@esposter/shared 4.3.3 → 4.4.0

package/README.md

@@ -5,12 +5,14 @@
 [![NPM downloads][badge-npm-downloads]][url-npm]
 [![NPM Unpacked Size (with version)][badge-npm-unpacked-size]][url-npm]
 
-Shared TypeScript utilities, types, and error classes for the Esposter platform. Works in both browser and server environments.
+Shared TypeScript utilities, types, and error classes for the Esposter platform.
+
+Design notes live in [the specs](https://github.com/Esposter/Esposter/tree/main/openspec/specs/shared).
 
 ## Table of Contents
 
 - 🚀 [Getting Started](#getting-started)
-- 📖 [Documentation](#documentation)
+- 🧩 [Key Exports](#key-exports)
 - ⚖️ [License](#license)
 
 ---
@@ -21,11 +23,9 @@ Shared TypeScript utilities, types, and error classes for the Esposter platform.
 pnpm i @esposter/shared zod
 ```
 
-## <a name="documentation">📖 Documentation</a>
-
-We highly recommend you take a look at the [documentation](https://github.com/Esposter/Esposter/tree/main/openspec/specs/shared) to level up.
+Works in both browser and server environments.
 
-### Key Exports
+## <a name="key-exports">🧩 Key Exports</a>
 
 #### Error Classes
 
@@ -40,7 +40,7 @@ throw new InvalidOperationError(Operation.Read, file.name, zodError.message);
 ```ts
 import { takeOne } from "@esposter/shared";
 
-// Safe index access — throws on out-of-bounds instead of returning undefined
+// The first item, typed without `undefined`; an out-of-bounds index still yields `undefined` at runtime
 const first = takeOne(items);
 ```
 
@@ -49,7 +49,7 @@ const first = takeOne(items);
 ```ts
 import type { ToData, DeepOmit, GetPaths } from "@esposter/shared";
 
-// ToData<T> — strips class methods, returns plain data shape
+// ToData<T> — the plain data shape of T, with its `toJSON` method removed at every depth
 type RawColumn = ToData<Column>;
 ```
 
@@ -74,17 +74,6 @@ import { capitalize, truncate, toKebabCase } from "@esposter/shared";
 import { getResult, getResultAsync, withFinalizer } from "@esposter/shared";
 ```
 
-### Commands
-
-Run from `packages/shared/`:
-
-```bash
-pnpm build        # compile to dist/
-pnpm test         # vitest watch mode (coverage is run from the repo root)
-pnpm lint:fix     # auto-fix lint
-pnpm typecheck    # type check
-```
-
 ## <a name="license">⚖️ License</a>
 
 This project is licensed under the [Apache-2.0 license](https://github.com/Esposter/Esposter/blob/main/LICENSE).

package/dist/index.d.ts

@@ -188,6 +188,7 @@ export type AttributesTransformer = (attributes: Record<string, string>) => Reco
 export interface SanitizeHtmlOptions {
   allowedAttributes?: Record<string, string[]>;
   allowedClasses?: Record<string, string[]>;
+  allowedSources?: Record<string, Record<string, RegExp[]>>;
   allowedStyles?: Record<string, Record<string, RegExp[]>>;
   allowedTags?: string[];
   transformAttributes?: Record<string, AttributesTransformer>;
@@ -196,10 +197,12 @@ export interface SanitizePolicy {
   allowedAttributes: Record<string, string[]>;
   allowedClasses: Record<string, string[]>;
   allowedSchemes: string[];
+  allowedSources: Record<string, Record<string, RegExp[]>>;
   allowedStyles: Record<string, Record<string, RegExp[]>>;
   allowedTags: string[];
   transformAttributes: Record<string, AttributesTransformer>;
 }
+export type TextHtmlAllowance = Pick<SanitizeHtmlOptions, "allowedAttributes" | "allowedSources" | "allowedTags">;
 export interface ItemEntityType<T extends string> {
   type: T;
 }
@@ -1870,6 +1873,29 @@ export interface ItemMetadataClass<TBase extends Class<object>> {
   new (...args: ConstructorParameters<TBase>): InstanceType<TBase> & ItemMetadata;
   prototype: InstanceType<TBase> & ItemMetadata;
 }
+export type GetArrayProps<T extends unknown[], P extends string, D extends unknown[], R extends boolean> = (D extends [unknown, ...infer Rest] ? GetProperties<T[number], R extends true ? `${P}[number]` : `${P}.[number]`, Rest, false> : never) | {
+  path: R extends true ? "length" : `${P}.length`;
+  value: T["length"];
+};
+export type FunctionLike = ((...args: never) => unknown) | (abstract new (...args: never) => unknown);
+export type KnownKeys<T> = { [K in keyof T as string extends K ? never : number extends K ? never : K]: T[K]; };
+export type GetObjectProps<T, P extends string, D extends unknown[], R extends boolean> = { [K in keyof KnownKeys<T> & (number | string)]: K extends `${number}` ? never : NonNullable<T[K]> extends FunctionLike ? never : (D extends [unknown, ...infer Rest] ? GetProperties<T[K], R extends true ? `${K}` : `${P}.${K}`, Rest, false> : never) | {
+  path: R extends true ? `${K}` : `${P}.${K}`;
+  value: T[K];
+}; }[keyof KnownKeys<T> & (number | string)];
+export type GetPrimitiveProps<T, P extends string, D extends unknown[], R extends boolean> = T extends string ? {
+  path: R extends true ? "length" : `${P}.length`;
+  value: number;
+} : T extends symbol ? (D extends [unknown, ...infer Rest] ? GetProperties<string | undefined, R extends true ? "description" : `${P}.description`, Rest, false> : never) | {
+  path: R extends true ? "description" : `${P}.description`;
+  value: string | undefined;
+} : never;
+export type GetProperties<T, P extends string = "", D extends unknown[] = [unknown, unknown, unknown, unknown, unknown], R extends boolean = true> = [T] extends [never] ? never : D extends [] ? never : NonNullable<T> extends (infer O) ? O extends unknown[] ? GetArrayProps<O, P, D, R> : O extends object ? GetObjectProps<O, P, D, R> : GetPrimitiveProps<O, P, D, R> : never;
+export type GetPaths<T> = GetProperties<T> extends (infer U) ? (U extends {
+  path: infer Path;
+} ? Path : never) : never;
+export type PropertyNames<T> = { [P in GetPaths<T>]: P; };
+export declare const ItemMetadataPropertyNames: PropertyNames<ItemMetadata>;
 export declare abstract class Serializable {
   toJSON(): this;
 }
@@ -1877,7 +1903,6 @@ export interface TakeOne {
   <T extends readonly unknown[]>(values: T, index?: number): T[number];
   <T extends object>(values: T, index: keyof T): T[keyof T];
 }
-export type FunctionLike = ((...args: never) => unknown) | (abstract new (...args: never) => unknown);
 export type DeepOmit<T, TKey extends PropertyKey> = T extends DeepOmitKeptValue ? T : T extends readonly unknown[] ? { [K in keyof T]: DeepOmit<T[K], TKey>; } : T extends object ? [keyof T] extends [never] ? T : { [P in keyof T as P extends symbol ? never : P extends TKey ? never : P]: DeepOmit<T[P], TKey>; } : T;
 type DeepOmitKeptValue = ArrayBufferView | Blob | Date | FunctionLike | Map<unknown, unknown> | Primitive | Promise<unknown> | RegExp | Set<unknown>;
 export type DeepOptionalUndefined<T> = T extends Date | FunctionLike | Primitive ? T : T extends unknown[] ? { [K in keyof T]: DeepOptionalUndefined<T[K]>; } : T extends object ? { [K in keyof T as undefined extends T[K] ? K : never]?: DeepOptionalUndefined<T[K]>; } & { [K in keyof T as undefined extends T[K] ? never : K]: DeepOptionalUndefined<T[K]>; } extends (infer O) ? { [K in keyof O]: O[K]; } : never : T;
@@ -1941,6 +1966,8 @@ export declare const CUSTOM_EMOJI_ID_ATTRIBUTE = "data-custom-emoji-id";
 export declare const CUSTOM_EMOJI_NAME_ATTRIBUTE = "data-custom-emoji-name";
 export declare const SPOILER_ATTRIBUTE = "data-spoiler";
 export declare const SPOILER_SELECTOR: string;
+export declare const checkIsOnlyReactor: (userIds: string[], userId: string) => boolean;
+export declare const getUpdatedUserIds: (userIds: string[], newUserId: string) => string[];
 export declare const getMentions: (message: string) => HTMLElement[];
 export declare const charset: (type: string) => false | string;
 export declare const MEDIA_TYPE_REGEX: RegExp;
@@ -1966,6 +1993,7 @@ export declare const html: typeof String.raw;
 export declare const checkContainsProfanity: (text: unknown, { isWholeWord }?: Partial<ProfanityOptions>) => boolean;
 export declare const englishProfaneWords: readonly string[];
 export declare const checkIsAllowedUrl: (url: string, allowedSchemes: string[]) => boolean;
+export declare const checkIsSourceAllowed: (element: DefaultTreeAdapterTypes.Element, allowedSources: SanitizePolicy["allowedSources"]) => boolean;
 export declare const checkIsUnsafeUrlCharacter: (character: string) => boolean;
 export declare const checkIsWhitespaceCharacter: (character: string) => boolean;
 export declare const collectText: (nodes: DefaultTreeAdapterTypes.ChildNode[], depth: number) => string;
@@ -1983,7 +2011,7 @@ export declare const MAX_NESTING_DEPTH = 256;
 export declare const SRCSET_DESCRIPTOR_REGEX: RegExp;
 export declare const ESCAPED_TEXT_CHARACTERS_REGEX: RegExp;
 export declare const ESCAPED_ATTRIBUTE_CHARACTERS_REGEX: RegExp;
-export declare const SANITIZER_ADVISORY_WATCH_SINCE = "2026-10-21";
+export declare const SANITIZER_ADVISORY_WATCH_SINCE = "2026-10-23";
 export declare const escapeAttribute: (value: string) => string;
 export declare const escapeCharacters: (value: string, charactersRegex: RegExp, entities: Record<string, string>) => string;
 export declare const escapeText: (text: string) => string;
@@ -1993,10 +2021,11 @@ export declare const filterHtml: (html: string, policy: SanitizePolicy) => strin
 export declare const filterSrcset: (value: string, allowedSchemes: string[]) => string | undefined;
 export declare const filterStyle: (value: string, rules: Record<string, RegExp[]> | undefined) => string | undefined;
 export declare const getChildNodes: (element: DefaultTreeAdapterTypes.Element) => DefaultTreeAdapterTypes.ChildNode[];
+export declare const getTagPolicy: <T>(tagPolicies: Record<string, T>, tagName: string) => T | undefined;
 export declare const matchesClassPattern: (className: string, pattern: string) => boolean;
 export declare const renderNode: (node: DefaultTreeAdapterTypes.ChildNode, policy: SanitizePolicy, depth: number) => string;
 export declare const sanitizeHtml: (html: string, options?: SanitizeHtmlOptions) => string;
-export declare const sanitizeTextHtml: (html: string) => string;
+export declare const sanitizeTextHtml: (html: string, allowance?: TextHtmlAllowance) => string;
 export declare const applyItemMetadataMixin: <TBase extends Class<object>>(Base: TBase) => ItemMetadataClass<TBase>;
 export declare const createNormalizedStringSchema: (maxLength: number, schema?: z.ZodString) => z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
 export declare const createUniqueArraySchema: CreateUniqueArraySchema;
@@ -2032,27 +2061,6 @@ export declare const checkIsSameBytes: (first: ArrayBuffer | ArrayBufferView | S
 export declare const checkIsSameValueZero: (first: unknown, second: unknown) => boolean;
 export declare const clonePlainDeep: <T>(data: T) => T;
 export declare const getEnumerableKeys: (value: object) => PropertyKey[];
-export type GetArrayProps<T extends unknown[], P extends string, D extends unknown[], R extends boolean> = (D extends [unknown, ...infer Rest] ? GetProperties<T[number], R extends true ? `${P}[number]` : `${P}.[number]`, Rest, false> : never) | {
-  path: R extends true ? "length" : `${P}.length`;
-  value: T["length"];
-};
-export type KnownKeys<T> = { [K in keyof T as string extends K ? never : number extends K ? never : K]: T[K]; };
-export type GetObjectProps<T, P extends string, D extends unknown[], R extends boolean> = { [K in keyof KnownKeys<T> & (number | string)]: K extends `${number}` ? never : NonNullable<T[K]> extends FunctionLike ? never : (D extends [unknown, ...infer Rest] ? GetProperties<T[K], R extends true ? `${K}` : `${P}.${K}`, Rest, false> : never) | {
-  path: R extends true ? `${K}` : `${P}.${K}`;
-  value: T[K];
-}; }[keyof KnownKeys<T> & (number | string)];
-export type GetPrimitiveProps<T, P extends string, D extends unknown[], R extends boolean> = T extends string ? {
-  path: R extends true ? "length" : `${P}.length`;
-  value: number;
-} : T extends symbol ? (D extends [unknown, ...infer Rest] ? GetProperties<string | undefined, R extends true ? "description" : `${P}.description`, Rest, false> : never) | {
-  path: R extends true ? "description" : `${P}.description`;
-  value: string | undefined;
-} : never;
-export type GetProperties<T, P extends string = "", D extends unknown[] = [unknown, unknown, unknown, unknown, unknown], R extends boolean = true> = [T] extends [never] ? never : D extends [] ? never : NonNullable<T> extends (infer O) ? O extends unknown[] ? GetArrayProps<O, P, D, R> : O extends object ? GetObjectProps<O, P, D, R> : GetPrimitiveProps<O, P, D, R> : never;
-export type GetPaths<T> = GetProperties<T> extends (infer U) ? (U extends {
-  path: infer Path;
-} ? Path : never) : never;
-export type PropertyNames<T> = { [P in GetPaths<T>]: P; };
 export declare const getPropertyNames: <T>() => PropertyNames<T>;
 export declare const jsonDateParse: <T = any>(text: string) => T;
 export type MergeObjectsStrict<T extends object[]> = T extends [infer TFirst, infer TSecond, ...infer TRemaining] ? TSecond extends { [K in keyof TSecond]: K extends keyof TFirst ? never : TSecond[K]; } ? TRemaining extends object[] ? MergeObjectsStrict<[TSecond, ...TRemaining]> & TFirst : TFirst & TSecond : never : T extends [infer TFirst] ? TFirst : never;
@@ -2072,6 +2080,8 @@ export declare const toKebabCase: <T extends string>(string: T) => KebabCase<T>;
 export declare const truncate: (string: string, length: number) => string;
 export declare const uncapitalize: <T extends string>(string: T) => Uncapitalize<T>;
 export declare const MILLISECONDS_PER_SECOND = 1e3;
+export declare const createExponentialBackoff: (baseDelayMs: number, maxDelayMs: number) => (<T>(operation: () => Promise<T>) => Promise<T>);
+export declare const getExponentialBackoffDelayMs: (attempt: number, baseDelayMs: number, maxDelayMs: number) => number;
 export declare const hrtime: (previousHrTime?: [number, number]) => [number, number];
 export declare const now: () => string;
 export declare const sleep: (durationMs: number) => Promise<void>;

package/dist/index.js

@@ -157,6 +157,10 @@ var ItemMetadata = class {
 	deletedAt = null;
 	updatedAt = /* @__PURE__ */ new Date();
 };
+// src/util/object/getPropertyNames.ts
+const getPropertyNames = () => new Proxy({}, { get: (_target, property) => property });
+// src/models/shared/ItemMetadataPropertyNames.ts
+const ItemMetadataPropertyNames = getPropertyNames();
 // src/util/reactivity/getRawData.ts
 const getRawData = (data) => {
 	const raw = data && data.__v_raw;
@@ -209,8 +213,12 @@ const withFinalizer = (callback, finalizer) => {
 };
 // src/services/error/withFinalizerAsync.ts
 const withFinalizerAsync = async (callback, finalizer) => {
-	const callbackResult = await getResultAsync(async () => callback());
-	if (finalizer) await getResultAsync(async () => finalizer()).match(noop, (error) => {
+	const callbackResult = await getResultAsync(async () => {
+		return await callback();
+	});
+	if (finalizer) await getResultAsync(async () => {
+		await finalizer();
+	}).match(noop, (error) => {
 		reportFinalizerError(callbackResult, error);
 	});
 	return callbackResult.match((value) => value, (error) => {
@@ -336,12 +344,23 @@ const wrapUpgradeDatabase = (database) => ({
 	...wrapDatabase(database),
 	createObjectStore: (name, options) => wrapObjectStore(database.createObjectStore(name, options))
 });
+// src/util/function/getSynchronizedFunction.ts
+const pendingPromises = /* @__PURE__ */ new Set();
+const getSynchronizedFunction = (asyncFunction) => (...args) => {
+	const promise = withFinalizerAsync(() => asyncFunction(...args), () => {
+		pendingPromises.delete(promise);
+	});
+	pendingPromises.add(promise);
+};
+const waitForSynchronizedFunctions = async () => {
+	await Promise.allSettled(pendingPromises);
+};
 // src/services/indexedDb/wrapUpgradeTransaction.ts
 const wrapUpgradeTransaction = (transaction) => {
 	const done = getTransactionDone(transaction);
-	getResultAsync(() => done).match(noop, (error) => {
+	getSynchronizedFunction(() => getResultAsync(() => done).match(noop, (error) => {
 		if (transaction.error) console.error(error);
-	});
+	}))();
 	return {
 		get done() {
 			return done;
@@ -610,6 +629,10 @@ const CUSTOM_EMOJI_ID_ATTRIBUTE = "data-custom-emoji-id";
 const CUSTOM_EMOJI_NAME_ATTRIBUTE = "data-custom-emoji-name";
 const SPOILER_ATTRIBUTE = "data-spoiler";
 const SPOILER_SELECTOR = `span[${SPOILER_ATTRIBUTE}]`;
+// src/services/message/emoji/checkIsOnlyReactor.ts
+const checkIsOnlyReactor = (userIds, userId) => userIds.length === 1 && userIds[0] === userId;
+// src/services/message/emoji/getUpdatedUserIds.ts
+const getUpdatedUserIds = (userIds, newUserId) => userIds.includes(newUserId) ? userIds.filter((id) => id !== newUserId) : [...userIds, newUserId];
 // src/services/message/getMentions.ts
 const getMentions = (message) => parse(message).querySelectorAll(MENTION_SELECTOR);
 // src/services/mime/constants.ts
@@ -1193,6 +1216,17 @@ const checkIsAllowedUrl = (url, allowedSchemes) => {
 	const scheme = beforePath.slice(0, separatorIndex).replaceAll(NON_SCHEME_CHARACTERS_REGEX, "").toLowerCase();
 	return allowedSchemes.includes(scheme);
 };
+// src/services/sanitizeHtml/getTagPolicy.ts
+const getTagPolicy = (tagPolicies, tagName) => Object.hasOwn(tagPolicies, tagName) ? tagPolicies[tagName] : void 0;
+// src/services/sanitizeHtml/checkIsSourceAllowed.ts
+const checkIsSourceAllowed = (element, allowedSources) => {
+	const sourceRules = getTagPolicy(allowedSources, element.tagName);
+	if (!sourceRules) return true;
+	return Object.entries(sourceRules).every(([name, patterns]) => {
+		const attribute = element.attrs.find((attr) => attr.name === name);
+		return attribute !== void 0 && patterns.some((pattern) => pattern.test(attribute.value));
+	});
+};
 // src/services/sanitizeHtml/constants.ts
 const HTML_NAMESPACE = html$1.NS.HTML;
 const DEFAULT_ALLOWED_TAGS = [
@@ -1327,7 +1361,7 @@ const MAX_NESTING_DEPTH = 256;
 const SRCSET_DESCRIPTOR_REGEX = /^(?:\d+w|\d*\.?\d+x|\d+h)$/u;
 const ESCAPED_TEXT_CHARACTERS_REGEX = /[&<>]/gu;
 const ESCAPED_ATTRIBUTE_CHARACTERS_REGEX = /[&"<>]/gu;
-const SANITIZER_ADVISORY_WATCH_SINCE = "2026-10-21";
+const SANITIZER_ADVISORY_WATCH_SINCE = "2026-10-23";
 // src/services/sanitizeHtml/getChildNodes.ts
 const getChildNodes = (element) => "content" in element ? element.content.childNodes : element.childNodes;
 // src/services/sanitizeHtml/collectText.ts
@@ -1420,7 +1454,6 @@ const filterStyle = (value, rules) => {
 	return Array.from(declarations, ([property, { important, propertyValue }]) => `${property}${PROPERTY_SEPARATOR}${propertyValue}${important ? IMPORTANT_SUFFIX : ""}`).join(DECLARATION_SEPARATOR);
 };
 // src/services/sanitizeHtml/filterAttributes.ts
-const getTagPolicy = (tagPolicies, tagName) => Object.hasOwn(tagPolicies, tagName) ? tagPolicies[tagName] : void 0;
 const checkIsMetaRefresh = (tagName, attributes) => tagName === "meta" && attributes["http-equiv"]?.trim().toLowerCase() === "refresh";
 const filterAttributes = (element, policy) => {
 	const { tagName } = element;
@@ -1451,7 +1484,7 @@ const renderNode = (node, policy, depth) => {
 	if (!("tagName" in node) || depth > 256) return "";
 	const element = node;
 	const children = getChildNodes(element).map((child) => renderNode(child, policy, depth + 1)).join("");
-	if (!(element.namespaceURI === HTML_NAMESPACE && !NON_TEXT_TAGS.includes(element.tagName) && policy.allowedTags.includes(element.tagName))) return NON_TEXT_TAGS.includes(element.tagName) ? "" : children;
+	if (!(element.namespaceURI === HTML_NAMESPACE && !NON_TEXT_TAGS.includes(element.tagName) && policy.allowedTags.includes(element.tagName) && checkIsSourceAllowed(element, policy.allowedSources))) return NON_TEXT_TAGS.includes(element.tagName) ? "" : children;
 	const attributes = Object.entries(filterAttributes(element, policy)).map(([name, value]) => ` ${name}="${escapeAttribute(value)}"`).join("");
 	const opening = `<${element.tagName}${attributes}>`;
 	return VOID_TAGS.includes(element.tagName) ? opening : `${opening}${children}</${element.tagName}>`;
@@ -1502,6 +1535,7 @@ const sanitizeHtml = (html, options) => filterHtml(html, {
 	},
 	allowedClasses: options?.allowedClasses ?? {},
 	allowedSchemes: DEFAULT_ALLOWED_SCHEMES,
+	allowedSources: options?.allowedSources ?? {},
 	allowedStyles: {
 		...options?.allowedStyles,
 		...TABLE_ALLOWED_STYLES
@@ -1521,47 +1555,54 @@ const COLOR_REGEXES = [
 	/^rgba?\(\d{1,3},\s*\d{1,3},\s*\d{1,3}(?:,\s*[\d.]+)?\)$/u,
 	/^[a-z]+$/iu
 ];
-const sanitizeTextHtml = (html) => sanitizeHtml(html, {
-	allowedAttributes: {
-		input: [
-			"checked",
-			"disabled",
-			"type"
-		],
-		li: ["data-checked", "data-type"],
-		span: [
-			CUSTOM_EMOJI_ID_ATTRIBUTE,
-			CUSTOM_EMOJI_NAME_ATTRIBUTE,
-			MENTION_ID_ATTRIBUTE,
-			MENTION_ITEM_TYPE_ATTRIBUTE,
-			MENTION_LABEL_ATTRIBUTE,
-			MENTION_TYPE_ATTRIBUTE,
-			SPOILER_ATTRIBUTE,
-			"style"
-		],
-		ul: ["data-type"]
-	},
-	allowedClasses: {
-		code: ["language-*"],
-		pre: ["language-*"],
-		span: ["hljs*"]
-	},
-	allowedStyles: { span: {
-		"background-color": COLOR_REGEXES,
-		"border-radius": [/^[\d.]+(?<unit>px|em|rem|%)$/u],
-		color: COLOR_REGEXES
-	} },
-	allowedTags: [
-		...DEFAULT_ALLOWED_TAGS,
-		"input",
-		"label"
+const KIT_ALLOWED_ATTRIBUTES = {
+	input: [
+		"checked",
+		"disabled",
+		"type"
 	],
-	transformAttributes: { input: ({ checked }) => ({
-		...checked === void 0 ? {} : { checked },
-		disabled: "",
-		type: "checkbox"
-	}) }
-});
+	li: ["data-checked", "data-type"],
+	span: [
+		CUSTOM_EMOJI_ID_ATTRIBUTE,
+		CUSTOM_EMOJI_NAME_ATTRIBUTE,
+		MENTION_ID_ATTRIBUTE,
+		MENTION_ITEM_TYPE_ATTRIBUTE,
+		MENTION_LABEL_ATTRIBUTE,
+		MENTION_TYPE_ATTRIBUTE,
+		SPOILER_ATTRIBUTE,
+		"style"
+	],
+	ul: ["data-type"]
+};
+const sanitizeTextHtml = (html, allowance = {}) => {
+	const allowedAttributes = { ...KIT_ALLOWED_ATTRIBUTES };
+	for (const [tagName, attributes] of Object.entries(allowance.allowedAttributes ?? {})) allowedAttributes[tagName] = [.../* @__PURE__ */ new Set([...allowedAttributes[tagName] ?? [], ...attributes])];
+	return sanitizeHtml(html, {
+		allowedAttributes,
+		allowedClasses: {
+			code: ["language-*"],
+			pre: ["language-*"],
+			span: ["hljs*"]
+		},
+		allowedSources: allowance.allowedSources,
+		allowedStyles: { span: {
+			"background-color": COLOR_REGEXES,
+			"border-radius": [/^[\d.]+(?<unit>px|em|rem|%)$/u],
+			color: COLOR_REGEXES
+		} },
+		allowedTags: [
+			...DEFAULT_ALLOWED_TAGS,
+			"input",
+			"label",
+			...allowance.allowedTags ?? []
+		],
+		transformAttributes: { input: ({ checked }) => ({
+			...checked === void 0 ? {} : { checked },
+			disabled: "",
+			type: "checkbox"
+		}) }
+	});
+};
 // src/services/shared/applyItemMetadataMixin.ts
 const applyItemMetadataMixin = (Base) => class ItemWithMetadata extends Base {
 	createdAt = /* @__PURE__ */ new Date();
@@ -1714,17 +1755,6 @@ const downloadFile = (filename, blobPart, type) => {
 };
 // src/util/environment/checkIsServer.ts
 const checkIsServer = () => typeof window === "undefined";
-// src/util/function/getSynchronizedFunction.ts
-const pendingPromises = /* @__PURE__ */ new Set();
-const getSynchronizedFunction = (asyncFunction) => (...args) => {
-	const promise = asyncFunction(...args).finally(() => {
-		pendingPromises.delete(promise);
-	});
-	pendingPromises.add(promise);
-};
-const waitForSynchronizedFunctions = async () => {
-	await Promise.allSettled(pendingPromises);
-};
 // src/util/id/uuid/constants.ts
 const UUIDV4_REGEX = /^[0-9A-F]{8}-[0-9A-F]{4}-[4][0-9A-F]{3}-[89AB][0-9A-F]{3}-[0-9A-F]{12}$/iu;
 // src/util/map/getOrCreate.ts
@@ -1751,8 +1781,6 @@ const clone = (data, copies) => {
 	}
 };
 const clonePlainDeep = (data) => clone(data, /* @__PURE__ */ new WeakMap());
-// src/util/object/getPropertyNames.ts
-const getPropertyNames = () => new Proxy({}, { get: (_target, property) => property });
 // src/util/object/jsonDateParse.ts
 const ISO_DATE_REGEX = /^(?<year>\d{4})-(?<month>\d{2})-(?<day>\d{2})T(?<hours>\d{2}):(?<minutes>\d{2}):(?<seconds>\d{2}(?:\.{0,1}\d*))(?:Z|(?<sign>\+|-)(?<offset>[\d|:]*))?$/u;
 const MS_AJAX_DATE_REGEX = /^\/Date\((?<timestamp>-?\d+(?:[-+]\d+)?)\)[/\\]$/u;
@@ -2035,6 +2063,28 @@ const truncate = (string, length) => {
 const uncapitalize = (string) => `${string.charAt(0).toLowerCase()}${string.slice(1)}`;
 // src/util/time/constants.ts
 const MILLISECONDS_PER_SECOND = 1e3;
+// src/util/time/getExponentialBackoffDelayMs.ts
+const getExponentialBackoffDelayMs = (attempt, baseDelayMs, maxDelayMs) => Math.min(baseDelayMs * 2 ** attempt, maxDelayMs);
+// src/util/time/sleep.ts
+const sleep = (durationMs) => new Promise((resolve) => {
+	setTimeout(() => {
+		resolve();
+	}, durationMs);
+});
+// src/util/time/createExponentialBackoff.ts
+const createExponentialBackoff = (baseDelayMs, maxDelayMs) => {
+	let failureCount = 0;
+	return async (operation) => {
+		if (failureCount > 0) await sleep(getExponentialBackoffDelayMs(failureCount - 1, baseDelayMs, maxDelayMs));
+		return getResultAsync(operation).match((value) => {
+			failureCount = 0;
+			return value;
+		}, (error) => {
+			failureCount += 1;
+			throw error;
+		});
+	};
+};
 // src/util/time/hrtime.ts
 const hrtime = (previousHrTime) => {
 	if (checkIsServer()) return process.hrtime(previousHrTime);
@@ -2058,10 +2108,4 @@ const now = () => {
 	const [seconds, nanoseconds] = hrtime(loadNanoseconds);
 	return (BigInt(loadMilliseconds) * 10n ** 6n + (BigInt(seconds) * 10n ** 9n + BigInt(nanoseconds))).toString();
 };
-// src/util/time/sleep.ts
-const sleep = (durationMs) => new Promise((resolve) => {
-	setTimeout(() => {
-		resolve();
-	}, durationMs);
-});
-export { ALL_SPECIAL_VALUES, APPEND_SEGMENT, CHARSET_PARAMETER_REGEX, CUSTOM_EMOJI_ID_ATTRIBUTE, CUSTOM_EMOJI_NAME_ATTRIBUTE, DEFAULT_ALLOWED_ATTRIBUTES, DEFAULT_ALLOWED_SCHEMES, DEFAULT_ALLOWED_TAGS, DEFAULT_COMPRESSION_LEVEL, DEFAULT_FACET_SCORE, DEFAULT_LINK_ATTRIBUTES, DEFAULT_SOURCE_SCORE, DEFAULT_TEXT_CHARSET, DEFAULT_TYPE_SCORE, ESCAPED_ATTRIBUTE_CHARACTERS_REGEX, ESCAPED_TEXT_CHARACTERS_REGEX, FacetScoreMap, ForbiddenError, GIBIBYTE, HTML_NAMESPACE, ID_SEPARATOR, IMPORTANT_REGEX, InvalidOperationError, ItemMetadata, JSON_POINTER_REGEX, JsonPatchOperationType, KIBIBYTE, MAX_NESTING_DEPTH, MAX_READ_LIMIT, MAX_WINDOW_LOG, MEDIA_TYPE_REGEX, MENTION_EVERYONE_ID, MENTION_HERE_ID, MENTION_ID_ATTRIBUTE, MENTION_ITEM_TYPE_ATTRIBUTE, MENTION_LABEL_ATTRIBUTE, MENTION_SELECTOR, MENTION_TYPE, MENTION_TYPE_ATTRIBUTE, MILLISECONDS_PER_SECOND, MIN_WINDOW_LOG, MentionType, NON_TEXT_TAGS, NotFoundError, NotInitializedError, ObjectMethod, Operation, PATH_SEPARATOR_REGEX, RoutePath, SANITIZER_ADVISORY_WATCH_SINCE, SITE_NAME, SPOILER_ATTRIBUTE, SPOILER_SELECTOR, SRCSET_ATTRIBUTE, SRCSET_DESCRIPTOR_REGEX, Serializable, SourceScoreMap, TEXT_MEDIA_TYPE_REGEX, TypeScoreMap, TypedEventEmitter, URL_ATTRIBUTES, UUIDV4_REGEX, VOID_TAGS, WordFilteredError, addJsonValue, applyItemMetadataMixin, applyPatch, applyPatches, capitalize, charset, checkContainsProfanity, checkIsAllowedUrl, checkIsCustomMethod, checkIsDeepEqual, checkIsNestedControl, checkIsNestedInteraction, checkIsPlainObject, checkIsSameBytes, checkIsSameValueZero, checkIsServer, checkIsUnsafeUrlCharacter, checkIsWhitespaceCharacter, chunk, chunkBySerializedSize, clonePlainDeep, collectText, contentType, createEvictingPromiseCache, createHistory, createItemEntityTypeSchema, createNormalizedStringSchema, createUniqueArraySchema, css, dedent, downloadFile, downloadUrl, encodeUrlSubDelimiters, englishProfaneWords, escapeAttribute, escapeCharacters, escapeText, exhaustiveGuard, extension, filterAttributes, filterClasses, filterHtml, filterSrcset, filterStyle, getChildNodes, getDecodedUriComponent, getEndOfDay, getEnumerableKeys, getExtensionMimeTypeMap, getMediaType, getMentions, getMimeScore, getMimeTypeEntryMap, getOrCreate, getPropertyNames, getRawData, getRequestError, getResult, getResultAsync, getSynchronizedFunction, getTransactionDone, getTransactionObjectStore, getWindowLog, getZonedDateTime, hrtime, html, jsonDateParse, lookup, matchesClassPattern, mergeObjectsStrict, noop, normalizeString, now, omitDeep, openDatabase, parseArrayIndex, parseJsonPointer, pushHistory, readJsonValue, redoHistory, removeJsonValue, renderNode, reportFinalizerError, requestToPromise, sanitizeHtml, sanitizeTextHtml, settleAll, sleep, streamToText, takeOne, takeRandom, toAppError, toJsonPointer, toKebabCase, toRawDeep, truncate, uncapitalize, undoHistory, updateJsonValue, waitForSynchronizedFunctions, withFinalizer, withFinalizerAsync, wrapDatabase, wrapIndex, wrapObjectStore, wrapTransaction, wrapUpgradeDatabase, wrapUpgradeTransaction };
+export { ALL_SPECIAL_VALUES, APPEND_SEGMENT, CHARSET_PARAMETER_REGEX, CUSTOM_EMOJI_ID_ATTRIBUTE, CUSTOM_EMOJI_NAME_ATTRIBUTE, DEFAULT_ALLOWED_ATTRIBUTES, DEFAULT_ALLOWED_SCHEMES, DEFAULT_ALLOWED_TAGS, DEFAULT_COMPRESSION_LEVEL, DEFAULT_FACET_SCORE, DEFAULT_LINK_ATTRIBUTES, DEFAULT_SOURCE_SCORE, DEFAULT_TEXT_CHARSET, DEFAULT_TYPE_SCORE, ESCAPED_ATTRIBUTE_CHARACTERS_REGEX, ESCAPED_TEXT_CHARACTERS_REGEX, FacetScoreMap, ForbiddenError, GIBIBYTE, HTML_NAMESPACE, ID_SEPARATOR, IMPORTANT_REGEX, InvalidOperationError, ItemMetadata, ItemMetadataPropertyNames, JSON_POINTER_REGEX, JsonPatchOperationType, KIBIBYTE, MAX_NESTING_DEPTH, MAX_READ_LIMIT, MAX_WINDOW_LOG, MEDIA_TYPE_REGEX, MENTION_EVERYONE_ID, MENTION_HERE_ID, MENTION_ID_ATTRIBUTE, MENTION_ITEM_TYPE_ATTRIBUTE, MENTION_LABEL_ATTRIBUTE, MENTION_SELECTOR, MENTION_TYPE, MENTION_TYPE_ATTRIBUTE, MILLISECONDS_PER_SECOND, MIN_WINDOW_LOG, MentionType, NON_TEXT_TAGS, NotFoundError, NotInitializedError, ObjectMethod, Operation, PATH_SEPARATOR_REGEX, RoutePath, SANITIZER_ADVISORY_WATCH_SINCE, SITE_NAME, SPOILER_ATTRIBUTE, SPOILER_SELECTOR, SRCSET_ATTRIBUTE, SRCSET_DESCRIPTOR_REGEX, Serializable, SourceScoreMap, TEXT_MEDIA_TYPE_REGEX, TypeScoreMap, TypedEventEmitter, URL_ATTRIBUTES, UUIDV4_REGEX, VOID_TAGS, WordFilteredError, addJsonValue, applyItemMetadataMixin, applyPatch, applyPatches, capitalize, charset, checkContainsProfanity, checkIsAllowedUrl, checkIsCustomMethod, checkIsDeepEqual, checkIsNestedControl, checkIsNestedInteraction, checkIsOnlyReactor, checkIsPlainObject, checkIsSameBytes, checkIsSameValueZero, checkIsServer, checkIsSourceAllowed, checkIsUnsafeUrlCharacter, checkIsWhitespaceCharacter, chunk, chunkBySerializedSize, clonePlainDeep, collectText, contentType, createEvictingPromiseCache, createExponentialBackoff, createHistory, createItemEntityTypeSchema, createNormalizedStringSchema, createUniqueArraySchema, css, dedent, downloadFile, downloadUrl, encodeUrlSubDelimiters, englishProfaneWords, escapeAttribute, escapeCharacters, escapeText, exhaustiveGuard, extension, filterAttributes, filterClasses, filterHtml, filterSrcset, filterStyle, getChildNodes, getDecodedUriComponent, getEndOfDay, getEnumerableKeys, getExponentialBackoffDelayMs, getExtensionMimeTypeMap, getMediaType, getMentions, getMimeScore, getMimeTypeEntryMap, getOrCreate, getPropertyNames, getRawData, getRequestError, getResult, getResultAsync, getSynchronizedFunction, getTagPolicy, getTransactionDone, getTransactionObjectStore, getUpdatedUserIds, getWindowLog, getZonedDateTime, hrtime, html, jsonDateParse, lookup, matchesClassPattern, mergeObjectsStrict, noop, normalizeString, now, omitDeep, openDatabase, parseArrayIndex, parseJsonPointer, pushHistory, readJsonValue, redoHistory, removeJsonValue, renderNode, reportFinalizerError, requestToPromise, sanitizeHtml, sanitizeTextHtml, settleAll, sleep, streamToText, takeOne, takeRandom, toAppError, toJsonPointer, toKebabCase, toRawDeep, truncate, uncapitalize, undoHistory, updateJsonValue, waitForSynchronizedFunctions, withFinalizer, withFinalizerAsync, wrapDatabase, wrapIndex, wrapObjectStore, wrapTransaction, wrapUpgradeDatabase, wrapUpgradeTransaction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esposter/shared",
-  "version": "4.3.3",
+  "version": "4.4.0",
   "description": "A library that contains shared typescript code.",
   "keywords": [
     "error-handling",
@@ -43,7 +43,7 @@
     "lint": "eslint .",
     "lint:fix": "eslint --fix .",
     "test": "vitest",
-    "typecheck": "tsc"
+    "typecheck": "tsrs --fast"
   },
   "dependencies": {
     "mime-db": "^1.54.0",
@@ -53,11 +53,11 @@
   },
   "devDependencies": {
     "@azure/data-tables": "^13.3.2",
-    "@esposter/configuration": "4.3.3",
-    "@types/node": "^26.6.5",
-    "fake-indexeddb": "^6.2.6",
+    "@esposter/configuration": "4.4.0",
+    "@types/node": "^26.6.6",
+    "fake-indexeddb": "^6.2.7",
     "happy-dom": "^21.0.4",
-    "tsdown": "^0.23.1",
+    "tsdown": "0.23.2",
     "type-fest": "^5.10.0",
     "vue": "^3.5.44"
   },
@@ -67,5 +67,5 @@
   "inlinedDependencies": {
     "type-fest": "5.10.0"
   },
-  "gitHead": "955bbc130ad9b28877fd4ae8efc73a045141ce01"
+  "gitHead": "e1a416c4b91da69cc2aa259b50a4d656f204d272"
 }