@askrjs/askr 0.0.35 → 0.0.36

package/dist/ssg/route-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"route-utils.js","names":[],"sources":["../../src/ssg/route-utils.ts"],"sourcesContent":["import type { RouteConfig } from './types';\n\nexport interface ResolvedRouteDescriptor {\n  route: RouteConfig;\n  path: string;\n  filePath: string;\n  routeId: string;\n  invalidationKeys: string[];\n}\n\nexport function getOutputFilePath(pathStr: string): string {\n  if (pathStr === '/') {\n    return 'index.html';\n  }\n  const normalized = pathStr.replace(/^\\/|\\/$/g, '');\n  return `${normalized}/index.html`;\n}\n\nexport function interpolateRoutePath(\n  routePath: string,\n  params?: Record<string, string>\n): string {\n  if (!params) return routePath;\n  return routePath.replace(\n    /\\{([^}]+)\\}/g,\n    (_, key: string) => params[key] ?? ''\n  );\n}\n\nexport function resolveRouteDescriptor(\n  route: RouteConfig\n): ResolvedRouteDescriptor {\n  const path = interpolateRoutePath(route.path, route.params);\n  const filePath = getOutputFilePath(path);\n  return {\n    route,\n    path,\n    filePath,\n    routeId: `${path}::${filePath}`,\n    invalidationKeys: route.invalidationKeys?.slice() ?? [],\n  };\n}\n"],"mappings":";AAUA,SAAgB,kBAAkB,SAAyB;AACzD,KAAI,YAAY,IACd,QAAO;AAGT,QAAO,GADY,QAAQ,QAAQ,YAAY,GACrC,CAAW;;AAGvB,SAAgB,qBACd,WACA,QACQ;AACR,KAAI,CAAC,OAAQ,QAAO;AACpB,QAAO,UAAU,QACf,iBACC,GAAG,QAAgB,OAAO,QAAQ,GACpC;;AAGH,SAAgB,uBACd,OACyB;CACzB,MAAM,OAAO,qBAAqB,MAAM,MAAM,MAAM,OAAO;CAC3D,MAAM,WAAW,kBAAkB,KAAK;AACxC,QAAO;EACL;EACA;EACA;EACA,SAAS,GAAG,KAAK,IAAI;EACrB,kBAAkB,MAAM,kBAAkB,OAAO,IAAI,EAAE;EACxD"}
+{"version":3,"file":"route-utils.js","names":[],"sources":["../../src/ssg/route-utils.ts"],"sourcesContent":["import type { RouteConfig } from './types';\n\nexport interface ResolvedRouteDescriptor {\n  route: RouteConfig;\n  path: string;\n  filePath: string;\n  routeId: string;\n  invalidationKeys: string[];\n}\n\nexport function getOutputFilePath(pathStr: string): string {\n  if (pathStr === '/') {\n    return 'index.html';\n  }\n  const normalized = pathStr.replace(/^\\/|\\/$/g, '');\n  return `${normalized}/index.html`;\n}\n\nexport function interpolateRoutePath(\n  routePath: string,\n  params?: Record<string, string>\n): string {\n  if (!params) return routePath;\n  return routePath.replace(\n    /\\{([^}]+)\\}/g,\n    (_, key: string) => params[key] ?? ''\n  );\n}\n\nexport function resolveRouteDescriptor(\n  route: RouteConfig\n): ResolvedRouteDescriptor {\n  const path = interpolateRoutePath(route.path, route.params);\n  const filePath = getOutputFilePath(path);\n  return {\n    route,\n    path,\n    filePath,\n    routeId: `${path}::${filePath}`,\n    invalidationKeys: route.invalidationKeys?.slice() ?? [],\n  };\n}\n"],"mappings":";AAUA,SAAgB,kBAAkB,SAAyB;CACzD,IAAI,YAAY,KACd,OAAO;CAGT,OAAO,GADY,QAAQ,QAAQ,YAAY,GACrC,CAAW;;AAGvB,SAAgB,qBACd,WACA,QACQ;CACR,IAAI,CAAC,QAAQ,OAAO;CACpB,OAAO,UAAU,QACf,iBACC,GAAG,QAAgB,OAAO,QAAQ,GACpC;;AAGH,SAAgB,uBACd,OACyB;CACzB,MAAM,OAAO,qBAAqB,MAAM,MAAM,MAAM,OAAO;CAC3D,MAAM,WAAW,kBAAkB,KAAK;CACxC,OAAO;EACL;EACA;EACA;EACA,SAAS,GAAG,KAAK,IAAI;EACrB,kBAAkB,MAAM,kBAAkB,OAAO,IAAI,EAAE;EACxD"}

package/dist/ssg/write-static-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"write-static-files.js","names":[],"sources":["../../src/ssg/write-static-files.ts"],"sourcesContent":["/**\n * File I/O for Static Site Generation\n *\n * Uses Node.js fs/path modules to write rendered HTML files to disk.\n * This module is Node-only and not intended for browser builds.\n */\n\nimport * as fs from 'node:fs/promises';\nimport * as fsSync from 'node:fs';\nimport * as pathModule from 'node:path';\nimport type { RouteRenderResult } from './types';\n\ninterface WriteStaticFilesOptions {\n  concurrency?: number;\n}\n\n/**\n * Write rendered routes to disk\n * Creates outputDir/{route-path}/index.html structure\n */\nexport async function writeStaticFiles(\n  results: RouteRenderResult[],\n  outputDir: string,\n  options: WriteStaticFilesOptions = {}\n): Promise<void> {\n  await fs.mkdir(outputDir, { recursive: true });\n\n  for (const result of results) {\n    if (result.status !== 'removed') {\n      continue;\n    }\n\n    const fullPath = pathModule.join(outputDir, result.filePath);\n    if (fsSync.existsSync(fullPath)) {\n      await fs.rm(fullPath, { force: true });\n      await pruneEmptyDirs(pathModule.dirname(fullPath), outputDir);\n    }\n  }\n\n  const pendingWrites: RouteRenderResult[] = [];\n  for (let index = 0; index < results.length; index += 1) {\n    const result = results[index];\n    if (result.status === 'error') {\n      console.warn(`Skipping failed route: ${result.path} - ${result.error}`);\n      continue;\n    }\n    if (result.status === 'success' && result.written) {\n      pendingWrites.push(result);\n    }\n  }\n\n  const directories: string[] = [];\n  const seenDirectories = new Set<string>();\n  for (const result of pendingWrites) {\n    const dir = pathModule.dirname(pathModule.join(outputDir, result.filePath));\n    if (!seenDirectories.has(dir)) {\n      seenDirectories.add(dir);\n      directories.push(dir);\n    }\n  }\n\n  for (const dir of directories) {\n    await fs.mkdir(dir, { recursive: true });\n  }\n\n  const concurrency = Math.max(\n    1,\n    Math.min(options.concurrency ?? 8, pendingWrites.length || 1)\n  );\n  let nextIndex = 0;\n\n  const worker = async () => {\n    while (true) {\n      const current = nextIndex;\n      nextIndex += 1;\n      if (current >= pendingWrites.length) {\n        return;\n      }\n\n      const result = pendingWrites[current];\n      const fullPath = pathModule.join(outputDir, result.filePath);\n      await fs.writeFile(fullPath, result.html, 'utf8');\n    }\n  };\n\n  await Promise.all(Array.from({ length: concurrency }, () => worker()));\n}\n\n/**\n * Get the output file path for a route\n * E.g., \"/blog/post\" -> \"blog/post\" or \"/\" -> \"\"\n */\nexport { getOutputFilePath } from './route-utils';\n\nasync function pruneEmptyDirs(\n  startDir: string,\n  rootDir: string\n): Promise<void> {\n  let current = startDir;\n  const normalizedRoot = pathModule.resolve(rootDir);\n\n  while (current.startsWith(normalizedRoot)) {\n    if (!fsSync.existsSync(current)) {\n      break;\n    }\n\n    if ((await fs.readdir(current)).length > 0) {\n      break;\n    }\n\n    await fs.rmdir(current);\n    if (pathModule.resolve(current) === normalizedRoot) {\n      break;\n    }\n    current = pathModule.dirname(current);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBACpB,SACA,WACA,UAAmC,EAAE,EACtB;AACf,OAAM,GAAG,MAAM,WAAW,EAAE,WAAW,MAAM,CAAC;AAE9C,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,WAAW,UACpB;EAGF,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;AAC5D,MAAI,OAAO,WAAW,SAAS,EAAE;AAC/B,SAAM,GAAG,GAAG,UAAU,EAAE,OAAO,MAAM,CAAC;AACtC,SAAM,eAAe,WAAW,QAAQ,SAAS,EAAE,UAAU;;;CAIjE,MAAM,gBAAqC,EAAE;AAC7C,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;EACtD,MAAM,SAAS,QAAQ;AACvB,MAAI,OAAO,WAAW,SAAS;AAC7B,WAAQ,KAAK,0BAA0B,OAAO,KAAK,KAAK,OAAO,QAAQ;AACvE;;AAEF,MAAI,OAAO,WAAW,aAAa,OAAO,QACxC,eAAc,KAAK,OAAO;;CAI9B,MAAM,cAAwB,EAAE;CAChC,MAAM,kCAAkB,IAAI,KAAa;AACzC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,WAAW,QAAQ,WAAW,KAAK,WAAW,OAAO,SAAS,CAAC;AAC3E,MAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE;AAC7B,mBAAgB,IAAI,IAAI;AACxB,eAAY,KAAK,IAAI;;;AAIzB,MAAK,MAAM,OAAO,YAChB,OAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;CAG1C,MAAM,cAAc,KAAK,IACvB,GACA,KAAK,IAAI,QAAQ,eAAe,GAAG,cAAc,UAAU,EAAE,CAC9D;CACD,IAAI,YAAY;CAEhB,MAAM,SAAS,YAAY;AACzB,SAAO,MAAM;GACX,MAAM,UAAU;AAChB,gBAAa;AACb,OAAI,WAAW,cAAc,OAC3B;GAGF,MAAM,SAAS,cAAc;GAC7B,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;AAC5D,SAAM,GAAG,UAAU,UAAU,OAAO,MAAM,OAAO;;;AAIrD,OAAM,QAAQ,IAAI,MAAM,KAAK,EAAE,QAAQ,aAAa,QAAQ,QAAQ,CAAC,CAAC;;AASxE,eAAe,eACb,UACA,SACe;CACf,IAAI,UAAU;CACd,MAAM,iBAAiB,WAAW,QAAQ,QAAQ;AAElD,QAAO,QAAQ,WAAW,eAAe,EAAE;AACzC,MAAI,CAAC,OAAO,WAAW,QAAQ,CAC7B;AAGF,OAAK,MAAM,GAAG,QAAQ,QAAQ,EAAE,SAAS,EACvC;AAGF,QAAM,GAAG,MAAM,QAAQ;AACvB,MAAI,WAAW,QAAQ,QAAQ,KAAK,eAClC;AAEF,YAAU,WAAW,QAAQ,QAAQ"}
+{"version":3,"file":"write-static-files.js","names":[],"sources":["../../src/ssg/write-static-files.ts"],"sourcesContent":["/**\n * File I/O for Static Site Generation\n *\n * Uses Node.js fs/path modules to write rendered HTML files to disk.\n * This module is Node-only and not intended for browser builds.\n */\n\nimport * as fs from 'node:fs/promises';\nimport * as fsSync from 'node:fs';\nimport * as pathModule from 'node:path';\nimport type { RouteRenderResult } from './types';\n\ninterface WriteStaticFilesOptions {\n  concurrency?: number;\n}\n\n/**\n * Write rendered routes to disk\n * Creates outputDir/{route-path}/index.html structure\n */\nexport async function writeStaticFiles(\n  results: RouteRenderResult[],\n  outputDir: string,\n  options: WriteStaticFilesOptions = {}\n): Promise<void> {\n  await fs.mkdir(outputDir, { recursive: true });\n\n  for (const result of results) {\n    if (result.status !== 'removed') {\n      continue;\n    }\n\n    const fullPath = pathModule.join(outputDir, result.filePath);\n    if (fsSync.existsSync(fullPath)) {\n      await fs.rm(fullPath, { force: true });\n      await pruneEmptyDirs(pathModule.dirname(fullPath), outputDir);\n    }\n  }\n\n  const pendingWrites: RouteRenderResult[] = [];\n  for (let index = 0; index < results.length; index += 1) {\n    const result = results[index];\n    if (result.status === 'error') {\n      console.warn(`Skipping failed route: ${result.path} - ${result.error}`);\n      continue;\n    }\n    if (result.status === 'success' && result.written) {\n      pendingWrites.push(result);\n    }\n  }\n\n  const directories: string[] = [];\n  const seenDirectories = new Set<string>();\n  for (const result of pendingWrites) {\n    const dir = pathModule.dirname(pathModule.join(outputDir, result.filePath));\n    if (!seenDirectories.has(dir)) {\n      seenDirectories.add(dir);\n      directories.push(dir);\n    }\n  }\n\n  for (const dir of directories) {\n    await fs.mkdir(dir, { recursive: true });\n  }\n\n  const concurrency = Math.max(\n    1,\n    Math.min(options.concurrency ?? 8, pendingWrites.length || 1)\n  );\n  let nextIndex = 0;\n\n  const worker = async () => {\n    while (true) {\n      const current = nextIndex;\n      nextIndex += 1;\n      if (current >= pendingWrites.length) {\n        return;\n      }\n\n      const result = pendingWrites[current];\n      const fullPath = pathModule.join(outputDir, result.filePath);\n      await fs.writeFile(fullPath, result.html, 'utf8');\n    }\n  };\n\n  await Promise.all(Array.from({ length: concurrency }, () => worker()));\n}\n\n/**\n * Get the output file path for a route\n * E.g., \"/blog/post\" -> \"blog/post\" or \"/\" -> \"\"\n */\nexport { getOutputFilePath } from './route-utils';\n\nasync function pruneEmptyDirs(\n  startDir: string,\n  rootDir: string\n): Promise<void> {\n  let current = startDir;\n  const normalizedRoot = pathModule.resolve(rootDir);\n\n  while (current.startsWith(normalizedRoot)) {\n    if (!fsSync.existsSync(current)) {\n      break;\n    }\n\n    if ((await fs.readdir(current)).length > 0) {\n      break;\n    }\n\n    await fs.rmdir(current);\n    if (pathModule.resolve(current) === normalizedRoot) {\n      break;\n    }\n    current = pathModule.dirname(current);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,eAAsB,iBACpB,SACA,WACA,UAAmC,EAAE,EACtB;CACf,MAAM,GAAG,MAAM,WAAW,EAAE,WAAW,MAAM,CAAC;CAE9C,KAAK,MAAM,UAAU,SAAS;EAC5B,IAAI,OAAO,WAAW,WACpB;EAGF,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;EAC5D,IAAI,OAAO,WAAW,SAAS,EAAE;GAC/B,MAAM,GAAG,GAAG,UAAU,EAAE,OAAO,MAAM,CAAC;GACtC,MAAM,eAAe,WAAW,QAAQ,SAAS,EAAE,UAAU;;;CAIjE,MAAM,gBAAqC,EAAE;CAC7C,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,GAAG;EACtD,MAAM,SAAS,QAAQ;EACvB,IAAI,OAAO,WAAW,SAAS;GAC7B,QAAQ,KAAK,0BAA0B,OAAO,KAAK,KAAK,OAAO,QAAQ;GACvE;;EAEF,IAAI,OAAO,WAAW,aAAa,OAAO,SACxC,cAAc,KAAK,OAAO;;CAI9B,MAAM,cAAwB,EAAE;CAChC,MAAM,kCAAkB,IAAI,KAAa;CACzC,KAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,WAAW,QAAQ,WAAW,KAAK,WAAW,OAAO,SAAS,CAAC;EAC3E,IAAI,CAAC,gBAAgB,IAAI,IAAI,EAAE;GAC7B,gBAAgB,IAAI,IAAI;GACxB,YAAY,KAAK,IAAI;;;CAIzB,KAAK,MAAM,OAAO,aAChB,MAAM,GAAG,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;CAG1C,MAAM,cAAc,KAAK,IACvB,GACA,KAAK,IAAI,QAAQ,eAAe,GAAG,cAAc,UAAU,EAAE,CAC9D;CACD,IAAI,YAAY;CAEhB,MAAM,SAAS,YAAY;EACzB,OAAO,MAAM;GACX,MAAM,UAAU;GAChB,aAAa;GACb,IAAI,WAAW,cAAc,QAC3B;GAGF,MAAM,SAAS,cAAc;GAC7B,MAAM,WAAW,WAAW,KAAK,WAAW,OAAO,SAAS;GAC5D,MAAM,GAAG,UAAU,UAAU,OAAO,MAAM,OAAO;;;CAIrD,MAAM,QAAQ,IAAI,MAAM,KAAK,EAAE,QAAQ,aAAa,QAAQ,QAAQ,CAAC,CAAC;;AASxE,eAAe,eACb,UACA,SACe;CACf,IAAI,UAAU;CACd,MAAM,iBAAiB,WAAW,QAAQ,QAAQ;CAElD,OAAO,QAAQ,WAAW,eAAe,EAAE;EACzC,IAAI,CAAC,OAAO,WAAW,QAAQ,EAC7B;EAGF,KAAK,MAAM,GAAG,QAAQ,QAAQ,EAAE,SAAS,GACvC;EAGF,MAAM,GAAG,MAAM,QAAQ;EACvB,IAAI,WAAW,QAAQ,QAAQ,KAAK,gBAClC;EAEF,UAAU,WAAW,QAAQ,QAAQ"}

package/dist/ssr/attrs.js.map

@@ -1 +1 @@
-{"version":3,"file":"attrs.js","names":[],"sources":["../../src/ssr/attrs.ts"],"sourcesContent":["/**\n * HTML attribute rendering for SSR\n */\n\nimport type { Props } from '../common/props';\nimport type { RenderSink } from './sink';\nimport { escapeAttr, needsEscapeAttr, styleObjToCss } from './escape';\n\n/** Result of renderAttrs including any raw HTML from dangerouslySetInnerHTML */\nexport type AttrsResult = {\n  attrs: string;\n  dangerousHtml?: string;\n};\n\nconst ESCAPED_ATTR_VALUE_CACHE_LIMIT = 512;\nconst escapedAttrValueCache = new Map<string, string>();\n\n// Fast check for event handler pattern (on + uppercase letter)\nfunction isEventHandler(key: string): boolean {\n  return (\n    key.length >= 3 &&\n    key.charCodeAt(0) === 111 && // 'o'\n    key.charCodeAt(1) === 110 && // 'n'\n    key.charCodeAt(2) >= 65 &&\n    key.charCodeAt(2) <= 90 // 'A'-'Z'\n  );\n}\n\nfunction getEscapedAttrValue(value: string): string {\n  if (value.length > 64) {\n    return escapeAttr(value);\n  }\n\n  const cached = escapedAttrValueCache.get(value);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  const escaped = escapeAttr(value);\n  // Skip caching strings that required no escaping — same reference returned,\n  // no point occupying cache slots with identity entries.\n  if (escaped === value) return value;\n  if (escapedAttrValueCache.size >= ESCAPED_ATTR_VALUE_CACHE_LIMIT) {\n    escapedAttrValueCache.clear();\n  }\n  escapedAttrValueCache.set(value, escaped);\n  return escaped;\n}\n\n/**\n * Render attributes directly to a sink without intermediate string allocations.\n * This is the hot path for streaming SSR.\n */\nexport function renderAttrsDirect(\n  props: Props | undefined,\n  sink: Pick<RenderSink, 'write'>\n): void {\n  if (!props || typeof props !== 'object') return;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip special props\n    if (\n      key === 'children' ||\n      key === 'key' ||\n      key === 'ref' ||\n      key === 'dangerouslySetInnerHTML'\n    )\n      continue;\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute\n    const attrName = key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (!css) continue;\n      sink.write(' style=\"');\n      // Escape inline - most style values don't need escaping\n      if (needsEscapeAttr(css)) {\n        sink.write(getEscapedAttrValue(css));\n      } else {\n        sink.write(css);\n      }\n      sink.write('\"');\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      sink.write(' ');\n      sink.write(attrName);\n      continue;\n    }\n\n    if (value === false || value === null || value === undefined) continue;\n\n    // Regular attributes\n    const strValue = String(value);\n    sink.write(' ');\n    sink.write(attrName);\n    sink.write('=\"');\n    // escapeAttr returns the original string when nothing needs escaping,\n    // so no separate needsEscapeAttr pre-scan is required.\n    sink.write(getEscapedAttrValue(strValue));\n    sink.write('\"');\n  }\n}\n\n/**\n * Render attributes to HTML string, excluding event handlers\n * Optimized for minimal allocations using push-based approach\n *\n * Returns both the attribute string and any dangerouslySetInnerHTML content.\n */\nexport function renderAttrs(props?: Props): string;\nexport function renderAttrs(\n  props: Props | undefined,\n  opts: { returnDangerousHtml: true }\n): AttrsResult;\nexport function renderAttrs(\n  props?: Props,\n  opts?: { returnDangerousHtml?: boolean }\n): string | AttrsResult {\n  if (!props || typeof props !== 'object') {\n    return opts?.returnDangerousHtml ? { attrs: '' } : '';\n  }\n\n  const attrParts: string[] = [];\n  let dangerousHtml: string | undefined;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip children in attrs\n    if (key === 'children') continue;\n\n    // Skip internal identity refs (framework-only)\n    if (key === 'key' || key === 'ref') continue;\n\n    // Handle dangerouslySetInnerHTML\n    if (key === 'dangerouslySetInnerHTML') {\n      if (value && typeof value === 'object' && '__html' in (value as object)) {\n        dangerousHtml = String((value as { __html: unknown }).__html);\n      }\n      continue;\n    }\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute (`class` preferred, accept `className` for compatibility)\n    const attrName = key === 'class' || key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (css === null || css === '') continue;\n      attrParts.push(` style=\"${getEscapedAttrValue(css)}\"`);\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      attrParts.push(` ${attrName}`);\n    } else if (value === false || value === null || value === undefined) {\n      continue;\n    } else {\n      const strValue = String(value);\n      attrParts.push(` ${attrName}=\"${getEscapedAttrValue(strValue)}\"`);\n    }\n  }\n\n  const result = attrParts.join('');\n\n  if (opts?.returnDangerousHtml) {\n    return { attrs: result, dangerousHtml };\n  }\n  return result;\n}\n"],"mappings":";;AAcA,MAAM,iCAAiC;AACvC,MAAM,wCAAwB,IAAI,KAAqB;AAGvD,SAAS,eAAe,KAAsB;AAC5C,QACE,IAAI,UAAU,KACd,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,IAAI,MACrB,IAAI,WAAW,EAAE,IAAI;;AAIzB,SAAS,oBAAoB,OAAuB;AAClD,KAAI,MAAM,SAAS,GACjB,QAAO,WAAW,MAAM;CAG1B,MAAM,SAAS,sBAAsB,IAAI,MAAM;AAC/C,KAAI,WAAW,OACb,QAAO;CAGT,MAAM,UAAU,WAAW,MAAM;AAGjC,KAAI,YAAY,MAAO,QAAO;AAC9B,KAAI,sBAAsB,QAAQ,+BAChC,uBAAsB,OAAO;AAE/B,uBAAsB,IAAI,OAAO,QAAQ;AACzC,QAAO;;;;;;AAOT,SAAgB,kBACd,OACA,MACM;AACN,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU;CAEzC,MAAM,WAAW;AACjB,MAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;AAGvB,MACE,QAAQ,cACR,QAAQ,SACR,QAAQ,SACR,QAAQ,0BAER;AAGF,MAAI,eAAe,IAAI,CAAE;AAGzB,MAAI,IAAI,WAAW,EAAE,KAAK,GAAI;EAG9B,MAAM,WAAW,QAAQ,cAAc,UAAU;AAGjD,MAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;AACpE,OAAI,CAAC,IAAK;AACV,QAAK,MAAM,YAAW;AAEtB,OAAI,gBAAgB,IAAI,CACtB,MAAK,MAAM,oBAAoB,IAAI,CAAC;OAEpC,MAAK,MAAM,IAAI;AAEjB,QAAK,MAAM,KAAI;AACf;;AAIF,MAAI,UAAU,MAAM;AAClB,QAAK,MAAM,IAAI;AACf,QAAK,MAAM,SAAS;AACpB;;AAGF,MAAI,UAAU,SAAS,UAAU,QAAQ,UAAU,OAAW;EAG9D,MAAM,WAAW,OAAO,MAAM;AAC9B,OAAK,MAAM,IAAI;AACf,OAAK,MAAM,SAAS;AACpB,OAAK,MAAM,MAAK;AAGhB,OAAK,MAAM,oBAAoB,SAAS,CAAC;AACzC,OAAK,MAAM,KAAI;;;AAenB,SAAgB,YACd,OACA,MACsB;AACtB,KAAI,CAAC,SAAS,OAAO,UAAU,SAC7B,QAAO,MAAM,sBAAsB,EAAE,OAAO,IAAI,GAAG;CAGrD,MAAM,YAAsB,EAAE;CAC9B,IAAI;CAEJ,MAAM,WAAW;AACjB,MAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;AAGvB,MAAI,QAAQ,WAAY;AAGxB,MAAI,QAAQ,SAAS,QAAQ,MAAO;AAGpC,MAAI,QAAQ,2BAA2B;AACrC,OAAI,SAAS,OAAO,UAAU,YAAY,YAAa,MACrD,iBAAgB,OAAQ,MAA8B,OAAO;AAE/D;;AAIF,MAAI,eAAe,IAAI,CAAE;AAGzB,MAAI,IAAI,WAAW,EAAE,KAAK,GAAI;EAG9B,MAAM,WAAW,QAAQ,WAAW,QAAQ,cAAc,UAAU;AAGpE,MAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;AACpE,OAAI,QAAQ,QAAQ,QAAQ,GAAI;AAChC,aAAU,KAAK,WAAW,oBAAoB,IAAI,CAAC,GAAG;AACtD;;AAIF,MAAI,UAAU,KACZ,WAAU,KAAK,IAAI,WAAW;WACrB,UAAU,SAAS,UAAU,QAAQ,UAAU,OACxD;OACK;GACL,MAAM,WAAW,OAAO,MAAM;AAC9B,aAAU,KAAK,IAAI,SAAS,IAAI,oBAAoB,SAAS,CAAC,GAAG;;;CAIrE,MAAM,SAAS,UAAU,KAAK,GAAG;AAEjC,KAAI,MAAM,oBACR,QAAO;EAAE,OAAO;EAAQ;EAAe;AAEzC,QAAO"}
+{"version":3,"file":"attrs.js","names":[],"sources":["../../src/ssr/attrs.ts"],"sourcesContent":["/**\n * HTML attribute rendering for SSR\n */\n\nimport type { Props } from '../common/props';\nimport type { RenderSink } from './sink';\nimport { escapeAttr, needsEscapeAttr, styleObjToCss } from './escape';\n\n/** Result of renderAttrs including any raw HTML from dangerouslySetInnerHTML */\nexport type AttrsResult = {\n  attrs: string;\n  dangerousHtml?: string;\n};\n\nconst ESCAPED_ATTR_VALUE_CACHE_LIMIT = 512;\nconst escapedAttrValueCache = new Map<string, string>();\n\n// Fast check for event handler pattern (on + uppercase letter)\nfunction isEventHandler(key: string): boolean {\n  return (\n    key.length >= 3 &&\n    key.charCodeAt(0) === 111 && // 'o'\n    key.charCodeAt(1) === 110 && // 'n'\n    key.charCodeAt(2) >= 65 &&\n    key.charCodeAt(2) <= 90 // 'A'-'Z'\n  );\n}\n\nfunction getEscapedAttrValue(value: string): string {\n  if (value.length > 64) {\n    return escapeAttr(value);\n  }\n\n  const cached = escapedAttrValueCache.get(value);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  const escaped = escapeAttr(value);\n  // Skip caching strings that required no escaping — same reference returned,\n  // no point occupying cache slots with identity entries.\n  if (escaped === value) return value;\n  if (escapedAttrValueCache.size >= ESCAPED_ATTR_VALUE_CACHE_LIMIT) {\n    escapedAttrValueCache.clear();\n  }\n  escapedAttrValueCache.set(value, escaped);\n  return escaped;\n}\n\n/**\n * Render attributes directly to a sink without intermediate string allocations.\n * This is the hot path for streaming SSR.\n */\nexport function renderAttrsDirect(\n  props: Props | undefined,\n  sink: Pick<RenderSink, 'write'>\n): void {\n  if (!props || typeof props !== 'object') return;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip special props\n    if (\n      key === 'children' ||\n      key === 'key' ||\n      key === 'ref' ||\n      key === 'dangerouslySetInnerHTML'\n    )\n      continue;\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute\n    const attrName = key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (!css) continue;\n      sink.write(' style=\"');\n      // Escape inline - most style values don't need escaping\n      if (needsEscapeAttr(css)) {\n        sink.write(getEscapedAttrValue(css));\n      } else {\n        sink.write(css);\n      }\n      sink.write('\"');\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      sink.write(' ');\n      sink.write(attrName);\n      continue;\n    }\n\n    if (value === false || value === null || value === undefined) continue;\n\n    // Regular attributes\n    const strValue = String(value);\n    sink.write(' ');\n    sink.write(attrName);\n    sink.write('=\"');\n    // escapeAttr returns the original string when nothing needs escaping,\n    // so no separate needsEscapeAttr pre-scan is required.\n    sink.write(getEscapedAttrValue(strValue));\n    sink.write('\"');\n  }\n}\n\n/**\n * Render attributes to HTML string, excluding event handlers\n * Optimized for minimal allocations using push-based approach\n *\n * Returns both the attribute string and any dangerouslySetInnerHTML content.\n */\nexport function renderAttrs(props?: Props): string;\nexport function renderAttrs(\n  props: Props | undefined,\n  opts: { returnDangerousHtml: true }\n): AttrsResult;\nexport function renderAttrs(\n  props?: Props,\n  opts?: { returnDangerousHtml?: boolean }\n): string | AttrsResult {\n  if (!props || typeof props !== 'object') {\n    return opts?.returnDangerousHtml ? { attrs: '' } : '';\n  }\n\n  const attrParts: string[] = [];\n  let dangerousHtml: string | undefined;\n\n  const propsObj = props as Record<string, unknown>;\n  for (const key in propsObj) {\n    const value = propsObj[key];\n\n    // Skip children in attrs\n    if (key === 'children') continue;\n\n    // Skip internal identity refs (framework-only)\n    if (key === 'key' || key === 'ref') continue;\n\n    // Handle dangerouslySetInnerHTML\n    if (key === 'dangerouslySetInnerHTML') {\n      if (value && typeof value === 'object' && '__html' in (value as object)) {\n        dangerousHtml = String((value as { __html: unknown }).__html);\n      }\n      continue;\n    }\n\n    // Skip event handlers\n    if (isEventHandler(key)) continue;\n\n    // Skip internal props\n    if (key.charCodeAt(0) === 95) continue; // '_'\n\n    // Normalize class attribute (`class` preferred, accept `className` for compatibility)\n    const attrName = key === 'class' || key === 'className' ? 'class' : key;\n\n    // Handle style objects\n    if (attrName === 'style') {\n      const css = typeof value === 'string' ? value : styleObjToCss(value);\n      if (css === null || css === '') continue;\n      attrParts.push(` style=\"${getEscapedAttrValue(css)}\"`);\n      continue;\n    }\n\n    // Boolean attributes\n    if (value === true) {\n      attrParts.push(` ${attrName}`);\n    } else if (value === false || value === null || value === undefined) {\n      continue;\n    } else {\n      const strValue = String(value);\n      attrParts.push(` ${attrName}=\"${getEscapedAttrValue(strValue)}\"`);\n    }\n  }\n\n  const result = attrParts.join('');\n\n  if (opts?.returnDangerousHtml) {\n    return { attrs: result, dangerousHtml };\n  }\n  return result;\n}\n"],"mappings":";;AAcA,MAAM,iCAAiC;AACvC,MAAM,wCAAwB,IAAI,KAAqB;AAGvD,SAAS,eAAe,KAAsB;CAC5C,OACE,IAAI,UAAU,KACd,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,KAAK,OACtB,IAAI,WAAW,EAAE,IAAI,MACrB,IAAI,WAAW,EAAE,IAAI;;AAIzB,SAAS,oBAAoB,OAAuB;CAClD,IAAI,MAAM,SAAS,IACjB,OAAO,WAAW,MAAM;CAG1B,MAAM,SAAS,sBAAsB,IAAI,MAAM;CAC/C,IAAI,WAAW,QACb,OAAO;CAGT,MAAM,UAAU,WAAW,MAAM;CAGjC,IAAI,YAAY,OAAO,OAAO;CAC9B,IAAI,sBAAsB,QAAQ,gCAChC,sBAAsB,OAAO;CAE/B,sBAAsB,IAAI,OAAO,QAAQ;CACzC,OAAO;;;;;;AAOT,SAAgB,kBACd,OACA,MACM;CACN,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU;CAEzC,MAAM,WAAW;CACjB,KAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;EAGvB,IACE,QAAQ,cACR,QAAQ,SACR,QAAQ,SACR,QAAQ,2BAER;EAGF,IAAI,eAAe,IAAI,EAAE;EAGzB,IAAI,IAAI,WAAW,EAAE,KAAK,IAAI;EAG9B,MAAM,WAAW,QAAQ,cAAc,UAAU;EAGjD,IAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;GACpE,IAAI,CAAC,KAAK;GACV,KAAK,MAAM,YAAW;GAEtB,IAAI,gBAAgB,IAAI,EACtB,KAAK,MAAM,oBAAoB,IAAI,CAAC;QAEpC,KAAK,MAAM,IAAI;GAEjB,KAAK,MAAM,KAAI;GACf;;EAIF,IAAI,UAAU,MAAM;GAClB,KAAK,MAAM,IAAI;GACf,KAAK,MAAM,SAAS;GACpB;;EAGF,IAAI,UAAU,SAAS,UAAU,QAAQ,UAAU,QAAW;EAG9D,MAAM,WAAW,OAAO,MAAM;EAC9B,KAAK,MAAM,IAAI;EACf,KAAK,MAAM,SAAS;EACpB,KAAK,MAAM,MAAK;EAGhB,KAAK,MAAM,oBAAoB,SAAS,CAAC;EACzC,KAAK,MAAM,KAAI;;;AAenB,SAAgB,YACd,OACA,MACsB;CACtB,IAAI,CAAC,SAAS,OAAO,UAAU,UAC7B,OAAO,MAAM,sBAAsB,EAAE,OAAO,IAAI,GAAG;CAGrD,MAAM,YAAsB,EAAE;CAC9B,IAAI;CAEJ,MAAM,WAAW;CACjB,KAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,QAAQ,SAAS;EAGvB,IAAI,QAAQ,YAAY;EAGxB,IAAI,QAAQ,SAAS,QAAQ,OAAO;EAGpC,IAAI,QAAQ,2BAA2B;GACrC,IAAI,SAAS,OAAO,UAAU,YAAY,YAAa,OACrD,gBAAgB,OAAQ,MAA8B,OAAO;GAE/D;;EAIF,IAAI,eAAe,IAAI,EAAE;EAGzB,IAAI,IAAI,WAAW,EAAE,KAAK,IAAI;EAG9B,MAAM,WAAW,QAAQ,WAAW,QAAQ,cAAc,UAAU;EAGpE,IAAI,aAAa,SAAS;GACxB,MAAM,MAAM,OAAO,UAAU,WAAW,QAAQ,cAAc,MAAM;GACpE,IAAI,QAAQ,QAAQ,QAAQ,IAAI;GAChC,UAAU,KAAK,WAAW,oBAAoB,IAAI,CAAC,GAAG;GACtD;;EAIF,IAAI,UAAU,MACZ,UAAU,KAAK,IAAI,WAAW;OACzB,IAAI,UAAU,SAAS,UAAU,QAAQ,UAAU,QACxD;OACK;GACL,MAAM,WAAW,OAAO,MAAM;GAC9B,UAAU,KAAK,IAAI,SAAS,IAAI,oBAAoB,SAAS,CAAC,GAAG;;;CAIrE,MAAM,SAAS,UAAU,KAAK,GAAG;CAEjC,IAAI,MAAM,qBACR,OAAO;EAAE,OAAO;EAAQ;EAAe;CAEzC,OAAO"}

package/dist/ssr/context.d.ts

@@ -10,6 +10,7 @@ interface RenderContext {
   routes?: readonly Route[];
   routeAuth?: RouteAuthOptions;
   signal?: AbortSignal;
+  queryCache?: Map<string, unknown>;
   keyCounter: number;
   renderData: Record<string, unknown> | null;
 }

package/dist/ssr/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","names":[],"sources":["../../src/ssr/context.ts"],"mappings":";;;;UAeiB,aAAA;EACf,GAAA;EACA,IAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;EAET,UAAA;EACA,UAAA,EAAY,MAAA;AAAA;AAAA,KAIF,UAAA,GAAa,aAAA;AAAA,iBA0BT,mBAAA,CACd,IAAA,WACA,IAAA;EACE,GAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;AAAA,IAEV,aAAA;;;;AApCH;iBAsDgB,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;;;;AA5BvE;iBA8CgB,gBAAA,CAAA,GAAoB,aAAA;AAAA,cAQvB,aAAA,SAAa,gBAAA;AAAA,cACb,cAAA,SAAc,iBAAA;AAAA,cACd,oBAAA,SAAoB,gBAAA;AAAA,iBAEjB,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;;;;;iBASvD,mBAAA,CAAA"}
+{"version":3,"file":"context.d.ts","names":[],"sources":["../../src/ssr/context.ts"],"mappings":";;;;UAgBiB,aAAA;EACf,GAAA;EACA,IAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;EACT,UAAA,GAAa,GAAA;EAEb,UAAA;EACA,UAAA,EAAY,MAAA;AAAA;AAAA,KAIF,UAAA,GAAa,aAAA;AAAA,iBA0BT,mBAAA,CACd,IAAA,WACA,IAAA;EACE,GAAA;EACA,IAAA,GAAO,OAAA;EACP,MAAA,GAAS,MAAA;EACT,MAAA,YAAkB,KAAA;EAClB,SAAA,GAAY,gBAAA;EACZ,MAAA,GAAS,WAAA;AAAA,IAEV,aAAA;;;;;iBAqBa,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;AAzDvE;;;;AAAA,iBA2EgB,gBAAA,CAAA,GAAoB,aAAA;AAAA,cAQvB,aAAA,SAAa,gBAAA;AAAA,cACb,cAAA,SAAc,iBAAA;AAAA,cACd,oBAAA,SAAoB,gBAAA;AAAA,iBAEjB,iBAAA,GAAA,CAAqB,GAAA,EAAK,aAAA,EAAe,EAAA,QAAU,CAAA,GAAI,CAAA;;;;;iBASvD,mBAAA,CAAA"}

package/dist/ssr/context.js

@@ -1,6 +1,7 @@
 import { __require } from "../_virtual/_rolldown/runtime.js";
 import { SSRDataMissingError } from "../common/ssr-errors.js";
 import "./errors.js";
+import { clearEscapeCache } from "./escape.js";
 //#region src/ssr/context.ts
 /**
 * SSR Context Management
@@ -16,6 +17,7 @@ try {
 } catch {}
 let fallbackStack = null;
 function createRenderContext(seed = 12345, opts = {}) {
+	clearEscapeCache();
 	return {
 		url: opts.url ?? "",
 		seed,
@@ -24,6 +26,7 @@ function createRenderContext(seed = 12345, opts = {}) {
 		routes: opts.routes,
 		routeAuth: opts.routeAuth,
 		signal: opts.signal,
+		queryCache: /* @__PURE__ */ new Map(),
 		keyCounter: 0,
 		renderData: null
 	};

package/dist/ssr/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","names":[],"sources":["../../src/ssr/context.ts"],"sourcesContent":["/**\n * SSR Context Management\n *\n * Provides concurrency-safe context for server-side rendering.\n * In Node.js, uses AsyncLocalStorage for isolation between concurrent requests.\n * Falls back to stack-based approach in non-Node environments.\n */\n\nimport { SSRDataMissingError } from './errors';\n\nexport type { SSRData } from '../common/ssr';\nimport type { SSRData } from '../common/ssr';\nimport type { Route, RouteAuthOptions } from '../common/router';\n\n// Unified per-render context combining SSRContext and RenderContext\nexport interface RenderContext {\n  url: string;\n  seed: number;\n  data?: SSRData;\n  params?: Record<string, string>;\n  routes?: readonly Route[];\n  routeAuth?: RouteAuthOptions;\n  signal?: AbortSignal;\n  // Per-render key state (moved from render-keys.ts globals)\n  keyCounter: number;\n  renderData: Record<string, unknown> | null;\n}\n\n// Legacy alias for compatibility\nexport type SSRContext = RenderContext;\n\n// AsyncLocalStorage for Node.js concurrency safety\ntype AsyncLocalStorageType<T> = {\n  getStore(): T | undefined;\n  run<R>(store: T, fn: () => R): R;\n};\n\nlet asyncLocalStorage: AsyncLocalStorageType<RenderContext> | null = null;\n\n// Try to load AsyncLocalStorage at module init (Node.js only)\ntry {\n  // Dynamic require to avoid bundler issues in browser builds\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const asyncHooks = require('async_hooks');\n  if (asyncHooks?.AsyncLocalStorage) {\n    asyncLocalStorage =\n      new asyncHooks.AsyncLocalStorage() as AsyncLocalStorageType<RenderContext>;\n  }\n} catch {\n  // Not in Node.js or async_hooks unavailable - use fallback\n}\n\n// Fallback stack for non-Node environments\nlet fallbackStack: RenderContext | null = null;\n\nexport function createRenderContext(\n  seed = 12345,\n  opts: {\n    url?: string;\n    data?: SSRData;\n    params?: Record<string, string>;\n    routes?: readonly Route[];\n    routeAuth?: RouteAuthOptions;\n    signal?: AbortSignal;\n  } = {}\n): RenderContext {\n  return {\n    url: opts.url ?? '',\n    seed,\n    data: opts.data,\n    params: opts.params,\n    routes: opts.routes,\n    routeAuth: opts.routeAuth,\n    signal: opts.signal,\n    keyCounter: 0,\n    renderData: null,\n  };\n}\n\n/**\n * Run a function with the given render context.\n * Concurrency-safe in Node.js via AsyncLocalStorage.\n */\nexport function withRenderContext<T>(ctx: RenderContext, fn: () => T): T {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.run(ctx, fn);\n  }\n  // Fallback: stack-based (not concurrency-safe)\n  const prev = fallbackStack;\n  fallbackStack = ctx;\n  try {\n    return fn();\n  } finally {\n    fallbackStack = prev;\n  }\n}\n\n/**\n * Get the current render context.\n * Returns null if not inside a render.\n */\nexport function getRenderContext(): RenderContext | null {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.getStore() ?? null;\n  }\n  return fallbackStack;\n}\n\n// Legacy API aliases (deprecated, for backwards compatibility)\nexport const getSSRContext = getRenderContext;\nexport const withSSRContext = withRenderContext;\nexport const getCurrentSSRContext = getRenderContext;\n\nexport function runWithSSRContext<T>(ctx: RenderContext, fn: () => T): T {\n  // This was a separate path for sync detection; now unified\n  return withRenderContext(ctx, fn);\n}\n\n/**\n * Centralized SSR enforcement helper — throws a consistent error when async\n * data is encountered during synchronous SSR.\n */\nexport function throwSSRDataMissing(): never {\n  throw new SSRDataMissingError();\n}\n\nexport { SSRDataMissingError };\n"],"mappings":";;;;;;;;;;;AAqCA,IAAI,oBAAiE;AAGrE,IAAI;CAGF,MAAM,aAAA,UAAqB,cAAc;AACzC,KAAI,YAAY,kBACd,qBACE,IAAI,WAAW,mBAAmB;QAEhC;AAKR,IAAI,gBAAsC;AAE1C,SAAgB,oBACd,OAAO,OACP,OAOI,EAAE,EACS;AACf,QAAO;EACL,KAAK,KAAK,OAAO;EACjB;EACA,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,YAAY;EACZ,YAAY;EACb;;;;;;AAOH,SAAgB,kBAAqB,KAAoB,IAAgB;AACvE,KAAI,kBACF,QAAO,kBAAkB,IAAI,KAAK,GAAG;CAGvC,MAAM,OAAO;AACb,iBAAgB;AAChB,KAAI;AACF,SAAO,IAAI;WACH;AACR,kBAAgB;;;;;;;AAQpB,SAAgB,mBAAyC;AACvD,KAAI,kBACF,QAAO,kBAAkB,UAAU,IAAI;AAEzC,QAAO;;;;;;AAiBT,SAAgB,sBAA6B;AAC3C,OAAM,IAAI,qBAAqB"}
+{"version":3,"file":"context.js","names":[],"sources":["../../src/ssr/context.ts"],"sourcesContent":["/**\n * SSR Context Management\n *\n * Provides concurrency-safe context for server-side rendering.\n * In Node.js, uses AsyncLocalStorage for isolation between concurrent requests.\n * Falls back to stack-based approach in non-Node environments.\n */\n\nimport { SSRDataMissingError } from './errors';\nimport { clearEscapeCache } from './escape';\n\nexport type { SSRData } from '../common/ssr';\nimport type { SSRData } from '../common/ssr';\nimport type { Route, RouteAuthOptions } from '../common/router';\n\n// Unified per-render context combining SSRContext and RenderContext\nexport interface RenderContext {\n  url: string;\n  seed: number;\n  data?: SSRData;\n  params?: Record<string, string>;\n  routes?: readonly Route[];\n  routeAuth?: RouteAuthOptions;\n  signal?: AbortSignal;\n  queryCache?: Map<string, unknown>;\n  // Per-render key state (moved from render-keys.ts globals)\n  keyCounter: number;\n  renderData: Record<string, unknown> | null;\n}\n\n// Legacy alias for compatibility\nexport type SSRContext = RenderContext;\n\n// AsyncLocalStorage for Node.js concurrency safety\ntype AsyncLocalStorageType<T> = {\n  getStore(): T | undefined;\n  run<R>(store: T, fn: () => R): R;\n};\n\nlet asyncLocalStorage: AsyncLocalStorageType<RenderContext> | null = null;\n\n// Try to load AsyncLocalStorage at module init (Node.js only)\ntry {\n  // Dynamic require to avoid bundler issues in browser builds\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  const asyncHooks = require('async_hooks');\n  if (asyncHooks?.AsyncLocalStorage) {\n    asyncLocalStorage =\n      new asyncHooks.AsyncLocalStorage() as AsyncLocalStorageType<RenderContext>;\n  }\n} catch {\n  // Not in Node.js or async_hooks unavailable - use fallback\n}\n\n// Fallback stack for non-Node environments\nlet fallbackStack: RenderContext | null = null;\n\nexport function createRenderContext(\n  seed = 12345,\n  opts: {\n    url?: string;\n    data?: SSRData;\n    params?: Record<string, string>;\n    routes?: readonly Route[];\n    routeAuth?: RouteAuthOptions;\n    signal?: AbortSignal;\n  } = {}\n): RenderContext {\n  clearEscapeCache();\n\n  return {\n    url: opts.url ?? '',\n    seed,\n    data: opts.data,\n    params: opts.params,\n    routes: opts.routes,\n    routeAuth: opts.routeAuth,\n    signal: opts.signal,\n    queryCache: new Map<string, unknown>(),\n    keyCounter: 0,\n    renderData: null,\n  };\n}\n\n/**\n * Run a function with the given render context.\n * Concurrency-safe in Node.js via AsyncLocalStorage.\n */\nexport function withRenderContext<T>(ctx: RenderContext, fn: () => T): T {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.run(ctx, fn);\n  }\n  // Fallback: stack-based (not concurrency-safe)\n  const prev = fallbackStack;\n  fallbackStack = ctx;\n  try {\n    return fn();\n  } finally {\n    fallbackStack = prev;\n  }\n}\n\n/**\n * Get the current render context.\n * Returns null if not inside a render.\n */\nexport function getRenderContext(): RenderContext | null {\n  if (asyncLocalStorage) {\n    return asyncLocalStorage.getStore() ?? null;\n  }\n  return fallbackStack;\n}\n\n// Legacy API aliases (deprecated, for backwards compatibility)\nexport const getSSRContext = getRenderContext;\nexport const withSSRContext = withRenderContext;\nexport const getCurrentSSRContext = getRenderContext;\n\nexport function runWithSSRContext<T>(ctx: RenderContext, fn: () => T): T {\n  // This was a separate path for sync detection; now unified\n  return withRenderContext(ctx, fn);\n}\n\n/**\n * Centralized SSR enforcement helper — throws a consistent error when async\n * data is encountered during synchronous SSR.\n */\nexport function throwSSRDataMissing(): never {\n  throw new SSRDataMissingError();\n}\n\nexport { SSRDataMissingError };\n"],"mappings":";;;;;;;;;;;;AAuCA,IAAI,oBAAiE;AAGrE,IAAI;CAGF,MAAM,aAAA,UAAqB,cAAc;CACzC,IAAI,YAAY,mBACd,oBACE,IAAI,WAAW,mBAAmB;QAEhC;AAKR,IAAI,gBAAsC;AAE1C,SAAgB,oBACd,OAAO,OACP,OAOI,EAAE,EACS;CACf,kBAAkB;CAElB,OAAO;EACL,KAAK,KAAK,OAAO;EACjB;EACA,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,QAAQ,KAAK;EACb,WAAW,KAAK;EAChB,QAAQ,KAAK;EACb,4BAAY,IAAI,KAAsB;EACtC,YAAY;EACZ,YAAY;EACb;;;;;;AAOH,SAAgB,kBAAqB,KAAoB,IAAgB;CACvE,IAAI,mBACF,OAAO,kBAAkB,IAAI,KAAK,GAAG;CAGvC,MAAM,OAAO;CACb,gBAAgB;CAChB,IAAI;EACF,OAAO,IAAI;WACH;EACR,gBAAgB;;;;;;;AAQpB,SAAgB,mBAAyC;CACvD,IAAI,mBACF,OAAO,kBAAkB,UAAU,IAAI;CAEzC,OAAO;;;;;;AAiBT,SAAgB,sBAA6B;CAC3C,MAAM,IAAI,qBAAqB"}

package/dist/ssr/escape.js

@@ -24,7 +24,50 @@ const VOID_ELEMENTS = new Set([
 const escapeCache = /* @__PURE__ */ new Map();
 const MAX_CACHE_SIZE = 256;
 const CSS_UNSAFE_RE = /[{}<>\\]/g;
-const CSS_DANGEROUS_FN_RE = /(?:url|expression|javascript)\s*\(/i;
+const CSS_URI_SCHEME_RE = /(?:^|[\s(,])([a-z][a-z0-9+.-]*):/i;
+const CSS_FUNCTION_NAME_RE = /([a-z-][a-z0-9-]*)\s*\(/gi;
+const CSS_ALLOWED_FUNCTIONS = new Set([
+	"var",
+	"calc",
+	"min",
+	"max",
+	"clamp",
+	"rgb",
+	"rgba",
+	"hsl",
+	"hsla",
+	"lab",
+	"lch",
+	"oklab",
+	"oklch",
+	"color",
+	"color-mix",
+	"translate",
+	"translatex",
+	"translatey",
+	"translatez",
+	"scale",
+	"scalex",
+	"scaley",
+	"scalez",
+	"rotate",
+	"rotatex",
+	"rotatey",
+	"rotatez",
+	"skew",
+	"skewx",
+	"skewy",
+	"matrix",
+	"matrix3d",
+	"linear-gradient",
+	"radial-gradient",
+	"conic-gradient",
+	"repeating-linear-gradient",
+	"repeating-radial-gradient",
+	"repeating-conic-gradient",
+	"cubic-bezier",
+	"steps"
+]);
 const STYLE_PROP_CACHE = /* @__PURE__ */ new Map();
 const MAX_STYLE_PROP_CACHE_SIZE = 512;
 function toKebabCached(prop) {
@@ -35,6 +78,13 @@ function toKebabCached(prop) {
 	return kebab;
 }
 /**
+* Clear the escape cache. Call between SSR requests in long-running servers
+* to prevent memory buildup from unique strings.
+*/
+function clearEscapeCache() {
+	escapeCache.clear();
+}
+/**
 * Fast check if a string needs text escaping.
 * Used to skip the full escape call when not needed.
 */
@@ -114,21 +164,11 @@ function escapeAttr(value) {
 */
 function escapeCssValue(value) {
 	const str = String(value);
-	let hasUnsafeChars = false;
-	let openParen = -1;
-	for (let i = 0; i < str.length; i++) {
-		const ch = str.charCodeAt(i);
-		if (ch === 123 || ch === 125 || ch === 60 || ch === 62 || ch === 92) {
-			hasUnsafeChars = true;
-			if (openParen >= 0) break;
-		} else if (ch === 40 && openParen < 0) {
-			openParen = i;
-			if (hasUnsafeChars) break;
-		}
+	if (CSS_URI_SCHEME_RE.test(str)) return "";
+	if (str.includes("(")) {
+		for (const match of str.matchAll(CSS_FUNCTION_NAME_RE)) if (!CSS_ALLOWED_FUNCTIONS.has(match[1].toLowerCase())) return "";
 	}
-	if (!hasUnsafeChars && openParen === -1) return str;
-	if (openParen !== -1 && CSS_DANGEROUS_FN_RE.test(str)) return "";
-	return hasUnsafeChars ? str.replace(CSS_UNSAFE_RE, "") : str;
+	return str.replace(CSS_UNSAFE_RE, "");
 }
 /**
 * Convert style object to CSS string with value escaping
@@ -148,6 +188,6 @@ function styleObjToCss(value) {
 	return result || null;
 }
 //#endregion
-export { VOID_ELEMENTS, escapeAttr, escapeText, needsEscapeAttr, styleObjToCss };
+export { VOID_ELEMENTS, clearEscapeCache, escapeAttr, escapeText, needsEscapeAttr, styleObjToCss };
 
 //# sourceMappingURL=escape.js.map

package/dist/ssr/escape.js.map

@@ -1 +1 @@
-{"version":3,"file":"escape.js","names":[],"sources":["../../src/ssr/escape.ts"],"sourcesContent":["/**\n * HTML escaping utilities for SSR\n *\n * Centralizes text and attribute escaping to avoid duplication\n * between sync and streaming SSR renderers.\n */\n\n// HTML5 void elements that don't have closing tags\nexport const VOID_ELEMENTS = new Set([\n  'area',\n  'base',\n  'br',\n  'col',\n  'embed',\n  'hr',\n  'img',\n  'input',\n  'link',\n  'meta',\n  'param',\n  'source',\n  'track',\n  'wbr',\n]);\n\n// Escape cache for common values (bounded and clearable for long-running servers)\nconst escapeCache = new Map<string, string>();\nconst MAX_CACHE_SIZE = 256;\n\nconst _TEXT_ESCAPE_RE = /[&<>]/g;\n\nconst CSS_UNSAFE_RE = /[{}<>\\\\]/g;\nconst CSS_DANGEROUS_FN_RE = /(?:url|expression|javascript)\\s*\\(/i;\n\nconst STYLE_PROP_CACHE = new Map<string, string>();\nconst MAX_STYLE_PROP_CACHE_SIZE = 512;\n\n// Pre-compute escape map functions for faster replacement\nconst _textEscapeMap = (ch: string): string => {\n  const code = ch.charCodeAt(0);\n  if (code === 38) return '&amp;'; // &\n  if (code === 60) return '&lt;'; // <\n  if (code === 62) return '&gt;'; // >\n  return ch;\n};\n\nfunction toKebabCached(prop: string): string {\n  const cached = STYLE_PROP_CACHE.get(prop);\n  if (cached !== undefined) return cached;\n  const kebab = prop.replace(/[A-Z]/g, (m) => `-${m.toLowerCase()}`);\n  if (STYLE_PROP_CACHE.size < MAX_STYLE_PROP_CACHE_SIZE) {\n    STYLE_PROP_CACHE.set(prop, kebab);\n  }\n  return kebab;\n}\n\n/**\n * Clear the escape cache. Call between SSR requests in long-running servers\n * to prevent memory buildup from unique strings.\n */\nexport function clearEscapeCache(): void {\n  escapeCache.clear();\n}\n\n/**\n * Fast check if a string needs text escaping.\n * Used to skip the full escape call when not needed.\n */\nexport function needsEscapeText(text: string): boolean {\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    if (ch === 38 || ch === 60 || ch === 62) return true;\n  }\n  return false;\n}\n\n/**\n * Fast check if a string needs attribute escaping.\n * Checks for & \" ' < > characters.\n */\nexport function needsEscapeAttr(value: string): boolean {\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    // & \" ' < >\n    if (ch === 38 || ch === 34 || ch === 39 || ch === 60 || ch === 62) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Escape HTML special characters in text content\n * Fast-path: cache first, then scan-then-escape for new strings\n */\nexport function escapeText(text: string): string {\n  // Only use cache for short strings (likely to be repeated)\n  const useCache = text.length <= 64;\n\n  if (useCache) {\n    const cached = escapeCache.get(text);\n    if (cached !== undefined) return cached;\n  }\n\n  // Fast path: check if escaping needed\n  if (!needsEscapeText(text)) {\n    if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n      escapeCache.set(text, text);\n    }\n    return text;\n  }\n\n  // Single-pass scan-and-build: avoids 3 separate regex passes\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += text.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  const result = escaped + text.slice(lastIndex);\n\n  if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n    escapeCache.set(text, result);\n  }\n  return result;\n}\n\n/**\n * Escape HTML special characters in attribute values.\n * Single-pass scan: returns the original string unchanged when no special\n * characters are found, so callers can drop separate needsEscapeAttr checks.\n */\nexport function escapeAttr(value: string): string {\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 34) entity = '&quot;';\n    else if (ch === 39) entity = '&#x27;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += value.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  // Return original reference when nothing needed escaping (no allocation)\n  return lastIndex === 0 ? value : escaped + value.slice(lastIndex);\n}\n\n/**\n * Escape CSS value to prevent injection attacks.\n * Removes characters that could break out of CSS context.\n */\nfunction escapeCssValue(value: string): string {\n  const str = String(value);\n\n  let hasUnsafeChars = false;\n  let openParen = -1;\n\n  // Single pass to check for unsafe chars and find first paren\n  for (let i = 0; i < str.length; i++) {\n    const ch = str.charCodeAt(i);\n    // Check for { } < > \\\n    if (ch === 123 || ch === 125 || ch === 60 || ch === 62 || ch === 92) {\n      hasUnsafeChars = true;\n      if (openParen >= 0) break;\n    } else if (ch === 40 && openParen < 0) {\n      // (\n      openParen = i;\n      if (hasUnsafeChars) break;\n    }\n  }\n\n  // Fast path: most CSS values are simple\n  if (!hasUnsafeChars && openParen === -1) return str;\n\n  // Block dangerous CSS functions\n  if (openParen !== -1 && CSS_DANGEROUS_FN_RE.test(str)) {\n    return '';\n  }\n\n  // Remove characters that could break out of CSS value context\n  return hasUnsafeChars ? str.replace(CSS_UNSAFE_RE, '') : str;\n}\n\n/**\n * Convert style object to CSS string with value escaping\n * Optimized to avoid Object.entries allocation\n */\nexport function styleObjToCss(value: unknown): string | null {\n  if (!value || typeof value !== 'object') return null;\n\n  const styleObj = value as Record<string, unknown>;\n  let result = '';\n\n  for (const k in styleObj) {\n    const v = styleObj[k];\n    if (v === null || v === undefined || v === false) continue;\n\n    const prop = toKebabCached(k);\n    const safeValue = escapeCssValue(String(v));\n    if (safeValue) {\n      result += `${prop}:${safeValue};`;\n    }\n  }\n\n  return result || null;\n}\n"],"mappings":";;;;;;;AAQA,MAAa,gBAAgB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAM,8BAAc,IAAI,KAAqB;AAC7C,MAAM,iBAAiB;AAIvB,MAAM,gBAAgB;AACtB,MAAM,sBAAsB;AAE5B,MAAM,mCAAmB,IAAI,KAAqB;AAClD,MAAM,4BAA4B;AAWlC,SAAS,cAAc,MAAsB;CAC3C,MAAM,SAAS,iBAAiB,IAAI,KAAK;AACzC,KAAI,WAAW,OAAW,QAAO;CACjC,MAAM,QAAQ,KAAK,QAAQ,WAAW,MAAM,IAAI,EAAE,aAAa,GAAG;AAClE,KAAI,iBAAiB,OAAO,0BAC1B,kBAAiB,IAAI,MAAM,MAAM;AAEnC,QAAO;;;;;;AAeT,SAAgB,gBAAgB,MAAuB;AACrD,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;AAC7B,MAAI,OAAO,MAAM,OAAO,MAAM,OAAO,GAAI,QAAO;;AAElD,QAAO;;;;;;AAOT,SAAgB,gBAAgB,OAAwB;AACtD,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;AAE9B,MAAI,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,GAC7D,QAAO;;AAGX,QAAO;;;;;;AAOT,SAAgB,WAAW,MAAsB;CAE/C,MAAM,WAAW,KAAK,UAAU;AAEhC,KAAI,UAAU;EACZ,MAAM,SAAS,YAAY,IAAI,KAAK;AACpC,MAAI,WAAW,OAAW,QAAO;;AAInC,KAAI,CAAC,gBAAgB,KAAK,EAAE;AAC1B,MAAI,YAAY,YAAY,OAAO,eACjC,aAAY,IAAI,MAAM,KAAK;AAE7B,SAAO;;CAIT,IAAI,UAAU;CACd,IAAI,YAAY;AAChB,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;EAC7B,IAAI;AACJ,MAAI,OAAO,GAAI,UAAS;WACf,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;MACxB;AACL,aAAW,KAAK,MAAM,WAAW,EAAE,GAAG;AACtC,cAAY,IAAI;;CAElB,MAAM,SAAS,UAAU,KAAK,MAAM,UAAU;AAE9C,KAAI,YAAY,YAAY,OAAO,eACjC,aAAY,IAAI,MAAM,OAAO;AAE/B,QAAO;;;;;;;AAQT,SAAgB,WAAW,OAAuB;CAChD,IAAI,UAAU;CACd,IAAI,YAAY;AAChB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;EAC9B,IAAI;AACJ,MAAI,OAAO,GAAI,UAAS;WACf,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;WACpB,OAAO,GAAI,UAAS;MACxB;AACL,aAAW,MAAM,MAAM,WAAW,EAAE,GAAG;AACvC,cAAY,IAAI;;AAGlB,QAAO,cAAc,IAAI,QAAQ,UAAU,MAAM,MAAM,UAAU;;;;;;AAOnE,SAAS,eAAe,OAAuB;CAC7C,MAAM,MAAM,OAAO,MAAM;CAEzB,IAAI,iBAAiB;CACrB,IAAI,YAAY;AAGhB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,KAAK,IAAI,WAAW,EAAE;AAE5B,MAAI,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,MAAM,OAAO,IAAI;AACnE,oBAAiB;AACjB,OAAI,aAAa,EAAG;aACX,OAAO,MAAM,YAAY,GAAG;AAErC,eAAY;AACZ,OAAI,eAAgB;;;AAKxB,KAAI,CAAC,kBAAkB,cAAc,GAAI,QAAO;AAGhD,KAAI,cAAc,MAAM,oBAAoB,KAAK,IAAI,CACnD,QAAO;AAIT,QAAO,iBAAiB,IAAI,QAAQ,eAAe,GAAG,GAAG;;;;;;AAO3D,SAAgB,cAAc,OAA+B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;CAEhD,MAAM,WAAW;CACjB,IAAI,SAAS;AAEb,MAAK,MAAM,KAAK,UAAU;EACxB,MAAM,IAAI,SAAS;AACnB,MAAI,MAAM,QAAQ,MAAM,UAAa,MAAM,MAAO;EAElD,MAAM,OAAO,cAAc,EAAE;EAC7B,MAAM,YAAY,eAAe,OAAO,EAAE,CAAC;AAC3C,MAAI,UACF,WAAU,GAAG,KAAK,GAAG,UAAU;;AAInC,QAAO,UAAU"}
+{"version":3,"file":"escape.js","names":[],"sources":["../../src/ssr/escape.ts"],"sourcesContent":["/**\n * HTML escaping utilities for SSR\n *\n * Centralizes text and attribute escaping to avoid duplication\n * between sync and streaming SSR renderers.\n */\n\n// HTML5 void elements that don't have closing tags\nexport const VOID_ELEMENTS = new Set([\n  'area',\n  'base',\n  'br',\n  'col',\n  'embed',\n  'hr',\n  'img',\n  'input',\n  'link',\n  'meta',\n  'param',\n  'source',\n  'track',\n  'wbr',\n]);\n\n// Escape cache for common values (bounded and clearable for long-running servers)\nconst escapeCache = new Map<string, string>();\nconst MAX_CACHE_SIZE = 256;\n\nconst _TEXT_ESCAPE_RE = /[&<>]/g;\n\nconst CSS_UNSAFE_RE = /[{}<>\\\\]/g;\nconst CSS_URI_SCHEME_RE = /(?:^|[\\s(,])([a-z][a-z0-9+.-]*):/i;\nconst CSS_FUNCTION_NAME_RE = /([a-z-][a-z0-9-]*)\\s*\\(/gi;\n\nconst CSS_ALLOWED_FUNCTIONS = new Set([\n  'var',\n  'calc',\n  'min',\n  'max',\n  'clamp',\n  'rgb',\n  'rgba',\n  'hsl',\n  'hsla',\n  'lab',\n  'lch',\n  'oklab',\n  'oklch',\n  'color',\n  'color-mix',\n  'translate',\n  'translatex',\n  'translatey',\n  'translatez',\n  'scale',\n  'scalex',\n  'scaley',\n  'scalez',\n  'rotate',\n  'rotatex',\n  'rotatey',\n  'rotatez',\n  'skew',\n  'skewx',\n  'skewy',\n  'matrix',\n  'matrix3d',\n  'linear-gradient',\n  'radial-gradient',\n  'conic-gradient',\n  'repeating-linear-gradient',\n  'repeating-radial-gradient',\n  'repeating-conic-gradient',\n  'cubic-bezier',\n  'steps',\n]);\n\nconst STYLE_PROP_CACHE = new Map<string, string>();\nconst MAX_STYLE_PROP_CACHE_SIZE = 512;\n\n// Pre-compute escape map functions for faster replacement\nconst _textEscapeMap = (ch: string): string => {\n  const code = ch.charCodeAt(0);\n  if (code === 38) return '&amp;'; // &\n  if (code === 60) return '&lt;'; // <\n  if (code === 62) return '&gt;'; // >\n  return ch;\n};\n\nfunction toKebabCached(prop: string): string {\n  const cached = STYLE_PROP_CACHE.get(prop);\n  if (cached !== undefined) return cached;\n  const kebab = prop.replace(/[A-Z]/g, (m) => `-${m.toLowerCase()}`);\n  if (STYLE_PROP_CACHE.size < MAX_STYLE_PROP_CACHE_SIZE) {\n    STYLE_PROP_CACHE.set(prop, kebab);\n  }\n  return kebab;\n}\n\n/**\n * Clear the escape cache. Call between SSR requests in long-running servers\n * to prevent memory buildup from unique strings.\n */\nexport function clearEscapeCache(): void {\n  escapeCache.clear();\n}\n\n/**\n * Fast check if a string needs text escaping.\n * Used to skip the full escape call when not needed.\n */\nexport function needsEscapeText(text: string): boolean {\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    if (ch === 38 || ch === 60 || ch === 62) return true;\n  }\n  return false;\n}\n\n/**\n * Fast check if a string needs attribute escaping.\n * Checks for & \" ' < > characters.\n */\nexport function needsEscapeAttr(value: string): boolean {\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    // & \" ' < >\n    if (ch === 38 || ch === 34 || ch === 39 || ch === 60 || ch === 62) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Escape HTML special characters in text content\n * Fast-path: cache first, then scan-then-escape for new strings\n */\nexport function escapeText(text: string): string {\n  // Only use cache for short strings (likely to be repeated)\n  const useCache = text.length <= 64;\n\n  if (useCache) {\n    const cached = escapeCache.get(text);\n    if (cached !== undefined) return cached;\n  }\n\n  // Fast path: check if escaping needed\n  if (!needsEscapeText(text)) {\n    if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n      escapeCache.set(text, text);\n    }\n    return text;\n  }\n\n  // Single-pass scan-and-build: avoids 3 separate regex passes\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < text.length; i++) {\n    const ch = text.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += text.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  const result = escaped + text.slice(lastIndex);\n\n  if (useCache && escapeCache.size < MAX_CACHE_SIZE) {\n    escapeCache.set(text, result);\n  }\n  return result;\n}\n\n/**\n * Escape HTML special characters in attribute values.\n * Single-pass scan: returns the original string unchanged when no special\n * characters are found, so callers can drop separate needsEscapeAttr checks.\n */\nexport function escapeAttr(value: string): string {\n  let escaped = '';\n  let lastIndex = 0;\n  for (let i = 0; i < value.length; i++) {\n    const ch = value.charCodeAt(i);\n    let entity: string;\n    if (ch === 38) entity = '&amp;';\n    else if (ch === 34) entity = '&quot;';\n    else if (ch === 39) entity = '&#x27;';\n    else if (ch === 60) entity = '&lt;';\n    else if (ch === 62) entity = '&gt;';\n    else continue;\n    escaped += value.slice(lastIndex, i) + entity;\n    lastIndex = i + 1;\n  }\n  // Return original reference when nothing needed escaping (no allocation)\n  return lastIndex === 0 ? value : escaped + value.slice(lastIndex);\n}\n\n/**\n * Escape CSS value to prevent injection attacks.\n * Removes characters that could break out of CSS context.\n */\nfunction escapeCssValue(value: string): string {\n  const str = String(value);\n\n  if (CSS_URI_SCHEME_RE.test(str)) {\n    return '';\n  }\n\n  if (str.includes('(')) {\n    for (const match of str.matchAll(CSS_FUNCTION_NAME_RE)) {\n      if (!CSS_ALLOWED_FUNCTIONS.has(match[1].toLowerCase())) {\n        return '';\n      }\n    }\n  }\n\n  // Remove characters that could break out of CSS value context\n  return str.replace(CSS_UNSAFE_RE, '');\n}\n\n/**\n * Convert style object to CSS string with value escaping\n * Optimized to avoid Object.entries allocation\n */\nexport function styleObjToCss(value: unknown): string | null {\n  if (!value || typeof value !== 'object') return null;\n\n  const styleObj = value as Record<string, unknown>;\n  let result = '';\n\n  for (const k in styleObj) {\n    const v = styleObj[k];\n    if (v === null || v === undefined || v === false) continue;\n\n    const prop = toKebabCached(k);\n    const safeValue = escapeCssValue(String(v));\n    if (safeValue) {\n      result += `${prop}:${safeValue};`;\n    }\n  }\n\n  return result || null;\n}\n"],"mappings":";;;;;;;AAQA,MAAa,gBAAgB,IAAI,IAAI;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAM,8BAAc,IAAI,KAAqB;AAC7C,MAAM,iBAAiB;AAIvB,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAE7B,MAAM,wBAAwB,IAAI,IAAI;CACpC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,MAAM,mCAAmB,IAAI,KAAqB;AAClD,MAAM,4BAA4B;AAWlC,SAAS,cAAc,MAAsB;CAC3C,MAAM,SAAS,iBAAiB,IAAI,KAAK;CACzC,IAAI,WAAW,QAAW,OAAO;CACjC,MAAM,QAAQ,KAAK,QAAQ,WAAW,MAAM,IAAI,EAAE,aAAa,GAAG;CAClE,IAAI,iBAAiB,OAAO,2BAC1B,iBAAiB,IAAI,MAAM,MAAM;CAEnC,OAAO;;;;;;AAOT,SAAgB,mBAAyB;CACvC,YAAY,OAAO;;;;;;AAOrB,SAAgB,gBAAgB,MAAuB;CACrD,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;EAC7B,IAAI,OAAO,MAAM,OAAO,MAAM,OAAO,IAAI,OAAO;;CAElD,OAAO;;;;;;AAOT,SAAgB,gBAAgB,OAAwB;CACtD,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;EAE9B,IAAI,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,IAC7D,OAAO;;CAGX,OAAO;;;;;;AAOT,SAAgB,WAAW,MAAsB;CAE/C,MAAM,WAAW,KAAK,UAAU;CAEhC,IAAI,UAAU;EACZ,MAAM,SAAS,YAAY,IAAI,KAAK;EACpC,IAAI,WAAW,QAAW,OAAO;;CAInC,IAAI,CAAC,gBAAgB,KAAK,EAAE;EAC1B,IAAI,YAAY,YAAY,OAAO,gBACjC,YAAY,IAAI,MAAM,KAAK;EAE7B,OAAO;;CAIT,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,KAAK,KAAK,WAAW,EAAE;EAC7B,IAAI;EACJ,IAAI,OAAO,IAAI,SAAS;OACnB,IAAI,OAAO,IAAI,SAAS;OACxB,IAAI,OAAO,IAAI,SAAS;OACxB;EACL,WAAW,KAAK,MAAM,WAAW,EAAE,GAAG;EACtC,YAAY,IAAI;;CAElB,MAAM,SAAS,UAAU,KAAK,MAAM,UAAU;CAE9C,IAAI,YAAY,YAAY,OAAO,gBACjC,YAAY,IAAI,MAAM,OAAO;CAE/B,OAAO;;;;;;;AAQT,SAAgB,WAAW,OAAuB;CAChD,IAAI,UAAU;CACd,IAAI,YAAY;CAChB,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,KAAK,MAAM,WAAW,EAAE;EAC9B,IAAI;EACJ,IAAI,OAAO,IAAI,SAAS;OACnB,IAAI,OAAO,IAAI,SAAS;OACxB,IAAI,OAAO,IAAI,SAAS;OACxB,IAAI,OAAO,IAAI,SAAS;OACxB,IAAI,OAAO,IAAI,SAAS;OACxB;EACL,WAAW,MAAM,MAAM,WAAW,EAAE,GAAG;EACvC,YAAY,IAAI;;CAGlB,OAAO,cAAc,IAAI,QAAQ,UAAU,MAAM,MAAM,UAAU;;;;;;AAOnE,SAAS,eAAe,OAAuB;CAC7C,MAAM,MAAM,OAAO,MAAM;CAEzB,IAAI,kBAAkB,KAAK,IAAI,EAC7B,OAAO;CAGT,IAAI,IAAI,SAAS,IAAI,EACnB;OAAK,MAAM,SAAS,IAAI,SAAS,qBAAqB,EACpD,IAAI,CAAC,sBAAsB,IAAI,MAAM,GAAG,aAAa,CAAC,EACpD,OAAO;;CAMb,OAAO,IAAI,QAAQ,eAAe,GAAG;;;;;;AAOvC,SAAgB,cAAc,OAA+B;CAC3D,IAAI,CAAC,SAAS,OAAO,UAAU,UAAU,OAAO;CAEhD,MAAM,WAAW;CACjB,IAAI,SAAS;CAEb,KAAK,MAAM,KAAK,UAAU;EACxB,MAAM,IAAI,SAAS;EACnB,IAAI,MAAM,QAAQ,MAAM,UAAa,MAAM,OAAO;EAElD,MAAM,OAAO,cAAc,EAAE;EAC7B,MAAM,YAAY,eAAe,OAAO,EAAE,CAAC;EAC3C,IAAI,WACF,UAAU,GAAG,KAAK,GAAG,UAAU;;CAInC,OAAO,UAAU"}

package/dist/ssr/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/ssr/index.ts"],"mappings":";;;;;;;;KAkFY,SAAA,GAAY,YAAA;AAAA,iBAQR,wBAAA,CAAA;AAAA,iBAmBA,uBAAA,CAAA;;;;;AA+/BhB;iBAAgB,kBAAA,CACd,SAAA,GACE,KAAA,GAAQ,MAAA,sBACL,KAAA,GAAQ,UAAA,iDACb,KAAA,GAAQ,MAAA,mBACR,OAAA;EAAY,IAAA;EAAe,IAAA,GAAO,OAAA;AAAA;AAAA,iBA2BpB,0BAAA,CAA2B,IAAA;EACzC,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA,EAAS,YAAA;EACT,MAAA,GAAS,MAAA;EACT,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,iBA6Bd,cAAA,CAAe,IAAA;EACnC,GAAA;EACA,QAAA,GAAW,aAAA;EACX,MAAA,GAAS,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACtD,IAAA,GAAO,gBAAA;EACP,MAAA,GAAS,WAAA;AAAA,IACP,OAAA,CAAQ,kBAAA;AAAA,iBAmCI,wBAAA,CAAyB,IAAA;EACvC,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,iBAqBpB,yBAAA,CAA0B,IAAA;EACxC,IAAA,EAAM,OAAA;EACN,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,KAkDxB,QAAA;EACV,IAAA;EACA,OAAA,EAAS,YAAA;EACT,SAAA;AAAA;AAAA,iBAGc,cAAA,CACd,SAAA,GACE,KAAA,GAAQ,MAAA,sBACL,KAAA,GAAQ,UAAA;AAAA,iBAEC,cAAA,CAAe,IAAA;EAC7B,GAAA;EACA,MAAA,EAAQ,QAAA;EACR,IAAA;EACA,IAAA,GAAO,OAAA;AAAA;AAAA,iBAuBO,cAAA,CAAe,IAAA;EAC7B,GAAA;EACA,MAAA,EAAQ,QAAA;EACR,IAAA;EACA,IAAA,GAAO,OAAA;EACP,OAAA,CAAQ,IAAA;EACR,UAAA;AAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/ssr/index.ts"],"mappings":";;;;;;;;KAiHY,SAAA,GAAY,YAAA;AAAA,iBAQR,wBAAA,CAAA;AAAA,iBAmBA,uBAAA,CAAA;;;;;AAkgChB;iBAAgB,kBAAA,CACd,SAAA,GACE,KAAA,GAAQ,MAAA,sBACL,KAAA,GAAQ,UAAA,iDACb,KAAA,GAAQ,MAAA,mBACR,OAAA;EAAY,IAAA;EAAe,IAAA,GAAO,OAAA;AAAA;AAAA,iBA2BpB,0BAAA,CAA2B,IAAA;EACzC,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA,EAAS,YAAA;EACT,MAAA,GAAS,MAAA;EACT,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,iBA6Bd,cAAA,CAAe,IAAA;EACnC,GAAA;EACA,QAAA,GAAW,aAAA;EACX,MAAA,GAAS,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACtD,IAAA,GAAO,gBAAA;EACP,MAAA,GAAS,WAAA;AAAA,IACP,OAAA,CAAQ,kBAAA;AAAA,iBAmCI,wBAAA,CAAyB,IAAA;EACvC,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,iBAqBpB,yBAAA,CAA0B,IAAA;EACxC,IAAA,EAAM,OAAA;EACN,GAAA;EACA,MAAA,EAAQ,KAAA;IAAQ,IAAA;IAAc,OAAA,EAAS,YAAA;IAAc,SAAA;EAAA;EACrD,OAAA;IAAY,IAAA;IAAe,IAAA,GAAO,OAAA;EAAA;AAAA;AAAA,KAkDxB,QAAA;EACV,IAAA;EACA,OAAA,EAAS,YAAA;EACT,SAAA;AAAA;AAAA,iBAGc,cAAA,CACd,SAAA,GACE,KAAA,GAAQ,MAAA,sBACL,KAAA,GAAQ,UAAA;AAAA,iBAEC,cAAA,CAAe,IAAA;EAC7B,GAAA;EACA,MAAA,EAAQ,QAAA;EACR,IAAA;EACA,IAAA,GAAO,OAAA;AAAA;AAAA,iBAuBO,cAAA,CAAe,IAAA;EAC7B,GAAA;EACA,MAAA,EAAQ,QAAA;EACR,IAAA;EACA,IAAA,GAAO,OAAA;EACP,OAAA,CAAQ,IAAA;EACR,UAAA;AAAA"}

package/dist/ssr/index.js

@@ -7,12 +7,12 @@ import { evaluateForState } from "../runtime/for.js";
 import { evaluateCaseState, evaluateShowState } from "../runtime/control.js";
 import { installSSRBridge } from "../runtime/ssr-bridge.js";
 import { SSRDataMissingError } from "../common/ssr-errors.js";
+import { VOID_ELEMENTS, escapeText, styleObjToCss } from "./escape.js";
 import { createRenderContext, getRenderContext, throwSSRDataMissing, withRenderContext } from "./context.js";
 import { resolveRouteFromRoutes, resolveRouteRequest } from "../router/route.js";
 import "../jsx/index.js";
 import { DefaultPortal } from "../foundations/structures/portal.js";
 import { collectResources, getCurrentRenderData, getNextKey, resolvePlan, resolveResources, startRenderPhase, stopRenderPhase } from "./render-keys.js";
-import { VOID_ELEMENTS, escapeText, styleObjToCss } from "./escape.js";
 import { renderAttrs, renderAttrsDirect } from "./attrs.js";
 import { StreamSink, StringSink } from "./sink.js";
 import { renderNodeToSink } from "./stream-render.js";
@@ -21,6 +21,18 @@ const __SSR_DEBUG = process.env.ASKR_SSR_DEBUG === "1" || process.env.ASKR_SSR_D
 function isSSRAttrEventHandler(key) {
 	return key.length >= 3 && key.charCodeAt(0) === 111 && key.charCodeAt(1) === 110 && key.charCodeAt(2) >= 65 && key.charCodeAt(2) <= 90;
 }
+function inheritRenderableKey(source, result) {
+	const inheritedKey = source.key;
+	if (inheritedKey === void 0 || inheritedKey === null) return result;
+	if (!result || typeof result !== "object" || !("type" in result)) return result;
+	const resultVNode = result;
+	if (resultVNode.key === void 0 || resultVNode.key === null) resultVNode.key = inheritedKey;
+	if (typeof resultVNode.type === "string") {
+		if (!resultVNode.props) resultVNode.props = {};
+		if (resultVNode.props["data-key"] === void 0) resultVNode.props["data-key"] = String(inheritedKey);
+	}
+	return result;
+}
 installSSRBridge({
 	getCurrentSSRContext: getRenderContext,
 	throwSSRDataMissing,
@@ -271,7 +283,7 @@ function renderNodeSync(node, ctx) {
 function renderNodeSyncToSink(node, sink, ctx) {
 	const { type, props } = node;
 	if (typeof type === "function") {
-		renderNodeSyncToSink(executeComponentSync(type, props, ctx), sink, ctx);
+		renderNodeSyncToSink(inheritRenderableKey(node, executeComponentSync(type, props, ctx)), sink, ctx);
 		return;
 	}
 	if (typeof type === "symbol") {
@@ -487,7 +499,7 @@ function verifyExpectedNode(node, state, ctx) {
 	if (!node || typeof node !== "object" || !("type" in node)) return true;
 	const vnode = node;
 	const { type, props } = vnode;
-	if (typeof type === "function") return verifyExpectedNode(executeComponentSync(type, props, ctx), state, ctx);
+	if (typeof type === "function") return verifyExpectedNode(inheritRenderableKey(vnode, executeComponentSync(type, props, ctx)), state, ctx);
 	if (typeof type === "symbol") {
 		if (type === __CONTROL_BOUNDARY__) {
 			const children = evaluateControlBoundaryChildren(vnode);