@askrjs/askr 0.0.27 → 0.0.29

package/dist/ssg/write-static-files.js

@@ -0,0 +1,73 @@
+import "./route-utils.js";
+import * as fs from "node:fs/promises";
+import * as fsSync from "node:fs";
+import * as pathModule from "node:path";
+//#region src/ssg/write-static-files.ts
+/**
+* File I/O for Static Site Generation
+*
+* Uses Node.js fs/path modules to write rendered HTML files to disk.
+* This module is Node-only and not intended for browser builds.
+*/
+/**
+* Write rendered routes to disk
+* Creates outputDir/{route-path}/index.html structure
+*/
+async function writeStaticFiles(results, outputDir, options = {}) {
+	await fs.mkdir(outputDir, { recursive: true });
+	for (const result of results) {
+		if (result.status !== "removed") continue;
+		const fullPath = pathModule.join(outputDir, result.filePath);
+		if (fsSync.existsSync(fullPath)) {
+			await fs.rm(fullPath, { force: true });
+			await pruneEmptyDirs(pathModule.dirname(fullPath), outputDir);
+		}
+	}
+	const pendingWrites = [];
+	for (let index = 0; index < results.length; index += 1) {
+		const result = results[index];
+		if (result.status === "error") {
+			console.warn(`Skipping failed route: ${result.path} - ${result.error}`);
+			continue;
+		}
+		if (result.status === "success" && result.written) pendingWrites.push(result);
+	}
+	const directories = [];
+	const seenDirectories = /* @__PURE__ */ new Set();
+	for (const result of pendingWrites) {
+		const dir = pathModule.dirname(pathModule.join(outputDir, result.filePath));
+		if (!seenDirectories.has(dir)) {
+			seenDirectories.add(dir);
+			directories.push(dir);
+		}
+	}
+	for (const dir of directories) await fs.mkdir(dir, { recursive: true });
+	const concurrency = Math.max(1, Math.min(options.concurrency ?? 8, pendingWrites.length || 1));
+	let nextIndex = 0;
+	const worker = async () => {
+		while (true) {
+			const current = nextIndex;
+			nextIndex += 1;
+			if (current >= pendingWrites.length) return;
+			const result = pendingWrites[current];
+			const fullPath = pathModule.join(outputDir, result.filePath);
+			await fs.writeFile(fullPath, result.html, "utf8");
+		}
+	};
+	await Promise.all(Array.from({ length: concurrency }, () => worker()));
+}
+async function pruneEmptyDirs(startDir, rootDir) {
+	let current = startDir;
+	const normalizedRoot = pathModule.resolve(rootDir);
+	while (current.startsWith(normalizedRoot)) {
+		if (!fsSync.existsSync(current)) break;
+		if ((await fs.readdir(current)).length > 0) break;
+		await fs.rmdir(current);
+		if (pathModule.resolve(current) === normalizedRoot) break;
+		current = pathModule.dirname(current);
+	}
+}
+//#endregion
+export { writeStaticFiles };
+
+//# sourceMappingURL=write-static-files.js.map

package/dist/ssg/write-static-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-static-files.js","names":[],"sources":["../../src/ssg/write-static-files.ts"],"sourcesContent":["/**\n * File I/O for Static Site Generation\n *\n * Uses Node.js fs/path modules to write rendered HTML files to disk.\n * This module is Node-only and not intended for browser builds.\n */\n\nimport * as fs from 'node:fs/promises';\nimport * as fsSync from 'node:fs';\nimport * as pathModule from 'node:path';\nimport type { RouteRenderResult } from './types';\n\ninterface WriteStaticFilesOptions {\n  concurrency?: number;\n}\n\n/**\n * Write rendered routes to disk\n * Creates outputDir/{route-path}/index.html structure\n */\nexport async function writeStaticFiles(\n  results: RouteRenderResult[],\n  outputDir: string,\n  options: WriteStaticFilesOptions = {}\n): Promise<void> {\n  await fs.mkdir(outputDir, { recursive: true });\n\n  for (const result of results) {\n    if (result.status !== 'removed') {\n      continue;\n    }\n\n    const fullPath = pathModule.join(outputDir, result.filePath);\n    if (fsSync.existsSync(fullPath)) {\n      await fs.rm(fullPath, { force: true });\n      await pruneEmptyDirs(pathModule.dirname(fullPath), outputDir);\n    }\n  }\n\n  const pendingWrites: RouteRenderResult[] = [];\n  for (let index = 0; index < results.length; index += 1) {\n    const result = results[index];\n    if (result.status === 'error') {\n      console.warn(`Skipping failed route: ${result.path} - ${result.error}`);\n      continue;\n    }\n    if (result.status === 'success' && result.written) {\n      pendingWrites.push(result);\n    }\n  }\n\n  const directories: string[] = [];\n  const seenDirectories = new Set<string>();\n  for (const result of pendingWrites) {\n    const dir = pathModule.dirname(pathModule.join(outputDir, result.filePath));\n    if (!seenDirectories.has(dir)) {\n      seenDirectories.add(dir);\n      directories.push(dir);\n    }\n  }\n\n  for (const dir of directories) {\n    await fs.mkdir(dir, { recursive: true });\n  }\n\n  const concurrency = Math.max(\n    1,\n    Math.min(options.concurrency ?? 8, pendingWrites.length || 1)\n  );\n  let nextIndex = 0;\n\n  const worker = async () => {\n    while (true) {\n      const current = nextIndex;\n      nextIndex += 1;\n      if (current >= pendingWrites.length) {\n        return;\n      }\n\n      const result = pendingWrites[current];\n      const fullPath = pathModule.join(outputDir, result.filePath);\n      await fs.writeFile(fullPath, result.html, 'utf8');\n    }\n  };\n\n  await Promise.all(Array.from({ length: concurrency }, () => worker()));\n}\n\n/**\n * Get the output file path for a route\n * E.g., \"/blog/post\" -> \"blog/post\" or \"/\" -> \"\"\n */\nexport { getOutputFilePath } from './route-utils';\n\nasync function pruneEmptyDirs(\n  startDir: string,\n  rootDir: string\n): Promise<void> {\n  let current = startDir;\n  const normalizedRoot = pathModule.resolve(rootDir);\n\n  while (current.startsWith(normalizedRoot)) {\n    if (!fsSync.existsSync(current)) {\n      break;\n    }\n\n    if ((await fs.readdir(current)).length > 0) {\n      break;\n    }\n\n    await fs.rmdir(current);\n    if (pathModule.resolve(current) === normalizedRoot) {\n      break;\n    }\n    current = pathModule.dirname(current);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBACpB,SACA,WACA,UAAmC,EAAE,EACtB;AACf,OAAM,GAAG,MAAM,WAAW,EAAE,WAAW,MAAM,CAAC;AAE9C,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,WAAW,UACpB;EAGF,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;AAC5D,MAAI,OAAO,WAAW,SAAS,EAAE;AAC/B,SAAM,GAAG,GAAG,UAAU,EAAE,OAAO,MAAM,CAAC;AACtC,SAAM,eAAe,WAAW,QAAQ,SAAS,EAAE,UAAU;;;CAIjE,MAAM,gBAAqC,EAAE;AAC7C,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;EACtD,MAAM,SAAS,QAAQ;AACvB,MAAI,OAAO,WAAW,SAAS;AAC7B,WAAQ,KAAK,0BAA0B,OAAO,KAAK,KAAK,OAAO,QAAQ;AACvE;;AAEF,MAAI,OAAO,WAAW,aAAa,OAAO,QACxC,eAAc,KAAK,OAAO;;CAI9B,MAAM,cAAwB,EAAE;CAChC,MAAM,kCAAkB,IAAI,KAAa;AACzC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,WAAW,QAAQ,WAAW,KAAK,WAAW,OAAO,SAAS,CAAC;AAC3E,MAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE;AAC7B,mBAAgB,IAAI,IAAI;AACxB,eAAY,KAAK,IAAI;;;AAIzB,MAAK,MAAM,OAAO,YAChB,OAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;CAG1C,MAAM,cAAc,KAAK,IACvB,GACA,KAAK,IAAI,QAAQ,eAAe,GAAG,cAAc,UAAU,EAAE,CAC9D;CACD,IAAI,YAAY;CAEhB,MAAM,SAAS,YAAY;AACzB,SAAO,MAAM;GACX,MAAM,UAAU;AAChB,gBAAa;AACb,OAAI,WAAW,cAAc,OAC3B;GAGF,MAAM,SAAS,cAAc;GAC7B,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;AAC5D,SAAM,GAAG,UAAU,UAAU,OAAO,MAAM,OAAO;;;AAIrD,OAAM,QAAQ,IAAI,MAAM,KAAK,EAAE,QAAQ,aAAa,QAAQ,QAAQ,CAAC,CAAC;;AASxE,eAAe,eACb,UACA,SACe;CACf,IAAI,UAAU;CACd,MAAM,iBAAiB,WAAW,QAAQ,QAAQ;AAElD,QAAO,QAAQ,WAAW,eAAe,EAAE;AACzC,MAAI,CAAC,OAAO,WAAW,QAAQ,CAC7B;AAGF,OAAK,MAAM,GAAG,QAAQ,QAAQ,EAAE,SAAS,EACvC;AAGF,QAAM,GAAG,MAAM,QAAQ;AACvB,MAAI,WAAW,QAAQ,QAAQ,KAAK,eAClC;AAEF,YAAU,WAAW,QAAQ,QAAQ"}

package/dist/ssr/attrs.js

@@ -1 +1,93 @@
-import{styleObjToCss as d,needsEscapeAttr as a,escapeAttr as l}from"./escape.js";function h(r){return r.length>=3&&r.charCodeAt(0)===111&&r.charCodeAt(1)===110&&r.charCodeAt(2)>=65&&r.charCodeAt(2)<=90}function y(r,e){if(!r||typeof r!="object")return;const c=r;for(const i in c){const o=c[i];if(i==="children"||i==="key"||i==="ref"||i==="dangerouslySetInnerHTML"||h(i)||i.charCodeAt(0)===95)continue;const s=i==="className"?"class":i;if(s==="style"){const t=typeof o=="string"?o:d(o);if(!t)continue;e.write(' style="'),a(t)?e.write(l(t)):e.write(t),e.write('"');continue}if(o===!0){e.write(" "),e.write(s);continue}if(o===!1||o===null||o===void 0)continue;const n=String(o);e.write(" "),e.write(s),e.write('="'),a(n)?e.write(l(n)):e.write(n),e.write('"')}}function g(r,e){if(!r||typeof r!="object")return e?.returnDangerousHtml?{attrs:""}:"";const c=[];let i;const o=r;for(const n in o){const t=o[n];if(n==="children"||n==="key"||n==="ref")continue;if(n==="dangerouslySetInnerHTML"){t&&typeof t=="object"&&"__html"in t&&(i=String(t.__html));continue}if(h(n)||n.charCodeAt(0)===95)continue;const f=n==="class"||n==="className"?"class":n;if(f==="style"){const u=typeof t=="string"?t:d(t);if(u===null||u==="")continue;c.push(` style="${l(u)}"`);continue}if(t===!0)c.push(` ${f}`);else{if(t===!1||t===null||t===void 0)continue;{const u=String(t);c.push(` ${f}="${l(u)}"`)}}}const s=c.join("");return e?.returnDangerousHtml?{attrs:s,dangerousHtml:i}:s}export{g as renderAttrs,y as renderAttrsDirect};
+import { escapeAttr, needsEscapeAttr, styleObjToCss } from "./escape.js";
+//#region src/ssr/attrs.ts
+const ESCAPED_ATTR_VALUE_CACHE_LIMIT = 512;
+const escapedAttrValueCache = /* @__PURE__ */ new Map();
+function isEventHandler(key) {
+	return key.length >= 3 && key.charCodeAt(0) === 111 && key.charCodeAt(1) === 110 && key.charCodeAt(2) >= 65 && key.charCodeAt(2) <= 90;
+}
+function getEscapedAttrValue(value) {
+	if (value.length > 64) return escapeAttr(value);
+	const cached = escapedAttrValueCache.get(value);
+	if (cached !== void 0) return cached;
+	const escaped = escapeAttr(value);
+	if (escaped === value) return value;
+	if (escapedAttrValueCache.size >= ESCAPED_ATTR_VALUE_CACHE_LIMIT) escapedAttrValueCache.clear();
+	escapedAttrValueCache.set(value, escaped);
+	return escaped;
+}
+/**
+* Render attributes directly to a sink without intermediate string allocations.
+* This is the hot path for streaming SSR.
+*/
+function renderAttrsDirect(props, sink) {
+	if (!props || typeof props !== "object") return;
+	const propsObj = props;
+	for (const key in propsObj) {
+		const value = propsObj[key];
+		if (key === "children" || key === "key" || key === "ref" || key === "dangerouslySetInnerHTML") continue;
+		if (isEventHandler(key)) continue;
+		if (key.charCodeAt(0) === 95) continue;
+		const attrName = key === "className" ? "class" : key;
+		if (attrName === "style") {
+			const css = typeof value === "string" ? value : styleObjToCss(value);
+			if (!css) continue;
+			sink.write(" style=\"");
+			if (needsEscapeAttr(css)) sink.write(getEscapedAttrValue(css));
+			else sink.write(css);
+			sink.write("\"");
+			continue;
+		}
+		if (value === true) {
+			sink.write(" ");
+			sink.write(attrName);
+			continue;
+		}
+		if (value === false || value === null || value === void 0) continue;
+		const strValue = String(value);
+		sink.write(" ");
+		sink.write(attrName);
+		sink.write("=\"");
+		sink.write(getEscapedAttrValue(strValue));
+		sink.write("\"");
+	}
+}
+function renderAttrs(props, opts) {
+	if (!props || typeof props !== "object") return opts?.returnDangerousHtml ? { attrs: "" } : "";
+	const attrParts = [];
+	let dangerousHtml;
+	const propsObj = props;
+	for (const key in propsObj) {
+		const value = propsObj[key];
+		if (key === "children") continue;
+		if (key === "key" || key === "ref") continue;
+		if (key === "dangerouslySetInnerHTML") {
+			if (value && typeof value === "object" && "__html" in value) dangerousHtml = String(value.__html);
+			continue;
+		}
+		if (isEventHandler(key)) continue;
+		if (key.charCodeAt(0) === 95) continue;
+		const attrName = key === "class" || key === "className" ? "class" : key;
+		if (attrName === "style") {
+			const css = typeof value === "string" ? value : styleObjToCss(value);
+			if (css === null || css === "") continue;
+			attrParts.push(` style="${getEscapedAttrValue(css)}"`);
+			continue;
+		}
+		if (value === true) attrParts.push(` ${attrName}`);
+		else if (value === false || value === null || value === void 0) continue;
+		else {
+			const strValue = String(value);
+			attrParts.push(` ${attrName}="${getEscapedAttrValue(strValue)}"`);
+		}
+	}
+	const result = attrParts.join("");
+	if (opts?.returnDangerousHtml) return {
+		attrs: result,
+		dangerousHtml
+	};
+	return result;
+}
+//#endregion
+export { renderAttrs, renderAttrsDirect };
+
+//# sourceMappingURL=attrs.js.map

package/dist/ssr/attrs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attrs.js","names":[],"sources":["../../src/ssr/attrs.ts"],"sourcesContent":["/**\n * HTML attribute rendering for SSR\n */\n\nimport type { Props } from '../common/props';\nimport type { RenderSink } from './sink';\nimport { escapeAttr, needsEscapeAttr, styleObjToCss } from './escape';\n\n/** Result of renderAttrs including any raw HTML from dangerouslySetInnerHTML */\nexport type AttrsResult = {\n  attrs: string;\n  dangerousHtml?: string;\n};\n\nconst ESCAPED_ATTR_VALUE_CACHE_LIMIT = 512;\nconst escapedAttrValueCache = new Map<string, string>();\n\n// Fast check for event handler pattern (on + uppercase letter)\nfunction isEventHandler(key: string): boolean {\n  return (\n    key.length >= 3 &&\n    key.charCodeAt(0) === 111 && // 'o'\n    key.charCodeAt(1) === 110 && // 'n'\n    key.charCodeAt(2) >= 65 &&\n    key.charCodeAt(2) <= 90 // 'A'-'Z'\n  );\n}\n\nfunction getEscapedAttrValue(value: string): string {\n  if (value.length > 64) {\n    return escapeAttr(value);\n  }\n\n  const cached = escapedAttrValueCache.get(value);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  const escaped = escapeAttr(value);\n  // Skip caching strings that required no escaping — same reference returned,\n  // no point occupying cache slots with identity entries.\n  if (escaped === value) return value;\n  if (escapedAttrValueCache.size >= ESCAPED_ATTR_VALUE_CACHE_LIMIT) {\n    escapedAttrValueCache.clear();\n  }\n  escapedAttrValueCache.set(value, escaped);\n  return escaped;\n}\n\n/**\n * Render attributes directly to a sink without intermediate string allocations.\n * This is the hot path for streaming SSR.\n */\nexport function renderAttrsDirect(\n  props: Props | undefined,\n  sink: Pick<RenderSink, 'write'>\n): void {\n  if (!props || typeof props !== 'object') return;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip special props\n    if (\n      key === 'children' ||\n      key === 'key' ||\n      key === 'ref' ||\n      key === 'dangerouslySetInnerHTML'\n    )\n      continue;\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute\n    const attrName = key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (!css) continue;\n      sink.write(' style=\"');\n      // Escape inline - most style values don't need escaping\n      if (needsEscapeAttr(css)) {\n        sink.write(getEscapedAttrValue(css));\n      } else {\n        sink.write(css);\n      }\n      sink.write('\"');\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      sink.write(' ');\n      sink.write(attrName);\n      continue;\n    }\n\n    if (value === false || value === null || value === undefined) continue;\n\n    // Regular attributes\n    const strValue = String(value);\n    sink.write(' ');\n    sink.write(attrName);\n    sink.write('=\"');\n    // escapeAttr returns the original string when nothing needs escaping,\n    // so no separate needsEscapeAttr pre-scan is required.\n    sink.write(getEscapedAttrValue(strValue));\n    sink.write('\"');\n  }\n}\n\n/**\n * Render attributes to HTML string, excluding event handlers\n * Optimized for minimal allocations using push-based approach\n *\n * Returns both the attribute string and any dangerouslySetInnerHTML content.\n */\nexport function renderAttrs(props?: Props): string;\nexport function renderAttrs(\n  props: Props | undefined,\n  opts: { returnDangerousHtml: true }\n): AttrsResult;\nexport function renderAttrs(\n  props?: Props,\n  opts?: { returnDangerousHtml?: boolean }\n): string | AttrsResult {\n  if (!props || typeof props !== 'object') {\n    return opts?.returnDangerousHtml ? { attrs: '' } : '';\n  }\n\n  const attrParts: string[] = [];\n  let dangerousHtml: string | undefined;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip children in attrs\n    if (key === 'children') continue;\n\n    // Skip internal identity refs (framework-only)\n    if (key === 'key' || key === 'ref') continue;\n\n    // Handle dangerouslySetInnerHTML\n    if (key === 'dangerouslySetInnerHTML') {\n      if (value && typeof value === 'object' && '__html' in (value as object)) {\n        dangerousHtml = String((value as { __html: unknown }).__html);\n      }\n      continue;\n    }\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute (`class` preferred, accept `className` for compatibility)\n    const attrName = key === 'class' || key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (css === null || css === '') continue;\n      attrParts.push(` style=\"${getEscapedAttrValue(css)}\"`);\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      attrParts.push(` ${attrName}`);\n    } else if (value === false || value === null || value === undefined) {\n      continue;\n    } else {\n      const strValue = String(value);\n      attrParts.push(` ${attrName}=\"${getEscapedAttrValue(strValue)}\"`);\n    }\n  }\n\n  const result = attrParts.join('');\n\n  if (opts?.returnDangerousHtml) {\n    return { attrs: result, dangerousHtml };\n  }\n  return result;\n}\n"],"mappings":";;AAcA,MAAM,iCAAiC;AACvC,MAAM,wCAAwB,IAAI,KAAqB;AAGvD,SAAS,eAAe,KAAsB;AAC5C,QACE,IAAI,UAAU,KACd,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,IAAI,MACrB,IAAI,WAAW,EAAE,IAAI;;AAIzB,SAAS,oBAAoB,OAAuB;AAClD,KAAI,MAAM,SAAS,GACjB,QAAO,WAAW,MAAM;CAG1B,MAAM,SAAS,sBAAsB,IAAI,MAAM;AAC/C,KAAI,WAAW,OACb,QAAO;CAGT,MAAM,UAAU,WAAW,MAAM;AAGjC,KAAI,YAAY,MAAO,QAAO;AAC9B,KAAI,sBAAsB,QAAQ,+BAChC,uBAAsB,OAAO;AAE/B,uBAAsB,IAAI,OAAO,QAAQ;AACzC,QAAO;;;;;;AAOT,SAAgB,kBACd,OACA,MACM;AACN,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU;CAEzC,MAAM,WAAW;AACjB,MAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;AAGvB,MACE,QAAQ,cACR,QAAQ,SACR,QAAQ,SACR,QAAQ,0BAER;AAGF,MAAI,eAAe,IAAI,CAAE;AAGzB,MAAI,IAAI,WAAW,EAAE,KAAK,GAAI;EAG9B,MAAM,WAAW,QAAQ,cAAc,UAAU;AAGjD,MAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;AACpE,OAAI,CAAC,IAAK;AACV,QAAK,MAAM,YAAW;AAEtB,OAAI,gBAAgB,IAAI,CACtB,MAAK,MAAM,oBAAoB,IAAI,CAAC;OAEpC,MAAK,MAAM,IAAI;AAEjB,QAAK,MAAM,KAAI;AACf;;AAIF,MAAI,UAAU,MAAM;AAClB,QAAK,MAAM,IAAI;AACf,QAAK,MAAM,SAAS;AACpB;;AAGF,MAAI,UAAU,SAAS,UAAU,QAAQ,UAAU,OAAW;EAG9D,MAAM,WAAW,OAAO,MAAM;AAC9B,OAAK,MAAM,IAAI;AACf,OAAK,MAAM,SAAS;AACpB,OAAK,MAAM,MAAK;AAGhB,OAAK,MAAM,oBAAoB,SAAS,CAAC;AACzC,OAAK,MAAM,KAAI;;;AAenB,SAAgB,YACd,OACA,MACsB;AACtB,KAAI,CAAC,SAAS,OAAO,UAAU,SAC7B,QAAO,MAAM,sBAAsB,EAAE,OAAO,IAAI,GAAG;CAGrD,MAAM,YAAsB,EAAE;CAC9B,IAAI;CAEJ,MAAM,WAAW;AACjB,MAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;AAGvB,MAAI,QAAQ,WAAY;AAGxB,MAAI,QAAQ,SAAS,QAAQ,MAAO;AAGpC,MAAI,QAAQ,2BAA2B;AACrC,OAAI,SAAS,OAAO,UAAU,YAAY,YAAa,MACrD,iBAAgB,OAAQ,MAA8B,OAAO;AAE/D;;AAIF,MAAI,eAAe,IAAI,CAAE;AAGzB,MAAI,IAAI,WAAW,EAAE,KAAK,GAAI;EAG9B,MAAM,WAAW,QAAQ,WAAW,QAAQ,cAAc,UAAU;AAGpE,MAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;AACpE,OAAI,QAAQ,QAAQ,QAAQ,GAAI;AAChC,aAAU,KAAK,WAAW,oBAAoB,IAAI,CAAC,GAAG;AACtD;;AAIF,MAAI,UAAU,KACZ,WAAU,KAAK,IAAI,WAAW;WACrB,UAAU,SAAS,UAAU,QAAQ,UAAU,OACxD;OACK;GACL,MAAM,WAAW,OAAO,MAAM;AAC9B,aAAU,KAAK,IAAI,SAAS,IAAI,oBAAoB,SAAS,CAAC,GAAG;;;CAIrE,MAAM,SAAS,UAAU,KAAK,GAAG;AAEjC,KAAI,MAAM,oBACR,QAAO;EAAE,OAAO;EAAQ;EAAe;AAEzC,QAAO"}

package/dist/ssr/context.d.ts

@@ -1,47 +1,46 @@
-/**
- * SSR Context Management
- *
- * Provides concurrency-safe context for server-side rendering.
- * In Node.js, uses AsyncLocalStorage for isolation between concurrent requests.
- * Falls back to stack-based approach in non-Node environments.
- */
-import { SSRDataMissingError } from './errors';
-export type { SSRData } from '../common/ssr';
-import type { SSRData } from '../common/ssr';
-export interface RenderContext {
-    url: string;
-    seed: number;
-    data?: SSRData;
-    params?: Record<string, string>;
-    signal?: AbortSignal;
-    keyCounter: number;
-    renderData: Record<string, unknown> | null;
+import { Route, RouteAuthOptions } from "../common/router.js";
+import { SSRData } from "../common/ssr.js";
+import { SSRDataMissingError } from "../common/ssr-errors.js";
+//#region src/ssr/context.d.ts
+interface RenderContext {
+  url: string;
+  seed: number;
+  data?: SSRData;
+  params?: Record<string, string>;
+  routes?: readonly Route[];
+  routeAuth?: RouteAuthOptions;
+  signal?: AbortSignal;
+  keyCounter: number;
+  renderData: Record<string, unknown> | null;
 }
-export type SSRContext = RenderContext;
-export declare function createRenderContext(seed?: number, opts?: {
-    url?: string;
-    data?: SSRData;
-    params?: Record<string, string>;
-    signal?: AbortSignal;
+type SSRContext = RenderContext;
+declare function createRenderContext(seed?: number, opts?: {
+  url?: string;
+  data?: SSRData;
+  params?: Record<string, string>;
+  routes?: readonly Route[];
+  routeAuth?: RouteAuthOptions;
+  signal?: AbortSignal;
 }): RenderContext;
 /**
  * Run a function with the given render context.
  * Concurrency-safe in Node.js via AsyncLocalStorage.
  */
-export declare function withRenderContext<T>(ctx: RenderContext, fn: () => T): T;
+declare function withRenderContext<T>(ctx: RenderContext, fn: () => T): T;
 /**
  * Get the current render context.
  * Returns null if not inside a render.
  */
-export declare function getRenderContext(): RenderContext | null;
-export declare const getSSRContext: typeof getRenderContext;
-export declare const withSSRContext: typeof withRenderContext;
-export declare const getCurrentSSRContext: typeof getRenderContext;
-export declare function runWithSSRContext<T>(ctx: RenderContext, fn: () => T): T;
+declare function getRenderContext(): RenderContext | null;
+declare const getSSRContext: typeof getRenderContext;
+declare const withSSRContext: typeof withRenderContext;
+declare const getCurrentSSRContext: typeof getRenderContext;
+declare function runWithSSRContext<T>(ctx: RenderContext, fn: () => T): T;
 /**
  * Centralized SSR enforcement helper — throws a consistent error when async
  * data is encountered during synchronous SSR.
  */
-export declare function throwSSRDataMissing(): never;
-export { SSRDataMissingError };
+declare function throwSSRDataMissing(): never;
+//#endregion
+export { RenderContext };
 //# sourceMappingURL=context.d.ts.map

package/dist/ssr/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/ssr/context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5C;AAGD,MAAM,MAAM,UAAU,GAAG,aAAa,CAAC;AA0BvC,wBAAgB,mBAAmB,CACjC,IAAI,SAAQ,EACZ,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;CACjB,GACL,aAAa,CAUf;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAYvE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,GAAG,IAAI,CAKvD;AAGD,eAAO,MAAM,aAAa,yBAAmB,CAAC;AAC9C,eAAO,MAAM,cAAc,0BAAoB,CAAC;AAChD,eAAO,MAAM,oBAAoB,yBAAmB,CAAC;AAErD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAGvE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,KAAK,CAE3C;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}
+{"version":3,"file":"context.d.ts","names":[],"sources":["../../src/ssr/context.ts"],"mappings":";;;;UAeiB,aAAA;EACf,GAAA;EACA,IAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;EAET,UAAA;EACA,UAAA,EAAY,MAAA;AAAA;AAAA,KAIF,UAAA,GAAa,aAAA;AAAA,iBA0BT,mBAAA,CACd,IAAA,WACA,IAAA;EACE,GAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;AAAA,IAEV,aAAA;;;;AApCH;iBAsDgB,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;;;;AA5BvE;iBA8CgB,gBAAA,CAAA,GAAoB,aAAA;AAAA,cAQvB,aAAA,SAAa,gBAAA;AAAA,cACb,cAAA,SAAc,iBAAA;AAAA,cACd,oBAAA,SAAoB,gBAAA;AAAA,iBAEjB,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;;;;;iBASvD,mBAAA,CAAA"}

package/dist/ssr/context.js

@@ -1 +1,63 @@
-import"./errors.js";import{SSRDataMissingError as c}from"../common/ssr-errors.js";let r=null;try{const t=require("async_hooks");t?.AsyncLocalStorage&&(r=new t.AsyncLocalStorage)}catch{}let e=null;function S(t=12345,n={}){return{url:n.url??"",seed:t,data:n.data,params:n.params,signal:n.signal,keyCounter:0,renderData:null}}function o(t,n){if(r)return r.run(t,n);const u=e;e=t;try{return n()}finally{e=u}}function a(){return r?r.getStore()??null:e}const s=a,g=o,f=a;function C(t,n){return o(t,n)}function R(){throw new c}export{c as SSRDataMissingError,S as createRenderContext,f as getCurrentSSRContext,a as getRenderContext,s as getSSRContext,C as runWithSSRContext,R as throwSSRDataMissing,o as withRenderContext,g as withSSRContext};
+import { __require } from "../_virtual/_rolldown/runtime.js";
+import { SSRDataMissingError } from "../common/ssr-errors.js";
+import "./errors.js";
+//#region src/ssr/context.ts
+/**
+* SSR Context Management
+*
+* Provides concurrency-safe context for server-side rendering.
+* In Node.js, uses AsyncLocalStorage for isolation between concurrent requests.
+* Falls back to stack-based approach in non-Node environments.
+*/
+let asyncLocalStorage = null;
+try {
+	const asyncHooks = __require("async_hooks");
+	if (asyncHooks?.AsyncLocalStorage) asyncLocalStorage = new asyncHooks.AsyncLocalStorage();
+} catch {}
+let fallbackStack = null;
+function createRenderContext(seed = 12345, opts = {}) {
+	return {
+		url: opts.url ?? "",
+		seed,
+		data: opts.data,
+		params: opts.params,
+		routes: opts.routes,
+		routeAuth: opts.routeAuth,
+		signal: opts.signal,
+		keyCounter: 0,
+		renderData: null
+	};
+}
+/**
+* Run a function with the given render context.
+* Concurrency-safe in Node.js via AsyncLocalStorage.
+*/
+function withRenderContext(ctx, fn) {
+	if (asyncLocalStorage) return asyncLocalStorage.run(ctx, fn);
+	const prev = fallbackStack;
+	fallbackStack = ctx;
+	try {
+		return fn();
+	} finally {
+		fallbackStack = prev;
+	}
+}
+/**
+* Get the current render context.
+* Returns null if not inside a render.
+*/
+function getRenderContext() {
+	if (asyncLocalStorage) return asyncLocalStorage.getStore() ?? null;
+	return fallbackStack;
+}
+/**
+* Centralized SSR enforcement helper — throws a consistent error when async
+* data is encountered during synchronous SSR.
+*/
+function throwSSRDataMissing() {
+	throw new SSRDataMissingError();
+}
+//#endregion
+export { createRenderContext, getRenderContext, throwSSRDataMissing, withRenderContext };
+
+//# sourceMappingURL=context.js.map

package/dist/ssr/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","names":[],"sources":["../../src/ssr/context.ts"],"sourcesContent":["/**\n * SSR Context Management\n *\n * Provides concurrency-safe context for server-side rendering.\n * In Node.js, uses AsyncLocalStorage for isolation between concurrent requests.\n * Falls back to stack-based approach in non-Node environments.\n */\n\nimport { SSRDataMissingError } from './errors';\n\nexport type { SSRData } from '../common/ssr';\nimport type { SSRData } from '../common/ssr';\nimport type { Route, RouteAuthOptions } from '../common/router';\n\n// Unified per-render context combining SSRContext and RenderContext\nexport interface RenderContext {\n  url: string;\n  seed: number;\n  data?: SSRData;\n  params?: Record<string, string>;\n  routes?: readonly Route[];\n  routeAuth?: RouteAuthOptions;\n  signal?: AbortSignal;\n  // Per-render key state (moved from render-keys.ts globals)\n  keyCounter: number;\n  renderData: Record<string, unknown> | null;\n}\n\n// Legacy alias for compatibility\nexport type SSRContext = RenderContext;\n\n// AsyncLocalStorage for Node.js concurrency safety\ntype AsyncLocalStorageType<T> = {\n  getStore(): T | undefined;\n  run<R>(store: T, fn: () => R): R;\n};\n\nlet asyncLocalStorage: AsyncLocalStorageType<RenderContext> | null = null;\n\n// Try to load AsyncLocalStorage at module init (Node.js only)\ntry {\n  // Dynamic require to avoid bundler issues in browser builds\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const asyncHooks = require('async_hooks');\n  if (asyncHooks?.AsyncLocalStorage) {\n    asyncLocalStorage =\n      new asyncHooks.AsyncLocalStorage() as AsyncLocalStorageType<RenderContext>;\n  }\n} catch {\n  // Not in Node.js or async_hooks unavailable - use fallback\n}\n\n// Fallback stack for non-Node environments\nlet fallbackStack: RenderContext | null = null;\n\nexport function createRenderContext(\n  seed = 12345,\n  opts: {\n    url?: string;\n    data?: SSRData;\n    params?: Record<string, string>;\n    routes?: readonly Route[];\n    routeAuth?: RouteAuthOptions;\n    signal?: AbortSignal;\n  } = {}\n): RenderContext {\n  return {\n    url: opts.url ?? '',\n    seed,\n    data: opts.data,\n    params: opts.params,\n    routes: opts.routes,\n    routeAuth: opts.routeAuth,\n    signal: opts.signal,\n    keyCounter: 0,\n    renderData: null,\n  };\n}\n\n/**\n * Run a function with the given render context.\n * Concurrency-safe in Node.js via AsyncLocalStorage.\n */\nexport function withRenderContext<T>(ctx: RenderContext, fn: () => T): T {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.run(ctx, fn);\n  }\n  // Fallback: stack-based (not concurrency-safe)\n  const prev = fallbackStack;\n  fallbackStack = ctx;\n  try {\n    return fn();\n  } finally {\n    fallbackStack = prev;\n  }\n}\n\n/**\n * Get the current render context.\n * Returns null if not inside a render.\n */\nexport function getRenderContext(): RenderContext | null {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.getStore() ?? null;\n  }\n  return fallbackStack;\n}\n\n// Legacy API aliases (deprecated, for backwards compatibility)\nexport const getSSRContext = getRenderContext;\nexport const withSSRContext = withRenderContext;\nexport const getCurrentSSRContext = getRenderContext;\n\nexport function runWithSSRContext<T>(ctx: RenderContext, fn: () => T): T {\n  // This was a separate path for sync detection; now unified\n  return withRenderContext(ctx, fn);\n}\n\n/**\n * Centralized SSR enforcement helper — throws a consistent error when async\n * data is encountered during synchronous SSR.\n */\nexport function throwSSRDataMissing(): never {\n  throw new SSRDataMissingError();\n}\n\nexport { SSRDataMissingError };\n"],"mappings":";;;;;;;;;;;AAqCA,IAAI,oBAAiE;AAGrE,IAAI;CAGF,MAAM,aAAA,UAAqB,cAAc;AACzC,KAAI,YAAY,kBACd,qBACE,IAAI,WAAW,mBAAmB;QAEhC;AAKR,IAAI,gBAAsC;AAE1C,SAAgB,oBACd,OAAO,OACP,OAOI,EAAE,EACS;AACf,QAAO;EACL,KAAK,KAAK,OAAO;EACjB;EACA,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,YAAY;EACZ,YAAY;EACb;;;;;;AAOH,SAAgB,kBAAqB,KAAoB,IAAgB;AACvE,KAAI,kBACF,QAAO,kBAAkB,IAAI,KAAK,GAAG;CAGvC,MAAM,OAAO;AACb,iBAAgB;AAChB,KAAI;AACF,SAAO,IAAI;WACH;AACR,kBAAgB;;;;;;;AAQpB,SAAgB,mBAAyC;AACvD,KAAI,kBACF,QAAO,kBAAkB,UAAU,IAAI;AAEzC,QAAO;;;;;;AAiBT,SAAgB,sBAA6B;AAC3C,OAAM,IAAI,qBAAqB"}

package/dist/ssr/errors.d.ts

@@ -1,6 +1,8 @@
-export { SSRDataMissingError } from '../common/ssr-errors';
-export declare class SSRInvariantError extends Error {
-    readonly code = "SSR_INVARIANT_VIOLATION";
-    constructor(message: string);
+import { SSRDataMissingError } from "../common/ssr-errors.js";
+
+//#region src/ssr/errors.d.ts
+declare class SSRInvariantError extends Error {
+  readonly code = "SSR_INVARIANT_VIOLATION";
+  constructor(message: string);
 }
 //# sourceMappingURL=errors.d.ts.map

package/dist/ssr/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/ssr/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,6BAA6B;gBAC9B,OAAO,EAAE,MAAM;CAK5B"}
+{"version":3,"file":"errors.d.ts","names":[],"sources":["../../src/ssr/errors.ts"],"mappings":";;;cAEa,iBAAA,SAA0B,KAAA;EAAA,SAC5B,IAAA;cACG,OAAA;AAAA"}

package/dist/ssr/errors.js

@@ -1 +1,4 @@
-import{SSRDataMissingError as s}from"../common/ssr-errors.js";class r extends Error{constructor(t){super(t),this.code="SSR_INVARIANT_VIOLATION",this.name="SSRInvariantError",Object.setPrototypeOf(this,r.prototype)}}export{s as SSRDataMissingError,r as SSRInvariantError};
+import "../common/ssr-errors.js";
+//#endregion
+
+//# sourceMappingURL=errors.js.map

package/dist/ssr/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","names":[],"sources":["../../src/ssr/errors.ts"],"sourcesContent":["export { SSRDataMissingError } from '../common/ssr-errors';\n\nexport class SSRInvariantError extends Error {\n  readonly code = 'SSR_INVARIANT_VIOLATION';\n  constructor(message: string) {\n    super(message);\n    this.name = 'SSRInvariantError';\n    Object.setPrototypeOf(this, SSRInvariantError.prototype);\n  }\n}\n"],"mappings":""}

package/dist/ssr/escape.js

@@ -1 +1,153 @@
-const A=new Set(["area","base","br","col","embed","hr","img","input","link","meta","param","source","track","wbr"]),o=new Map,u=256;const f=/[&"'<>]/g,l=/[{}<>\\]/g,p=/(?:url|expression|javascript)\s*\(/i,a=new Map,E=512;const C=t=>{const e=t.charCodeAt(0);return e===38?"&amp;":e===34?"&quot;":e===39?"&#x27;":e===60?"&lt;":e===62?"&gt;":t};function _(t){const e=a.get(t);if(e!==void 0)return e;const r=t.replace(/[A-Z]/g,n=>`-${n.toLowerCase()}`);return a.size<E&&a.set(t,r),r}function d(){o.clear()}function g(t){for(let e=0;e<t.length;e++){const r=t.charCodeAt(e);if(r===38||r===60||r===62)return!0}return!1}function S(t){for(let e=0;e<t.length;e++){const r=t.charCodeAt(e);if(r===38||r===34||r===39||r===60||r===62)return!0}return!1}function b(t){const e=t.length<=64;if(e){const n=o.get(t);if(n!==void 0)return n}if(!g(t))return e&&o.size<u&&o.set(t,t),t;let r=t;return r=r.replace(/&/g,"&amp;"),r=r.replace(/</g,"&lt;"),r=r.replace(/>/g,"&gt;"),e&&o.size<u&&o.set(t,r),r}function T(t){return t.replace(f,C)}function h(t){const e=String(t);let r=!1,n=-1;for(let c=0;c<e.length;c++){const s=e.charCodeAt(c);if(s===123||s===125||s===60||s===62||s===92){if(r=!0,n>=0)break}else if(s===40&&n<0&&(n=c,r))break}return!r&&n===-1?e:n!==-1&&p.test(e)?"":r?e.replace(l,""):e}function R(t){if(!t||typeof t!="object")return null;const e=t;let r="";for(const n in e){const c=e[n];if(c==null||c===!1)continue;const s=_(n),i=h(String(c));i&&(r+=`${s}:${i};`)}return r||null}export{A as VOID_ELEMENTS,d as clearEscapeCache,T as escapeAttr,b as escapeText,S as needsEscapeAttr,g as needsEscapeText,R as styleObjToCss};
+//#region src/ssr/escape.ts
+/**
+* HTML escaping utilities for SSR
+*
+* Centralizes text and attribute escaping to avoid duplication
+* between sync and streaming SSR renderers.
+*/
+const VOID_ELEMENTS = new Set([
+	"area",
+	"base",
+	"br",
+	"col",
+	"embed",
+	"hr",
+	"img",
+	"input",
+	"link",
+	"meta",
+	"param",
+	"source",
+	"track",
+	"wbr"
+]);
+const escapeCache = /* @__PURE__ */ new Map();
+const MAX_CACHE_SIZE = 256;
+const CSS_UNSAFE_RE = /[{}<>\\]/g;
+const CSS_DANGEROUS_FN_RE = /(?:url|expression|javascript)\s*\(/i;
+const STYLE_PROP_CACHE = /* @__PURE__ */ new Map();
+const MAX_STYLE_PROP_CACHE_SIZE = 512;
+function toKebabCached(prop) {
+	const cached = STYLE_PROP_CACHE.get(prop);
+	if (cached !== void 0) return cached;
+	const kebab = prop.replace(/[A-Z]/g, (m) => `-${m.toLowerCase()}`);
+	if (STYLE_PROP_CACHE.size < MAX_STYLE_PROP_CACHE_SIZE) STYLE_PROP_CACHE.set(prop, kebab);
+	return kebab;
+}
+/**
+* Fast check if a string needs text escaping.
+* Used to skip the full escape call when not needed.
+*/
+function needsEscapeText(text) {
+	for (let i = 0; i < text.length; i++) {
+		const ch = text.charCodeAt(i);
+		if (ch === 38 || ch === 60 || ch === 62) return true;
+	}
+	return false;
+}
+/**
+* Fast check if a string needs attribute escaping.
+* Checks for & " ' < > characters.
+*/
+function needsEscapeAttr(value) {
+	for (let i = 0; i < value.length; i++) {
+		const ch = value.charCodeAt(i);
+		if (ch === 38 || ch === 34 || ch === 39 || ch === 60 || ch === 62) return true;
+	}
+	return false;
+}
+/**
+* Escape HTML special characters in text content
+* Fast-path: cache first, then scan-then-escape for new strings
+*/
+function escapeText(text) {
+	const useCache = text.length <= 64;
+	if (useCache) {
+		const cached = escapeCache.get(text);
+		if (cached !== void 0) return cached;
+	}
+	if (!needsEscapeText(text)) {
+		if (useCache && escapeCache.size < MAX_CACHE_SIZE) escapeCache.set(text, text);
+		return text;
+	}
+	let escaped = "";
+	let lastIndex = 0;
+	for (let i = 0; i < text.length; i++) {
+		const ch = text.charCodeAt(i);
+		let entity;
+		if (ch === 38) entity = "&amp;";
+		else if (ch === 60) entity = "&lt;";
+		else if (ch === 62) entity = "&gt;";
+		else continue;
+		escaped += text.slice(lastIndex, i) + entity;
+		lastIndex = i + 1;
+	}
+	const result = escaped + text.slice(lastIndex);
+	if (useCache && escapeCache.size < MAX_CACHE_SIZE) escapeCache.set(text, result);
+	return result;
+}
+/**
+* Escape HTML special characters in attribute values.
+* Single-pass scan: returns the original string unchanged when no special
+* characters are found, so callers can drop separate needsEscapeAttr checks.
+*/
+function escapeAttr(value) {
+	let escaped = "";
+	let lastIndex = 0;
+	for (let i = 0; i < value.length; i++) {
+		const ch = value.charCodeAt(i);
+		let entity;
+		if (ch === 38) entity = "&amp;";
+		else if (ch === 34) entity = "&quot;";
+		else if (ch === 39) entity = "&#x27;";
+		else if (ch === 60) entity = "&lt;";
+		else if (ch === 62) entity = "&gt;";
+		else continue;
+		escaped += value.slice(lastIndex, i) + entity;
+		lastIndex = i + 1;
+	}
+	return lastIndex === 0 ? value : escaped + value.slice(lastIndex);
+}
+/**
+* Escape CSS value to prevent injection attacks.
+* Removes characters that could break out of CSS context.
+*/
+function escapeCssValue(value) {
+	const str = String(value);
+	let hasUnsafeChars = false;
+	let openParen = -1;
+	for (let i = 0; i < str.length; i++) {
+		const ch = str.charCodeAt(i);
+		if (ch === 123 || ch === 125 || ch === 60 || ch === 62 || ch === 92) {
+			hasUnsafeChars = true;
+			if (openParen >= 0) break;
+		} else if (ch === 40 && openParen < 0) {
+			openParen = i;
+			if (hasUnsafeChars) break;
+		}
+	}
+	if (!hasUnsafeChars && openParen === -1) return str;
+	if (openParen !== -1 && CSS_DANGEROUS_FN_RE.test(str)) return "";
+	return hasUnsafeChars ? str.replace(CSS_UNSAFE_RE, "") : str;
+}
+/**
+* Convert style object to CSS string with value escaping
+* Optimized to avoid Object.entries allocation
+*/
+function styleObjToCss(value) {
+	if (!value || typeof value !== "object") return null;
+	const styleObj = value;
+	let result = "";
+	for (const k in styleObj) {
+		const v = styleObj[k];
+		if (v === null || v === void 0 || v === false) continue;
+		const prop = toKebabCached(k);
+		const safeValue = escapeCssValue(String(v));
+		if (safeValue) result += `${prop}:${safeValue};`;
+	}
+	return result || null;
+}
+//#endregion
+export { VOID_ELEMENTS, escapeAttr, escapeText, needsEscapeAttr, styleObjToCss };
+
+//# sourceMappingURL=escape.js.map

package/dist/ssr/escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.js","names":[],"sources":["../../src/ssr/escape.ts"],"sourcesContent":["/**\n * HTML escaping utilities for SSR\n *\n * Centralizes text and attribute escaping to avoid duplication\n * between sync and streaming SSR renderers.\n */\n\n// HTML5 void elements that don't have closing tags\nexport const VOID_ELEMENTS = new Set([\n  'area',\n  'base',\n  'br',\n  'col',\n  'embed',\n  'hr',\n  'img',\n  'input',\n  'link',\n  'meta',\n  'param',\n  'source',\n  'track',\n  'wbr',\n]);\n\n// Escape cache for common values (bounded and clearable for long-running servers)\nconst escapeCache = new Map<string, string>();\nconst MAX_CACHE_SIZE = 256;\n\nconst _TEXT_ESCAPE_RE = /[&<>]/g;\n\nconst CSS_UNSAFE_RE = /[{}<>\\\\]/g;\nconst CSS_DANGEROUS_FN_RE = /(?:url|expression|javascript)\\s*\\(/i;\n\nconst STYLE_PROP_CACHE = new Map<string, string>();\nconst MAX_STYLE_PROP_CACHE_SIZE = 512;\n\n// Pre-compute escape map functions for faster replacement\nconst _textEscapeMap = (ch: string): string => {\n  const code = ch.charCodeAt(0);\n  if (code === 38) return '&amp;'; // &\n  if (code === 60) return '&lt;'; // <\n  if (code === 62) return '&gt;'; // >\n  return ch;\n};\n\nfunction toKebabCached(prop: string): string {\n  const cached = STYLE_PROP_CACHE.get(prop);\n  if (cached !== undefined) return cached;\n  const kebab = prop.replace(/[A-Z]/g, (m) => `-${m.toLowerCase()}`);\n  if (STYLE_PROP_CACHE.size < MAX_STYLE_PROP_CACHE_SIZE) {\n    STYLE_PROP_CACHE.set(prop, kebab);\n  }\n  return kebab;\n}\n\n/**\n * Clear the escape cache. Call between SSR requests in long-running servers\n * to prevent memory buildup from unique strings.\n */\nexport function clearEscapeCache(): void {\n  escapeCache.clear();\n}\n\n/**\n * Fast check if a string needs text escaping.\n * Used to skip the full escape call when not needed.\n */\nexport function needsEscapeText(text: string): boolean {\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    if (ch === 38 || ch === 60 || ch === 62) return true;\n  }\n  return false;\n}\n\n/**\n * Fast check if a string needs attribute escaping.\n * Checks for & \" ' < > characters.\n */\nexport function needsEscapeAttr(value: string): boolean {\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    // & \" ' < >\n    if (ch === 38 || ch === 34 || ch === 39 || ch === 60 || ch === 62) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Escape HTML special characters in text content\n * Fast-path: cache first, then scan-then-escape for new strings\n */\nexport function escapeText(text: string): string {\n  // Only use cache for short strings (likely to be repeated)\n  const useCache = text.length <= 64;\n\n  if (useCache) {\n    const cached = escapeCache.get(text);\n    if (cached !== undefined) return cached;\n  }\n\n  // Fast path: check if escaping needed\n  if (!needsEscapeText(text)) {\n    if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n      escapeCache.set(text, text);\n    }\n    return text;\n  }\n\n  // Single-pass scan-and-build: avoids 3 separate regex passes\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += text.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  const result = escaped + text.slice(lastIndex);\n\n  if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n    escapeCache.set(text, result);\n  }\n  return result;\n}\n\n/**\n * Escape HTML special characters in attribute values.\n * Single-pass scan: returns the original string unchanged when no special\n * characters are found, so callers can drop separate needsEscapeAttr checks.\n */\nexport function escapeAttr(value: string): string {\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 34) entity = '&quot;';\n    else if (ch === 39) entity = '&#x27;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += value.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  // Return original reference when nothing needed escaping (no allocation)\n  return lastIndex === 0 ? value : escaped + value.slice(lastIndex);\n}\n\n/**\n * Escape CSS value to prevent injection attacks.\n * Removes characters that could break out of CSS context.\n */\nfunction escapeCssValue(value: string): string {\n  const str = String(value);\n\n  let hasUnsafeChars = false;\n  let openParen = -1;\n\n  // Single pass to check for unsafe chars and find first paren\n  for (let i = 0; i < str.length; i++) {\n    const ch = str.charCodeAt(i);\n    // Check for { } < > \\\n    if (ch === 123 || ch === 125 || ch === 60 || ch === 62 || ch === 92) {\n      hasUnsafeChars = true;\n      if (openParen >= 0) break;\n    } else if (ch === 40 && openParen < 0) {\n      // (\n      openParen = i;\n      if (hasUnsafeChars) break;\n    }\n  }\n\n  // Fast path: most CSS values are simple\n  if (!hasUnsafeChars && openParen === -1) return str;\n\n  // Block dangerous CSS functions\n  if (openParen !== -1 && CSS_DANGEROUS_FN_RE.test(str)) {\n    return '';\n  }\n\n  // Remove characters that could break out of CSS value context\n  return hasUnsafeChars ? str.replace(CSS_UNSAFE_RE, '') : str;\n}\n\n/**\n * Convert style object to CSS string with value escaping\n * Optimized to avoid Object.entries allocation\n */\nexport function styleObjToCss(value: unknown): string | null {\n  if (!value || typeof value !== 'object') return null;\n\n  const styleObj = value as Record<string, unknown>;\n  let result = '';\n\n  for (const k in styleObj) {\n    const v = styleObj[k];\n    if (v === null || v === undefined || v === false) continue;\n\n    const prop = toKebabCached(k);\n    const safeValue = escapeCssValue(String(v));\n    if (safeValue) {\n      result += `${prop}:${safeValue};`;\n    }\n  }\n\n  return result || null;\n}\n"],"mappings":";;;;;;;AAQA,MAAa,gBAAgB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAM,8BAAc,IAAI,KAAqB;AAC7C,MAAM,iBAAiB;AAIvB,MAAM,gBAAgB;AACtB,MAAM,sBAAsB;AAE5B,MAAM,mCAAmB,IAAI,KAAqB;AAClD,MAAM,4BAA4B;AAWlC,SAAS,cAAc,MAAsB;CAC3C,MAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,KAAI,WAAW,OAAW,QAAO;CACjC,MAAM,QAAQ,KAAK,QAAQ,WAAW,MAAM,IAAI,EAAE,aAAa,GAAG;AAClE,KAAI,iBAAiB,OAAO,0BAC1B,kBAAiB,IAAI,MAAM,MAAM;AAEnC,QAAO;;;;;;AAeT,SAAgB,gBAAgB,MAAuB;AACrD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;AAC7B,MAAI,OAAO,MAAM,OAAO,MAAM,OAAO,GAAI,QAAO;;AAElD,QAAO;;;;;;AAOT,SAAgB,gBAAgB,OAAwB;AACtD,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;AAE9B,MAAI,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,GAC7D,QAAO;;AAGX,QAAO;;;;;;AAOT,SAAgB,WAAW,MAAsB;CAE/C,MAAM,WAAW,KAAK,UAAU;AAEhC,KAAI,UAAU;EACZ,MAAM,SAAS,YAAY,IAAI,KAAK;AACpC,MAAI,WAAW,OAAW,QAAO;;AAInC,KAAI,CAAC,gBAAgB,KAAK,EAAE;AAC1B,MAAI,YAAY,YAAY,OAAO,eACjC,aAAY,IAAI,MAAM,KAAK;AAE7B,SAAO;;CAIT,IAAI,UAAU;CACd,IAAI,YAAY;AAChB,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;EAC7B,IAAI;AACJ,MAAI,OAAO,GAAI,UAAS;WACf,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;MACxB;AACL,aAAW,KAAK,MAAM,WAAW,EAAE,GAAG;AACtC,cAAY,IAAI;;CAElB,MAAM,SAAS,UAAU,KAAK,MAAM,UAAU;AAE9C,KAAI,YAAY,YAAY,OAAO,eACjC,aAAY,IAAI,MAAM,OAAO;AAE/B,QAAO;;;;;;;AAQT,SAAgB,WAAW,OAAuB;CAChD,IAAI,UAAU;CACd,IAAI,YAAY;AAChB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;EAC9B,IAAI;AACJ,MAAI,OAAO,GAAI,UAAS;WACf,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;MACxB;AACL,aAAW,MAAM,MAAM,WAAW,EAAE,GAAG;AACvC,cAAY,IAAI;;AAGlB,QAAO,cAAc,IAAI,QAAQ,UAAU,MAAM,MAAM,UAAU;;;;;;AAOnE,SAAS,eAAe,OAAuB;CAC7C,MAAM,MAAM,OAAO,MAAM;CAEzB,IAAI,iBAAiB;CACrB,IAAI,YAAY;AAGhB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,KAAK,IAAI,WAAW,EAAE;AAE5B,MAAI,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,MAAM,OAAO,IAAI;AACnE,oBAAiB;AACjB,OAAI,aAAa,EAAG;aACX,OAAO,MAAM,YAAY,GAAG;AAErC,eAAY;AACZ,OAAI,eAAgB;;;AAKxB,KAAI,CAAC,kBAAkB,cAAc,GAAI,QAAO;AAGhD,KAAI,cAAc,MAAM,oBAAoB,KAAK,IAAI,CACnD,QAAO;AAIT,QAAO,iBAAiB,IAAI,QAAQ,eAAe,GAAG,GAAG;;;;;;AAO3D,SAAgB,cAAc,OAA+B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;CAEhD,MAAM,WAAW;CACjB,IAAI,SAAS;AAEb,MAAK,MAAM,KAAK,UAAU;EACxB,MAAM,IAAI,SAAS;AACnB,MAAI,MAAM,QAAQ,MAAM,UAAa,MAAM,MAAO;EAElD,MAAM,OAAO,cAAc,EAAE;EAC7B,MAAM,YAAY,eAAe,OAAO,EAAE,CAAC;AAC3C,MAAI,UACF,WAAU,GAAG,KAAK,GAAG,UAAU;;AAInC,QAAO,UAAU"}