@mauroandre/velojs 0.0.47 → 0.0.49

package/dist/server.d.ts

@@ -9,6 +9,16 @@ export interface StartServerOptions {
     port?: number;
 }
 export declare function addRoutes(fn: (app: Hono) => void | Promise<void>): void;
+/**
+ * Serializa dados para injeção num <script> inline. JSON não escapa `<`, então
+ * uma string com `</script>` nos dados fecharia a tag no meio — o resto do
+ * payload transborda pro documento como HTML e a hidratação quebra (observado
+ * em produção com conteúdo de modelo contendo pseudo-tags). `<` é escape
+ * JSON/JS válido e decodifica transparente no cliente. Também escapa `>`
+ * (defesa para `<!--`) e U+2028/U+2029 (válidos em JSON, quebras de linha em
+ * JS antigo).
+ */
+export declare const jsonForScript: (value: unknown) => string;
 export declare const createApp: (routes: AppRoutes) => Promise<Hono>;
 export declare const startServer: (options: StartServerOptions) => Promise<Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">>;
 export default createApp;

package/dist/server.js

@@ -11,7 +11,7 @@ import { registerSocketRoutes as I, injectWebSocketServer as S } from "./sockets
 const P = new A();
 globalThis.__veloServerData = P;
 let v = null;
-function Y(e) {
+function Z(e) {
   if (v) {
     e(v);
     return;
@@ -24,10 +24,10 @@ function b(e) {
   for (const s of t.serverCallbacks) s(e);
   t.serverCallbacks.length = 0;
 }
-function Z(e) {
+function ee(e) {
   w().pendingRoutes.push(e);
 }
-const N = (e, t, s, r) => {
+const N = (e) => JSON.stringify(e).replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029"), O = (e, t, s, r) => {
   if (r && r !== 200 && e.status(r), e.req.query("_data") === "1") {
     const c = globalThis.__veloBuildHash || void 0, i = s ? { ...s, __buildHash: c } : { __buildHash: c };
     return e.json(i);
@@ -38,11 +38,9 @@ const N = (e, t, s, r) => {
   );
   if (e.header("Cache-Control", "no-cache"), !s)
     return e.html(n);
-  const a = `<script>window.__PAGE_DATA__=${JSON.stringify(
-    s
-  )}<\/script>`;
-  return e.html(n.replace("</head>", `${a}</head>`));
-}, O = async (e, t) => {
+  const a = `<script>window.__PAGE_DATA__=${N(s)}<\/script>`;
+  return e.html(n.replace("</head>", () => `${a}</head>`));
+}, G = async (e, t) => {
   const s = t.req.param(), r = t.req.query(), o = { params: s, query: r, c: t }, n = await Promise.all(
     e.map(async (i) => {
       if (!i.loader) return null;
@@ -68,7 +66,7 @@ const N = (e, t, s, r) => {
     data: c,
     shortCircuit: a
   };
-}, G = (e) => {
+}, H = (e) => {
   if (e.length === 0) return null;
   const t = e.filter(Boolean);
   if (t.length === 0) return null;
@@ -109,13 +107,13 @@ const N = (e, t, s, r) => {
         continue;
       }
       const d = async (h) => {
-        const { components: u, data: m, shortCircuit: f } = await O(n, h);
+        const { components: u, data: m, shortCircuit: f } = await G(n, h);
         if (f) {
           const g = f.headers.get("Location");
           return h.req.query("_data") === "1" && g && f.status >= 300 && f.status < 400 ? h.json({ __redirect: g }) : f;
         }
-        const p = G(u);
-        return N(h, p, m, i);
+        const p = H(u);
+        return O(h, p, m, i);
       };
       c ? e.notFound(d) : a.length > 0 ? e.on(["GET"], [l], ...a, d) : e.on(["GET"], [l], d);
     } else
@@ -165,7 +163,7 @@ const N = (e, t, s, r) => {
     }
     r.children && q(e, r.children, n);
   }
-}, H = async (e, t, s = []) => {
+}, x = async (e, t, s = []) => {
   const r = (o, n) => {
     for (const a of o) {
       const c = a.module?.metadata?.moduleId, i = [
@@ -193,7 +191,7 @@ const N = (e, t, s, r) => {
     }
   };
   r(t, s);
-}, x = (e, t) => t ? t.startsWith("/") ? e + t : e ? e + "/" + t : "/" + t : e || "", V = (e) => {
+}, V = (e, t) => t ? t.startsWith("/") ? e + t : e ? e + "/" + t : "/" + t : e || "", W = (e) => {
   const t = /* @__PURE__ */ new Set(), s = (r) => {
     for (const o of r) {
       if (o.module && !o.children) {
@@ -206,7 +204,7 @@ const N = (e, t, s, r) => {
   return s(e), t;
 }, R = (e, t, s, r = "", o = []) => {
   for (const n of t) {
-    const a = x(r, n.path), c = [
+    const a = V(r, n.path), c = [
       ...o,
       ...n.middlewares || []
     ], i = !!n.handler, l = !!n.method;
@@ -238,21 +236,21 @@ const N = (e, t, s, r) => {
       c
     );
   }
-}, W = async (e) => {
+}, K = async (e) => {
   const t = new j();
   t.use(T()), process.env.NODE_ENV !== "production" && t.use("*", E());
   const r = w().pendingRoutes.splice(0);
   for (const n of r)
     await n(t);
-  y(t, e), q(t, e), await H(t, e);
-  const o = V(e);
+  y(t, e), q(t, e), await x(t, e);
+  const o = W(e);
   if (R(t, e, o), await I(t, e), D(t), process.env.NODE_ENV !== "production" && !v) {
     const n = globalThis.__veloDevServer;
     n && (b(n), await S(t, n));
   }
   return t;
-}, ee = async (e) => {
-  const { routes: t } = e, s = Number(process.env.PORT) || e.port || 3e3, r = await W(t);
+}, te = async (e) => {
+  const { routes: t } = e, s = Number(process.env.PORT) || e.port || 3e3, r = await K(t);
   if (process.env.NODE_ENV === "production" && !process.env.VELO_STATIC) {
     const { serve: o } = await import("@hono/node-server"), { serveStatic: n } = await import("@hono/node-server/serve-static"), { join: a } = await import("node:path"), c = a(process.cwd(), "dist/client");
     (process.env.STATIC_BASE_URL || "").startsWith("http") || r.use("/*", n({ root: c })), console.log(`Server running on http://localhost:${s}`);
@@ -262,10 +260,11 @@ const N = (e, t, s, r) => {
   return r;
 };
 export {
-  Z as addRoutes,
-  W as createApp,
-  W as default,
-  Y as onServer,
+  ee as addRoutes,
+  K as createApp,
+  K as default,
+  N as jsonForScript,
+  Z as onServer,
   P as serverDataStorage,
-  ee as startServer
+  te as startServer
 };

package/dist/static.js

@@ -21,7 +21,7 @@ async function h(c, e = "") {
           for (const p of u) {
             let f = s;
             for (const [m, w] of Object.entries(p))
-              f = f.replace(`:${m}`, w);
+              f = f.replace(`:${m}`, () => w);
             o.push({ fullPath: f, module: t.module });
           }
         } else

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@mauroandre/velojs",
-    "version": "0.0.47",
+    "version": "0.0.49",
     "type": "module",
     "description": "Fullstack web framework built on Hono + Preact with Vite-powered AST transforms",
     "keywords": [