@getforma/core 0.3.1 → 0.8.1

package/dist/runtime.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkTSQ7AKFT_cjs = require('./chunk-TSQ7AKFT.cjs');
-var chunkFPSLC62A_cjs = require('./chunk-FPSLC62A.cjs');
+var chunkYMIMKO4W_cjs = require('./chunk-YMIMKO4W.cjs');
+var chunk3U57L2TY_cjs = require('./chunk-3U57L2TY.cjs');
 
 // src/dom/reconcile.ts
 function getBindTargets(el) {
@@ -578,12 +578,11 @@ var RE_TOGGLE = /^(\w+)\s*=\s*!(\w+)$/;
 var RE_ASSIGN = /^(\w+)\s*=\s*(.+)$/;
 var RE_COMPOUND = /^(\w+)\s*(\+=|-=|\*=|\/=)\s*(.+)$/;
 var RE_IF_PREFIX = /^if\b/;
-var RE_UNQUOTED_KEYS = /(\w+)\s*:/g;
 var RE_COMPUTED = /^(\w+)\s*=\s*(.+)$/;
 var RE_FETCH = /^(.+?)(?:→|->)\s*(\S+)(.*)$/;
 var RE_FETCH_METHOD = /^(GET|POST|PUT|PATCH|DELETE)\s+(.+)$/i;
 var RE_STRIP_ITEM_BRACES = /^\{item\.?|\}$/g;
-var RE_EVENT_REF = /\bevent\b|\$event\b/;
+var RE_EVENT_REF = /\bevent\s*[.([]|\$event\b/;
 var RE_REFETCH_CALL = /^\$refetch\(\s*['"]([^'"]+)['"]\s*\)$/;
 var TRANSITION_STATE_SYM = /* @__PURE__ */ Symbol.for("forma-transition-state");
 var EXPRESSION_CACHE_MAX = 2048;
@@ -598,6 +597,14 @@ function cacheExpression(key, factory) {
 var scopeExpressionCache = /* @__PURE__ */ new WeakMap();
 var scopeHandlerCache = /* @__PURE__ */ new WeakMap();
 var compiledTemplateCache = /* @__PURE__ */ new Map();
+var COMPILED_TEMPLATE_CACHE_MAX = 2048;
+function cacheCompiledTemplate(key, template) {
+  if (compiledTemplateCache.size >= COMPILED_TEMPLATE_CACHE_MAX) {
+    const first = compiledTemplateCache.keys().next().value;
+    if (first !== void 0) compiledTemplateCache.delete(first);
+  }
+  compiledTemplateCache.set(key, template);
+}
 var UNSAFE_METHOD_NAMES = /* @__PURE__ */ new Set([
   "constructor",
   "__proto__",
@@ -606,7 +613,8 @@ var UNSAFE_METHOD_NAMES = /* @__PURE__ */ new Set([
   "__defineSetter__",
   "__lookupGetter__",
   "__lookupSetter__",
-  "eval"
+  "eval",
+  "Function"
 ]);
 var BLOCKED_METHOD_REGEXES = (() => {
   const result = [];
@@ -630,8 +638,36 @@ function findBlockedMethod(expr) {
     if (dotRe.test(cleaned)) return name;
     if (bracketRe.test(cleaned)) return name;
   }
+  if (cleaned.includes("[")) {
+    const bracketContents = extractBracketContents(cleaned);
+    for (const content of bracketContents) {
+      if (!content.includes("+")) continue;
+      const fragments = content.match(/['"`]([^'"`]*?)['"`]/g);
+      if (!fragments) continue;
+      const joined = fragments.map((f) => f.slice(1, -1)).join("");
+      if (UNSAFE_METHOD_NAMES.has(joined)) return joined;
+    }
+  }
   return null;
 }
+function extractBracketContents(expr) {
+  const results = [];
+  let depth = 0;
+  let start = -1;
+  for (let i = 0; i < expr.length; i++) {
+    if (expr[i] === "[") {
+      if (depth === 0) start = i + 1;
+      depth++;
+    } else if (expr[i] === "]") {
+      depth--;
+      if (depth === 0 && start >= 0) {
+        results.push(expr.slice(start, i));
+        start = -1;
+      }
+    }
+  }
+  return results;
+}
 var TEXT_BINDING_SYM = /* @__PURE__ */ Symbol.for("forma-text-binding-cache");
 function toTextValue(value) {
   if (value == null) return "";
@@ -931,7 +967,7 @@ function parseIfHandler(expr, scope) {
   }
   if (rest.length > 0) return null;
   return (e) => {
-    chunkTSQ7AKFT_cjs.batch(() => {
+    chunkYMIMKO4W_cjs.batch(() => {
       if (condExpr()) thenHandler(e);
       else elseHandler?.(e);
     });
@@ -967,7 +1003,7 @@ function compileTemplate(text) {
     dynamics,
     hasItemRef: dynamics.length > 0
   };
-  compiledTemplateCache.set(text, result);
+  cacheCompiledTemplate(text, result);
   return result;
 }
 var templateTexts = /* @__PURE__ */ new WeakMap();
@@ -1504,14 +1540,6 @@ function parseExpressionUncached(expr, scope) {
       return () => left() ?? right();
     }
   }
-  const andMatch = expr.match(RE_AND);
-  if (andMatch) {
-    const left = parseExpression(andMatch[1].trim(), scope);
-    const right = parseExpression(andMatch[2].trim(), scope);
-    if (left && right) {
-      return () => left() && right();
-    }
-  }
   const orMatch = expr.match(RE_OR);
   if (orMatch) {
     const left = parseExpression(orMatch[1].trim(), scope);
@@ -1520,6 +1548,14 @@ function parseExpressionUncached(expr, scope) {
       return () => left() || right();
     }
   }
+  const andMatch = expr.match(RE_AND);
+  if (andMatch) {
+    const left = parseExpression(andMatch[1].trim(), scope);
+    const right = parseExpression(andMatch[2].trim(), scope);
+    if (left && right) {
+      return () => left() && right();
+    }
+  }
   const compMatch = expr.match(RE_COMPARISON);
   if (compMatch) {
     const left = parseExpression(compMatch[1].trim(), scope);
@@ -1549,6 +1585,19 @@ function parseExpressionUncached(expr, scope) {
       };
     }
   }
+  const addMatch = expr.match(RE_ADD);
+  if (addMatch) {
+    const left = parseExpression(addMatch[1].trim(), scope);
+    const right = parseExpression(addMatch[3].trim(), scope);
+    if (left && right) {
+      const op = addMatch[2];
+      return () => {
+        const l = left(), r = right();
+        if (op === "+") return l + r;
+        return l - r;
+      };
+    }
+  }
   const mulMatch = expr.match(RE_MUL);
   if (mulMatch) {
     const left = parseExpression(mulMatch[1].trim(), scope);
@@ -1568,19 +1617,6 @@ function parseExpressionUncached(expr, scope) {
       };
     }
   }
-  const addMatch = expr.match(RE_ADD);
-  if (addMatch) {
-    const left = parseExpression(addMatch[1].trim(), scope);
-    const right = parseExpression(addMatch[3].trim(), scope);
-    if (left && right) {
-      const op = addMatch[2];
-      return () => {
-        const l = left(), r = right();
-        if (op === "+") return l + r;
-        return l - r;
-      };
-    }
-  }
   const tmplMatch = expr.match(RE_TEMPLATE_LIT);
   if (tmplMatch) {
     const raw = tmplMatch[1];
@@ -1655,6 +1691,7 @@ function buildEvaluator(expr, scope) {
         return key in scope.getters;
       },
       get(_, key) {
+        if (UNSAFE_METHOD_NAMES.has(key)) return void 0;
         const g = scope.getters[key];
         return g ? g() : void 0;
       }
@@ -1679,7 +1716,7 @@ function parseHandler(expr, scope) {
     const handlers = stmts.map((s) => parseHandler(s, scope));
     if (handlers.every((h) => h !== null)) {
       return (e) => {
-        chunkTSQ7AKFT_cjs.batch(() => {
+        chunkYMIMKO4W_cjs.batch(() => {
           for (const h of handlers) h(e);
         });
       };
@@ -1692,7 +1729,7 @@ function parseHandler(expr, scope) {
     const name = incrMatch[1];
     const op = incrMatch[2];
     return () => {
-      chunkTSQ7AKFT_cjs.batch(() => {
+      chunkYMIMKO4W_cjs.batch(() => {
         const val = scope.getters[name]?.() ?? 0;
         scope.setters[name]?.(op === "++" ? val + 1 : val - 1);
       });
@@ -1703,7 +1740,7 @@ function parseHandler(expr, scope) {
     const op = preIncrMatch[1];
     const name = preIncrMatch[2];
     return () => {
-      chunkTSQ7AKFT_cjs.batch(() => {
+      chunkYMIMKO4W_cjs.batch(() => {
         const val = scope.getters[name]?.() ?? 0;
         scope.setters[name]?.(op === "++" ? val + 1 : val - 1);
       });
@@ -1713,7 +1750,7 @@ function parseHandler(expr, scope) {
   if (toggleMatch && toggleMatch[1] === toggleMatch[2]) {
     const name = toggleMatch[1];
     return () => {
-      chunkTSQ7AKFT_cjs.batch(() => {
+      chunkYMIMKO4W_cjs.batch(() => {
         scope.setters[name]?.(!scope.getters[name]?.());
       });
     };
@@ -1725,7 +1762,7 @@ function parseHandler(expr, scope) {
     if (valExpr) {
       if (_debug) dbg(`parseHandler: assignment "${name} = ..." \u2014 setter exists:`, !!scope.setters[name], ", getter exists:", !!scope.getters[name]);
       return () => {
-        chunkTSQ7AKFT_cjs.batch(() => {
+        chunkYMIMKO4W_cjs.batch(() => {
           const val = valExpr();
           if (_debug) dbg(`SETTER: ${name} = ${val} (was: ${scope.getters[name]?.()})`);
           scope.setters[name]?.(val);
@@ -1740,7 +1777,7 @@ function parseHandler(expr, scope) {
     const valExpr = parseExpression(compoundMatch[3].trim(), scope);
     if (valExpr) {
       return () => {
-        chunkTSQ7AKFT_cjs.batch(() => {
+        chunkYMIMKO4W_cjs.batch(() => {
           const current = scope.getters[name]?.() ?? 0;
           const val = valExpr();
           switch (op) {
@@ -1810,6 +1847,7 @@ function buildHandler(expr, scope) {
         return key in scope.getters || key in scope.setters;
       },
       get(_, key) {
+        if (UNSAFE_METHOD_NAMES.has(key)) return void 0;
         const g = scope.getters[key];
         return g ? g() : void 0;
       },
@@ -1820,7 +1858,7 @@ function buildHandler(expr, scope) {
       }
     });
     const unsafeHandler = (e) => {
-      chunkTSQ7AKFT_cjs.batch(() => fn(proxy, e, e));
+      chunkYMIMKO4W_cjs.batch(() => fn(proxy, e, e));
     };
     const result = {
       handler: unsafeHandler,
@@ -1845,11 +1883,10 @@ function parseState(raw) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    try {
-      parsed = JSON.parse(raw.replace(RE_UNQUOTED_KEYS, '"$1":'));
-    } catch {
-      return {};
+    if (_debug) {
+      dbg("parseState: Invalid JSON in data-forma-state \u2014 use valid JSON with quoted keys. Got:", raw.slice(0, 200));
     }
+    return {};
   }
   for (const key of FORBIDDEN_STATE_KEYS) {
     if (key in parsed) delete parsed[key];
@@ -1869,14 +1906,104 @@ function initScope(stateEl) {
   const getters = {};
   const setters = {};
   for (const [key, initial] of Object.entries(state)) {
-    const [get, set] = chunkFPSLC62A_cjs.createValueSignal(initial);
+    const [get, set] = chunk3U57L2TY_cjs.createSignal(initial);
     getters[key] = get;
     setters[key] = set;
   }
   getters["$refetch"] = () => $refetch;
   return { getters, setters };
 }
+var SAFE_EL_PROPS = /* @__PURE__ */ new Set([
+  // Identity & attributes
+  "id",
+  "className",
+  "tagName",
+  "nodeName",
+  "getAttribute",
+  "setAttribute",
+  "removeAttribute",
+  "hasAttribute",
+  "toggleAttribute",
+  "dataset",
+  "classList",
+  // Content
+  "textContent",
+  "innerText",
+  // Form elements
+  "value",
+  "checked",
+  "disabled",
+  "selected",
+  "type",
+  "name",
+  "placeholder",
+  "readOnly",
+  "required",
+  "min",
+  "max",
+  "step",
+  "pattern",
+  // Dimensions & position
+  "getBoundingClientRect",
+  "offsetWidth",
+  "offsetHeight",
+  "offsetTop",
+  "offsetLeft",
+  "clientWidth",
+  "clientHeight",
+  "scrollWidth",
+  "scrollHeight",
+  "scrollTop",
+  "scrollLeft",
+  // Style
+  "style",
+  "hidden",
+  // Focus & interaction
+  "focus",
+  "blur",
+  "click",
+  "scrollIntoView",
+  "scrollTo",
+  // Traversal (safe — returns elements, not window/document)
+  "closest",
+  "matches",
+  "querySelector",
+  "querySelectorAll",
+  "children",
+  "childElementCount",
+  "firstElementChild",
+  "lastElementChild",
+  "nextElementSibling",
+  "previousElementSibling"
+]);
+function createSafeElProxy(el) {
+  return new Proxy(el, {
+    get(target, prop) {
+      if (typeof prop === "symbol") return Reflect.get(target, prop);
+      if (!SAFE_EL_PROPS.has(prop)) return void 0;
+      const val = Reflect.get(target, prop);
+      return typeof val === "function" ? val.bind(target) : val;
+    },
+    set(target, prop, value) {
+      if (typeof prop === "symbol") return false;
+      if (!SAFE_EL_PROPS.has(prop)) return false;
+      return Reflect.set(target, prop, value);
+    }
+  });
+}
 function bindElement(el, scope, disposers) {
+  const elMagics = {
+    $el: createSafeElProxy(el),
+    $dispatch: (name, detail) => {
+      el.dispatchEvent(new CustomEvent(name, {
+        bubbles: true,
+        composed: true,
+        // crosses Shadow DOM boundaries (important for <forma-stage>)
+        detail
+      }));
+    }
+  };
+  scope = createChildScope(scope, elMagics);
   const known = getDirectives(el);
   const computedAttr = !known || known.has("data-computed") ? el.getAttribute("data-computed") : null;
   if (computedAttr) {
@@ -1891,7 +2018,7 @@ function bindElement(el, scope, disposers) {
         const prevGetter = scope.getters[name];
         delete scope.getters[name];
         const evaluate = buildEvaluator(`{${expr}}`, scope);
-        const getter = chunkFPSLC62A_cjs.createComputed(evaluate);
+        const getter = chunk3U57L2TY_cjs.createComputed(evaluate);
         scope.getters[name] = getter;
         if (!prevGetter) {
           delete scope.setters[name];
@@ -1902,7 +2029,7 @@ function bindElement(el, scope, disposers) {
   const textExpr = !known || known.has("data-text") ? el.getAttribute("data-text") : null;
   if (textExpr) {
     const evaluate = buildEvaluator(textExpr, scope);
-    const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+    const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
       setElementTextFast(el, toTextValue(evaluate()));
     });
     disposers.push(dispose);
@@ -1917,7 +2044,7 @@ function bindElement(el, scope, disposers) {
       dbg(`bindElement: data-show="${showExpr}" on <${tag}${cls}>`);
     }
     let initialized = false;
-    const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+    const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
       const visible = !!evaluate();
       if (_debug) dbg(`data-show effect: "${showExpr}" \u2192 ${visible}`);
       applyShowVisibility(el, visible, transition, !initialized);
@@ -1936,7 +2063,7 @@ function bindElement(el, scope, disposers) {
     const parent = el.parentNode;
     let inserted = true;
     let initialized = false;
-    const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+    const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
       const show = !!evaluate();
       if (show && !inserted) {
         clearTransitionState(el);
@@ -1975,7 +2102,7 @@ function bindElement(el, scope, disposers) {
     const setter = scope.setters[prop];
     if (getter && setter) {
       const input = el;
-      const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+      const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
         const val = getter();
         if (input.type === "checkbox") {
           input.checked = !!val;
@@ -2039,14 +2166,14 @@ function bindElement(el, scope, disposers) {
     } else if (name.startsWith("data-class:")) {
       const cls = name.slice(11);
       const evaluate = buildEvaluator(attr.value, scope);
-      const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+      const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
         el.classList.toggle(cls, !!evaluate());
       });
       disposers.push(dispose);
     } else if (name.startsWith("data-bind:")) {
       const attrName = name.slice(10);
       const evaluate = buildEvaluator(attr.value, scope);
-      const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+      const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
         const val = evaluate();
         if (val == null || val === false) {
           el.removeAttribute(attrName);
@@ -2069,7 +2196,7 @@ function bindElement(el, scope, disposers) {
         if (saved !== null) setter(JSON.parse(saved));
       } catch {
       }
-      const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+      const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
         try {
           localStorage.setItem(key, JSON.stringify(getter()));
         } catch {
@@ -2156,7 +2283,7 @@ function bindElement(el, scope, disposers) {
           });
         }
       } : void 0;
-      const dispose = chunkTSQ7AKFT_cjs.internalEffect(() => {
+      const dispose = chunkYMIMKO4W_cjs.internalEffect(() => {
         const rawItems = evaluate();
         if (!Array.isArray(rawItems)) {
           for (const n of oldNodes) {
@@ -2177,7 +2304,7 @@ function bindElement(el, scope, disposers) {
         }
         const prevNodes = new Set(oldNodes);
         if (keyProp) {
-          const result = chunkTSQ7AKFT_cjs.reconcileList(
+          const result = chunkYMIMKO4W_cjs.reconcileList(
             el,
             oldItems,
             rawItems,
@@ -2207,7 +2334,7 @@ function bindElement(el, scope, disposers) {
         } else {
           const wrapped = rawItems.map((item, i) => ({ __idx: i, __item: item }));
           const oldWrapped = oldItems;
-          const result = chunkTSQ7AKFT_cjs.reconcileList(
+          const result = chunkYMIMKO4W_cjs.reconcileList(
             el,
             oldWrapped,
             wrapped,
@@ -2256,16 +2383,16 @@ function bindElement(el, scope, disposers) {
         else if (k === "error") errorTarget = v;
         else if (k === "poll") interval = parseInt(v ?? "0", 10);
       }
-      const [getTarget, setTarget] = chunkFPSLC62A_cjs.createValueSignal(null);
+      const [getTarget, setTarget] = chunk3U57L2TY_cjs.createSignal(null);
       scope.getters[target] = getTarget;
       scope.setters[target] = setTarget;
       if (loadingTarget) {
-        const [gl, sl] = chunkFPSLC62A_cjs.createValueSignal(false);
+        const [gl, sl] = chunk3U57L2TY_cjs.createSignal(false);
         scope.getters[loadingTarget] = gl;
         scope.setters[loadingTarget] = sl;
       }
       if (errorTarget) {
-        const [ge, se] = chunkFPSLC62A_cjs.createValueSignal(null);
+        const [ge, se] = chunk3U57L2TY_cjs.createSignal(null);
         scope.getters[errorTarget] = ge;
         scope.setters[errorTarget] = se;
       }
@@ -2577,7 +2704,7 @@ function getScopes() {
 function setScopeValue(element, key, value) {
   const scope = element.__formaScope;
   if (!scope?.setters[key]) return;
-  chunkTSQ7AKFT_cjs.batch(() => {
+  chunkYMIMKO4W_cjs.batch(() => {
     scope.setters[key](value);
   });
 }
@@ -2586,7 +2713,7 @@ function resetScope(element) {
   const initialJSON = element.__formaInitialState;
   if (!scope || !initialJSON) return;
   const initial = parseState(initialJSON);
-  chunkTSQ7AKFT_cjs.batch(() => {
+  chunkYMIMKO4W_cjs.batch(() => {
     for (const [key, val] of Object.entries(initial)) {
       scope.setters[key]?.(val);
     }
@@ -2616,7 +2743,7 @@ function getReconciler() {
           }
         }
       },
-      batch: chunkTSQ7AKFT_cjs.batch
+      batch: chunkYMIMKO4W_cjs.batch
     });
   }
   return _reconciler;