@fictjs/ssr 0.20.0 → 0.21.0

package/README.md

@@ -250,11 +250,17 @@ interface RenderToStringOptions {
   snapshotTarget?: 'container' | 'body' | 'head'
 
   // Runtime Configuration
-  exposeGlobals?: boolean // Default: true
+  exposeGlobals?: boolean // Default: false; opt-in compatibility mode
   manifest?: Record<string, string> | string
 }
 ```
 
+By default SSR does not write `window`, `document`, `Node`, or related DOM constructors to
+`globalThis`. This keeps concurrent renders from racing over process-global DOM state. Components
+should use Fict's render-provided document/ownerDocument paths; set `exposeGlobals: true` only for
+legacy code that still reads DOM globals during server render. That compatibility mode is restored
+on `dispose()`, but it is not concurrency-safe while overlapping renders are active.
+
 ### renderToDocument
 
 ```typescript
@@ -306,6 +312,10 @@ The asset is published as `@fictjs/ssr/fict-stream-runtime.js`. Build tools that
 need to materialize it themselves can import `createStreamRuntimeCode` from
 `@fictjs/ssr/stream-runtime`.
 
+Trusted Types deployments should use this external observer runtime. The patch
+runtime moves `<template>` content with DOM APIs (`content` + `insertBefore`) and
+does not call `innerHTML`, `insertAdjacentHTML`, `eval`, or `Function`.
+
 ### renderToPipeableStream
 
 Node.js-style stream variant (compatible with `pipe()`).
@@ -324,7 +334,7 @@ await allReady
 ### renderToPartial
 
 Generate a complete shell HTML plus a deferred patch stream for Partial Prerendering workflows.
-This is an advanced API and currently considered **Preview** in v1.0.
+This is an advanced API and currently considered **Experimental Preview** in v1.0; do not treat the return shape as frozen.
 
 ```typescript
 import { renderToPartial } from '@fictjs/ssr'
@@ -469,7 +479,7 @@ Generated detailed `fict.manifest.json` during production build, mapping virtual
 
 ## Partial Prerendering
 
-`renderToPartial()` enables a PPR-style split:
+`renderToPartial()` is an **Experimental Preview** API that enables a PPR-style split:
 
 1. **Shell phase**: serve/cache `shell` as static-first HTML.
 2. **Deferred phase**: deliver `stream` patches for resolved Suspense boundaries.

package/dist/index.cjs

@@ -30,10 +30,11 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 var import_runtime = require("@fictjs/runtime");
-var import_internal = require("@fictjs/runtime/internal");
+var import_internal2 = require("@fictjs/runtime/internal");
 var import_linkedom = require("linkedom");
 
 // src/globals.ts
+var import_internal = require("@fictjs/runtime/internal");
 function installGlobals(window, document) {
   const win = window;
   const required = {
@@ -83,6 +84,14 @@ function installManifest(manifest) {
   } else {
     resolved = manifest;
   }
+  const session = (0, import_internal.__fictGetCurrentSSRSession)();
+  if (session) {
+    const previous = session.manifest;
+    session.manifest = resolved;
+    return () => {
+      session.manifest = previous;
+    };
+  }
   const key = "__FICT_MANIFEST__";
   const snapshot = {
     exists: Object.prototype.hasOwnProperty.call(globalThis, key),
@@ -431,12 +440,12 @@ function createSSRDocument(html = DEFAULT_HTML) {
   return { window, document };
 }
 function renderToDocument(view, options = {}) {
-  const session = (0, import_internal.__fictCreateSSRSession)();
-  return (0, import_internal.__fictRunWithSSRSession)(session, () => renderToDocumentInSession(view, options));
+  const session = (0, import_internal2.__fictCreateSSRSession)();
+  return (0, import_internal2.__fictRunWithSSRSession)(session, () => renderToDocumentInSession(view, options));
 }
 function renderToDocumentInSession(view, options) {
   const includeSnapshot = options.includeSnapshot !== false;
-  (0, import_internal.__fictEnableSSR)();
+  (0, import_internal2.__fictEnableSSR)();
   let dom;
   let restoreGlobals2 = () => {
   };
@@ -448,23 +457,23 @@ function renderToDocumentInSession(view, options) {
   try {
     dom = resolveDom(options);
     const { document, window } = dom;
-    const shouldExpose = options.exposeGlobals !== false;
+    const shouldExpose = options.exposeGlobals === true;
     restoreGlobals2 = shouldExpose ? installGlobals(window, document) : () => {
     };
     restoreManifest = installManifest(options.manifest);
     container = resolveContainer(document, options);
     teardown = (0, import_runtime.render)(view, container);
     if (includeSnapshot) {
-      const state = (0, import_internal.__fictSerializeSSRState)();
+      const state = (0, import_internal2.__fictSerializeSSRState)();
       injectSnapshot(document, container, state, options);
     }
   } catch (error) {
-    (0, import_internal.__fictDisableSSR)();
+    (0, import_internal2.__fictDisableSSR)();
     restoreGlobals2();
     restoreManifest();
     throw error;
   }
-  (0, import_internal.__fictDisableSSR)();
+  (0, import_internal2.__fictDisableSSR)();
   const html = serializeOutput(dom.document, container, options);
   const dispose = () => {
     try {
@@ -651,14 +660,14 @@ function isPromiseLike(value) {
   return typeof value === "object" && value !== null && typeof value.then === "function";
 }
 function startStreamingRender(view, options, writer, control = {}) {
-  const session = (0, import_internal.__fictCreateSSRSession)();
-  return (0, import_internal.__fictRunWithSSRSession)(
+  const session = (0, import_internal2.__fictCreateSSRSession)();
+  return (0, import_internal2.__fictRunWithSSRSession)(
     session,
     () => startStreamingRenderInSession(session, view, options, writer, control)
   );
 }
 function startStreamingRenderInSession(session, view, options, writer, control = {}) {
-  const runInSession = (fn) => (0, import_internal.__fictRunWithSSRSession)(session, fn);
+  const runInSession = (fn) => (0, import_internal2.__fictRunWithSSRSession)(session, fn);
   const resolvedOptions = {
     ...options,
     // Streaming requires a real document; default to fullDocument when unspecified.
@@ -779,10 +788,10 @@ function startStreamingRenderInSession(session, view, options, writer, control =
   const writeSnapshotForScopes = (scopeIds) => {
     runInSession(() => {
       if (!includeSnapshot || scopeIds.length === 0) return;
-      const registry = (0, import_internal.__fictGetScopeRegistry)();
+      const registry = (0, import_internal2.__fictGetScopeRegistry)();
       const pending = scopeIds.filter((id) => registry.has(id) && !sentScopes.has(id));
       if (pending.length === 0) return;
-      const snapshot = (0, import_internal.__fictSerializeSSRStateForScopes)(pending);
+      const snapshot = (0, import_internal2.__fictSerializeSSRStateForScopes)(pending);
       const ids = Object.keys(snapshot.scopes);
       if (ids.length === 0) return;
       const chunk = buildIncrementalSnapshotChunk(snapshot, resolvedOptions);
@@ -796,13 +805,13 @@ function startStreamingRenderInSession(session, view, options, writer, control =
   };
   const writeSnapshotForBoundary = (boundary) => {
     runInSession(() => {
-      const scopes = (0, import_internal.__fictGetScopesForBoundary)(boundary);
+      const scopes = (0, import_internal2.__fictGetScopesForBoundary)(boundary);
       writeSnapshotForScopes(scopes);
     });
   };
   const writeRemainingSnapshots = () => {
     runInSession(() => {
-      const scopes = Array.from((0, import_internal.__fictGetScopeRegistry)().keys());
+      const scopes = Array.from((0, import_internal2.__fictGetScopeRegistry)().keys());
       writeSnapshotForScopes(scopes);
     });
   };
@@ -811,14 +820,15 @@ function startStreamingRenderInSession(session, view, options, writer, control =
     removeAbortListener = () => {
     };
     runInSession(() => {
-      (0, import_internal.__fictSetSSRStreamHooks)(null);
-      (0, import_internal.__fictDisableSSR)();
+      (0, import_internal2.__fictSetSSRStreamHooks)(null);
+      (0, import_internal2.__fictDisableSSR)();
     });
-    restoreGlobals2();
-    restoreManifest();
     try {
       teardown();
     } catch {
+    } finally {
+      restoreGlobals2();
+      restoreManifest();
     }
   };
   const finalize = () => {
@@ -826,7 +836,7 @@ function startStreamingRenderInSession(session, view, options, writer, control =
     closed = true;
     if (mode === "all" && dom && container && !wroteShell) {
       if (includeSnapshot) {
-        const snapshot = (0, import_internal.__fictSerializeSSRState)();
+        const snapshot = (0, import_internal2.__fictSerializeSSRState)();
         injectSnapshot(dom.document, container, snapshot, resolvedOptions);
       }
       const fullHtml = serializeOutput(dom.document, container, resolvedOptions);
@@ -911,10 +921,10 @@ function startStreamingRenderInSession(session, view, options, writer, control =
     }
   }
   try {
-    (0, import_internal.__fictEnableSSR)();
-    (0, import_internal.__fictSetSSRStreamHooks)(hooks);
+    (0, import_internal2.__fictEnableSSR)();
+    (0, import_internal2.__fictSetSSRStreamHooks)(hooks);
     dom = resolveDom(resolvedOptions);
-    restoreGlobals2 = resolvedOptions.exposeGlobals !== false ? installGlobals(dom.window, dom.document) : () => {
+    restoreGlobals2 = resolvedOptions.exposeGlobals === true ? installGlobals(dom.window, dom.document) : () => {
     };
     restoreManifest = installManifest(resolvedOptions.manifest);
     container = resolveContainer(dom.document, resolvedOptions);
@@ -944,7 +954,7 @@ function startStreamingRenderInSession(session, view, options, writer, control =
       enqueueWrite(shellHtml + streamRuntime);
     }
     wroteShell = true;
-    writeSnapshotForScopes(Array.from((0, import_internal.__fictGetScopeRegistry)().keys()));
+    writeSnapshotForScopes(Array.from((0, import_internal2.__fictGetScopeRegistry)().keys()));
     if (shellCarriesTail && tailHtml) {
       enqueueWrite(tailHtml);
       tailHtml = "";

package/dist/index.d.cts

@@ -53,7 +53,8 @@ interface RenderToStringOptions {
     doctype?: string | null;
     /**
      * Expose DOM globals (window/document/Node/Element/etc) during render.
-     * Defaults to true.
+     * Defaults to false. Set to true only for compatibility with components
+     * that still read process-global DOM objects during server rendering.
      */
     exposeGlobals?: boolean;
     /**
@@ -128,6 +129,9 @@ interface PipeableStream {
 interface PartialPrerenderResult {
     /**
      * Complete shell HTML (fallbacks + markers + initial snapshot scripts).
+     *
+     * @experimental Preview API for v1.0; the access pattern may change before
+     * this becomes stable.
      */
     shell: string;
     /**
@@ -149,6 +153,10 @@ declare function renderToString(view: () => FictNode, options?: RenderToStringOp
 declare function renderToStringAsync(view: () => FictNode, options?: RenderToStringOptions): Promise<string>;
 declare function renderToStream(view: () => FictNode, options?: RenderToStreamOptions): ReadableStream<Uint8Array>;
 declare function renderToPipeableStream(view: () => FictNode, options?: RenderToStreamOptions): PipeableStream;
+/**
+ * @experimental Preview API for v1.0; the return shape may change before this
+ * becomes stable.
+ */
 declare function renderToPartial(view: () => FictNode, options?: RenderToStreamOptions): PartialPrerenderResult;
 
 export { type PartialPrerenderResult, type PipeableStream, type RenderToDocumentResult, type RenderToStreamOptions, type RenderToStringOptions, type SSRDom, createSSRDocument, renderToDocument, renderToPartial, renderToPipeableStream, renderToStream, renderToString, renderToStringAsync };

package/dist/index.d.ts

@@ -53,7 +53,8 @@ interface RenderToStringOptions {
     doctype?: string | null;
     /**
      * Expose DOM globals (window/document/Node/Element/etc) during render.
-     * Defaults to true.
+     * Defaults to false. Set to true only for compatibility with components
+     * that still read process-global DOM objects during server rendering.
      */
     exposeGlobals?: boolean;
     /**
@@ -128,6 +129,9 @@ interface PipeableStream {
 interface PartialPrerenderResult {
     /**
      * Complete shell HTML (fallbacks + markers + initial snapshot scripts).
+     *
+     * @experimental Preview API for v1.0; the access pattern may change before
+     * this becomes stable.
      */
     shell: string;
     /**
@@ -149,6 +153,10 @@ declare function renderToString(view: () => FictNode, options?: RenderToStringOp
 declare function renderToStringAsync(view: () => FictNode, options?: RenderToStringOptions): Promise<string>;
 declare function renderToStream(view: () => FictNode, options?: RenderToStreamOptions): ReadableStream<Uint8Array>;
 declare function renderToPipeableStream(view: () => FictNode, options?: RenderToStreamOptions): PipeableStream;
+/**
+ * @experimental Preview API for v1.0; the return shape may change before this
+ * becomes stable.
+ */
 declare function renderToPartial(view: () => FictNode, options?: RenderToStreamOptions): PartialPrerenderResult;
 
 export { type PartialPrerenderResult, type PipeableStream, type RenderToDocumentResult, type RenderToStreamOptions, type RenderToStringOptions, type SSRDom, createSSRDocument, renderToDocument, renderToPartial, renderToPipeableStream, renderToStream, renderToString, renderToStringAsync };

package/dist/index.js

@@ -18,6 +18,7 @@ import {
 import { parseHTML } from "linkedom";
 
 // src/globals.ts
+import { __fictGetCurrentSSRSession } from "@fictjs/runtime/internal";
 function installGlobals(window, document) {
   const win = window;
   const required = {
@@ -67,6 +68,14 @@ function installManifest(manifest) {
   } else {
     resolved = manifest;
   }
+  const session = __fictGetCurrentSSRSession();
+  if (session) {
+    const previous = session.manifest;
+    session.manifest = resolved;
+    return () => {
+      session.manifest = previous;
+    };
+  }
   const key = "__FICT_MANIFEST__";
   const snapshot = {
     exists: Object.prototype.hasOwnProperty.call(globalThis, key),
@@ -425,7 +434,7 @@ function renderToDocumentInSession(view, options) {
   try {
     dom = resolveDom(options);
     const { document, window } = dom;
-    const shouldExpose = options.exposeGlobals !== false;
+    const shouldExpose = options.exposeGlobals === true;
     restoreGlobals2 = shouldExpose ? installGlobals(window, document) : () => {
     };
     restoreManifest = installManifest(options.manifest);
@@ -791,11 +800,12 @@ function startStreamingRenderInSession(session, view, options, writer, control =
       __fictSetSSRStreamHooks(null);
       __fictDisableSSR();
     });
-    restoreGlobals2();
-    restoreManifest();
     try {
       teardown();
     } catch {
+    } finally {
+      restoreGlobals2();
+      restoreManifest();
     }
   };
   const finalize = () => {
@@ -891,7 +901,7 @@ function startStreamingRenderInSession(session, view, options, writer, control =
     __fictEnableSSR();
     __fictSetSSRStreamHooks(hooks);
     dom = resolveDom(resolvedOptions);
-    restoreGlobals2 = resolvedOptions.exposeGlobals !== false ? installGlobals(dom.window, dom.document) : () => {
+    restoreGlobals2 = resolvedOptions.exposeGlobals === true ? installGlobals(dom.window, dom.document) : () => {
     };
     restoreManifest = installManifest(resolvedOptions.manifest);
     container = resolveContainer(dom.document, resolvedOptions);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fictjs/ssr",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Fict server-side rendering",
   "publishConfig": {
     "access": "public",
@@ -33,11 +33,11 @@
   ],
   "dependencies": {
     "linkedom": "^0.18.12",
-    "@fictjs/runtime": "0.20.0"
+    "@fictjs/runtime": "0.21.0"
   },
   "devDependencies": {
     "tsup": "^8.5.1",
-    "fict": "0.20.0"
+    "fict": "0.21.0"
   },
   "keywords": [
     "fict",