@solidjs/web 2.0.0-rc.4 → 2.0.0-rc.6

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@solidjs/web",
   "description": "Solid's web runtime: client rendering, hydration, SSR, and DOM-specific control flow (Portal, Dynamic).",
-  "version": "2.0.0-rc.4",
+  "version": "2.0.0-rc.6",
   "author": "Ryan Carniato",
   "license": "MIT",
   "homepage": "https://solidjs.com",
@@ -398,7 +398,7 @@
     "seroval-plugins": "~1.5.4"
   },
   "peerDependencies": {
-    "solid-js": "^2.0.0-rc.4"
+    "solid-js": "^2.0.0-rc.6"
   },
   "devDependencies": {
     "@codspeed/vitest-plugin": "^5.4.0",

package/serialization/dist/decode.cjs

@@ -85,12 +85,14 @@ const JSON_CODEC_DEPTH_LIMIT = 64;
 function resolveCodecOptions({
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 } = {}) {
   return {
     plugins: resolveSerializerPlugins(plugins),
     disabledFeatures: disabledFeatures === undefined ? JSON_CODEC_DISABLED_FEATURES : disabledFeatures,
-    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit
+    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit,
+    serializeErrorStacks
   };
 }
 function createJSONDeserializer(options) {

package/serialization/dist/decode.js

@@ -83,12 +83,14 @@ const JSON_CODEC_DEPTH_LIMIT = 64;
 function resolveCodecOptions({
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 } = {}) {
   return {
     plugins: resolveSerializerPlugins(plugins),
     disabledFeatures: disabledFeatures === undefined ? JSON_CODEC_DISABLED_FEATURES : disabledFeatures,
-    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit
+    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit,
+    serializeErrorStacks
   };
 }
 function createJSONDeserializer(options) {

package/serialization/dist/serialization.cjs

@@ -85,12 +85,14 @@ const JSON_CODEC_DEPTH_LIMIT = 64;
 function resolveCodecOptions({
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 } = {}) {
   return {
     plugins: resolveSerializerPlugins(plugins),
     disabledFeatures: disabledFeatures === undefined ? JSON_CODEC_DISABLED_FEATURES : disabledFeatures,
-    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit
+    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit,
+    serializeErrorStacks
   };
 }
 function createJSONDeserializer(options) {
@@ -133,7 +135,7 @@ function createJSONDataTable(options) {
 }
 
 const DEFAULT_DISABLED_FEATURES = seroval.Feature.AggregateError | seroval.Feature.BigIntTypedArray;
-const serializeOnlyDisabledFeatures = () => process.env.NODE_ENV === "development" ? 0 : seroval.Feature.ErrorPrototypeStack;
+const serializeOnlyDisabledFeatures = serializeErrorStacks => (serializeErrorStacks === undefined ? process.env.NODE_ENV === "development" : serializeErrorStacks) ? 0 : seroval.Feature.ErrorPrototypeStack;
 const HYDRATION_GLOBAL = "_$HY.r";
 const createPlugin = seroval.createPlugin;
 const OpaqueReference = seroval.OpaqueReference;
@@ -141,7 +143,7 @@ function createSerializer(options) {
   return new seroval.Serializer({
     ...options,
     plugins: resolveSerializerPlugins(options.plugins),
-    disabledFeatures: (options.disabledFeatures === undefined ? DEFAULT_DISABLED_FEATURES : options.disabledFeatures) | serializeOnlyDisabledFeatures()
+    disabledFeatures: (options.disabledFeatures === undefined ? DEFAULT_DISABLED_FEATURES : options.disabledFeatures) | serializeOnlyDisabledFeatures(options.serializeErrorStacks)
   });
 }
 function createHydrationSerializer({
@@ -175,7 +177,7 @@ function serializeJSON(value, {
     onDone,
     onError,
     ...resolved,
-    disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures()
+    disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(resolved.serializeErrorStacks)
   });
 }
 function createJSONSerializer({
@@ -184,12 +186,14 @@ function createJSONSerializer({
   onError,
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 }) {
   const resolved = resolveCodecOptions({
     plugins,
     disabledFeatures,
-    depthLimit
+    depthLimit,
+    serializeErrorStacks
   });
   const refs = new Map();
   const cancels = new Set();
@@ -211,7 +215,7 @@ function createJSONSerializer({
       const stream = seroval.toCrossJSONStream(value, {
         refs,
         plugins: resolved.plugins,
-        disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(),
+        disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(resolved.serializeErrorStacks),
         onParse(node, initial) {
           onData({
             key,

package/serialization/dist/serialization.js

@@ -83,12 +83,14 @@ const JSON_CODEC_DEPTH_LIMIT = 64;
 function resolveCodecOptions({
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 } = {}) {
   return {
     plugins: resolveSerializerPlugins(plugins),
     disabledFeatures: disabledFeatures === undefined ? JSON_CODEC_DISABLED_FEATURES : disabledFeatures,
-    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit
+    depthLimit: depthLimit === undefined ? JSON_CODEC_DEPTH_LIMIT : depthLimit,
+    serializeErrorStacks
   };
 }
 function createJSONDeserializer(options) {
@@ -131,7 +133,7 @@ function createJSONDataTable(options) {
 }
 
 const DEFAULT_DISABLED_FEATURES = Feature.AggregateError | Feature.BigIntTypedArray;
-const serializeOnlyDisabledFeatures = () => process.env.NODE_ENV === "development" ? 0 : Feature.ErrorPrototypeStack;
+const serializeOnlyDisabledFeatures = serializeErrorStacks => (serializeErrorStacks === undefined ? process.env.NODE_ENV === "development" : serializeErrorStacks) ? 0 : Feature.ErrorPrototypeStack;
 const HYDRATION_GLOBAL = "_$HY.r";
 const createPlugin = createPlugin$1;
 const OpaqueReference = OpaqueReference$1;
@@ -139,7 +141,7 @@ function createSerializer(options) {
   return new Serializer({
     ...options,
     plugins: resolveSerializerPlugins(options.plugins),
-    disabledFeatures: (options.disabledFeatures === undefined ? DEFAULT_DISABLED_FEATURES : options.disabledFeatures) | serializeOnlyDisabledFeatures()
+    disabledFeatures: (options.disabledFeatures === undefined ? DEFAULT_DISABLED_FEATURES : options.disabledFeatures) | serializeOnlyDisabledFeatures(options.serializeErrorStacks)
   });
 }
 function createHydrationSerializer({
@@ -173,7 +175,7 @@ function serializeJSON(value, {
     onDone,
     onError,
     ...resolved,
-    disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures()
+    disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(resolved.serializeErrorStacks)
   });
 }
 function createJSONSerializer({
@@ -182,12 +184,14 @@ function createJSONSerializer({
   onError,
   plugins,
   disabledFeatures,
-  depthLimit
+  depthLimit,
+  serializeErrorStacks
 }) {
   const resolved = resolveCodecOptions({
     plugins,
     disabledFeatures,
-    depthLimit
+    depthLimit,
+    serializeErrorStacks
   });
   const refs = new Map();
   const cancels = new Set();
@@ -209,7 +213,7 @@ function createJSONSerializer({
       const stream = toCrossJSONStream(value, {
         refs,
         plugins: resolved.plugins,
-        disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(),
+        disabledFeatures: resolved.disabledFeatures | serializeOnlyDisabledFeatures(resolved.serializeErrorStacks),
         onParse(node, initial) {
           onData({
             key,

package/serialization/types/index.d.ts

@@ -19,6 +19,13 @@ export interface WebSerializerOptions {
      * any override — serialized stacks leak server paths to the client.
      */
     disabledFeatures?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack`. Defaults to
+     * `NODE_ENV === "development"`; set `false` to pin production disclosure
+     * to the deployment rather than the ambient variable (#3152 — see
+     * `JSONCodecOptions.serializeErrorStacks`).
+     */
+    serializeErrorStacks?: boolean;
     /** Extra plugins, composed ahead of `DEFAULT_WEB_PLUGINS`. */
     plugins?: SerializerPlugin[];
     /** Receives each emitted script chunk. */

package/serialization/types/serializer-decode.d.ts

@@ -105,6 +105,18 @@ export interface JSONCodecOptions {
     disabledFeatures?: number;
     /** Maximum parse/deserialize depth. Defaults to 64. Must match on both peers. */
     depthLimit?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack` — server file paths,
+     * internal function names, the shape of the deployment — to the peer.
+     * Defaults to `NODE_ENV === "development"`, but that signal describes the
+     * PROCESS, not the artifact: a production build running with
+     * `NODE_ENV=development` (a base image, a stray dotenv) ships stacks to
+     * the wire — including for errors marked safe with `markSafeError`, whose
+     * stacks traverse application code (#3152). Set `false` to pin production
+     * disclosure regardless of the ambient variable. Encode-side only; the
+     * decode side is always permissive, so it need not match peers.
+     */
+    serializeErrorStacks?: boolean;
 }
 /**
  * A resident, response-scoped decode table over the keyed JSON codec: apply
@@ -142,10 +154,11 @@ export declare const DEFAULT_WEB_PLUGINS: any; /**
  * Integration-facing; may change (see the entry banner).
  */
 export declare function resolveSerializerPlugins(customPlugins?: SerializerPlugin[]): SerializerPlugin[];
-export declare function resolveCodecOptions({ plugins, disabledFeatures, depthLimit }?: JSONCodecOptions): {
+export declare function resolveCodecOptions({ plugins, disabledFeatures, depthLimit, serializeErrorStacks }?: JSONCodecOptions): {
     plugins: SerializerPlugin<any, any>[];
     disabledFeatures: any;
     depthLimit: number;
+    serializeErrorStacks: boolean;
 }; /**
  * Creates the decoding counterpart of `serializeJSON`. Cross-references
  * between chunks resolve through state shared across calls, so all chunks

package/serialization/types/serializer.d.ts

@@ -19,6 +19,13 @@ export interface WebSerializerOptions {
      * any override — serialized stacks leak server paths to the client.
      */
     disabledFeatures?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack`. Defaults to
+     * `NODE_ENV === "development"`; set `false` to pin production disclosure
+     * to the deployment rather than the ambient variable (#3152 — see
+     * `JSONCodecOptions.serializeErrorStacks`).
+     */
+    serializeErrorStacks?: boolean;
     /** Extra plugins, composed ahead of `DEFAULT_WEB_PLUGINS`. */
     plugins?: SerializerPlugin[];
     /** Receives each emitted script chunk. */

package/serialization/types-cjs/index.d.cts

@@ -19,6 +19,13 @@ export interface WebSerializerOptions {
      * any override — serialized stacks leak server paths to the client.
      */
     disabledFeatures?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack`. Defaults to
+     * `NODE_ENV === "development"`; set `false` to pin production disclosure
+     * to the deployment rather than the ambient variable (#3152 — see
+     * `JSONCodecOptions.serializeErrorStacks`).
+     */
+    serializeErrorStacks?: boolean;
     /** Extra plugins, composed ahead of `DEFAULT_WEB_PLUGINS`. */
     plugins?: SerializerPlugin[];
     /** Receives each emitted script chunk. */

package/serialization/types-cjs/serializer-decode.d.cts

@@ -105,6 +105,18 @@ export interface JSONCodecOptions {
     disabledFeatures?: number;
     /** Maximum parse/deserialize depth. Defaults to 64. Must match on both peers. */
     depthLimit?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack` — server file paths,
+     * internal function names, the shape of the deployment — to the peer.
+     * Defaults to `NODE_ENV === "development"`, but that signal describes the
+     * PROCESS, not the artifact: a production build running with
+     * `NODE_ENV=development` (a base image, a stray dotenv) ships stacks to
+     * the wire — including for errors marked safe with `markSafeError`, whose
+     * stacks traverse application code (#3152). Set `false` to pin production
+     * disclosure regardless of the ambient variable. Encode-side only; the
+     * decode side is always permissive, so it need not match peers.
+     */
+    serializeErrorStacks?: boolean;
 }
 /**
  * A resident, response-scoped decode table over the keyed JSON codec: apply
@@ -142,10 +154,11 @@ export declare const DEFAULT_WEB_PLUGINS: any; /**
  * Integration-facing; may change (see the entry banner).
  */
 export declare function resolveSerializerPlugins(customPlugins?: SerializerPlugin[]): SerializerPlugin[];
-export declare function resolveCodecOptions({ plugins, disabledFeatures, depthLimit }?: JSONCodecOptions): {
+export declare function resolveCodecOptions({ plugins, disabledFeatures, depthLimit, serializeErrorStacks }?: JSONCodecOptions): {
     plugins: SerializerPlugin<any, any>[];
     disabledFeatures: any;
     depthLimit: number;
+    serializeErrorStacks: boolean;
 }; /**
  * Creates the decoding counterpart of `serializeJSON`. Cross-references
  * between chunks resolve through state shared across calls, so all chunks

package/serialization/types-cjs/serializer.d.cts

@@ -19,6 +19,13 @@ export interface WebSerializerOptions {
      * any override — serialized stacks leak server paths to the client.
      */
     disabledFeatures?: number;
+    /**
+     * Whether serialized `Error`s carry their `.stack`. Defaults to
+     * `NODE_ENV === "development"`; set `false` to pin production disclosure
+     * to the deployment rather than the ambient variable (#3152 — see
+     * `JSONCodecOptions.serializeErrorStacks`).
+     */
+    serializeErrorStacks?: boolean;
     /** Extra plugins, composed ahead of `DEFAULT_WEB_PLUGINS`. */
     plugins?: SerializerPlugin[];
     /** Receives each emitted script chunk. */