@christianirack/brainllm-runtime 0.8.7 → 0.8.8

package/brain.js

@@ -276,15 +276,23 @@ export function insert(p, f, end) {
 }
 
 // aria-* and data-* are enumerated, not boolean: true and false render as text (k[4] is their dash)
+// A select only takes a value its options offer, and {#each}/{#if} options mount after attr() or change later.
+const keepSelected = (el, f, M = globalThis.MutationObserver) =>
+  M && new M(() => {
+    const i = el.selectedIndex
+    el.value = typeof f == 'function' ? untrack(f) : f
+    if (el.selectedIndex < 0) el.selectedIndex = i // no option matches yet: the browser's choice stays
+  }).observe(el, { childList: true, subtree: true })
+
 export function attr(el, k, f) {
   bind(
     f,
     k.startsWith('style:')
       ? ((k = k.slice(6)), v => (v == null || v === false ? el.style.removeProperty(k) : el.style.setProperty(k, v)))
       : /^(value|checked|selected)$/.test(k) && !(k == 'value' && el.tagName == 'OPTION') // an option's value is its attribute (SSR, value="")
-        ? v => {
+        ? ((el.tagName == 'SELECT' && k == 'value') ? keepSelected(el, f) : 0, v => {
             if (el[k] !== v) el[k] = v
-          }
+          })
         : v => (v == null || (v === false && k[4] != '-') ? el.removeAttribute(k) : el.setAttribute(k, v === true && k[4] != '-' ? '' : /^(href|src|action|formaction|poster)$/.test(k) && typeof v == 'string' ? inBase(v) : v))
   )
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@christianirack/brainllm-runtime",
-  "version": "0.8.7",
+  "version": "0.8.8",
   "description": "The BRAINLLM runtime for the Rust-built web compiler for LLMs: dependency-free ES modules (signals, DOM, router, data, forms, channels). The brain binary embeds this same version.",
   "type": "module",
   "exports": {

package/server/server.mjs

@@ -1825,7 +1825,9 @@ export function createServer(o = {}) {
       const variant = urlVariant(req)
       if (variant) return send(res, 301, '', { location: variant, 'cache-control': 'public, max-age=3600' })
       if (req.url.startsWith('//')) return notFound(req, res)
-      const full = new URL(req.url, 'http://' + (req.headers.host || 'localhost'))
+      const host = req.headers.host || 'localhost'
+      let full
+      try { full = new URL(req.url, 'http://' + host) } catch { return send(res, 400, 'Bad Request') }
       // /_health stays at the root: the supervisor calls it there whatever the base
       if (full.pathname === '/_health' || full.pathname === BASE + '_health') return send(res, 200, json({ ok: true, build: mf.build || null }), { 'content-type': MIME['.json'], 'cache-control': 'no-store' })
       let url = full
@@ -2247,7 +2249,11 @@ function parseCookies(h = '') {
     const i = part.indexOf('=')
     if (i > 0) {
       const k = part.slice(0, i).trim()
-      if (k && !(k in out)) out[k] = decodeURIComponent(part.slice(i + 1).trim())
+      if (k && !(k in out)) {
+        // Another site's cookie on this domain may hold anything: it must not cost the page.
+        const value = part.slice(i + 1).trim()
+        try { out[k] = decodeURIComponent(value) } catch { out[k] = value }
+      }
     }
   }
   return out