/${mapName}`;
+			const map = await fixture.readFile(filename);
+			assert.equal(map.includes('"sources":[]'), false);
+		}
 	});
 });

@@ -0,0 +1,5 @@
+---
+'astro': patch
+---
+
+Remove all assets created from the server build

@@ -205,7 +205,7 @@ class AstroBuilder {
 			key: keyPromise,
 		};
 
-		const { internals, ssrOutputChunkNames, ssrOutputAssetNames, contentFileNames } =
+		const { internals, ssrOutputChunkNames, contentFileNames } =
 			await viteBuild(opts);
 
 		const hasServerIslands = this.settings.serverIslandNameMap.size > 0;
@@ -214,7 +214,7 @@ class AstroBuilder {
 			throw new AstroError(AstroErrorData.NoAdapterInstalledServerIslands);
 		}
 
-		await staticBuild(opts, internals, ssrOutputChunkNames, ssrOutputAssetNames, contentFileNames);
+		await staticBuild(opts, internals, ssrOutputChunkNames, contentFileNames);
 
 		// Write any additionally generated assets to disk.
 		this.timer.assetsStart = performance.now();

@@ -104,26 +104,21 @@ export async function viteBuild(opts: StaticBuildOptions) {
 	// For static builds, the SSR output won't be needed anymore after page generation.
 	// We keep track of the names here so we only remove these specific files when finished.
 	const ssrOutputChunkNames: string[] = [];
-	const ssrOutputAssetNames: string[] = [];
 	for (const output of ssrOutputs) {
 		for (const chunk of output.output) {
 			if (chunk.type === 'chunk') {
 				ssrOutputChunkNames.push(chunk.fileName);
 			}
-			if (chunk.type === 'asset') {
-				ssrOutputAssetNames.push(chunk.fileName);
-			}
 		}
 	}
 
-	return { internals, ssrOutputChunkNames, ssrOutputAssetNames, contentFileNames };
+	return { internals, ssrOutputChunkNames, contentFileNames };
 }
 
 export async function staticBuild(
 	opts: StaticBuildOptions,
 	internals: BuildInternals,
 	ssrOutputChunkNames: string[],
-	ssrOutputAssetNames: string[],
 	contentFileNames?: string[],
 ) {
 	const { settings } = opts;
@@ -136,7 +131,7 @@ export async function staticBuild(
 		settings.timer.start('Server generate');
 		await generatePages(opts, internals);
 		await cleanStaticOutput(opts, internals);
-		await ssrMoveAssets(opts, ssrOutputAssetNames);
+		await ssrMoveAssets(opts);
 		settings.timer.end('Server generate');
 	}
 }
@@ -417,21 +412,28 @@ export async function copyFiles(fromFolder: URL, toFolder: URL, includeDotfiles
 	);
 }
 
-async function ssrMoveAssets(opts: StaticBuildOptions, ssrOutputAssetNames: string[]) {
+async function ssrMoveAssets(opts: StaticBuildOptions) {
 	opts.logger.info('build', 'Rearranging server assets...');
 	const serverRoot =
 		opts.settings.buildOutput === 'static'
 			? opts.settings.config.build.client
 			: opts.settings.config.build.server;
 	const clientRoot = opts.settings.config.build.client;
-	if (ssrOutputAssetNames.length > 0) {
+	const assets = opts.settings.config.build.assets;
+	const serverAssets = new URL(`./${assets}/`, appendForwardSlash(serverRoot.toString()));
+	const clientAssets = new URL(`./${assets}/`, appendForwardSlash(clientRoot.toString()));
+	const files = await glob(`**/*`, {
+		cwd: fileURLToPath(serverAssets),
+	});
+
+	if (files.length > 0) {
 		await Promise.all(
-			ssrOutputAssetNames.map(async function moveAsset(filename) {
-				const currentUrl = new URL(filename, appendForwardSlash(serverRoot.toString()));
-				const clientUrl = new URL(filename, appendForwardSlash(clientRoot.toString()));
+			files.map(async function moveAsset(filename) {
+				const currentUrl = new URL(filename, appendForwardSlash(serverAssets.toString()));
+				const clientUrl = new URL(filename, appendForwardSlash(clientAssets.toString()));
 				const dir = new URL(path.parse(clientUrl.href).dir);
 				// It can't find this file because the user defines a custom path
-				// that includes the folder paths in `assetFileNames`
+				// that includes the folder paths in `assetFileNames
 				if (!fs.existsSync(dir)) await fs.promises.mkdir(dir, { recursive: true });
 				return fs.promises.rename(currentUrl, clientUrl);
 			}),

@@ -2,7 +2,7 @@ import assert from 'node:assert/strict';
 import { before, describe, it } from 'node:test';
 import { loadFixture } from './test-utils.js';
 
-describe('custom assets name function', () => {
+describe('custom the assets name function', () => {
 	/** @type {import('./test-utils').Fixture} */
 	let fixture;
 
@@ -14,15 +14,9 @@ describe('custom assets name function', () => {
 		await fixture.build();
 	});
 
-	it('should load CSS file from custom client assets path', async () => {
-		const files = await fixture.readdir('/client/assets/css');
-		const cssFile = files.find((file) => file === 'a.css');
-		assert.ok(cssFile, 'Expected CSS file to exist at client/assets/css/a.css');
-	});
-
-	it('should load image file from custom client assets path', async () => {
-		const files = await fixture.readdir('/client/imgAssets');
-		const imgFile = files.find((file) => file === 'penguin1.jpg');
-		assert.ok(imgFile, 'Expected image file to exist at client/imgAssets/penguin1.jpg');
+	it('It cant find this file cause the node throws an error if the users custom a path that includes the folder path', async () => {
+		const csslength = await fixture.readFile('client/assets/css/a.css');
+		/** @type {Set<string>} */
+		assert.equal(!!csslength, true);
 	});
 });

@@ -18,14 +18,14 @@ export default defineConfig({
             const { ext, dir, base } = path.parse(option.name);
 
             if (ext == ".css") return path.join(dir, "assets/css", 'a.css');
-            return "imgAssets/[name].[ext]";
+            return "assets/img/[name].[ext]";
           }
         }
       }
     }
   },
   build: {
-    assets: 'assetsDir'
+    assets: 'assets'
   },
   output: "server",
   adapter: node({

@@ -1,6 +1,5 @@
 ---
 const title = 'My App';
-import p1Url from '../images/penguin1.jpg';
 ---
 
 <html>
@@ -9,7 +8,6 @@ import p1Url from '../images/penguin1.jpg';
 </head>
 <body>
   <h1>{title}</h1>
-	<img src={p1Url.src}/>
 </body>
 </html>