sibujs 1.5.0 → 2.0.0

package/dist/performance.d.cts

@@ -1,3 +1,6 @@
+import { T as TrustedHTML } from './ssr-CrVNy6Pa.cjs';
+export { t as trustHTML } from './ssr-CrVNy6Pa.cjs';
+
 declare const Priority: {
     readonly IMMEDIATE: 0;
     readonly USER_BLOCKING: 1;
@@ -114,6 +117,11 @@ declare class DOMPool {
     /**
      * Return an element to the pool for reuse.
      * Clears attributes, children, and event listeners.
+     *
+     * Contract: the caller MUST detach the element from the DOM (and run any
+     * `dispose()` on bound reactive subscriptions) BEFORE calling `release()`.
+     * Releasing a connected element leaves it visible while it is mutated and
+     * is almost certainly a bug.
      */
     release(element: HTMLElement): void;
     /**
@@ -125,8 +133,7 @@ declare class DOMPool {
      */
     stats(): Record<string, number>;
 }
-/** Default global pool instance */
-declare const domPool: DOMPool;
+declare function getDOMPool(): DOMPool;
 /**
  * Preloads a resource (script, style, or generic fetch).
  */
@@ -145,9 +152,11 @@ declare function preloadImage(src: string): Promise<HTMLImageElement>;
  * Provides markers and utilities for tree-shaking and dead code elimination.
  */
 /**
- * Mark a function as pure for tree-shaking.
- * Bundlers (Rollup, esbuild, webpack) use this to eliminate unused code.
- * Wraps a factory function with the PURE annotation.
+ * Invoke a factory and return its result. The PURE annotation that enables
+ * tree-shaking is only honoured at the call site, not inside the function
+ * declaration. Annotate call sites like this:
+ *
+ *     const x = /\* @__PURE__ *\/ pure(() => expensive());
  */
 declare function pure<T>(fn: () => T): T;
 /**
@@ -181,12 +190,16 @@ declare function noSideEffect<T extends (...args: unknown[]) => unknown>(fn: T):
  * Provides markers and utilities for Svelte-style compile-time optimizations.
  * These are hints for build tools and static analyzers.
  */
+
 /**
  * Marks a component's template as static (no reactive bindings).
  * A build tool can pre-render this to a static HTML string and
  * skip reactive setup entirely.
+ *
+ * Accepts only `TrustedHTML` (mint via `trustHTML(...)`) to keep the
+ * `innerHTML` write from becoming a silent XSS sink (CWE-79).
  */
-declare function staticTemplate(html: string): HTMLElement;
+declare function staticTemplate(html: TrustedHTML): HTMLElement;
 /**
  * Clone a static template for efficient repeated rendering.
  * Uses template.content.cloneNode(true) which is faster than createElement.
@@ -196,7 +209,7 @@ declare function cloneTemplate(template: HTMLTemplateElement): DocumentFragment;
  * Pre-compile a component factory.
  * Caches the template and only applies dynamic bindings on each call.
  */
-declare function precompile<Props>(templateHtml: string, hydrate: (el: HTMLElement, props: Props) => void): (props: Props) => HTMLElement;
+declare function precompile<Props>(templateHtml: TrustedHTML, hydrate: (el: HTMLElement, props: Props) => void): (props: Props) => HTMLElement;
 /**
  * Marker for static expressions that can be hoisted out of reactive scopes.
  * A compiler pass would extract these to module scope.
@@ -360,14 +373,8 @@ interface ChunkConfig {
  * Central registry for managing dynamic chunks with caching and lifecycle callbacks.
  */
 declare function createChunkRegistry(config?: ChunkConfig): {
-    /**
-     * Load a chunk by ID. Uses cache if available, otherwise loads via the provided loader.
-     */
-    load<T>(id: string, loader: () => Promise<T>): Promise<T>;
-    /**
-     * Preload a chunk without blocking. Silently caches for later use.
-     */
-    preload<T>(id: string, loader: () => Promise<T>): void;
+    load: <T>(id: string, loader: () => Promise<T>) => Promise<T>;
+    preload: <T>(id: string, loader: () => Promise<T>) => void;
     /**
      * Preload multiple chunks in parallel.
      */
@@ -418,4 +425,4 @@ declare function preloadModule(url: string): void;
  */
 declare function preloadModules(urls: string[]): void;
 
-export { type ChunkConfig, DOMPool, Features, type NormalizeResult, type NormalizedEntities, type NormalizedSchema, type NormalizedState, type NormalizedStoreActions, Priority, type PriorityLevel, block, cloneTemplate, conditional, createChunkRegistry, deferredValue, denormalize, devOnly, domPool, flushScheduler, hoistable, lazyChunk, noSideEffect, normalize, normalizedStore, pendingTasks, precompile, prefetch, preloadImage, preloadModule, preloadModules, preloadResource, processInChunks, pure, resetIdCounter, scheduleUpdate, setIdPrefix, startTransition, staticTemplate, transitionState, uniqueId, yieldToMain };
+export { type ChunkConfig, DOMPool, Features, type NormalizeResult, type NormalizedEntities, type NormalizedSchema, type NormalizedState, type NormalizedStoreActions, Priority, type PriorityLevel, TrustedHTML, block, cloneTemplate, conditional, createChunkRegistry, deferredValue, denormalize, devOnly, flushScheduler, getDOMPool, hoistable, lazyChunk, noSideEffect, normalize, normalizedStore, pendingTasks, precompile, prefetch, preloadImage, preloadModule, preloadModules, preloadResource, processInChunks, pure, resetIdCounter, scheduleUpdate, setIdPrefix, startTransition, staticTemplate, transitionState, uniqueId, yieldToMain };

package/dist/performance.d.ts

@@ -1,3 +1,6 @@
+import { T as TrustedHTML } from './ssr-CrVNy6Pa.js';
+export { t as trustHTML } from './ssr-CrVNy6Pa.js';
+
 declare const Priority: {
     readonly IMMEDIATE: 0;
     readonly USER_BLOCKING: 1;
@@ -114,6 +117,11 @@ declare class DOMPool {
     /**
      * Return an element to the pool for reuse.
      * Clears attributes, children, and event listeners.
+     *
+     * Contract: the caller MUST detach the element from the DOM (and run any
+     * `dispose()` on bound reactive subscriptions) BEFORE calling `release()`.
+     * Releasing a connected element leaves it visible while it is mutated and
+     * is almost certainly a bug.
      */
     release(element: HTMLElement): void;
     /**
@@ -125,8 +133,7 @@ declare class DOMPool {
      */
     stats(): Record<string, number>;
 }
-/** Default global pool instance */
-declare const domPool: DOMPool;
+declare function getDOMPool(): DOMPool;
 /**
  * Preloads a resource (script, style, or generic fetch).
  */
@@ -145,9 +152,11 @@ declare function preloadImage(src: string): Promise<HTMLImageElement>;
  * Provides markers and utilities for tree-shaking and dead code elimination.
  */
 /**
- * Mark a function as pure for tree-shaking.
- * Bundlers (Rollup, esbuild, webpack) use this to eliminate unused code.
- * Wraps a factory function with the PURE annotation.
+ * Invoke a factory and return its result. The PURE annotation that enables
+ * tree-shaking is only honoured at the call site, not inside the function
+ * declaration. Annotate call sites like this:
+ *
+ *     const x = /\* @__PURE__ *\/ pure(() => expensive());
  */
 declare function pure<T>(fn: () => T): T;
 /**
@@ -181,12 +190,16 @@ declare function noSideEffect<T extends (...args: unknown[]) => unknown>(fn: T):
  * Provides markers and utilities for Svelte-style compile-time optimizations.
  * These are hints for build tools and static analyzers.
  */
+
 /**
  * Marks a component's template as static (no reactive bindings).
  * A build tool can pre-render this to a static HTML string and
  * skip reactive setup entirely.
+ *
+ * Accepts only `TrustedHTML` (mint via `trustHTML(...)`) to keep the
+ * `innerHTML` write from becoming a silent XSS sink (CWE-79).
  */
-declare function staticTemplate(html: string): HTMLElement;
+declare function staticTemplate(html: TrustedHTML): HTMLElement;
 /**
  * Clone a static template for efficient repeated rendering.
  * Uses template.content.cloneNode(true) which is faster than createElement.
@@ -196,7 +209,7 @@ declare function cloneTemplate(template: HTMLTemplateElement): DocumentFragment;
  * Pre-compile a component factory.
  * Caches the template and only applies dynamic bindings on each call.
  */
-declare function precompile<Props>(templateHtml: string, hydrate: (el: HTMLElement, props: Props) => void): (props: Props) => HTMLElement;
+declare function precompile<Props>(templateHtml: TrustedHTML, hydrate: (el: HTMLElement, props: Props) => void): (props: Props) => HTMLElement;
 /**
  * Marker for static expressions that can be hoisted out of reactive scopes.
  * A compiler pass would extract these to module scope.
@@ -360,14 +373,8 @@ interface ChunkConfig {
  * Central registry for managing dynamic chunks with caching and lifecycle callbacks.
  */
 declare function createChunkRegistry(config?: ChunkConfig): {
-    /**
-     * Load a chunk by ID. Uses cache if available, otherwise loads via the provided loader.
-     */
-    load<T>(id: string, loader: () => Promise<T>): Promise<T>;
-    /**
-     * Preload a chunk without blocking. Silently caches for later use.
-     */
-    preload<T>(id: string, loader: () => Promise<T>): void;
+    load: <T>(id: string, loader: () => Promise<T>) => Promise<T>;
+    preload: <T>(id: string, loader: () => Promise<T>) => void;
     /**
      * Preload multiple chunks in parallel.
      */
@@ -418,4 +425,4 @@ declare function preloadModule(url: string): void;
  */
 declare function preloadModules(urls: string[]): void;
 
-export { type ChunkConfig, DOMPool, Features, type NormalizeResult, type NormalizedEntities, type NormalizedSchema, type NormalizedState, type NormalizedStoreActions, Priority, type PriorityLevel, block, cloneTemplate, conditional, createChunkRegistry, deferredValue, denormalize, devOnly, domPool, flushScheduler, hoistable, lazyChunk, noSideEffect, normalize, normalizedStore, pendingTasks, precompile, prefetch, preloadImage, preloadModule, preloadModules, preloadResource, processInChunks, pure, resetIdCounter, scheduleUpdate, setIdPrefix, startTransition, staticTemplate, transitionState, uniqueId, yieldToMain };
+export { type ChunkConfig, DOMPool, Features, type NormalizeResult, type NormalizedEntities, type NormalizedSchema, type NormalizedState, type NormalizedStoreActions, Priority, type PriorityLevel, TrustedHTML, block, cloneTemplate, conditional, createChunkRegistry, deferredValue, denormalize, devOnly, flushScheduler, getDOMPool, hoistable, lazyChunk, noSideEffect, normalize, normalizedStore, pendingTasks, precompile, prefetch, preloadImage, preloadModule, preloadModules, preloadResource, processInChunks, pure, resetIdCounter, scheduleUpdate, setIdPrefix, startTransition, staticTemplate, transitionState, uniqueId, yieldToMain };

package/dist/performance.js

@@ -9,8 +9,8 @@ import {
   deferredValue,
   denormalize,
   devOnly,
-  domPool,
   flushScheduler,
+  getDOMPool,
   hoistable,
   lazyChunk,
   noSideEffect,
@@ -33,12 +33,16 @@ import {
   transitionState,
   uniqueId,
   yieldToMain
-} from "./chunk-BMPL52BF.js";
-import "./chunk-VQNQZCWJ.js";
-import "./chunk-EUZND3CB.js";
-import "./chunk-NZIIMDWI.js";
-import "./chunk-K4G4ZQNR.js";
-import "./chunk-5X6PP2UK.js";
+} from "./chunk-MIUAXB7K.js";
+import {
+  trustHTML
+} from "./chunk-JYD2PWXH.js";
+import "./chunk-UCS6AMJ7.js";
+import "./chunk-HB24TBAF.js";
+import "./chunk-2RA7SHDA.js";
+import "./chunk-CC65Y57T.js";
+import "./chunk-VLPPXTYG.js";
+import "./chunk-LMLD24FC.js";
 export {
   DOMPool,
   Features,
@@ -50,8 +54,8 @@ export {
   deferredValue,
   denormalize,
   devOnly,
-  domPool,
   flushScheduler,
+  getDOMPool,
   hoistable,
   lazyChunk,
   noSideEffect,
@@ -72,6 +76,7 @@ export {
   startTransition,
   staticTemplate,
   transitionState,
+  trustHTML,
   uniqueId,
   yieldToMain
 };

package/dist/plugin-D30wlGW5.d.cts

@@ -0,0 +1,71 @@
+interface PluginContext {
+    /** Register a global hook */
+    onInit: (callback: () => void) => void;
+    onMount: (callback: (element: HTMLElement) => void) => void;
+    onUnmount: (callback: (element: HTMLElement) => void) => void;
+    onError: (callback: (error: Error) => void) => void;
+    /** Provide a value globally */
+    provide: (key: string, value: unknown) => void;
+}
+interface SibuPlugin {
+    name: string;
+    install: (ctx: PluginContext, options?: unknown) => void;
+}
+interface PluginHooks {
+    init: Array<() => void>;
+    mount: Array<(element: HTMLElement) => void>;
+    unmount: Array<(element: HTMLElement) => void>;
+    error: Array<(error: Error) => void>;
+}
+interface PluginRegistry {
+    readonly installedPlugins: Set<string>;
+    readonly hooks: PluginHooks;
+    readonly provided: Map<string, unknown>;
+    plugin: (p: SibuPlugin, options?: unknown) => void;
+    inject: <T = unknown>(key: string, defaultValue?: T) => T;
+    triggerMount: (element: HTMLElement) => void;
+    triggerUnmount: (element: HTMLElement) => void;
+    triggerError: (error: Error) => void;
+    reset: () => void;
+}
+/**
+ * Create an isolated plugin registry. Useful for tests, SSR per-request
+ * isolation, or embedding multiple independent SibuJS apps on one page.
+ */
+declare function createPluginRegistry(): PluginRegistry;
+/**
+ * Creates a plugin definition.
+ */
+declare function createPlugin(name: string, install: (ctx: PluginContext, options?: unknown) => void): SibuPlugin;
+/**
+ * Installs a plugin into the default (singleton) registry.
+ */
+declare function plugin(plugin: SibuPlugin, options?: unknown): void;
+/**
+ * Retrieve a value provided by a plugin (from the default registry).
+ */
+declare function inject<T = unknown>(key: string, defaultValue?: T): T;
+/**
+ * Trigger mount hooks for an element (default registry).
+ */
+declare function triggerPluginMount(element: HTMLElement): void;
+/**
+ * Trigger unmount hooks for an element (default registry).
+ */
+declare function triggerPluginUnmount(element: HTMLElement): void;
+/**
+ * Trigger error hooks (default registry).
+ */
+declare function triggerPluginError(error: Error): void;
+/**
+ * Reset the default plugin registry (useful for testing).
+ */
+declare function resetPlugins(): void;
+/**
+ * Replace the default registry with an isolated one. Emits a dev warning
+ * if the default singleton already had plugins installed (to surface
+ * accidental interleaving of singleton + registry use).
+ */
+declare function setDefaultPluginRegistry(registry: PluginRegistry): void;
+
+export { type PluginContext as P, type SibuPlugin as S, type PluginRegistry as a, createPluginRegistry as b, createPlugin as c, triggerPluginMount as d, triggerPluginUnmount as e, inject as i, plugin as p, resetPlugins as r, setDefaultPluginRegistry as s, triggerPluginError as t };

package/dist/plugin-D30wlGW5.d.ts

@@ -0,0 +1,71 @@
+interface PluginContext {
+    /** Register a global hook */
+    onInit: (callback: () => void) => void;
+    onMount: (callback: (element: HTMLElement) => void) => void;
+    onUnmount: (callback: (element: HTMLElement) => void) => void;
+    onError: (callback: (error: Error) => void) => void;
+    /** Provide a value globally */
+    provide: (key: string, value: unknown) => void;
+}
+interface SibuPlugin {
+    name: string;
+    install: (ctx: PluginContext, options?: unknown) => void;
+}
+interface PluginHooks {
+    init: Array<() => void>;
+    mount: Array<(element: HTMLElement) => void>;
+    unmount: Array<(element: HTMLElement) => void>;
+    error: Array<(error: Error) => void>;
+}
+interface PluginRegistry {
+    readonly installedPlugins: Set<string>;
+    readonly hooks: PluginHooks;
+    readonly provided: Map<string, unknown>;
+    plugin: (p: SibuPlugin, options?: unknown) => void;
+    inject: <T = unknown>(key: string, defaultValue?: T) => T;
+    triggerMount: (element: HTMLElement) => void;
+    triggerUnmount: (element: HTMLElement) => void;
+    triggerError: (error: Error) => void;
+    reset: () => void;
+}
+/**
+ * Create an isolated plugin registry. Useful for tests, SSR per-request
+ * isolation, or embedding multiple independent SibuJS apps on one page.
+ */
+declare function createPluginRegistry(): PluginRegistry;
+/**
+ * Creates a plugin definition.
+ */
+declare function createPlugin(name: string, install: (ctx: PluginContext, options?: unknown) => void): SibuPlugin;
+/**
+ * Installs a plugin into the default (singleton) registry.
+ */
+declare function plugin(plugin: SibuPlugin, options?: unknown): void;
+/**
+ * Retrieve a value provided by a plugin (from the default registry).
+ */
+declare function inject<T = unknown>(key: string, defaultValue?: T): T;
+/**
+ * Trigger mount hooks for an element (default registry).
+ */
+declare function triggerPluginMount(element: HTMLElement): void;
+/**
+ * Trigger unmount hooks for an element (default registry).
+ */
+declare function triggerPluginUnmount(element: HTMLElement): void;
+/**
+ * Trigger error hooks (default registry).
+ */
+declare function triggerPluginError(error: Error): void;
+/**
+ * Reset the default plugin registry (useful for testing).
+ */
+declare function resetPlugins(): void;
+/**
+ * Replace the default registry with an isolated one. Emits a dev warning
+ * if the default singleton already had plugins installed (to surface
+ * accidental interleaving of singleton + registry use).
+ */
+declare function setDefaultPluginRegistry(registry: PluginRegistry): void;
+
+export { type PluginContext as P, type SibuPlugin as S, type PluginRegistry as a, createPluginRegistry as b, createPlugin as c, triggerPluginMount as d, triggerPluginUnmount as e, inject as i, plugin as p, resetPlugins as r, setDefaultPluginRegistry as s, triggerPluginError as t };