floppy-disk 3.5.1 → 3.6.1

package/esm/react/create-mutation.d.mts

@@ -109,7 +109,7 @@ export type MutationOptions<TData, TVariable, TError = Error> = InitStoreOptions
  */
 export declare const createMutation: <TData, TVariable = undefined, TError = Error>(mutationFn: (variable: TVariable, stateBeforeExecute: MutationState<TData, TVariable, TError>) => Promise<TData>, options?: MutationOptions<TData, TVariable, TError>) => (() => MutationState<TData, TVariable, TError>) & {
     subscribe: (subscriber: import("../vanilla.d.mts").Subscriber<MutationState<TData, TVariable, TError>>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.d.mts").Subscriber<MutationState<TData, TVariable, TError>>>;
+    getSubscriberCount: () => number;
     getState: () => MutationState<TData, TVariable, TError>;
     /**
      * Manually updates the mutation state.

package/esm/react/create-query.d.mts

@@ -345,7 +345,7 @@ export declare const createQuery: <TData, TVariable extends StoreKey = never, TE
      */
     rollbackOptimisticUpdate: () => TData;
     subscribe: (subscriber: import("../vanilla.d.mts").Subscriber<QueryState<TData, TError>>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.d.mts").Subscriber<QueryState<TData, TError>>>;
+    getSubscriberCount: () => number;
     getState: () => QueryState<TData, TError>;
     setState: (value: SetStateInput<QueryState<TData, TError>>) => void;
 }) & {

package/esm/react/create-stores.d.mts

@@ -51,7 +51,7 @@ export declare const createStores: <TState extends Record<string, any>, TKey ext
     setState: (value: import("../vanilla.d.mts").SetStateInput<TState>) => void;
     getState: () => TState;
     subscribe: (subscriber: import("../vanilla.d.mts").Subscriber<TState>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.d.mts").Subscriber<TState>>;
+    getSubscriberCount: () => number;
     key: TKey;
     keyHash: string;
 };

package/esm/react.mjs

@@ -107,7 +107,7 @@ const createStores = (initialState, options) => {
     return Object.assign(useStore, {
       ...store,
       delete: () => {
-        if (store.getSubscribers().size > 0) {
+        if (store.getSubscriberCount() > 0) {
           console.warn(
             "Cannot delete store while it still has active subscribers. Unsubscribe all listeners before deleting the store."
           );
@@ -237,7 +237,7 @@ const createQuery = (queryFn, options = {}) => {
     invalidate: (options2) => {
       const { metadata } = internals.get(store);
       metadata.isInvalidated = true;
-      if (store.getSubscribers().size > 0) {
+      if (store.getSubscriberCount() > 0) {
         internals.get(store).execute(options2);
         return true;
       }
@@ -260,7 +260,7 @@ const createQuery = (queryFn, options = {}) => {
       store.setState(initialState);
     },
     delete: () => {
-      if (store.getSubscribers().size > 0) {
+      if (store.getSubscriberCount() > 0) {
         console.warn(
           "Cannot delete query store while it still has active subscribers. Unsubscribe all listeners before deleting the store."
         );
@@ -338,7 +338,7 @@ const createQuery = (queryFn, options = {}) => {
             isRetrying: false
           };
           const [shouldRetry, retryDelay] = shouldRetryFn(error, nextState);
-          const hasSubscriber = store.getSubscribers().size > 0;
+          const hasSubscriber = store.getSubscriberCount() > 0;
           if (shouldRetry && hasSubscriber) {
             metadata.retryResolver = resolve;
             metadata.retryTimeoutId = setTimeout(createPromise, retryDelay);
@@ -476,7 +476,7 @@ const createQuery = (queryFn, options = {}) => {
     };
     return Object.assign(useStore, {
       subscribe: store.subscribe,
-      getSubscribers: store.getSubscribers,
+      getSubscriberCount: store.getSubscriberCount,
       getState: store.getState,
       setState: (value) => {
         console.debug("Manual setState (not via provided actions) on query store");
@@ -609,7 +609,7 @@ const createMutation = (mutationFn, options = {}) => {
   };
   return Object.assign(useStore, {
     subscribe: store.subscribe,
-    getSubscribers: store.getSubscribers,
+    getSubscriberCount: store.getSubscriberCount,
     getState: store.getState,
     /**
      * Manually updates the mutation state.

package/esm/vanilla/store.d.mts

@@ -23,10 +23,43 @@ export type Subscriber<TState> = (state: TState, prevState: TState, changedKeys:
  * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
  */
 export type StoreApi<TState extends Record<string, any>> = {
+    /**
+     * Updates the state.
+     *
+     * @param value - Partial state or updater function
+     *
+     * @remarks
+     * - Accepts either a partial object or a function `(state) => partial`
+     * - Updates are shallowly merged into the current state
+     */
     setState: (value: SetStateInput<TState>) => void;
+    /**
+     * Get the current state.
+     *
+     * @returns The latest state snapshot
+     */
     getState: () => TState;
+    /**
+     * Subscribes to state changes.
+     *
+     * @param subscriber - Function called when state updates
+     *
+     * @returns Unsubscribe function
+     *
+     * @remarks
+     * - Subscribers are only called when at least one root key changes
+     * - Receives `(state, prevState, changedKeys)`
+     */
     subscribe: (subscriber: Subscriber<TState>) => () => void;
-    getSubscribers: () => Set<Subscriber<TState>>;
+    /**
+     * Returns the number of active subscribers.
+     *
+     * @returns Total subscriber count
+     *
+     * @remarks
+     * - Can be used to determine if the store is currently in use
+     */
+    getSubscriberCount: () => number;
 };
 /**
  * Lifecycle hooks for the store.

package/esm/vanilla.mjs

@@ -39,7 +39,7 @@ const initStore = (initialState, options = {}) => {
     allowSetStateServerSide = false
   } = options;
   const subscribers = /* @__PURE__ */ new Set();
-  const getSubscribers = () => subscribers;
+  const getSubscriberCount = () => subscribers.size;
   const subscribe = (subscriber) => {
     subscribers.add(subscriber);
     if (subscribers.size === 1) onFirstSubscribe(state, storeApi);
@@ -62,7 +62,13 @@ const initStore = (initialState, options = {}) => {
     const prevState = state;
     const newValue = getValue(value, state);
     const changedKeys = [];
-    for (const key in newValue) {
+    for (const key of Object.keys(newValue)) {
+      if (key === "__proto__" || key === "constructor" || key === "prototype") {
+        console.warn(
+          `Ignored unsafe key "${String(key)}" in setState(). This key is reserved and may indicate a prototype pollution attempt or malformed payload.`
+        );
+        continue;
+      }
       if (!Object.is(prevState[key], newValue[key])) {
         changedKeys.push(key);
       }
@@ -76,7 +82,7 @@ const initStore = (initialState, options = {}) => {
     getState,
     setState,
     subscribe,
-    getSubscribers
+    getSubscriberCount
   };
   return storeApi;
 };

package/package.json

@@ -2,7 +2,7 @@
   "name": "floppy-disk",
   "description": "Lightweight unified state management for sync and async data.",
   "private": false,
-  "version": "3.5.1",
+  "version": "3.6.1",
   "keywords": [
     "utilities",
     "store",

package/react/create-mutation.d.ts

@@ -109,7 +109,7 @@ export type MutationOptions<TData, TVariable, TError = Error> = InitStoreOptions
  */
 export declare const createMutation: <TData, TVariable = undefined, TError = Error>(mutationFn: (variable: TVariable, stateBeforeExecute: MutationState<TData, TVariable, TError>) => Promise<TData>, options?: MutationOptions<TData, TVariable, TError>) => (() => MutationState<TData, TVariable, TError>) & {
     subscribe: (subscriber: import("../vanilla.ts").Subscriber<MutationState<TData, TVariable, TError>>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.ts").Subscriber<MutationState<TData, TVariable, TError>>>;
+    getSubscriberCount: () => number;
     getState: () => MutationState<TData, TVariable, TError>;
     /**
      * Manually updates the mutation state.

package/react/create-query.d.ts

@@ -345,7 +345,7 @@ export declare const createQuery: <TData, TVariable extends StoreKey = never, TE
      */
     rollbackOptimisticUpdate: () => TData;
     subscribe: (subscriber: import("../vanilla.ts").Subscriber<QueryState<TData, TError>>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.ts").Subscriber<QueryState<TData, TError>>>;
+    getSubscriberCount: () => number;
     getState: () => QueryState<TData, TError>;
     setState: (value: SetStateInput<QueryState<TData, TError>>) => void;
 }) & {

package/react/create-stores.d.ts

@@ -51,7 +51,7 @@ export declare const createStores: <TState extends Record<string, any>, TKey ext
     setState: (value: import("../vanilla.ts").SetStateInput<TState>) => void;
     getState: () => TState;
     subscribe: (subscriber: import("../vanilla.ts").Subscriber<TState>) => () => void;
-    getSubscribers: () => Set<import("../vanilla.ts").Subscriber<TState>>;
+    getSubscriberCount: () => number;
     key: TKey;
     keyHash: string;
 };

package/react.js

@@ -109,7 +109,7 @@ const createStores = (initialState, options) => {
     return Object.assign(useStore, {
       ...store,
       delete: () => {
-        if (store.getSubscribers().size > 0) {
+        if (store.getSubscriberCount() > 0) {
           console.warn(
             "Cannot delete store while it still has active subscribers. Unsubscribe all listeners before deleting the store."
           );
@@ -239,7 +239,7 @@ const createQuery = (queryFn, options = {}) => {
     invalidate: (options2) => {
       const { metadata } = internals.get(store);
       metadata.isInvalidated = true;
-      if (store.getSubscribers().size > 0) {
+      if (store.getSubscriberCount() > 0) {
         internals.get(store).execute(options2);
         return true;
       }
@@ -262,7 +262,7 @@ const createQuery = (queryFn, options = {}) => {
       store.setState(initialState);
     },
     delete: () => {
-      if (store.getSubscribers().size > 0) {
+      if (store.getSubscriberCount() > 0) {
         console.warn(
           "Cannot delete query store while it still has active subscribers. Unsubscribe all listeners before deleting the store."
         );
@@ -340,7 +340,7 @@ const createQuery = (queryFn, options = {}) => {
             isRetrying: false
           };
           const [shouldRetry, retryDelay] = shouldRetryFn(error, nextState);
-          const hasSubscriber = store.getSubscribers().size > 0;
+          const hasSubscriber = store.getSubscriberCount() > 0;
           if (shouldRetry && hasSubscriber) {
             metadata.retryResolver = resolve;
             metadata.retryTimeoutId = setTimeout(createPromise, retryDelay);
@@ -478,7 +478,7 @@ const createQuery = (queryFn, options = {}) => {
     };
     return Object.assign(useStore, {
       subscribe: store.subscribe,
-      getSubscribers: store.getSubscribers,
+      getSubscriberCount: store.getSubscriberCount,
       getState: store.getState,
       setState: (value) => {
         console.debug("Manual setState (not via provided actions) on query store");
@@ -611,7 +611,7 @@ const createMutation = (mutationFn, options = {}) => {
   };
   return Object.assign(useStore, {
     subscribe: store.subscribe,
-    getSubscribers: store.getSubscribers,
+    getSubscriberCount: store.getSubscriberCount,
     getState: store.getState,
     /**
      * Manually updates the mutation state.

package/vanilla/store.d.ts

@@ -23,10 +23,43 @@ export type Subscriber<TState> = (state: TState, prevState: TState, changedKeys:
  * - By default, `setState` is **disabled on the server** to prevent accidental shared state between requests.
  */
 export type StoreApi<TState extends Record<string, any>> = {
+    /**
+     * Updates the state.
+     *
+     * @param value - Partial state or updater function
+     *
+     * @remarks
+     * - Accepts either a partial object or a function `(state) => partial`
+     * - Updates are shallowly merged into the current state
+     */
     setState: (value: SetStateInput<TState>) => void;
+    /**
+     * Get the current state.
+     *
+     * @returns The latest state snapshot
+     */
     getState: () => TState;
+    /**
+     * Subscribes to state changes.
+     *
+     * @param subscriber - Function called when state updates
+     *
+     * @returns Unsubscribe function
+     *
+     * @remarks
+     * - Subscribers are only called when at least one root key changes
+     * - Receives `(state, prevState, changedKeys)`
+     */
     subscribe: (subscriber: Subscriber<TState>) => () => void;
-    getSubscribers: () => Set<Subscriber<TState>>;
+    /**
+     * Returns the number of active subscribers.
+     *
+     * @returns Total subscriber count
+     *
+     * @remarks
+     * - Can be used to determine if the store is currently in use
+     */
+    getSubscriberCount: () => number;
 };
 /**
  * Lifecycle hooks for the store.

package/vanilla.js

@@ -41,7 +41,7 @@ const initStore = (initialState, options = {}) => {
     allowSetStateServerSide = false
   } = options;
   const subscribers = /* @__PURE__ */ new Set();
-  const getSubscribers = () => subscribers;
+  const getSubscriberCount = () => subscribers.size;
   const subscribe = (subscriber) => {
     subscribers.add(subscriber);
     if (subscribers.size === 1) onFirstSubscribe(state, storeApi);
@@ -64,7 +64,13 @@ const initStore = (initialState, options = {}) => {
     const prevState = state;
     const newValue = getValue(value, state);
     const changedKeys = [];
-    for (const key in newValue) {
+    for (const key of Object.keys(newValue)) {
+      if (key === "__proto__" || key === "constructor" || key === "prototype") {
+        console.warn(
+          `Ignored unsafe key "${String(key)}" in setState(). This key is reserved and may indicate a prototype pollution attempt or malformed payload.`
+        );
+        continue;
+      }
       if (!Object.is(prevState[key], newValue[key])) {
         changedKeys.push(key);
       }
@@ -78,7 +84,7 @@ const initStore = (initialState, options = {}) => {
     getState,
     setState,
     subscribe,
-    getSubscribers
+    getSubscriberCount
   };
   return storeApi;
 };