@async/framework 0.10.1 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 0.11.0 - 2026-06-17
+
+- Removed the networked `ssr-spa` router mode and route-fragment fetching so
+  `ssr` activates server-rendered HTML and snapshots without client route
+  fetches.
+- Changed browser navigation to render registered SPA partials locally in
+  `spa` and `csr` modes while leaving same-origin document navigation alone in
+  `ssr` and `mpa` modes.
+- Replaced the server proxy's implicit `globalThis.fetch` default with an
+  explicit `transport` callback supplied by application code.
+- Published only generated runtime artifacts and declarations:
+  `browser.*`, `server.js`, `framework.ts`, and `framework.d.ts`; source,
+  tests, and examples are no longer included in the package tarball.
+- Added regression coverage for SSR snapshot activation without fetch, SPA
+  stale/error navigation behavior, explicit server proxy transports, and static
+  generated-bundle scans for implicit global fetch access.
+- Bundle size from bundled TypeScript source: `browser.ts` 171,908 B raw /
+  32,421 B gzip -> `browser.min.js` 72,827 B raw / 21,845 B gzip
+  (-99,081 B raw, -10,576 B gzip).
+
+## 0.10.2 - 2026-06-17
+
+- Fixed intercepted router link, form, and popstate navigation failures so they
+  update router error state and do not create unhandled promise rejections.
+- Preserved native same-document hash link behavior and made malformed encoded
+  dynamic route params fall back to the raw segment instead of throwing.
+- Hardened rootless detach cleanup, lazy descriptor import retry, server JSON
+  transport validation, and `cache.getOrSet(...)` handling for cached
+  `undefined` values.
+- Expanded regression coverage for scheduler reentrancy, boundary receiver
+  patch shapes, root lifecycle, lazy descriptors, server transport edge cases,
+  component lifecycle ordering, and installed package export-map shape.
+- Bundle size from bundled TypeScript source: `browser.ts` 173,774 B raw /
+  32,727 B gzip -> `browser.min.js` 73,680 B raw / 22,047 B gzip
+  (-100,094 B raw, -10,680 B gzip).
+
 ## 0.10.1 - 2026-06-17
 
 - Added Terser-powered browser bundle minification and pointed legacy

package/README.md

@@ -102,8 +102,11 @@ production:
 | `browser.min.js` | ESM | Compact browser module bundle |
 | `browser.umd.js` | UMD | Readable script-tag/CommonJS-style bundle |
 | `browser.umd.min.js` | UMD | Compact script-tag/CommonJS-style bundle and default CDN file |
-| `browser.ts` | Bundled TypeScript source | TS-aware runtimes and higher-layer tooling |
+| `browser.ts` | Bundled browser TypeScript source | TS-aware runtimes and higher-layer tooling |
 | `browser.d.ts` | Type declarations | TypeScript declarations for the browser API |
+| `server.js` | ESM | Server-capable Node.js bundle |
+| `framework.ts` | Bundled server-capable TypeScript source | TS-aware runtimes and higher-layer tooling |
+| `framework.d.ts` | Type declarations | TypeScript declarations for the server-capable API |
 
 ```html
 <main async:container>
@@ -789,8 +792,9 @@ handlers.register("addToCart", async function () {
 
 ### Server Calls
 
-Server registries run locally on the server and proxies call an HTTP endpoint
-from the browser. Both expose the same dotted call shape.
+Server registries run locally on the server. Browser proxies use an explicit
+transport supplied by the app, so network access is opt-in. Both expose the same
+dotted call shape.
 
 ```js
 import {
@@ -818,6 +822,7 @@ import {
 
 const server = createServerProxy({
   endpoint: "/__async/server",
+  transport: httpTransport,
   signals,
   loader,
   router
@@ -884,8 +889,7 @@ Router modes:
 | --- | --- |
 | `csr` | Client renders local partial into boundary | Client renders local partial and swaps |
 | `spa` | Existing HTML may already contain route | Client renders local partial and swaps |
-| `ssr` | Server rendered document | Browser navigates normally |
-| `ssr-spa` | Server rendered document/route boundary | Fetch route partial, apply effects, swap |
+| `ssr` | Server-rendered document plus snapshot activation | Browser navigates normally |
 | `mpa` | Any document source | Browser navigates normally |
 
 CSR startup can use an empty route boundary:
@@ -1001,12 +1005,24 @@ The returned HTML includes a route boundary plus a JSON snapshot:
 ```
 
 Browser activation scans the existing HTML and attaches events. It does not
-hydrate, diff, patch, or rerender:
+hydrate, diff, patch, rerender, or fetch route fragments:
+
+```js
+createApp(browserApp, {
+  root: document
+}).start();
+```
+
+If browser handlers or async signals need server commands, pass a server proxy
+with an explicit transport:
 
 ```js
 createApp(browserApp, {
   root: document,
-  server: createServerProxy({ endpoint: "/__async/server" })
+  server: createServerProxy({
+    endpoint: "/__async/server",
+    transport: httpTransport
+  })
 }).start();
 ```
 

package/browser.d.ts

@@ -2,7 +2,7 @@
 // Browser type declarations for @async/framework/browser.
 
 export type RuntimeTarget = "browser" | "server";
-export type RouterMode = "csr" | "spa" | "ssr" | "ssr-spa" | "mpa";
+export type RouterMode = "csr" | "spa" | "ssr" | "mpa";
 export type AsyncSignalStatus = "idle" | "loading" | "ready" | "error";
 export type MaybePromise<T> = T | Promise<T>;
 export type Cleanup = () => void;
@@ -261,6 +261,7 @@ export interface ServerContext {
 }
 
 export type ServerFunction<T = unknown> = (this: ServerContext, ...args: unknown[]) => MaybePromise<ServerResult<T>>;
+export type ServerProxyTransport = (url: string, init: RequestInit) => MaybePromise<Response>;
 
 export interface ServerNamespace {
   run<T = unknown>(id: string, args?: unknown[], context?: Partial<ServerContext>): Promise<T>;
@@ -275,7 +276,7 @@ export interface ServerNamespace {
 
 export interface ServerProxyOptions {
   endpoint?: string;
-  fetch?: typeof fetch;
+  transport: ServerProxyTransport;
   signals?: SignalRegistry;
   loader?: LoaderInstance;
   router?: Router;
@@ -378,8 +379,6 @@ export interface RouterOptions {
   server?: ServerNamespace;
   cache?: CacheRegistry;
   partials?: PartialRegistry;
-  fetch?: typeof fetch;
-  routeEndpoint?: string;
   attributes?: AttributeConfig;
   scheduler?: Scheduler;
 }
@@ -607,8 +606,6 @@ export interface CreateAppOptions extends LoaderOptions {
   routes?: RouteRegistry;
   partials?: PartialRegistry;
   components?: ComponentRegistry;
-  fetch?: typeof fetch;
-  routeEndpoint?: string;
   request?: Request;
   locals?: unknown;
   requestContext?: RequestContextStore;
@@ -722,7 +719,7 @@ export declare function createScheduler(options?: SchedulerOptions): Scheduler;
 export declare function defineRoute(partial: string, options?: Omit<RouteDefinition, "partial">): RouteDefinition;
 export declare const route: typeof defineRoute;
 export declare function applyServerResult(result: unknown, context?: Record<string, unknown>): Promise<unknown>;
-export declare function createServerProxy(options?: ServerProxyOptions): ServerNamespace;
+export declare function createServerProxy(options: ServerProxyOptions): ServerNamespace;
 export declare function resolveServerCommandArguments(args: Array<{ type: "local"; name: string } | { type: "signal"; path: string }>, context?: Record<string, unknown>): { args: unknown[]; signalValues: Record<string, unknown>; signalPaths: string[] };
 export declare function unwrapServerResult<T = unknown>(result: ServerResult<T>): T | ServerResult<T>;
 export declare function computed<T = unknown>(fn: (this: { signals: SignalRegistry; id: string; server?: ServerNamespace; router?: Router; loader?: LoaderInstance; cache?: CacheRegistry; scheduler?: Scheduler }) => T): ComputedSignal<T>;

package/browser.js

@@ -318,10 +318,20 @@ const __lazyRegistryModule = (() => {
         const resolved = resolveDescriptorUrl(type, id, descriptor, registryAssets);
         let modulePromise = moduleCache.get(resolved.moduleUrl);
         if (!modulePromise) {
-          modulePromise = Promise.resolve(importModule(resolved.moduleUrl));
+          modulePromise = Promise.resolve().then(() => importModule(resolved.moduleUrl));
           moduleCache.set(resolved.moduleUrl, modulePromise);
         }
-        const module = await modulePromise;
+        let module;
+        try {
+          module = await modulePromise;
+        } catch (cause) {
+          if (moduleCache.get(resolved.moduleUrl) === modulePromise) {
+            moduleCache.delete(resolved.moduleUrl);
+          }
+          throw new Error(`Lazy ${type} "${id}" failed to import ${resolved.moduleUrl}: ${errorMessage(cause)}`, {
+            cause
+          });
+        }
         const value = resolveExport(module, resolved.exportNames, type, id);
         exportCache.set(cacheKey, value);
         return value;
@@ -481,6 +491,10 @@ const __lazyRegistryModule = (() => {
     return /^[A-Za-z][A-Za-z\d+.-]*:/.test(value);
   }
 
+  function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+  }
+
   function stableStringify(value) {
     if (!value || typeof value !== "object" || Array.isArray(value)) {
       return JSON.stringify(value);
@@ -809,15 +823,7 @@ const __cacheModule = (() => {
 
       get(key) {
         assertKey(key);
-        const entry = entries.get(key);
-        if (!entry) {
-          return undefined;
-        }
-        if (entry.expiresAt !== undefined && entry.expiresAt <= now()) {
-          entries.delete(key);
-          return undefined;
-        }
-        return entry.value;
+        return readEntry(key).value;
       },
 
       set(key, value, options = {}) {
@@ -835,9 +841,9 @@ const __cacheModule = (() => {
         if (typeof fn !== "function") {
           throw new TypeError("cache.getOrSet(key, fn) requires a function.");
         }
-        const cached = registryApi.get(key);
-        if (cached !== undefined) {
-          return cached;
+        const cached = readEntry(key);
+        if (cached.found) {
+          return cached.value;
         }
         if (pending.has(key)) {
           return pending.get(key);
@@ -888,8 +894,8 @@ const __cacheModule = (() => {
       snapshot() {
         const snapshot = {};
         for (const [key] of entries) {
-          const value = registryApi.get(key);
-          if (value !== undefined) {
+          const { found, value } = readEntry(key);
+          if (found && value !== undefined) {
             snapshot[key] = value;
           }
         }
@@ -929,6 +935,18 @@ const __cacheModule = (() => {
       const prefix = key.split(":")[0];
       return definitions.get(prefix);
     }
+
+    function readEntry(key) {
+      const entry = entries.get(key);
+      if (!entry) {
+        return { found: false, value: undefined };
+      }
+      if (entry.expiresAt !== undefined && entry.expiresAt <= now()) {
+        entries.delete(key);
+        return { found: false, value: undefined };
+      }
+      return { found: true, value: entry.value };
+    }
   }
 
   function normalizeDefinition(definition) {
@@ -2147,7 +2165,7 @@ const __serverModule = (() => {
 
   function createServerProxy({
     endpoint = "/__async/server",
-    fetch: fetchImpl = globalThis.fetch?.bind(globalThis),
+    transport,
     signals,
     loader,
     router,
@@ -2155,8 +2173,8 @@ const __serverModule = (() => {
     scheduler,
     headers = {}
   } = {}) {
-    if (typeof fetchImpl !== "function") {
-      throw new TypeError("createServerProxy(...) requires fetch to be available.");
+    if (typeof transport !== "function") {
+      throw new TypeError("createServerProxy(...) requires a transport function.");
     }
 
     const defaults = { signals, loader, router, cache, scheduler };
@@ -2171,7 +2189,7 @@ const __serverModule = (() => {
       };
       assertJsonTransportable(body);
 
-      const response = await fetchImpl(joinEndpoint(endpoint, id), {
+      const response = await transport(joinEndpoint(endpoint, id), {
         method: "POST",
         headers: {
           "content-type": "application/json",
@@ -2448,14 +2466,17 @@ const __serverModule = (() => {
     return output;
   }
 
-  function assertJsonTransportable(value, seen = new Set()) {
+  function assertJsonTransportable(value, stack = new Set()) {
+    if (typeof value === "bigint") {
+      throw new Error("Server proxy JSON transport does not support BigInt values.");
+    }
     if (value == null || typeof value !== "object") {
       return;
     }
-    if (seen.has(value)) {
-      return;
+    if (stack.has(value)) {
+      throw new Error("Server proxy JSON transport does not support circular values.");
     }
-    seen.add(value);
+    stack.add(value);
 
     const tag = Object.prototype.toString.call(value);
     if (tag === "[object File]" || tag === "[object Blob]" || tag === "[object FormData]") {
@@ -2463,13 +2484,15 @@ const __serverModule = (() => {
     }
     if (Array.isArray(value)) {
       for (const item of value) {
-        assertJsonTransportable(item, seen);
+        assertJsonTransportable(item, stack);
       }
+      stack.delete(value);
       return;
     }
     for (const item of Object.values(value)) {
-      assertJsonTransportable(item, seen);
+      assertJsonTransportable(item, stack);
     }
+    stack.delete(value);
   }
 
   function joinEndpoint(endpoint, id) {
@@ -3114,6 +3137,7 @@ const __loaderModule = (() => {
           return;
         }
         destroyed = true;
+        markDestroyedScopes(rootNode);
         for (const cleanup of [...cleanups]) {
           runCleanup(cleanup);
         }
@@ -3564,6 +3588,12 @@ const __loaderModule = (() => {
       });
     }
 
+    function markDestroyedScopes(scope) {
+      for (const element of elementsIn(scope)) {
+        schedulerInstance.markScopeDestroyed(element);
+      }
+    }
+
     return api;
   }
 
@@ -3943,6 +3973,8 @@ const __routerModule = (() => {
 
   const route = defineRoute;
 
+  const routerModes = new Set(["csr", "spa", "ssr", "mpa"]);
+
   function createRouteRegistry(initialMap = {}, options = {}) {
     const registryStore = options.registry ?? createRegistryStore();
     const type = options.type ?? "route";
@@ -3989,7 +4021,7 @@ const __routerModule = (() => {
           }
           const params = {};
           candidate.keys.forEach((key, index) => {
-            params[key] = decodeURIComponent(match[index + 1] ?? "");
+            params[key] = safeDecodeURIComponent(match[index + 1] ?? "");
           });
           return {
             pattern: candidate.pattern,
@@ -4038,7 +4070,7 @@ const __routerModule = (() => {
   }
 
   function createRouter({
-    mode = "ssr-spa",
+    mode = "ssr",
     root,
     boundary = "route",
     routes = createRouteRegistry(),
@@ -4048,11 +4080,10 @@ const __routerModule = (() => {
     server,
     cache,
     partials,
-    fetch: fetchImpl = globalThis.fetch?.bind(globalThis),
-    routeEndpoint = "/__async/route",
     attributes,
     scheduler
   } = {}) {
+    assertRouterMode(mode);
     const documentRef = root?.ownerDocument ?? root ?? globalThis.document;
     const rootNode = root ?? documentRef;
     const signalRegistry = signals ?? loader?.signals ?? createSignalRegistry();
@@ -4104,11 +4135,11 @@ const __routerModule = (() => {
         }
         bindNavigation();
         if (mode === "csr") {
-          void api.navigate(currentUrl(), {
+          handleNavigation(api.navigate(currentUrl(), {
             replace: true,
             initial: true,
             source: "client"
-          }).catch(() => {});
+          }));
           return api;
         }
         updateStateFromLocation();
@@ -4121,16 +4152,13 @@ const __routerModule = (() => {
 
       prefetch(url) {
         assertActive();
-        if (mode === "ssr-spa" && typeof fetchImpl === "function") {
-          return fetchRoute(url, { prefetch: true });
+        if (mode === "mpa" || mode === "ssr") {
+          return Promise.resolve(null);
         }
         const matched = api.match(url);
         if (matched?.route?.partial && partials?.resolve?.(matched.route.partial)) {
           return partials.render(matched.route.partial, matched.params, contextFor(matched));
         }
-        if (typeof fetchImpl === "function") {
-          return fetchRoute(url, { prefetch: true });
-        }
         return Promise.resolve(null);
       },
 
@@ -4142,9 +4170,6 @@ const __routerModule = (() => {
         }
 
         const target = resolveUrl(url);
-        if (mode === "ssr-spa") {
-          return fetchRoutePartial(target, options);
-        }
         return renderLocalRoutePartial(target, options);
       },
 
@@ -4173,7 +4198,7 @@ const __routerModule = (() => {
           return;
         }
         event.preventDefault();
-        api.navigate(anchor.href);
+        handleNavigation(api.navigate(anchor.href));
       };
       const submit = (event) => {
         const form = closest(event.target, "form");
@@ -4181,9 +4206,9 @@ const __routerModule = (() => {
           return;
         }
         event.preventDefault();
-        api.navigate(formActionUrl(form));
+        handleNavigation(api.navigate(formActionUrl(form)));
       };
-      const popstate = () => api.navigate(currentUrl(), { history: false });
+      const popstate = () => handleNavigation(api.navigate(currentUrl(), { history: false }));
 
       rootNode.addEventListener?.("click", click);
       rootNode.addEventListener?.("submit", submit);
@@ -4232,31 +4257,6 @@ const __routerModule = (() => {
       }
     }
 
-    async function fetchRoutePartial(target, options = {}) {
-      const matched = api.match(target);
-      const navigation = beginNavigation(target, matched);
-      setMatchedRouterState(target, matched, { pending: true, error: null });
-
-      try {
-        const result = await fetchRoute(target.href, { signal: navigation.abort });
-        if (!isActiveNavigation(navigation)) {
-          return null;
-        }
-        await applyNavigationResult(result, target, options, navigation);
-        if (!isActiveNavigation(navigation)) {
-          return null;
-        }
-        setRouterState({ pending: false, error: null });
-        return result;
-      } catch (error) {
-        if (!isActiveNavigation(navigation)) {
-          return null;
-        }
-        setRouterState({ pending: false, error });
-        throw error;
-      }
-    }
-
     async function applyNavigationResult(result, target, options, navigation) {
       if (!isActiveNavigation(navigation)) {
         return;
@@ -4287,29 +4287,6 @@ const __routerModule = (() => {
       documentRef.defaultView?.history?.pushState?.({}, "", target.href);
     }
 
-    async function fetchRoute(url, { prefetch = false, signal } = {}) {
-      if (typeof fetchImpl !== "function") {
-        throw new Error("Router navigation requires a partial registry or fetch.");
-      }
-      const response = await fetchImpl(`${routeEndpoint}?to=${encodeURIComponent(String(url))}`, {
-        headers: {
-          accept: "application/json, text/html"
-        },
-        signal
-      });
-      if (!response.ok) {
-        throw new Error(`Route "${url}" failed with ${response.status}.`);
-      }
-      if (prefetch) {
-        return response;
-      }
-      const type = response.headers.get("content-type") ?? "";
-      if (type.includes("application/json")) {
-        return response.json();
-      }
-      return { boundary, html: await response.text() };
-    }
-
     function contextFor(matched, navigation) {
       return {
         params: matched.params,
@@ -4376,6 +4353,19 @@ const __routerModule = (() => {
       }
     }
 
+    function handleNavigation(promise) {
+      void promise.catch((error) => {
+        if (destroyed) {
+          return;
+        }
+        setRouterState({
+          pending: false,
+          error
+        });
+        dispatchAsyncError(rootNode, error);
+      });
+    }
+
     function currentUrl() {
       return resolveUrl(documentRef.defaultView?.location?.href ?? "http://localhost/");
     }
@@ -4392,6 +4382,33 @@ const __routerModule = (() => {
         throw new Error("Router has been destroyed.");
       }
     }
+
+    function shouldIgnoreLink(event, anchor) {
+      if (event.defaultPrevented || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) {
+        return true;
+      }
+      if (anchor.target || anchor.hasAttribute("download")) {
+        return true;
+      }
+      const target = resolveUrl(anchor.href);
+      const current = currentUrl();
+      if (target.origin !== current.origin) {
+        return true;
+      }
+      return isHashOnlyNavigation(target, current, anchor);
+    }
+
+    function shouldIgnoreForm(form) {
+      const method = String(form.method || "get").toLowerCase();
+      return method !== "get" || resolveUrl(form.action).origin !== currentUrl().origin;
+    }
+
+    function formActionUrl(form) {
+      const url = resolveUrl(form.action || form.ownerDocument.defaultView.location.href);
+      const formData = new form.ownerDocument.defaultView.FormData(form);
+      url.search = new URLSearchParams(formData).toString();
+      return url.href;
+    }
   }
 
   function normalizeRoute(pattern, definition) {
@@ -4429,28 +4446,6 @@ const __routerModule = (() => {
     return { regex: new RegExp(`^${source}$`), keys };
   }
 
-  function shouldIgnoreLink(event, anchor) {
-    if (event.defaultPrevented || event.metaKey || event.ctrlKey || event.shiftKey || event.altKey) {
-      return true;
-    }
-    if (anchor.target || anchor.hasAttribute("download")) {
-      return true;
-    }
-    return toUrl(anchor.href).origin !== toUrl(anchor.ownerDocument.defaultView.location.href).origin;
-  }
-
-  function shouldIgnoreForm(form) {
-    const method = String(form.method || "get").toLowerCase();
-    return method !== "get" || toUrl(form.action).origin !== toUrl(form.ownerDocument.defaultView.location.href).origin;
-  }
-
-  function formActionUrl(form) {
-    const url = toUrl(form.action || form.ownerDocument.defaultView.location.href);
-    const formData = new form.ownerDocument.defaultView.FormData(form);
-    url.search = new URLSearchParams(formData).toString();
-    return url.href;
-  }
-
   function closest(target, selector) {
     return target?.closest?.(selector);
   }
@@ -4466,6 +4461,40 @@ const __routerModule = (() => {
     return Object.fromEntries(url.searchParams.entries());
   }
 
+  function safeDecodeURIComponent(value) {
+    try {
+      return decodeURIComponent(value);
+    } catch {
+      return value;
+    }
+  }
+
+  function isHashOnlyNavigation(target, current, anchor) {
+    if (target.origin !== current.origin || target.pathname !== current.pathname || target.search !== current.search) {
+      return false;
+    }
+    return target.hash !== current.hash || anchor.getAttribute?.("href")?.startsWith("#") === true;
+  }
+
+  function assertRouterMode(mode) {
+    if (!routerModes.has(mode)) {
+      throw new TypeError(`Unknown router mode "${mode}".`);
+    }
+  }
+
+  function dispatchAsyncError(element, error) {
+    const EventCtor = element.ownerDocument?.defaultView?.CustomEvent ?? globalThis.CustomEvent;
+    if (typeof EventCtor !== "function") {
+      return;
+    }
+    element.dispatchEvent?.(
+      new EventCtor("async:error", {
+        bubbles: true,
+        detail: { error }
+      })
+    );
+  }
+
   function escapeRegExp(value) {
     return String(value).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   }
@@ -4851,7 +4880,7 @@ const __appModule = (() => {
         return;
       }
       router = router ?? createRouter({
-        mode: options.mode ?? "ssr-spa",
+        mode: options.mode ?? "ssr",
         root,
         boundary: options.boundary ?? "route",
         routes,
@@ -4862,8 +4891,6 @@ const __appModule = (() => {
         cache: browserCache,
         partials,
         scheduler,
-        fetch: options.fetch,
-        routeEndpoint: options.routeEndpoint,
         attributes
       });
       runtime.router = router;