@bquery/bquery 1.0.0

package/dist/security.es.mjs

@@ -0,0 +1,194 @@
+const f = "bquery-sanitizer";
+let i = null;
+const _ = () => typeof window.trustedTypes < "u", y = () => {
+  if (i) return i;
+  const t = window;
+  if (!t.trustedTypes) return null;
+  try {
+    return i = t.trustedTypes.createPolicy(f, {
+      createHTML: (e) => d(e)
+    }), i;
+  } catch {
+    return console.warn(`bQuery: Could not create Trusted Types policy "${f}"`), null;
+  }
+}, b = /* @__PURE__ */ new Set([
+  "a",
+  "abbr",
+  "address",
+  "article",
+  "aside",
+  "b",
+  "bdi",
+  "bdo",
+  "blockquote",
+  "br",
+  "button",
+  "caption",
+  "cite",
+  "code",
+  "col",
+  "colgroup",
+  "data",
+  "dd",
+  "del",
+  "details",
+  "dfn",
+  "div",
+  "dl",
+  "dt",
+  "em",
+  "figcaption",
+  "figure",
+  "footer",
+  "form",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "header",
+  "hgroup",
+  "hr",
+  "i",
+  "img",
+  "input",
+  "ins",
+  "kbd",
+  "label",
+  "legend",
+  "li",
+  "main",
+  "mark",
+  "nav",
+  "ol",
+  "optgroup",
+  "option",
+  "p",
+  "picture",
+  "pre",
+  "progress",
+  "q",
+  "rp",
+  "rt",
+  "ruby",
+  "s",
+  "samp",
+  "section",
+  "select",
+  "small",
+  "source",
+  "span",
+  "strong",
+  "sub",
+  "summary",
+  "sup",
+  "table",
+  "tbody",
+  "td",
+  "textarea",
+  "tfoot",
+  "th",
+  "thead",
+  "time",
+  "tr",
+  "u",
+  "ul",
+  "var",
+  "wbr"
+]), A = /* @__PURE__ */ new Set([
+  "alt",
+  "class",
+  "dir",
+  "height",
+  "hidden",
+  "href",
+  "id",
+  "lang",
+  "loading",
+  "name",
+  "role",
+  "src",
+  "srcset",
+  "style",
+  "tabindex",
+  "title",
+  "type",
+  "width",
+  "aria-*"
+]), L = ["on", "formaction"], S = ["javascript:", "data:", "vbscript:"], C = (t, e, o) => {
+  const n = t.toLowerCase();
+  for (const l of L)
+    if (n.startsWith(l)) return !1;
+  return o && n.startsWith("data-") || n.startsWith("aria-") ? !0 : e.has(n);
+}, E = (t) => t.replace(/[\u0000-\u001F\u007F\s]+/g, "").toLowerCase(), N = (t) => {
+  const e = E(t);
+  for (const o of S)
+    if (e.startsWith(o)) return !1;
+  return !0;
+}, d = (t, e = {}) => {
+  const {
+    allowTags: o = [],
+    allowAttributes: n = [],
+    allowDataAttributes: l = !0,
+    stripAllTags: h = !1
+  } = e, T = /* @__PURE__ */ new Set([...b, ...o.map((r) => r.toLowerCase())]), g = /* @__PURE__ */ new Set([
+    ...A,
+    ...n.map((r) => r.toLowerCase())
+  ]), a = document.createElement("template");
+  if (a.innerHTML = t, h)
+    return a.content.textContent ?? "";
+  const p = document.createTreeWalker(a.content, NodeFilter.SHOW_ELEMENT), m = [];
+  for (; p.nextNode(); ) {
+    const r = p.currentNode, w = r.tagName.toLowerCase();
+    if (!T.has(w)) {
+      m.push(r);
+      continue;
+    }
+    const u = [];
+    for (const s of Array.from(r.attributes)) {
+      const c = s.name.toLowerCase();
+      if (!C(c, g, l)) {
+        u.push(s.name);
+        continue;
+      }
+      (c === "href" || c === "src" || c === "srcset") && !N(s.value) && u.push(s.name);
+    }
+    for (const s of u)
+      r.removeAttribute(s);
+  }
+  for (const r of m)
+    r.remove();
+  return a.innerHTML;
+}, v = (t, e = {}) => d(t, e), H = (t) => {
+  const e = y();
+  return e ? e.createHTML(t) : v(t);
+}, O = (t) => {
+  const e = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#x27;",
+    "`": "&#x60;"
+  };
+  return t.replace(/[&<>"'`]/g, (o) => e[o]);
+}, R = (t) => d(t, { stripAllTags: !0 }), x = (t = 16) => {
+  const e = new Uint8Array(t);
+  return crypto.getRandomValues(e), btoa(String.fromCharCode(...e)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}, D = (t) => {
+  const e = document.querySelector('meta[http-equiv="Content-Security-Policy"]');
+  return e ? (e.getAttribute("content") ?? "").includes(t) : !1;
+};
+export {
+  H as createTrustedHtml,
+  O as escapeHtml,
+  x as generateNonce,
+  y as getTrustedTypesPolicy,
+  D as hasCSPDirective,
+  _ as isTrustedTypesSupported,
+  v as sanitize,
+  v as sanitizeHtml,
+  R as stripTags
+};
+//# sourceMappingURL=security.es.mjs.map

package/dist/security.es.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.es.mjs","sources":["../src/security/sanitize.ts"],"sourcesContent":["/**\n * Security utilities for HTML sanitization, CSP compatibility, and Trusted Types.\n * All DOM writes are sanitized by default to prevent XSS attacks.\n *\n * @module bquery/security\n */\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Sanitizer configuration options.\n */\nexport interface SanitizeOptions {\n  /** Allow these additional tags (default: none) */\n  allowTags?: string[];\n  /** Allow these additional attributes (default: none) */\n  allowAttributes?: string[];\n  /** Allow data-* attributes (default: true) */\n  allowDataAttributes?: boolean;\n  /** Strip all tags and return plain text (default: false) */\n  stripAllTags?: boolean;\n}\n\n/**\n * Trusted Types policy name.\n */\nconst POLICY_NAME = 'bquery-sanitizer';\n\n// ============================================================================\n// Trusted Types Support\n// ============================================================================\n\n/** Window interface extended with Trusted Types */\ninterface TrustedTypesWindow extends Window {\n  trustedTypes?: {\n    createPolicy: (\n      name: string,\n      rules: { createHTML?: (input: string) => string }\n    ) => TrustedTypePolicy;\n    isHTML?: (value: unknown) => boolean;\n  };\n}\n\n/** Trusted Types policy interface */\ninterface TrustedTypePolicy {\n  createHTML: (input: string) => TrustedHTML;\n}\n\n/** Trusted HTML type placeholder for environments without Trusted Types */\ninterface TrustedHTML {\n  toString(): string;\n}\n\n/** Cached Trusted Types policy */\nlet cachedPolicy: TrustedTypePolicy | null = null;\n\n/**\n * Check if Trusted Types API is available.\n * @returns True if Trusted Types are supported\n */\nexport const isTrustedTypesSupported = (): boolean => {\n  return typeof (window as TrustedTypesWindow).trustedTypes !== 'undefined';\n};\n\n/**\n * Get or create the bQuery Trusted Types policy.\n * @returns The Trusted Types policy or null if unsupported\n */\nexport const getTrustedTypesPolicy = (): TrustedTypePolicy | null => {\n  if (cachedPolicy) return cachedPolicy;\n\n  const win = window as TrustedTypesWindow;\n  if (!win.trustedTypes) return null;\n\n  try {\n    cachedPolicy = win.trustedTypes.createPolicy(POLICY_NAME, {\n      createHTML: (input: string) => sanitizeHtmlCore(input),\n    });\n    return cachedPolicy;\n  } catch {\n    // Policy may already exist or be blocked by CSP\n    console.warn(`bQuery: Could not create Trusted Types policy \"${POLICY_NAME}\"`);\n    return null;\n  }\n};\n\n// ============================================================================\n// Default Safe Lists\n// ============================================================================\n\n/**\n * Default allowed HTML tags considered safe.\n */\nconst DEFAULT_ALLOWED_TAGS = new Set([\n  'a',\n  'abbr',\n  'address',\n  'article',\n  'aside',\n  'b',\n  'bdi',\n  'bdo',\n  'blockquote',\n  'br',\n  'button',\n  'caption',\n  'cite',\n  'code',\n  'col',\n  'colgroup',\n  'data',\n  'dd',\n  'del',\n  'details',\n  'dfn',\n  'div',\n  'dl',\n  'dt',\n  'em',\n  'figcaption',\n  'figure',\n  'footer',\n  'form',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'header',\n  'hgroup',\n  'hr',\n  'i',\n  'img',\n  'input',\n  'ins',\n  'kbd',\n  'label',\n  'legend',\n  'li',\n  'main',\n  'mark',\n  'nav',\n  'ol',\n  'optgroup',\n  'option',\n  'p',\n  'picture',\n  'pre',\n  'progress',\n  'q',\n  'rp',\n  'rt',\n  'ruby',\n  's',\n  'samp',\n  'section',\n  'select',\n  'small',\n  'source',\n  'span',\n  'strong',\n  'sub',\n  'summary',\n  'sup',\n  'table',\n  'tbody',\n  'td',\n  'textarea',\n  'tfoot',\n  'th',\n  'thead',\n  'time',\n  'tr',\n  'u',\n  'ul',\n  'var',\n  'wbr',\n]);\n\n/**\n * Default allowed attributes considered safe.\n */\nconst DEFAULT_ALLOWED_ATTRIBUTES = new Set([\n  'alt',\n  'class',\n  'dir',\n  'height',\n  'hidden',\n  'href',\n  'id',\n  'lang',\n  'loading',\n  'name',\n  'role',\n  'src',\n  'srcset',\n  'style',\n  'tabindex',\n  'title',\n  'type',\n  'width',\n  'aria-*',\n]);\n\n/**\n * Dangerous attribute prefixes to always remove.\n */\nconst DANGEROUS_ATTR_PREFIXES = ['on', 'formaction'];\n\n/**\n * Dangerous URL protocols to block.\n */\nconst DANGEROUS_PROTOCOLS = ['javascript:', 'data:', 'vbscript:'];\n\n// ============================================================================\n// Core Sanitization\n// ============================================================================\n\n/**\n * Check if an attribute name is allowed.\n */\nconst isAllowedAttribute = (\n  name: string,\n  allowedSet: Set<string>,\n  allowDataAttrs: boolean\n): boolean => {\n  const lowerName = name.toLowerCase();\n\n  // Check dangerous prefixes\n  for (const prefix of DANGEROUS_ATTR_PREFIXES) {\n    if (lowerName.startsWith(prefix)) return false;\n  }\n\n  // Check data attributes\n  if (allowDataAttrs && lowerName.startsWith('data-')) return true;\n\n  // Check aria attributes (allowed by default)\n  if (lowerName.startsWith('aria-')) return true;\n\n  // Check explicit allow list\n  return allowedSet.has(lowerName);\n};\n\n/**\n * Normalize URL by removing control characters and whitespace.\n */\nconst normalizeUrl = (value: string): string =>\n  value.replace(/[\\u0000-\\u001F\\u007F\\s]+/g, '').toLowerCase();\n\n/**\n * Check if a URL value is safe.\n */\nconst isSafeUrl = (value: string): boolean => {\n  const normalized = normalizeUrl(value);\n  for (const protocol of DANGEROUS_PROTOCOLS) {\n    if (normalized.startsWith(protocol)) return false;\n  }\n  return true;\n};\n\n/**\n * Core sanitization logic (without Trusted Types wrapper).\n */\nconst sanitizeHtmlCore = (html: string, options: SanitizeOptions = {}): string => {\n  const {\n    allowTags = [],\n    allowAttributes = [],\n    allowDataAttributes = true,\n    stripAllTags = false,\n  } = options;\n\n  // Build combined allow sets\n  const allowedTags = new Set([...DEFAULT_ALLOWED_TAGS, ...allowTags.map((t) => t.toLowerCase())]);\n  const allowedAttrs = new Set([\n    ...DEFAULT_ALLOWED_ATTRIBUTES,\n    ...allowAttributes.map((a) => a.toLowerCase()),\n  ]);\n\n  // Use template for parsing\n  const template = document.createElement('template');\n  template.innerHTML = html;\n\n  if (stripAllTags) {\n    return template.content.textContent ?? '';\n  }\n\n  // Walk the DOM tree\n  const walker = document.createTreeWalker(template.content, NodeFilter.SHOW_ELEMENT);\n\n  const toRemove: Element[] = [];\n\n  while (walker.nextNode()) {\n    const el = walker.currentNode as Element;\n    const tagName = el.tagName.toLowerCase();\n\n    // Remove disallowed tags entirely\n    if (!allowedTags.has(tagName)) {\n      toRemove.push(el);\n      continue;\n    }\n\n    // Process attributes\n    const attrsToRemove: string[] = [];\n    for (const attr of Array.from(el.attributes)) {\n      const attrName = attr.name.toLowerCase();\n\n      // Check if attribute is allowed\n      if (!isAllowedAttribute(attrName, allowedAttrs, allowDataAttributes)) {\n        attrsToRemove.push(attr.name);\n        continue;\n      }\n\n      // Validate URL attributes\n      if (\n        (attrName === 'href' || attrName === 'src' || attrName === 'srcset') &&\n        !isSafeUrl(attr.value)\n      ) {\n        attrsToRemove.push(attr.name);\n      }\n    }\n\n    // Remove disallowed attributes\n    for (const attrName of attrsToRemove) {\n      el.removeAttribute(attrName);\n    }\n  }\n\n  // Remove disallowed elements\n  for (const el of toRemove) {\n    el.remove();\n  }\n\n  return template.innerHTML;\n};\n\n// ============================================================================\n// Public API\n// ============================================================================\n\n/**\n * Sanitize HTML string, removing dangerous elements and attributes.\n * Uses Trusted Types when available for CSP compliance.\n *\n * @param html - The HTML string to sanitize\n * @param options - Sanitization options\n * @returns Sanitized HTML string\n *\n * @example\n * ```ts\n * const safe = sanitizeHtml('<div onclick=\"alert(1)\">Hello</div>');\n * // Returns: '<div>Hello</div>'\n * ```\n */\nexport const sanitizeHtml = (html: string, options: SanitizeOptions = {}): string => {\n  return sanitizeHtmlCore(html, options);\n};\n\n/**\n * Create a Trusted HTML value for use with Trusted Types-enabled sites.\n * Falls back to regular string when Trusted Types are unavailable.\n *\n * @param html - The HTML string to wrap\n * @returns Trusted HTML value or sanitized string\n */\nexport const createTrustedHtml = (html: string): TrustedHTML | string => {\n  const policy = getTrustedTypesPolicy();\n  if (policy) {\n    return policy.createHTML(html);\n  }\n  return sanitizeHtml(html);\n};\n\n/**\n * Escape HTML entities to prevent XSS.\n * Use this for displaying user content as text.\n *\n * @param text - The text to escape\n * @returns Escaped HTML string\n *\n * @example\n * ```ts\n * escapeHtml('<script>alert(1)</script>');\n * // Returns: '&lt;script&gt;alert(1)&lt;/script&gt;'\n * ```\n */\nexport const escapeHtml = (text: string): string => {\n  const escapeMap: Record<string, string> = {\n    '&': '&amp;',\n    '<': '&lt;',\n    '>': '&gt;',\n    '\"': '&quot;',\n    \"'\": '&#x27;',\n    '`': '&#x60;',\n  };\n  return text.replace(/[&<>\"'`]/g, (char) => escapeMap[char]);\n};\n\n/**\n * Strip all HTML tags and return plain text.\n *\n * @param html - The HTML string to strip\n * @returns Plain text content\n */\nexport const stripTags = (html: string): string => {\n  return sanitizeHtmlCore(html, { stripAllTags: true });\n};\n\n// ============================================================================\n// CSP Helpers\n// ============================================================================\n\n/**\n * Generate a nonce for inline scripts/styles.\n * Use with Content-Security-Policy nonce directives.\n *\n * @param length - Nonce length (default: 16)\n * @returns Cryptographically random nonce string\n */\nexport const generateNonce = (length: number = 16): string => {\n  const array = new Uint8Array(length);\n  crypto.getRandomValues(array);\n  return btoa(String.fromCharCode(...array))\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=/g, '');\n};\n\n/**\n * Check if a CSP header is present with specific directive.\n * Useful for feature detection and fallback strategies.\n *\n * @param directive - The CSP directive to check (e.g., 'script-src')\n * @returns True if the directive appears to be enforced\n */\nexport const hasCSPDirective = (directive: string): boolean => {\n  // Check meta tag\n  const meta = document.querySelector('meta[http-equiv=\"Content-Security-Policy\"]');\n  if (meta) {\n    const content = meta.getAttribute('content') ?? '';\n    return content.includes(directive);\n  }\n  return false;\n};\n"],"names":["POLICY_NAME","cachedPolicy","isTrustedTypesSupported","getTrustedTypesPolicy","win","input","sanitizeHtmlCore","DEFAULT_ALLOWED_TAGS","DEFAULT_ALLOWED_ATTRIBUTES","DANGEROUS_ATTR_PREFIXES","DANGEROUS_PROTOCOLS","isAllowedAttribute","name","allowedSet","allowDataAttrs","lowerName","prefix","normalizeUrl","value","isSafeUrl","normalized","protocol","html","options","allowTags","allowAttributes","allowDataAttributes","stripAllTags","allowedTags","t","allowedAttrs","a","template","walker","toRemove","el","tagName","attrsToRemove","attr","attrName","sanitizeHtml","createTrustedHtml","policy","escapeHtml","text","escapeMap","char","stripTags","generateNonce","length","array","hasCSPDirective","directive","meta"],"mappings":"AA4BA,MAAMA,IAAc;AA4BpB,IAAIC,IAAyC;AAMtC,MAAMC,IAA0B,MAC9B,OAAQ,OAA8B,eAAiB,KAOnDC,IAAwB,MAAgC;AACnE,MAAIF,EAAc,QAAOA;AAEzB,QAAMG,IAAM;AACZ,MAAI,CAACA,EAAI,aAAc,QAAO;AAE9B,MAAI;AACF,WAAAH,IAAeG,EAAI,aAAa,aAAaJ,GAAa;AAAA,MACxD,YAAY,CAACK,MAAkBC,EAAiBD,CAAK;AAAA,IAAA,CACtD,GACMJ;AAAA,EACT,QAAQ;AAEN,mBAAQ,KAAK,kDAAkDD,CAAW,GAAG,GACtE;AAAA,EACT;AACF,GASMO,wBAA2B,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC,GAKKC,wBAAiC,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC,GAKKC,IAA0B,CAAC,MAAM,YAAY,GAK7CC,IAAsB,CAAC,eAAe,SAAS,WAAW,GAS1DC,IAAqB,CACzBC,GACAC,GACAC,MACY;AACZ,QAAMC,IAAYH,EAAK,YAAA;AAGvB,aAAWI,KAAUP;AACnB,QAAIM,EAAU,WAAWC,CAAM,EAAG,QAAO;AAO3C,SAHIF,KAAkBC,EAAU,WAAW,OAAO,KAG9CA,EAAU,WAAW,OAAO,IAAU,KAGnCF,EAAW,IAAIE,CAAS;AACjC,GAKME,IAAe,CAACC,MACpBA,EAAM,QAAQ,6BAA6B,EAAE,EAAE,YAAA,GAK3CC,IAAY,CAACD,MAA2B;AAC5C,QAAME,IAAaH,EAAaC,CAAK;AACrC,aAAWG,KAAYX;AACrB,QAAIU,EAAW,WAAWC,CAAQ,EAAG,QAAO;AAE9C,SAAO;AACT,GAKMf,IAAmB,CAACgB,GAAcC,IAA2B,OAAe;AAChF,QAAM;AAAA,IACJ,WAAAC,IAAY,CAAA;AAAA,IACZ,iBAAAC,IAAkB,CAAA;AAAA,IAClB,qBAAAC,IAAsB;AAAA,IACtB,cAAAC,IAAe;AAAA,EAAA,IACbJ,GAGEK,IAAc,oBAAI,IAAI,CAAC,GAAGrB,GAAsB,GAAGiB,EAAU,IAAI,CAACK,MAAMA,EAAE,YAAA,CAAa,CAAC,CAAC,GACzFC,wBAAmB,IAAI;AAAA,IAC3B,GAAGtB;AAAA,IACH,GAAGiB,EAAgB,IAAI,CAACM,MAAMA,EAAE,aAAa;AAAA,EAAA,CAC9C,GAGKC,IAAW,SAAS,cAAc,UAAU;AAGlD,MAFAA,EAAS,YAAYV,GAEjBK;AACF,WAAOK,EAAS,QAAQ,eAAe;AAIzC,QAAMC,IAAS,SAAS,iBAAiBD,EAAS,SAAS,WAAW,YAAY,GAE5EE,IAAsB,CAAA;AAE5B,SAAOD,EAAO,cAAY;AACxB,UAAME,IAAKF,EAAO,aACZG,IAAUD,EAAG,QAAQ,YAAA;AAG3B,QAAI,CAACP,EAAY,IAAIQ,CAAO,GAAG;AAC7B,MAAAF,EAAS,KAAKC,CAAE;AAChB;AAAA,IACF;AAGA,UAAME,IAA0B,CAAA;AAChC,eAAWC,KAAQ,MAAM,KAAKH,EAAG,UAAU,GAAG;AAC5C,YAAMI,IAAWD,EAAK,KAAK,YAAA;AAG3B,UAAI,CAAC3B,EAAmB4B,GAAUT,GAAcJ,CAAmB,GAAG;AACpE,QAAAW,EAAc,KAAKC,EAAK,IAAI;AAC5B;AAAA,MACF;AAGA,OACGC,MAAa,UAAUA,MAAa,SAASA,MAAa,aAC3D,CAACpB,EAAUmB,EAAK,KAAK,KAErBD,EAAc,KAAKC,EAAK,IAAI;AAAA,IAEhC;AAGA,eAAWC,KAAYF;AACrB,MAAAF,EAAG,gBAAgBI,CAAQ;AAAA,EAE/B;AAGA,aAAWJ,KAAMD;AACf,IAAAC,EAAG,OAAA;AAGL,SAAOH,EAAS;AAClB,GAoBaQ,IAAe,CAAClB,GAAcC,IAA2B,OAC7DjB,EAAiBgB,GAAMC,CAAO,GAU1BkB,IAAoB,CAACnB,MAAuC;AACvE,QAAMoB,IAASvC,EAAA;AACf,SAAIuC,IACKA,EAAO,WAAWpB,CAAI,IAExBkB,EAAalB,CAAI;AAC1B,GAeaqB,IAAa,CAACC,MAAyB;AAClD,QAAMC,IAAoC;AAAA,IACxC,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,EAAA;AAEP,SAAOD,EAAK,QAAQ,aAAa,CAACE,MAASD,EAAUC,CAAI,CAAC;AAC5D,GAQaC,IAAY,CAACzB,MACjBhB,EAAiBgB,GAAM,EAAE,cAAc,IAAM,GAczC0B,IAAgB,CAACC,IAAiB,OAAe;AAC5D,QAAMC,IAAQ,IAAI,WAAWD,CAAM;AACnC,gBAAO,gBAAgBC,CAAK,GACrB,KAAK,OAAO,aAAa,GAAGA,CAAK,CAAC,EACtC,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG,EAClB,QAAQ,MAAM,EAAE;AACrB,GASaC,IAAkB,CAACC,MAA+B;AAE7D,QAAMC,IAAO,SAAS,cAAc,4CAA4C;AAChF,SAAIA,KACcA,EAAK,aAAa,SAAS,KAAK,IACjC,SAASD,CAAS,IAE5B;AACT;"}

package/package.json

@@ -0,0 +1,120 @@
+{
+  "name": "@bquery/bquery",
+  "version": "1.0.0",
+  "description": "The jQuery for the Modern Web Platform - Zero build, TypeScript-first library with reactivity, components, and motion",
+  "type": "module",
+  "main": "./dist/full.umd.js",
+  "module": "./dist/index.es.mjs",
+  "types": "./dist/index.d.ts",
+  "unpkg": "./dist/full.umd.js",
+  "jsdelivr": "./dist/full.umd.js",
+  "exports": {
+    ".": {
+      "import": "./dist/index.es.mjs",
+      "require": "./dist/full.umd.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./full": {
+      "import": "./dist/full.es.mjs",
+      "require": "./dist/full.umd.js",
+      "types": "./dist/full.d.ts"
+    },
+    "./core": {
+      "import": "./dist/core.es.mjs",
+      "types": "./dist/core/index.d.ts"
+    },
+    "./reactive": {
+      "import": "./dist/reactive.es.mjs",
+      "types": "./dist/reactive/index.d.ts"
+    },
+    "./component": {
+      "import": "./dist/component.es.mjs",
+      "types": "./dist/component/index.d.ts"
+    },
+    "./motion": {
+      "import": "./dist/motion.es.mjs",
+      "types": "./dist/motion/index.d.ts"
+    },
+    "./security": {
+      "import": "./dist/security.es.mjs",
+      "types": "./dist/security/index.d.ts"
+    },
+    "./platform": {
+      "import": "./dist/platform.es.mjs",
+      "types": "./dist/platform/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "dev": "vitepress dev docs",
+    "build:docs": "vitepress build docs",
+    "preview": "vitepress preview docs",
+    "playground": "vite dev playground",
+    "build": "bun run build:lib && bun run build:umd && bun run build:types",
+    "build:lib": "vite build",
+    "build:umd": "vite build --config vite.umd.config.ts",
+    "build:types": "tsc --emitDeclarationOnly --outDir dist",
+    "test": "bun test",
+    "test:watch": "bun test --watch",
+    "lint": "eslint . --fix",
+    "lint:types": "tsc --noEmit",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "docs:api": "typedoc",
+    "clean": "rimraf dist",
+    "prepublishOnly": "bun run clean && bun run build && bun test"
+  },
+  "keywords": [
+    "dom",
+    "manipulation",
+    "jquery",
+    "modern",
+    "typescript",
+    "signals",
+    "reactive",
+    "components",
+    "web-components",
+    "animation",
+    "motion",
+    "zero-build",
+    "cdn"
+  ],
+  "author": "bQuery Contributors",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bquery/bquery.git"
+  },
+  "homepage": "https://bquery.dev",
+  "bugs": {
+    "url": "https://github.com/bquery/bquery/issues"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@typescript-eslint/eslint-plugin": "^8.18.0",
+    "@typescript-eslint/parser": "^8.18.0",
+    "bun-types": "^1.1.26",
+    "eslint": "^9.8.0",
+    "eslint-config-prettier": "^9.1.0",
+    "globals": "^15.9.0",
+    "happy-dom": "^20.3.4",
+    "prettier": "^3.3.3",
+    "rimraf": "^5.0.5",
+    "typedoc": "^0.25.13",
+    "typescript": "^5.5.4",
+    "vite": "^5.4.3",
+    "vitepress": "^1.3.1"
+  }
+}