@getforma/core 1.0.9 → 1.1.0

package/dist/chunk-W7OUWVRA.cjs

@@ -0,0 +1,106 @@
+'use strict';
+
+var alienSignals = require('alien-signals');
+
+// src/reactive/dev.ts
+function isDev() {
+  if (typeof process !== "undefined") {
+    return process.env?.NODE_ENV !== "production";
+  }
+  return typeof __FORMA_DEV__ !== "undefined" ? !!__FORMA_DEV__ : false;
+}
+var __DEV__ = isDev();
+var _errorHandlers = /* @__PURE__ */ new Set();
+function onError(handler) {
+  _errorHandlers.add(handler);
+  return () => {
+    _errorHandlers.delete(handler);
+  };
+}
+function reportError(error, source) {
+  for (const handler of _errorHandlers) {
+    try {
+      handler(error, source ? { source } : {});
+    } catch {
+    }
+  }
+  if (isDev()) {
+    console.error(`[forma] ${source ?? "Unknown"} error:`, error);
+  }
+}
+var signalNames = /* @__PURE__ */ new WeakMap();
+function applySignalSet(s, v, equals) {
+  if (typeof v !== "function") {
+    if (!equals) {
+      s(v);
+      return;
+    }
+    const prevSub2 = alienSignals.setActiveSub(void 0);
+    const prev2 = s();
+    alienSignals.setActiveSub(prevSub2);
+    if (equals(prev2, v)) return;
+    s(v);
+    if (Object.is(prev2, v)) forceNotify(s);
+    return;
+  }
+  const prevSub = alienSignals.setActiveSub(void 0);
+  const prev = s();
+  alienSignals.setActiveSub(prevSub);
+  const next = v(prev);
+  if (equals && equals(prev, next)) return;
+  s(next);
+  if (equals && Object.is(prev, next)) forceNotify(s);
+}
+function forceNotify(s) {
+  alienSignals.trigger(() => {
+    s();
+  });
+}
+function createSignal(initialValue, options) {
+  const s = alienSignals.signal(initialValue);
+  const getter = s;
+  if (__DEV__ && options?.name) {
+    signalNames.set(getter, options.name);
+  }
+  const eq = options?.equals;
+  const setter = (v) => applySignalSet(s, v, eq);
+  return [getter, setter];
+}
+var ERR = /* @__PURE__ */ Symbol("formaComputedError");
+function isErrBox(v) {
+  return typeof v === "object" && v !== null && ERR in v;
+}
+function createComputed(fn) {
+  let errored = false;
+  let error;
+  let lastGood;
+  const raw = alienSignals.computed(() => {
+    try {
+      const v = fn(lastGood);
+      errored = false;
+      error = void 0;
+      lastGood = v;
+      return v;
+    } catch (e) {
+      errored = true;
+      error = e;
+      reportError(e, "computed");
+      return { [ERR]: e };
+    }
+  });
+  const reader = () => {
+    const v = raw();
+    if (errored || isErrBox(v)) throw error;
+    return v;
+  };
+  Object.defineProperty(reader, "name", { value: raw.name, configurable: true });
+  return reader;
+}
+
+exports.__DEV__ = __DEV__;
+exports.createComputed = createComputed;
+exports.createSignal = createSignal;
+exports.onError = onError;
+exports.reportError = reportError;
+//# sourceMappingURL=chunk-W7OUWVRA.cjs.map
+//# sourceMappingURL=chunk-W7OUWVRA.cjs.map

package/dist/chunk-W7OUWVRA.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reactive/dev.ts","../src/reactive/signal.ts","../src/reactive/computed.ts"],"names":["prevSub","setActiveSub","prev","trigger","createRawSignal","rawComputed"],"mappings":";;;;;AAmBA,SAAS,KAAA,GAAiB;AACxB,EAAA,IAAI,OAAO,YAAY,WAAA,EAAa;AAClC,IAAA,OAAO,OAAA,CAAS,KAAK,QAAA,KAAa,YAAA;AAAA,EACpC;AACA,EAAA,OAAO,OAAO,aAAA,KAAkB,WAAA,GAAc,CAAC,CAAC,aAAA,GAAgB,KAAA;AAClE;AAEO,IAAM,UAAmB,KAAA;AAShC,IAAM,cAAA,uBAAqB,GAAA,EAAkB;AActC,SAAS,QAAQ,OAAA,EAAmC;AACzD,EAAA,cAAA,CAAe,IAAI,OAAO,CAAA;AAC1B,EAAA,OAAO,MAAM;AAAE,IAAA,cAAA,CAAe,OAAO,OAAO,CAAA;AAAA,EAAG,CAAA;AACjD;AAGO,SAAS,WAAA,CAAY,OAAgB,MAAA,EAAuB;AACjE,EAAA,KAAA,MAAW,WAAW,cAAA,EAAgB;AACpC,IAAA,IAAI;AAAE,MAAA,OAAA,CAAQ,OAAO,MAAA,GAAS,EAAE,MAAA,EAAO,GAAI,EAAE,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAA,IAA8B;AAAA,EACxF;AACA,EAAA,IAAI,OAAM,EAAG;AACX,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,IAAU,SAAS,WAAW,KAAK,CAAA;AAAA,EAC9D;AACF;AC/CA,IAAM,WAAA,uBAAkB,OAAA,EAAwB;AAgEhD,SAAS,cAAA,CACP,CAAA,EACA,CAAA,EACA,MAAA,EACM;AAIN,EAAA,IAAI,OAAO,MAAM,UAAA,EAAY;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,CAAA,CAAE,CAAC,CAAA;AACH,MAAA;AAAA,IACF;AACA,IAAA,MAAMA,QAAAA,GAAUC,0BAAa,MAAS,CAAA;AACtC,IAAA,MAAMC,QAAO,CAAA,EAAE;AACf,IAAAD,yBAAA,CAAaD,QAAO,CAAA;AACpB,IAAA,IAAI,MAAA,CAAOE,KAAAA,EAAM,CAAC,CAAA,EAAG;AACrB,IAAA,CAAA,CAAE,CAAC,CAAA;AACH,IAAA,IAAI,OAAO,EAAA,CAAGA,KAAAA,EAAM,CAAC,CAAA,cAAe,CAAC,CAAA;AACrC,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAUD,0BAAa,MAAS,CAAA;AACtC,EAAA,MAAM,OAAO,CAAA,EAAE;AACf,EAAAA,yBAAA,CAAa,OAAO,CAAA;AACpB,EAAA,MAAM,IAAA,GAAQ,EAAqB,IAAI,CAAA;AACvC,EAAA,IAAI,MAAA,IAAU,MAAA,CAAO,IAAA,EAAM,IAAI,CAAA,EAAG;AAClC,EAAA,CAAA,CAAE,IAAI,CAAA;AACN,EAAA,IAAI,UAAU,MAAA,CAAO,EAAA,CAAG,MAAM,IAAI,CAAA,cAAe,CAAC,CAAA;AACpD;AAQA,SAAS,YAAe,CAAA,EAAuB;AAC7C,EAAAE,oBAAA,CAAQ,MAAM;AAAE,IAAA,CAAA,EAAE;AAAA,EAAG,CAAC,CAAA;AACxB;AAqBO,SAAS,YAAA,CAAgB,cAAiB,OAAA,EAA0E;AACzH,EAAA,MAAM,CAAA,GAAIC,oBAAmB,YAAY,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,CAAA;AACf,EAAA,IAAI,OAAA,IAAW,SAAS,IAAA,EAAM;AAC5B,IAAA,WAAA,CAAY,GAAA,CAAI,MAAA,EAAkB,OAAA,CAAQ,IAAI,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,KAAK,OAAA,EAAS,MAAA;AACpB,EAAA,MAAM,SAA0B,CAAC,CAAA,KAA4B,cAAA,CAAe,CAAA,EAAG,GAAG,EAAE,CAAA;AAEpF,EAAA,OAAO,CAAC,QAAQ,MAAM,CAAA;AACxB;ACxIA,IAAM,GAAA,0BAAa,oBAAoB,CAAA;AAEvC,SAAS,SAAS,CAAA,EAAyB;AACzC,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,GAAA,IAAQ,CAAA;AACxD;AA+BO,SAAS,eAAkB,EAAA,EAAuC;AAOvE,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,QAAA;AAEJ,EAAA,MAAM,GAAA,GAAMC,sBAAwB,MAAM;AACxC,IAAA,IAAI;AACF,MAAA,MAAM,CAAA,GAAI,GAAG,QAAQ,CAAA;AACrB,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,KAAA,GAAQ,KAAA,CAAA;AACR,MAAA,QAAA,GAAW,CAAA;AACX,MAAA,OAAO,CAAA;AAAA,IACT,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,KAAA,GAAQ,CAAA;AACR,MAAA,WAAA,CAAY,GAAG,UAAU,CAAA;AACzB,MAAA,OAAO,EAAE,CAAC,GAAG,GAAG,CAAA,EAAE;AAAA,IACpB;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,SAAS,MAAM;AACnB,IAAA,MAAM,IAAI,GAAA,EAAI;AACd,IAAA,IAAI,OAAA,IAAW,QAAA,CAAS,CAAC,CAAA,EAAG,MAAM,KAAA;AAClC,IAAA,OAAO,CAAA;AAAA,EACT,CAAA;AAIA,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,MAAA,EAAQ,EAAE,OAAO,GAAA,CAAI,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,CAAA;AAC7E,EAAA,OAAO,MAAA;AACT","file":"chunk-W7OUWVRA.cjs","sourcesContent":["/**\n * Forma Reactive - Dev Mode\n *\n * Development utilities stripped from production builds via __DEV__ flag.\n * Bundlers replace __DEV__ with false → dead-code elimination removes all dev paths.\n */\n\n// __DEV__ is replaced by the bundler (tsup define) for dead-code elimination in\n// dist. For unbundled/raw-source usage it derives from NODE_ENV, and — when the\n// environment is indeterminate — defaults to *false* (production-safe: no console\n// noise) unless a consumer opts in via a global __FORMA_DEV__.\ndeclare const process: { env?: Record<string, string | undefined> } | undefined;\ndeclare const __FORMA_DEV__: boolean | undefined;\n\n/**\n * Lazily evaluate whether we're in a dev environment. Read per-call (not frozen\n * at import) so runtime NODE_ENV changes are honored and so official prod dist\n * builds — where tsup hard-defines __DEV__ = false — stay quiet regardless.\n */\nfunction isDev(): boolean {\n  if (typeof process !== 'undefined') {\n    return process!.env?.NODE_ENV !== 'production';\n  }\n  return typeof __FORMA_DEV__ !== 'undefined' ? !!__FORMA_DEV__ : false;\n}\n\nexport const __DEV__: boolean = isDev();\n\n// ---------------------------------------------------------------------------\n// Global error handlers\n// ---------------------------------------------------------------------------\n\n/** Callback signature for a global {@link onError} handler. */\nexport type ErrorHandler = (error: unknown, info?: { source?: string }) => void;\n\nconst _errorHandlers = new Set<ErrorHandler>();\n\n/**\n * Install a global error handler for FormaJS reactive errors. Called when\n * effects, computeds, or event handlers throw. Multiple handlers may be\n * registered; returns an unsubscribe function that removes only this handler.\n *\n * ```ts\n * const off = onError((err, info) => {\n *   Sentry.captureException(err, { tags: { source: info?.source } });\n * });\n * // later: off();\n * ```\n */\nexport function onError(handler: ErrorHandler): () => void {\n  _errorHandlers.add(handler);\n  return () => { _errorHandlers.delete(handler); };\n}\n\n/** @internal */\nexport function reportError(error: unknown, source?: string): void {\n  for (const handler of _errorHandlers) {\n    try { handler(error, source ? { source } : {}); } catch { /* prevent infinite loop */ }\n  }\n  if (isDev()) {\n    console.error(`[forma] ${source ?? 'Unknown'} error:`, error);\n  }\n}\n","/**\n * Forma Reactive - Signal\n *\n * Fine-grained reactive primitive backed by alien-signals.\n * API: createSignal returns [getter, setter] tuple following SolidJS conventions.\n *\n * TC39 Signals equivalent: Signal.State\n */\n\nimport { signal as createRawSignal, setActiveSub, trigger } from 'alien-signals';\nimport { __DEV__ } from './dev.js';\n\n// Debug names live in a side table rather than on the getter's `.name`, so\n// alien-signals' isSignal() (which keys off the bound function name) still\n// recognizes named signals.\nconst signalNames = new WeakMap<object, string>();\n\n/** Debug name of a signal getter, if one was provided (dev-only). */\nexport function getSignalName(fn: unknown): string | undefined {\n  return typeof fn === 'function' ? signalNames.get(fn as object) : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/** A function that reads the current value of a signal. */\nexport type SignalGetter<T> = () => T;\n/** A function that updates a signal — accepts a value or an updater function. */\nexport type SignalSetter<T> = (v: T | ((prev: T) => T)) => void;\n\nexport interface SignalOptions<T> {\n  /** Debug name — attached to getter in dev mode for devtools inspection. */\n  name?: string;\n  /**\n   * Custom equality check. When provided, the setter will read the current\n   * value and only update the signal if `equals(prev, next)` returns `false`.\n   *\n   * Default: none (alien-signals uses strict inequality `!==` internally).\n   *\n   * ```ts\n   * const [pos, setPos] = createSignal(\n   *   { x: 0, y: 0 },\n   *   { equals: (a, b) => a.x === b.x && a.y === b.y },\n   * );\n   *\n   * setPos({ x: 0, y: 0 }); // skipped — equals returns true\n   * setPos({ x: 1, y: 0 }); // applied — equals returns false\n   * ```\n   */\n  equals?: (prev: T, next: T) => boolean;\n}\n\n/**\n * Wrap a value so the setter treats it as a literal value, not a functional updater.\n *\n * When `T` is itself a function type, passing a function to the setter is\n * ambiguous -- it looks like a functional update (`prev => next`). Use\n * `value()` to disambiguate:\n *\n * ```ts\n * const [getFn, setFn] = createSignal<() => void>(() => console.log('a'));\n *\n * // BUG: interpreted as a functional update -- calls the arrow with prev\n * // setFn(() => console.log('b'));\n *\n * // Correct: wraps in a thunk so the setter stores it as-is\n * setFn(value(() => console.log('b')));\n * ```\n */\nexport function value<T>(v: T): () => T {\n  return () => v;\n}\n\ntype RawSignal<T> = {\n  (): T;\n  (value: T): void;\n};\n\nfunction applySignalSet<T>(\n  s: RawSignal<T>,\n  v: T | ((prev: T) => T),\n  equals?: (prev: T, next: T) => boolean,\n): void {\n  // Fast path: plain value, no equals — no prev read needed. (A running effect\n  // writing its own dependency is detected at the effect level via the Pending\n  // flag, so signal.ts does not need to do anything special here.)\n  if (typeof v !== 'function') {\n    if (!equals) {\n      s(v);\n      return;\n    }\n    const prevSub = setActiveSub(undefined);\n    const prev = s();\n    setActiveSub(prevSub);\n    if (equals(prev, v)) return; // suppressed by custom equality\n    s(v);\n    if (Object.is(prev, v)) forceNotify(s);\n    return;\n  }\n\n  // Functional update: read prev without tracking.\n  const prevSub = setActiveSub(undefined);\n  const prev = s();\n  setActiveSub(prevSub);\n  const next = (v as (prev: T) => T)(prev);\n  if (equals && equals(prev, next)) return; // suppressed by custom equality\n  s(next);\n  if (equals && Object.is(prev, next)) forceNotify(s);\n}\n\n/**\n * When a custom `equals` decided to APPLY (returned false) but the value is the\n * identical reference, alien-signals suppresses propagation (its guard is\n * `pendingValue !== value`). Force-notify subscribers so `equals: () => false`\n * (\"always notify\") works for mutate-in-place patterns.\n */\nfunction forceNotify<T>(s: RawSignal<T>): void {\n  trigger(() => { s(); });\n}\n\n/**\n * Create a reactive signal.\n *\n * ```ts\n * const [count, setCount] = createSignal(0);\n * console.log(count()); // 0\n * setCount(1);\n * setCount(prev => prev + 1);\n * ```\n *\n * With custom equality:\n *\n * ```ts\n * const [pos, setPos] = createSignal(\n *   { x: 0, y: 0 },\n *   { equals: (a, b) => a.x === b.x && a.y === b.y },\n * );\n * ```\n */\nexport function createSignal<T>(initialValue: T, options?: SignalOptions<T>): [get: SignalGetter<T>, set: SignalSetter<T>] {\n  const s = createRawSignal<T>(initialValue) as RawSignal<T>;\n  const getter = s as unknown as SignalGetter<T>;\n  if (__DEV__ && options?.name) {\n    signalNames.set(getter as object, options.name);\n  }\n  const eq = options?.equals;\n  const setter: SignalSetter<T> = (v: T | ((prev: T) => T)) => applySignalSet(s, v, eq);\n\n  return [getter, setter];\n}\n","/**\n * Forma Reactive - Computed\n *\n * Lazy, cached derived value that participates in the reactive graph.\n * Backed by alien-signals for automatic dependency tracking\n * and cache invalidation.\n *\n * TC39 Signals equivalent: Signal.Computed\n */\n\nimport { computed as rawComputed } from 'alien-signals';\nimport { reportError } from './dev.js';\n\n/** Unique per-throw marker so alien-signals sees a value change and propagates. */\nconst ERR = Symbol('formaComputedError');\ninterface ErrBox { [ERR]: unknown; }\nfunction isErrBox(v: unknown): v is ErrBox {\n  return typeof v === 'object' && v !== null && ERR in (v as object);\n}\n\n/**\n * Create a lazy, cached computed value.\n *\n * Note: Unlike SolidJS's createComputed (which is an eager synchronous\n * side effect), this is a lazy cached derivation — equivalent to\n * SolidJS's createMemo. Both createComputed and createMemo in FormaJS\n * are identical.\n *\n * The getter receives the previous value as an argument, enabling\n * efficient diffing patterns without a separate signal:\n *\n * ```ts\n * const [count, setCount] = createSignal(0);\n * const doubled = createComputed(() => count() * 2);\n * console.log(doubled()); // 0\n * setCount(5);\n * console.log(doubled()); // 10\n * ```\n *\n * With previous value (for diffing):\n *\n * ```ts\n * const changes = createComputed((prev) => {\n *   const next = items();\n *   if (prev) console.log(`changed from ${prev.length} to ${next.length} items`);\n *   return next;\n * });\n * ```\n */\nexport function createComputed<T>(fn: (previousValue?: T) => T): () => T {\n  // alien-signals' updateComputed leaves a throwing computed flagged clean with a\n  // stale value, so a later read silently returns the stale value and never\n  // rethrows. We cache the error in closure and rethrow on read until a\n  // dependency changes (TC39/Solid). On throw we return a FRESH sentinel object so\n  // alien-signals sees a value change and propagates the error to subscribers; the\n  // user getter only ever sees the last GOOD value as `previousValue`.\n  let errored = false;\n  let error: unknown;\n  let lastGood: T | undefined;\n\n  const raw = rawComputed<T | ErrBox>(() => {\n    try {\n      const v = fn(lastGood);\n      errored = false;\n      error = undefined;\n      lastGood = v;\n      return v;\n    } catch (e) {\n      errored = true;\n      error = e;\n      reportError(e, 'computed');\n      return { [ERR]: e };\n    }\n  });\n\n  const reader = () => {\n    const v = raw();\n    if (errored || isErrBox(v)) throw error;\n    return v as T;\n  };\n  // Preserve alien-signals' isComputed() recognition, which keys off the bound\n  // function name (`bound computedOper`). Our reader wraps the raw computed, so\n  // copy the raw name onto it.\n  Object.defineProperty(reader, 'name', { value: raw.name, configurable: true });\n  return reader;\n}\n"]}

package/dist/chunk-XLVBYXOU.js

@@ -0,0 +1,100 @@
+import { signal, computed, setActiveSub, trigger } from 'alien-signals';
+
+// src/reactive/dev.ts
+function isDev() {
+  if (typeof process !== "undefined") {
+    return process.env?.NODE_ENV !== "production";
+  }
+  return typeof __FORMA_DEV__ !== "undefined" ? !!__FORMA_DEV__ : false;
+}
+var __DEV__ = isDev();
+var _errorHandlers = /* @__PURE__ */ new Set();
+function onError(handler) {
+  _errorHandlers.add(handler);
+  return () => {
+    _errorHandlers.delete(handler);
+  };
+}
+function reportError(error, source) {
+  for (const handler of _errorHandlers) {
+    try {
+      handler(error, source ? { source } : {});
+    } catch {
+    }
+  }
+  if (isDev()) {
+    console.error(`[forma] ${source ?? "Unknown"} error:`, error);
+  }
+}
+var signalNames = /* @__PURE__ */ new WeakMap();
+function applySignalSet(s, v, equals) {
+  if (typeof v !== "function") {
+    if (!equals) {
+      s(v);
+      return;
+    }
+    const prevSub2 = setActiveSub(void 0);
+    const prev2 = s();
+    setActiveSub(prevSub2);
+    if (equals(prev2, v)) return;
+    s(v);
+    if (Object.is(prev2, v)) forceNotify(s);
+    return;
+  }
+  const prevSub = setActiveSub(void 0);
+  const prev = s();
+  setActiveSub(prevSub);
+  const next = v(prev);
+  if (equals && equals(prev, next)) return;
+  s(next);
+  if (equals && Object.is(prev, next)) forceNotify(s);
+}
+function forceNotify(s) {
+  trigger(() => {
+    s();
+  });
+}
+function createSignal(initialValue, options) {
+  const s = signal(initialValue);
+  const getter = s;
+  if (__DEV__ && options?.name) {
+    signalNames.set(getter, options.name);
+  }
+  const eq = options?.equals;
+  const setter = (v) => applySignalSet(s, v, eq);
+  return [getter, setter];
+}
+var ERR = /* @__PURE__ */ Symbol("formaComputedError");
+function isErrBox(v) {
+  return typeof v === "object" && v !== null && ERR in v;
+}
+function createComputed(fn) {
+  let errored = false;
+  let error;
+  let lastGood;
+  const raw = computed(() => {
+    try {
+      const v = fn(lastGood);
+      errored = false;
+      error = void 0;
+      lastGood = v;
+      return v;
+    } catch (e) {
+      errored = true;
+      error = e;
+      reportError(e, "computed");
+      return { [ERR]: e };
+    }
+  });
+  const reader = () => {
+    const v = raw();
+    if (errored || isErrBox(v)) throw error;
+    return v;
+  };
+  Object.defineProperty(reader, "name", { value: raw.name, configurable: true });
+  return reader;
+}
+
+export { __DEV__, createComputed, createSignal, onError, reportError };
+//# sourceMappingURL=chunk-XLVBYXOU.js.map
+//# sourceMappingURL=chunk-XLVBYXOU.js.map

package/dist/chunk-XLVBYXOU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/reactive/dev.ts","../src/reactive/signal.ts","../src/reactive/computed.ts"],"names":["prevSub","prev","createRawSignal","rawComputed"],"mappings":";;;AAmBA,SAAS,KAAA,GAAiB;AACxB,EAAA,IAAI,OAAO,YAAY,WAAA,EAAa;AAClC,IAAA,OAAO,OAAA,CAAS,KAAK,QAAA,KAAa,YAAA;AAAA,EACpC;AACA,EAAA,OAAO,OAAO,aAAA,KAAkB,WAAA,GAAc,CAAC,CAAC,aAAA,GAAgB,KAAA;AAClE;AAEO,IAAM,UAAmB,KAAA;AAShC,IAAM,cAAA,uBAAqB,GAAA,EAAkB;AActC,SAAS,QAAQ,OAAA,EAAmC;AACzD,EAAA,cAAA,CAAe,IAAI,OAAO,CAAA;AAC1B,EAAA,OAAO,MAAM;AAAE,IAAA,cAAA,CAAe,OAAO,OAAO,CAAA;AAAA,EAAG,CAAA;AACjD;AAGO,SAAS,WAAA,CAAY,OAAgB,MAAA,EAAuB;AACjE,EAAA,KAAA,MAAW,WAAW,cAAA,EAAgB;AACpC,IAAA,IAAI;AAAE,MAAA,OAAA,CAAQ,OAAO,MAAA,GAAS,EAAE,MAAA,EAAO,GAAI,EAAE,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAA,IAA8B;AAAA,EACxF;AACA,EAAA,IAAI,OAAM,EAAG;AACX,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,IAAU,SAAS,WAAW,KAAK,CAAA;AAAA,EAC9D;AACF;AC/CA,IAAM,WAAA,uBAAkB,OAAA,EAAwB;AAgEhD,SAAS,cAAA,CACP,CAAA,EACA,CAAA,EACA,MAAA,EACM;AAIN,EAAA,IAAI,OAAO,MAAM,UAAA,EAAY;AAC3B,IAAA,IAAI,CAAC,MAAA,EAAQ;AACX,MAAA,CAAA,CAAE,CAAC,CAAA;AACH,MAAA;AAAA,IACF;AACA,IAAA,MAAMA,QAAAA,GAAU,aAAa,MAAS,CAAA;AACtC,IAAA,MAAMC,QAAO,CAAA,EAAE;AACf,IAAA,YAAA,CAAaD,QAAO,CAAA;AACpB,IAAA,IAAI,MAAA,CAAOC,KAAAA,EAAM,CAAC,CAAA,EAAG;AACrB,IAAA,CAAA,CAAE,CAAC,CAAA;AACH,IAAA,IAAI,OAAO,EAAA,CAAGA,KAAAA,EAAM,CAAC,CAAA,cAAe,CAAC,CAAA;AACrC,IAAA;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GAAU,aAAa,MAAS,CAAA;AACtC,EAAA,MAAM,OAAO,CAAA,EAAE;AACf,EAAA,YAAA,CAAa,OAAO,CAAA;AACpB,EAAA,MAAM,IAAA,GAAQ,EAAqB,IAAI,CAAA;AACvC,EAAA,IAAI,MAAA,IAAU,MAAA,CAAO,IAAA,EAAM,IAAI,CAAA,EAAG;AAClC,EAAA,CAAA,CAAE,IAAI,CAAA;AACN,EAAA,IAAI,UAAU,MAAA,CAAO,EAAA,CAAG,MAAM,IAAI,CAAA,cAAe,CAAC,CAAA;AACpD;AAQA,SAAS,YAAe,CAAA,EAAuB;AAC7C,EAAA,OAAA,CAAQ,MAAM;AAAE,IAAA,CAAA,EAAE;AAAA,EAAG,CAAC,CAAA;AACxB;AAqBO,SAAS,YAAA,CAAgB,cAAiB,OAAA,EAA0E;AACzH,EAAA,MAAM,CAAA,GAAIC,OAAmB,YAAY,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,CAAA;AACf,EAAA,IAAI,OAAA,IAAW,SAAS,IAAA,EAAM;AAC5B,IAAA,WAAA,CAAY,GAAA,CAAI,MAAA,EAAkB,OAAA,CAAQ,IAAI,CAAA;AAAA,EAChD;AACA,EAAA,MAAM,KAAK,OAAA,EAAS,MAAA;AACpB,EAAA,MAAM,SAA0B,CAAC,CAAA,KAA4B,cAAA,CAAe,CAAA,EAAG,GAAG,EAAE,CAAA;AAEpF,EAAA,OAAO,CAAC,QAAQ,MAAM,CAAA;AACxB;ACxIA,IAAM,GAAA,0BAAa,oBAAoB,CAAA;AAEvC,SAAS,SAAS,CAAA,EAAyB;AACzC,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,GAAA,IAAQ,CAAA;AACxD;AA+BO,SAAS,eAAkB,EAAA,EAAuC;AAOvE,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,QAAA;AAEJ,EAAA,MAAM,GAAA,GAAMC,SAAwB,MAAM;AACxC,IAAA,IAAI;AACF,MAAA,MAAM,CAAA,GAAI,GAAG,QAAQ,CAAA;AACrB,MAAA,OAAA,GAAU,KAAA;AACV,MAAA,KAAA,GAAQ,KAAA,CAAA;AACR,MAAA,QAAA,GAAW,CAAA;AACX,MAAA,OAAO,CAAA;AAAA,IACT,SAAS,CAAA,EAAG;AACV,MAAA,OAAA,GAAU,IAAA;AACV,MAAA,KAAA,GAAQ,CAAA;AACR,MAAA,WAAA,CAAY,GAAG,UAAU,CAAA;AACzB,MAAA,OAAO,EAAE,CAAC,GAAG,GAAG,CAAA,EAAE;AAAA,IACpB;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,SAAS,MAAM;AACnB,IAAA,MAAM,IAAI,GAAA,EAAI;AACd,IAAA,IAAI,OAAA,IAAW,QAAA,CAAS,CAAC,CAAA,EAAG,MAAM,KAAA;AAClC,IAAA,OAAO,CAAA;AAAA,EACT,CAAA;AAIA,EAAA,MAAA,CAAO,cAAA,CAAe,QAAQ,MAAA,EAAQ,EAAE,OAAO,GAAA,CAAI,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,CAAA;AAC7E,EAAA,OAAO,MAAA;AACT","file":"chunk-XLVBYXOU.js","sourcesContent":["/**\n * Forma Reactive - Dev Mode\n *\n * Development utilities stripped from production builds via __DEV__ flag.\n * Bundlers replace __DEV__ with false → dead-code elimination removes all dev paths.\n */\n\n// __DEV__ is replaced by the bundler (tsup define) for dead-code elimination in\n// dist. For unbundled/raw-source usage it derives from NODE_ENV, and — when the\n// environment is indeterminate — defaults to *false* (production-safe: no console\n// noise) unless a consumer opts in via a global __FORMA_DEV__.\ndeclare const process: { env?: Record<string, string | undefined> } | undefined;\ndeclare const __FORMA_DEV__: boolean | undefined;\n\n/**\n * Lazily evaluate whether we're in a dev environment. Read per-call (not frozen\n * at import) so runtime NODE_ENV changes are honored and so official prod dist\n * builds — where tsup hard-defines __DEV__ = false — stay quiet regardless.\n */\nfunction isDev(): boolean {\n  if (typeof process !== 'undefined') {\n    return process!.env?.NODE_ENV !== 'production';\n  }\n  return typeof __FORMA_DEV__ !== 'undefined' ? !!__FORMA_DEV__ : false;\n}\n\nexport const __DEV__: boolean = isDev();\n\n// ---------------------------------------------------------------------------\n// Global error handlers\n// ---------------------------------------------------------------------------\n\n/** Callback signature for a global {@link onError} handler. */\nexport type ErrorHandler = (error: unknown, info?: { source?: string }) => void;\n\nconst _errorHandlers = new Set<ErrorHandler>();\n\n/**\n * Install a global error handler for FormaJS reactive errors. Called when\n * effects, computeds, or event handlers throw. Multiple handlers may be\n * registered; returns an unsubscribe function that removes only this handler.\n *\n * ```ts\n * const off = onError((err, info) => {\n *   Sentry.captureException(err, { tags: { source: info?.source } });\n * });\n * // later: off();\n * ```\n */\nexport function onError(handler: ErrorHandler): () => void {\n  _errorHandlers.add(handler);\n  return () => { _errorHandlers.delete(handler); };\n}\n\n/** @internal */\nexport function reportError(error: unknown, source?: string): void {\n  for (const handler of _errorHandlers) {\n    try { handler(error, source ? { source } : {}); } catch { /* prevent infinite loop */ }\n  }\n  if (isDev()) {\n    console.error(`[forma] ${source ?? 'Unknown'} error:`, error);\n  }\n}\n","/**\n * Forma Reactive - Signal\n *\n * Fine-grained reactive primitive backed by alien-signals.\n * API: createSignal returns [getter, setter] tuple following SolidJS conventions.\n *\n * TC39 Signals equivalent: Signal.State\n */\n\nimport { signal as createRawSignal, setActiveSub, trigger } from 'alien-signals';\nimport { __DEV__ } from './dev.js';\n\n// Debug names live in a side table rather than on the getter's `.name`, so\n// alien-signals' isSignal() (which keys off the bound function name) still\n// recognizes named signals.\nconst signalNames = new WeakMap<object, string>();\n\n/** Debug name of a signal getter, if one was provided (dev-only). */\nexport function getSignalName(fn: unknown): string | undefined {\n  return typeof fn === 'function' ? signalNames.get(fn as object) : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/** A function that reads the current value of a signal. */\nexport type SignalGetter<T> = () => T;\n/** A function that updates a signal — accepts a value or an updater function. */\nexport type SignalSetter<T> = (v: T | ((prev: T) => T)) => void;\n\nexport interface SignalOptions<T> {\n  /** Debug name — attached to getter in dev mode for devtools inspection. */\n  name?: string;\n  /**\n   * Custom equality check. When provided, the setter will read the current\n   * value and only update the signal if `equals(prev, next)` returns `false`.\n   *\n   * Default: none (alien-signals uses strict inequality `!==` internally).\n   *\n   * ```ts\n   * const [pos, setPos] = createSignal(\n   *   { x: 0, y: 0 },\n   *   { equals: (a, b) => a.x === b.x && a.y === b.y },\n   * );\n   *\n   * setPos({ x: 0, y: 0 }); // skipped — equals returns true\n   * setPos({ x: 1, y: 0 }); // applied — equals returns false\n   * ```\n   */\n  equals?: (prev: T, next: T) => boolean;\n}\n\n/**\n * Wrap a value so the setter treats it as a literal value, not a functional updater.\n *\n * When `T` is itself a function type, passing a function to the setter is\n * ambiguous -- it looks like a functional update (`prev => next`). Use\n * `value()` to disambiguate:\n *\n * ```ts\n * const [getFn, setFn] = createSignal<() => void>(() => console.log('a'));\n *\n * // BUG: interpreted as a functional update -- calls the arrow with prev\n * // setFn(() => console.log('b'));\n *\n * // Correct: wraps in a thunk so the setter stores it as-is\n * setFn(value(() => console.log('b')));\n * ```\n */\nexport function value<T>(v: T): () => T {\n  return () => v;\n}\n\ntype RawSignal<T> = {\n  (): T;\n  (value: T): void;\n};\n\nfunction applySignalSet<T>(\n  s: RawSignal<T>,\n  v: T | ((prev: T) => T),\n  equals?: (prev: T, next: T) => boolean,\n): void {\n  // Fast path: plain value, no equals — no prev read needed. (A running effect\n  // writing its own dependency is detected at the effect level via the Pending\n  // flag, so signal.ts does not need to do anything special here.)\n  if (typeof v !== 'function') {\n    if (!equals) {\n      s(v);\n      return;\n    }\n    const prevSub = setActiveSub(undefined);\n    const prev = s();\n    setActiveSub(prevSub);\n    if (equals(prev, v)) return; // suppressed by custom equality\n    s(v);\n    if (Object.is(prev, v)) forceNotify(s);\n    return;\n  }\n\n  // Functional update: read prev without tracking.\n  const prevSub = setActiveSub(undefined);\n  const prev = s();\n  setActiveSub(prevSub);\n  const next = (v as (prev: T) => T)(prev);\n  if (equals && equals(prev, next)) return; // suppressed by custom equality\n  s(next);\n  if (equals && Object.is(prev, next)) forceNotify(s);\n}\n\n/**\n * When a custom `equals` decided to APPLY (returned false) but the value is the\n * identical reference, alien-signals suppresses propagation (its guard is\n * `pendingValue !== value`). Force-notify subscribers so `equals: () => false`\n * (\"always notify\") works for mutate-in-place patterns.\n */\nfunction forceNotify<T>(s: RawSignal<T>): void {\n  trigger(() => { s(); });\n}\n\n/**\n * Create a reactive signal.\n *\n * ```ts\n * const [count, setCount] = createSignal(0);\n * console.log(count()); // 0\n * setCount(1);\n * setCount(prev => prev + 1);\n * ```\n *\n * With custom equality:\n *\n * ```ts\n * const [pos, setPos] = createSignal(\n *   { x: 0, y: 0 },\n *   { equals: (a, b) => a.x === b.x && a.y === b.y },\n * );\n * ```\n */\nexport function createSignal<T>(initialValue: T, options?: SignalOptions<T>): [get: SignalGetter<T>, set: SignalSetter<T>] {\n  const s = createRawSignal<T>(initialValue) as RawSignal<T>;\n  const getter = s as unknown as SignalGetter<T>;\n  if (__DEV__ && options?.name) {\n    signalNames.set(getter as object, options.name);\n  }\n  const eq = options?.equals;\n  const setter: SignalSetter<T> = (v: T | ((prev: T) => T)) => applySignalSet(s, v, eq);\n\n  return [getter, setter];\n}\n","/**\n * Forma Reactive - Computed\n *\n * Lazy, cached derived value that participates in the reactive graph.\n * Backed by alien-signals for automatic dependency tracking\n * and cache invalidation.\n *\n * TC39 Signals equivalent: Signal.Computed\n */\n\nimport { computed as rawComputed } from 'alien-signals';\nimport { reportError } from './dev.js';\n\n/** Unique per-throw marker so alien-signals sees a value change and propagates. */\nconst ERR = Symbol('formaComputedError');\ninterface ErrBox { [ERR]: unknown; }\nfunction isErrBox(v: unknown): v is ErrBox {\n  return typeof v === 'object' && v !== null && ERR in (v as object);\n}\n\n/**\n * Create a lazy, cached computed value.\n *\n * Note: Unlike SolidJS's createComputed (which is an eager synchronous\n * side effect), this is a lazy cached derivation — equivalent to\n * SolidJS's createMemo. Both createComputed and createMemo in FormaJS\n * are identical.\n *\n * The getter receives the previous value as an argument, enabling\n * efficient diffing patterns without a separate signal:\n *\n * ```ts\n * const [count, setCount] = createSignal(0);\n * const doubled = createComputed(() => count() * 2);\n * console.log(doubled()); // 0\n * setCount(5);\n * console.log(doubled()); // 10\n * ```\n *\n * With previous value (for diffing):\n *\n * ```ts\n * const changes = createComputed((prev) => {\n *   const next = items();\n *   if (prev) console.log(`changed from ${prev.length} to ${next.length} items`);\n *   return next;\n * });\n * ```\n */\nexport function createComputed<T>(fn: (previousValue?: T) => T): () => T {\n  // alien-signals' updateComputed leaves a throwing computed flagged clean with a\n  // stale value, so a later read silently returns the stale value and never\n  // rethrows. We cache the error in closure and rethrow on read until a\n  // dependency changes (TC39/Solid). On throw we return a FRESH sentinel object so\n  // alien-signals sees a value change and propagates the error to subscribers; the\n  // user getter only ever sees the last GOOD value as `previousValue`.\n  let errored = false;\n  let error: unknown;\n  let lastGood: T | undefined;\n\n  const raw = rawComputed<T | ErrBox>(() => {\n    try {\n      const v = fn(lastGood);\n      errored = false;\n      error = undefined;\n      lastGood = v;\n      return v;\n    } catch (e) {\n      errored = true;\n      error = e;\n      reportError(e, 'computed');\n      return { [ERR]: e };\n    }\n  });\n\n  const reader = () => {\n    const v = raw();\n    if (errored || isErrBox(v)) throw error;\n    return v as T;\n  };\n  // Preserve alien-signals' isComputed() recognition, which keys off the bound\n  // function name (`bound computedOper`). Our reader wraps the raw computed, so\n  // copy the raw name onto it.\n  Object.defineProperty(reader, 'name', { value: raw.name, configurable: true });\n  return reader;\n}\n"]}

package/dist/forma-runtime-csp.js

@@ -438,11 +438,32 @@ var FormaRuntime = (function (exports) {
     }
   }
 
-  // src/reactive/signal.ts
+  // src/reactive/dev.ts
+  function isDev() {
+    if (typeof process !== "undefined") {
+      return process.env?.NODE_ENV !== "production";
+    }
+    return typeof __FORMA_DEV__ !== "undefined" ? !!__FORMA_DEV__ : false;
+  }
+  isDev();
+  var _errorHandlers = /* @__PURE__ */ new Set();
+  function reportError(error, source) {
+    for (const handler of _errorHandlers) {
+      try {
+        handler(error, source ? { source } : {});
+      } catch {
+      }
+    }
+    if (isDev()) {
+      console.error(`[forma] ${source} error:`, error);
+    }
+  }
   function applySignalSet(s, v, equals) {
     if (typeof v !== "function") {
-      s(v);
-      return;
+      {
+        s(v);
+        return;
+      }
     }
     const prevSub = setActiveSub(void 0);
     const prev = s();
@@ -462,8 +483,35 @@ var FormaRuntime = (function (exports) {
   }
 
   // src/reactive/computed.ts
+  var ERR = /* @__PURE__ */ Symbol("formaComputedError");
+  function isErrBox(v) {
+    return typeof v === "object" && v !== null && ERR in v;
+  }
   function createComputed(fn) {
-    return computed(fn);
+    let errored = false;
+    let error;
+    let lastGood;
+    const raw = computed(() => {
+      try {
+        const v = fn(lastGood);
+        errored = false;
+        error = void 0;
+        lastGood = v;
+        return v;
+      } catch (e) {
+        errored = true;
+        error = e;
+        reportError(e, "computed");
+        return { [ERR]: e };
+      }
+    });
+    const reader = () => {
+      const v = raw();
+      if (errored || isErrBox(v)) throw error;
+      return v;
+    };
+    Object.defineProperty(reader, "name", { value: raw.name, configurable: true });
+    return reader;
   }
 
   // src/reactive/batch.ts
@@ -1047,7 +1095,35 @@ var FormaRuntime = (function (exports) {
     };
   }
 
+  // src/security/url-safety.ts
+  var URL_IGNORED_CHARS_RE = /[\u0000-\u0020\u007F-\u009F]/g;
+  var DANGEROUS_SCHEME_RE = /^(?:javascript|vbscript|data:text\/html)/i;
+  var URL_ATTRS = /* @__PURE__ */ new Set([
+    "href",
+    "src",
+    "action",
+    "formaction",
+    "xlink:href",
+    "poster",
+    "background"
+  ]);
+  function isUrlAttr(name) {
+    return URL_ATTRS.has(name.toLowerCase());
+  }
+  function isDangerousUrl(value2) {
+    const normalized = value2.replace(URL_IGNORED_CHARS_RE, "");
+    return DANGEROUS_SCHEME_RE.test(normalized);
+  }
+  function isEventHandlerAttr(name) {
+    return /^on/i.test(name);
+  }
+
   // src/runtime.ts
+  function isUnsafeAttrBinding(name, value2) {
+    if (isEventHandlerAttr(name)) return true;
+    if (isUrlAttr(name) && isDangerousUrl(value2)) return true;
+    return false;
+  }
   var _refetchRegistry = /* @__PURE__ */ new Map();
   function $refetch(id) {
     const fn = _refetchRegistry.get(id);
@@ -2012,7 +2088,12 @@ var FormaRuntime = (function (exports) {
         if (attr.value.includes("{item")) {
           const compiled = compileTemplate(attr.value);
           entries.push({ attr: attr.name, compiled });
-          node.setAttribute(attr.name, evaluateCompiledTemplate(compiled, item));
+          const value2 = evaluateCompiledTemplate(compiled, item);
+          if (isUnsafeAttrBinding(attr.name, value2)) {
+            node.removeAttribute(attr.name);
+          } else {
+            node.setAttribute(attr.name, value2);
+          }
         }
       }
       if (entries.length > 0) {
@@ -2784,7 +2865,12 @@ var FormaRuntime = (function (exports) {
           if (val == null || val === false) {
             el.removeAttribute(attrName);
           } else {
-            el.setAttribute(attrName, String(val));
+            const str = String(val);
+            if (isUnsafeAttrBinding(attrName, str)) {
+              el.removeAttribute(attrName);
+            } else {
+              el.setAttribute(attrName, str);
+            }
           }
         });
         disposers.push(dispose);

package/dist/forma-runtime.js

@@ -348,6 +348,33 @@ var FormaRuntime = (() => {
     }
     return effectOper.bind(e);
   }
+  function trigger(fn) {
+    const sub = {
+      deps: void 0,
+      depsTail: void 0,
+      flags: 2
+    };
+    const prevSub = setActiveSub(sub);
+    try {
+      fn();
+    } finally {
+      activeSub = prevSub;
+      let link2 = sub.deps;
+      while (link2 !== void 0) {
+        const dep = link2.dep;
+        link2 = unlink(link2, sub);
+        const subs = dep.subs;
+        if (subs !== void 0) {
+          sub.flags = 0;
+          propagate(subs);
+          shallowPropagate(subs);
+        }
+      }
+      if (!batchDepth) {
+        flush();
+      }
+    }
+  }
   function updateComputed(c) {
     ++cycle;
     c.depsTail = void 0;
@@ -478,16 +505,41 @@ var FormaRuntime = (() => {
     }
   }
 
+  // src/reactive/dev.ts
+  function isDev() {
+    if (typeof process !== "undefined") {
+      return process.env?.NODE_ENV !== "production";
+    }
+    return typeof __FORMA_DEV__ !== "undefined" ? !!__FORMA_DEV__ : false;
+  }
+  var __DEV__ = isDev();
+  var _errorHandlers = /* @__PURE__ */ new Set();
+  function reportError(error, source) {
+    for (const handler of _errorHandlers) {
+      try {
+        handler(error, source ? { source } : {});
+      } catch {
+      }
+    }
+    if (isDev()) {
+      console.error(`[forma] ${source ?? "Unknown"} error:`, error);
+    }
+  }
+
   // src/reactive/signal.ts
+  var signalNames = /* @__PURE__ */ new WeakMap();
   function applySignalSet(s, v, equals) {
     if (typeof v !== "function") {
-      if (equals) {
-        const prevSub2 = setActiveSub(void 0);
-        const prev2 = s();
-        setActiveSub(prevSub2);
-        if (equals(prev2, v)) return;
+      if (!equals) {
+        s(v);
+        return;
       }
+      const prevSub2 = setActiveSub(void 0);
+      const prev2 = s();
+      setActiveSub(prevSub2);
+      if (equals(prev2, v)) return;
       s(v);
+      if (Object.is(prev2, v)) forceNotify(s);
       return;
     }
     const prevSub = setActiveSub(void 0);
@@ -496,24 +548,33 @@ var FormaRuntime = (() => {
     const next = v(prev);
     if (equals && equals(prev, next)) return;
     s(next);
+    if (equals && Object.is(prev, next)) forceNotify(s);
+  }
+  function forceNotify(s) {
+    trigger(() => {
+      s();
+    });
   }
   function createSignal(initialValue, options) {
     const s = signal(initialValue);
     const getter = s;
+    if (__DEV__ && options?.name) {
+      signalNames.set(getter, options.name);
+    }
     const eq = options?.equals;
     const setter = (v) => applySignalSet(s, v, eq);
     return [getter, setter];
   }
 
   // src/reactive/root.ts
-  var currentRoot = null;
+  var currentOwner = null;
   function registerDisposer(dispose) {
-    if (currentRoot) {
-      currentRoot.disposers.push(dispose);
+    if (currentOwner) {
+      currentOwner.disposers.push(dispose);
     }
   }
   function hasActiveRoot() {
-    return currentRoot !== null;
+    return currentOwner !== null;
   }
 
   // src/reactive/effect.ts
@@ -529,8 +590,35 @@ var FormaRuntime = (() => {
   }
 
   // src/reactive/computed.ts
+  var ERR = /* @__PURE__ */ Symbol("formaComputedError");
+  function isErrBox(v) {
+    return typeof v === "object" && v !== null && ERR in v;
+  }
   function createComputed(fn) {
-    return computed(fn);
+    let errored = false;
+    let error;
+    let lastGood;
+    const raw = computed(() => {
+      try {
+        const v = fn(lastGood);
+        errored = false;
+        error = void 0;
+        lastGood = v;
+        return v;
+      } catch (e) {
+        errored = true;
+        error = e;
+        reportError(e, "computed");
+        return { [ERR]: e };
+      }
+    });
+    const reader = () => {
+      const v = raw();
+      if (errored || isErrBox(v)) throw error;
+      return v;
+    };
+    Object.defineProperty(reader, "name", { value: raw.name, configurable: true });
+    return reader;
   }
 
   // src/reactive/batch.ts
@@ -1116,7 +1204,35 @@ var FormaRuntime = (() => {
     };
   }
 
+  // src/security/url-safety.ts
+  var URL_IGNORED_CHARS_RE = /[\u0000-\u0020\u007F-\u009F]/g;
+  var DANGEROUS_SCHEME_RE = /^(?:javascript|vbscript|data:text\/html)/i;
+  var URL_ATTRS = /* @__PURE__ */ new Set([
+    "href",
+    "src",
+    "action",
+    "formaction",
+    "xlink:href",
+    "poster",
+    "background"
+  ]);
+  function isUrlAttr(name) {
+    return URL_ATTRS.has(name.toLowerCase());
+  }
+  function isDangerousUrl(value2) {
+    const normalized = value2.replace(URL_IGNORED_CHARS_RE, "");
+    return DANGEROUS_SCHEME_RE.test(normalized);
+  }
+  function isEventHandlerAttr(name) {
+    return /^on/i.test(name);
+  }
+
   // src/runtime.ts
+  function isUnsafeAttrBinding(name, value2) {
+    if (isEventHandlerAttr(name)) return true;
+    if (isUrlAttr(name) && isDangerousUrl(value2)) return true;
+    return false;
+  }
   var _refetchRegistry = /* @__PURE__ */ new Map();
   function $refetch(id) {
     const fn = _refetchRegistry.get(id);
@@ -2120,7 +2236,12 @@ var FormaRuntime = (() => {
         if (attr.value.includes("{item")) {
           const compiled = compileTemplate(attr.value);
           entries.push({ attr: attr.name, compiled });
-          node.setAttribute(attr.name, evaluateCompiledTemplate(compiled, item));
+          const value2 = evaluateCompiledTemplate(compiled, item);
+          if (isUnsafeAttrBinding(attr.name, value2)) {
+            node.removeAttribute(attr.name);
+          } else {
+            node.setAttribute(attr.name, value2);
+          }
         }
       }
       if (entries.length > 0) {
@@ -2962,7 +3083,12 @@ var FormaRuntime = (() => {
           if (val == null || val === false) {
             el.removeAttribute(attrName);
           } else {
-            el.setAttribute(attrName, String(val));
+            const str = String(val);
+            if (isUnsafeAttrBinding(attrName, str)) {
+              el.removeAttribute(attrName);
+            } else {
+              el.setAttribute(attrName, str);
+            }
           }
         });
         disposers.push(dispose);