@getforma/core 0.6.1 → 0.8.2

package/dist/runtime-hardened.js

@@ -1,17 +1,18 @@
-import { signal, computed, effect, startBatch, endBatch, pauseTracking, resumeTracking } from 'alien-signals';
+import { signal, computed, effect, startBatch, endBatch, setActiveSub } from 'alien-signals';
 
 // src/reactive/signal.ts
-function applySignalSet(s, v) {
+function applySignalSet(s, v, equals) {
   if (typeof v !== "function") {
     s(v);
     return;
   }
-  pauseTracking();
+  const prevSub = setActiveSub(void 0);
   const prev = s();
-  resumeTracking();
-  s(v(prev));
+  setActiveSub(prevSub);
+  const next = v(prev);
+  s(next);
 }
-function createSignal(initialValue) {
+function createSignal(initialValue, options) {
   const s = signal(initialValue);
   const getter = s;
   const setter = (v) => applySignalSet(s, v);
@@ -1811,14 +1812,6 @@ function parseExpressionUncached(expr, scope) {
       return () => left() ?? right();
     }
   }
-  const andMatch = expr.match(RE_AND);
-  if (andMatch) {
-    const left = parseExpression(andMatch[1].trim(), scope);
-    const right = parseExpression(andMatch[2].trim(), scope);
-    if (left && right) {
-      return () => left() && right();
-    }
-  }
   const orMatch = expr.match(RE_OR);
   if (orMatch) {
     const left = parseExpression(orMatch[1].trim(), scope);
@@ -1827,6 +1820,14 @@ function parseExpressionUncached(expr, scope) {
       return () => left() || right();
     }
   }
+  const andMatch = expr.match(RE_AND);
+  if (andMatch) {
+    const left = parseExpression(andMatch[1].trim(), scope);
+    const right = parseExpression(andMatch[2].trim(), scope);
+    if (left && right) {
+      return () => left() && right();
+    }
+  }
   const compMatch = expr.match(RE_COMPARISON);
   if (compMatch) {
     const left = parseExpression(compMatch[1].trim(), scope);
@@ -1856,6 +1857,19 @@ function parseExpressionUncached(expr, scope) {
       };
     }
   }
+  const addMatch = expr.match(RE_ADD);
+  if (addMatch) {
+    const left = parseExpression(addMatch[1].trim(), scope);
+    const right = parseExpression(addMatch[3].trim(), scope);
+    if (left && right) {
+      const op = addMatch[2];
+      return () => {
+        const l = left(), r = right();
+        if (op === "+") return l + r;
+        return l - r;
+      };
+    }
+  }
   const mulMatch = expr.match(RE_MUL);
   if (mulMatch) {
     const left = parseExpression(mulMatch[1].trim(), scope);
@@ -1875,19 +1889,6 @@ function parseExpressionUncached(expr, scope) {
       };
     }
   }
-  const addMatch = expr.match(RE_ADD);
-  if (addMatch) {
-    const left = parseExpression(addMatch[1].trim(), scope);
-    const right = parseExpression(addMatch[3].trim(), scope);
-    if (left && right) {
-      const op = addMatch[2];
-      return () => {
-        const l = left(), r = right();
-        if (op === "+") return l + r;
-        return l - r;
-      };
-    }
-  }
   const tmplMatch = expr.match(RE_TEMPLATE_LIT);
   if (tmplMatch) {
     const raw = tmplMatch[1];
@@ -2184,9 +2185,87 @@ function initScope(stateEl) {
   getters["$refetch"] = () => $refetch;
   return { getters, setters };
 }
+var SAFE_EL_PROPS = /* @__PURE__ */ new Set([
+  // Identity & attributes
+  "id",
+  "className",
+  "tagName",
+  "nodeName",
+  "getAttribute",
+  "setAttribute",
+  "removeAttribute",
+  "hasAttribute",
+  "toggleAttribute",
+  "dataset",
+  "classList",
+  // Content
+  "textContent",
+  "innerText",
+  // Form elements
+  "value",
+  "checked",
+  "disabled",
+  "selected",
+  "type",
+  "name",
+  "placeholder",
+  "readOnly",
+  "required",
+  "min",
+  "max",
+  "step",
+  "pattern",
+  // Dimensions & position
+  "getBoundingClientRect",
+  "offsetWidth",
+  "offsetHeight",
+  "offsetTop",
+  "offsetLeft",
+  "clientWidth",
+  "clientHeight",
+  "scrollWidth",
+  "scrollHeight",
+  "scrollTop",
+  "scrollLeft",
+  // Style
+  "style",
+  "hidden",
+  // Focus & interaction
+  "focus",
+  "blur",
+  "click",
+  "scrollIntoView",
+  "scrollTo",
+  // Traversal (safe — returns elements, not window/document)
+  "closest",
+  "matches",
+  "querySelector",
+  "querySelectorAll",
+  "children",
+  "childElementCount",
+  "firstElementChild",
+  "lastElementChild",
+  "nextElementSibling",
+  "previousElementSibling"
+]);
+function createSafeElProxy(el) {
+  return new Proxy(el, {
+    get(target, prop) {
+      if (typeof prop === "symbol") return Reflect.get(target, prop);
+      if (!SAFE_EL_PROPS.has(prop)) return void 0;
+      const val = Reflect.get(target, prop);
+      return typeof val === "function" ? val.bind(target) : val;
+    },
+    set(target, prop, value2) {
+      if (typeof prop === "symbol") return false;
+      if (!SAFE_EL_PROPS.has(prop)) return false;
+      return Reflect.set(target, prop, value2);
+    }
+  });
+}
 function bindElement(el, scope, disposers) {
   const elMagics = {
-    $el: el,
+    $el: createSafeElProxy(el),
     $dispatch: (name, detail) => {
       el.dispatchEvent(new CustomEvent(name, {
         bubbles: true,