sibujs 1.5.0 → 2.1.0

package/dist/chunk-UCS6AMJ7.js

@@ -0,0 +1,79 @@
+// src/utils/sanitize.ts
+var SAFE_URL_PROTOCOLS = ["http:", "https:", "mailto:", "tel:", "ftp:"];
+function sanitizeUrl(url) {
+  const trimmed = url.replace(/[\x00-\x20\x7f-\x9f]+/g, "").trim();
+  if (!trimmed) return "";
+  const lower = trimmed.toLowerCase();
+  let schemeEnd = -1;
+  for (let i = 0; i < lower.length; i++) {
+    const ch = lower.charCodeAt(i);
+    if (ch === 58) {
+      schemeEnd = i;
+      break;
+    }
+    if (ch === 47 || ch === 63 || ch === 35) break;
+  }
+  if (schemeEnd === -1) return trimmed;
+  const scheme = lower.slice(0, schemeEnd + 1);
+  if (!/^[a-z][a-z0-9+.-]*:$/.test(scheme)) return trimmed;
+  if (SAFE_URL_PROTOCOLS.indexOf(scheme) === -1) return "";
+  return trimmed;
+}
+function sanitizeSrcset(value) {
+  const parts = value.split(",");
+  const out = [];
+  for (let i = 0; i < parts.length; i++) {
+    const part = parts[i].trim();
+    if (!part) continue;
+    const m = part.match(/^(\S+)(\s+.+)?$/);
+    if (!m) continue;
+    const safe = sanitizeUrl(m[1]);
+    if (!safe) continue;
+    out.push(m[2] ? `${safe}${m[2]}` : safe);
+  }
+  return out.join(", ");
+}
+function sanitizeCSSValue(value) {
+  const decoded = value.replace(/\\([0-9a-fA-F]{1,6})\s?/g, (_m, hex) => {
+    const code = Number.parseInt(hex, 16);
+    if (!Number.isFinite(code) || code < 0 || code > 1114111) return "";
+    try {
+      return String.fromCodePoint(code);
+    } catch {
+      return "";
+    }
+  });
+  const lower = decoded.toLowerCase().replace(/\s+/g, "");
+  if (lower.includes("url(") || lower.includes("expression(") || lower.includes("javascript:") || lower.includes("vbscript:") || lower.includes("-moz-binding") || lower.includes("behavior:") || lower.includes("@import") || lower.includes("image-set(") || lower.includes("filter:progid")) {
+    return "";
+  }
+  return value;
+}
+function stripHtml(html) {
+  return String(html).replace(/<[^>]*>/g, "");
+}
+var URL_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "href",
+  "xlink:href",
+  "src",
+  "action",
+  "formaction",
+  "formtarget",
+  "cite",
+  "poster",
+  "background",
+  "srcset",
+  "ping",
+  "data"
+]);
+function isUrlAttribute(attr) {
+  return URL_ATTRIBUTES.has(attr);
+}
+
+export {
+  sanitizeUrl,
+  sanitizeSrcset,
+  sanitizeCSSValue,
+  stripHtml,
+  isUrlAttribute
+};

package/dist/{chunk-VAPYJN4X.js → chunk-V6C4FADE.js}

@@ -1,12 +1,13 @@
 import {
   derived
-} from "./chunk-XHK6BDAJ.js";
+} from "./chunk-DRUZZAK4.js";
 import {
   effect
-} from "./chunk-VQNQZCWJ.js";
+} from "./chunk-WZA53FXU.js";
 import {
+  batch,
   signal
-} from "./chunk-NZIIMDWI.js";
+} from "./chunk-RDTDJCAB.js";
 
 // src/patterns/machine.ts
 function machine(config) {
@@ -74,7 +75,11 @@ function machine(config) {
 function persisted(key, initial, options = {}) {
   const storage = options.session ? sessionStorage : localStorage;
   const serialize = options.serialize || JSON.stringify;
-  const deserialize = options.deserialize || JSON.parse;
+  const safeReviver = (k, v) => {
+    if (k === "__proto__" || k === "constructor" || k === "prototype") return void 0;
+    return v;
+  };
+  const deserialize = options.deserialize || ((raw) => JSON.parse(raw, safeReviver));
   const encrypt = options.encrypt;
   const decrypt = options.decrypt;
   const syncTabs = options.session ? false : options.syncTabs ?? true;
@@ -178,6 +183,27 @@ function optimisticList(initialValue) {
   const [pending, setPending] = signal(false);
   let inflightCount = 0;
   let version = 0;
+  let tempIdCounter = 0;
+  const itemIds = /* @__PURE__ */ new WeakMap();
+  const idToItem = /* @__PURE__ */ new Map();
+  function tagItem(item) {
+    const id = ++tempIdCounter;
+    if (item !== null && typeof item === "object") {
+      itemIds.set(item, id);
+    }
+    idToItem.set(id, item);
+    return id;
+  }
+  function findIndexById(list, id) {
+    for (let i = 0; i < list.length; i++) {
+      const it = list[i];
+      if (it !== null && typeof it === "object" && itemIds.get(it) === id) {
+        return i;
+      }
+      if (Object.is(it, idToItem.get(id))) return i;
+    }
+    return -1;
+  }
   function begin() {
     const v = ++version;
     inflightCount++;
@@ -193,12 +219,13 @@ function optimisticList(initialValue) {
   }
   async function add(item, asyncAction) {
     const prev = items();
+    const id = tagItem(item);
     setItems([...prev, item]);
     const myVersion = begin();
     try {
       const result = await asyncAction();
       setItems((current) => {
-        const idx = current.lastIndexOf(item);
+        const idx = findIndexById(current, id);
         if (idx >= 0) {
           const next = [...current];
           next[idx] = result;
@@ -206,8 +233,10 @@ function optimisticList(initialValue) {
         }
         return [...current, result];
       });
+      idToItem.delete(id);
       end(myVersion);
     } catch {
+      idToItem.delete(id);
       end(myVersion, () => setItems(prev));
     }
   }
@@ -224,12 +253,13 @@ function optimisticList(initialValue) {
   }
   async function updateItem(predicate, patch, asyncAction) {
     const prev = items();
-    const patchedRefs = [];
+    const patchedIds = [];
     setItems(
       prev.map((item) => {
         if (predicate(item)) {
           const patched = { ...item, ...patch };
-          patchedRefs.push(patched);
+          const id = tagItem(patched);
+          patchedIds.push(id);
           return patched;
         }
         return item;
@@ -238,9 +268,19 @@ function optimisticList(initialValue) {
     const myVersion = begin();
     try {
       const result = await asyncAction();
-      setItems((current) => current.map((item) => patchedRefs.includes(item) ? result : item));
+      setItems(
+        (current) => current.map((item) => {
+          if (item !== null && typeof item === "object") {
+            const existingId = itemIds.get(item);
+            if (existingId !== void 0 && patchedIds.includes(existingId)) return result;
+          }
+          return item;
+        })
+      );
+      for (const id of patchedIds) idToItem.delete(id);
       end(myVersion);
     } catch {
+      for (const id of patchedIds) idToItem.delete(id);
       end(myVersion, () => setItems(prev));
     }
   }
@@ -249,10 +289,7 @@ function optimisticList(initialValue) {
     pending,
     add,
     remove,
-    update: updateItem,
-    addOptimistic: add,
-    removeOptimistic: remove,
-    updateOptimistic: updateItem
+    update: updateItem
   };
 }
 
@@ -271,14 +308,16 @@ function timeline(initial, maxHistory = 100) {
     const idx = index();
     const newHistory = hist.slice(0, idx + 1);
     newHistory.push(newValue);
-    if (newHistory.length > maxHistory) {
-      newHistory.shift();
-      setHistory(newHistory);
-      setIndex(newHistory.length - 1);
-    } else {
-      setHistory(newHistory);
-      setIndex(idx + 1);
-    }
+    batch(() => {
+      if (newHistory.length > maxHistory) {
+        newHistory.shift();
+        setHistory(newHistory);
+        setIndex(newHistory.length - 1);
+      } else {
+        setHistory(newHistory);
+        setIndex(idx + 1);
+      }
+    });
   }
   function undo() {
     if (canUndo()) {
@@ -291,8 +330,10 @@ function timeline(initial, maxHistory = 100) {
     }
   }
   function reset() {
-    setHistory([initial]);
-    setIndex(0);
+    batch(() => {
+      setHistory([initial]);
+      setIndex(0);
+    });
   }
   function jumpTo(targetIndex) {
     const hist = history();
@@ -304,8 +345,37 @@ function timeline(initial, maxHistory = 100) {
 }
 
 // src/patterns/globalStore.ts
+function deepClone(value) {
+  if (typeof structuredClone === "function") {
+    return structuredClone(value);
+  }
+  const seen = /* @__PURE__ */ new WeakSet();
+  const clone = (v) => {
+    if (v === null || typeof v !== "object") return v;
+    if (seen.has(v)) throw new Error("deepClone: circular reference");
+    seen.add(v);
+    if (v instanceof Date) return new Date(v.getTime());
+    if (v instanceof Map) {
+      const out2 = /* @__PURE__ */ new Map();
+      for (const [k, val] of v) out2.set(clone(k), clone(val));
+      return out2;
+    }
+    if (v instanceof Set) {
+      const out2 = /* @__PURE__ */ new Set();
+      for (const val of v) out2.add(clone(val));
+      return out2;
+    }
+    if (Array.isArray(v)) return v.map(clone);
+    const out = {};
+    for (const k of Object.keys(v)) {
+      out[k] = clone(v[k]);
+    }
+    return out;
+  };
+  return clone(value);
+}
 function globalStore(config) {
-  const initialState = JSON.parse(JSON.stringify(config.state));
+  const initialState = deepClone(config.state);
   const [getState, setState] = signal({ ...initialState });
   const listeners = /* @__PURE__ */ new Set();
   const middlewares = config.middleware || [];

package/dist/{chunk-OUZZEE4S.js → chunk-WANSMF2L.js}

@@ -1,19 +1,19 @@
 import {
   createPlugin
-} from "./chunk-K5ZUMYVS.js";
+} from "./chunk-3JHCYHWN.js";
 import {
   tagFactory
-} from "./chunk-B7SWRFUT.js";
+} from "./chunk-P2HSJDDN.js";
 import {
   derived
-} from "./chunk-L6JRBDNS.js";
+} from "./chunk-DRUZZAK4.js";
 import {
   effect
-} from "./chunk-6SA3QQES.js";
+} from "./chunk-WZA53FXU.js";
 import {
   batch,
   signal
-} from "./chunk-V2XTI523.js";
+} from "./chunk-RDTDJCAB.js";
 
 // src/ecosystem/adapters/mobx.ts
 function mobXAdapter(options) {
@@ -21,7 +21,7 @@ function mobXAdapter(options) {
     const { autorun } = options;
     const disposers = [];
     function fromMobX(expression) {
-      const [getValue, setValue] = signal(expression());
+      const [getValue, setValue] = signal(void 0);
       const disposer = autorun(() => {
         const newValue = expression();
         batch(() => {
@@ -29,7 +29,13 @@ function mobXAdapter(options) {
         });
       });
       disposers.push(disposer);
-      return getValue;
+      const getter = (() => getValue());
+      getter.dispose = () => {
+        const i = disposers.indexOf(disposer);
+        if (i >= 0) disposers.splice(i, 1);
+        disposer();
+      };
+      return getter;
     }
     function toMobX(sibuGetter, callback) {
       return effect(() => {
@@ -57,12 +63,12 @@ function reduxAdapter(options) {
         setState(store.getState());
       });
     });
-    function useSelector(selector) {
+    function select(selector) {
       return derived(() => selector(getState()));
     }
     const api = {
       getState,
-      useSelector,
+      select,
       dispatch: store.dispatch.bind(store),
       destroy: unsubscribe
     };
@@ -80,12 +86,12 @@ function zustandAdapter(options) {
         setSibuState(state);
       });
     });
-    function useSelector(selector) {
+    function select(selector) {
       return derived(() => selector(getState()));
     }
     const api = {
       getState,
-      useSelector,
+      select,
       setState: store.setState.bind(store),
       destroy() {
         unsubscribe();

package/dist/{chunk-23VV7YD3.js → chunk-WIPZPFBQ.js}

@@ -1,36 +1,34 @@
+import {
+  isUrlAttribute,
+  sanitizeUrl
+} from "./chunk-UCS6AMJ7.js";
 import {
   track
-} from "./chunk-V2XTI523.js";
+} from "./chunk-QO3WC6FS.js";
 import {
   devWarn,
   isDev
-} from "./chunk-UNXCEF6S.js";
-
-// src/utils/sanitize.ts
-function sanitizeUrl(url) {
-  const trimmed = url.replace(/[\x00-\x20\x7f-\x9f]+/g, "").trim();
-  if (!trimmed) return "";
-  const lower = trimmed.toLowerCase();
-  if (lower.startsWith("javascript:") || lower.startsWith("data:") || lower.startsWith("vbscript:") || lower.startsWith("blob:")) {
-    return "";
-  }
-  return trimmed;
-}
-function sanitizeCSSValue(value) {
-  const lower = value.toLowerCase().replace(/\s+/g, "");
-  if (lower.includes("url(") || lower.includes("expression(") || lower.includes("javascript:") || lower.includes("-moz-binding")) {
-    return "";
-  }
-  return value;
-}
-var URL_ATTRIBUTES = /* @__PURE__ */ new Set(["href", "src", "action", "formaction", "cite", "poster", "background", "srcset"]);
-function isUrlAttribute(attr) {
-  return URL_ATTRIBUTES.has(attr);
-}
+} from "./chunk-LMLD24FC.js";
 
 // src/reactivity/bindAttribute.ts
 var _isDev = isDev();
+function setProp(el, key, val) {
+  el[key] = val;
+}
+function isEventHandlerAttr(name) {
+  if (name.length < 3) return false;
+  const lower = name.toLowerCase();
+  return lower[0] === "o" && lower[1] === "n" && lower.charCodeAt(2) >= 97 && lower.charCodeAt(2) <= 122;
+}
 function bindAttribute(el, attr, getter) {
+  if (isEventHandlerAttr(attr)) {
+    if (_isDev)
+      devWarn(
+        `bindAttribute: refusing to bind event-handler attribute "${attr}". Use on:{ ${attr.slice(2)}: fn } instead.`
+      );
+    return () => {
+    };
+  }
   function commit() {
     let value;
     try {
@@ -42,7 +40,7 @@ function bindAttribute(el, attr, getter) {
     }
     if (typeof value === "boolean") {
       if (attr in el && (attr === "checked" || attr === "disabled" || attr === "selected")) {
-        el[attr] = value;
+        setProp(el, attr, value);
       } else if (value) {
         el.setAttribute(attr, "");
       } else {
@@ -52,7 +50,7 @@ function bindAttribute(el, attr, getter) {
     }
     const str = String(value);
     if ((attr === "value" || attr === "checked") && attr in el) {
-      el[attr] = attr === "checked" ? Boolean(value) : str;
+      setProp(el, attr, attr === "checked" ? Boolean(value) : str);
     } else {
       el.setAttribute(attr, isUrlAttribute(attr) ? sanitizeUrl(str) : str);
     }
@@ -83,7 +81,7 @@ function bindDynamic(el, nameGetter, valueGetter) {
     }
     const str = String(value);
     if ((name === "value" || name === "checked") && name in el) {
-      el[name] = name === "checked" ? Boolean(value) : str;
+      setProp(el, name, name === "checked" ? Boolean(value) : str);
     } else {
       el.setAttribute(name, isUrlAttribute(name) ? sanitizeUrl(str) : str);
     }
@@ -99,9 +97,6 @@ function bindDynamic(el, nameGetter, valueGetter) {
 }
 
 export {
-  sanitizeUrl,
-  sanitizeCSSValue,
-  isUrlAttribute,
   bindAttribute,
   bindDynamic
 };

package/dist/chunk-WZA53FXU.js

@@ -0,0 +1,149 @@
+import {
+  isSSR
+} from "./chunk-2RA7SHDA.js";
+import {
+  track,
+  untracked
+} from "./chunk-QO3WC6FS.js";
+import {
+  devAssert
+} from "./chunk-LMLD24FC.js";
+
+// src/core/signals/effect.ts
+var _g = globalThis;
+function on(deps, handler) {
+  let prev;
+  let first = true;
+  return () => {
+    const value = deps();
+    if (first) {
+      first = false;
+      prev = value;
+      untracked(() => handler(value, void 0));
+    } else {
+      const p = prev;
+      prev = value;
+      untracked(() => handler(value, p));
+    }
+  };
+}
+function effect(effectFn, options) {
+  devAssert(typeof effectFn === "function", "effect: argument must be a function.");
+  if (isSSR()) return () => {
+  };
+  const onError = options?.onError;
+  let userCleanups = [];
+  const onCleanup = (fn) => {
+    userCleanups.push(fn);
+  };
+  const runUserCleanups = () => {
+    if (userCleanups.length === 0) return;
+    const list = userCleanups;
+    userCleanups = [];
+    for (let i = list.length - 1; i >= 0; i--) {
+      try {
+        list[i]();
+      } catch (err) {
+        if (typeof console !== "undefined") {
+          console.warn("[SibuJS effect] onCleanup threw:", err);
+        }
+      }
+    }
+  };
+  const invokeBody = () => effectFn(onCleanup);
+  const wrappedFn = onError ? () => {
+    try {
+      invokeBody();
+    } catch (err) {
+      onError(err);
+    }
+  } : invokeBody;
+  let cleanupHandle = () => {
+  };
+  let running = false;
+  let rerunPending = false;
+  const MAX_RERUNS = 100;
+  const subscriber = () => {
+    if (running) {
+      rerunPending = true;
+      return;
+    }
+    running = true;
+    try {
+      let reruns = 0;
+      do {
+        rerunPending = false;
+        runUserCleanups();
+        cleanupHandle();
+        cleanupHandle = track(wrappedFn, subscriber);
+        if (++reruns > MAX_RERUNS) {
+          if (_g.__SIBU_DEV_WARN__ !== false && typeof console !== "undefined") {
+            console.error(
+              `[SibuJS] effect re-requested itself ${MAX_RERUNS}+ times \u2014 likely a write-reads-self cycle. Breaking to prevent infinite loop.`
+            );
+          }
+          rerunPending = false;
+          break;
+        }
+      } while (rerunPending);
+    } finally {
+      running = false;
+      rerunPending = false;
+    }
+  };
+  running = true;
+  try {
+    let reruns = 0;
+    do {
+      rerunPending = false;
+      runUserCleanups();
+      cleanupHandle();
+      cleanupHandle = track(wrappedFn, subscriber);
+      if (++reruns > MAX_RERUNS) {
+        if (_g.__SIBU_DEV_WARN__ !== false && typeof console !== "undefined") {
+          console.error(
+            `[SibuJS] effect re-requested itself ${MAX_RERUNS}+ times on initial run \u2014 likely a write-reads-self cycle. Breaking to prevent infinite loop.`
+          );
+        }
+        rerunPending = false;
+        break;
+      }
+    } while (rerunPending);
+  } finally {
+    running = false;
+    rerunPending = false;
+  }
+  const hook = _g.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
+  if (hook) hook.emit("effect:create", { effectFn });
+  let disposed = false;
+  return () => {
+    if (disposed) return;
+    disposed = true;
+    const h = _g.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
+    if (h) {
+      try {
+        h.emit("effect:destroy", { effectFn });
+      } catch {
+      }
+    }
+    try {
+      runUserCleanups();
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[SibuJS effect] onCleanup threw during dispose:", err);
+      }
+    }
+    try {
+      cleanupHandle();
+    } catch (err) {
+      if (typeof console !== "undefined") {
+        console.warn("[SibuJS effect] dispose threw:", err);
+      }
+    }
+  };
+}
+
+export {
+  on,
+  effect
+};