sibujs 4.6.0 → 4.8.0

package/dist/plugins.js

@@ -19,10 +19,7 @@ import {
   preloadCritical,
   prerenderRoutes,
   satisfies
-} from "./chunk-5MT6SJ3P.js";
-import {
-  isUnsafeKey
-} from "./chunk-H3SRKIYX.js";
+} from "./chunk-QGMSESDD.js";
 import {
   PluginInstallCancelledError,
   createPlugin,
@@ -38,38 +35,45 @@ import {
 } from "./chunk-J6FW5TV6.js";
 import {
   span
-} from "./chunk-JSXPZCET.js";
+} from "./chunk-Q5J2LVKH.js";
 import {
   escapeScriptJson,
   renderToString,
   serializeHeadEntry
-} from "./chunk-HURREPU2.js";
+} from "./chunk-FC6KCJSA.js";
+import {
+  isUnsafeKey,
+  readOwnGlobal
+} from "./chunk-62BDYGAG.js";
 import {
+  appendChildren,
   resolveClassValue
-} from "./chunk-VVWPJ543.js";
-import "./chunk-47M47FOM.js";
+} from "./chunk-VWT3VXPL.js";
 import {
-  isUrlAttribute,
-  sanitizeStyleAttribute,
-  sanitizeUrl,
-  stripControlChars
-} from "./chunk-2INLLLMZ.js";
+  setSafeAttribute
+} from "./chunk-O6TRVMJI.js";
+import "./chunk-3ACAAQIN.js";
 import {
   globalSingleton
 } from "./chunk-7ZHH77QA.js";
 import {
   effect
-} from "./chunk-XC4MEKGA.js";
+} from "./chunk-V3LHZSU5.js";
+import {
+  sanitizeUrl,
+  stripControlChars
+} from "./chunk-EXXSN3BW.js";
 import {
   getRequestStore
 } from "./chunk-7XHATCIH.js";
 import "./chunk-5HZXGZ6T.js";
 import {
   signal
-} from "./chunk-D33YTSX5.js";
+} from "./chunk-DSID757X.js";
 import {
-  track
-} from "./chunk-5Q4R7HCL.js";
+  track,
+  untracked
+} from "./chunk-TQQUN4WR.js";
 import {
   devWarn,
   dispose,
@@ -80,14 +84,20 @@ import {
 // src/plugins/i18n.ts
 var _i18n = globalSingleton(/* @__PURE__ */ Symbol.for("sibujs.i18n.v1"), () => ({
   locale: signal("en"),
-  locales: /* @__PURE__ */ Object.create(null)
+  locales: /* @__PURE__ */ Object.create(null),
+  revision: signal(0)
 }));
 var [clientLocale, setClientLocale] = _i18n.locale;
 var locales = _i18n.locales;
+var [revision, setRevision] = _i18n.revision ?? (_i18n.revision = signal(0));
 function dictionaryFor(locale) {
   return Object.hasOwn(locales, locale) ? locales[locale] : void 0;
 }
+function trackDictionaries() {
+  if (!getRequestStore()) revision();
+}
 function lookup(key) {
+  trackDictionaries();
   const dictionary = dictionaryFor(getLocale());
   if (dictionary === void 0 || !Object.hasOwn(dictionary, key)) return void 0;
   const message = dictionary[key];
@@ -108,6 +118,7 @@ function getLocale() {
   }
   return clientLocale();
 }
+_i18n.getLocale ?? (_i18n.getLocale = getLocale);
 function registerTranslations(locale, messages) {
   const prepared = { ...messages };
   const merged = Object.assign(/* @__PURE__ */ Object.create(null), dictionaryFor(locale), prepared);
@@ -117,18 +128,29 @@ function registerTranslations(locale, messages) {
     enumerable: true,
     configurable: true
   });
+  setRevision((n) => n + 1);
+}
+function resolveParam(params, name) {
+  if (!Object.hasOwn(params, name)) return "";
+  const raw = params[name];
+  const value = typeof raw === "function" ? raw() : raw;
+  return value == null ? "" : String(value);
 }
 function t(key, params) {
   const message = lookup(key) ?? key;
-  return params ? message.replace(/\{(\w+)\}/g, (_, p) => String(params[p] ?? "")) : message;
+  return params ? message.replace(/\{(\w+)\}/g, (_, p) => resolveParam(params, p)) : message;
+}
+function translated(key, params) {
+  return () => t(key, params);
 }
 function Trans(key, params) {
-  return span(() => t(key, params));
+  return span(translated(key, params));
 }
 function hasTranslation(key) {
   return lookup(key) !== void 0;
 }
 function getAvailableLocales() {
+  trackDictionaries();
   return Object.keys(locales);
 }
 
@@ -1302,6 +1324,30 @@ function afterEach(hook) {
   return _routerRef.current.afterEach(hook);
 }
 var routeCleanups = [];
+var ownParamNamesCache = /* @__PURE__ */ new WeakMap();
+function ownParamNames(record) {
+  const cached = ownParamNamesCache.get(record);
+  if (cached) return cached;
+  const aliases = record.alias == null ? [] : Array.isArray(record.alias) ? record.alias : [record.alias];
+  const names = /* @__PURE__ */ new Set();
+  for (const pattern of [record.path, ...aliases]) {
+    for (const m of pattern.matchAll(/\/:([^/]+)/g)) {
+      names.add(m[1].endsWith("?") ? m[1].slice(0, -1) : m[1]);
+    }
+  }
+  const result = [...names];
+  ownParamNamesCache.set(record, result);
+  return result;
+}
+function instanceKey(owner, records, route2) {
+  const custom = owner.key;
+  if (custom) return untracked(() => String(custom(route2)));
+  const parts = [];
+  for (const record of records) {
+    for (const name of ownParamNames(record)) parts.push(name, route2.params[name] ?? null);
+  }
+  return JSON.stringify(parts);
+}
 function Route() {
   const anchor = document.createComment("route-outlet");
   let currentNode = null;
@@ -1309,6 +1355,7 @@ function Route() {
   let errorNode = null;
   let navSeq = 0;
   let currentTopRoute = null;
+  let currentKey = null;
   let routeTorn = false;
   const commitTarget = (seq) => routeTorn || seq !== navSeq ? null : anchor.parentNode;
   const release = (node) => {
@@ -1400,11 +1447,13 @@ function Route() {
       const match = _routerRef.current["matcher"].match(route2.path);
       if (!match) {
         currentTopRoute = null;
+        currentKey = null;
         cleanupNodes();
         return;
       }
       const routeDef = match.matched[0] || match.route;
-      if (routeDef === currentTopRoute && currentNode) {
+      const key = instanceKey(routeDef, [routeDef], route2);
+      if (routeDef === currentTopRoute && key === currentKey && currentNode) {
         return;
       }
       if ("redirect" in routeDef) {
@@ -1432,6 +1481,7 @@ function Route() {
           }
           if (node) {
             currentTopRoute = routeDef;
+            currentKey = key;
             cleanupNodes();
             parent.insertBefore(node, anchor.nextSibling);
             currentNode = node;
@@ -1469,6 +1519,7 @@ function Route() {
     routeTeardown();
     cleanupNodes();
     currentTopRoute = null;
+    currentKey = null;
   };
   registerDisposer(anchor, routeCleanup);
   routeCleanups.push(routeCleanup);
@@ -1644,30 +1695,10 @@ function RouterLink(props, children) {
     const lkey = key.toLowerCase();
     if (lkey === "href" || lkey[0] === "o" && lkey[1] === "n") return;
     if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-      const str = String(value);
-      if (isUrlAttribute(lkey)) {
-        const safe = sanitizeUrl(str);
-        if (safe) link.setAttribute(key, safe);
-      } else if (lkey === "style") {
-        link.setAttribute(key, sanitizeStyleAttribute(str, { element: link }));
-      } else {
-        link.setAttribute(key, str);
-      }
+      setSafeAttribute(link, key, String(value), { syncValueProperty: false, label: "RouterLink" });
     }
   });
-  if (typeof content === "string") {
-    link.textContent = content;
-  } else if (content instanceof Node) {
-    link.appendChild(content);
-  } else if (Array.isArray(content)) {
-    content.forEach((child) => {
-      if (typeof child === "string") {
-        link.appendChild(document.createTextNode(child));
-      } else if (child instanceof Node) {
-        link.appendChild(child);
-      }
-    });
-  }
+  if (content !== void 0) appendChildren(link, content);
   const onLinkClick = (e) => {
     if (e.defaultPrevented || target || e.metaKey || e.ctrlKey || e.shiftKey || e.altKey || e.button !== 0) {
       return;
@@ -1829,6 +1860,7 @@ function Outlet() {
   const anchor = document.createComment("route-outlet-nested");
   let currentNode = null;
   let currentChild = null;
+  let currentKey = null;
   let navSeq = 0;
   let outletTorn = false;
   const clearCurrent = () => {
@@ -1838,6 +1870,7 @@ function Outlet() {
       currentNode = null;
     }
     currentChild = null;
+    currentKey = null;
   };
   const commitTarget = (seq) => outletTorn || seq !== navSeq ? null : anchor.parentNode;
   const release = (node) => {
@@ -1858,7 +1891,8 @@ function Outlet() {
       clearCurrent();
       return;
     }
-    if (childRoute === currentChild && currentNode) return;
+    const key = instanceKey(childRoute, route2.matched.slice(1), route2);
+    if (childRoute === currentChild && key === currentKey && currentNode) return;
     try {
       const cacheKey = `${route2.path}\0${childRoute.path}`;
       const plan = await _routerRef.current.loadPlan(childRoute, cacheKey);
@@ -1874,6 +1908,7 @@ function Outlet() {
       parent.insertBefore(node, anchor.nextSibling);
       currentNode = node;
       currentChild = childRoute;
+      currentKey = key;
     } catch (error) {
       if (outletTorn || seq !== navSeq) return;
       console.error("[Outlet] Failed to render child route:", error);
@@ -1896,6 +1931,7 @@ function Outlet() {
       currentNode = null;
     }
     currentChild = null;
+    currentKey = null;
   };
   registerDisposer(anchor, outletCleanup);
   routeCleanups.push(outletCleanup);
@@ -2187,8 +2223,7 @@ function serializeRouteState(state, nonce) {
   return `<script${nonceAttr}>window.${SSR_ROUTE_STATE_KEY}=${json}</script>`;
 }
 function deserializeRouteState() {
-  if (typeof window === "undefined") return void 0;
-  return window[SSR_ROUTE_STATE_KEY];
+  return readOwnGlobal(SSR_ROUTE_STATE_KEY);
 }
 function hydrateRouter(routes, options) {
   const serverState = deserializeRouteState();
@@ -2202,7 +2237,7 @@ function hydrateRouter(routes, options) {
   const liveUrl = `${window.location.pathname}${window.location.search}${window.location.hash}`;
   const resolved = resolveServerRoute(liveUrl, routes);
   const bootstrapEpoch = __getNavigationEpoch();
-  import("./ssr-XOTUASDO.js").then(async ({ hydrate }) => {
+  import("./ssr-5OWAH3U2.js").then(async ({ hydrate }) => {
     const { replaceChildrenSafely } = await import("./dispose-GEIG2KOF.js");
     if (__getNavigationEpoch() !== bootstrapEpoch) return;
     if (resolved.component) {
@@ -2312,6 +2347,7 @@ export {
   setRouteTransition,
   setRoutes,
   t,
+  translated,
   triggerPluginError,
   triggerPluginMount,
   triggerPluginUnmount

package/dist/{ssr-XOTUASDO.js → ssr-5OWAH3U2.js}

@@ -17,8 +17,10 @@ import {
   ssrSuspense,
   suspenseSwapScript,
   trustHTML
-} from "./chunk-HURREPU2.js";
-import "./chunk-2INLLLMZ.js";
+} from "./chunk-FC6KCJSA.js";
+import "./chunk-62BDYGAG.js";
+import "./chunk-3ACAAQIN.js";
+import "./chunk-EXXSN3BW.js";
 import "./chunk-7XHATCIH.js";
 import "./chunk-NYNYSPK7.js";
 export {

package/dist/{ssr-Bli9XRW5.d.cts → ssr-C8hgIAw7.d.cts}

@@ -103,6 +103,12 @@ declare function renderToDocument(component: () => HTMLElement, options?: {
     title?: string;
     meta?: Record<string, string>[];
     links?: Record<string, string>[];
+    /**
+     * External script URLs appended to `<body>`. Each passes the scheme
+     * allowlist; an allowed URL is still code that runs with the page's
+     * authority, so this option is an explicit trust decision — first-party
+     * or pinned URLs only, never request-derived values.
+     */
     scripts?: string[];
     bodyAttrs?: Record<string, string>;
     /**

package/dist/{ssr-Bli9XRW5.d.ts → ssr-C8hgIAw7.d.ts}

@@ -103,6 +103,12 @@ declare function renderToDocument(component: () => HTMLElement, options?: {
     title?: string;
     meta?: Record<string, string>[];
     links?: Record<string, string>[];
+    /**
+     * External script URLs appended to `<body>`. Each passes the scheme
+     * allowlist; an allowed URL is still code that runs with the page's
+     * authority, so this option is an explicit trust decision — first-party
+     * or pinned URLs only, never request-derived values.
+     */
     scripts?: string[];
     bodyAttrs?: Record<string, string>;
     /**