dinou 4.0.15 → 4.0.16

package/CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [4.0.16] - 2026-06-30
+
+### Fixed
+- **Cookie Deletion Attributes**: Reconstructed streaming cookie deletion to serialize and include `domain`, `secure`, and `sameSite` properties, ensuring browsers match scopes and delete cookies correctly.
+- **Defensive Redirects**: Added a safety check in `resolveRelativeUrl` to fallback to `/` if the destination path is invalid (such as undefined or null), avoiding server crashes.
+- **TypeScript Type Definitions**: Updated the `clearCookie` signature in `index.d.ts` to accept the full `CookieOptions` interface, resolving compilation errors when using `sameSite` or `secure` attributes.
+
 ## [4.0.15] - 2026-06-29
 
 ### Added

package/dinou/core/render-app-to-html.js

@@ -121,14 +121,21 @@ function renderAppToHtml(
           // --- CLEAR COOKIE (JS Injection - Only Non-HttpOnly) ---
           if (command === "clearCookie") {
             const [name, options] = args;
-            const path = options && options.path ? options.path : "/";
             console.log(
               `[Dinou] Streaming active. Clearing cookie '${name}' via JS.`,
             );
-            const safeName = JSON.stringify(name);
-            const safePath = JSON.stringify(path);
+            let cookieStr = `${name}=; Max-Age=0`;
+            const path = options?.path || "/";
+            cookieStr += `; path=${path}`;
+            if (options) {
+              if (options.domain) cookieStr += `; domain=${options.domain}`;
+              if (options.secure) cookieStr += `; secure`;
+              if (options.sameSite) cookieStr += `; samesite=${options.sameSite}`;
+            }
+            cookieStr += ";";
+            const safeCookieStr = JSON.stringify(cookieStr);
             res.write(
-              `<script>document.cookie = ${safeName} + "=; Max-Age=0; path=" + ${safePath} + ";";</script>`,
+              `<script>document.cookie = ${safeCookieStr};</script>`,
             );
             return;
           }

package/dinou/core/server.js

@@ -447,8 +447,6 @@ function getContextForServerFunctionEndpoint(req, res) {
       },
 
       clearCookie: (name, options) => {
-        const path = options?.path || "/";
-
         // SCENARIO A: Native
         if (!res.headersSent) {
           res.setHeader("Content-Type", "text/x-component");
@@ -457,7 +455,15 @@ function getContextForServerFunctionEndpoint(req, res) {
         }
 
         // SCENARIO B: Custom stream command
-        const cookieStr = `${name}=; Max-Age=0; path=${path};`;
+        let cookieStr = `${name}=; Max-Age=0`;
+        const path = options?.path || "/";
+        cookieStr += `; path=${path}`;
+        if (options) {
+          if (options.domain) cookieStr += `; domain=${options.domain}`;
+          if (options.secure) cookieStr += `; secure`;
+          if (options.sameSite) cookieStr += `; samesite=${options.sameSite}`;
+        }
+        cookieStr += ";";
         const safeCookieStr = JSON.stringify(cookieStr);
         res.write(`D:{"type":"cookie","cookie":${safeCookieStr}}\n`);
       },

package/dinou/core/url-resolver.js

@@ -1,4 +1,7 @@
 function resolveRelativeUrl(href, currentPathname) {
+  if (!href || typeof href !== "string") {
+    return "/";
+  }
   if (href.startsWith("/") || href.includes("://")) {
     return href;
   }

package/dinou/index.d.ts

@@ -55,7 +55,7 @@ export interface ResponseProxy {
    * @param name Name of the cookie to clear.
    * @param options Cookie options (e.g., domain, path).
    */
-  clearCookie(name: string, options?: { domain?: string; path?: string }): void;
+  clearCookie(name: string, options?: CookieOptions): void;
 
   /**
    * Sends a command to the main process to set an HTTP header.

package/dinou/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dinou-ejected",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "main": "index.js",
   "private": true,
   "exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dinou",
-  "version": "4.0.15",
+  "version": "4.0.16",
   "description": "Full-Stack React 19 framework with React Server Components, Server Functions, and Streaming SSR.",
   "main": "index.js",
   "bin": {