floppy-disk 3.0.0-alpha.2 → 3.0.0-alpha.4

package/esm/react/create-query.d.mts

@@ -153,30 +153,33 @@ export type QueryOptions<TData, TVariable extends Record<string, any>> = InitSto
  *   // ...
  * }
  */
-export declare const createQuery: <TData, TVariable extends Record<string, any> = never>(queryFn: (variable: TVariable, currentState: QueryState<TData>) => Promise<TData>, options?: QueryOptions<TData, TVariable>) => ((variable?: TVariable) => (<TStateSlice = QueryState<TData>>(options?: {
-    /**
-     * Whether the query should execute automatically on mount.
-     *
-     * @default true
-     */
-    enabled?: boolean;
-    /**
-     * Whether to keep previous successful data while a new variable is loading.
-     *
-     * @remarks
-     * - Only applies when the query is in the `INITIAL` state (no data & no error).
-     * - Intended for variable changes:
-     *   when switching from one variable to another, the previous data is temporarily shown
-     *   while the new execution is in progress.
-     * - Once the new execution resolves (success or error), the previous data is no longer used.
-     * - Prevents UI flicker (e.g. empty/loading state) during transitions.
-     *
-     * @example
-     * // Switching from userId=1 → userId=2
-     * // While loading userId=2, still show userId=1 data
-     * useQuery({ id: userId }, { keepPreviousData: true });
-     */ keepPreviousData?: boolean;
-}, selector?: (state: QueryState<TData>) => TStateSlice) => TStateSlice) & {
+export declare const createQuery: <TData, TVariable extends Record<string, any> = never>(queryFn: (variable: TVariable, currentState: QueryState<TData>) => Promise<TData>, options?: QueryOptions<TData, TVariable>) => ((variable?: TVariable) => {
+    <TStateSlice = QueryState<TData>>(options?: {
+        /**
+         * Whether the query should execute automatically on mount.
+         *
+         * @default true
+         */
+        enabled?: boolean;
+        /**
+         * Whether to keep previous successful data while a new variable is loading.
+         *
+         * @remarks
+         * - Only applies when the query is in the `INITIAL` state (no data & no error).
+         * - Intended for variable changes:
+         *   when switching from one variable to another, the previous data is temporarily shown
+         *   while the new execution is in progress.
+         * - Once the new execution resolves (success or error), the previous data is no longer used.
+         * - Prevents UI flicker (e.g. empty/loading state) during transitions.
+         *
+         * @example
+         * // Switching from userId=1 → userId=2
+         * // While loading userId=2, still show userId=1 data
+         * useQuery({ id: userId }, { keepPreviousData: true });
+         */ keepPreviousData?: boolean;
+    }, selector?: (state: QueryState<TData>) => TStateSlice): TStateSlice;
+    <TStateSlice = QueryState<TData>>(selector?: (state: QueryState<TData>) => TStateSlice): TStateSlice;
+} & {
     metadata: {
         isInvalidated?: boolean;
         promise?: Promise<QueryState<TData>> | undefined;
@@ -202,45 +205,58 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
     /**
      * Executes the query function.
      *
-     * @param overwriteOngoingExecution - Whether to start a new execution instead of reusing an ongoing one
+     * @param options - Execution options
+     * @param options.overwriteOngoingExecution - Whether to start a new execution instead of reusing an ongoing one (default: `true`)
      *
      * @returns A promise resolving to the latest query state
      *
      * @remarks
-     * - Deduplicates concurrent executions by default.
-     * - If `overwriteOngoingExecution` is true, a new execution replaces the current one.
+     * - By default, each call starts a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      * - Handles:
      *   - Pending state
      *   - Success state
      *   - Error state
      *   - Retry logic
      */
-    execute: (overwriteOngoingExecution?: boolean) => Promise<QueryState<TData>>;
+    execute: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => Promise<QueryState<TData>>;
     /**
-     * Re-executes the query if the data is stale.
+     * Re-executes the query if needed based on freshness or invalidation.
      *
-     * @param overwriteOngoingExecution - Whether to overwrite an ongoing execution
+     * @param options - Revalidation options
+     * @param options.overwriteOngoingExecution - Whether to overwrite an ongoing execution (default: `true`)
      *
      * @returns The current state if still fresh, otherwise a promise of the new state
      *
      * @remarks
-     * - Skips execution if data is still fresh (`staleTime`) and the query has not been invalidated.
-     * - Used for automatic revalidation (e.g. focus or reconnect).
+     * - Skips execution if data is still fresh (`staleTime`) **AND** the query has not been invalidated.
+     * - If execution is not skipped, by default it will start a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      */
-    revalidate: (overwriteOngoingExecution?: boolean) => Promise<QueryState<TData>>;
+    revalidate: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => Promise<QueryState<TData>>;
     /**
      * Marks the query as invalidated and optionally triggers re-execution.
      *
-     * @param overwriteOngoingExecution - Whether to overwrite an ongoing execution
+     * @param options - Invalidation options
+     * @param options.overwriteOngoingExecution - Whether to overwrite an ongoing execution (default: `true`)
      *
      * @returns `true` if execution was triggered, `false` otherwise
      *
      * @remarks
      * - Invalidated queries are treated as stale regardless of `staleTime`.
      * - The next `revalidate` will always execute until a successful result clears the invalidation.
-     * - If there are active subscribers, execution will be triggered immediately.
+     * - If there are active subscribers: Execution is triggered immediately.
+     * - Otherwise: The query remains invalidated and will execute on the next revalidation.
+     * - By default, starts a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      */
-    invalidate: (overwriteOngoingExecution?: boolean) => boolean;
+    invalidate: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => boolean;
     /**
      * Resets the query state to its initial state.
      *
@@ -296,14 +312,18 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
      * @remarks
      * - Useful for bulk refetching.
      */
-    executeAll: (overwriteOngoingExecution?: boolean) => void;
+    executeAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Revalidates all query instances.
      *
      * @remarks
      * - Only re-fetches stale queries.
      */
-    revalidateAll: (overwriteOngoingExecution?: boolean) => void;
+    revalidateAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Invalidates all query instances.
      *
@@ -311,7 +331,9 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
      * - Marks all queries as invalidated and triggers revalidation if active.
      * - Invalidated queries bypass `staleTime` until successfully executed again.
      */
-    invalidateAll: (overwriteOngoingExecution?: boolean) => void;
+    invalidateAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Resets all query instances.
      */

package/esm/react.mjs

@@ -157,17 +157,17 @@ const createQuery = (queryFn, options = {}) => {
       }
       return false;
     },
-    execute: (overwriteOngoingExecution = false) => {
+    execute: ({ overwriteOngoingExecution = true } = {}) => {
       return execute(store, variable, overwriteOngoingExecution);
     },
-    revalidate: (overwriteOngoingExecution = false) => {
+    revalidate: ({ overwriteOngoingExecution = true } = {}) => {
       return revalidate(store, variable, overwriteOngoingExecution);
     },
-    invalidate: (overwriteOngoingExecution = false) => {
+    invalidate: (options2) => {
       const { metadata } = internals.get(store);
       metadata.isInvalidated = true;
       if (store.getSubscribers().size > 0) {
-        internals.get(store).execute(overwriteOngoingExecution);
+        internals.get(store).execute(options2);
         return true;
       }
       return false;
@@ -323,10 +323,19 @@ const createQuery = (queryFn, options = {}) => {
       stores.set(variableHash, store);
       internals.set(store, configureInternals(store, variable, variableHash));
     }
-    const useStore = (options2 = {}, selector = identity) => {
+    function useStore(optionsOrSelector = {}, maybeSelector) {
+      let selector;
+      let options2;
+      if (typeof optionsOrSelector === "function") {
+        options2 = {};
+        selector = optionsOrSelector;
+      } else {
+        options2 = optionsOrSelector;
+        selector = maybeSelector || identity;
+      }
       useStoreUpdateNotifier(store, selector);
       useIsomorphicLayoutEffect(() => {
-        if (options2.enabled !== false) revalidate(store, variable);
+        if (options2.enabled !== false) revalidate(store, variable, false);
       }, [store, options2.enabled]);
       const storeState = store.getState();
       let storeStateToBeUsed = storeState;
@@ -337,7 +346,7 @@ const createQuery = (queryFn, options = {}) => {
         storeStateToBeUsed = { ...storeState, ...prevState.current };
       }
       return selector(storeStateToBeUsed);
-    };
+    }
     return Object.assign(useStore, {
       subscribe: store.subscribe,
       getSubscribers: store.getSubscribers,
@@ -356,8 +365,8 @@ const createQuery = (queryFn, options = {}) => {
      * @remarks
      * - Useful for bulk refetching.
      */
-    executeAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).execute(overwriteOngoingExecution));
+    executeAll: (options2) => {
+      stores.forEach((store) => internals.get(store).execute(options2));
     },
     /**
      * Revalidates all query instances.
@@ -365,8 +374,8 @@ const createQuery = (queryFn, options = {}) => {
      * @remarks
      * - Only re-fetches stale queries.
      */
-    revalidateAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).revalidate(overwriteOngoingExecution));
+    revalidateAll: (options2) => {
+      stores.forEach((store) => internals.get(store).revalidate(options2));
     },
     /**
      * Invalidates all query instances.
@@ -375,8 +384,8 @@ const createQuery = (queryFn, options = {}) => {
      * - Marks all queries as invalidated and triggers revalidation if active.
      * - Invalidated queries bypass `staleTime` until successfully executed again.
      */
-    invalidateAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).invalidate(overwriteOngoingExecution));
+    invalidateAll: (options2) => {
+      stores.forEach((store) => internals.get(store).invalidate(options2));
     },
     /**
      * Resets all query instances.

package/esm/vanilla/store.d.mts

@@ -24,6 +24,7 @@ export type Subscriber<TState> = (state: TState, prevState: TState) => void;
  * - The store performs **shallow change detection per key** before notifying subscribers.
  * - Subscribers are only notified when at least one field changes.
  * - Designed to be framework-agnostic (React bindings are built separately).
+ * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
  */
 export type StoreApi<TState extends Record<string, any>> = {
     setState: (value: SetState<TState>) => void;
@@ -47,6 +48,7 @@ export type InitStoreOptions<TState extends Record<string, any>> = {
     onSubscribe?: (state: TState, store: StoreApi<TState>) => void;
     onUnsubscribe?: (state: TState, store: StoreApi<TState>) => void;
     onLastUnsubscribe?: (state: TState, store: StoreApi<TState>) => void;
+    allowSetStateServerSide?: boolean;
 };
 /**
  * Creates a vanilla store with pub-sub capabilities.
@@ -64,6 +66,9 @@ export type InitStoreOptions<TState extends Record<string, any>> = {
  * - Subscribers are only notified when at least one updated field changes (using `Object.is` comparison).
  * - Subscribers receive both the new state and the previous state.
  * - Lifecycle hooks allow side-effect management tied to subscription count.
+ * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
+ *   - This avoids leaking data between users in server environments.
+ *   - You can override this by setting `allowSetStateServerSide: true`.
  *
  * @example
  * const store = initStore({ count: 0 });

package/esm/vanilla.mjs

@@ -70,7 +70,8 @@ const initStore = (initialState, options = {}) => {
     onFirstSubscribe = noop,
     onSubscribe = noop,
     onUnsubscribe = noop,
-    onLastUnsubscribe = noop
+    onLastUnsubscribe = noop,
+    allowSetStateServerSide = false
   } = options;
   const subscribers = /* @__PURE__ */ new Set();
   const getSubscribers = () => subscribers;
@@ -87,6 +88,12 @@ const initStore = (initialState, options = {}) => {
   let state = initialState;
   const getState = () => state;
   const setState = (value) => {
+    if (!isClient && !allowSetStateServerSide) {
+      console.error(
+        "setState on the server is not allowed by default. Set `allowSetStateServerSide: true` to allow it."
+      );
+      return;
+    }
     const prevState = state;
     const newValue = getValue(value, state);
     for (const key in newValue) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "floppy-disk",
   "description": "Lightweight, simple, and powerful state management library",
   "private": false,
-  "version": "3.0.0-alpha.2",
+  "version": "3.0.0-alpha.4",
   "publishConfig": {
     "tag": "alpha"
   },

package/react/create-query.d.ts

@@ -153,30 +153,33 @@ export type QueryOptions<TData, TVariable extends Record<string, any>> = InitSto
  *   // ...
  * }
  */
-export declare const createQuery: <TData, TVariable extends Record<string, any> = never>(queryFn: (variable: TVariable, currentState: QueryState<TData>) => Promise<TData>, options?: QueryOptions<TData, TVariable>) => ((variable?: TVariable) => (<TStateSlice = QueryState<TData>>(options?: {
-    /**
-     * Whether the query should execute automatically on mount.
-     *
-     * @default true
-     */
-    enabled?: boolean;
-    /**
-     * Whether to keep previous successful data while a new variable is loading.
-     *
-     * @remarks
-     * - Only applies when the query is in the `INITIAL` state (no data & no error).
-     * - Intended for variable changes:
-     *   when switching from one variable to another, the previous data is temporarily shown
-     *   while the new execution is in progress.
-     * - Once the new execution resolves (success or error), the previous data is no longer used.
-     * - Prevents UI flicker (e.g. empty/loading state) during transitions.
-     *
-     * @example
-     * // Switching from userId=1 → userId=2
-     * // While loading userId=2, still show userId=1 data
-     * useQuery({ id: userId }, { keepPreviousData: true });
-     */ keepPreviousData?: boolean;
-}, selector?: (state: QueryState<TData>) => TStateSlice) => TStateSlice) & {
+export declare const createQuery: <TData, TVariable extends Record<string, any> = never>(queryFn: (variable: TVariable, currentState: QueryState<TData>) => Promise<TData>, options?: QueryOptions<TData, TVariable>) => ((variable?: TVariable) => {
+    <TStateSlice = QueryState<TData>>(options?: {
+        /**
+         * Whether the query should execute automatically on mount.
+         *
+         * @default true
+         */
+        enabled?: boolean;
+        /**
+         * Whether to keep previous successful data while a new variable is loading.
+         *
+         * @remarks
+         * - Only applies when the query is in the `INITIAL` state (no data & no error).
+         * - Intended for variable changes:
+         *   when switching from one variable to another, the previous data is temporarily shown
+         *   while the new execution is in progress.
+         * - Once the new execution resolves (success or error), the previous data is no longer used.
+         * - Prevents UI flicker (e.g. empty/loading state) during transitions.
+         *
+         * @example
+         * // Switching from userId=1 → userId=2
+         * // While loading userId=2, still show userId=1 data
+         * useQuery({ id: userId }, { keepPreviousData: true });
+         */ keepPreviousData?: boolean;
+    }, selector?: (state: QueryState<TData>) => TStateSlice): TStateSlice;
+    <TStateSlice = QueryState<TData>>(selector?: (state: QueryState<TData>) => TStateSlice): TStateSlice;
+} & {
     metadata: {
         isInvalidated?: boolean;
         promise?: Promise<QueryState<TData>> | undefined;
@@ -202,45 +205,58 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
     /**
      * Executes the query function.
      *
-     * @param overwriteOngoingExecution - Whether to start a new execution instead of reusing an ongoing one
+     * @param options - Execution options
+     * @param options.overwriteOngoingExecution - Whether to start a new execution instead of reusing an ongoing one (default: `true`)
      *
      * @returns A promise resolving to the latest query state
      *
      * @remarks
-     * - Deduplicates concurrent executions by default.
-     * - If `overwriteOngoingExecution` is true, a new execution replaces the current one.
+     * - By default, each call starts a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      * - Handles:
      *   - Pending state
      *   - Success state
      *   - Error state
      *   - Retry logic
      */
-    execute: (overwriteOngoingExecution?: boolean) => Promise<QueryState<TData>>;
+    execute: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => Promise<QueryState<TData>>;
     /**
-     * Re-executes the query if the data is stale.
+     * Re-executes the query if needed based on freshness or invalidation.
      *
-     * @param overwriteOngoingExecution - Whether to overwrite an ongoing execution
+     * @param options - Revalidation options
+     * @param options.overwriteOngoingExecution - Whether to overwrite an ongoing execution (default: `true`)
      *
      * @returns The current state if still fresh, otherwise a promise of the new state
      *
      * @remarks
-     * - Skips execution if data is still fresh (`staleTime`) and the query has not been invalidated.
-     * - Used for automatic revalidation (e.g. focus or reconnect).
+     * - Skips execution if data is still fresh (`staleTime`) **AND** the query has not been invalidated.
+     * - If execution is not skipped, by default it will start a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      */
-    revalidate: (overwriteOngoingExecution?: boolean) => Promise<QueryState<TData>>;
+    revalidate: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => Promise<QueryState<TData>>;
     /**
      * Marks the query as invalidated and optionally triggers re-execution.
      *
-     * @param overwriteOngoingExecution - Whether to overwrite an ongoing execution
+     * @param options - Invalidation options
+     * @param options.overwriteOngoingExecution - Whether to overwrite an ongoing execution (default: `true`)
      *
      * @returns `true` if execution was triggered, `false` otherwise
      *
      * @remarks
      * - Invalidated queries are treated as stale regardless of `staleTime`.
      * - The next `revalidate` will always execute until a successful result clears the invalidation.
-     * - If there are active subscribers, execution will be triggered immediately.
+     * - If there are active subscribers: Execution is triggered immediately.
+     * - Otherwise: The query remains invalidated and will execute on the next revalidation.
+     * - By default, starts a new execution even if one is already in progress.
+     * - Set `overwriteOngoingExecution: false` to reuse an ongoing execution (deduplication).
      */
-    invalidate: (overwriteOngoingExecution?: boolean) => boolean;
+    invalidate: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => boolean;
     /**
      * Resets the query state to its initial state.
      *
@@ -296,14 +312,18 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
      * @remarks
      * - Useful for bulk refetching.
      */
-    executeAll: (overwriteOngoingExecution?: boolean) => void;
+    executeAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Revalidates all query instances.
      *
      * @remarks
      * - Only re-fetches stale queries.
      */
-    revalidateAll: (overwriteOngoingExecution?: boolean) => void;
+    revalidateAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Invalidates all query instances.
      *
@@ -311,7 +331,9 @@ export declare const createQuery: <TData, TVariable extends Record<string, any>
      * - Marks all queries as invalidated and triggers revalidation if active.
      * - Invalidated queries bypass `staleTime` until successfully executed again.
      */
-    invalidateAll: (overwriteOngoingExecution?: boolean) => void;
+    invalidateAll: (options?: {
+        overwriteOngoingExecution?: boolean;
+    }) => void;
     /**
      * Resets all query instances.
      */

package/react.js

@@ -159,17 +159,17 @@ const createQuery = (queryFn, options = {}) => {
       }
       return false;
     },
-    execute: (overwriteOngoingExecution = false) => {
+    execute: ({ overwriteOngoingExecution = true } = {}) => {
       return execute(store, variable, overwriteOngoingExecution);
     },
-    revalidate: (overwriteOngoingExecution = false) => {
+    revalidate: ({ overwriteOngoingExecution = true } = {}) => {
       return revalidate(store, variable, overwriteOngoingExecution);
     },
-    invalidate: (overwriteOngoingExecution = false) => {
+    invalidate: (options2) => {
       const { metadata } = internals.get(store);
       metadata.isInvalidated = true;
       if (store.getSubscribers().size > 0) {
-        internals.get(store).execute(overwriteOngoingExecution);
+        internals.get(store).execute(options2);
         return true;
       }
       return false;
@@ -325,10 +325,19 @@ const createQuery = (queryFn, options = {}) => {
       stores.set(variableHash, store);
       internals.set(store, configureInternals(store, variable, variableHash));
     }
-    const useStore = (options2 = {}, selector = vanilla.identity) => {
+    function useStore(optionsOrSelector = {}, maybeSelector) {
+      let selector;
+      let options2;
+      if (typeof optionsOrSelector === "function") {
+        options2 = {};
+        selector = optionsOrSelector;
+      } else {
+        options2 = optionsOrSelector;
+        selector = maybeSelector || vanilla.identity;
+      }
       useStoreUpdateNotifier(store, selector);
       useIsomorphicLayoutEffect(() => {
-        if (options2.enabled !== false) revalidate(store, variable);
+        if (options2.enabled !== false) revalidate(store, variable, false);
       }, [store, options2.enabled]);
       const storeState = store.getState();
       let storeStateToBeUsed = storeState;
@@ -339,7 +348,7 @@ const createQuery = (queryFn, options = {}) => {
         storeStateToBeUsed = { ...storeState, ...prevState.current };
       }
       return selector(storeStateToBeUsed);
-    };
+    }
     return Object.assign(useStore, {
       subscribe: store.subscribe,
       getSubscribers: store.getSubscribers,
@@ -358,8 +367,8 @@ const createQuery = (queryFn, options = {}) => {
      * @remarks
      * - Useful for bulk refetching.
      */
-    executeAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).execute(overwriteOngoingExecution));
+    executeAll: (options2) => {
+      stores.forEach((store) => internals.get(store).execute(options2));
     },
     /**
      * Revalidates all query instances.
@@ -367,8 +376,8 @@ const createQuery = (queryFn, options = {}) => {
      * @remarks
      * - Only re-fetches stale queries.
      */
-    revalidateAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).revalidate(overwriteOngoingExecution));
+    revalidateAll: (options2) => {
+      stores.forEach((store) => internals.get(store).revalidate(options2));
     },
     /**
      * Invalidates all query instances.
@@ -377,8 +386,8 @@ const createQuery = (queryFn, options = {}) => {
      * - Marks all queries as invalidated and triggers revalidation if active.
      * - Invalidated queries bypass `staleTime` until successfully executed again.
      */
-    invalidateAll: (overwriteOngoingExecution) => {
-      stores.forEach((store) => internals.get(store).invalidate(overwriteOngoingExecution));
+    invalidateAll: (options2) => {
+      stores.forEach((store) => internals.get(store).invalidate(options2));
     },
     /**
      * Resets all query instances.

package/vanilla/store.d.ts

@@ -24,6 +24,7 @@ export type Subscriber<TState> = (state: TState, prevState: TState) => void;
  * - The store performs **shallow change detection per key** before notifying subscribers.
  * - Subscribers are only notified when at least one field changes.
  * - Designed to be framework-agnostic (React bindings are built separately).
+ * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
  */
 export type StoreApi<TState extends Record<string, any>> = {
     setState: (value: SetState<TState>) => void;
@@ -47,6 +48,7 @@ export type InitStoreOptions<TState extends Record<string, any>> = {
     onSubscribe?: (state: TState, store: StoreApi<TState>) => void;
     onUnsubscribe?: (state: TState, store: StoreApi<TState>) => void;
     onLastUnsubscribe?: (state: TState, store: StoreApi<TState>) => void;
+    allowSetStateServerSide?: boolean;
 };
 /**
  * Creates a vanilla store with pub-sub capabilities.
@@ -64,6 +66,9 @@ export type InitStoreOptions<TState extends Record<string, any>> = {
  * - Subscribers are only notified when at least one updated field changes (using `Object.is` comparison).
  * - Subscribers receive both the new state and the previous state.
  * - Lifecycle hooks allow side-effect management tied to subscription count.
+ * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
+ *   - This avoids leaking data between users in server environments.
+ *   - You can override this by setting `allowSetStateServerSide: true`.
  *
  * @example
  * const store = initStore({ count: 0 });

package/vanilla.js

@@ -72,7 +72,8 @@ const initStore = (initialState, options = {}) => {
     onFirstSubscribe = noop,
     onSubscribe = noop,
     onUnsubscribe = noop,
-    onLastUnsubscribe = noop
+    onLastUnsubscribe = noop,
+    allowSetStateServerSide = false
   } = options;
   const subscribers = /* @__PURE__ */ new Set();
   const getSubscribers = () => subscribers;
@@ -89,6 +90,12 @@ const initStore = (initialState, options = {}) => {
   let state = initialState;
   const getState = () => state;
   const setState = (value) => {
+    if (!isClient && !allowSetStateServerSide) {
+      console.error(
+        "setState on the server is not allowed by default. Set `allowSetStateServerSide: true` to allow it."
+      );
+      return;
+    }
     const prevState = state;
     const newValue = getValue(value, state);
     for (const key in newValue) {