@askrjs/askr 0.0.84 → 0.0.86

package/dist/render-context-D0Hoj9dW.js

@@ -0,0 +1,161 @@
+//#region src/common/ssr-errors.ts
+/**
+* Common call contracts: SSR error types
+*/
+var SSRDataMissingError = class SSRDataMissingError extends Error {
+	constructor(message = "Server-side rendering requires all data to be available synchronously. This component attempted to use async data during SSR.") {
+		super(message);
+		this.code = "SSR_DATA_MISSING";
+		this.name = "SSRDataMissingError";
+		Object.setPrototypeOf(this, SSRDataMissingError.prototype);
+	}
+};
+//#endregion
+//#region src/common/page-render-envelope.ts
+const PAGE_RENDER_ENVELOPE_VERSION = 1;
+function ownedRecord(value) {
+	return Object.freeze({ ...value });
+}
+function createPageRenderEnvelope(input = {}) {
+	return Object.freeze({
+		version: PAGE_RENDER_ENVELOPE_VERSION,
+		resources: ownedRecord(input.resources),
+		route: input.route,
+		framework: ownedRecord(input.framework)
+	});
+}
+function isPageRenderEnvelope(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const candidate = value;
+	return candidate.version === PAGE_RENDER_ENVELOPE_VERSION && Boolean(candidate.resources && typeof candidate.resources === "object" && !Array.isArray(candidate.resources)) && Boolean(candidate.framework && typeof candidate.framework === "object" && !Array.isArray(candidate.framework));
+}
+function pageRenderEnvelope(value, fallback = {}) {
+	if (isPageRenderEnvelope(value)) return value;
+	return createPageRenderEnvelope({
+		...fallback,
+		route: value ?? fallback.route
+	});
+}
+function replacePageRoute(value, route) {
+	const current = pageRenderEnvelope(value);
+	return createPageRenderEnvelope({
+		resources: current.resources,
+		route,
+		framework: current.framework
+	});
+}
+function withPageFramework(value, framework) {
+	const current = pageRenderEnvelope(value);
+	return createPageRenderEnvelope({
+		resources: current.resources,
+		route: current.route,
+		framework
+	});
+}
+function isEmptyPageRenderEnvelope(value) {
+	return value.route === void 0 && Object.keys(value.resources).length === 0 && Object.keys(value.framework).length === 0;
+}
+//#endregion
+//#region src/common/render-context.ts
+let provider = { getRenderContext() {
+	return null;
+} };
+let hydrationRenderData = null;
+let hydrationKeyCounter = 0;
+let hydrationVerificationDepth = 0;
+const RESOURCE_VERIFICATION_SNAPSHOTS = "rv";
+function configureRenderContextProvider(nextProvider) {
+	provider = nextProvider;
+}
+function getActiveRenderContext() {
+	return provider.getRenderContext();
+}
+/** Register request-local CSS produced during SSR without importing the SSR renderer in clients. */
+function registerSSRStyle(id, cssText) {
+	const context = getActiveRenderContext();
+	if (!context?.ssrStyles) return;
+	const safeCssText = cssText.replace(/<\/style/gi, "<\\/style");
+	const existing = context.ssrStyles.get(id);
+	if (existing && existing.cssText !== safeCssText) throw new RangeError(`SSR style registration collision for ${JSON.stringify(id)}.`);
+	context.ssrStyles.set(id, {
+		id,
+		cssText: safeCssText
+	});
+}
+function getCurrentRenderData() {
+	return getActiveRenderContext()?.renderData ?? hydrationRenderData;
+}
+function getNextRenderKey() {
+	const ctx = getActiveRenderContext();
+	if (ctx) return `r:${ctx.keyCounter++}`;
+	if (hydrationRenderData) return `r:${hydrationKeyCounter++}`;
+	return "r:0";
+}
+function startHydrationRenderPhase(data) {
+	hydrationRenderData = data;
+	hydrationKeyCounter = 0;
+}
+function stopHydrationRenderPhase() {
+	hydrationRenderData = null;
+	hydrationKeyCounter = 0;
+}
+/** @internal Run one synchronous client-side markup verification pass. */
+function withHydrationVerificationRender(fn) {
+	hydrationVerificationDepth += 1;
+	try {
+		return fn();
+	} finally {
+		hydrationVerificationDepth -= 1;
+	}
+}
+/** @internal Whether resources should reflect their server pending snapshot. */
+function isHydrationVerificationRender() {
+	return hydrationVerificationDepth > 0;
+}
+/** @internal Read a server-captured resource branch without invoking its loader. */
+function getResourceVerificationSnapshot(key) {
+	const snapshots = getCurrentRenderData()?.framework[RESOURCE_VERIFICATION_SNAPSHOTS];
+	if (!snapshots || typeof snapshots !== "object" || Array.isArray(snapshots)) return null;
+	if (!Object.prototype.hasOwnProperty.call(snapshots, key)) return null;
+	const snapshot = snapshots[key];
+	if (!snapshot || typeof snapshot !== "object" || Array.isArray(snapshot)) return null;
+	const candidate = snapshot;
+	return typeof candidate.pending === "boolean" ? {
+		value: candidate.value,
+		pending: candidate.pending
+	} : null;
+}
+/** @internal Preserve a JSON-safe server branch solely for markup verification. */
+function recordResourceVerificationSnapshot(key, snapshot) {
+	const ctx = getActiveRenderContext();
+	const envelope = ctx?.hydrationData;
+	if (!ctx || !envelope) return;
+	const current = envelope.framework[RESOURCE_VERIFICATION_SNAPSHOTS];
+	const snapshots = current && typeof current === "object" && !Array.isArray(current) ? current : {};
+	ctx.hydrationData = withPageFramework(envelope, {
+		...envelope.framework,
+		[RESOURCE_VERIFICATION_SNAPSHOTS]: {
+			...snapshots,
+			[key]: snapshot
+		}
+	});
+}
+function startRenderPhase(data) {
+	const ctx = getActiveRenderContext();
+	if (ctx) {
+		ctx.renderData = data ?? null;
+		ctx.keyCounter = 0;
+	}
+}
+function stopRenderPhase() {
+	const ctx = getActiveRenderContext();
+	if (ctx) {
+		ctx.renderData = null;
+		ctx.keyCounter = 0;
+	}
+}
+function throwSSRDataMissing() {
+	throw new SSRDataMissingError();
+}
+//#endregion
+export { isPageRenderEnvelope as _, getResourceVerificationSnapshot as a, withPageFramework as b, registerSSRStyle as c, stopHydrationRenderPhase as d, stopRenderPhase as f, isEmptyPageRenderEnvelope as g, createPageRenderEnvelope as h, getNextRenderKey as i, startHydrationRenderPhase as l, withHydrationVerificationRender as m, getActiveRenderContext as n, isHydrationVerificationRender as o, throwSSRDataMissing as p, getCurrentRenderData as r, recordResourceVerificationSnapshot as s, configureRenderContextProvider as t, startRenderPhase as u, pageRenderEnvelope as v, SSRDataMissingError as x, replacePageRoute as y };

package/dist/{renderer-B9j5IV1q.js → renderer-D9DL9R2D.js}

@@ -1,18 +1,18 @@
 import { n as hasTransparentComponentResult, t as __CONTROL_BOUNDARY__ } from "./control-C-ApnFs1.js";
 import { n as _isDOMElement, t as __ERROR_BOUNDARY__ } from "./vnode-D24p6IW2.js";
-import { b as isDevelopmentEnvironment, c as runRuntimeHandlerScope, f as configureRuntimeRenderer, i as getDefaultRuntimeInstance, n as enqueueRuntimeTask, v as logger, y as getRuntimeEnv } from "./access-ePqdQqkV.js";
-import { n as markFastPathApplied, t as isBulkCommitActive } from "./fastlane-BOr4lSLl.js";
-import { i as isFragmentType, r as STATIC_CHILDREN } from "./jsx-C3IECePB.js";
-import { d as getCurrentContextFrame, h as markVNodeTreeWithContextFrame, i as mountInstanceInline, n as createComponentInstance, o as renderComponentInline, p as getVNodeContextFrame, t as captureInlineRenderSnapshot, y as withContext } from "./component-internal-Bw4Mf9fd.js";
+import { b as isDevelopmentEnvironment, c as runRuntimeHandlerScope, f as configureRuntimeRenderer, i as getDefaultRuntimeInstance, n as enqueueRuntimeTask, v as logger, y as getRuntimeEnv } from "./access-Dpfoi4cA.js";
+import { n as markFastPathApplied, t as isBulkCommitActive } from "./fastlane-CrfB3QG0.js";
 import { b as restoreDomCommitScope, c as enterDomCommitScope, p as getCurrentInstance } from "./component-scope-DzJEbYGE.js";
-import { t as cleanupComponent } from "./component-cleanup-Bug5tSiG.js";
-import { c as getCurrentLifecycleCommitBatch, l as registerLifecycleRollback, p as isPromiseLike, r as discardLifecycleCommitBatch, s as flushLifecycleCommitBatch, t as beginLifecycleCommitBatch, u as registerLifecycleTransaction } from "./lifecycle-batch-CFI4NKpJ.js";
-import { _ as setControlBoundaryContextFrame, a as registerForStateTransaction, b as rerenderChildScope, c as captureForFallbackTransactionSnapshot, d as clearCaseDomUpdateState, f as clearShowDomUpdateState, g as evaluateShowState, h as evaluateCaseState, i as evaluateForState, l as captureForItemTransactionSnapshot, n as clearForDomUpdateState, o as rollbackForStateTransaction, t as beginForStateTransaction, v as createChildScope, y as disposeChildScope } from "./for-internal-DjpV8ioj.js";
-import { n as createOwnedFineGrainedEffect, r as markFineGrainedEffectsDirtySource, t as createFineGrainedEffect } from "./effect-B487asyz.js";
-import { C as getDelegatedHandlersForElement, D as updateDelegatedListener, E as removeDelegatedListener, S as getDelegatedHandlerForElement, T as isEventDelegationEnabled, _ as teardownNodeSubtree, a as elementReactivePropsCleanup, b as addFreshDelegatedListener, c as forEachElementReactivePropCleanup, d as removeAllListeners, f as removeElementReactiveProps, g as setFreshElementReactivePropCleanup, h as setDirectElementReactivePropCleanup, i as elementListeners, l as getElementReactivePropCleanupSize, m as replaceElementRefBookkeeping, n as cleanupInstanceIfPresent, o as elementRefs, p as removeElementRef, r as cleanupInstancesUnder, s as forEachDescendantNode, t as REACTIVE_CHILDREN_KEY, u as getElementReactivePropsCleanupMap, v as updateElementRef, w as isDelegatedEvent, x as clearDelegatedHandlersForElement, y as addDelegatedListener } from "./cleanup-ARiXproi.js";
-import { a as isSSRPortalHydrationAnchor } from "./portal-w3oQ6oQU.js";
+import { i as isFragmentType, r as STATIC_CHILDREN } from "./jsx-C3IECePB.js";
+import { d as getCurrentContextFrame, h as markVNodeTreeWithContextFrame, i as mountInstanceInline, n as createComponentInstance, o as renderComponentInline, p as getVNodeContextFrame, t as captureInlineRenderSnapshot, y as withContext } from "./component-internal-DcrLymUJ.js";
+import { t as cleanupComponent } from "./component-cleanup-BUfUleGZ.js";
+import { c as getCurrentLifecycleCommitBatch, l as registerLifecycleRollback, p as isPromiseLike, r as discardLifecycleCommitBatch, s as flushLifecycleCommitBatch, t as beginLifecycleCommitBatch, u as registerLifecycleTransaction } from "./lifecycle-batch-Dfpid9-A.js";
+import { _ as setControlBoundaryContextFrame, a as registerForStateTransaction, b as rerenderChildScope, c as captureForFallbackTransactionSnapshot, d as clearCaseDomUpdateState, f as clearShowDomUpdateState, g as evaluateShowState, h as evaluateCaseState, i as evaluateForState, l as captureForItemTransactionSnapshot, n as clearForDomUpdateState, o as rollbackForStateTransaction, t as beginForStateTransaction, v as createChildScope, y as disposeChildScope } from "./for-internal-B_mnQhan.js";
+import { n as createOwnedFineGrainedEffect, r as markFineGrainedEffectsDirtySource, t as createFineGrainedEffect } from "./effect-lnxQIpJG.js";
+import { C as getDelegatedHandlersForElement, D as updateDelegatedListener, E as removeDelegatedListener, S as getDelegatedHandlerForElement, T as isEventDelegationEnabled, _ as teardownNodeSubtree, a as elementReactivePropsCleanup, b as addFreshDelegatedListener, c as forEachElementReactivePropCleanup, d as removeAllListeners, f as removeElementReactiveProps, g as setFreshElementReactivePropCleanup, h as setDirectElementReactivePropCleanup, i as elementListeners, l as getElementReactivePropCleanupSize, m as replaceElementRefBookkeeping, n as cleanupInstanceIfPresent, o as elementRefs, p as removeElementRef, r as cleanupInstancesUnder, s as forEachDescendantNode, t as REACTIVE_CHILDREN_KEY, u as getElementReactivePropsCleanupMap, v as updateElementRef, w as isDelegatedEvent, x as clearDelegatedHandlersForElement, y as addDelegatedListener } from "./cleanup-c837KVij.js";
 import { n as getPublicAttributeName, t as sanitizeCssValue } from "./css-BuPaTOfe.js";
-import { a as isSafeHref, i as ROUTE_ROOT_COMPONENT } from "./csp-nonce-ZTlD_EnK.js";
+import { i as ROUTE_ROOT_COMPONENT, o as isUnsafeUrlAttribute } from "./csp-nonce-Bc52OIVc.js";
+import { a as isSSRPortalHydrationAnchor } from "./portal-w3oQ6oQU.js";
 //#region src/runtime/error-boundary.ts
 function createBoundaryReset(instance) {
 	return () => {
@@ -713,6 +713,15 @@ function isKeyedReorderFastPathEligible(parent, newChildren, oldKeyMap) {
 }
 //#endregion
 //#region src/renderer/attributes.ts
+function isDangerousInnerHTMLPayload(value) {
+	return value !== null && typeof value === "object" && "__html" in value;
+}
+function applyDangerousInnerHTMLValue(el, value) {
+	if (!isDangerousInnerHTMLPayload(value)) return;
+	if (isDevelopmentEnvironment()) logger.warn("[Askr] dangerouslySetInnerHTML is being used, which bypasses the framework's normal rendering and can introduce XSS vulnerabilities if the HTML is derived from untrusted input. Make sure the value is sanitized.");
+	const html = value.__html;
+	el.innerHTML = html === null || html === void 0 ? "" : String(html);
+}
 function applyFormControlProp(el, key, value, tagName) {
 	if (key === "value") {
 		const stringValue = String(value);
@@ -819,7 +828,8 @@ function applyStaticScalarPropsToElement(el, props, tagName) {
 		if (key === "class" || key === "className") writeElementClassName(el, String(value));
 		else if (key === "style") applyStylePropValue(el, value);
 		else if (key === "value" || key === "checked") applyFormControlProp(el, key, value, tagName);
-		else if (key.toLowerCase() === "href" && !isSafeHref(String(value))) removeRenderedAttribute(el, key);
+		else if (key === "dangerouslySetInnerHTML") applyDangerousInnerHTMLValue(el, value);
+		else if (isUnsafeUrlAttribute(key, value)) removeRenderedAttribute(el, key);
 		else setRenderedAttribute(el, key, String(value));
 	}
 }
@@ -870,6 +880,7 @@ function applyClassPropValue(el, value, previousValue, descriptor) {
 	if (descriptor) descriptor.lastClassTokens = nextTokens;
 }
 function applyScalarPropValue(el, key, value, tagName, previousValue, descriptor) {
+	if (key === "dangerouslySetInnerHTML" && !isDangerousInnerHTMLPayload(value)) return;
 	if (value === void 0 || value === null || value === false) {
 		if (key === "class" || key === "className") {
 			const previousTokens = descriptor?.lastClassTokens;
@@ -885,7 +896,8 @@ function applyScalarPropValue(el, key, value, tagName, previousValue, descriptor
 	if (key === "class" || key === "className") applyClassPropValue(el, value, previousValue, descriptor);
 	else if (key === "style") applyStylePropValue(el, value);
 	else if (key === "value" || key === "checked") applyFormControlProp(el, key, value, tagName);
-	else if (key.toLowerCase() === "href" && !isSafeHref(String(value))) removeRenderedAttribute(el, key);
+	else if (key === "dangerouslySetInnerHTML") applyDangerousInnerHTMLValue(el, value);
+	else if (isUnsafeUrlAttribute(key, value)) removeRenderedAttribute(el, key);
 	else setRenderedAttribute(el, key, String(value));
 }
 function removeStaleAttributes(el, vnode, props) {
@@ -1266,7 +1278,7 @@ function findHostInstanceByType(host, type, node, parent, wrapperDepth) {
 		if (identityMatches.length === 1) return identityMatches[0];
 		if (identityMatches.length > 1 && key !== void 0) return identityMatches[identityMatches.length - 1];
 		const sameType = instances.filter((instance) => instance.fn === type);
-		if (sameType.length === 1) return sameType[0];
+		if (key === void 0 && sameType.length === 1) return sameType[0];
 		return null;
 	}
 	if (host.__ASKR_INSTANCE?.fn === type) {
@@ -1642,6 +1654,10 @@ function applyPropsToElement$1(el, props, tagName, isHydrationSkipped) {
 			continue;
 		}
 		if (isSkippedProp(key)) continue;
+		if (key === "dangerouslySetInnerHTML") {
+			applyScalarPropValue(el, key, value, tagName);
+			continue;
+		}
 		if (value === void 0 || value === null || value === false) continue;
 		const eventProp = parseEventProp(key);
 		if (eventProp) {
@@ -1666,6 +1682,15 @@ function syncElementPropBindings(el, domVNode, props, usesReactiveChildren) {
 		const value = props[key];
 		if (key === "ref") continue;
 		if (isSkippedProp(key)) continue;
+		if (key === "dangerouslySetInnerHTML") {
+			const existingEntry = existingReactiveProps?.get(key);
+			if (existingEntry) {
+				existingEntry.cleanup();
+				existingReactiveProps?.delete(key);
+			}
+			applyScalarPropValue(el, key, value, domVNode.type);
+			continue;
+		}
 		const eventProp = parseEventProp(key);
 		const eventName = eventProp?.eventName;
 		const eventCapture = eventProp?.capture ?? false;
@@ -3713,6 +3738,7 @@ function updateElementChildren$1(el, children, forceUpdate = false) {
 	}
 	clearControlBoundaryCommitOwner(el);
 	if (children === null || children === void 0) {
+		keyedElements.delete(el);
 		for (let n = el.firstChild; n;) {
 			const next = n.nextSibling;
 			teardownNodeSubtree(n);
@@ -3722,7 +3748,7 @@ function updateElementChildren$1(el, children, forceUpdate = false) {
 		return;
 	}
 	if (!Array.isArray(children) && isFragmentVNode(children)) {
-		updateUnkeyedChildren(el, normalizeComponentChildren(children), forceUpdate);
+		updateElementChildren$1(el, normalizeComponentChildren(children), forceUpdate);
 		return;
 	}
 	if (!Array.isArray(children) && (typeof children === "string" || typeof children === "number")) {
@@ -4827,6 +4853,8 @@ function commitForStateBoundaryChildrenImpl(parent, forState, childrenVNodes, ru
 			commitDirtyNoReorder(dirtyIndices);
 			break;
 		case "REMOVE_ONE":
+			removeForBoundaryNodes(parent, forState.lastRemovedNodes, { teardown: false });
+			removedBoundaryConsumed = true;
 			commitDirtyNoReorder(dirtyIndices);
 			break;
 		case "TRUNCATE":
@@ -4989,6 +5017,8 @@ function captureRangeFocus(range, parent) {
 	} : null;
 	return () => {
 		if (!active.isConnected || active.ownerDocument.activeElement === active) return;
+		const currentActive = active.ownerDocument.activeElement;
+		if (currentActive instanceof Element && currentActive !== active.ownerDocument.body && currentActive !== active.ownerDocument.documentElement && currentActive.isConnected) return;
 		try {
 			active.focus({ preventScroll: true });
 		} catch {
@@ -6419,6 +6449,7 @@ function isBlueprintKeyProp(key) {
 }
 function classifyProp(value, key) {
 	if (key === "ref") return { kind: "ref" };
+	if (key === "dangerouslySetInnerHTML") return null;
 	if (key.startsWith("on") && key.length > 2) return typeof value === "function" ? { kind: "event" } : null;
 	if (typeof value === "function") return { kind: "reactive" };
 	if (value === void 0 || value === null || value === false) return { kind: "empty" };
@@ -6894,6 +6925,7 @@ function createOwnedResultNodeWithBlueprint(owner, node, parentNamespace) {
 }
 function createIntrinsicElement(node, type, props, parentNamespace) {
 	const children = props.children ?? node.children;
+	const usesDangerousHTML = isDangerousInnerHTMLPayload(props.dangerouslySetInnerHTML);
 	const elementNamespace = resolveChildNamespace(type, parentNamespace);
 	const el = createElementForNamespace(type, parentNamespace);
 	try {
@@ -6905,7 +6937,7 @@ function createIntrinsicElement(node, type, props, parentNamespace) {
 			return el;
 		}
 		applyPropsToElement$1(el, props, type, isHydrationSkipped);
-		if (children !== null && children !== void 0) {
+		if (!usesDangerousHTML && children !== null && children !== void 0) {
 			const controlBoundaryVNode = getDirectControlBoundaryVNode(children);
 			if (controlBoundaryVNode) {
 				const controlState = getControlBoundaryState(controlBoundaryVNode);
@@ -6965,7 +6997,8 @@ function applyElementUpdateFromVnode(el, vnode, updateChildren, forceChildrenUpd
 	if (!_isDOMElement(vnode)) return;
 	const props = vnode.props || {};
 	const domVNode = vnode;
-	const shouldUpdateChildren = updateChildren && props.imperativeChildren !== true;
+	const usesDangerousHTML = isDangerousInnerHTMLPayload(props.dangerouslySetInnerHTML);
+	const shouldUpdateChildren = updateChildren && props.imperativeChildren !== true && !usesDangerousHTML;
 	if (isHydrationSkipped(el)) {
 		rememberDeferredHydrationVNode(el, vnode, getCurrentInstance(), getCurrentInstance()?.ownerFrame ?? null);
 		clearHydrationDeferredSubtree(el);
@@ -6973,6 +7006,7 @@ function applyElementUpdateFromVnode(el, vnode, updateChildren, forceChildrenUpd
 	}
 	materializeKey(el, vnode, props);
 	updateElementRef(el, props.ref);
+	if (usesDangerousHTML) updateElementChildren$1(el, void 0, forceChildrenUpdate);
 	if (!hasTrackedElementPropBindings(el)) {
 		if (!forceChildrenUpdate && hasMatchingStaticProps(el, props, vnode.type)) {
 			if (shouldUpdateChildren) {
@@ -7226,6 +7260,13 @@ function replaceComponentRange(instance, result, host) {
 		const emptyResult = result === null || result === void 0 || result === false;
 		if (host instanceof Comment && emptyResult) return host;
 		if (!(host instanceof Comment) && !emptyResult && !isTransparentComponentResult(result)) return null;
+		if (host instanceof Element && _isDOMElement(result) && hasTransparentComponentResult(result.type)) {
+			const syncedHost = getRendererDOMHost().syncComponentElement(host, result, result.type, result.props ?? {}, getParentNamespace(parent), false, retainedInstances);
+			if (syncedHost) {
+				retainReplacementOwnerChain(syncedHost, instance, retainedInstances);
+				return syncedHost;
+			}
+		}
 		return beginComponentHostReplacement(instanceHost, instance, instance.target, retainedInstances).replace(() => materializeComponentResultNode(instance, result, getParentNamespace(parent)), (nextHost) => retainReplacementOwnerChain(nextHost, instance, retainedInstances));
 	}
 	const placeholder = host;