@openelement/core 0.41.0-alpha.1

package/src/html-escape.d.ts

@@ -0,0 +1,29 @@
+import type { SafeHtml, UnsafeHtml } from '@openelement/protocol/framework';
+export type { SafeHtml, UnsafeHtml };
+export declare function escapeHtml(str: string): string;
+/** Escape an HTML attribute value */ export declare function escapeAttr(value: string): string;
+/** Escape a string for use as an attribute value (double-quoted) */ export declare function escapeAttrValue(value: unknown): string;
+/**
+ * Wrap rendered HTML in a full HTML document.
+ * Adds DOCTYPE, head (title, meta, preload), and body.
+ * Supports CSP nonce and dev scripts (e.g. Vite client, route module registration).
+ */ export declare function wrapInDocument(html: string, options?: {
+  title?: string;
+  lang?: string;
+  /** Client-side module script injected after rendered HTML. */ clientScript?: string;
+  meta?: {
+    description?: string;
+    tags?: Array<Record<string, string | number | boolean>>;
+  };
+  /** Raw HTML script tags to inject after rendered HTML (e.g. Vite client, route module registration). */ devScripts?: string;
+  headExtras?: string;
+  /** Raw route-local head fragments from explicit dangerous page metadata. */ dangerouslyHeadFragments?: string[];
+  /** Trust script tags that were produced by structured framework injection APIs. */ allowHeadExtrasScripts?: boolean;
+  /** CSP nonce, if provided, added to all generated <script> tags. */ cspNonce?: string;
+}): string;
+import type { RouteEntry } from '@openelement/protocol/framework';
+/**
+ * Render an error page to HTML string.
+ * In dev mode, shows detailed error information for debugging.
+ * In production, shows a generic safe error page.
+ */ export declare function renderSsrError(error: Error, statusOrRoute: number | RouteEntry, isDev?: boolean): string;

package/src/html-escape.js

@@ -0,0 +1,126 @@
+/**
+ * @openelement/core - Safe/Unsafe HTML Contract
+ *
+ * Branded types for HTML escaping semantics:
+ * - SafeHtml:  A string that has been HTML-escaped (safe for text content)
+ * - UnsafeHtml: A string that is intentionally raw HTML (do not double-escape)
+ *
+ * @module @openelement/core/html-escape
+ */ // ─── L1: Safe/Unsafe HTML Contract ──────────────────────────────
+import { createLogger, warnOnce } from './logger.js';
+const log = createLogger('core');
+/**
+ * Escape a string for safe HTML text content insertion.
+ * Uses single-pass replacement for performance (P-01 fix).
+ * Branded types are compile-time only - removed dead runtime branches (M-01 fix).
+ */ const ESCAPE_MAP = {
+  '&': '&',
+  '<': '&lt;',
+  '>': '&gt;',
+  '"': '&quot;',
+  "'": '&#39;'
+};
+export function escapeHtml(str) {
+  if (typeof str !== 'string') return '';
+  return str.replace(/[&<>"']/g, (ch)=>ESCAPE_MAP[ch] || ch);
+}
+/** Escape an HTML attribute value */ export function escapeAttr(value) {
+  return value.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/'/g, '&#39;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+/** Escape a string for use as an attribute value (double-quoted) */ export function escapeAttrValue(value) {
+  if (value === null || value === undefined) return '';
+  return escapeAttr(String(value));
+}
+/**
+ * Wrap rendered HTML in a full HTML document.
+ * Adds DOCTYPE, head (title, meta, preload), and body.
+ * Supports CSP nonce and dev scripts (e.g. Vite client, route module registration).
+ */ export function wrapInDocument(html, options = {}) {
+  const { title = 'openElement', lang = 'en', clientScript = '', meta, devScripts = '', headExtras = '', dangerouslyHeadFragments = [], allowHeadExtrasScripts = false, cspNonce } = options;
+  // v0.14.5: CSP nonce format validation per CSP spec (base64 value)
+  const NONCE_RE = /^[A-Za-z0-9+/=_-]+$/;
+  const validNonce = cspNonce && NONCE_RE.test(cspNonce) ? cspNonce : undefined;
+  if (cspNonce && !validNonce) {
+    log.warn(`Invalid CSP nonce format: "${cspNonce}". Nonce should be a base64-encoded value.`);
+  }
+  // v0.14.8: C-02 fix - Runtime enforcement for headExtras.
+  // If headExtras contains <script> tags and allowHeadExtrasScripts is false,
+  // strip them to prevent XSS. Developer should use inject.scripts for safe injection.
+  let safeHeadExtras = headExtras;
+  if (!allowHeadExtrasScripts && headExtras) {
+    // Strip <script> tags and their content
+    safeHeadExtras = headExtras.replace(/<script[\s>][\s\S]*?<\/script\s*>/gi, '');
+    if (safeHeadExtras !== headExtras) {
+      warnOnce('headExtrasScripts', log, 'headExtras contained <script> tags which were stripped for security. ' + 'Use inject.scripts for safe script injection, or set allowHeadExtrasScripts: true.');
+    }
+    // Strip on* event handler attributes (strong XSS indicator)
+    if (/\s+on\w+\s*=/i.test(safeHeadExtras)) {
+      safeHeadExtras = safeHeadExtras.replace(/\s+on\w+\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/gi, '');
+      log.warn('headExtras contained on* event handler attributes which were stripped for security.');
+    }
+  }
+  // v0.14.3: Basic HTML tag balance validation for headExtras.
+  // Checks that opening and closing tag counts match for major HTML elements.
+  // This catches obviously malformed HTML (e.g., unclosed <!-- comments).
+  if (headExtras) {
+    // Check for unclosed HTML comments: <!-- without matching -->
+    const commentOpens = (headExtras.match(/<!--/g) || []).length;
+    const commentCloses = (headExtras.match(/-->/g) || []).length;
+    if (commentOpens !== commentCloses) {
+      log.warn('headExtras has unbalanced HTML comments (<!-- vs -->). ' + 'This may cause HTML parsing issues.');
+    }
+  }
+  const metaTags = [];
+  if (meta?.description) {
+    const safeDesc = escapeAttrValue(meta.description);
+    metaTags.push(`  <meta name="description" content="${safeDesc}">`);
+  }
+  if (Array.isArray(meta?.tags)) {
+    for (const tag of meta.tags){
+      const attrs = Object.entries(tag).map(([key, value])=>`${escapeAttr(key)}="${escapeAttrValue(value)}"`).join(' ');
+      if (attrs) metaTags.push(`  <meta ${attrs}>`);
+    }
+  }
+  const metaBlock = metaTags.length > 0 ? '\n' + metaTags.join('\n') + '\n' : '';
+  const dangerousHeadBlock = dangerouslyHeadFragments.length > 0 ? '\n  ' + dangerouslyHeadFragments.join('\n  ') : '';
+  const safeTitle = escapeHtml(title);
+  const safeLang = escapeAttr(lang);
+  return `<!DOCTYPE html>
+<html lang="${safeLang}">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>${safeTitle}</title>${metaBlock}
+  ${safeHeadExtras}${dangerousHeadBlock}
+</head>
+<body>
+  ${html}
+  ${clientScript}${devScripts}
+</body>
+</html>`;
+}
+/**
+ * Render an error page to HTML string.
+ * In dev mode, shows detailed error information for debugging.
+ * In production, shows a generic safe error page.
+ */ export function renderSsrError(error, statusOrRoute, isDev = false) {
+  const status = typeof statusOrRoute === 'number' ? statusOrRoute : 500;
+  const title = isDev ? 'SSR Render Error' : `Error ${status}`;
+  const message = escapeHtml(error.message);
+  const stack = isDev && error.stack ? escapeHtml(error.stack) : '';
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>${title}</title>
+  ${isDev ? '<style>body{font-family:system-ui;max-width:800px;margin:2rem auto;padding:0 1rem}pre{background:#f5f5f5;padding:1rem;overflow:auto;border-radius:4px}</style>' : ''}
+</head>
+<body>
+  <h1>${title}</h1>
+  <p>${isDev ? `<strong>${message}</strong>` : message}</p>
+  ${stack ? `<pre>${stack}</pre>` : ''}
+</body>
+</html>`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/src/hydrate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @openelement/core/hydrate - DSD interactive runtime surface.
+ *
+ * Includes the static rendering surface plus marker-based event hydration
+ * and DSD shadow-root hydration helpers. Used by DSD interactive islands.
+ *
+ * ADR-0109 Phase 1: split @openelement/core into static, hydrate, and csr.
+ */ export * from "./static.js";
+export type { BindingDescriptor, BindingDispose, BindingLifecycle } from "./binding-descriptor.js";
+export { applyBindingDescriptor } from "./binding-activation.js";
+export { collectEventBindings, eventRecordsToDescriptors, hydrateEventMarkers } from "./event-hydration.js";
+export type { EventBinding, EventBindingRecord } from "./event-hydration.js";
+export { createDsdRenderRoot, hydrateDsdEvents } from "./dsd-hydration.js";
+export type { Constructor, DsdHydration } from "./dsd-hydration.js";
+export { bindHydrateEvents } from "./dsd-hydration-events.js";

package/src/hydrate.js

@@ -0,0 +1,15 @@
+/**
+ * @openelement/core/hydrate - DSD interactive runtime surface.
+ *
+ * Includes the static rendering surface plus marker-based event hydration
+ * and DSD shadow-root hydration helpers. Used by DSD interactive islands.
+ *
+ * ADR-0109 Phase 1: split @openelement/core into static, hydrate, and csr.
+ */ export * from './static.js';
+export { applyBindingDescriptor } from './binding-activation.js';
+// Marker-based event hydration (DOM-specific parts not in static.ts)
+export { collectEventBindings, eventRecordsToDescriptors, hydrateEventMarkers } from './event-hydration.js';
+// DSD hydration contract
+export { createDsdRenderRoot, hydrateDsdEvents } from './dsd-hydration.js';
+export { bindHydrateEvents } from './dsd-hydration-events.js';
+//# sourceMappingURL=data:application/json;base64,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

package/src/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @openelement/core - Pure runtime.
+ *
+ * openElement is a static-first framework with a pure runtime core:
+ * - Zero node:* imports - no filesystem, no process, no path
+ * - Zero Vite dependency - no Plugin, no build orchestration
+ * - Zero npm: specifiers - works in Deno, Node, Bun, Edge
+ * - Pure Web Standard: URL, fetch, import.meta.url, console
+ *
+ * Rendering: DSD (Declarative Shadow DOM) string concatenation
+ * Islands: Custom Element registration + prop deserialization
+ *
+ * Build orchestration (Vite plugins) lives in @openelement/adapter-vite.
+ * For the unified openElement() entry, use @openelement/app/vite instead.
+ */ export type { AppShellConfig, AppShellDefinition, ComponentLayer, FrameworkOptions, HydrateEventDescriptor, HydrationStrategy, IsrManifestEntry, LayoutsConfig, LocalePath, OpenElementApiContext, OpenElementBuildContextLike, OpenElementMiddleware, OpenElementMiddlewareContext, OpenElementRenderer, RegistryIndex, RegistryIndexEntry, RouteEntry, SafeHtml, SpecialFileType, StrategySource, UnsafeHtml, ValidationError, ValidationResult, ValidationWarning } from '@openelement/protocol/framework';
+export type { IslandDescriptor, SsrContext } from '@openelement/protocol/context';
+export { ERROR_PREFIX, ErrorCode, OpenElementError, PropValidationError, RenderError, reportError, setErrorTelemetryHook, SsrRenderError } from "./errors.js";
+export type { ErrorPhase, ErrorSeverity, ErrorTelemetryHook } from '@openelement/protocol/errors';
+export { createSsrContext, extractParams, parseQuery } from "./context.js";
+export { renderSsrError, wrapInDocument } from "./html-escape.js";
+export { createIsrCacheKey, isIsrRouteConfig, MemoryIsrCache } from "./isr.js";
+export type { CacheAdapter, CacheEntry, IsrCacheEntry, IsrCacheResult, IsrCacheState, IsrRouteConfig } from '@openelement/protocol/isr';
+export { findIsrManifestEntry, renderIsrResponse } from "./isr-runtime.js";
+export type { IsrRuntimeOptions, IsrRuntimeRenderContext, IsrRuntimeRenderResult, IsrRuntimeResult, IsrRuntimeState } from "./isr-runtime.js";
+export { StyleSheet } from "./style-sheet.js";
+export type { StyleSheetLike, StyleSheetRule } from '@openelement/protocol/style-sheet';
+export { bindHydrateEvents } from "./dsd-hydration-events.js";
+export type { Constructor, DsdHydration } from "./dsd-hydration.js";
+export { createRenderDsdStreamMetrics, renderDsd, renderDsdStream } from "./render-dsd.js";
+export type { RenderDsdOptions } from "./render-dsd.js";
+export type { RenderDsdStreamChunk, RenderDsdStreamComponent, RenderDsdStreamMetrics, RenderDsdStreamOptions } from "./render-dsd-stream.js";
+export { camelToKebab, serializeAttrs } from "./render-ir.js";
+export type { DomSimulationAttempt, DomSimulationReport, DsdBuildReport, DsdComponent, DsdComponentConstructor, DsdHydrationHintSummary, DsdHydrationStrategySummary, DsdMetricsSummary, DsdOptions, DsdPageDiagnostics, DsdRenderMetrics, HydrationHint, IsrRouteRecord, ManifestDecision, RendererProtocol, RenderErrorCode, RenderHooks, RenderInput, RenderOutput, RenderPhase, SsrAdmissionDecision } from '@openelement/protocol/render';
+export type { OpenElementAttribute, OpenElementCssPart, OpenElementCssProperty, OpenElementDeclaration, OpenElementEvent, OpenElementExport, OpenElementExtensions, OpenElementMember, OpenElementModule, OpenElementPackageExtensions, OpenElementPackageManifest, OpenElementSlot } from '@openelement/protocol/manifest';
+export type { CemCompatibilityReport, CompatibilityClassification, CompatibilityTier, ManifestValidationReport, ValidatedTag, ValidationDiagnostic } from '@openelement/protocol/manifest';
+export { escapeAttr, escapeAttrValue, escapeHtml } from "./html-escape.js";
+export { isSignalLike, unwrapSignalLike } from '@openelement/signal';
+export type { SignalLike, Unsubscribe } from '@openelement/protocol/signal';
+export { consumeContext, type Context, createContext, provideContext } from "./signal-context.js";
+export { createLogger } from "./logger.js";
+/** @internal — use @openelement/core/security subpath */ export { DANGEROUS_KEYS } from "./security.js";
+export { isValidTagName } from "./tag-utils.js";
+export { bindSsrProps, defineCustomElement, defineIsland, getIslandMeta, getSsrProps } from "./island.js";
+export type { IslandMeta, IslandOptions } from '@openelement/protocol/island';
+export { transformIslandSource } from "./island-transform.js";
+export type { IslandTransformOptions, IslandTransformResult } from '@openelement/protocol/island';
+export { applyBindingDescriptor } from "./binding-activation.js";
+export type { BindingDescriptor, BindingDispose, BindingLifecycle } from "./binding-descriptor.js";
+export type { Action, ActionContext, DataAdapter, Loader, LoaderContext } from '@openelement/protocol/data';
+export { clear as clearRegistry, generateIndex, getAll as getAllManifests, getByTagName, register as registerManifest, validate as validateManifest } from "./registry.js";
+export type { VNode } from '@openelement/protocol/vnode';
+export { isVNode } from "./vnode.js";
+export { Fragment, trustedHtml } from "./jsx-runtime.js";
+export { renderToDom } from "./jsx-render-dom.js";
+export { renderDsdTree } from "./render-ir.js";
+export { collectEventBindings, createEventMarkerContext, type EventBindingRecord, type EventMarkerContext, eventMarkerId, eventTypeFromProp, hydrateEventMarkers, serializeEventMarkers } from "./event-hydration.js";
+export { disposeStaticProps, handleStaticPropAttributeChange, initializeStaticProps, registerStaticObservedAttributes, syncStaticPropsFromAttributes, unwrap } from "./prop.js";
+export type { NormalizedPropDecl, PropDecl, PropDeclFull, PropDeclShorthand, PropsFrom, PropType } from '@openelement/protocol/prop';

package/src/index.js

@@ -0,0 +1,46 @@
+/**
+ * @openelement/core - Pure runtime.
+ *
+ * openElement is a static-first framework with a pure runtime core:
+ * - Zero node:* imports - no filesystem, no process, no path
+ * - Zero Vite dependency - no Plugin, no build orchestration
+ * - Zero npm: specifiers - works in Deno, Node, Bun, Edge
+ * - Pure Web Standard: URL, fetch, import.meta.url, console
+ *
+ * Rendering: DSD (Declarative Shadow DOM) string concatenation
+ * Islands: Custom Element registration + prop deserialization
+ *
+ * Build orchestration (Vite plugins) lives in @openelement/adapter-vite.
+ * For the unified openElement() entry, use @openelement/app/vite instead.
+ */ // --- Public API re-exports -----------------------------------------
+export { ERROR_PREFIX, ErrorCode, OpenElementError, PropValidationError, RenderError, reportError, setErrorTelemetryHook, SsrRenderError } from './errors.js';
+export { createSsrContext, extractParams, parseQuery } from './context.js';
+export { renderSsrError, wrapInDocument } from './html-escape.js';
+export { createIsrCacheKey, isIsrRouteConfig, MemoryIsrCache } from './isr.js';
+export { findIsrManifestEntry, renderIsrResponse } from './isr-runtime.js';
+export { StyleSheet } from './style-sheet.js';
+export { bindHydrateEvents } from './dsd-hydration-events.js';
+export { createRenderDsdStreamMetrics, renderDsd, renderDsdStream } from './render-dsd.js';
+export { camelToKebab, serializeAttrs } from './render-ir.js';
+export { escapeAttr, escapeAttrValue, escapeHtml } from './html-escape.js';
+export { // v0.24.3: Neutral signal utilities — no template dependency
+isSignalLike, unwrapSignalLike } from '@openelement/signal';
+export { consumeContext, createContext, provideContext } from './signal-context.js';
+export { createLogger } from './logger.js';
+/** @internal — use @openelement/core/security subpath */ export { DANGEROUS_KEYS } from './security.js';
+export { isValidTagName } from './tag-utils.js';
+export { bindSsrProps, defineCustomElement, defineIsland, getIslandMeta, getSsrProps } from './island.js';
+export { transformIslandSource } from './island-transform.js';
+// Unified binding layer (ADR-0109 Phase 1)
+export { applyBindingDescriptor } from './binding-activation.js';
+// WC Package Protocol (v0.17+)
+export { clear as clearRegistry, generateIndex, getAll as getAllManifests, getByTagName, register as registerManifest, validate as validateManifest } from './registry.js';
+export { isVNode } from './vnode.js';
+export { Fragment, trustedHtml } from './jsx-runtime.js';
+// Renderers
+export { renderToDom } from './jsx-render-dom.js';
+export { renderDsdTree } from './render-ir.js';
+export { collectEventBindings, createEventMarkerContext, eventMarkerId, eventTypeFromProp, hydrateEventMarkers, serializeEventMarkers } from './event-hydration.js';
+// static props runtime + Signal unwrap
+export { disposeStaticProps, handleStaticPropAttributeChange, initializeStaticProps, registerStaticObservedAttributes, syncStaticPropsFromAttributes, unwrap } from './prop.js';
+//# sourceMappingURL=data:application/json;base64,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

package/src/island-transform.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @openelement/core — Island transform core logic.
+ *
+ * Pure function: injects island metadata markers into source code.
+ * Zero Vite dependency. Usable with any build tool.
+ */ import type { IslandTransformOptions, IslandTransformResult } from '@openelement/protocol/island';
+export type { IslandTransformOptions, IslandTransformResult };
+/**
+ * Inject island metadata markers into source code.
+ *
+ * Only transforms files inside the islands directory.
+ * Tag names must be lowercase + hyphens (Custom Elements spec).
+ * Unsafe characters cause a thrown error.
+ */ export declare function transformIslandSource(source: string, options: IslandTransformOptions): IslandTransformResult;

package/src/island-transform.js

@@ -0,0 +1,60 @@
+/**
+ * @openelement/core — Island transform core logic.
+ *
+ * Pure function: injects island metadata markers into source code.
+ * Zero Vite dependency. Usable with any build tool.
+ */ /**
+ * Inject island metadata markers into source code.
+ *
+ * Only transforms files inside the islands directory.
+ * Tag names must be lowercase + hyphens (Custom Elements spec).
+ * Unsafe characters cause a thrown error.
+ */ export function transformIslandSource(source, options) {
+  const { islandsDir, filePath } = options;
+  // Normalize to forward slashes and ensure leading slash for reliable matching
+  let normalizedPath = filePath.replace(/\\/g, '/');
+  if (!normalizedPath.startsWith('/')) {
+    normalizedPath = '/' + normalizedPath;
+  }
+  const normalizedIslandsDir = islandsDir.replace(/\\/g, '/');
+  // Only transform files in the islands directory
+  if (!normalizedPath.includes(`/${normalizedIslandsDir}/`)) {
+    return {
+      code: source,
+      islands: []
+    };
+  }
+  // Extract tag name from file path: replace path separators with hyphens
+  // matching route-scanner.ts fileToTagName() behavior.
+  // e.g. "nested/my-widget.tsx" → "my-widget", "my-widget.tsx" → "my-widget"
+  const relativePath = normalizedPath.split(`/${islandsDir}/`)[1] ?? normalizedPath.split('/').pop();
+  const tagName = relativePath.replace(/\.(tsx?|jsx?)$/, '').replace(/[/\\]/g, '-').toLowerCase();
+  // Validate tag name (must contain a hyphen for Custom Elements)
+  if (!tagName.includes('-')) {
+    return {
+      code: source,
+      islands: []
+    };
+  }
+  // Security: only allow lowercase letters, digits, and hyphens
+  if (!/^[a-z0-9-]+$/.test(tagName)) {
+    throw new Error(`Island tag name "${tagName}" contains unsafe characters. ` + `Only lowercase letters, digits, and hyphens are allowed.`);
+  }
+  // Inject metadata markers
+  const injected = `
+// --- Island Markers (auto-injected) ---
+export const __island = true;
+export const __tagName = '${tagName}';
+// --- End Island Markers ---
+`;
+  return {
+    code: source + '\n' + injected,
+    islands: [
+      {
+        tagName,
+        filePath
+      }
+    ]
+  };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/src/island.d.ts

@@ -0,0 +1,59 @@
+import type { IslandMeta, IslandOptions } from '@openelement/protocol/island';
+/**
+ * SSR-safe custom element registration helper.
+ * v0.29.1: Merged from custom-element.ts.
+ */ export declare function defineCustomElement(tag: string, ctor: CustomElementConstructor): void;
+export declare function getIslandMeta(ctor: CustomElementConstructor): IslandMeta | undefined;
+/**
+ * Get the value of the data-ssr-props attribute from a host element.
+ * Used to reconstruct SSR props on client upgrade.
+ *
+ * @param el - The custom element host element
+ * @returns Parsed props object, or null if no data-ssr-props attribute
+ *
+ * @example
+ * ```ts
+ * connectedCallback() {
+ *   super.connectedCallback();
+ *   const props = getSsrProps(this);
+ *   if (props) {
+ *     this.count = props.count ?? 0;
+ *   }
+ * }
+ * ```
+ */ export declare function getSsrProps(el: HTMLElement): Record<string, unknown> | null;
+export declare function bindSsrProps(el: HTMLElement): void;
+/**
+ * Wrap a component class as a openElement Island.
+ *
+ * Handles:
+ *   - Automatic customElements.define() registration
+ *   - Strategy-based upgrade timing
+ *   - data-ssr-props binding (open:bind)
+ *   - __island / __tagName export markers
+ *   - __layer metadata (dsd-static, dsd-interactive, or pure-island)
+ *   - Idempotent registration (safe for SSR with multiple routes)
+ *
+ * v0.6.2: Added `dsd` option. When false, the island is a Pure Island
+ * (Layer 3) - no DSD template is emitted, framework fully owns shadow root.
+ *
+ * @param tagName - Custom element tag name (must contain hyphen)
+ * @param componentClass - Custom Element constructor (framework-agnostic)
+ * @param options - Island options
+ * @returns The component class (for chaining / re-export)
+ *
+ * @example
+ * ```ts
+ * // Basic usage (DSD enabled by default)
+ * export default defineIsland('my-counter', MyCounter);
+ *
+ * // Pure Island - no DSD, full framework reactivity
+ * export default defineIsland('my-counter', MyCounter, { dsd: false });
+ *
+ * // With visible strategy (IntersectionObserver)
+ * export default defineIsland('my-counter', MyCounter, { strategy: 'visible' });
+ *
+ * // With load strategy (immediate upgrade)
+ * export default defineIsland('my-counter', MyCounter, { strategy: 'load' });
+ * ```
+ */ export declare function defineIsland<T extends CustomElementConstructor>(tagName: string, componentClass: T, options?: IslandOptions): T;