@octanejs/app-core 0.0.5 → 0.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octanejs/app-core",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -75,14 +75,14 @@
     }
   },
   "dependencies": {
-    "@ripple-ts/adapter": "^0.3.86",
+    "@ripple-ts/adapter": "^0.3.101",
     "esbuild": "^0.28.1"
   },
   "peerDependencies": {
-    "octane": "0.1.9"
+    "octane": "0.1.11"
   },
   "devDependencies": {
     "@types/node": "^24.3.0",
-    "octane": "0.1.9"
+    "octane": "0.1.11"
   }
 }

package/src/codegen.js

@@ -108,6 +108,8 @@ export function write_project_generated_file(options, name, source) {
  * avoids requiring `unsafe-eval` under a nonce-based Content Security Policy.
  *
  * octane specifics:
+ *   - `initializeHydrationEventCapture()` runs before any async route work so
+ *     interaction boundaries can preserve intent that precedes `hydrateRoot()`.
  *   - `import { hydrateRoot } from 'octane'` (NO `mount`).
  *   - `hydrateRoot(container, body, props)` signature (container FIRST, React-18
  *     shape) — no `{ target, props }` wrapper.
@@ -154,7 +156,9 @@ export function create_client_entry_source(options = {}) {
 	return `// Auto-generated by ${generatedBy}.
 // This file is written to the active integration's project cache.
 
-import { hydrateRoot, Suspense, ErrorBoundary, createElement } from ${JSON.stringify(runtimeModuleId)};
+import { hydrateRoot, initializeHydrationEventCapture, Suspense, ErrorBoundary, createElement } from ${JSON.stringify(runtimeModuleId)};
+
+initializeHydrationEventCapture();
 
 // Static import map (production): every module the server may name in
 // #__octane_data, as bundle-analyzable dynamic imports. Empty in dev.

package/types/config.d.ts

@@ -16,6 +16,7 @@ export type {
 	ExperimentalRendererConfigOptions,
 	ExperimentalRendererRegistryEntry,
 	ExperimentalRendererRuleOptions,
+	ExperimentalRendererValidationOptions,
 	ExperimentalResolvedRendererBoundary,
 	ExperimentalResolvedRendererConfig,
 	ExperimentalResolvedRendererRegistryEntry,

package/types/index.d.ts

@@ -190,6 +190,18 @@ export interface ExperimentalRendererRuleOptions {
 	renderer: string;
 }
 
+/** @experimental Static source restrictions enforced for a renderer. */
+export interface ExperimentalRendererValidationOptions {
+	/** Host elements that may directly contain authored primitive text. */
+	textParents?: readonly string[];
+	/** Unbound JavaScript globals that renderer-owned source may not reference. */
+	forbiddenGlobals?: readonly string[];
+	/** Package IDs whose static imports, subpaths, and CommonJS requires are forbidden. */
+	forbiddenImports?: readonly string[];
+	/** Allowed static JSX attributes by host name; `*` supplies shared patterns. */
+	hostProps?: Readonly<Record<string, readonly string[]>>;
+}
+
 /**
  * @experimental A string selects the universal compiler target. The object
  * form carries explicit target metadata for normalized configs and future
@@ -208,6 +220,8 @@ export type ExperimentalRendererRegistryEntry =
 			text?: 'reject' | 'ignore' | 'host';
 			/** Serializable feature flags consumed by compiler and runtime integrations. */
 			capabilities?: readonly string[];
+			/** Optional source restrictions enforced when compiling for this renderer. */
+			validation?: ExperimentalRendererValidationOptions;
 	  };
 
 /**
@@ -258,6 +272,7 @@ export interface ExperimentalResolvedRendererRegistryEntry {
 	readonly intrinsics?: string;
 	readonly text: 'reject' | 'ignore' | 'host';
 	readonly capabilities: readonly string[];
+	readonly validation?: Readonly<ExperimentalRendererValidationOptions>;
 }
 
 /** @experimental Canonical renderer-owned child-region metadata. */