ngwr 13.0.0 → 13.0.1

package/types/ngwr-utils.d.ts

@@ -158,6 +158,52 @@ declare function round(value: number, decimals?: number): number;
  */
 declare const numAttr: (fallback: number) => (value: unknown) => number;
 
+/**
+ * @license
+ *
+ * Use of this source code is governed by an MIT-style license that can be
+ * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE
+ */
+/**
+ * Answers whether a value can be composed **into** a larger CSS expression
+ * without escaping the slot it was given — a colour inside a `linear-gradient()`
+ * the component builds, an entry the component joins into a custom property a
+ * stylesheet then substitutes.
+ *
+ * It is a containment check, not a colour parser. It says the value cannot
+ * terminate the construct the library wrapped around it; it says nothing about
+ * whether the value is a colour a browser will accept, and a rejected value
+ * should fall back to the component's own default rather than be repaired.
+ *
+ * **A value bound straight to `[style.background]` needs none of this.** There
+ * is nothing to break out of there, and Angular applies style values through
+ * CSSOM by design — validating those would amount to refusing style values in a
+ * style binding.
+ *
+ * Rejected, and each one is a way out of the slot:
+ *
+ * - a `)` the value never opened — `red), url(…), linear-gradient(red` is the
+ *   shape that turns a colour into an extra background layer the browser fetches;
+ * - a top-level `,` — a `<color>` is one value, so a comma at depth 0 means the
+ *   payload has reached the slot next to the one it was handed;
+ * - `;` `{` `}` a quote, a backslash, `!`, or a CSS comment delimiter;
+ * - any function outside {@link ALLOWED_FUNCTIONS} — `url()` above all.
+ *
+ * Top-level whitespace is allowed: `red 20%` is a legitimate gradient stop, and
+ * without a comma or a bare `)` it cannot reach anything.
+ *
+ * @example
+ * ```ts
+ * isSafeCssValue('var(--wr-color-primary)');                        // true
+ * isSafeCssValue('color-mix(in srgb, red 50%, blue)');              // true
+ * isSafeCssValue('red), url("https://x.test/beacon"), linear-gradient(red'); // false
+ * ```
+ *
+ * @param value Raw value handed to the component.
+ * @returns `true` when the value stays inside its slot.
+ */
+declare function isSafeCssValue(value: string): boolean;
+
 /**
  * @license
  *
@@ -446,5 +492,5 @@ declare function isPrintableKey(event: KeyboardEvent): boolean;
  */
 declare function badgeLog(badgeText: string, color: string, message: unknown): void;
 
-export { KEYS, badgeLog, clamp, debounce, getFocusableElements, getRootFontSize, hasModifier, isDefined, isNonEmptyArray, isObservable, isPrintableKey, noop, numAttr, randomId, resolveCssSize, round, throttle, trapFocus };
+export { KEYS, badgeLog, clamp, debounce, getFocusableElements, getRootFontSize, hasModifier, isDefined, isNonEmptyArray, isObservable, isPrintableKey, isSafeCssValue, noop, numAttr, randomId, resolveCssSize, round, throttle, trapFocus };
 export type { Maybe, ResolveCssSizeOptions, ResolvedCssSize, SafeAny, WrDebouncedFn, WrKey, WrThrottledFn };

package/types/ngwr-version.d.ts

@@ -16,7 +16,7 @@ import { InjectionToken } from '@angular/core';
  * Distinct from `Version` exported by `@angular/core`, which reports the
  * loaded Angular runtime version (e.g. `'22.0.0'`), not ngwr's.
  */
-declare const NGWR_VERSION = "13.0.0";
+declare const NGWR_VERSION = "13.0.1";
 
 /**
  * @license