@mandujs/core 0.18.2 → 0.18.5

package/src/resource/generator.ts

@@ -4,6 +4,7 @@
  */
 
 import type { ParsedResource } from "./parser";
+import type { ResourceDefinition } from "./schema";
 import { generateResourceContract } from "./generators/contract";
 import { generateResourceTypes } from "./generators/types";
 import { generateResourceSlot } from "./generators/slot";
@@ -129,7 +130,7 @@ export async function generateResourceArtifacts(
  * Generate contract file
  */
 async function generateContract(
-  definition: any,
+  definition: ResourceDefinition,
   resourceName: string,
   contractsDir: string,
   result: GeneratorResult
@@ -147,7 +148,7 @@ async function generateContract(
  * Generate types file
  */
 async function generateTypes(
-  definition: any,
+  definition: ResourceDefinition,
   resourceName: string,
   typesDir: string,
   result: GeneratorResult
@@ -165,7 +166,7 @@ async function generateTypes(
  * Generate slot file (PRESERVE if exists!)
  */
 async function generateSlot(
-  definition: any,
+  definition: ResourceDefinition,
   resourceName: string,
   slotsDir: string,
   force: boolean,
@@ -195,7 +196,7 @@ async function generateSlot(
  * Generate client file
  */
 async function generateClient(
-  definition: any,
+  definition: ResourceDefinition,
   resourceName: string,
   clientDir: string,
   result: GeneratorResult

package/src/runtime/escape.ts

@@ -1,3 +1,15 @@
+/**
+ * HTML 텍스트 콘텐츠 이스케이프
+ * <title>, <p> 등 텍스트 노드에 들어갈 문자열을 안전하게 처리.
+ * 속성값과 달리 " ' 는 이스케이프 불필요.
+ */
+export function escapeHtmlText(value: string): string {
+  return value
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;");
+}
+
 /**
  * HTML 속성값 이스케이프
  * XSS 방지를 위해 HTML 속성값에 들어갈 문자열을 안전하게 처리

package/src/runtime/server.ts

@@ -5,7 +5,7 @@ import type { ManduFilling } from "../filling/filling";
 import { ManduContext } from "../filling/context";
 import { Router } from "./router";
 import { renderSSR, renderStreamingResponse } from "./ssr";
-import { PageBoundary, DefaultLoading, DefaultError, type ErrorFallbackProps } from "./boundary";
+import { type ErrorFallbackProps } from "./boundary";
 import React, { type ReactNode } from "react";
 import path from "path";
 import fs from "fs/promises";

package/src/runtime/shims.ts

@@ -0,0 +1,48 @@
+/**
+ * Runtime Shims for React Compatibility
+ *
+ * React 19+ 호환성을 위한 런타임 shim 스크립트들을 제공합니다.
+ *
+ * @module runtime/shims
+ */
+
+/**
+ * React 19 Client Internals Shim Script
+ *
+ * React 19에서 react-dom/client가 실행되기 전에 ReactSharedInternals.S가
+ * 존재하는지 확인하고 필요시 초기화하는 inline 스크립트입니다.
+ *
+ * **사용 목적**:
+ * - Playwright headless 환경에서 hydration 실패 방지
+ * - React 19의 __CLIENT_INTERNALS.S가 null일 수 있는 문제 해결
+ * - SSR HTML에 삽입하여 번들 로드 전에 실행
+ *
+ * **안전성**:
+ * - try-catch로 감싸져 있어 오류 발생 시에도 안전
+ * - 기존 값이 있으면 덮어쓰지 않음
+ * - React가 없거나 internals가 없어도 실패하지 않음
+ *
+ * @example
+ * ```typescript
+ * // SSR HTML에 삽입
+ * const html = `
+ *   ${hydrationScripts}
+ *   ${REACT_INTERNALS_SHIM_SCRIPT}
+ *   ${routerScript}
+ * `;
+ * ```
+ */
+export const REACT_INTERNALS_SHIM_SCRIPT = `<script>
+// React 19 internals shim: ensure ReactSharedInternals.S exists before react-dom/client runs.
+// Some builds expect React.__CLIENT_INTERNALS... .S to be a function, but it may be null.
+// This shim is safe: it only fills the slot if missing.
+(function(){
+  try {
+    var React = window.React;
+    var i = React && React.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE;
+    if (i && i.S == null) {
+      i.S = function(){};
+    }
+  } catch(e) {}
+})();
+</script>`;

package/src/runtime/ssr.ts

@@ -5,7 +5,8 @@ import type { ReactElement } from "react";
 import type { BundleManifest } from "../bundler/types";
 import type { HydrationConfig, HydrationPriority } from "../spec/schema";
 import { PORTS, TIMEOUTS } from "../constants";
-import { escapeHtmlAttr, escapeJsonForInlineScript } from "./escape";
+import { escapeHtmlAttr, escapeHtmlText, escapeJsonForInlineScript } from "./escape";
+import { REACT_INTERNALS_SHIM_SCRIPT } from "./shims";
 
 // Re-export streaming SSR utilities
 export {
@@ -242,7 +243,7 @@ export function renderToHTML(element: ReactElement, options: SSROptions = {}): s
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>${escapeHtmlAttr(title)}</title>
+  <title>${escapeHtmlText(title)}</title>
   ${cssLinkTag}
   ${headTags}
 </head>
@@ -251,6 +252,7 @@ export function renderToHTML(element: ReactElement, options: SSROptions = {}): s
   ${dataScript}
   ${routeScript}
   ${hydrationScripts}
+  ${needsHydration ? REACT_INTERNALS_SHIM_SCRIPT : ""}
   ${routerScript}
   ${hmrScript}
   ${bodyEndTags}
@@ -311,6 +313,15 @@ function generateHMRScript(port: number): string {
   var ws = null;
   var reconnectAttempts = 0;
   var maxReconnectAttempts = ${TIMEOUTS.HMR_MAX_RECONNECT};
+  var baseDelay = ${TIMEOUTS.HMR_RECONNECT_DELAY};
+
+  function scheduleReconnect() {
+    if (reconnectAttempts < maxReconnectAttempts) {
+      reconnectAttempts++;
+      var delay = Math.min(baseDelay * Math.pow(2, reconnectAttempts - 1), 30000);
+      setTimeout(connect, delay);
+    }
+  }
 
   function connect() {
     try {
@@ -325,19 +336,27 @@ function generateHMRScript(port: number): string {
           if (msg.type === 'reload' || msg.type === 'island-update') {
             console.log('[Mandu HMR] Reloading...');
             location.reload();
+          } else if (msg.type === 'css-update') {
+            var cssPath = (msg.data && msg.data.cssPath) || '/.mandu/client/globals.css';
+            var links = document.querySelectorAll('link[rel="stylesheet"]');
+            var updated = false;
+            for (var i = 0; i < links.length; i++) {
+              var href = links[i].getAttribute('href') || '';
+              var base = href.split('?')[0];
+              if (base === cssPath || href.includes('globals.css') || href.includes('.mandu/client')) {
+                links[i].setAttribute('href', base + '?t=' + Date.now());
+                updated = true;
+              }
+            }
+            if (!updated) location.reload();
           } else if (msg.type === 'error') {
-            console.error('[Mandu HMR] Build error:', msg.data?.message);
+            console.error('[Mandu HMR] Build error:', msg.data && msg.data.message);
           }
         } catch(err) {}
       };
-      ws.onclose = function() {
-        if (reconnectAttempts < maxReconnectAttempts) {
-          reconnectAttempts++;
-          setTimeout(connect, ${TIMEOUTS.HMR_RECONNECT_DELAY} * reconnectAttempts);
-        }
-      };
+      ws.onclose = function() { scheduleReconnect(); };
     } catch(err) {
-      setTimeout(connect, ${TIMEOUTS.HMR_RECONNECT_DELAY});
+      scheduleReconnect();
     }
   }
   connect();

package/src/runtime/streaming-ssr.ts

@@ -19,6 +19,7 @@ import type { Metadata, MetadataItem } from "../seo/types";
 import { injectSEOIntoOptions, resolveSEO, type SEOOptions } from "../seo/integration/ssr";
 import { PORTS, TIMEOUTS } from "../constants";
 import { escapeHtmlAttr, escapeJsonForInlineScript, escapeJsString } from "./escape";
+import { REACT_INTERNALS_SHIM_SCRIPT } from "./shims";
 
 // ========== Types ==========
 
@@ -157,6 +158,7 @@ export interface StreamingLoaderResult<T = unknown> {
  */
 function isJSONSerializable(value: unknown, path: string = "root", isDev: boolean = false): { valid: boolean; issues: string[] } {
   const issues: string[] = [];
+  const seen = new WeakSet<object>();
 
   function check(val: unknown, currentPath: string): void {
     if (val === undefined) {
@@ -197,6 +199,12 @@ function isJSONSerializable(value: unknown, path: string = "root", isDev: boolea
     }
 
     if (type === "object") {
+      // 순환 참조 감지 — 무한 재귀 방지
+      if (seen.has(val as object)) {
+        issues.push(`${currentPath}: 순환 참조가 감지되었습니다 (JSON 직렬화 불가)`);
+        return;
+      }
+      seen.add(val as object);
       for (const [key, v] of Object.entries(val as Record<string, unknown>)) {
         check(v, `${currentPath}.${key}`);
       }
@@ -507,6 +515,11 @@ function generateHTMLTailContent(options: StreamingSSROptions): string {
     scripts.push(`<script type="module" src="${escapeHtmlAttr(bundleManifest.shared.runtime)}"></script>`);
   }
 
+  // 7.5 React internals shim (must run before react-dom/client runs)
+  if (hydration && hydration.strategy !== "none") {
+    scripts.push(REACT_INTERNALS_SHIM_SCRIPT);
+  }
+
   // 8. Router 스크립트
   if (enableClientRouter && bundleManifest?.shared?.router) {
     scripts.push(`<script type="module" src="${escapeHtmlAttr(bundleManifest.shared.router)}"></script>`);