@classic-homes/theme-svelte 1.22.0 → 1.22.2

package/dist/lib/composables/useForm.svelte.js

@@ -46,8 +46,9 @@ import { toastStore } from '../stores/toast.svelte.js';
  */
 export function useForm(options) {
     const { schema, initialValues, onSubmit, onError, showToastOnError = true, resetOnSuccess = false, errorMessage, successMessage, } = options;
-    // Deep clone to avoid reference issues
-    const cloneInitialValues = () => JSON.parse(JSON.stringify(initialValues));
+    // Deep clone to avoid reference issues. $state.snapshot keeps Date, Map, Set
+    // and File values (a JSON round-trip would turn a Date into a string).
+    const cloneInitialValues = () => $state.snapshot(initialValues);
     // Reactive state using Svelte 5 runes
     let data = $state(cloneInitialValues());
     let errors = $state({});
@@ -145,14 +146,20 @@ export function useForm(options) {
      * Validate the entire form
      */
     function validate() {
+        return parseForm() !== null;
+    }
+    /**
+     * Validate the entire form, returning the parsed (transformed) data or null
+     */
+    function parseForm() {
         const result = schema.safeParse(data);
         if (result.success) {
             errors = {};
-            return true;
+            return result.data;
         }
         else {
             errors = parseZodErrors(result.error);
-            return false;
+            return null;
         }
     }
     /**
@@ -160,12 +167,17 @@ export function useForm(options) {
      */
     async function handleSubmit(event) {
         event?.preventDefault();
+        // Ignore a second submit (e.g. a double click) while one is in flight
+        if (isSubmitting)
+            return;
         // Clear previous errors
         errors = {};
         globalError = '';
         isSubmitted = true;
-        // Validate all fields
-        if (!validate()) {
+        // Validate all fields. onSubmit gets the schema's output, so transforms,
+        // coercions and defaults apply, as a plain object rather than the proxy.
+        const parsed = parseForm();
+        if (parsed === null) {
             const errorCount = Object.keys(errors).length;
             if (showToastOnError) {
                 toastStore.error(errorMessage || `Please fix ${errorCount} validation error${errorCount > 1 ? 's' : ''}`);
@@ -174,7 +186,7 @@ export function useForm(options) {
         }
         isSubmitting = true;
         try {
-            await onSubmit(data);
+            await onSubmit(parsed);
             if (successMessage) {
                 toastStore.success(successMessage);
             }

package/dist/lib/composables/usePersistedForm.svelte.js

@@ -75,8 +75,11 @@ export function usePersistedForm(options) {
     let draftRestored = $state(false);
     let lastSubmitTime = $state(0);
     let debounceTimer = null;
+    // Serialized persistable data last written (or deliberately not written).
+    // null after clearDraft, so the next edit is always saved.
+    let lastPersisted = null;
     // Store original initialValues for reset (before draft merge)
-    const originalInitialValues = JSON.parse(JSON.stringify(initialValues));
+    const originalInitialValues = $state.snapshot(initialValues);
     /**
      * Load draft from localStorage
      */
@@ -104,6 +107,12 @@ export function usePersistedForm(options) {
      * Clear draft from localStorage
      */
     function clearDraft() {
+        // Drop a pending save, or it would write the draft back after clearing
+        if (debounceTimer) {
+            clearTimeout(debounceTimer);
+            debounceTimer = null;
+        }
+        lastPersisted = null;
         if (!isStorageAvailable())
             return;
         try {
@@ -127,9 +136,9 @@ export function usePersistedForm(options) {
                 });
             }
             // Merge draft with initial values (keeps excluded fields at defaults)
-            return { ...JSON.parse(JSON.stringify(initialValues)), ...draft };
+            return { ...$state.snapshot(initialValues), ...draft };
         }
-        return JSON.parse(JSON.stringify(initialValues));
+        return $state.snapshot(initialValues);
     }
     /**
      * Wrapped onSubmit with cooldown and draft clearing
@@ -144,8 +153,10 @@ export function usePersistedForm(options) {
         try {
             await onSubmit(data);
             lastSubmitTime = now;
-            // Clear draft on successful submission
+            // Clear draft on successful submission. Treat the start values as
+            // persisted so a resetOnSuccess back to them does not save a new draft.
             clearDraft();
+            lastPersisted = startSerialized;
         }
         catch (error) {
             // Reset cooldown on error to allow retry
@@ -154,16 +165,17 @@ export function usePersistedForm(options) {
         }
     }
     // Create base form with potentially restored initial values
+    const startValues = getInitialValues();
     const baseForm = useForm({
         ...baseOptions,
-        initialValues: getInitialValues(),
+        initialValues: startValues,
         onSubmit: wrappedOnSubmit,
     });
     /**
      * Get data to persist (excludes specified fields)
      */
-    function getDataToPersist() {
-        const dataCopy = { ...baseForm.data };
+    function getDataToPersist(values = baseForm.data) {
+        const dataCopy = { ...values };
         for (const field of excludeFields) {
             delete dataCopy[field];
         }
@@ -192,13 +204,27 @@ export function usePersistedForm(options) {
             }
         }, debounceMs);
     }
+    // Edits made with bind:value never mark fields dirty, so changes are
+    // detected by content rather than by isDirty.
+    const startSerialized = JSON.stringify(getDataToPersist(startValues));
+    const originalSerialized = JSON.stringify(getDataToPersist(originalInitialValues));
+    lastPersisted = startSerialized;
     // Watch for form changes and save draft
     $effect(() => {
         // Access data to create dependency
-        JSON.stringify(baseForm.data);
-        if (baseForm.isDirty) {
+        const serialized = JSON.stringify(getDataToPersist());
+        if (serialized === lastPersisted)
+            return;
+        if (serialized === originalSerialized) {
+            // Edited back to the initial values: there is nothing to restore, so
+            // drop the stored draft (and any pending save) instead of leaving a
+            // stale one behind.
+            clearDraft();
+        }
+        else {
             saveDraft();
         }
+        lastPersisted = serialized;
     });
     /**
      * Extended reset that also clears the draft
@@ -209,9 +235,10 @@ export function usePersistedForm(options) {
         baseForm.reset();
         // Then overwrite data with original initialValues (not the draft-merged ones)
         // We modify the data object directly to avoid triggering markDirty
-        Object.assign(baseForm.data, JSON.parse(JSON.stringify(originalInitialValues)));
+        Object.assign(baseForm.data, $state.snapshot(originalInitialValues));
         draftRestored = false;
         clearDraft();
+        lastPersisted = JSON.stringify(getDataToPersist());
     }
     /**
      * Dismiss the draft restored notification

package/dist/lib/notices/sanitize.js

@@ -15,8 +15,10 @@ import { BROWSER } from 'esm-env';
 const ALLOWED_TAGS = ['a', 'b', 'br', 'em', 'i', 'p', 'span', 'strong', 'u', 'ul', 'ol', 'li'];
 /**
  * Allowed HTML attributes for notice messages.
+ * `class` is deliberately excluded: with Tailwind on the page, arbitrary
+ * utilities (`fixed inset-0 z-[9999]`) would let a message overlay the app.
  */
-const ALLOWED_ATTR = ['href', 'target', 'rel', 'class'];
+const ALLOWED_ATTR = ['href', 'target', 'rel'];
 /**
  * Escape HTML entities for safe rendering when DOMPurify isn't available.
  * This is a fallback for server-side rendering.
@@ -31,6 +33,12 @@ function escapeHtml(html) {
 }
 // Cached DOMPurify instance (only loaded on client)
 let purify = null;
+/** Force rel="noopener noreferrer" on any element that kept a target. */
+function enforceSafeRel(node) {
+    if (node.hasAttribute?.('target')) {
+        node.setAttribute('rel', 'noopener noreferrer');
+    }
+}
 /**
  * Initialize DOMPurify on the client.
  * Must be called before sanitizeHtml on the client side.
@@ -38,6 +46,7 @@ let purify = null;
 export async function initSanitizer() {
     if (BROWSER && !purify) {
         const DOMPurify = await import('isomorphic-dompurify');
+        DOMPurify.default.addHook('afterSanitizeAttributes', enforceSafeRel);
         purify = DOMPurify.default;
     }
 }
@@ -71,7 +80,5 @@ export function sanitizeHtml(html) {
     return purify.sanitize(html, {
         ALLOWED_TAGS,
         ALLOWED_ATTR,
-        // Ensure links open safely
-        ADD_ATTR: ['target'],
     });
 }

package/dist/lib/notices/store.d.ts

@@ -77,8 +77,8 @@ export declare const activeNotices: import("svelte/store").Readable<{
     location: "banner" | "both" | "card";
     pages: string[];
     link?: {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     } | undefined;
     title?: string | undefined;
@@ -98,8 +98,8 @@ export declare const bannerNotices: import("svelte/store").Readable<{
     location: "banner" | "both" | "card";
     pages: string[];
     link?: {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     } | undefined;
     title?: string | undefined;
@@ -119,8 +119,8 @@ export declare const cardNotices: import("svelte/store").Readable<{
     location: "banner" | "both" | "card";
     pages: string[];
     link?: {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     } | undefined;
     title?: string | undefined;

package/dist/lib/notices/store.js

@@ -36,10 +36,22 @@ function getDismissedNotices() {
     }
     catch (error) {
         console.warn('[notices] Failed to parse dismissed notices from localStorage', { error });
-        localStorage.removeItem(DISMISSED_STORAGE_KEY);
+        removeDismissedStorage();
     }
     return new Set();
 }
+/**
+ * Remove the dismissed-notices key. Storage itself can throw (blocked cookies,
+ * sandboxed iframes), so this never propagates.
+ */
+function removeDismissedStorage() {
+    try {
+        localStorage.removeItem(DISMISSED_STORAGE_KEY);
+    }
+    catch {
+        // Storage unavailable - nothing to clear
+    }
+}
 /**
  * Save dismissed notice IDs to localStorage
  */
@@ -166,7 +178,7 @@ export function dismissNotice(noticeId) {
 export function clearDismissedNotices() {
     dismissedIds.set(new Set());
     if (BROWSER) {
-        localStorage.removeItem(DISMISSED_STORAGE_KEY);
+        removeDismissedStorage();
     }
 }
 /**

package/dist/lib/notices/types.d.ts

@@ -23,15 +23,15 @@ export type NoticePage = '*' | string;
  */
 export declare const NoticeLinkSchema: z.ZodObject<{
     text: z.ZodString;
-    href: z.ZodString;
+    href: z.ZodEffects<z.ZodString, string, string>;
     external: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
-    href: string;
     text: string;
+    href: string;
     external?: boolean | undefined;
 }, {
-    href: string;
     text: string;
+    href: string;
     external?: boolean | undefined;
 }>;
 /**
@@ -61,15 +61,15 @@ export declare const NoticeSchema: z.ZodObject<{
     /** Optional link for "Learn more" or CTA */
     link: z.ZodOptional<z.ZodObject<{
         text: z.ZodString;
-        href: z.ZodString;
+        href: z.ZodEffects<z.ZodString, string, string>;
         external: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     }, {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     }>>;
     /** Whether the notice is enabled (quick toggle without removing) */
@@ -81,8 +81,8 @@ export declare const NoticeSchema: z.ZodObject<{
     location: "banner" | "both" | "card";
     pages: string[];
     link?: {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     } | undefined;
     title?: string | undefined;
@@ -98,8 +98,8 @@ export declare const NoticeSchema: z.ZodObject<{
     location: "banner" | "both" | "card";
     pages: string[];
     link?: {
-        href: string;
         text: string;
+        href: string;
         external?: boolean | undefined;
     } | undefined;
     title?: string | undefined;

package/dist/lib/notices/types.js

@@ -5,12 +5,16 @@
  * as banners at the top of pages or as cards within form pages.
  */
 import { z } from 'zod';
+import { safeHref } from '../utils/url.js';
 /**
  * Zod schema for notice link
  */
 export const NoticeLinkSchema = z.object({
     text: z.string().min(1, 'Link text is required'),
-    href: z.string().min(1, 'Link href is required'),
+    href: z
+        .string()
+        .min(1, 'Link href is required')
+        .refine((href) => safeHref(href) !== null, 'Link href must be relative or http(s)/mailto/tel'),
     external: z.boolean().optional(),
 });
 /**

package/dist/lib/stores/sidebar.svelte.d.ts

@@ -98,6 +98,18 @@ declare class SidebarStore {
      * This bypasses the persisted state check but doesn't persist the changes
      */
     forceExpandSections(sectionIds: string[]): void;
+    /**
+     * Expand the sections and items that hold the current page so its active
+     * item is visible. Like a search expansion it is not persisted; unlike one
+     * it is kept when a search clears. A no-op when all are already expanded.
+     */
+    revealExpansion(sectionIds: string[], itemIds: string[]): void;
+    /**
+     * Undo search force-expansions, restoring the expansion state from before the
+     * search (including any toggles made while it was active). Call when the
+     * search query is cleared; a no-op when no search expanded anything.
+     */
+    restoreSearchExpansion(): void;
     /**
      * Set callback for when pinned items change (for external persistence)
      */

package/dist/lib/stores/sidebar.svelte.js

@@ -16,7 +16,7 @@ var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
     return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
 };
-var _SidebarStore_instances, _SidebarStore_initialized, _SidebarStore_loadedFromStorage, _SidebarStore_loadedExpansionFromStorage, _SidebarStore_loadedPinnedFromStorage, _SidebarStore_onPinnedChange, _SidebarStore_appId, _SidebarStore_desktopOpen, _SidebarStore_getStorageKey, _SidebarStore_persist, _SidebarStore_persistExpansion, _SidebarStore_persistPinned, _SidebarStore_persistDesktopState;
+var _SidebarStore_instances, _SidebarStore_initialized, _SidebarStore_loadedFromStorage, _SidebarStore_loadedExpansionFromStorage, _SidebarStore_loadedPinnedFromStorage, _SidebarStore_onPinnedChange, _SidebarStore_appId, _SidebarStore_desktopOpen, _SidebarStore_searchSnapshot, _SidebarStore_getStorageKey, _SidebarStore_persist, _SidebarStore_persistExpansion, _SidebarStore_persistPinned, _SidebarStore_persistDesktopState, _SidebarStore_takeSearchSnapshot;
 import { matchesAccess } from '../utils/nav-access.js';
 const STORAGE_PREFIX = 'classic-theme-sidebar';
 class SidebarStore {
@@ -43,6 +43,9 @@ class SidebarStore {
         // mobile drawer (which must always start closed and never persists) can't
         // clobber it. Restored when leaving mobile mode.
         _SidebarStore_desktopOpen.set(this, null);
+        // Expansion state from before a search force-expanded everything; restored
+        // when the search clears. Null while no search is active.
+        _SidebarStore_searchSnapshot.set(this, null);
     }
     /**
      * Whether the store has been initialized
@@ -87,6 +90,7 @@ class SidebarStore {
         __classPrivateFieldSet(this, _SidebarStore_loadedFromStorage, false, "f");
         __classPrivateFieldSet(this, _SidebarStore_loadedExpansionFromStorage, false, "f");
         __classPrivateFieldSet(this, _SidebarStore_loadedPinnedFromStorage, false, "f");
+        __classPrivateFieldSet(this, _SidebarStore_searchSnapshot, null, "f");
         try {
             // Load sidebar open state. On mobile only the desktop preference is
             // recorded — the drawer must never open on first paint.
@@ -176,36 +180,24 @@ class SidebarStore {
      * Toggle section expansion state. When expanding, sections in `collapseOnExpand` close.
      */
     toggleSection(sectionId, collapseOnExpand = []) {
-        const newSet = new Set(this.expandedSections);
-        if (newSet.has(sectionId)) {
-            newSet.delete(sectionId);
-        }
-        else {
-            newSet.add(sectionId);
-            // Accordion behaviour: opening one closes these (its siblings)
-            for (const id of collapseOnExpand)
-                if (id !== sectionId)
-                    newSet.delete(id);
+        const expand = !this.expandedSections.has(sectionId);
+        this.expandedSections = applyToggle(this.expandedSections, sectionId, expand, collapseOnExpand);
+        if (__classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f")) {
+            const snap = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f");
+            snap.sections = applyToggle(snap.sections, sectionId, expand, collapseOnExpand);
         }
-        this.expandedSections = newSet;
         __classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_persistExpansion).call(this);
     }
     /**
      * Toggle item expansion state. When expanding, items in `collapseOnExpand` close.
      */
     toggleItem(itemId, collapseOnExpand = []) {
-        const newSet = new Set(this.expandedItems);
-        if (newSet.has(itemId)) {
-            newSet.delete(itemId);
+        const expand = !this.expandedItems.has(itemId);
+        this.expandedItems = applyToggle(this.expandedItems, itemId, expand, collapseOnExpand);
+        if (__classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f")) {
+            const snap = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f");
+            snap.items = applyToggle(snap.items, itemId, expand, collapseOnExpand);
         }
-        else {
-            newSet.add(itemId);
-            // Accordion behaviour: opening one closes these (its siblings)
-            for (const id of collapseOnExpand)
-                if (id !== itemId)
-                    newSet.delete(id);
-        }
-        this.expandedItems = newSet;
         __classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_persistExpansion).call(this);
     }
     /**
@@ -241,6 +233,7 @@ class SidebarStore {
      * This bypasses the persisted state check but doesn't persist the changes
      */
     forceExpandItems(itemIds) {
+        __classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_takeSearchSnapshot).call(this);
         const newSet = new Set(this.expandedItems);
         itemIds.forEach((id) => newSet.add(id));
         this.expandedItems = newSet;
@@ -251,11 +244,40 @@ class SidebarStore {
      * This bypasses the persisted state check but doesn't persist the changes
      */
     forceExpandSections(sectionIds) {
+        __classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_takeSearchSnapshot).call(this);
         const newSet = new Set(this.expandedSections);
         sectionIds.forEach((id) => newSet.add(id));
         this.expandedSections = newSet;
         // Don't persist - this is temporary for search
     }
+    /**
+     * Expand the sections and items that hold the current page so its active
+     * item is visible. Like a search expansion it is not persisted; unlike one
+     * it is kept when a search clears. A no-op when all are already expanded.
+     */
+    revealExpansion(sectionIds, itemIds) {
+        const withAll = (set, ids) => ids.every((id) => set.has(id)) ? set : new Set([...set, ...ids]);
+        this.expandedSections = withAll(this.expandedSections, sectionIds);
+        this.expandedItems = withAll(this.expandedItems, itemIds);
+        const snap = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f");
+        if (snap) {
+            snap.sections = withAll(snap.sections, sectionIds);
+            snap.items = withAll(snap.items, itemIds);
+        }
+    }
+    /**
+     * Undo search force-expansions, restoring the expansion state from before the
+     * search (including any toggles made while it was active). Call when the
+     * search query is cleared; a no-op when no search expanded anything.
+     */
+    restoreSearchExpansion() {
+        const snap = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f");
+        if (!snap)
+            return;
+        __classPrivateFieldSet(this, _SidebarStore_searchSnapshot, null, "f");
+        this.expandedSections = snap.sections;
+        this.expandedItems = snap.items;
+    }
     // ============================================
     // Pinning Methods
     // ============================================
@@ -353,7 +375,7 @@ class SidebarStore {
         };
     }
 }
-_SidebarStore_initialized = new WeakMap(), _SidebarStore_loadedFromStorage = new WeakMap(), _SidebarStore_loadedExpansionFromStorage = new WeakMap(), _SidebarStore_loadedPinnedFromStorage = new WeakMap(), _SidebarStore_onPinnedChange = new WeakMap(), _SidebarStore_appId = new WeakMap(), _SidebarStore_desktopOpen = new WeakMap(), _SidebarStore_instances = new WeakSet(), _SidebarStore_getStorageKey = function _SidebarStore_getStorageKey(suffix) {
+_SidebarStore_initialized = new WeakMap(), _SidebarStore_loadedFromStorage = new WeakMap(), _SidebarStore_loadedExpansionFromStorage = new WeakMap(), _SidebarStore_loadedPinnedFromStorage = new WeakMap(), _SidebarStore_onPinnedChange = new WeakMap(), _SidebarStore_appId = new WeakMap(), _SidebarStore_desktopOpen = new WeakMap(), _SidebarStore_searchSnapshot = new WeakMap(), _SidebarStore_instances = new WeakSet(), _SidebarStore_getStorageKey = function _SidebarStore_getStorageKey(suffix) {
     return __classPrivateFieldGet(this, _SidebarStore_appId, "f")
         ? `${STORAGE_PREFIX}-${__classPrivateFieldGet(this, _SidebarStore_appId, "f")}-${suffix}`
         : `${STORAGE_PREFIX}-${suffix}`;
@@ -372,9 +394,16 @@ _SidebarStore_initialized = new WeakMap(), _SidebarStore_loadedFromStorage = new
 }, _SidebarStore_persistExpansion = function _SidebarStore_persistExpansion() {
     if (typeof window === 'undefined')
         return;
+    // During a search the live sets hold temporary force-expansions; persist
+    // the user's real state instead.
+    const sections = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f")?.sections ?? this.expandedSections;
+    const items = __classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f")?.items ?? this.expandedItems;
     try {
-        localStorage.setItem(__classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_getStorageKey).call(this, 'sections'), JSON.stringify([...this.expandedSections]));
-        localStorage.setItem(__classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_getStorageKey).call(this, 'items'), JSON.stringify([...this.expandedItems]));
+        localStorage.setItem(__classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_getStorageKey).call(this, 'sections'), JSON.stringify([...sections]));
+        localStorage.setItem(__classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_getStorageKey).call(this, 'items'), JSON.stringify([...items]));
+        // The keys now exist: defaults applied "only when nothing is persisted"
+        // must stop, or they undo the user's toggle (same as #persist).
+        __classPrivateFieldSet(this, _SidebarStore_loadedExpansionFromStorage, true, "f");
     }
     catch {
         // localStorage not available
@@ -395,5 +424,26 @@ _SidebarStore_initialized = new WeakMap(), _SidebarStore_loadedFromStorage = new
         return;
     __classPrivateFieldSet(this, _SidebarStore_desktopOpen, this.isOpen, "f");
     __classPrivateFieldGet(this, _SidebarStore_instances, "m", _SidebarStore_persist).call(this);
+}, _SidebarStore_takeSearchSnapshot = function _SidebarStore_takeSearchSnapshot() {
+    if (__classPrivateFieldGet(this, _SidebarStore_searchSnapshot, "f"))
+        return;
+    __classPrivateFieldSet(this, _SidebarStore_searchSnapshot, {
+        sections: new Set(this.expandedSections),
+        items: new Set(this.expandedItems),
+    }, "f");
 };
+/** Copy of `set` with `id` expanded or collapsed; expanding closes `collapseOnExpand` (accordion). */
+function applyToggle(set, id, expand, collapseOnExpand) {
+    const next = new Set(set);
+    if (expand) {
+        next.add(id);
+        for (const other of collapseOnExpand)
+            if (other !== id)
+                next.delete(other);
+    }
+    else {
+        next.delete(id);
+    }
+    return next;
+}
 export const sidebarStore = new SidebarStore();

package/dist/lib/stores/toast.svelte.js

@@ -7,6 +7,17 @@
  * - Proper timeout cleanup to prevent memory leaks
  * - Convenience methods for common toast types
  */
+let fallbackIdCounter = 0;
+/**
+ * crypto.randomUUID only exists in secure contexts (https, localhost), so
+ * fall back on plain-http origins such as a LAN IP or a staging host.
+ */
+function createToastId() {
+    if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function') {
+        return crypto.randomUUID();
+    }
+    return `toast-${Date.now()}-${++fallbackIdCounter}`;
+}
 class ToastStore {
     constructor() {
         this.toasts = $state([]);
@@ -19,7 +30,7 @@ class ToastStore {
      * @returns The generated toast id
      */
     add(toast) {
-        const id = crypto.randomUUID();
+        const id = createToastId();
         const newToast = { ...toast, id };
         this.toasts = [...this.toasts, newToast];
         // Auto-dismiss unless duration is explicitly 0 (persistent)

package/dist/lib/utils/date.d.ts

@@ -77,7 +77,9 @@ export interface ParseResult {
  * - ISO: `2024-03-15`, `2024-03-15T14:30`
  * - US: `03/15/2024`, `3/15/24`, `03-15-2024`
  * - Natural: `Mar 15, 2024`, `March 15 2024`
- * - With time: `03/15/2024 2:30 PM`, `03/15/2024 14:30`
+ * - With time: `03/15/2024 2:30 PM`, `03/15/2024 14:30`, `Mar 15, 2024 at 2:30 PM`
+ *
+ * Out-of-range parts (`02/30/2024`, `25:99`) are rejected, not rolled over.
  *
  * @param input - The user-typed date string
  * @param options - Parsing options