@stacksjs/stx 0.2.155 → 0.2.156

package/dist/types/context-types.d.ts

@@ -1,14 +1,22 @@
+/**
+ * Context Types - Typed interfaces for template context objects
+ */
 import type { StxOptions } from './config-types';
 /**
  * Loop context object available within @foreach loops
  * Provides iteration metadata for template logic
  */
-export declare interface LoopContext {
-  index: number
-  iteration: number
-  first: boolean
-  last: boolean
-  count: number
+export interface LoopContext {
+    /** Current zero-based index */
+    index: number;
+    /** Current one-based iteration count */
+    iteration: number;
+    /** Whether this is the first iteration */
+    first: boolean;
+    /** Whether this is the last iteration */
+    last: boolean;
+    /** Total number of items in the array */
+    count: number;
 }
 /**
  * Authentication context for @auth, @guest, @can directives
@@ -22,9 +30,11 @@ export declare interface LoopContext {
  * }
  * ```
  */
-export declare interface AuthContext {
-  check: boolean
-  user: Record<string, unknown> | null
+export interface AuthContext {
+    /** Whether the user is authenticated */
+    check: boolean;
+    /** User object (null if not authenticated) */
+    user: Record<string, unknown> | null;
 }
 /**
  * Permissions context for @can, @cannot directives
@@ -39,30 +49,42 @@ export declare interface AuthContext {
  * }
  * ```
  */
-export declare interface PermissionsContext {
-  check: (ability: string, type?: string, id?: unknown) => boolean
+export interface PermissionsContext {
+    /** Function to check if user has a specific permission */
+    check: (ability: string, type?: string, id?: unknown) => boolean;
 }
 /**
  * Translation context for @translate, @t directives
  */
-export declare interface TranslationContext {
-  [locale: string]: Record<string, string>
+export interface TranslationContext {
+    /** Translation lookup object keyed by locale */
+    [locale: string]: Record<string, string>;
 }
 /**
  * Base template context with common properties
  * Extend this interface for specific template contexts
  */
-export declare interface BaseTemplateContext {
-  auth?: AuthContext
-  permissions?: PermissionsContext
-  userCan?: Record<string, boolean>
-  __translations?: TranslationContext
-  __sections?: Record<string, string>
-  __stx_options?: StxOptions
-  loop?: LoopContext
-  $loop?: LoopContext
-  slot?: string
-  [key: string]: unknown
+export interface BaseTemplateContext {
+    /** Authentication context (optional) */
+    auth?: AuthContext;
+    /** Permissions context (optional) */
+    permissions?: PermissionsContext;
+    /** User permissions map for simple boolean checks */
+    userCan?: Record<string, boolean>;
+    /** Translations for i18n */
+    __translations?: TranslationContext;
+    /** Internal sections storage (set by layout processing) */
+    __sections?: Record<string, string>;
+    /** Internal stx options reference */
+    __stx_options?: StxOptions;
+    /** Loop context (available within @foreach) */
+    loop?: LoopContext;
+    /** Alias for loop context to avoid conflicts with user variables */
+    $loop?: LoopContext;
+    /** Slot content for components */
+    slot?: string;
+    /** Allow additional properties */
+    [key: string]: unknown;
 }
 /**
  * Template context type alias for backward compatibility

package/dist/types/csp-types.d.ts

@@ -1,78 +1,82 @@
+/**
+ * Content Security Policy Types
+ */
+/**
+ * CSP directive source values
+ * These are the standard source values that can be used in CSP directives
+ */
+export type CspSourceValue = '\'self\'' | '\'unsafe-inline\'' | '\'unsafe-eval\'' | '\'unsafe-hashes\'' | '\'strict-dynamic\'' | '\'report-sample\'' | '\'wasm-unsafe-eval\'' | '\'none\'' | 'data:' | 'blob:' | 'https:' | 'http:' | 'ws:' | 'wss:' | string;
 /**
  * Individual CSP directive configuration
  * Maps directive names to arrays of allowed sources
  */
-export declare interface CspDirectives {
-  'default-src'?: CspSourceValue[]
-  'script-src'?: CspSourceValue[]
-  'style-src'?: CspSourceValue[]
-  'img-src'?: CspSourceValue[]
-  'font-src'?: CspSourceValue[]
-  'connect-src'?: CspSourceValue[]
-  'media-src'?: CspSourceValue[]
-  'object-src'?: CspSourceValue[]
-  'frame-src'?: CspSourceValue[]
-  'worker-src'?: CspSourceValue[]
-  'child-src'?: CspSourceValue[]
-  'manifest-src'?: CspSourceValue[]
-  'form-action'?: CspSourceValue[]
-  'frame-ancestors'?: CspSourceValue[]
-  'prefetch-src'?: CspSourceValue[]
-  'navigate-to'?: CspSourceValue[]
-  'base-uri'?: CspSourceValue[]
-  'report-uri'?: string[]
-  'report-to'?: string[]
-  'upgrade-insecure-requests'?: boolean
-  'block-all-mixed-content'?: boolean
-  'sandbox'?: (
-    | 'allow-forms'
-    | 'allow-modals'
-    | 'allow-orientation-lock'
-    | 'allow-pointer-lock'
-    | 'allow-popups'
-    | 'allow-popups-to-escape-sandbox'
-    | 'allow-presentation'
-    | 'allow-same-origin'
-    | 'allow-scripts'
-    | 'allow-top-navigation'
-    | 'allow-top-navigation-by-user-activation'
-  )[]
-  'require-trusted-types-for'?: ('script')[]
-  'trusted-types'?: string[]
+export interface CspDirectives {
+    /** Default policy for all resource types */
+    'default-src'?: CspSourceValue[];
+    /** Valid sources for JavaScript */
+    'script-src'?: CspSourceValue[];
+    /** Valid sources for stylesheets */
+    'style-src'?: CspSourceValue[];
+    /** Valid sources for images */
+    'img-src'?: CspSourceValue[];
+    /** Valid sources for fonts */
+    'font-src'?: CspSourceValue[];
+    /** Valid sources for XHR, fetch, WebSockets */
+    'connect-src'?: CspSourceValue[];
+    /** Valid sources for media elements (audio, video) */
+    'media-src'?: CspSourceValue[];
+    /** Valid sources for object, embed, applet */
+    'object-src'?: CspSourceValue[];
+    /** Valid sources for iframes */
+    'frame-src'?: CspSourceValue[];
+    /** Valid sources for workers */
+    'worker-src'?: CspSourceValue[];
+    /** Valid sources for child contexts */
+    'child-src'?: CspSourceValue[];
+    /** Valid sources for manifests */
+    'manifest-src'?: CspSourceValue[];
+    /** Restricts URLs for form submissions */
+    'form-action'?: CspSourceValue[];
+    /** Restricts URLs which can embed this page */
+    'frame-ancestors'?: CspSourceValue[];
+    /** Restricts URLs for link prefetch/prerender */
+    'prefetch-src'?: CspSourceValue[];
+    /** Restricts URLs for navigate-to */
+    'navigate-to'?: CspSourceValue[];
+    /** Base URI for relative URLs */
+    'base-uri'?: CspSourceValue[];
+    /** URL to report CSP violations to */
+    'report-uri'?: string[];
+    /** Reporting endpoint name for CSP violations */
+    'report-to'?: string[];
+    /** Enable upgrade-insecure-requests */
+    'upgrade-insecure-requests'?: boolean;
+    /** Enable block-all-mixed-content */
+    'block-all-mixed-content'?: boolean;
+    /** Sandbox restrictions */
+    'sandbox'?: ('allow-forms' | 'allow-modals' | 'allow-orientation-lock' | 'allow-pointer-lock' | 'allow-popups' | 'allow-popups-to-escape-sandbox' | 'allow-presentation' | 'allow-same-origin' | 'allow-scripts' | 'allow-top-navigation' | 'allow-top-navigation-by-user-activation')[];
+    /** Require trusted types */
+    'require-trusted-types-for'?: ('script')[];
+    /** Trusted types policies */
+    'trusted-types'?: string[];
 }
 /**
  * CSP configuration options
  */
-export declare interface CspConfig {
-  enabled: boolean
-  reportOnly?: boolean
-  directives: CspDirectives
-  useNonce?: boolean
-  addMetaTag?: boolean
-  nonceGenerator?: () => string
+export interface CspConfig {
+    /** Enable CSP generation */
+    enabled: boolean;
+    /** Use report-only mode (Content-Security-Policy-Report-Only header) */
+    reportOnly?: boolean;
+    /** CSP directives */
+    directives: CspDirectives;
+    /** Generate nonce for inline scripts/styles */
+    useNonce?: boolean;
+    /** Add CSP as meta tag in HTML head */
+    addMetaTag?: boolean;
+    /** Custom nonce generator function */
+    nonceGenerator?: () => string;
 }
-/**
- * Content Security Policy Types
- */
-/**
- * CSP directive source values
- * These are the standard source values that can be used in CSP directives
- */
-export type CspSourceValue = | '\'self\''
-  | '\'unsafe-inline\''
-  | '\'unsafe-eval\''
-  | '\'unsafe-hashes\''
-  | '\'strict-dynamic\''
-  | '\'report-sample\''
-  | '\'wasm-unsafe-eval\''
-  | '\'none\''
-  | 'data:'
-  | 'blob:'
-  | 'https:'
-  | 'http:'
-  | 'ws:'
-  | 'wss:'
-  | string // Allow custom URLs and nonces like 'nonce-xxx' or 'sha256-xxx';
 /**
  * Preset CSP configurations for common use cases
  */