@lwrjs/everywhere 0.10.0-alpha.8 → 0.10.0

package/build/__generated_site_amd_modules__/1/module/amd/1/l/en-US/mi/lwr/init/v/0_10_0/s/5e6db37af51f0d23be4893abe5eeb913/lwr_init.js

@@ -0,0 +1,163 @@
+LWR.define('lwr/init/v/0_10_0', ['exports', 'lwr/metrics/v/0_10_0', 'lwr/profiler/v/0_10_0', 'lwc/v/2_50_0'], (function (exports, _0_10_0$1, _0_10_0, _2_50_0) { 'use strict';
+
+  // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+
+  // <hydrateComponentProxy> - This code is removed in core
+
+  function hydrateComponentProxy(customElement, Ctor, props) {
+    _2_50_0.hydrateComponent(customElement, Ctor, props);
+  }
+  // </hydrateComponentProxy>
+
+  function initializeWebComponent(elementName, Ctor) {
+    return _2_50_0.createElement(elementName, {
+      is: Ctor
+    });
+  }
+
+  /**
+   * Convert a module specifier into a valid CustomElement registry name:
+   *      - remove any version linking
+   *      - change / to -
+   *      - convert uppercase letters into "-${lowercase}"
+   * eg: "c/app" => "c-app"
+   * eg: "my/helloWorld" => "my-hello-world"
+   * eg: "lwr/example/v/1.0.0" => "lwr-example"
+   * @param specifier The bare specifier to convert
+   */
+  function toKebabCase(specifier) {
+    return specifier.replace(/\/v\/[a-zA-Z0-9-_.]+$/, '').replace('/', '-').replace(/([A-Z])/g, c => `-${c.toLowerCase()}`);
+  }
+
+  /**
+   * This method maps between attribute names
+   * and the corresponding props name.
+   */
+  const CAMEL_REGEX = /-([a-z])/g;
+  function getPropFromAttrName(propName) {
+    return propName.replace(CAMEL_REGEX, g => g[1].toUpperCase());
+  }
+
+  /**
+   * Import any requested static application dependencies, define the root
+   * application component(s) into the CustomElement registry, and inject them.
+   * @param rootModules - An array of arrays, each one holding a pair of
+   *                      bare specifier and corresponding LightningElement constructor
+   * @example - [['x/appRoot', appCtor], ['x/nav', navCtor]]
+   */
+  function init(rootModules, ssrProps = {}) {
+    if (typeof customElements === 'undefined' || typeof document === 'undefined') {
+      _0_10_0.logOperationStart({
+        id: _0_10_0$1.BOOTSTRAP_END
+      });
+      return;
+    }
+    _0_10_0.logOperationStart({
+      id: _0_10_0$1.INIT
+    });
+    let index = 0;
+    for (const [specifier, ctor] of rootModules) {
+      const elementName = toKebabCase(specifier);
+
+      // initialize and inject the root module into the LWR Root or DOM if it is missing
+      if (!document.body.querySelector(elementName)) {
+        _0_10_0.logOperationStart({
+          id: _0_10_0$1.INIT_MODULE,
+          specifier,
+          specifierIndex: ++index
+        });
+
+        // this is for SPA like routes (one component at the root level) utilizing the lwr-root directive
+        const component = initializeWebComponent(elementName, ctor);
+        const container = document.querySelector('[lwr-root]');
+        container ? container.appendChild(component) : document.body.appendChild(component);
+        _0_10_0.logOperationEnd({
+          id: _0_10_0$1.INIT_MODULE,
+          specifier,
+          specifierIndex: index,
+          metadata: {
+            renderMode: 'spa'
+          }
+        });
+        continue;
+      }
+
+      // the page has been rendered or SSR'd, and each component needs to initialized(or hydrated)
+      const elements = document.querySelectorAll(elementName);
+      for (const element of elements) {
+        _0_10_0.logOperationStart({
+          id: _0_10_0$1.INIT_MODULE,
+          specifier,
+          specifierIndex: ++index
+        });
+        const propsId = element.dataset.lwrPropsId;
+
+        // hydrate SSR'd components
+        if (propsId) {
+          // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+          // @ts-ignore
+          hydrateComponentProxy(element, ctor, ssrProps[propsId] || {});
+          _0_10_0.logOperationEnd({
+            id: _0_10_0$1.INIT_MODULE,
+            specifier,
+            specifierIndex: index,
+            metadata: {
+              renderMode: 'ssr'
+            }
+          });
+          continue;
+        }
+
+        // Note: due to the bug described at the top of this file, each CSR'd custom element
+        // must be replaced with the new synthetic constructor. Attributes and children are
+        // copied over to the new component.
+        const component = initializeWebComponent(elementName, ctor);
+
+        // copy the attributes
+        for (const {
+          name,
+          value
+        } of element.attributes) {
+          component.setAttribute(name, value);
+          const prop = getPropFromAttrName(name);
+          if (prop in component) {
+            // set attributes as properties for reactivity
+            component[prop] = value;
+          }
+        }
+
+        // save the children
+        while (element.childNodes.length > 0) {
+          component.appendChild(element.childNodes[0]);
+        }
+
+        // swap the element out with the initialized component
+        const parent = element.parentElement;
+        if (parent) {
+          parent.replaceChild(component, element);
+        }
+        _0_10_0.logOperationEnd({
+          id: _0_10_0$1.INIT_MODULE,
+          specifier,
+          specifierIndex: index,
+          metadata: {
+            renderMode: 'csr'
+          }
+        });
+      }
+    }
+    _0_10_0.logOperationEnd({
+      id: _0_10_0$1.INIT
+    });
+    _0_10_0.logOperationStart({
+      id: _0_10_0$1.BOOTSTRAP_END
+    });
+  }
+
+  exports.getPropFromAttrName = getPropFromAttrName;
+  exports.init = init;
+  exports.toKebabCase = toKebabCase;
+
+  Object.defineProperty(exports, '__esModule', { value: true });
+
+}));

package/build/__generated_site_amd_modules__/1/module/amd/1/l/en-US/mi/lwr/loader/v/{0_10_0-alpha_8/s/7c38605af6fc9549feac455828d00bdd → 0_10_0/s/1344670ea0a1514a4e8da5ca7f382e45}/lwr_loader.js

@@ -1,4 +1,4 @@
-LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'use strict';
+LWR.define('lwr/loader/v/0_10_0', ['exports'], (function (exports) { 'use strict';
 
   /**
   * Copyright (c) 2021, salesforce.com, inc.
@@ -6,7 +6,7 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
   * SPDX-License-Identifier: MIT
   * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/MIT
   */
-  /* LWR Module Loader v0.10.0-alpha.8 */
+  /* LWR Module Loader v0.10.0 */
   const templateRegex = /\{([0-9]+)\}/g;
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   function templateString(template, args) {
@@ -25,7 +25,7 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
       super();
       this.message = generateErrorMessage(errorInfo, errorArgs);
     }
-    /*LWC compiler v2.45.2*/
+    /*LWC compiler v2.50.0*/
   }
   function invariant(condition, errorInfo) {
     if (!condition) {
@@ -541,7 +541,69 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
       }
     }
   }
-  const MODULE_LOAD_TIMEOUT_TIMER = 300000;
+  const MODULE_LOAD_TIMEOUT_TIMER = 60 * 1000; // 1m
+
+  /*!
+   * Copyright (C) 2023 salesforce.com, inc.
+   */
+  // @ts-ignore: Prevent cannot find name 'trustedTypes' error.
+  const SUPPORTS_TRUSTED_TYPES = typeof trustedTypes !== 'undefined';
+  function createTrustedTypesPolicy(name, options) {
+    // @ts-ignore: Prevent cannot find name 'trustedTypes' error.
+    return trustedTypes.createPolicy(name, options);
+  }
+  function createFallbackPolicy(_name, options) {
+    return options;
+  }
+  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types
+  const createPolicy = SUPPORTS_TRUSTED_TYPES ? createTrustedTypesPolicy : createFallbackPolicy;
+  const policyOptions = {
+    createHTML(value) {
+      return value;
+    },
+    createScript(value) {
+      return value;
+    },
+    createScriptURL(value) {
+      return value;
+    }
+  };
+  // Temporarily surround in try-catch until migration to AMD run.
+  try {
+    createPolicy('default', {
+      createHTML(dirty) {
+        // Treat null & undefined separately
+        if (dirty === 'null' || dirty === 'undefined') {
+          return dirty;
+        }
+        return dirty;
+      },
+      // Ignore typescript type validation for this policy.
+      // Returning `undefined` from a TT policy blocks usages
+      // of specific DOM sinks affected by this hook.
+      // We want to block eval and inline scripts.
+      // @ts-ignore
+      createScript(dirty) {
+        // Treat null & undefined separately
+        if (dirty === 'null' || dirty === 'undefined') {
+          return dirty;
+        }
+        // Block script evaluation
+        return undefined;
+      },
+      createScriptURL(dirty) {
+        // Treat null & undefined separately
+        if (dirty === 'null' || dirty === 'undefined') {
+          return dirty;
+        }
+        return dirty;
+      }
+    });
+  } catch (_unused) {
+    // swallow
+  }
+  const trusted = createPolicy('trusted', policyOptions);
+  /*! version: 0.19.10 */
 
   /* global console,process */
 
@@ -591,7 +653,7 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
       code = `${code}\n//# sourceURL=${id}`; // append sourceURL for debugging
       try {
         // TODO eval source maps for debugging
-        eval(code);
+        eval(trusted.createScript(code));
       } catch (e) {
         throw new LoaderError(FAIL_LOAD, [id]);
       }
@@ -661,6 +723,9 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
             // eslint-disable-next-line no-await-in-loop
             result = isResponseAPromise(response) ? await response : response;
           }
+          if (!this.isValidResolveResponse(result)) {
+            throw new LoaderError(INVALID_LOADER_SERVICE_RESPONSE);
+          }
 
           // if result is not null, attempt resolution
           if (result !== null) {
@@ -1157,6 +1222,9 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
         this.handleStaleModuleHook = [handleStaleModule];
       }
     }
+    isValidResolveResponse(res) {
+      return res === null || typeof res === 'string' || res && typeof res.url === 'string';
+    }
   }
 
   /**

package/build/__generated_site_amd_modules__/1/module/amd/1/l/en-US/mi/lwr/metrics/v/{0_10_0-alpha_8/s/3426e42c3e22ce07ab2adc62c4c523a0 → 0_10_0/s/7a802ee7a2430244c1f66bce2c2eafef}/lwr_metrics.js

@@ -1,4 +1,4 @@
-LWR.define('lwr/metrics/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'use strict';
+LWR.define('lwr/metrics/v/0_10_0', ['exports'], (function (exports) { 'use strict';
 
 	// Bootstrap / shim
 	const BOOTSTRAP_PREFIX = 'lwr.bootstrap.';
@@ -7,6 +7,13 @@ LWR.define('lwr/metrics/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'u
 	const BOOTSTRAP_ERROR_COUNT = `${BOOTSTRAP_ERROR}.count`;
 	const BOOTSTRAP_DURATION = `${BOOTSTRAP_PREFIX}duration`;
 
+	// Initialization
+	const INIT = 'lwr.bootstrap.init';
+	const INIT_DURATION = `${INIT}.duration`;
+	const INIT_MODULE = `lwr.bootstrap.init.module`;
+	const INIT_MODULE_DURATION = `${INIT_MODULE}.duration`;
+	const INIT_MODULE_COUNT = `${INIT_MODULE}.count`;
+
 	// Loader: modules
 	const LOADER_PREFIX = 'lwr.loader.';
 	const MODULE_DEFINE = `${LOADER_PREFIX}module.define`;
@@ -39,6 +46,11 @@ LWR.define('lwr/metrics/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'u
 	exports.BOOTSTRAP_ERROR = BOOTSTRAP_ERROR;
 	exports.BOOTSTRAP_ERROR_COUNT = BOOTSTRAP_ERROR_COUNT;
 	exports.BOOTSTRAP_PREFIX = BOOTSTRAP_PREFIX;
+	exports.INIT = INIT;
+	exports.INIT_DURATION = INIT_DURATION;
+	exports.INIT_MODULE = INIT_MODULE;
+	exports.INIT_MODULE_COUNT = INIT_MODULE_COUNT;
+	exports.INIT_MODULE_DURATION = INIT_MODULE_DURATION;
 	exports.LOADER_PREFIX = LOADER_PREFIX;
 	exports.MAPPINGS_ERROR = MAPPINGS_ERROR;
 	exports.MAPPINGS_ERROR_COUNT = MAPPINGS_ERROR_COUNT;

package/build/__generated_site_amd_modules__/1/module/amd/1/l/en-US/mi/lwr/profiler/v/0_10_0/s/a152b8d35f12ca1b5147c5cd1ee155fb/lwr_profiler.js

@@ -0,0 +1,102 @@
+LWR.define('lwr/profiler/v/0_10_0', ['exports'], (function (exports) { 'use strict';
+
+  function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enumerableOnly && (symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; })), keys.push.apply(keys, symbols); } return keys; }
+  function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = null != arguments[i] ? arguments[i] : {}; i % 2 ? ownKeys(Object(source), !0).forEach(function (key) { _defineProperty(target, key, source[key]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } return target; }
+  function _defineProperty(obj, key, value) { key = _toPropertyKey(key); if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
+  function _toPropertyKey(arg) { var key = _toPrimitive(arg, "string"); return typeof key === "symbol" ? key : String(key); }
+  function _toPrimitive(input, hint) { if (typeof input !== "object" || input === null) return input; var prim = input[Symbol.toPrimitive]; if (prim !== undefined) { var res = prim.call(input, hint || "default"); if (typeof res !== "object") return res; throw new TypeError("@@toPrimitive must return a primitive value."); } return (hint === "string" ? String : Number)(input); }
+  var Phase = /*#__PURE__*/function (Phase) {
+    Phase[Phase["Start"] = 0] = "Start";
+    Phase[Phase["End"] = 1] = "End";
+    return Phase;
+  }(Phase || {});
+  // Attach a custom dispatcher
+  let customDispatcher;
+  function attachDispatcher(dispatcher) {
+    customDispatcher = dispatcher;
+  }
+
+  // Check if the Performance API is available
+  // e.g. JSDom (used in Jest) doesn't implement these
+  const perf = globalThis.performance;
+  const isPerfSupported = typeof perf !== 'undefined' && typeof perf.mark === 'function' && typeof perf.clearMarks === 'function' && typeof perf.measure === 'function' && typeof perf.clearMeasures === 'function';
+  function getMeasureName(id, specifier) {
+    return specifier ? `${id}-${specifier}` : id;
+  }
+  function getMarkName(id, specifier, specifierIndex) {
+    const measureName = getMeasureName(id, specifier);
+    return specifier && specifierIndex ? `${measureName}_${specifierIndex}` : measureName;
+  }
+  function getDetail(specifier, metadata) {
+    const detail = specifier || metadata ? _objectSpread({}, metadata) : null;
+    if (detail && specifier) {
+      detail['specifier'] = specifier;
+    }
+    return detail;
+  }
+
+  // For marking request metrics
+  // Fallback to the Performance API if there is no custom dispatcher
+  function logOperationStart({
+    id,
+    specifier,
+    specifierIndex,
+    metadata
+  }) {
+    if (customDispatcher) {
+      customDispatcher({
+        id,
+        phase: Phase.Start,
+        specifier,
+        metadata
+      });
+      return;
+    }
+    if (isPerfSupported) {
+      const markName = getMarkName(id, specifier, specifierIndex);
+      const detail = getDetail(specifier, metadata);
+      perf.mark(markName, {
+        detail
+      });
+    }
+  }
+
+  // For measuring duration metrics
+  // Fallback to the Performance API if there is no custom dispatcher
+  /* istanbul ignore next */
+  function logOperationEnd({
+    id,
+    specifier,
+    specifierIndex,
+    metadata
+  }) {
+    if (customDispatcher) {
+      customDispatcher({
+        id,
+        phase: Phase.End,
+        specifier,
+        metadata
+      });
+    } else if (isPerfSupported) {
+      const markName = getMarkName(id, specifier, specifierIndex);
+      const measureName = getMeasureName(id, specifier);
+      const detail = getDetail(specifier, metadata);
+      perf.measure(measureName, {
+        start: markName,
+        detail
+      });
+
+      // Clear the created mark and measure to avoid filling the performance entry buffer
+      // Even if they get deleted, existing PerformanceObservers preserve copies of the entries
+      perf.clearMarks(markName);
+      perf.clearMeasures(measureName);
+    }
+  }
+
+  exports.attachDispatcher = attachDispatcher;
+  exports.logOperationEnd = logOperationEnd;
+  exports.logOperationStart = logOperationStart;
+
+  Object.defineProperty(exports, '__esModule', { value: true });
+
+}));

package/build/__generated_site_amd_modules__/1/module/amd/1/l/en-US/mi/lwr/vault/v/{0_10_0-alpha_8 → 0_10_0}/s/c92abd8c1fec2d7eff62e4b097abbe14/lwr_vault.js

@@ -1,4 +1,4 @@
-LWR.define('lwr/vault/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'use strict';
+LWR.define('lwr/vault/v/0_10_0', ['exports'], (function (exports) { 'use strict';
 
   // Credential vault for storing setters and subscribers for OAuth info
   // This module is a SINGLETON and must be excluded from ESM bundling

package/build/__generated_site_amd_modules__/1/resource/amd/lwr-error-shim.js/v/{0_10_0-alpha_8 → 0_10_0}/lwr-error-shim.js

@@ -4,6 +4,6 @@
 * SPDX-License-Identifier: MIT
 * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/MIT
 */
-/* LWR Error Shim v0.10.0-alpha.8 */
+/* LWR Error Shim v0.10.0 */
 !function(){"use strict";if(!(globalThis.LWR&&globalThis.LWR.define)){const o=new Error("The LWR application failed to bootstrap");if(!globalThis.LWR||!globalThis.LWR.onError)throw o;globalThis.LWR.onError(o)}}();
 //# sourceMappingURL=lwr-error-shim.js.map

package/build/__generated_site_amd_modules__/1/resource/amd/lwr-loader-shim.bundle.js/v/{0_10_0-alpha_8 → 0_10_0}/lwr-loader-shim.bundle.js

@@ -4,7 +4,7 @@
 * SPDX-License-Identifier: MIT
 * For full license text, see the LICENSE file in the repo root or https://opensource.org/licenses/MIT
 */
-/* LWR Module Loader Shim v0.10.0-alpha.8 */
+/* LWR Module Loader Shim v0.10.0 */
 (function () {
   'use strict';
 
@@ -27,21 +27,46 @@
   // e.g. JSDom (used in Jest) doesn't implement these
   const perf = globalThis.performance;
   const isPerfSupported = typeof perf !== 'undefined' && typeof perf.mark === 'function' && typeof perf.clearMarks === 'function' && typeof perf.measure === 'function' && typeof perf.clearMeasures === 'function';
+  function getMeasureName(id, specifier) {
+    return specifier ? `${id}-${specifier}` : id;
+  }
+  function getMarkName(id, specifier, specifierIndex) {
+    const measureName = getMeasureName(id, specifier);
+    return specifier && specifierIndex ? `${measureName}_${specifierIndex}` : measureName;
+  }
+  function getDetail(specifier, metadata) {
+    const detail = specifier || metadata ? {
+      ...metadata
+    } : null;
+    if (detail && specifier) {
+      detail['specifier'] = specifier;
+    }
+    return detail;
+  }
 
   // For marking request metrics
   // Fallback to the Performance API if there is no custom dispatcher
   function logOperationStart({
     id,
-    specifier
+    specifier,
+    specifierIndex,
+    metadata
   }) {
     if (customDispatcher) {
       customDispatcher({
         id,
         phase: Phase.Start,
-        specifier
+        specifier,
+        metadata
+      });
+      return;
+    }
+    if (isPerfSupported) {
+      const markName = getMarkName(id, specifier, specifierIndex);
+      const detail = getDetail(specifier, metadata);
+      perf.mark(markName, {
+        detail
       });
-    } else if (isPerfSupported) {
-      perf.mark(id + (specifier ? `.${specifier}` : ''));
     }
   }
 
@@ -50,19 +75,25 @@
   /* istanbul ignore next */
   function logOperationEnd({
     id,
-    specifier
+    specifier,
+    specifierIndex,
+    metadata
   }) {
     if (customDispatcher) {
       customDispatcher({
         id,
         phase: Phase.End,
-        specifier
+        specifier,
+        metadata
       });
     } else if (isPerfSupported) {
-      const suffix = specifier ? `.${specifier}` : '';
-      const markName = id + suffix;
-      const measureName = `${id}.duration${suffix}`;
-      perf.measure(measureName, markName);
+      const markName = getMarkName(id, specifier, specifierIndex);
+      const measureName = getMeasureName(id, specifier);
+      const detail = getDetail(specifier, metadata);
+      perf.measure(measureName, {
+        start: markName,
+        detail
+      });
 
       // Clear the created mark and measure to avoid filling the performance entry buffer
       // Even if they get deleted, existing PerformanceObservers preserve copies of the entries
@@ -104,7 +135,7 @@
       return loader;
   }
 
-  const REQUIRED_MODULES_TIMEOUT = 300 * 1000;
+  const REQUIRED_MODULES_TIMEOUT = 60 * 1000; // 2m
 
   // Check for errors with autoBoot and customInit
   function validatePreInit(autoBoot, customInit) {
@@ -174,7 +205,7 @@
           // Parse configuration
           this.global = global;
           this.config = global.LWR ;
-          this.loaderSpecifier = 'lwr/loader/v/0_10_0-alpha_8';
+          this.loaderSpecifier = 'lwr/loader/v/0_10_0';
 
           // Set up error handler
           this.errorHandler = this.config.onError;
@@ -294,7 +325,7 @@
           const exporter = (exports) => {
               Object.assign(exports, { logOperationStart, logOperationEnd });
           };
-          globalLWR.define('lwr/profiler/v/0_10_0-alpha_8', ['exports'], exporter);
+          globalLWR.define('lwr/profiler/v/0_10_0', ['exports'], exporter);
       }
 
       // Set up the application globals, import map, root custom element...
@@ -366,15 +397,15 @@
   // The loader module is ALWAYS required
   const GLOBAL = globalThis ;
   GLOBAL.LWR.requiredModules = GLOBAL.LWR.requiredModules || [];
-  if (GLOBAL.LWR.requiredModules.indexOf('lwr/loader/v/0_10_0-alpha_8') < 0) {
-      GLOBAL.LWR.requiredModules.push('lwr/loader/v/0_10_0-alpha_8');
+  if (GLOBAL.LWR.requiredModules.indexOf('lwr/loader/v/0_10_0') < 0) {
+      GLOBAL.LWR.requiredModules.push('lwr/loader/v/0_10_0');
   }
   new LoaderShim(GLOBAL);
 
 })();
 //# sourceMappingURL=lwr-loader-shim.js.map
 
-LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'use strict';
+LWR.define('lwr/loader/v/0_10_0', ['exports'], (function (exports) { 'use strict';
 
     const templateRegex = /\{([0-9]+)\}/g;
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -948,7 +979,69 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
         }
     }
 
-    const MODULE_LOAD_TIMEOUT_TIMER = 300000;
+    const MODULE_LOAD_TIMEOUT_TIMER = 60 * 1000; // 1m
+
+    /*!
+     * Copyright (C) 2023 salesforce.com, inc.
+     */
+    // @ts-ignore: Prevent cannot find name 'trustedTypes' error.
+    const SUPPORTS_TRUSTED_TYPES = typeof trustedTypes !== 'undefined';
+    function createTrustedTypesPolicy(name, options) {
+      // @ts-ignore: Prevent cannot find name 'trustedTypes' error.
+      return trustedTypes.createPolicy(name, options);
+    }
+    function createFallbackPolicy(_name, options) {
+      return options;
+    }
+    // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/trusted-types
+    const createPolicy = SUPPORTS_TRUSTED_TYPES ? createTrustedTypesPolicy : createFallbackPolicy;
+    const policyOptions = {
+      createHTML(value) {
+        return value;
+      },
+      createScript(value) {
+        return value;
+      },
+      createScriptURL(value) {
+        return value;
+      }
+    };
+    // Temporarily surround in try-catch until migration to AMD run.
+    try {
+      createPolicy('default', {
+        createHTML(dirty) {
+          // Treat null & undefined separately
+          if (dirty === 'null' || dirty === 'undefined') {
+            return dirty;
+          }
+          return dirty;
+        },
+        // Ignore typescript type validation for this policy.
+        // Returning `undefined` from a TT policy blocks usages
+        // of specific DOM sinks affected by this hook.
+        // We want to block eval and inline scripts.
+        // @ts-ignore
+        createScript(dirty) {
+          // Treat null & undefined separately
+          if (dirty === 'null' || dirty === 'undefined') {
+            return dirty;
+          }
+          // Block script evaluation
+          return undefined;
+        },
+        createScriptURL(dirty) {
+          // Treat null & undefined separately
+          if (dirty === 'null' || dirty === 'undefined') {
+            return dirty;
+          }
+          return dirty;
+        }
+      });
+    } catch (_unused) {
+      // swallow
+    }
+    const trusted = createPolicy('trusted', policyOptions);
+    /*! version: 0.19.10 */
 
     /* global console,process */
 
@@ -1017,7 +1110,7 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
             code = `${code}\n//# sourceURL=${id}`; // append sourceURL for debugging
             try {
                 // TODO eval source maps for debugging
-                eval(code);
+                eval(trusted.createScript(code));
             } catch (e) {
                 throw new LoaderError(FAIL_LOAD, [id]);
             }
@@ -1141,6 +1234,9 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
                         // eslint-disable-next-line no-await-in-loop
                         result = isResponseAPromise(response) ? await response : response;
                     }
+                    if (!this.isValidResolveResponse(result)) {
+                        throw new LoaderError(INVALID_LOADER_SERVICE_RESPONSE);
+                    }
 
                     // if result is not null, attempt resolution
                     if (result !== null) {
@@ -1669,6 +1765,12 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
                 this.handleStaleModuleHook = [handleStaleModule];
             }
         }
+
+        isValidResolveResponse(res) {
+            return (
+                res === null || typeof res === 'string' || (res && typeof (res ).url === 'string')
+            );
+        }
     }
 
     /**
@@ -1809,3 +1911,4 @@ LWR.define('lwr/loader/v/0_10_0-alpha_8', ['exports'], (function (exports) { 'us
     Object.defineProperty(exports, '__esModule', { value: true });
 
 }));
+//# sourceMappingURL=lwr-loader-shim.bundle.js.map