@fictjs/ssr 0.19.0 → 0.21.0

package/README.md

@@ -250,11 +250,17 @@ interface RenderToStringOptions {
   snapshotTarget?: 'container' | 'body' | 'head'
 
   // Runtime Configuration
-  exposeGlobals?: boolean // Default: true
+  exposeGlobals?: boolean // Default: false; opt-in compatibility mode
   manifest?: Record<string, string> | string
 }
 ```
 
+By default SSR does not write `window`, `document`, `Node`, or related DOM constructors to
+`globalThis`. This keeps concurrent renders from racing over process-global DOM state. Components
+should use Fict's render-provided document/ownerDocument paths; set `exposeGlobals: true` only for
+legacy code that still reads DOM globals during server render. That compatibility mode is restored
+on `dispose()`, but it is not concurrency-safe while overlapping renders are active.
+
 ### renderToDocument
 
 ```typescript
@@ -287,6 +293,29 @@ import { renderToStream } from '@fictjs/ssr'
 const stream = renderToStream(() => <App />, { mode: 'shell' })
 ```
 
+#### Strict CSP Streaming Runtime
+
+For routes that disallow inline patch scripts, serve the packaged classic script
+asset and enable observer patch mode:
+
+```typescript
+import { renderToStream } from '@fictjs/ssr'
+
+const stream = renderToStream(() => <App />, {
+  mode: 'shell',
+  streamRuntime: 'external',
+  streamRuntimeSrc: '/assets/fict-stream-runtime.js',
+})
+```
+
+The asset is published as `@fictjs/ssr/fict-stream-runtime.js`. Build tools that
+need to materialize it themselves can import `createStreamRuntimeCode` from
+`@fictjs/ssr/stream-runtime`.
+
+Trusted Types deployments should use this external observer runtime. The patch
+runtime moves `<template>` content with DOM APIs (`content` + `insertBefore`) and
+does not call `innerHTML`, `insertAdjacentHTML`, `eval`, or `Function`.
+
 ### renderToPipeableStream
 
 Node.js-style stream variant (compatible with `pipe()`).
@@ -305,7 +334,7 @@ await allReady
 ### renderToPartial
 
 Generate a complete shell HTML plus a deferred patch stream for Partial Prerendering workflows.
-This is an advanced API and currently considered **Preview** in v1.0.
+This is an advanced API and currently considered **Experimental Preview** in v1.0; do not treat the return shape as frozen.
 
 ```typescript
 import { renderToPartial } from '@fictjs/ssr'
@@ -450,7 +479,7 @@ Generated detailed `fict.manifest.json` during production build, mapping virtual
 
 ## Partial Prerendering
 
-`renderToPartial()` enables a PPR-style split:
+`renderToPartial()` is an **Experimental Preview** API that enables a PPR-style split:
 
 1. **Shell phase**: serve/cache `shell` as static-first HTML.
 2. **Deferred phase**: deliver `stream` patches for resolved Suspense boundaries.

package/dist/chunk-DI4PFT6R.js

@@ -0,0 +1,11 @@
+// src/stream-runtime.ts
+function createStreamRuntimeCode(options = {}) {
+  const observerMode = options.observerMode ?? true;
+  return `(function(){if(window.__FICT_STREAM)return;var cache=new Map();function find(id){var hit=cache.get(id);if(hit)return hit;var start=null,end=null;var w=document.createTreeWalker(document,NodeFilter.SHOW_COMMENT);while(w.nextNode()){var n=w.currentNode;var d=n.data;if(d==="fict:suspense-start:"+id)start=n;else if(d==="fict:suspense-end:"+id)end=n;if(start&&end)break;}if(start&&end){hit={start:start,end:end};cache.set(id,hit);}return hit;}function apply(id){var tpl=document.querySelector('template[data-fict-suspense="' + id + '"]');if(!tpl)return;var b=find(id);if(!b)return;var node=b.start.nextSibling;while(node&&node!==b.end){var next=node.nextSibling;node.parentNode&&node.parentNode.removeChild(node);node=next;}b.end.parentNode&&b.end.parentNode.insertBefore(tpl.content,b.end);tpl.parentNode&&tpl.parentNode.removeChild(tpl);}window.__FICT_STREAM={apply:apply};` + (observerMode ? 'function scan(root){var list=(root&&root.querySelectorAll?root:document).querySelectorAll("template[data-fict-suspense]");for(var i=0;i<list.length;i++){apply(list[i].getAttribute("data-fict-suspense"));}}if(typeof MutationObserver==="function"){new MutationObserver(function(muts){for(var i=0;i<muts.length;i++){for(var j=0;j<muts[i].addedNodes.length;j++){var n=muts[i].addedNodes[j];if(n.nodeType===1){if(n.matches&&n.matches("template[data-fict-suspense]"))apply(n.getAttribute("data-fict-suspense"));scan(n);}}}}).observe(document.documentElement||document,{childList:true,subtree:true});}if(document.readyState==="loading"){document.addEventListener("DOMContentLoaded",function(){scan(document);},{once:true});}else{scan(document);}' : "") + "})();";
+}
+var FICT_STREAM_RUNTIME_CODE = createStreamRuntimeCode({ observerMode: true });
+
+export {
+  createStreamRuntimeCode,
+  FICT_STREAM_RUNTIME_CODE
+};

package/dist/fict-stream-runtime.js

@@ -0,0 +1 @@
+(function(){if(window.__FICT_STREAM)return;var cache=new Map();function find(id){var hit=cache.get(id);if(hit)return hit;var start=null,end=null;var w=document.createTreeWalker(document,NodeFilter.SHOW_COMMENT);while(w.nextNode()){var n=w.currentNode;var d=n.data;if(d==="fict:suspense-start:"+id)start=n;else if(d==="fict:suspense-end:"+id)end=n;if(start&&end)break;}if(start&&end){hit={start:start,end:end};cache.set(id,hit);}return hit;}function apply(id){var tpl=document.querySelector('template[data-fict-suspense="' + id + '"]');if(!tpl)return;var b=find(id);if(!b)return;var node=b.start.nextSibling;while(node&&node!==b.end){var next=node.nextSibling;node.parentNode&&node.parentNode.removeChild(node);node=next;}b.end.parentNode&&b.end.parentNode.insertBefore(tpl.content,b.end);tpl.parentNode&&tpl.parentNode.removeChild(tpl);}window.__FICT_STREAM={apply:apply};function scan(root){var list=(root&&root.querySelectorAll?root:document).querySelectorAll("template[data-fict-suspense]");for(var i=0;i<list.length;i++){apply(list[i].getAttribute("data-fict-suspense"));}}if(typeof MutationObserver==="function"){new MutationObserver(function(muts){for(var i=0;i<muts.length;i++){for(var j=0;j<muts[i].addedNodes.length;j++){var n=muts[i].addedNodes[j];if(n.nodeType===1){if(n.matches&&n.matches("template[data-fict-suspense]"))apply(n.getAttribute("data-fict-suspense"));scan(n);}}}}).observe(document.documentElement||document,{childList:true,subtree:true});}if(document.readyState==="loading"){document.addEventListener("DOMContentLoaded",function(){scan(document);},{once:true});}else{scan(document);}})();