sibujs 3.1.0 → 3.2.1

package/dist/ui.cjs

@@ -251,7 +251,7 @@ function track(effectFn, subscriber) {
 function reactiveBinding(commit) {
   const run = () => {
     const s = subscriber;
-    if (s._reentrant) return;
+    if (s._disposed || s._reentrant) return;
     s._reentrant = true;
     try {
       retrack(commit, subscriber);
@@ -267,8 +267,12 @@ function reactiveBinding(commit) {
   subscriber._runEpoch = 0;
   subscriber._runs = 0;
   subscriber._reentrant = false;
+  subscriber._disposed = false;
   run();
-  return subscriber._dispose ?? (subscriber._dispose = () => cleanup(subscriber));
+  return subscriber._dispose ?? (subscriber._dispose = () => {
+    subscriber._disposed = true;
+    cleanup(subscriber);
+  });
 }
 function recordDependency(signal2) {
   if (!currentSubscriber) return;
@@ -428,6 +432,7 @@ function derived(getter, options) {
   const equals = options?.equals;
   const cs = {};
   cs._d = false;
+  cs._init = false;
   cs._g = getter;
   cs.__v = 0;
   const markDirty = () => {
@@ -436,11 +441,18 @@ function derived(getter, options) {
   };
   markDirty._c = 1;
   markDirty._sig = cs;
+  const recompute = () => {
+    const next = getter();
+    cs._v = equals && cs._init ? equals(cs._v, next) ? cs._v : next : next;
+    cs._d = false;
+    cs._init = true;
+  };
   track(() => {
     let threw = true;
     try {
       cs._v = getter();
       cs._d = false;
+      cs._init = true;
       threw = false;
     } finally {
       if (threw) cs._d = true;
@@ -456,20 +468,13 @@ function derived(getter, options) {
     }
     if (trackingSuspended) {
       if (cs._d) {
+        const prev = cs._v;
         evaluating = true;
-        let threw = true;
         try {
-          const prev = cs._v;
-          retrack(() => {
-            const next = getter();
-            cs._v = equals && cs._v !== void 0 ? equals(cs._v, next) ? cs._v : next : next;
-            cs._d = false;
-            threw = false;
-          }, markDirty);
+          retrack(recompute, markDirty);
           if (!Object.is(prev, cs._v)) cs.__v++;
         } finally {
           evaluating = false;
-          if (threw) cs._d = true;
         }
       }
       return cs._v;
@@ -478,18 +483,11 @@ function derived(getter, options) {
     if (cs._d) {
       const oldValue = cs._v;
       evaluating = true;
-      let threw = true;
       try {
-        retrack(() => {
-          const next = getter();
-          cs._v = equals && cs._v !== void 0 ? equals(cs._v, next) ? cs._v : next : next;
-          cs._d = false;
-          threw = false;
-        }, markDirty);
+        retrack(recompute, markDirty);
         if (!Object.is(oldValue, cs._v)) cs.__v++;
       } finally {
         evaluating = false;
-        if (threw) cs._d = true;
       }
       if (hook && oldValue !== cs._v) {
         hook.emit("computed:update", { signal: cs, oldValue, newValue: cs._v });
@@ -883,11 +881,15 @@ function dispose(node) {
 var als = null;
 try {
   if (typeof process !== "undefined" && process.versions && process.versions.node) {
-    const req = Function("return typeof require==='function'?require:null")();
-    if (req) {
-      const mod = req("node:async_hooks");
-      als = new mod.AsyncLocalStorage();
+    let mod = null;
+    const getBuiltin = process.getBuiltinModule;
+    if (typeof getBuiltin === "function") {
+      mod = getBuiltin("node:async_hooks");
+    } else {
+      const req = Function("return typeof require==='function'?require:null")();
+      if (req) mod = req("node:async_hooks");
     }
+    if (mod) als = new mod.AsyncLocalStorage();
   }
 } catch {
   als = null;
@@ -989,6 +991,7 @@ function effect(effectFn, options) {
     ctx.fn(ctx.onCleanup);
   };
   const sub = (() => {
+    if (ctx.disposed) return;
     if (ctx.running) {
       ctx.rerunPending = true;
       return;
@@ -1053,7 +1056,10 @@ function VirtualList(props) {
     const visibleCount = Math.ceil(props.containerHeight / props.itemHeight) + 2 * overscan;
     const endIndex = Math.min(items.length, startIndex + visibleCount);
     content.style.top = `${startIndex * props.itemHeight}px`;
-    content.innerHTML = "";
+    while (content.firstChild) {
+      dispose(content.firstChild);
+      content.removeChild(content.firstChild);
+    }
     for (let i = startIndex; i < endIndex; i++) {
       const itemEl = props.renderItem(items[i], i);
       itemEl.style.height = `${props.itemHeight}px`;
@@ -1061,7 +1067,7 @@ function VirtualList(props) {
       content.appendChild(itemEl);
     }
   };
-  effect(update);
+  registerDisposer(container, effect(update));
   return container;
 }
 
@@ -1202,7 +1208,10 @@ function inputMask(options) {
           }
         }
       }
-      input.setSelectionRange(newCursor, newCursor);
+      try {
+        input.setSelectionRange(newCursor, newCursor);
+      } catch {
+      }
     };
     const onFocus = () => {
       if (!input.value) {
@@ -1244,9 +1253,12 @@ function aria(element, attrs) {
     const ariaKey = key.startsWith("aria-") ? key : `aria-${key}`;
     if (typeof value === "function") {
       const getter = value;
-      track(() => {
-        element.setAttribute(ariaKey, String(getter()));
-      });
+      registerDisposer(
+        element,
+        track(() => {
+          element.setAttribute(ariaKey, String(getter()));
+        })
+      );
     } else {
       element.setAttribute(ariaKey, String(value));
     }
@@ -1509,6 +1521,7 @@ function createListbox(container, options = {}) {
     const opts = Array.from(container.querySelectorAll(optionSelector));
     for (const opt of opts) {
       if (!opt.id) opt.id = createId("listbox-option");
+      if (!opt.hasAttribute("aria-selected")) opt.setAttribute("aria-selected", "false");
     }
   }
   stampIds();
@@ -1699,9 +1712,17 @@ function removeScopedStyle(scopeId) {
 }
 
 // src/utils/sanitize.ts
+function stripControlChars(value) {
+  return value.replace(/[\x00-\x20\x7f-\x9f]+/g, "");
+}
+function isEventHandlerAttr(name) {
+  if (name.length < 3) return false;
+  const lower = name.toLowerCase();
+  return lower[0] === "o" && lower[1] === "n" && lower.charCodeAt(2) >= 97 && lower.charCodeAt(2) <= 122;
+}
 var SAFE_URL_PROTOCOLS = ["http:", "https:", "mailto:", "tel:", "ftp:"];
 function sanitizeUrl(url) {
-  const trimmed = url.replace(/[\x00-\x20\x7f-\x9f]+/g, "").trim();
+  const trimmed = stripControlChars(url).trim();
   if (!trimmed) return "";
   const lower = trimmed.toLowerCase();
   let schemeEnd = -1;
@@ -1734,7 +1755,7 @@ var URL_ATTRIBUTES = /* @__PURE__ */ new Set([
   "data"
 ]);
 function isUrlAttribute(attr) {
-  return URL_ATTRIBUTES.has(attr);
+  return URL_ATTRIBUTES.has(attr.toLowerCase());
 }
 
 // src/reactivity/bindAttribute.ts
@@ -1742,11 +1763,6 @@ var _isDev5 = isDev();
 function setProp(el, key, val) {
   el[key] = val;
 }
-function isEventHandlerAttr(name) {
-  if (name.length < 3) return false;
-  const lower = name.toLowerCase();
-  return lower[0] === "o" && lower[1] === "n" && lower.charCodeAt(2) >= 97 && lower.charCodeAt(2) <= 122;
-}
 function bindAttribute(el, attr, getter) {
   if (isEventHandlerAttr(attr)) {
     if (_isDev5)
@@ -2323,7 +2339,7 @@ function withBoundary(name, component) {
 function createSlots(slots) {
   return {
     renderSlot(name, fallback) {
-      const slotFn = slots[name];
+      const slotFn = Object.hasOwn(slots, name) ? slots[name] : void 0;
       if (slotFn) {
         const result = slotFn();
         if (Array.isArray(result)) {
@@ -2337,7 +2353,7 @@ function createSlots(slots) {
       return fallback ? fallback() : null;
     },
     hasSlot(name) {
-      return name in slots;
+      return Object.hasOwn(slots, name);
     }
   };
 }

package/dist/ui.js

@@ -38,7 +38,7 @@ import {
   toast,
   withScopedStyle,
   zipMask
-} from "./chunk-QNQY5DUS.js";
+} from "./chunk-NPIEEKPT.js";
 import {
   RenderProp,
   assertType,
@@ -54,24 +54,24 @@ import {
   withDefaults,
   withProps,
   withWrapper
-} from "./chunk-CNZ35WI2.js";
+} from "./chunk-VJE6DDYM.js";
 import {
   createId
 } from "./chunk-YT6HQ6AM.js";
-import "./chunk-2ZJ7TSW4.js";
-import "./chunk-SC437AMI.js";
+import "./chunk-RLUJL2MV.js";
+import "./chunk-JYXOEYI4.js";
 import {
   registerDisposer
 } from "./chunk-2UPRY23K.js";
-import "./chunk-UCS6AMJ7.js";
+import "./chunk-HMJFCBRR.js";
 import {
   effect
-} from "./chunk-ZIBE2SAT.js";
-import "./chunk-2RA7SHDA.js";
+} from "./chunk-FDY42FIU.js";
+import "./chunk-GOJMFRBL.js";
 import {
   signal
-} from "./chunk-RK4BQG25.js";
-import "./chunk-3U4ZVXVD.js";
+} from "./chunk-C427DVQF.js";
+import "./chunk-Z2FWAE4B.js";
 import "./chunk-LMLD24FC.js";
 
 // src/ui/formAction.ts
@@ -170,6 +170,7 @@ function createListbox(container, options = {}) {
     const opts = Array.from(container.querySelectorAll(optionSelector));
     for (const opt of opts) {
       if (!opt.id) opt.id = createId("listbox-option");
+      if (!opt.hasAttribute("aria-selected")) opt.setAttribute("aria-selected", "false");
     }
   }
   stampIds();

package/dist/widgets.cjs

@@ -198,7 +198,7 @@ function track(effectFn, subscriber) {
 function reactiveBinding(commit) {
   const run = () => {
     const s = subscriber;
-    if (s._reentrant) return;
+    if (s._disposed || s._reentrant) return;
     s._reentrant = true;
     try {
       retrack(commit, subscriber);
@@ -214,8 +214,12 @@ function reactiveBinding(commit) {
   subscriber._runEpoch = 0;
   subscriber._runs = 0;
   subscriber._reentrant = false;
+  subscriber._disposed = false;
   run();
-  return subscriber._dispose ?? (subscriber._dispose = () => cleanup(subscriber));
+  return subscriber._dispose ?? (subscriber._dispose = () => {
+    subscriber._disposed = true;
+    cleanup(subscriber);
+  });
 }
 function recordDependency(signal2) {
   if (!currentSubscriber) return;
@@ -405,6 +409,7 @@ function derived(getter, options) {
   const equals = options?.equals;
   const cs = {};
   cs._d = false;
+  cs._init = false;
   cs._g = getter;
   cs.__v = 0;
   const markDirty = () => {
@@ -413,11 +418,18 @@ function derived(getter, options) {
   };
   markDirty._c = 1;
   markDirty._sig = cs;
+  const recompute = () => {
+    const next = getter();
+    cs._v = equals && cs._init ? equals(cs._v, next) ? cs._v : next : next;
+    cs._d = false;
+    cs._init = true;
+  };
   track(() => {
     let threw = true;
     try {
       cs._v = getter();
       cs._d = false;
+      cs._init = true;
       threw = false;
     } finally {
       if (threw) cs._d = true;
@@ -433,20 +445,13 @@ function derived(getter, options) {
     }
     if (trackingSuspended) {
       if (cs._d) {
+        const prev = cs._v;
         evaluating = true;
-        let threw = true;
         try {
-          const prev = cs._v;
-          retrack(() => {
-            const next = getter();
-            cs._v = equals && cs._v !== void 0 ? equals(cs._v, next) ? cs._v : next : next;
-            cs._d = false;
-            threw = false;
-          }, markDirty);
+          retrack(recompute, markDirty);
           if (!Object.is(prev, cs._v)) cs.__v++;
         } finally {
           evaluating = false;
-          if (threw) cs._d = true;
         }
       }
       return cs._v;
@@ -455,18 +460,11 @@ function derived(getter, options) {
     if (cs._d) {
       const oldValue = cs._v;
       evaluating = true;
-      let threw = true;
       try {
-        retrack(() => {
-          const next = getter();
-          cs._v = equals && cs._v !== void 0 ? equals(cs._v, next) ? cs._v : next : next;
-          cs._d = false;
-          threw = false;
-        }, markDirty);
+        retrack(recompute, markDirty);
         if (!Object.is(oldValue, cs._v)) cs.__v++;
       } finally {
         evaluating = false;
-        if (threw) cs._d = true;
       }
       if (hook && oldValue !== cs._v) {
         hook.emit("computed:update", { signal: cs, oldValue, newValue: cs._v });
@@ -487,11 +485,15 @@ function derived(getter, options) {
 var als = null;
 try {
   if (typeof process !== "undefined" && process.versions && process.versions.node) {
-    const req = Function("return typeof require==='function'?require:null")();
-    if (req) {
-      const mod = req("node:async_hooks");
-      als = new mod.AsyncLocalStorage();
+    let mod = null;
+    const getBuiltin = process.getBuiltinModule;
+    if (typeof getBuiltin === "function") {
+      mod = getBuiltin("node:async_hooks");
+    } else {
+      const req = Function("return typeof require==='function'?require:null")();
+      if (req) mod = req("node:async_hooks");
     }
+    if (mod) als = new mod.AsyncLocalStorage();
   }
 } catch {
   als = null;
@@ -593,6 +595,7 @@ function effect(effectFn, options) {
     ctx.fn(ctx.onCleanup);
   };
   const sub = (() => {
+    if (ctx.disposed) return;
     if (ctx.running) {
       ctx.rerunPending = true;
       return;
@@ -1772,7 +1775,20 @@ function fileUpload(options) {
 
 // src/utils/sanitize.ts
 function stripHtml(html) {
-  return String(html).replace(/<[^>]*>/g, "");
+  const input = String(html);
+  if (typeof DOMParser !== "undefined") {
+    try {
+      return new DOMParser().parseFromString(input, "text/html").body.textContent ?? "";
+    } catch {
+    }
+  }
+  let prev;
+  let out = input;
+  do {
+    prev = out;
+    out = out.replace(/<[^>]*>/g, "");
+  } while (out !== prev);
+  return out.replace(/<[^>]*$/, "");
 }
 
 // src/widgets/contentEditable.ts

package/dist/widgets.js

@@ -8,14 +8,14 @@ import {
   select,
   tabs,
   tooltip
-} from "./chunk-WYU7CYJ3.js";
-import "./chunk-3DJH25UO.js";
-import "./chunk-SC437AMI.js";
-import "./chunk-UCS6AMJ7.js";
-import "./chunk-ZIBE2SAT.js";
-import "./chunk-2RA7SHDA.js";
-import "./chunk-RK4BQG25.js";
-import "./chunk-3U4ZVXVD.js";
+} from "./chunk-2C4E3HBM.js";
+import "./chunk-H6PCHJZQ.js";
+import "./chunk-JYXOEYI4.js";
+import "./chunk-HMJFCBRR.js";
+import "./chunk-FDY42FIU.js";
+import "./chunk-GOJMFRBL.js";
+import "./chunk-C427DVQF.js";
+import "./chunk-Z2FWAE4B.js";
 import "./chunk-LMLD24FC.js";
 export {
   accordion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sibujs",
-  "version": "3.1.0",
+  "version": "3.2.1",
   "description": "A lightweight, function-based frontend framework that combines the best of React, Svelte, and Vue — with zero VDOM and maximum simplicity. Designed for developers who want fine-grained reactivity and full control without compilation or magic.",
   "keywords": [
     "frontend",
@@ -136,7 +136,9 @@
   "devDependencies": {
     "@biomejs/biome": "2.4.7",
     "@types/node": "^25.5.0",
+    "@vitest/coverage-v8": "^3.1.3",
     "@vitest/ui": "^3.1.3",
+    "fake-indexeddb": "^6.2.5",
     "jsdom": "^26.1.0",
     "tsup": "^8.5.1",
     "typescript": "^5.8.3",