@heshammesalam/heshjs 0.1.0 → 0.3.0

package/dist/router/index.js

@@ -0,0 +1,258 @@
+import { signal, batch } from '../reactivity/index.js';
+function segments(path) { return path.split('/').filter(Boolean); }
+function validate(routes, ancestors = new Set()) {
+    const siblings = new Set();
+    for (const route of routes) {
+        if (/[?#]/.test(route.path))
+            throw new Error(`Route paths cannot contain query/hash: ${route.path}`);
+        const parts = segments(route.path);
+        const signature = parts.map(p => p.startsWith(':') ? ':' : p).join('/');
+        if (siblings.has(signature))
+            throw new Error(`Duplicate sibling route: ${route.path}`);
+        siblings.add(signature);
+        const names = new Set(ancestors);
+        parts.forEach((p, i) => {
+            if (p === '*' && (i !== parts.length - 1 || route.children?.length))
+                throw new Error('Wildcard must end a leaf route');
+            if (p.startsWith(':')) {
+                const name = p.slice(1);
+                if (!/^[a-zA-Z_][a-zA-Z\d_]*$/.test(name) || names.has(name) || ['__proto__', 'prototype', 'constructor'].includes(name))
+                    throw new Error(`Invalid or duplicate route param: ${name}`);
+                names.add(name);
+            }
+        });
+        validate(route.children ?? [], names);
+    }
+}
+function find(routes, parts, at = 0, params = {}) {
+    const ordered = [...routes].sort((a, b) => {
+        const aa = segments(a.path), bb = segments(b.path);
+        for (let i = 0; i < Math.max(aa.length, bb.length); i++) {
+            const rank = (p) => p === '*' ? 0 : p?.startsWith(':') ? 1 : p ? 2 : 0.5;
+            const diff = rank(bb[i]) - rank(aa[i]);
+            if (diff)
+                return diff;
+        }
+        return 0;
+    });
+    for (const record of ordered) {
+        const own = { ...params };
+        let cursor = at, matched = true;
+        for (const part of segments(record.path)) {
+            if (part === '*') {
+                own['wildcard'] = parts.slice(cursor).join('/');
+                cursor = parts.length;
+                break;
+            }
+            const actual = parts[cursor++];
+            if (actual === undefined) {
+                matched = false;
+                break;
+            }
+            if (part.startsWith(':'))
+                own[part.slice(1)] = actual;
+            else if (part !== actual) {
+                matched = false;
+                break;
+            }
+        }
+        if (!matched)
+            continue;
+        const entry = { record, params: own };
+        const children = find(record.children ?? [], parts, cursor, own);
+        if (children)
+            return [entry, ...children];
+        if (cursor === parts.length)
+            return [entry];
+    }
+    return undefined;
+}
+export function createRouter(options) {
+    validate(options.routes);
+    const browser = options.window ?? (typeof window !== 'undefined' ? window : undefined);
+    if (!browser)
+        throw new Error('createRouter requires a browser Window');
+    const report = options.onError ?? ((error) => console.error(error));
+    const location = signal(makeLocation(new URL(browser.location.href), {}));
+    let root, active = [], fallback;
+    let transitioning = false;
+    let generation = 0;
+    const notFoundRecord = options.notFound ? { path: '*', module: options.notFound } : undefined;
+    function makeLocation(url, params) {
+        return Object.freeze({ url: new URL(url), pathname: url.pathname, params: Object.freeze({ ...params }), query: new URLSearchParams(url.search), hash: url.hash });
+    }
+    function render(url) {
+        if (!root)
+            throw new Error('Start the router before navigating');
+        if (transitioning)
+            throw new Error('Navigation during module mounting is not supported');
+        transitioning = true;
+        try {
+            let entries;
+            try {
+                entries = find(options.routes, segments(url.pathname).map(decodeURIComponent));
+            }
+            catch (error) {
+                if (!(error instanceof URIError))
+                    throw error;
+            }
+            if (!entries && notFoundRecord)
+                entries = [{ record: notFoundRecord, params: {} }];
+            entries ??= [];
+            let keep = 0;
+            while (keep < active.length && keep < entries.length && active[keep].record === entries[keep].record && JSON.stringify(active[keep].params) === JSON.stringify(entries[keep].params))
+                keep++;
+            const removed = active.splice(keep);
+            const errors = [];
+            for (const item of removed.reverse()) {
+                try {
+                    item.instance.dispose();
+                }
+                catch (error) {
+                    errors.push(error);
+                }
+            }
+            fallback?.remove();
+            fallback = undefined;
+            if (errors.length)
+                throw new AggregateError(errors, 'Route cleanup failed');
+            const added = [];
+            try {
+                for (let i = keep; i < entries.length; i++) {
+                    const entry = entries[i];
+                    const parent = active.at(-1);
+                    const outlet = parent ? parent.instance.outlet : root;
+                    if (!outlet)
+                        throw new Error(`Parent module ${parent.record.path} must render Outlet()`);
+                    const instance = entry.record.module.attach(outlet, makeLocation(url, entry.params), parent?.instance.context, { onError: report });
+                    const item = { ...entry, instance };
+                    active.push(item);
+                    added.push(item);
+                }
+            }
+            catch (error) {
+                active.splice(keep);
+                for (const item of added.reverse()) {
+                    try {
+                        item.instance.dispose();
+                    }
+                    catch (cleanupError) {
+                        report(cleanupError);
+                    }
+                }
+                throw error;
+            }
+            if (!entries.length) {
+                fallback = root.ownerDocument.createElement('p');
+                fallback.setAttribute('role', 'status');
+                fallback.textContent = 'Page not found';
+                root.appendChild(fallback);
+            }
+            batch(() => {
+                for (const item of active)
+                    item.instance.update(makeLocation(url, item.params));
+                location.set(makeLocation(url, entries.at(-1)?.params ?? {}));
+            });
+        }
+        finally {
+            transitioning = false;
+        }
+    }
+    function navigate(to, navigation = {}) {
+        if (!root)
+            throw new Error('Start the router before navigating');
+        const url = new URL(to, browser.location.href);
+        if (!['http:', 'https:'].includes(url.protocol) || url.origin !== browser.location.origin)
+            throw new Error('Router navigation requires a same-origin HTTP(S) URL');
+        if (url.href === browser.location.href)
+            return;
+        render(url);
+        browser.history[navigation.replace ? 'replaceState' : 'pushState'](null, '', url.href);
+    }
+    const popstate = () => {
+        try {
+            if (location.get().url.href !== browser.location.href)
+                render(new URL(browser.location.href));
+        }
+        catch (error) {
+            report(error);
+        }
+    };
+    const click = (event) => {
+        if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.altKey || event.shiftKey)
+            return;
+        const target = event.target;
+        const anchor = target?.closest?.('a[href]');
+        if (!anchor || anchor.hasAttribute('download') || anchor.hasAttribute('data-hesh-reload') || (anchor.getAttribute('target') && anchor.getAttribute('target').toLowerCase() !== '_self'))
+            return;
+        const href = anchor.getAttribute('href');
+        if (href.startsWith('#'))
+            return;
+        let url;
+        try {
+            url = new URL(href, browser.document.baseURI);
+        }
+        catch {
+            return;
+        }
+        if (!['http:', 'https:'].includes(url.protocol) || url.origin !== browser.location.origin)
+            return;
+        if (url.pathname === browser.location.pathname && url.search === browser.location.search && url.hash)
+            return;
+        event.preventDefault();
+        try {
+            navigate(url.href);
+        }
+        catch (error) {
+            report(error);
+        }
+    };
+    function stop() {
+        if (transitioning)
+            throw new Error('Cannot stop the router during module mounting');
+        browser.document.removeEventListener('click', click);
+        browser.removeEventListener('popstate', popstate);
+        browser.removeEventListener('hashchange', popstate);
+        const old = active;
+        active = [];
+        root = undefined;
+        generation++;
+        fallback?.remove();
+        fallback = undefined;
+        const errors = [];
+        for (const item of old.reverse()) {
+            try {
+                item.instance.dispose();
+            }
+            catch (error) {
+                errors.push(error);
+            }
+        }
+        if (errors.length)
+            throw new AggregateError(errors, 'Router cleanup failed');
+    }
+    return {
+        location: { get: location.get }, navigate, stop,
+        start(parent) {
+            if (root)
+                throw new Error('Router is already started');
+            if (parent.ownerDocument !== browser.document)
+                throw new Error('Router root must belong to its Window');
+            const started = ++generation;
+            root = parent;
+            try {
+                render(new URL(browser.location.href));
+            }
+            catch (error) {
+                stop();
+                throw error;
+            }
+            browser.document.addEventListener('click', click);
+            browser.addEventListener('popstate', popstate);
+            browser.addEventListener('hashchange', popstate);
+            return () => { if (generation === started)
+                stop(); };
+        }
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAiB,MAAM,wBAAwB,CAAC;AAatE,SAAS,QAAQ,CAAC,IAAY,IAAc,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACrF,SAAS,QAAQ,CAAC,MAA8B,EAAE,YAAY,IAAI,GAAG,EAAU;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACvH,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;gBACvL,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AACD,SAAS,IAAI,CAAC,MAA8B,EAAE,KAAe,EAAE,EAAE,GAAG,CAAC,EAAE,SAAiC,EAAE;IACxG,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAClF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QAChE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAAC,IAAI,MAAM,GAAG,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAAC,MAAM;YAAC,CAAC;YACpG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM;YAAC,CAAC;YACrD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;iBACjD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM;YAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,QAAQ;YAAE,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAgB,YAAY,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,IAAI,IAAsB,EAAE,MAAM,GAAa,EAAE,EAAE,QAAiC,CAAC;IACrF,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,cAAc,GAA4B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvH,SAAS,YAAY,CAAC,GAAQ,EAAE,MAA8B;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACpK,CAAC;IACD,SAAS,MAAM,CAAC,GAAQ;QACtB,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACjE,IAAI,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzF,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,OAA4B,CAAC;YACjC,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAAC,CAAC;YACvF,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;YAChE,IAAI,CAAC,OAAO,IAAI,cAAc;gBAAE,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAE,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,CAAE,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,MAAM,CAAC;gBAAE,IAAI,EAAE,CAAC;YACjM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;YAChH,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,QAAQ,GAAG,SAAS,CAAC;YACzC,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtD,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAO,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC,CAAC;oBAC1F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;oBACpI,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC;oBACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBAAC,CAAC;oBAAC,OAAO,YAAY,EAAE,CAAC;wBAAC,MAAM,CAAC,YAAY,CAAC,CAAC;oBAAC,CAAC;gBAAC,CAAC;gBACvH,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,QAAQ,GAAG,IAAI,CAAC,aAAc,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;gBAClD,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAAC,QAAQ,CAAC,WAAW,GAAG,gBAAgB,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC/G,CAAC;YACD,KAAK,CAAC,GAAG,EAAE;gBACT,KAAK,MAAM,IAAI,IAAI,MAAM;oBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChF,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,aAAa,GAAG,KAAK,CAAC;QAAC,CAAC;IACtC,CAAC;IACD,SAAS,QAAQ,CAAC,EAAU,EAAE,aAAoC,EAAE;QAClE,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,EAAE,OAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAQ,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACpK,IAAI,GAAG,CAAC,IAAI,KAAK,OAAQ,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,OAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC;YAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,OAAQ,CAAC,QAAQ,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,GAAG,CAAC,OAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QACxG,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAE,EAAE;QAClC,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ;YAAE,OAAO;QAC7H,MAAM,MAAM,GAAG,KAAK,CAAC,MAAwB,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;YAAE,OAAO;QACjM,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACzE,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAQ,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QACnG,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,OAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO;QAC/G,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,IAAI,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC;IACF,SAAS,IAAI;QACX,IAAI,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACpF,OAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,OAAQ,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAQ,CAAC,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC;QAAC,MAAM,GAAG,EAAE,CAAC;QAAC,IAAI,GAAG,SAAS,CAAC;QAClD,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,GAAG,SAAS,CAAC;QACzC,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5G,IAAI,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI;QAC/C,KAAK,CAAC,MAAY;YAChB,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,aAAa,KAAK,OAAQ,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzG,MAAM,OAAO,GAAG,EAAE,UAAU,CAAC;YAC7B,IAAI,GAAG,MAAM,CAAC;YACd,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,CAAC;YAChD,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YACtC,OAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,OAAQ,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAChD,OAAQ,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,GAAG,EAAE,GAAG,IAAI,UAAU,KAAK,OAAO;gBAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { signal, batch, type Disposer } from '../reactivity/index.js';\nimport type { AppModule, MountedModule, RouteLocation } from '../hmvc/index.js';\nexport type { RouteLocation } from '../hmvc/index.js';\nexport interface RouteRecord { path: string; module: AppModule; children?: readonly RouteRecord[] }\nexport interface RouterOptions {\n  routes: readonly RouteRecord[];\n  window?: Window;\n  notFound?: AppModule;\n  onError?: (error: unknown) => void;\n}\ninterface Entry { record: RouteRecord; params: Record<string, string> }\ninterface Active extends Entry { instance: MountedModule }\n\nfunction segments(path: string): string[] { return path.split('/').filter(Boolean); }\nfunction validate(routes: readonly RouteRecord[], ancestors = new Set<string>()): void {\n  const siblings = new Set<string>();\n  for (const route of routes) {\n    if (/[?#]/.test(route.path)) throw new Error(`Route paths cannot contain query/hash: ${route.path}`);\n    const parts = segments(route.path);\n    const signature = parts.map(p => p.startsWith(':') ? ':' : p).join('/');\n    if (siblings.has(signature)) throw new Error(`Duplicate sibling route: ${route.path}`);\n    siblings.add(signature);\n    const names = new Set(ancestors);\n    parts.forEach((p, i) => {\n      if (p === '*' && (i !== parts.length - 1 || route.children?.length)) throw new Error('Wildcard must end a leaf route');\n      if (p.startsWith(':')) {\n        const name = p.slice(1);\n        if (!/^[a-zA-Z_][a-zA-Z\\d_]*$/.test(name) || names.has(name) || ['__proto__', 'prototype', 'constructor'].includes(name)) throw new Error(`Invalid or duplicate route param: ${name}`);\n        names.add(name);\n      }\n    });\n    validate(route.children ?? [], names);\n  }\n}\nfunction find(routes: readonly RouteRecord[], parts: string[], at = 0, params: Record<string, string> = {}): Entry[] | undefined {\n  const ordered = [...routes].sort((a, b) => {\n    const aa = segments(a.path), bb = segments(b.path);\n    for (let i = 0; i < Math.max(aa.length, bb.length); i++) {\n      const rank = (p?: string) => p === '*' ? 0 : p?.startsWith(':') ? 1 : p ? 2 : 0.5;\n      const diff = rank(bb[i]) - rank(aa[i]); if (diff) return diff;\n    }\n    return 0;\n  });\n  for (const record of ordered) {\n    const own = { ...params }; let cursor = at, matched = true;\n    for (const part of segments(record.path)) {\n      if (part === '*') { own['wildcard'] = parts.slice(cursor).join('/'); cursor = parts.length; break; }\n      const actual = parts[cursor++];\n      if (actual === undefined) { matched = false; break; }\n      if (part.startsWith(':')) own[part.slice(1)] = actual;\n      else if (part !== actual) { matched = false; break; }\n    }\n    if (!matched) continue;\n    const entry = { record, params: own };\n    const children = find(record.children ?? [], parts, cursor, own);\n    if (children) return [entry, ...children];\n    if (cursor === parts.length) return [entry];\n  }\n  return undefined;\n}\n\nexport function createRouter(options: RouterOptions) {\n  validate(options.routes);\n  const browser = options.window ?? (typeof window !== 'undefined' ? window : undefined);\n  if (!browser) throw new Error('createRouter requires a browser Window');\n  const report = options.onError ?? ((error: unknown) => console.error(error));\n  const location = signal<RouteLocation>(makeLocation(new URL(browser.location.href), {}));\n  let root: Node | undefined, active: Active[] = [], fallback: HTMLElement | undefined;\n  let transitioning = false;\n  let generation = 0;\n  const notFoundRecord: RouteRecord | undefined = options.notFound ? { path: '*', module: options.notFound } : undefined;\n  function makeLocation(url: URL, params: Record<string, string>): RouteLocation {\n    return Object.freeze({ url: new URL(url), pathname: url.pathname, params: Object.freeze({ ...params }), query: new URLSearchParams(url.search), hash: url.hash });\n  }\n  function render(url: URL): void {\n    if (!root) throw new Error('Start the router before navigating');\n    if (transitioning) throw new Error('Navigation during module mounting is not supported');\n    transitioning = true;\n    try {\n      let entries: Entry[] | undefined;\n      try { entries = find(options.routes, segments(url.pathname).map(decodeURIComponent)); }\n      catch (error) { if (!(error instanceof URIError)) throw error; }\n      if (!entries && notFoundRecord) entries = [{ record: notFoundRecord, params: {} }];\n      entries ??= [];\n      let keep = 0;\n      while (keep < active.length && keep < entries.length && active[keep]!.record === entries[keep]!.record && JSON.stringify(active[keep]!.params) === JSON.stringify(entries[keep]!.params)) keep++;\n      const removed = active.splice(keep);\n      const errors: unknown[] = [];\n      for (const item of removed.reverse()) { try { item.instance.dispose(); } catch (error) { errors.push(error); } }\n      fallback?.remove(); fallback = undefined;\n      if (errors.length) throw new AggregateError(errors, 'Route cleanup failed');\n      const added: Active[] = [];\n      try {\n        for (let i = keep; i < entries.length; i++) {\n          const entry = entries[i]!;\n          const parent = active.at(-1);\n          const outlet = parent ? parent.instance.outlet : root;\n          if (!outlet) throw new Error(`Parent module ${parent!.record.path} must render Outlet()`);\n          const instance = entry.record.module.attach(outlet, makeLocation(url, entry.params), parent?.instance.context, { onError: report });\n          const item = { ...entry, instance };\n          active.push(item); added.push(item);\n        }\n      } catch (error) {\n        active.splice(keep);\n        for (const item of added.reverse()) { try { item.instance.dispose(); } catch (cleanupError) { report(cleanupError); } }\n        throw error;\n      }\n      if (!entries.length) {\n        fallback = root.ownerDocument!.createElement('p');\n        fallback.setAttribute('role', 'status'); fallback.textContent = 'Page not found'; root.appendChild(fallback);\n      }\n      batch(() => {\n        for (const item of active) item.instance.update(makeLocation(url, item.params));\n        location.set(makeLocation(url, entries.at(-1)?.params ?? {}));\n      });\n    } finally { transitioning = false; }\n  }\n  function navigate(to: string, navigation: { replace?: boolean } = {}): void {\n    if (!root) throw new Error('Start the router before navigating');\n    const url = new URL(to, browser!.location.href);\n    if (!['http:', 'https:'].includes(url.protocol) || url.origin !== browser!.location.origin) throw new Error('Router navigation requires a same-origin HTTP(S) URL');\n    if (url.href === browser!.location.href) return;\n    render(url);\n    browser!.history[navigation.replace ? 'replaceState' : 'pushState'](null, '', url.href);\n  }\n  const popstate = () => {\n    try { if (location.get().url.href !== browser!.location.href) render(new URL(browser!.location.href)); }\n    catch (error) { report(error); }\n  };\n  const click = (event: MouseEvent) => {\n    if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey || event.altKey || event.shiftKey) return;\n    const target = event.target as Element | null;\n    const anchor = target?.closest?.('a[href]');\n    if (!anchor || anchor.hasAttribute('download') || anchor.hasAttribute('data-hesh-reload') || (anchor.getAttribute('target') && anchor.getAttribute('target')!.toLowerCase() !== '_self')) return;\n    const href = anchor.getAttribute('href')!;\n    if (href.startsWith('#')) return;\n    let url: URL;\n    try { url = new URL(href, browser!.document.baseURI); } catch { return; }\n    if (!['http:', 'https:'].includes(url.protocol) || url.origin !== browser!.location.origin) return;\n    if (url.pathname === browser!.location.pathname && url.search === browser!.location.search && url.hash) return;\n    event.preventDefault();\n    try { navigate(url.href); } catch (error) { report(error); }\n  };\n  function stop(): void {\n    if (transitioning) throw new Error('Cannot stop the router during module mounting');\n    browser!.document.removeEventListener('click', click);\n    browser!.removeEventListener('popstate', popstate);\n    browser!.removeEventListener('hashchange', popstate);\n    const old = active; active = []; root = undefined;\n    generation++;\n    fallback?.remove(); fallback = undefined;\n    const errors: unknown[] = [];\n    for (const item of old.reverse()) { try { item.instance.dispose(); } catch (error) { errors.push(error); } }\n    if (errors.length) throw new AggregateError(errors, 'Router cleanup failed');\n  }\n  return {\n    location: { get: location.get }, navigate, stop,\n    start(parent: Node): Disposer {\n      if (root) throw new Error('Router is already started');\n      if (parent.ownerDocument !== browser!.document) throw new Error('Router root must belong to its Window');\n      const started = ++generation;\n      root = parent;\n      try { render(new URL(browser!.location.href)); }\n      catch (error) { stop(); throw error; }\n      browser!.document.addEventListener('click', click);\n      browser!.addEventListener('popstate', popstate);\n      browser!.addEventListener('hashchange', popstate);\n      return () => { if (generation === started) stop(); };\n    }\n  };\n}\n"]}

package/dist/vite/index.d.ts

@@ -1,2 +1,5 @@
 import type { Plugin } from 'vite';
-export declare function hesh(): Plugin;
+import { type ProjectOptions } from '../architecture/index.js';
+export declare function hesh(options?: {
+    architecture?: ProjectOptions;
+}): Plugin;

package/dist/vite/index.js

@@ -1,16 +1,51 @@
 import { compile } from '../compiler/index.js';
-export function hesh() {
+import { createArchitectureCompiler, writeProject, formatDiagnostic } from '../architecture/index.js';
+import { resolve } from 'node:path';
+export function hesh(options = {}) {
     let production = false;
+    const architecture = createArchitectureCompiler();
+    let project;
+    let watched = [];
+    let warn;
+    const check = () => {
+        if (!project)
+            return;
+        const result = architecture.check(project);
+        if (result.diagnostics.some(item => item.severity === 'error'))
+            throw new Error(result.diagnostics.map(formatDiagnostic).join('\n'));
+        for (const item of result.diagnostics)
+            if (item.severity === 'warning')
+                warn?.(formatDiagnostic(item));
+        writeProject(result);
+        watched = result.files;
+    };
     return {
         name: 'heshjs', enforce: 'pre',
-        configResolved(config) { production = config.command === 'build'; },
+        config() { return { appType: 'spa' }; },
+        configResolved(config) {
+            production = config.command === 'build';
+            warn = message => config.logger.warn(message);
+            if (options.architecture) {
+                project = { ...options.architecture, root: resolve(config.root, options.architecture.root) };
+                check();
+            }
+        },
+        buildStart() { for (const file of watched)
+            this.addWatchFile(file); },
         transform(source, id) {
+            if (project && /(?:^|\/)server(?:\/|$)|\.server\.[cm]?[jt]s$/.test(id.replace(/\\/g, '/')))
+                throw new Error(`HESH-SEC-001 Server-only module cannot enter the browser bundle: ${id}`);
             if (!id.endsWith('.hesh'))
                 return;
             const result = compile(source, { filename: id, development: !production });
             return { code: result.code, map: null };
         },
         handleHotUpdate(context) {
+            if (project && (watched.includes(context.file.replace(/\\/g, '/').toLowerCase()) || watched.includes(context.file.replace(/\\/g, '/')))) {
+                check();
+                context.server.ws.send({ type: 'full-reload' });
+                return [];
+            }
             if (context.file.endsWith('.hesh')) {
                 context.server.ws.send({ type: 'full-reload' });
                 return [];

package/dist/vite/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,MAAM,UAAU,IAAI;IAClB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO;QACL,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;QAC9B,cAAc,CAAC,MAAM,IAAI,UAAU,GAAG,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;QACnE,SAAS,CAAC,MAAM,EAAE,EAAE;YAClB,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,eAAe,CAAC,OAAO;YACrB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QACrG,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Plugin } from 'vite';\nimport { compile } from '../compiler/index.js';\nexport function hesh(): Plugin {\n  let production = false;\n  return {\n    name: 'heshjs', enforce: 'pre',\n    configResolved(config) { production = config.command === 'build'; },\n    transform(source, id) {\n      if (!id.endsWith('.hesh')) return;\n      const result = compile(source, { filename: id, development: !production });\n      return { code: result.code, map: null };\n    },\n    handleHotUpdate(context) {\n      if (context.file.endsWith('.hesh')) { context.server.ws.send({ type: 'full-reload' }); return []; }\n    }\n  };\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,gBAAgB,EAAuB,MAAM,0BAA0B,CAAC;AAC3H,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,MAAM,UAAU,IAAI,CAAC,UAA6C,EAAE;IAClE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,YAAY,GAAG,0BAA0B,EAAE,CAAC;IAClD,IAAI,OAAmC,CAAC;IACxC,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,IAA6C,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrI,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW;YAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;gBAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACvG,YAAY,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK;QAC9B,MAAM,KAAK,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACvC,cAAc,CAAC,MAAM;YACnB,UAAU,GAAG,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC;YACxC,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBAAC,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACtI,CAAC;QACD,UAAU,KAAK,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,SAAS,CAAC,MAAM,EAAE,EAAE;YAClB,IAAI,OAAO,IAAI,8CAA8C,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,EAAE,EAAE,CAAC,CAAC;YACtL,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO;YAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC1C,CAAC;QACD,eAAe,CAAC,OAAO;YACrB,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxI,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QACrG,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Plugin } from 'vite';\nimport { compile } from '../compiler/index.js';\nimport { createArchitectureCompiler, writeProject, formatDiagnostic, type ProjectOptions } from '../architecture/index.js';\nimport { resolve } from 'node:path';\nexport function hesh(options: { architecture?: ProjectOptions } = {}): Plugin {\n  let production = false;\n  const architecture = createArchitectureCompiler();\n  let project: ProjectOptions | undefined;\n  let watched: string[] = [];\n  let warn: ((message: string) => void) | undefined;\n  const check = () => {\n    if (!project) return;\n    const result = architecture.check(project);\n    if (result.diagnostics.some(item => item.severity === 'error')) throw new Error(result.diagnostics.map(formatDiagnostic).join('\\n'));\n    for (const item of result.diagnostics) if (item.severity === 'warning') warn?.(formatDiagnostic(item));\n    writeProject(result); watched = result.files;\n  };\n  return {\n    name: 'heshjs', enforce: 'pre',\n    config() { return { appType: 'spa' }; },\n    configResolved(config) {\n      production = config.command === 'build';\n      warn = message => config.logger.warn(message);\n      if (options.architecture) { project = { ...options.architecture, root: resolve(config.root, options.architecture.root) }; check(); }\n    },\n    buildStart() { for (const file of watched) this.addWatchFile(file); },\n    transform(source, id) {\n      if (project && /(?:^|\\/)server(?:\\/|$)|\\.server\\.[cm]?[jt]s$/.test(id.replace(/\\\\/g, '/'))) throw new Error(`HESH-SEC-001 Server-only module cannot enter the browser bundle: ${id}`);\n      if (!id.endsWith('.hesh')) return;\n      const result = compile(source, { filename: id, development: !production });\n      return { code: result.code, map: null };\n    },\n    handleHotUpdate(context) {\n      if (project && (watched.includes(context.file.replace(/\\\\/g, '/').toLowerCase()) || watched.includes(context.file.replace(/\\\\/g, '/')))) {\n        check(); context.server.ws.send({ type: 'full-reload' }); return [];\n      }\n      if (context.file.endsWith('.hesh')) { context.server.ws.send({ type: 'full-reload' }); return []; }\n    }\n  };\n}\n"]}

package/docs/contracts.md

@@ -0,0 +1,60 @@
+# Architecture declaration grammar (experimental)
+
+These declarations extend the existing Hesh lexer/parser. A file may contain
+views or architecture declarations; project compilation resolves architecture.
+Imports in architecture files reference other .hesh descriptor files explicitly.
+
+```ebnf
+domain = "domain", Identifier, "{",
+  "implementation", ":", String, ";",
+  [ "owns", "{", { Identifier, ";" }, "}" ],
+  "exposes", "{", { Path, ";" }, "}",
+  [ "consumes", "{", { Path, ";" }, "}" ],
+  [ "access", "{", { Path, ":", String, ";" }, "}" ], "}" ;
+presentation = "presentation", Identifier, "{",
+  "html", ":", String, ";", "logic", ":", String, ";",
+  [ "styles", ":", String, ";" ],
+  "bindings", "{", { Identifier, ";" }, "}",
+  "actions", "{", { Identifier, ";" }, "}", "}" ;
+destination = "destination", Identifier, "{",
+  "url", ":", String, ";",
+  "input", "{", { Identifier, ":", ("string" | "number" | "boolean"), ";" }, "}",
+  "presentation", ":", Identifier, ";", [ "access", ":", String, ";" ], "}" ;
+application = "application", Identifier, "{",
+  "domains", "{", { Identifier, ";" }, "}",
+  "destinations", "{", { Identifier, ";" }, "}", "}" ;
+Path = Identifier, { ".", Identifier } ;
+```
+
+Fields/blocks can appear in any order, once each. Unknown/duplicate fields are
+errors. Strings use ordinary JS string escaping. Identifiers cannot be prototype
+mutation names. Locations are retained for diagnostics. Semicolons are required.
+
+`implementation` and `logic` have form `./module.js#exportName` (or .ts/.mjs).
+A domain factory takes a dependencies object and returns its actual API. Every
+exposed dotted operation must exist and be callable according to the TS checker;
+every consumed path is Domain.operation and must be publicly exposed. An access
+entry must name an exposed operation. `owns` is ownership metadata, not a generated
+entity/validation/database implementation. The runtime passes only declared
+consumed operations and exposes only the validated public facade.
+
+A presentation factory receives `{ domains, input, location, signal }` and returns
+`{ bindings, actions }`. bindings values may be signals/readers/ordinary values;
+actions are callable. Both declared names and nested template paths are checked
+against its inferred JS/TS return shape. HTML text `{product.name}` is escaped via
+text nodes. `h-bind="product.name"` binds textContent (cannot have child content),
+`h-action="reserve"` listens to click (submit on a form), `h-value="quantity"`
+binds a writable signal to an input/textarea/select, and
+`h-destination="ProductDetails" h-input-id="product.id"` binds a native anchor to
+a validated destination. Other normal HTML attributes/semantics are preserved.
+No arbitrary JS expressions, raw HTML, inline event attributes, script elements,
+h-each, h-key or unknown h-* directives are accepted in this first milestone.
+Use normal CSS files; template scoping and keyed template lists remain deferred.
+
+Destination URL params must exactly match input names. Values are encoded/decoded
+once; number inputs must be finite and booleans serialize as true/false. Duplicate
+or structurally conflicting URL destinations are errors. Generated declarations
+provide TS input types and JS IntelliSense. Runtime validation also rejects missing,
+extra or invalid fields in JavaScript. Destination policy names are client metadata;
+they cannot enforce server-side authorization. A policy without an authorize
+callback is denied rather than silently accepted.

package/docs/domain-graph.md

@@ -0,0 +1,205 @@
+# Domain Graph first vertical slice (0.3)
+
+This opt-in architecture builds on the existing Hesh compiler, shallow reactivity,
+DOM renderer, router and HMVC. Existing components and `createRouter` remain valid.
+This is the first architecture milestone, not an enterprise-ready framework.
+These APIs require 0.3 or later. Install `@heshammesalam/heshjs@0.3.0` in an
+existing Vite application and enable the architecture option described below.
+The npm creator's default template remains HMVC; it does not scaffold domains.
+The following commands run the reference examples from the framework repository:
+
+```sh
+npm install
+npm run check:architecture
+npm run dev:domains       # JS Identity/Inventory/Finance demo, localhost:5180
+npm run dev:domains:ts    # strict TS alternative, localhost:5181
+```
+
+The JS demo uses mock identity, an abortable timer-backed mock product API and a
+mock tax service. No HTTP server, credentials, payments or real authorization are
+implemented. Browser refresh restores destination/path input, not in-memory demo
+login state. Journeys are deliberately not simulated.
+
+## Descriptors and real implementations
+
+```hesh
+domain Inventory {
+  implementation: "./inventory.js#createInventory";
+  owns { Product; }
+  exposes { products.get; stock.reserve; }
+  consumes { Identity.session; }
+  access { stock.reserve: "inventory.reserve"; }
+}
+presentation ProductScreen {
+  html: "./ui/product.html";
+  logic: "./ui/product.js#createProduct";
+  styles: "./ui/product.css";
+  bindings { title; }
+  actions { reserve; }
+}
+destination ProductDetails {
+  url: "/products/:id";
+  input { id: string; }
+  presentation: ProductScreen;
+  access: "inventory.read";
+}
+```
+
+```js
+// inventory.js: private implementation, no imports from another domain's files.
+export function createInventory(dependencies) {
+  return {
+    products: { get: id => ({ id, title: 'Mock product' }) },
+    stock: { reserve: id => dependencies.Identity.session() + ': ' + id }
+  };
+}
+```
+
+`owns` is metadata, not a generated entity/database/validation system. Exposes are
+checked against the real factory return type. Consumers receive only the listed
+public operations, not the whole implementation object. Factories execute once
+per application domain graph in dependency order. Cycles and missing contracts
+are errors. Dependencies and public facades are frozen; disposed graphs reject
+further operation calls. Factories may use `onCleanup` for owned resources.
+
+The application descriptor imports domain files explicitly and selects names:
+
+```hesh
+import "./domains/identity/domain.hesh";
+import "./domains/inventory/domain.hesh";
+application Shop {
+  domains { Identity; Inventory; }
+  destinations { ProductDetails; }
+}
+```
+
+Every selected destination/presentation belongs to one selected domain directory.
+Each domain has its own directory boundary. Shared code can be imported by domains;
+shared code cannot re-export a private domain implementation as an escape hatch.
+
+## Standard HTML, CSS and explicit bindings
+
+```html
+<section aria-labelledby="title">
+  <h1 id="title">{title}</h1>
+  <button h-action="reserve">Reserve</button>
+</section>
+```
+
+```js
+import { signal } from '@heshammesalam/heshjs';
+export function createProduct({ domains, input, location, signal: cancellation }) {
+  const title = signal(domains.Inventory.products.get(input.id).title);
+  return {
+    bindings: { title },
+    actions: { reserve() { domains.Inventory.stock.reserve(input.id); } }
+  };
+}
+```
+
+Bindings are explicit declared data paths, not arbitrary evaluated JS strings.
+`{product.name}` and `h-bind="product.name"` use text nodes. `\{`/`\}` produce
+literal braces. A whole attribute binding like `disabled="{disabled}"` preserves
+boolean values; mixed attribute text is a string. Standard native HTML/custom tags
+are preserved without Hesh element aliases. Browser forms, labels, ARIA and native
+validation remain available. `h-action` means click, or submit on a form (preventing
+full submission). Events are passed to actions and async errors use onError.
+`h-value="email"` is two-way binding to a root writable signal on text controls.
+
+`h-destination="ProductDetails" h-input-id="productId"` on a native anchor builds
+a real href from the destination contract. Input attributes follow HTML's case
+insensitivity; destination input names must therefore be unique ignoring case.
+Missing/extra/wrongly typed inputs, missing bindings/actions and unsafe directives
+produce located diagnostics. Dynamic any-typed data emits warnings when the shape
+cannot be proven. JS receives inferred checks/JSDoc where present and runtime
+input validation; this does not make arbitrary JavaScript fully type-safe.
+
+HTML is parsed with parse5 at build time and emitted as DOM instructions. No
+innerHTML/eval/Function constructor is used. Script/embedding/foreign/template
+elements, inline event attributes and unknown h-* directives are rejected. SVG,
+keyed h-each, raw HTML and scoped CSS are not implemented in this slice. Standard
+CSS is imported unchanged through Vite, including variables, modern selectors,
+media/container queries, animations and global themes. CSS is global in this release.
+
+## Generated typed destinations
+
+Configure Vite using `hesh({ architecture: { root: 'src' } })`. For a tsconfig
+outside src add `tsconfig: '../tsconfig.json'`. The plugin validates before build
+and generates `src/.hesh-generated/app.js`, app.d.ts and compiled presentation
+modules. Do not hand-edit generated files. Invalid checks block build; last valid
+files are not deleted, so bypassing the check pipeline can use stale output.
+
+```js
+import { createApplication } from './.hesh-generated/app.js';
+const app = createApplication({
+  authorize: policy => policy === 'inventory.read', // CLIENT ONLY
+  onError: error => console.error(error),
+  onDiagnostic: event => console.debug(event.type, event.destination, event.reason)
+});
+const dispose = app.start(document.querySelector('#app'));
+app.destinations.ProductDetails.open({ id: '15' });
+app.destinations.ProductDetails.replace({ id: '20' }, { query: { tab: 'stock' } });
+await app.destinations.ProductDetails.prefetch({ id: '30' });
+```
+
+Generated declarations give each destination its exact required input fields and
+primitive types. Empty-input destinations use `Record<string, never>`. Runtime
+validation also rejects unknown/missing fields, non-finite numbers, empty strings
+and URL dot segments. Inputs are encoded once and decoded once; URL parameter
+names currently use the existing router's ASCII letter/digit/underscore rules.
+Overlapping destination patterns are rejected so an input cannot silently open a
+different static destination. This restriction applies only to the new contracts;
+the existing router retains its static-priority behavior.
+
+Page is the only supported presentation mode. Destinations load their own compiled
+presentation and logic resources lazily. Prefetch deduplicates those code loads;
+it does not fetch business data or authorize operations. Navigation disposes the
+previous presentation, aborts its signal and prevents a late loader from mounting
+stale UI. Dynamic module downloads themselves cannot be canceled. Factories are
+synchronous and start their own asynchronous work using the supplied signal.
+Guard against late results when using non-abortable services. Query/hash changes
+create a fresh presentation instance. Successful mounting focuses a heading or
+`data-hesh-focus`; scroll restoration and modal focus trapping are deferred.
+
+`app.status.get()` is reactive loading/ready/error state. Optional diagnostic
+events identify loading, ready, blocked, errors, cancellation and disposal. They
+do not infer business intent or explain arbitrary reactive dependency chains.
+Client policies default to deny when declared without an authorize callback;
+server-side enforcement is still necessary for every protected operation.
+
+## Architecture validation and graph tooling
+
+```sh
+hesh check ./src --write
+hesh check ./src --tsconfig ../tsconfig.json --write
+hesh graph ./src
+```
+
+From the repository use `node packages/heshjs/cli.js ...`. Root means the directory
+containing app.hesh, typically src. The TS resolver handles aliases, relative paths,
+type imports and re-exports. Canonical paths account for filesystem aliases and
+symlinks. Physical cross-domain imports of implementations are private, even if
+the target JS module exports a function; use declared injection instead. Node and
+server-only modules are blocked in client code. Computed imports in application
+source are rejected because their target cannot be validated. This is build-time
+architecture enforcement for configured projects, not a sandbox against malicious
+application code, reflection or uninspected third-party packages.
+
+Diagnostics include code, severity, path, offset/line/column, explanation and a
+suggestion. HTML locations identify their source node/attribute; entity decoding
+can make the exact inner text offset approximate. Graph JSON contains domain
+dependencies, destination ownership/input schemas and compiled navigation links.
+Descriptor ASTs are reused when unchanged and output writes are content-based.
+Semantic analysis currently rechecks the whole graph; precise dependency-aware
+typecheck invalidation and full HTML/Hesh source maps are deferred. The Vite workflow
+uses full reload rather than state-preserving HMR.
+
+## Deliberate limits
+
+Journeys, modal/panel/nested destination modes, redirects, scroll restoration,
+file routing, generic async resources/caching, deep collections, scoped CSS,
+server authorization, SSR/hydration, advanced scaffolding commands and a language
+server are not implemented. Existing HMVC nested routes remain usable separately.
+Production hosts still need SPA fallback to index.html for direct URLs. No
+performance superiority, globally unique architecture or enterprise-readiness
+claim is made. See architecture/domain-graph-audit.md for migration order.