sibujs 4.13.0 → 4.14.0

package/dist/chunk-7XHATCIH.js

@@ -1,121 +0,0 @@
-import {
-  __require,
-  devWarn
-} from "./chunk-NYNYSPK7.js";
-
-// src/core/ssr-context.ts
-var SSR_KEY = /* @__PURE__ */ Symbol.for("sibujs.ssr.v1");
-function detectSSRShared() {
-  let detected = null;
-  try {
-    if (typeof process !== "undefined" && process.versions && process.versions.node) {
-      let mod = null;
-      const getBuiltin = process.getBuiltinModule;
-      if (typeof getBuiltin === "function") {
-        mod = getBuiltin("node:async_hooks");
-      } else if (typeof __require === "function") {
-        mod = __require("async_hooks");
-      }
-      if (mod) detected = new mod.AsyncLocalStorage();
-    }
-  } catch {
-    detected = null;
-  }
-  return {
-    als: detected,
-    fallbackStore: { ssr: false, suspenseIdCounter: 0, locale: void 0 },
-    fallbackDepth: 0
-  };
-}
-var _shared = globalThis[SSR_KEY] ?? (globalThis[SSR_KEY] = detectSSRShared());
-var als = _shared.als;
-var fallbackStore = _shared.fallbackStore;
-_shared.fallbackDepth ?? (_shared.fallbackDepth = 0);
-var _alsWarned = false;
-function warnMissingAsyncLocalStorage() {
-  if (_alsWarned || als) return;
-  const isNode = typeof process !== "undefined" && !!process.versions?.node;
-  if (!isNode) return;
-  _alsWarned = true;
-  const version = process.versions.node;
-  devWarn(
-    `SSR request isolation is UNAVAILABLE on this runtime (Node ${version}). AsyncLocalStorage could not be loaded, so concurrent requests share one SSR store: request state and the query cache can bleed between them. Node >= 22.3 is required for isolated SSR under ESM; the CommonJS build works on older versions. A fully synchronous render is unaffected.`
-  );
-}
-function getSSRStore() {
-  if (als) {
-    const s = als.getStore();
-    if (s) return s;
-  }
-  return fallbackStore;
-}
-function getRequestStore() {
-  if (als) return als.getStore() ?? null;
-  return _shared.fallbackDepth > 0 ? fallbackStore : null;
-}
-function isSSR() {
-  return getSSRStore().ssr;
-}
-function getRequestScopedCache(name) {
-  if (!isSSR()) return null;
-  const store = getSSRStore();
-  const caches = store.caches ?? (store.caches = /* @__PURE__ */ new Map());
-  let c = caches.get(name);
-  if (!c) {
-    c = /* @__PURE__ */ new Map();
-    caches.set(name, c);
-  }
-  return c;
-}
-function enableSSR() {
-  getSSRStore().ssr = true;
-}
-function disableSSR() {
-  getSSRStore().ssr = false;
-}
-function runInSSRContext(fn) {
-  const store = { ssr: true, suspenseIdCounter: 0, idCounter: 0, locale: void 0 };
-  if (als) {
-    return als.run(store, fn);
-  }
-  warnMissingAsyncLocalStorage();
-  const prevSSR = fallbackStore.ssr;
-  const prevCounter = fallbackStore.suspenseIdCounter;
-  const prevIdCounter = fallbackStore.idCounter;
-  const prevLocale = fallbackStore.locale;
-  fallbackStore.ssr = true;
-  fallbackStore.suspenseIdCounter = 0;
-  fallbackStore.idCounter = 0;
-  fallbackStore.locale = void 0;
-  _shared.fallbackDepth++;
-  try {
-    return fn();
-  } finally {
-    _shared.fallbackDepth--;
-    fallbackStore.ssr = prevSSR;
-    fallbackStore.suspenseIdCounter = prevCounter;
-    fallbackStore.idCounter = prevIdCounter;
-    fallbackStore.locale = prevLocale;
-  }
-}
-function withSSR(fn) {
-  const store = getSSRStore();
-  const wasSSR = store.ssr;
-  store.ssr = true;
-  try {
-    return fn();
-  } finally {
-    if (!wasSSR) store.ssr = false;
-  }
-}
-
-export {
-  getSSRStore,
-  getRequestStore,
-  isSSR,
-  getRequestScopedCache,
-  enableSSR,
-  disableSSR,
-  runInSSRContext,
-  withSSR
-};

package/dist/chunk-B36ADEIR.js

@@ -1,21 +0,0 @@
-// src/utils/prerenderHook.ts
-var HOST_KEY = /* @__PURE__ */ Symbol.for("sibujs.prerender.v1");
-function host() {
-  return globalThis[HOST_KEY];
-}
-function isPrerendering() {
-  return host() !== void 0;
-}
-function prerenderRoute() {
-  return host()?.route ?? null;
-}
-function prerenderWait(promise) {
-  host()?.wait(promise);
-  return promise;
-}
-
-export {
-  isPrerendering,
-  prerenderRoute,
-  prerenderWait
-};

package/dist/ssr-Db0Sgdu3.d.cts

@@ -1,245 +0,0 @@
-/**
- * Converts an element tree to an HTML string for server-side rendering.
- * HTML, SVG and MathML elements are serialized; SVG and MathML keep the case
- * of their tag and attribute names and their `xlink:` / `xml:` prefixes.
- *
- * Security: attribute names are validated, `on*` handlers are dropped,
- * URL-bearing attributes are routed through `sanitizeUrl`, attribute
- * values are escaped against both `"` and `'`, and an SVG animation may not
- * target a URL or handler attribute. `<script>` and `<style>` tags are
- * stripped from the serialized output.
- */
-declare function renderToString(element: HTMLElement | DocumentFragment | Node): string;
-interface HydrateOptions {
-    /**
-     * Enable dev-mode hydration diagnostics. When true, the walker
-     * compares the server-rendered tree against the client tree and
-     * logs the first tag mismatch, attribute difference, or child count
-     * mismatch to the console. Disabled by default.
-     */
-    diagnostics?: boolean;
-    /**
-     * Called for each detected mismatch instead of the default console
-     * warning. Useful for routing diagnostics to a telemetry system.
-     */
-    onMismatch?: (report: HydrationMismatch) => void;
-}
-interface HydrationMismatch {
-    kind: "tag" | "attribute" | "child-count" | "text";
-    path: string;
-    serverValue: string;
-    clientValue: string;
-    message: string;
-}
-/**
- * Activates a server-rendered SibuJS application by building the live client
- * tree and **replacing** the inert server-rendered subtree with it.
- *
- * SibuJS uses replacement hydration rather than DOM adoption: the server markup
- * is discarded, not attached to. It is not the case that listeners and bindings
- * are wired onto the existing server nodes — reactive bindings belong to the
- * nodes `component()` produced, and adopting server nodes would leave the
- * visible DOM permanently frozen.
- *
- * Consequences worth knowing before deploying SSR:
- *
- *  - DOM node identity is not preserved.
- *  - Pre-hydration user input, checkbox state, and focus are discarded.
- *  - Conversely, partial-adoption mismatch bugs are avoided by this design —
- *    the client tree is always authoritative.
- *
- * Re-hydrating the same container disposes the previous client tree first.
- *
- * When `options.diagnostics` is true, the walker reports the first
- * server/client mismatch it finds. This is a dev-mode tool — pass
- * `diagnostics: false` (or omit it) in production.
- *
- * @see docs/architecture/hydration.md
- */
-declare function hydrate(component: () => HTMLElement, container: HTMLElement, options?: HydrateOptions): void;
-/**
- * Branded type for raw HTML that has been explicitly marked as trusted.
- * Use `trustHTML()` to create a value of this type. This prevents
- * accidental injection of unsanitized user input into `headExtra`.
- */
-type TrustedHTML = string & {
-    readonly __brand: "TrustedHTML";
-};
-/**
- * Mark an HTML string as trusted for use in contexts that accept raw HTML
- * (e.g. `renderToDocument({ headExtra })`). Only call this on
- * developer-controlled strings — never on user input.
- *
- * @example
- * ```ts
- * const extra = trustHTML('<link rel="preconnect" href="https://fonts.googleapis.com">');
- * renderToDocument(App, { headExtra: extra });
- * ```
- */
-declare function trustHTML(html: string): TrustedHTML;
-/**
- * Should this meta entry be dropped entirely?
- *
- * Delegates to the SHARED meta-refresh policy. This used to be a private copy
- * of four `includes()` checks that happened to match the client's private copy
- * — two implementations of one rule, so a fix to either would silently diverge
- * from the other. The exported name is kept for back-compat; the policy is no
- * longer local.
- *
- * Returns true for a forbidden refresh directive AND for an entry carrying
- * duplicate case-insensitive attribute names, since there the value validated
- * would not be the value the browser ends up honouring.
- */
-declare function isDangerousMetaRefresh(metaProps: Record<string, string>): boolean;
-/**
- * Renders a component to a full HTML document string.
- *
- * `headExtra` requires a `TrustedHTML` value created via `trustHTML()`.
- * This prevents accidental injection of unsanitized user input.
- *
- * Security: meta/link/bodyAttrs keys are validated against
- * `SAFE_ATTR_NAME` (rejecting crafted keys that would break out of the
- * attribute context). URL attributes in meta/link/scripts/bodyAttrs pass
- * through `sanitizeUrl`. The page `title` is HTML-escaped.
- */
-declare function renderToDocument(component: () => HTMLElement, options?: {
-    title?: string;
-    meta?: Record<string, string>[];
-    links?: Record<string, string>[];
-    /**
-     * External script URLs appended to `<body>`. Each passes the scheme
-     * allowlist; an allowed URL is still code that runs with the page's
-     * authority, so this option is an explicit trust decision — first-party
-     * or pinned URLs only, never request-derived values.
-     */
-    scripts?: string[];
-    bodyAttrs?: Record<string, string>;
-    /**
-     * Raw HTML injected into `<head>`. Must be wrapped in `trustHTML()`
-     * to confirm the content is developer-controlled.
-     */
-    headExtra?: TrustedHTML;
-}): string;
-/**
- * Renders a component tree to an async iterable of HTML chunks.
- * Enables progressive server-side rendering — the consumer can write
- * each chunk to a response stream as it becomes available.
- *
- * Same security posture as `renderToString`.
- */
-declare function renderToStream(element: HTMLElement | DocumentFragment | Node): AsyncGenerator<string>;
-/**
- * Collects the full output of renderToStream into a string.
- */
-declare function collectStream(stream: AsyncGenerator<string> | AsyncIterable<string>): Promise<string>;
-/**
- * Renders a component tree to a Web `ReadableStream<string>`.
- *
- * Uses pull-based backpressure — chunks are produced on demand.
- *
- * **Environment.** Supported on SibuJS's declared Node runtime (`>=22.3.0`) and
- * on any other environment providing both the Web Streams API *and* a DOM
- * implementation. Streaming SSR requires the same server DOM as every other
- * SibuJS SSR API: this function takes real `Node` objects and walks them, so a
- * DOM-less runtime cannot produce the input, let alone render it. Do not read
- * "returns a Web stream" as "runs anywhere Web streams exist".
- *
- * **Semantics.** Suspense boundaries encountered during the walk are resolved
- * as a batch before the affected chunk is emitted — the shell is not flushed
- * ahead of individually-completing boundaries. See
- * `docs/architecture/ssr.md` for the precise streaming and failure semantics.
- */
-declare function renderToReadableStream(element: HTMLElement | DocumentFragment | Node): ReadableStream<string>;
-declare function island(id: string, component: () => HTMLElement): HTMLElement;
-declare function hydrateIslands(container: HTMLElement, islands: Record<string, () => HTMLElement>): void;
-/**
- * Progressively hydrate islands only when they enter the viewport.
- * Uses IntersectionObserver to defer hydration of off-screen islands,
- * reducing initial JavaScript execution cost.
- *
- * Returns a cleanup function that disconnects all observers.
- */
-declare function hydrateProgressively(container: HTMLElement, islands: Record<string, () => HTMLElement>, options?: IntersectionObserverInit): () => void;
-/**
- * Reset SSR state between requests. Call at the start of each SSR render
- * to prevent ID drift in long-lived server processes.
- *
- * When running inside `runInSSRContext`, each request already owns its
- * own counter via AsyncLocalStorage — this hook only touches the
- * module-global fallback used outside that context.
- */
-declare function resetSSRState(): void;
-/**
- * Create a suspense boundary for SSR streaming.
- * Renders fallback HTML inline and returns a promise for the resolved content.
- *
- * The returned element contains the fallback UI with a `data-sibu-suspense-id`
- * marker. The promise resolves to `{ id, html }` once async content is ready.
- *
- * The promise never rejects. Any failure to produce the content HTML — the
- * content factory throwing synchronously, its promise rejecting, the timeout,
- * or rendering the resolved element throwing — resolves it with the fallback
- * HTML, so the stream still produces a deterministic swap payload.
- */
-declare function ssrSuspense(props: {
-    fallback: () => HTMLElement;
-    content: () => Promise<HTMLElement>;
-    /** Milliseconds before the content promise is rejected. Defaults to 30000. */
-    timeoutMs?: number;
-}): {
-    element: HTMLElement;
-    promise: Promise<{
-        id: string;
-        html: string;
-    }>;
-};
-/**
- * Generate an inline script that swaps a suspense fallback with resolved content.
- *
- * Security: the `id` is validated against a strict allowlist. Values that
- * do not match throw, so an attacker-controlled id cannot inject context
- * breakers into the selector or the JS string. `ssrSuspense()`'s internal
- * generator always produces allowlist-safe ids.
- */
-declare function suspenseSwapScript(id: string, nonce?: string): string;
-/**
- * Renders a component tree with suspense boundaries as a stream.
- * Yields the main tree HTML first (including fallback content for suspended
- * boundaries), then flushes resolved content with inline swap scripts.
- *
- * Supports an optional `nonce` that is propagated to the resolved-content
- * swap scripts so the stream works with strict CSP.
- */
-declare function renderToSuspenseStream(element: HTMLElement | DocumentFragment | Node, pendingBoundaries?: Promise<{
-    id: string;
-    html: string;
-}>[], options?: {
-    nonce?: string;
-}): AsyncGenerator<string>;
-/**
- * Escape a JSON string for safe embedding inside a `<script>` tag. This
- * goes beyond the usual `</script>` concern:
- *
- *  - `<`, `>`, `&` are unicode-escaped so nothing inside a string literal
- *    can close the script tag or start a new one.
- *  - `U+2028` (LINE SEPARATOR) and `U+2029` (PARAGRAPH SEPARATOR) are
- *    unicode-escaped. Before ES2019 these were illegal inside a JS string
- *    literal, so including them verbatim would cause a SyntaxError on
- *    older engines and could break out of string context.
- */
-declare function escapeScriptJson(json: string): string;
-declare function serializeState(state: Record<string, unknown>, nonce?: string, options?: {
-    maxBytes?: number;
-}): string;
-/**
- * Retrieve state that was embedded by `serializeState()` during SSR.
- *
- * When a `validate` function is provided, it acts as a type guard —
- * only data that passes validation is returned. This prevents
- * tampered SSR payloads from being trusted by the client.
- *
- * @param validate Optional type guard to verify data integrity
- */
-declare function deserializeState<T = Record<string, unknown>>(validate?: (data: unknown) => data is T): T | undefined;
-
-export { type HydrateOptions as H, type TrustedHTML as T, type HydrationMismatch as a, hydrateIslands as b, collectStream as c, deserializeState as d, escapeScriptJson as e, hydrateProgressively as f, island as g, hydrate as h, isDangerousMetaRefresh as i, renderToReadableStream as j, renderToStream as k, renderToString as l, renderToSuspenseStream as m, resetSSRState as n, ssrSuspense as o, suspenseSwapScript as p, renderToDocument as r, serializeState as s, trustHTML as t };

package/dist/ssr-Db0Sgdu3.d.ts

@@ -1,245 +0,0 @@
-/**
- * Converts an element tree to an HTML string for server-side rendering.
- * HTML, SVG and MathML elements are serialized; SVG and MathML keep the case
- * of their tag and attribute names and their `xlink:` / `xml:` prefixes.
- *
- * Security: attribute names are validated, `on*` handlers are dropped,
- * URL-bearing attributes are routed through `sanitizeUrl`, attribute
- * values are escaped against both `"` and `'`, and an SVG animation may not
- * target a URL or handler attribute. `<script>` and `<style>` tags are
- * stripped from the serialized output.
- */
-declare function renderToString(element: HTMLElement | DocumentFragment | Node): string;
-interface HydrateOptions {
-    /**
-     * Enable dev-mode hydration diagnostics. When true, the walker
-     * compares the server-rendered tree against the client tree and
-     * logs the first tag mismatch, attribute difference, or child count
-     * mismatch to the console. Disabled by default.
-     */
-    diagnostics?: boolean;
-    /**
-     * Called for each detected mismatch instead of the default console
-     * warning. Useful for routing diagnostics to a telemetry system.
-     */
-    onMismatch?: (report: HydrationMismatch) => void;
-}
-interface HydrationMismatch {
-    kind: "tag" | "attribute" | "child-count" | "text";
-    path: string;
-    serverValue: string;
-    clientValue: string;
-    message: string;
-}
-/**
- * Activates a server-rendered SibuJS application by building the live client
- * tree and **replacing** the inert server-rendered subtree with it.
- *
- * SibuJS uses replacement hydration rather than DOM adoption: the server markup
- * is discarded, not attached to. It is not the case that listeners and bindings
- * are wired onto the existing server nodes — reactive bindings belong to the
- * nodes `component()` produced, and adopting server nodes would leave the
- * visible DOM permanently frozen.
- *
- * Consequences worth knowing before deploying SSR:
- *
- *  - DOM node identity is not preserved.
- *  - Pre-hydration user input, checkbox state, and focus are discarded.
- *  - Conversely, partial-adoption mismatch bugs are avoided by this design —
- *    the client tree is always authoritative.
- *
- * Re-hydrating the same container disposes the previous client tree first.
- *
- * When `options.diagnostics` is true, the walker reports the first
- * server/client mismatch it finds. This is a dev-mode tool — pass
- * `diagnostics: false` (or omit it) in production.
- *
- * @see docs/architecture/hydration.md
- */
-declare function hydrate(component: () => HTMLElement, container: HTMLElement, options?: HydrateOptions): void;
-/**
- * Branded type for raw HTML that has been explicitly marked as trusted.
- * Use `trustHTML()` to create a value of this type. This prevents
- * accidental injection of unsanitized user input into `headExtra`.
- */
-type TrustedHTML = string & {
-    readonly __brand: "TrustedHTML";
-};
-/**
- * Mark an HTML string as trusted for use in contexts that accept raw HTML
- * (e.g. `renderToDocument({ headExtra })`). Only call this on
- * developer-controlled strings — never on user input.
- *
- * @example
- * ```ts
- * const extra = trustHTML('<link rel="preconnect" href="https://fonts.googleapis.com">');
- * renderToDocument(App, { headExtra: extra });
- * ```
- */
-declare function trustHTML(html: string): TrustedHTML;
-/**
- * Should this meta entry be dropped entirely?
- *
- * Delegates to the SHARED meta-refresh policy. This used to be a private copy
- * of four `includes()` checks that happened to match the client's private copy
- * — two implementations of one rule, so a fix to either would silently diverge
- * from the other. The exported name is kept for back-compat; the policy is no
- * longer local.
- *
- * Returns true for a forbidden refresh directive AND for an entry carrying
- * duplicate case-insensitive attribute names, since there the value validated
- * would not be the value the browser ends up honouring.
- */
-declare function isDangerousMetaRefresh(metaProps: Record<string, string>): boolean;
-/**
- * Renders a component to a full HTML document string.
- *
- * `headExtra` requires a `TrustedHTML` value created via `trustHTML()`.
- * This prevents accidental injection of unsanitized user input.
- *
- * Security: meta/link/bodyAttrs keys are validated against
- * `SAFE_ATTR_NAME` (rejecting crafted keys that would break out of the
- * attribute context). URL attributes in meta/link/scripts/bodyAttrs pass
- * through `sanitizeUrl`. The page `title` is HTML-escaped.
- */
-declare function renderToDocument(component: () => HTMLElement, options?: {
-    title?: string;
-    meta?: Record<string, string>[];
-    links?: Record<string, string>[];
-    /**
-     * External script URLs appended to `<body>`. Each passes the scheme
-     * allowlist; an allowed URL is still code that runs with the page's
-     * authority, so this option is an explicit trust decision — first-party
-     * or pinned URLs only, never request-derived values.
-     */
-    scripts?: string[];
-    bodyAttrs?: Record<string, string>;
-    /**
-     * Raw HTML injected into `<head>`. Must be wrapped in `trustHTML()`
-     * to confirm the content is developer-controlled.
-     */
-    headExtra?: TrustedHTML;
-}): string;
-/**
- * Renders a component tree to an async iterable of HTML chunks.
- * Enables progressive server-side rendering — the consumer can write
- * each chunk to a response stream as it becomes available.
- *
- * Same security posture as `renderToString`.
- */
-declare function renderToStream(element: HTMLElement | DocumentFragment | Node): AsyncGenerator<string>;
-/**
- * Collects the full output of renderToStream into a string.
- */
-declare function collectStream(stream: AsyncGenerator<string> | AsyncIterable<string>): Promise<string>;
-/**
- * Renders a component tree to a Web `ReadableStream<string>`.
- *
- * Uses pull-based backpressure — chunks are produced on demand.
- *
- * **Environment.** Supported on SibuJS's declared Node runtime (`>=22.3.0`) and
- * on any other environment providing both the Web Streams API *and* a DOM
- * implementation. Streaming SSR requires the same server DOM as every other
- * SibuJS SSR API: this function takes real `Node` objects and walks them, so a
- * DOM-less runtime cannot produce the input, let alone render it. Do not read
- * "returns a Web stream" as "runs anywhere Web streams exist".
- *
- * **Semantics.** Suspense boundaries encountered during the walk are resolved
- * as a batch before the affected chunk is emitted — the shell is not flushed
- * ahead of individually-completing boundaries. See
- * `docs/architecture/ssr.md` for the precise streaming and failure semantics.
- */
-declare function renderToReadableStream(element: HTMLElement | DocumentFragment | Node): ReadableStream<string>;
-declare function island(id: string, component: () => HTMLElement): HTMLElement;
-declare function hydrateIslands(container: HTMLElement, islands: Record<string, () => HTMLElement>): void;
-/**
- * Progressively hydrate islands only when they enter the viewport.
- * Uses IntersectionObserver to defer hydration of off-screen islands,
- * reducing initial JavaScript execution cost.
- *
- * Returns a cleanup function that disconnects all observers.
- */
-declare function hydrateProgressively(container: HTMLElement, islands: Record<string, () => HTMLElement>, options?: IntersectionObserverInit): () => void;
-/**
- * Reset SSR state between requests. Call at the start of each SSR render
- * to prevent ID drift in long-lived server processes.
- *
- * When running inside `runInSSRContext`, each request already owns its
- * own counter via AsyncLocalStorage — this hook only touches the
- * module-global fallback used outside that context.
- */
-declare function resetSSRState(): void;
-/**
- * Create a suspense boundary for SSR streaming.
- * Renders fallback HTML inline and returns a promise for the resolved content.
- *
- * The returned element contains the fallback UI with a `data-sibu-suspense-id`
- * marker. The promise resolves to `{ id, html }` once async content is ready.
- *
- * The promise never rejects. Any failure to produce the content HTML — the
- * content factory throwing synchronously, its promise rejecting, the timeout,
- * or rendering the resolved element throwing — resolves it with the fallback
- * HTML, so the stream still produces a deterministic swap payload.
- */
-declare function ssrSuspense(props: {
-    fallback: () => HTMLElement;
-    content: () => Promise<HTMLElement>;
-    /** Milliseconds before the content promise is rejected. Defaults to 30000. */
-    timeoutMs?: number;
-}): {
-    element: HTMLElement;
-    promise: Promise<{
-        id: string;
-        html: string;
-    }>;
-};
-/**
- * Generate an inline script that swaps a suspense fallback with resolved content.
- *
- * Security: the `id` is validated against a strict allowlist. Values that
- * do not match throw, so an attacker-controlled id cannot inject context
- * breakers into the selector or the JS string. `ssrSuspense()`'s internal
- * generator always produces allowlist-safe ids.
- */
-declare function suspenseSwapScript(id: string, nonce?: string): string;
-/**
- * Renders a component tree with suspense boundaries as a stream.
- * Yields the main tree HTML first (including fallback content for suspended
- * boundaries), then flushes resolved content with inline swap scripts.
- *
- * Supports an optional `nonce` that is propagated to the resolved-content
- * swap scripts so the stream works with strict CSP.
- */
-declare function renderToSuspenseStream(element: HTMLElement | DocumentFragment | Node, pendingBoundaries?: Promise<{
-    id: string;
-    html: string;
-}>[], options?: {
-    nonce?: string;
-}): AsyncGenerator<string>;
-/**
- * Escape a JSON string for safe embedding inside a `<script>` tag. This
- * goes beyond the usual `</script>` concern:
- *
- *  - `<`, `>`, `&` are unicode-escaped so nothing inside a string literal
- *    can close the script tag or start a new one.
- *  - `U+2028` (LINE SEPARATOR) and `U+2029` (PARAGRAPH SEPARATOR) are
- *    unicode-escaped. Before ES2019 these were illegal inside a JS string
- *    literal, so including them verbatim would cause a SyntaxError on
- *    older engines and could break out of string context.
- */
-declare function escapeScriptJson(json: string): string;
-declare function serializeState(state: Record<string, unknown>, nonce?: string, options?: {
-    maxBytes?: number;
-}): string;
-/**
- * Retrieve state that was embedded by `serializeState()` during SSR.
- *
- * When a `validate` function is provided, it acts as a type guard —
- * only data that passes validation is returned. This prevents
- * tampered SSR payloads from being trusted by the client.
- *
- * @param validate Optional type guard to verify data integrity
- */
-declare function deserializeState<T = Record<string, unknown>>(validate?: (data: unknown) => data is T): T | undefined;
-
-export { type HydrateOptions as H, type TrustedHTML as T, type HydrationMismatch as a, hydrateIslands as b, collectStream as c, deserializeState as d, escapeScriptJson as e, hydrateProgressively as f, island as g, hydrate as h, isDangerousMetaRefresh as i, renderToReadableStream as j, renderToStream as k, renderToString as l, renderToSuspenseStream as m, resetSSRState as n, ssrSuspense as o, suspenseSwapScript as p, renderToDocument as r, serializeState as s, trustHTML as t };