@weft-js/start 0.1.3 → 0.1.5-nightly.20261111.3

package/README.md

@@ -101,7 +101,7 @@ pnpm add @weft-js/start @weft-js/core
 bun add @weft-js/start @weft-js/core
 ```
 
-Start needs Node 26 or later (the `engines` field), Bun or Deno. Drizzle, Better Auth, Zod and the database drivers are
+Start needs Node 24 or later (the `engines` field), Bun or Deno. Drizzle, Better Auth, Zod and the database drivers are
 optional peer dependencies: install the ones your app uses, or let `weft add db` and `weft add auth` do it.
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@weft-js/start",
-  "version": "0.1.3",
+  "version": "0.1.5-nightly.20261111.3",
   "description": "weft Start: file routes, server functions, streaming SSR, a database and auth",
   "keywords": [
     "weft"
@@ -78,7 +78,7 @@
     "vite": "8.3.5"
   },
   "peerDependencies": {
-    "@weft-js/core": "^0.1.3",
+    "@weft-js/core": "^0.1.5-nightly.20261111.3",
     "better-auth": "^1.7.0",
     "drizzle-orm": "^0.45.0",
     "drizzle-zod": "^0.8.0",
@@ -113,6 +113,6 @@
     }
   },
   "engines": {
-    "node": ">=26"
+    "node": ">=24"
   }
 }

package/src/app.mjs

@@ -49,7 +49,7 @@ function config({
       define: { __WEFT_SOCKETS__: JSON.stringify(holdsSockets(preset)) },
     }),
     plugins: [
-      weft({ hydratable: true }),
+      weft({ hydratable: true, csp: site?.csp }),
       weftStart({ root, site, hydration }),
       runner && devSockets(),
       nitro({

package/src/boot.ts

@@ -8,6 +8,8 @@ export interface Held {
   p: (held: unknown) => void
   w?: (k: Element, lead?: 1) => void
   r?: 1
+  /** The page is running: a page that hydrates whole stops holding events off its islands. */
+  s?: 1
   n?: unknown
   l?: Element
   d?: unknown

package/src/capture.ts

@@ -6,10 +6,12 @@
 //
 //   q  the events    n  the page needs its code at once    w  wake: (element, lead), a lead being only a hint of intent
 //   p  replay one    r  replaying, so don't capture        d  the visitor asked for less data      l  the last lead
+//   s  the page is running: until then a page that hydrates whole (`n`) holds a click, submit or reset anywhere, not just
+//      on an island, since nothing is listening yet. A plain link is left to the browser: it works without code.
 //
 // Written by hand and small, since every such page pays it: `boot.ts` and weft's `island.ts` are the other two halves.
 
-const CODE = `(n=>{var d=document,c=navigator.connection,q=window.__wq={q:[],n:n,w(){},d:matchMedia("(prefers-reduced-data: reduce)").matches||!!(c&&c.saveData),p(e){var t=e.target,r=q.r,s=e.submitter;if(t.isConnected){q.r=1;try{e.type=="submit"?t.requestSubmit(s&&s.isConnected?s:void 0):e.type=="reset"?t.reset():t.dispatchEvent(new e.constructor(e.type,e))}finally{q.r=r}}}},o=t=>t.closest&&t.closest("[wk]"),h=e=>{var k=!q.r&&o(e.target);if(k&&(!k.$k||q.q.length)&&!((e.metaKey||e.ctrlKey||e.shiftKey)&&e.type=="click"&&e.target.closest("a"))){q.q.push(e);/^(click|submit|reset)$/.test(e.type)&&e.preventDefault();q.w(k)}},l=e=>{var k=o(e.target);k&&!k.$k&&!q.d&&q.w(k,1)};"click dblclick pointerdown pointerup mousedown mouseup keydown keyup input change submit reset focus blur focusin focusout".split(" ").forEach(t=>d.addEventListener(t,h,!0));"pointerover touchstart".split(" ").forEach(t=>d.addEventListener(t,l,{capture:!0,passive:!0}))})`
+const CODE = `(n=>{var d=document,c=navigator.connection,q=window.__wq={q:[],n:n,w(){},d:matchMedia("(prefers-reduced-data: reduce)").matches||!!(c&&c.saveData),p(e){var t=e.target,r=q.r,s=e.submitter;if(t.isConnected){q.r=1;try{e.type=="submit"?t.requestSubmit(s&&s.isConnected?s:void 0):e.type=="reset"?t.reset():t.dispatchEvent(new e.constructor(e.type,e))}finally{q.r=r}}}},o=t=>t.closest&&t.closest("[wk]"),h=e=>{var t=e.target,k=!q.r&&(o(t)||q.n&&!q.s&&/^(click|submit|reset)$/.test(e.type)&&t.closest&&!t.closest("a[href]")&&d.documentElement);if(k&&(!k.$k||q.q.length)&&!((e.metaKey||e.ctrlKey||e.shiftKey)&&e.type=="click"&&e.target.closest("a"))){q.q.push(e);/^(click|submit|reset)$/.test(e.type)&&e.preventDefault();q.w(k)}},l=e=>{var k=o(e.target);k&&!k.$k&&!q.d&&q.w(k,1)};"click dblclick pointerdown pointerup mousedown mouseup keydown keyup input change submit reset focus blur focusin focusout".split(" ").forEach(t=>d.addEventListener(t,h,!0));"pointerover touchstart".split(" ").forEach(t=>d.addEventListener(t,l,{capture:!0,passive:!0}))})`
 
 /** The script's text. `now`: the page has work that can't wait, so its code loads straight away. */
 export const capture = (now: boolean) => `${CODE}(${now ? 1 : 0})`

package/src/contract.mjs

@@ -233,7 +233,7 @@ async function withFns({ root, site = {} }, fn) {
       logLevel: 'silent',
       appType: 'custom',
       server: { middlewareMode: true, hmr: false, ws: false },
-      plugins: [weft({ hydratable: true }), weftStart({ root, site })],
+      plugins: [weft({ hydratable: true, csp: site?.csp }), weftStart({ root, site })],
     })
     await server.ssrLoadModule('virtual:weft/fns')
     const { fns } = await server.ssrLoadModule(join(startDir, 'data.ts'))

package/src/inspect.mjs

@@ -136,7 +136,7 @@ export async function routesMeta({ root, site = {}, preset }) {
     logLevel: 'silent',
     appType: 'custom',
     server: { middlewareMode: true, hmr: false, ws: false },
-    plugins: [weft({ hydratable: true }), weftStart({ root, site })],
+    plugins: [weft({ hydratable: true, csp: site?.csp }), weftStart({ root, site })],
   })
   try {
     const { manifest, modules } = await server.ssrLoadModule('virtual:weft/routes')

package/src/run/admission.ts

@@ -35,46 +35,33 @@ export function admitLink(event: Event, routes: ClientRoutes) {
   }
 }
 
-/** Pointer admission and its click fallback; the returned disposer removes only these listeners. */
+/**
+ * Links go on their click. A press (pointerdown) only warms the route: it starts the fetch the click will claim, so the
+ * head start is kept, but the page never changes under a pointer that is still down. Swapping it on the press lost the
+ * click itself (the button came up on the new page, so the click landed on <html> or never fired), and with it every
+ * click handler: a menu that closes when its link is followed, a sheet, an analytics hook. The returned disposer
+ * removes only these listeners.
+ */
 export function routeClicks(
   doc: Document,
   routes: ClientRoutes,
   go: (href: string) => void | Promise<void>,
+  warm?: (url: URL) => void,
 ) {
-  let accepted: { id: number; anchor: HTMLAnchorElement } | undefined
   const down = (event: PointerEvent) => {
-    accepted = undefined
     const target = admitLink(event, routes)
-    if (!target) return
-    accepted = { id: event.pointerId, anchor: target.anchor }
-    if (!target.noop) void Promise.resolve(go(target.url.href)).catch(() => {})
-  }
-  const cancel = (event: PointerEvent) => {
-    if (accepted?.id === event.pointerId) accepted = undefined
+    if (target && !target.noop) warm?.(target.url)
   }
   const click = (event: MouseEvent) => {
-    const record = accepted
-    accepted = undefined
-    const pointer = event as PointerEvent
-    if (
-      record &&
-      event.detail > 0 &&
-      (pointer.pointerId === record.id || event.composedPath().includes(record.anchor))
-    ) {
-      event.preventDefault()
-      return
-    }
     const target = admitLink(event, routes)
     if (!target) return
     event.preventDefault()
-    if (!target.noop) void go(target.url.href)
+    if (!target.noop) void Promise.resolve(go(target.url.href)).catch(() => {})
   }
   doc.addEventListener('pointerdown', down)
-  doc.addEventListener('pointercancel', cancel)
   doc.addEventListener('click', click)
   return () => {
     doc.removeEventListener('pointerdown', down)
-    doc.removeEventListener('pointercancel', cancel)
     doc.removeEventListener('click', click)
   }
 }

package/src/run/listeners.ts

@@ -30,6 +30,7 @@ export function listeners(nav: Navigation, hot: () => Hot | undefined) {
   const q = (window as Window & { __wq?: Held }).__wq
   if (q) {
     q.w = wake
+    q.s = 1
     if (q.l) wake(q.l)
     drain()
   }
@@ -37,7 +38,17 @@ export function listeners(nav: Navigation, hot: () => Hot | undefined) {
 
 // A fade can intercept a click; replay it on the element underneath once the picture is gone.
 function clicks(nav: Navigation) {
-  routeClicks(document, nav.routes, (href) => nav.go(href))
+  const network = (
+    navigator as Navigator & { connection?: { saveData?: boolean; effectiveType?: string } }
+  ).connection
+  routeClicks(
+    document,
+    nav.routes,
+    (href) => nav.go(href),
+    (url) => {
+      if (!document.hidden) nav.prefetch.start(url, 'press', network, navigator.onLine)
+    },
+  )
   let ended: Promise<unknown> | undefined
   document.addEventListener(
     'pointerdown',

package/src/run/navigation.ts

@@ -123,7 +123,10 @@ export class Navigation {
       if (!current()) return
       if (scroll) {
         const target = url.hash && document.getElementById(decodeURIComponent(url.hash.slice(1)))
-        target ? target.scrollIntoView() : window.scrollTo(0, 0)
+        // a new page arrives where it starts, at once: warp makes the root scroll smooth for in-page anchors, and a
+        // route change that glided down from the old page's offset read as the old page scrolling away
+        if (target) target.scrollIntoView({ behavior: 'instant' })
+        else window.scrollTo({ top: 0, left: 0, behavior: 'instant' })
       }
     }
   }

package/src/run/prefetch.ts

@@ -1,7 +1,8 @@
 import type { RouteCache, Read } from './cache'
 import { ask } from './helpers'
 
-type Intent = 'hover' | 'focus'
+/** hover is a guess; focus and a press (the button is down, the click is coming) are near certain */
+type Intent = 'hover' | 'focus' | 'press'
 type Network = { saveData?: boolean; effectiveType?: string }
 type Job = { ctrl: AbortController; promise: Promise<Read | undefined>; promoted: boolean }