@voltro/web 0.51.0 → 0.52.0

package/dist/ssr.d.ts

@@ -7,6 +7,7 @@ import { ProcedureTypeMap } from '@voltro/client';
 import { ReactNode } from 'react';
 import { seedPreloadedSubscription } from '@voltro/client';
 import { seedPreloadedSubscriptionFailure } from '@voltro/client';
+import { ServerRequestContextValue } from '@voltro/client';
 import { StoreSeed } from '@voltro/client';
 import { StoreSeedBag } from '@voltro/client';
 
@@ -571,6 +572,11 @@ export declare interface RenderPageStreamOptions extends RenderPageOptions {
     /** Bootstrap `<script>` module URLs injected by React at the end of the
      *  shell — the client bundle that hydrates the streamed HTML. */
     readonly bootstrapModules?: ReadonlyArray<string>;
+    /** Per-request CSP nonce — React stamps it onto every script IT emits
+     *  (bootstrap modules, Suspense settle scripts). The shell's own tags are
+     *  stamped by the CLI's `stampScriptNonce`; the POLICY header is the
+     *  middleware's (plan 08 §7). */
+    readonly nonce?: string;
 }
 
 export declare interface RenderPageStreamResult {
@@ -726,16 +732,6 @@ export { seedPreloadedSubscriptionFailure }
  */
 export declare const serialiseStateForInlining: (state: unknown) => string;
 
-declare interface ServerRequestContextValue {
-    readonly cookies: Readonly<Record<string, string>>;
-    readonly headers: Readonly<Record<string, string>>;
-    /** Raw request URL as it came off the wire (path + query). Useful
-     *  for SSR pages that need to read `?q=…` style search params
-     *  without touching anything client-only. Empty string for build-
-     *  time SSG renders where there is no incoming request. */
-    readonly url: string;
-}
-
 /**
  * Run one request's render with a fresh seed bag; return what it collected
  * alongside the render's own result.

package/dist/ssr.js

@@ -1,8 +1,8 @@
-import { s as e } from "./defaultFallbacks-B4Ak-R6R.js";
+import { s as e } from "./defaultFallbacks-SQ45vAhz.js";
 import { _ as t, a as n, g as r, m as i, n as a, p as o, s, t as c } from "./routerState-DAT472IC.js";
-import { E as l, c as u, d, l as f, r as p, t as m, w as h } from "./serverContext-38JTbYPa.js";
-import { createElement as g } from "react";
-import { makePreloadSeedBag as _, makeStoreSeedBag as v, seedPreloadedSubscription as y, seedPreloadedSubscriptionFailure as b, setPreloadSeedResolver as x, setStoreSeedResolver as S } from "@voltro/client";
+import { C as l, a as u, c as d, o as f, t as p, x as m } from "./serverContext-CzmZZwuQ.js";
+import { createElement as h } from "react";
+import { ServerRequestContext as g, makePreloadSeedBag as _, makeStoreSeedBag as v, seedPreloadedSubscription as y, seedPreloadedSubscriptionFailure as b, setPreloadSeedResolver as x, setStoreSeedResolver as S } from "@voltro/client";
 import { renderToPipeableStream as C, renderToString as w } from "react-dom/server";
 import { AsyncLocalStorage as T } from "node:async_hooks";
 //#region src/storeSeedScope.ts
@@ -34,13 +34,13 @@ var D = async (e) => {
 		preloadSeeds: r
 	});
 }, M = (e, t, n, r, i) => {
-	let a = g(u.Provider, { value: i ? n : f }, g(e));
+	let a = h(u.Provider, { value: i ? n : f }, h(e));
 	if (!t) return a;
 	for (let e = t.length - 1; e >= 0; e--) {
 		let n = t[e];
 		if (n.Layout) {
 			let t = n.Layout;
-			a = g(u.Provider, { value: n.loader === void 0 ? f : r(e) }, g(t, { children: a }));
+			a = h(u.Provider, { value: n.loader === void 0 ? f : r(e) }, h(t, { children: a }));
 		}
 	}
 	return a;
@@ -58,11 +58,11 @@ var D = async (e) => {
 		blocked: null
 	}, y = p ? d : n.Component;
 	if (!y) throw Error(`SSR received a descriptor with no Component for "${i}". Lazy page routes are a client-only optimization and must not be used on the server.`);
-	let b = h(v, M(y, n.chain, p ? void 0 : o, (e) => s?.[e], !p && n.loader !== void 0));
-	return b = g(e, {
+	let b = m(v, M(y, n.chain, p ? void 0 : o, (e) => s?.[e], !p && n.loader !== void 0));
+	return b = h(e, {
 		chrome: null,
 		children: b
-	}), c && (b = g(m.Provider, { value: c }, b)), u && (b = u(b)), {
+	}), c && (b = h(g.Provider, { value: c }, b)), u && (b = u(b)), {
 		tree: b,
 		meta: _
 	};
@@ -77,6 +77,7 @@ var D = async (e) => {
 	return {
 		stream: C(t, {
 			...e.bootstrapModules ? { bootstrapModules: [...e.bootstrapModules] } : {},
+			...e.nonce === void 0 ? {} : { nonce: e.nonce },
 			...e.onShellReady ? { onShellReady: e.onShellReady } : {},
 			...e.onShellError ? { onShellError: e.onShellError } : {},
 			...e.onAllReady ? { onAllReady: e.onAllReady } : {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/web",
-  "version": "0.51.0",
+  "version": "0.52.0",
   "description": "The Voltro web framework — file-based routing, render modes (SSR / SSG / islands), the page-export contract, data hooks, and the browser mount.",
   "keywords": [
     "voltro",
@@ -48,7 +48,12 @@
       "import": "./dist/middleware.js",
       "default": "./dist/middleware.js"
     },
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./islands": {
+      "types": "./dist/islands.d.ts",
+      "import": "./dist/islands.js",
+      "default": "./dist/islands.js"
+    }
   },
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -58,8 +63,8 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/client": "0.51.0",
-    "@voltro/ui": "0.51.0"
+    "@voltro/client": "0.52.0",
+    "@voltro/ui": "0.52.0"
   },
   "peerDependencies": {
     "@effect/platform": "^0.97.0",

package/dist/globalContext-d4A-ugDg.js

@@ -1,10 +0,0 @@
-import { createContext as e } from "react";
-//#region src/globalContext.ts
-var t = (t, n) => {
-	let r = globalThis, i = Symbol.for(`@voltro/web/context:${t}`), a = r[i];
-	if (a) return a;
-	let o = e(n);
-	return r[i] = o, o;
-};
-//#endregion
-export { t };

package/dist/mount-nudb4UCl.js

@@ -1,81 +0,0 @@
-import { t as e } from "./frameworkBoot-CV_o2tIk.js";
-import { o as t, r as n, t as r } from "./routerState-DAT472IC.js";
-import { StrictMode as i, createElement as a } from "react";
-import { createRoot as o, hydrateRoot as s } from "react-dom/client";
-import { applyPreloadSeeds as c, applyStoreSeeds as l } from "@voltro/client";
-import { jsx as u } from "react/jsx-runtime";
-//#region src/islands.tsx
-var d = /* @__PURE__ */ new Map(), f = (e, t) => {
-	d.set(t.name, e);
-	let n = t.hydrate ?? "visible", r = (r) => a("div", {
-		"data-voltro-island": "",
-		"data-island-name": t.name,
-		"data-island-hydrate": n,
-		"data-island-props": m(r)
-	}, a(e, r));
-	return r.displayName = `Island(${t.name})`, r;
-}, p = (e) => d.get(e), m = (e) => JSON.stringify(e ?? {}).replace(/</g, "\\u003c"), h = (e) => {
-	if (!e) return {};
-	try {
-		return JSON.parse(e);
-	} catch {
-		return {};
-	}
-}, g = () => {
-	let e = document.querySelectorAll("[data-voltro-island]:not([data-voltro-hydrated])");
-	for (let t of e) {
-		let e = t.dataset.islandName ?? "", n = d.get(e);
-		if (!n) {
-			console.warn(`[voltro] island "${e}" referenced in DOM but not registered. Did the island file get imported in this bundle?`);
-			continue;
-		}
-		let r = h(t.dataset.islandProps ?? null), i = t.dataset.islandHydrate ?? "visible";
-		t.setAttribute("data-voltro-hydrated", "pending");
-		let o = () => {
-			t.getAttribute("data-voltro-hydrated") !== "done" && (t.setAttribute("data-voltro-hydrated", "done"), s(t, a(n, r)));
-		};
-		if (i === "load") o();
-		else if (i === "idle") {
-			let e = globalThis.requestIdleCallback;
-			e ? e(o) : setTimeout(o, 0);
-		} else if (i === "visible") {
-			let e = new IntersectionObserver((t) => {
-				t.some((e) => e.isIntersecting) && (e.disconnect(), o());
-			}, { rootMargin: "64px" });
-			e.observe(t);
-		} else if (i === "interaction") {
-			let e = () => {
-				t.removeEventListener("pointerdown", e), t.removeEventListener("keydown", e), o();
-			};
-			t.addEventListener("pointerdown", e, { passive: !0 }), t.addEventListener("keydown", e);
-		}
-	}
-}, _ = () => !1, v = "__voltroIslandsBundleNoticeShown", y = (e) => {
-	if (!e) return;
-	let t = globalThis;
-	t[v] !== !0 && (t[v] = !0, console.info("[voltro] islands mode: hydration is scoped to this page's islands, but the JS payload is NOT reduced — the full app bundle is still downloaded and evaluated. Islands buy CPU, not bytes, today. See the \"Render modes\" docs page."));
-}, b = (e) => `${window.location.protocol === "https:" ? "wss:" : "ws:"}//${window.location.host}/ws/${e}`, x = (a, d) => {
-	let f = document.getElementById(d.rootId ?? "root");
-	if (!f) throw Error(`@voltro/web: no #${d.rootId ?? "root"} element in the document`);
-	let p = Object.entries(d.apis).map(([e, t]) => ({
-		name: e,
-		group: t.group,
-		descriptors: t.descriptors ?? {},
-		wsUrl: t.wsUrl ?? b(e),
-		headers: t.headers
-	})), m = document.getElementById(r), h = n(m?.textContent, window.location.pathname), v = h !== null && f.children.length > 0, x = document.querySelector("meta[name=\"voltro-interactive\"]")?.getAttribute("content") ?? "full";
-	if (x === "none") return;
-	if (x === "islands") {
-		y(_()), g();
-		return;
-	}
-	v && t(h), l(h?.storeSeeds), c(h?.preloadSeeds);
-	let S = /* @__PURE__ */ u(i, { children: /* @__PURE__ */ u(e, {
-		App: a,
-		apis: p,
-		...d.Devtools ? { Devtools: d.Devtools } : {}
-	}) });
-	v ? s(f, S) : o(f).render(S);
-};
-//#endregion
-export { f as a, g as i, y as n, p as r, x as t };