sibujs 4.11.0 → 4.12.0

package/dist/plugins.cjs

@@ -699,6 +699,9 @@ function contextualAttributeRefusal(el, name, value, origin) {
   if (SVG_ANIMATION_ELEMENTS.has(local) && el.namespaceURI === SVG_NS) return animationRefusal(name, value);
   return ContextualRefusal.None;
 }
+function isRefusedAnimationAttribute(el, name, value) {
+  return SVG_ANIMATION_ELEMENTS.has(el.localName) && el.namespaceURI === SVG_NS && animationRefusal(name, value) !== ContextualRefusal.None;
+}
 function settleAttributeProvenance(el, name, origin) {
   if (el.localName !== "link" || canonicalAttrName(name) !== "href") return;
   if (origin !== "static" && el.hasAttribute("href")) runtimeHrefLinks.add(el);
@@ -966,6 +969,140 @@ var init_ssr_context = __esm({
   }
 });
 
+// src/utils/globalSingleton.ts
+function globalSingleton(key, create) {
+  const g2 = globalThis;
+  return g2[key] ?? (g2[key] = create());
+}
+var init_globalSingleton = __esm({
+  "src/utils/globalSingleton.ts"() {
+    "use strict";
+  }
+});
+
+// src/utils/embedPolicy.ts
+function currentEmbedAllowlist() {
+  const scoped = getRequestStore()?.caches?.get(REQUEST_CACHE)?.get("allowed");
+  return scoped ?? state2.allowed;
+}
+function resolveEmbedSrc(value, allowed = currentEmbedAllowlist()) {
+  if (typeof value !== "string" || sanitizeUrl(value) === "") return null;
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.username || url.password) return null;
+  if (typeof location !== "undefined" && url.origin === location.origin) return null;
+  for (const entry of allowed) {
+    if (url.origin !== entry.origin) continue;
+    const path2 = entry.path;
+    if (path2 === "" || url.pathname === path2 || url.pathname.startsWith(path2.endsWith("/") ? path2 : `${path2}/`)) {
+      return url.href;
+    }
+  }
+  return null;
+}
+function narrowEmbedSandbox(value) {
+  const out = [];
+  for (const token of value.toLowerCase().split(/[\t\n\f\r ]+/)) {
+    if (token && DEFAULT_EMBED_SANDBOX.includes(token) && !out.includes(token)) out.push(token);
+  }
+  return out.join(" ");
+}
+function narrowEmbedAllow(value) {
+  const granted = [];
+  const denied = [];
+  for (const directive of value.split(";")) {
+    const tokens = directive.trim().split(/[\t\n\f\r ]+/);
+    const feature = tokens[0];
+    if (!feature) continue;
+    const list = tokens.slice(1).map((token) => token.toLowerCase());
+    const grantsSrc = (list.length === 0 || list.includes("'src'") || list.includes("*")) && !list.includes("'none'");
+    if (!grantsSrc) denied.push(feature);
+    else if (EMBED_FEATURES.has(feature) && !granted.includes(feature)) granted.push(feature);
+  }
+  return granted.filter((feature) => !denied.includes(feature)).join("; ");
+}
+function getEmbedRecord(frame) {
+  return state2.frames.get(frame);
+}
+function intersect(current, permitted, separator) {
+  const allowed = permitted.split(separator);
+  return current.split(separator).filter((token) => token && allowed.includes(token)).join(separator);
+}
+function embedSerializedAttribute(record, seen, name, value) {
+  switch (name) {
+    case "src":
+      return resolveEmbedSrc(value, record.allowed);
+    case "title":
+      if (!value.trim()) return null;
+      seen.title = true;
+      return value;
+    case "sandbox":
+      seen.sandbox = true;
+      return intersect(narrowEmbedSandbox(value), record.sandbox, " ");
+    case "allow": {
+      const allow = intersect(narrowEmbedAllow(value), record.allow, "; ");
+      if (allow.split("; ").includes("fullscreen")) seen.fullscreen = true;
+      return allow || null;
+    }
+    case "referrerpolicy":
+      seen.referrer = true;
+      return value.trim().toLowerCase() === "no-referrer" ? "no-referrer" : record.referrer;
+    case "loading":
+      return value === "eager" ? "eager" : "lazy";
+    case "id":
+    case "class":
+    case "style":
+    case "width":
+    case "height":
+      return value;
+    default:
+      return name.startsWith("data-") || name.startsWith("aria-") ? value : null;
+  }
+}
+function embedSerializationTail(record, seen) {
+  if (!seen.title) return null;
+  let tail = "";
+  if (!seen.sandbox) tail += ` sandbox="${record.sandbox}"`;
+  if (!seen.referrer) tail += ` referrerpolicy="${record.referrer}"`;
+  if (seen.fullscreen) tail += ' allowfullscreen=""';
+  return tail;
+}
+var state2, REQUEST_CACHE, DEFAULT_EMBED_SANDBOX, EMBED_FEATURES;
+var init_embedPolicy = __esm({
+  "src/utils/embedPolicy.ts"() {
+    "use strict";
+    init_ssr_context();
+    init_globalSingleton();
+    init_sanitize();
+    state2 = globalSingleton(/* @__PURE__ */ Symbol.for("sibujs.embed.v2"), () => ({
+      allowed: [],
+      frames: /* @__PURE__ */ new WeakMap()
+    }));
+    REQUEST_CACHE = "embed";
+    DEFAULT_EMBED_SANDBOX = [
+      "allow-scripts",
+      "allow-same-origin",
+      "allow-presentation",
+      "allow-popups",
+      "allow-popups-to-escape-sandbox"
+    ];
+    EMBED_FEATURES = /* @__PURE__ */ new Set([
+      "accelerometer",
+      "autoplay",
+      "clipboard-write",
+      "encrypted-media",
+      "fullscreen",
+      "gyroscope",
+      "picture-in-picture",
+      "web-share"
+    ]);
+  }
+});
+
 // src/utils/guards.ts
 function isUnsafeKey(key) {
   return UNSAFE_KEYS.has(key);
@@ -1133,69 +1270,129 @@ function childNodesOf(node) {
 function getAttributeOf(el, name) {
   return nativeAccessors().getAttribute.call(el, name);
 }
-function serializeOpenTag(element, tag) {
+function isBreakout(lowerName, element) {
+  if (BREAKOUT_TAGS.has(lowerName)) return true;
+  return lowerName === "font" && (element.hasAttribute("color") || element.hasAttribute("face") || element.hasAttribute("size"));
+}
+function fitsParseContext(ns, lowerName, element, context) {
+  if (ns === SVG_NS4) {
+    if (context === 1 /* Svg */) return !isBreakout(lowerName, element);
+    return lowerName === "svg" && (context === 0 /* Html */ || context === 3 /* Annotation */);
+  }
+  if (ns === MATHML_NS) {
+    if (context === 2 /* Math */ || context === 3 /* Annotation */) return !isBreakout(lowerName, element);
+    return lowerName === "math" && context === 0 /* Html */;
+  }
+  return context === 0 /* Html */;
+}
+function childParseContext(ns, lowerName, element) {
+  if (ns === SVG_NS4) {
+    return lowerName === "foreignobject" || lowerName === "desc" || lowerName === "title" ? 0 /* Html */ : 1 /* Svg */;
+  }
+  if (ns === MATHML_NS) {
+    if (lowerName === "mi" || lowerName === "mo" || lowerName === "mn" || lowerName === "ms" || lowerName === "mtext") {
+      return 0 /* Html */;
+    }
+    if (lowerName === "annotation-xml") {
+      const encoding = (element.getAttribute("encoding") ?? "").toLowerCase();
+      return encoding === "text/html" || encoding === "application/xhtml+xml" ? 0 /* Html */ : 3 /* Annotation */;
+    }
+    return 2 /* Math */;
+  }
+  return 0 /* Html */;
+}
+function foreignAttrName(attr) {
+  const ns = attr.namespaceURI;
+  if (ns === XLINK_NS2) return `xlink:${attr.localName}`;
+  if (ns === XML_NS2) return `xml:${attr.localName}`;
+  if (ns === XMLNS_NS) return attr.localName === "xmlns" ? "xmlns" : `xmlns:${attr.localName}`;
+  return attr.name;
+}
+function serializeOpenTag(element, tag, foreign) {
   let html2 = `<${tag}`;
-  const meta2 = tag === "meta" ? /* @__PURE__ */ new Map() : null;
+  const meta2 = tag === "meta" && !foreign ? /* @__PURE__ */ new Map() : null;
+  const embed2 = tag === "iframe" && !foreign ? getEmbedRecord(element) : void 0;
+  const embedSeen = embed2 ? { sandbox: false, referrer: false, title: false, fullscreen: false } : null;
   const attrs = attributesOf(element);
   for (let i2 = 0; i2 < attrs.length; i2++) {
     const attr = attrs[i2];
-    const rawName = attr.name;
+    const rawName = foreign ? foreignAttrName(attr) : attr.name;
     if (!isSafeAttrName(rawName)) continue;
     if (isEventHandlerAttr(rawName)) continue;
     if (isForbiddenSsrAttr(rawName)) continue;
-    const value = resolveAttributeValue(rawName.toLowerCase(), attr.value);
+    const lowerName = rawName.toLowerCase();
+    let value = resolveAttributeValue(lowerName, attr.value);
     if (value === null) continue;
+    if (foreign && isRefusedAnimationAttribute(element, rawName, value)) continue;
+    if (embed2 && embedSeen) {
+      value = embedSerializedAttribute(embed2, embedSeen, lowerName, value);
+      if (value === null) continue;
+    }
     meta2?.set(rawName, value);
     html2 += ` ${rawName}="${escapeAttr(value)}"`;
   }
   if (meta2 && isForbiddenMetaSnapshot(meta2)) return null;
+  if (embed2 && embedSeen) {
+    const tail = embedSerializationTail(embed2, embedSeen);
+    if (tail === null) return null;
+    html2 += tail;
+  }
   if (!getAttributeOf(element, "data-sibu-hydrate")) {
     html2 += ` data-sibu-ssr="true"`;
   }
   return html2;
 }
+function serializeNode(node, context) {
+  if (node.nodeType === 3) return escapeHtml(node.textContent || "");
+  if (node.nodeType === 8) return `<!--${safeCommentText(node.textContent || "")}-->`;
+  let foreign = false;
+  if (!(node instanceof HTMLElement)) {
+    const ns2 = node.nodeType === 1 ? node.namespaceURI : null;
+    if (ns2 !== SVG_NS4 && ns2 !== MATHML_NS) return escapeHtml(node.textContent || "");
+    foreign = true;
+  }
+  const element = node;
+  const tag = foreign ? element.localName : tagNameOf(element).toLowerCase();
+  if (isCodeTextElement(tag)) return DEV ? `<!--ssr:${tag}-stripped-->` : "";
+  if (!/^[a-z][a-z0-9-]*$/i.test(tag)) return DEV ? "<!--ssr:invalid-tag-->" : "";
+  const ns = foreign ? element.namespaceURI : null;
+  const lowerName = tag.toLowerCase();
+  if (!fitsParseContext(ns, lowerName, element, context)) return DEV ? `<!--ssr:${tag}-misplaced-->` : "";
+  const openTag = serializeOpenTag(element, tag, foreign);
+  if (openTag === null) return DEV ? `<!--ssr:${tag}-stripped-->` : "";
+  const children = childNodesOf(element);
+  if (foreign ? children.length === 0 : VOID_ELEMENTS.has(tag)) return `${openTag} />`;
+  return {
+    open: `${openTag}>`,
+    close: `</${tag}>`,
+    children: Array.from(children),
+    context: childParseContext(ns, lowerName, element)
+  };
+}
 function renderToString(element) {
+  return renderNodeToString(element, 0 /* Html */);
+}
+function renderNodeToString(element, context) {
   if (element instanceof DocumentFragment) {
     return Array.from(element.childNodes).map((child) => {
       try {
-        return renderToString(child);
+        return renderNodeToString(child, context);
       } catch (err) {
         return ssrErrorComment(err);
       }
     }).join("");
   }
-  if (element.nodeType === 3) {
-    return escapeHtml(element.textContent || "");
-  }
-  if (element.nodeType === 8) {
-    return `<!--${safeCommentText(element.textContent || "")}-->`;
-  }
-  if (!(element instanceof HTMLElement)) {
-    return escapeHtml(element.textContent || "");
-  }
-  const tag = tagNameOf(element).toLowerCase();
-  if (isCodeTextElement(tag)) {
-    return DEV ? `<!--ssr:${tag}-stripped-->` : "";
-  }
-  if (!/^[a-z][a-z0-9-]*$/i.test(tag)) {
-    return DEV ? "<!--ssr:invalid-tag-->" : "";
-  }
-  const openTag = serializeOpenTag(element, tag);
-  if (openTag === null) return DEV ? `<!--ssr:${tag}-stripped-->` : "";
-  let html2 = openTag;
-  if (VOID_ELEMENTS.has(tag)) {
-    return `${html2} />`;
-  }
-  html2 += ">";
-  for (const child of Array.from(childNodesOf(element))) {
+  const frame = serializeNode(element, context);
+  if (typeof frame === "string") return frame;
+  let html2 = frame.open;
+  for (const child of frame.children) {
     try {
-      html2 += renderToString(child);
+      html2 += renderNodeToString(child, frame.context);
     } catch (err) {
       html2 += ssrErrorComment(err);
     }
   }
-  html2 += `</${tag}>`;
-  return html2;
+  return html2 + frame.close;
 }
 function hydrate(component, container, options = {}) {
   const clientTree = component();
@@ -1378,56 +1575,34 @@ function renderToDocument(component, options = {}) {
   </body>
 </html>`;
 }
-async function* renderToStream(element) {
+function renderToStream(element) {
+  return streamNode(element, 0 /* Html */);
+}
+async function* streamNode(element, context) {
   if (element instanceof DocumentFragment) {
     for (const child of Array.from(element.childNodes)) {
       try {
-        yield* renderToStream(child);
+        yield* streamNode(child, context);
       } catch (err) {
         yield ssrErrorComment(err);
       }
     }
     return;
   }
-  if (element.nodeType === 3) {
-    yield escapeHtml(element.textContent || "");
-    return;
-  }
-  if (element.nodeType === 8) {
-    yield `<!--${safeCommentText(element.textContent || "")}-->`;
-    return;
-  }
-  if (!(element instanceof HTMLElement)) {
-    yield escapeHtml(element.textContent || "");
-    return;
-  }
-  const tag = tagNameOf(element).toLowerCase();
-  if (isCodeTextElement(tag)) {
-    if (DEV) yield `<!--ssr:${tag}-stripped-->`;
-    return;
-  }
-  if (!/^[a-z][a-z0-9-]*$/i.test(tag)) {
-    if (DEV) yield "<!--ssr:invalid-tag-->";
-    return;
-  }
-  const openTag = serializeOpenTag(element, tag);
-  if (openTag === null) {
-    if (DEV) yield `<!--ssr:${tag}-stripped-->`;
+  const frame = serializeNode(element, context);
+  if (typeof frame === "string") {
+    if (frame) yield frame;
     return;
   }
-  if (VOID_ELEMENTS.has(tag)) {
-    yield `${openTag} />`;
-    return;
-  }
-  yield `${openTag}>`;
-  for (const child of Array.from(childNodesOf(element))) {
+  yield frame.open;
+  for (const child of frame.children) {
     try {
-      yield* renderToStream(child);
+      yield* streamNode(child, frame.context);
     } catch (err) {
       yield ssrErrorComment(err);
     }
   }
-  yield `</${tag}>`;
+  yield frame.close;
 }
 async function collectStream(stream) {
   let result = "";
@@ -1583,8 +1758,8 @@ async function* renderToSuspenseStream(element, pendingBoundaries = [], options)
 function escapeScriptJson(json) {
   return json.replace(/</g, "\\u003c").replace(/>/g, "\\u003e").replace(/&/g, "\\u0026").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
 }
-function serializeState(state2, nonce, options) {
-  const rawJson = JSON.stringify(state2);
+function serializeState(state3, nonce, options) {
+  const rawJson = JSON.stringify(state3);
   const maxBytes = options?.maxBytes ?? DEFAULT_MAX_SSR_BYTES;
   const byteLen = typeof TextEncoder !== "undefined" ? new TextEncoder().encode(rawJson).byteLength : Buffer.byteLength(rawJson, "utf8");
   if (byteLen > maxBytes) {
@@ -1612,7 +1787,7 @@ function escapeHtml(str) {
 function escapeAttr(str) {
   return str.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-var SAFE_ATTR_NAME, VOID_ELEMENTS, nativeAccessorsByRealm, SAFE_ID, SAFE_SUSPENSE_ID, SSR_DATA_ATTR, DEFAULT_MAX_SSR_BYTES;
+var SAFE_ATTR_NAME, VOID_ELEMENTS, nativeAccessorsByRealm, SVG_NS4, MATHML_NS, XLINK_NS2, XML_NS2, XMLNS_NS, BREAKOUT_TAGS, SAFE_ID, SAFE_SUSPENSE_ID, SSR_DATA_ATTR, DEFAULT_MAX_SSR_BYTES;
 var init_ssr = __esm({
   "src/platform/ssr.ts"() {
     "use strict";
@@ -1620,6 +1795,7 @@ var init_ssr = __esm({
     init_dispose();
     init_ssr_context();
     init_elementPolicy();
+    init_embedPolicy();
     init_guards();
     init_headEntry();
     init_metaRefresh();
@@ -1642,6 +1818,57 @@ var init_ssr = __esm({
       "wbr"
     ]);
     nativeAccessorsByRealm = /* @__PURE__ */ new WeakMap();
+    SVG_NS4 = "http://www.w3.org/2000/svg";
+    MATHML_NS = "http://www.w3.org/1998/Math/MathML";
+    XLINK_NS2 = "http://www.w3.org/1999/xlink";
+    XML_NS2 = "http://www.w3.org/XML/1998/namespace";
+    XMLNS_NS = "http://www.w3.org/2000/xmlns/";
+    BREAKOUT_TAGS = /* @__PURE__ */ new Set([
+      "b",
+      "big",
+      "blockquote",
+      "body",
+      "br",
+      "center",
+      "code",
+      "dd",
+      "div",
+      "dl",
+      "dt",
+      "em",
+      "embed",
+      "h1",
+      "h2",
+      "h3",
+      "h4",
+      "h5",
+      "h6",
+      "head",
+      "hr",
+      "i",
+      "img",
+      "li",
+      "listing",
+      "menu",
+      "meta",
+      "nobr",
+      "ol",
+      "p",
+      "pre",
+      "ruby",
+      "s",
+      "small",
+      "span",
+      "strong",
+      "strike",
+      "sub",
+      "sup",
+      "table",
+      "tt",
+      "u",
+      "ul",
+      "var"
+    ]);
     SAFE_ID = /^[A-Za-z0-9_-]+$/;
     SAFE_SUSPENSE_ID = /^[A-Za-z0-9_-]+$/;
     SSR_DATA_ATTR = "__SIBU_SSR_DATA__";
@@ -2381,7 +2608,7 @@ function forEachSubscriber(signal2, visit) {
 }
 
 // src/reactivity/track.ts
-var _runtimeVersion = true ? "4.11.0" : "dev";
+var _runtimeVersion = true ? "4.12.0" : "dev";
 var REGISTRY_KEY = /* @__PURE__ */ Symbol.for("sibujs.reactive.v1");
 function resolveReactiveApi() {
   const g2 = globalThis;
@@ -2641,6 +2868,16 @@ function bindChildNode(placeholder, getter) {
 init_elementPolicy();
 init_sanitize();
 init_dispose();
+
+// src/core/rendering/requireDocument.ts
+init_dev();
+function noDocument() {
+  throw new Error(
+    "[SibuJS] renderToString needs a DOM: register happy-dom or jsdom globals first." + (DEV ? ' There is no global `document`, and SibuJS builds live DOM nodes, on the server too. For example: import { GlobalRegistrator } from "@happy-dom/global-registrator"; GlobalRegistrator.register(); See SSR in AGENTS.md \xA710.' : "")
+  );
+}
+
+// src/core/rendering/tagFactory.ts
 var SVG_NS3 = "http://www.w3.org/2000/svg";
 var CLOBBER_RISKY_IDS = /* @__PURE__ */ new Set([
   "config",
@@ -2833,6 +3070,7 @@ function tagFactory(tag, ns) {
     if (blocked) {
       throw new Error(`tagFactory: refusing to create <${tag}> \u2014 tag is blocked for security reasons.`);
     }
+    if (typeof document === "undefined") noDocument();
     const el = ns ? document.createElementNS(ns, tag) : document.createElement(tag);
     if (first === void 0) return el;
     if (typeof first === "string") {
@@ -3137,7 +3375,7 @@ function emitDevtools(hook, event, payload) {
 // src/core/signals/signal.ts
 var _g = globalThis;
 function signal(initial, options) {
-  const state2 = {
+  const state3 = {
     value: initial,
     __v: 0,
     __sc: 0,
@@ -3150,71 +3388,64 @@ function signal(initial, options) {
   };
   const debugName = DEV ? options?.name : void 0;
   const equalsFn = options?.equals;
-  if (debugName) state2.__name = debugName;
+  if (debugName) state3.__name = debugName;
   function get() {
-    recordDependency2(state2);
-    return state2.value;
+    recordDependency2(state3);
+    return state3.value;
   }
-  get.__signal = state2;
+  get.__signal = state3;
   if (debugName) get.__name = debugName;
   let set;
   if (equalsFn) {
     set = (next) => {
-      const prev = state2.value;
+      const prev = state3.value;
       const newValue = typeof next === "function" ? next(prev) : next;
       if (equalsFn(prev, newValue)) return;
-      state2.value = newValue;
-      state2.__v++;
+      state3.value = newValue;
+      state3.__v++;
       if (DEV) {
         const hook = _g.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
-        if (hook) emitDevtools(hook, "signal:update", { signal: state2, name: debugName, oldValue: prev, newValue });
+        if (hook) emitDevtools(hook, "signal:update", { signal: state3, name: debugName, oldValue: prev, newValue });
       }
-      if (!enqueueBatchedSignal(state2)) {
-        notifySubscribers2(state2);
+      if (!enqueueBatchedSignal(state3)) {
+        notifySubscribers2(state3);
       }
     };
   } else if (DEV) {
     set = (next) => {
-      const prev = state2.value;
+      const prev = state3.value;
       const newValue = typeof next === "function" ? next(prev) : next;
       if (Object.is(newValue, prev)) return;
-      state2.value = newValue;
-      state2.__v++;
+      state3.value = newValue;
+      state3.__v++;
       const hook = _g.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
-      if (hook) emitDevtools(hook, "signal:update", { signal: state2, name: debugName, oldValue: prev, newValue });
-      if (!enqueueBatchedSignal(state2)) {
-        notifySubscribers2(state2);
+      if (hook) emitDevtools(hook, "signal:update", { signal: state3, name: debugName, oldValue: prev, newValue });
+      if (!enqueueBatchedSignal(state3)) {
+        notifySubscribers2(state3);
       }
     };
   } else {
     set = (next) => {
-      const prev = state2.value;
+      const prev = state3.value;
       const newValue = typeof next === "function" ? next(prev) : next;
       if (Object.is(newValue, prev)) return;
-      state2.value = newValue;
-      state2.__v++;
-      if (!enqueueBatchedSignal(state2)) {
-        notifySubscribers2(state2);
+      state3.value = newValue;
+      state3.__v++;
+      if (!enqueueBatchedSignal(state3)) {
+        notifySubscribers2(state3);
       }
     };
   }
   if (DEV) {
     const hook = _g.__SIBU_DEVTOOLS_GLOBAL_HOOK__;
-    if (hook) emitDevtools(hook, "signal:create", { signal: state2, name: debugName, getter: get, initial });
+    if (hook) emitDevtools(hook, "signal:create", { signal: state3, name: debugName, getter: get, initial });
   }
   return [get, set];
 }
 
 // src/plugins/i18n.ts
 init_ssr_context();
-
-// src/utils/globalSingleton.ts
-function globalSingleton(key, create) {
-  const g2 = globalThis;
-  return g2[key] ?? (g2[key] = create());
-}
-
-// src/plugins/i18n.ts
+init_globalSingleton();
 var _i18n = globalSingleton(/* @__PURE__ */ Symbol.for("sibujs.i18n.v1"), () => ({
   locale: signal("en"),
   locales: /* @__PURE__ */ Object.create(null),
@@ -4352,7 +4583,9 @@ var _SibuRouter = class _SibuRouter {
   }
   updateHistory(to, options) {
     const search = serializeQuery(to.queryAll);
-    const fullPath = this.options.base + to.path + (search ? `?${search}` : "") + (to.hash ? `#${to.hash}` : "");
+    const routeUrl = to.path + (search ? `?${search}` : "") + (to.hash ? `#${to.hash}` : "");
+    const loc = globalThis.location;
+    const fullPath = this.options.mode === "hash" ? `${loc ? loc.pathname + loc.search : ""}#${routeUrl}` : this.options.base + routeUrl;
     const h = globalThis.history;
     if (!h) return;
     if (options.replace) {
@@ -5127,7 +5360,7 @@ function RouterLink(props, children) {
   const targetPath = normalizePathname(hrefPathRaw);
   const targetQuery = queryIdentity(hrefQueryRaw);
   const link2 = document.createElement("a");
-  link2.href = href;
+  link2.href = kind === "internal" && _routerRef.current["options"].mode === "hash" ? `#${href}` : href;
   if (target) {
     link2.target = target;
     if (target === "_blank") {
@@ -5675,7 +5908,7 @@ function renderRouteToString(url, routes, _options) {
   };
 }
 function renderRouteToDocument(url, routes, options) {
-  const { html: html2, state: state2 } = renderRouteToString(url, routes, options);
+  const { html: html2, state: state3 } = renderRouteToString(url, routes, options);
   const opts = options || {};
   const metaTags = (opts.meta || []).map((attrs) => serializeHeadEntry("meta", attrs)).filter(Boolean).join("\n    ");
   const linkTags = (opts.links || []).map((attrs) => serializeHeadEntry("link", attrs)).filter(Boolean).join("\n    ");
@@ -5684,7 +5917,7 @@ function renderRouteToDocument(url, routes, options) {
     if (!safe) return "";
     return `<script src="${escapeAttrLocal(safe)}"></script>`;
   }).filter(Boolean).join("\n    ");
-  const stateScript = serializeRouteState(state2, opts.nonce);
+  const stateScript = serializeRouteState(state3, opts.nonce);
   return `<!DOCTYPE html>
 <html>
   <head>
@@ -5702,8 +5935,8 @@ function renderRouteToDocument(url, routes, options) {
   </body>
 </html>`;
 }
-function serializeRouteState(state2, nonce) {
-  const json = escapeScriptJson(JSON.stringify(state2));
+function serializeRouteState(state3, nonce) {
+  const json = escapeScriptJson(JSON.stringify(state3));
   const nonceAttr = nonce ? ` nonce="${escapeAttrLocal(nonce)}"` : "";
   return `<script${nonceAttr}>window.${SSR_ROUTE_STATE_KEY}=${json}</script>`;
 }
@@ -5782,6 +6015,7 @@ function adoptThenable(value) {
 }
 
 // src/plugins/plugin.ts
+init_globalSingleton();
 var CANCELLED_BRAND = /* @__PURE__ */ Symbol.for("sibujs.plugins.installCancelled.v1");
 var _a;
 var PluginInstallCancelledError = class extends Error {
@@ -6148,7 +6382,7 @@ var CDN_ENTRY_POINTS = {
 };
 var packageInfo = {
   name: "sibujs",
-  version: true ? "4.11.0" : "dev",
+  version: true ? "4.12.0" : "dev",
   entryPoints: MODULE_ENTRY_POINTS,
   /**
    * Generate the package.json `exports` map. Module entries resolve to the
@@ -6293,7 +6527,8 @@ var env = {
 };
 
 // src/plugins/versioning.ts
-var VERSION = true ? "4.11.0" : "dev";
+init_globalSingleton();
+var VERSION = true ? "4.12.0" : "dev";
 var NUM = "(?:0|[1-9]\\d*)";
 var PRE_ID = `(?:${NUM}|\\d*[a-zA-Z-][0-9a-zA-Z-]*)`;
 var BUILD_ID = "[0-9a-zA-Z-]+";

package/dist/plugins.d.cts

@@ -1,6 +1,6 @@
 import { A as Accessor } from './signal-EotCj4hS.cjs';
 import { C as Component$1, N as NodeChildren } from './types-CJFViL6Q.cjs';
-import { T as TrustedHTML } from './ssr-C8hgIAw7.cjs';
+import { T as TrustedHTML } from './ssr-Db0Sgdu3.cjs';
 export { P as PluginContext, a as PluginInstallCancelledError, b as PluginRegistry, S as SibuPlugin, c as createPlugin, d as createPluginRegistry, i as inject, e as isPluginInstallCancelledError, p as plugin, r as resetPlugins, s as setDefaultPluginRegistry, t as triggerPluginError, f as triggerPluginMount, g as triggerPluginUnmount } from './plugin-DVgSnTfK.cjs';
 export { L as LazyModule, M as Migration, a as MigrationStorageError, P as PackageExportTarget, S as SemVer, V as VERSION, b as bundlerMetadata, c as checkCompatibility, d as compareSemVer, e as createBootSequence, f as createBundle, g as createMigrationRunner, h as createModuleRegistry, i as createSSRCache, j as createTestHarness, k as deferNonCritical, l as env, m as healthCheck, n as lazyModule, p as packageInfo, o as parseSemVer, q as preloadCritical, r as prerenderRoutes, s as satisfies } from './startup-BLfSeL15.cjs';