sibujs 4.7.0 → 4.9.0

package/dist/plugins.d.cts

@@ -1,6 +1,6 @@
 import { A as Accessor } from './signal-EotCj4hS.cjs';
-import { N as NodeChildren } from './types-CJFViL6Q.cjs';
-import { T as TrustedHTML } from './ssr-Bli9XRW5.cjs';
+import { C as Component$1, N as NodeChildren } from './types-CJFViL6Q.cjs';
+import { T as TrustedHTML } from './ssr-C8hgIAw7.cjs';
 export { P as PluginContext, a as PluginInstallCancelledError, b as PluginRegistry, S as SibuPlugin, c as createPlugin, d as createPluginRegistry, i as inject, e as isPluginInstallCancelledError, p as plugin, r as resetPlugins, s as setDefaultPluginRegistry, t as triggerPluginError, f as triggerPluginMount, g as triggerPluginUnmount } from './plugin-DVgSnTfK.cjs';
 export { L as LazyModule, M as Migration, a as MigrationStorageError, P as PackageExportTarget, S as SemVer, V as VERSION, b as bundlerMetadata, c as checkCompatibility, d as compareSemVer, e as createBootSequence, f as createBundle, g as createMigrationRunner, h as createModuleRegistry, i as createSSRCache, j as createTestHarness, k as deferNonCritical, l as env, m as healthCheck, n as lazyModule, p as packageInfo, o as parseSemVer, q as preloadCritical, r as prerenderRoutes, s as satisfies } from './startup-BLfSeL15.cjs';
 
@@ -166,7 +166,12 @@ declare function hasTranslation(key: string): boolean;
  */
 declare function getAvailableLocales(): string[];
 
-type Component = () => Element;
+/**
+ * A route component. An alias of the public `Component` (props-less, any
+ * `Element` root), kept under this name so existing imports of the router's
+ * `Component` continue to work.
+ */
+type Component = Component$1<void, Element>;
 type AsyncComponent = () => Promise<Element>;
 type LazyComponent = () => Promise<{
     default: Component;
@@ -175,6 +180,12 @@ type Params = Record<string, string>;
 interface RouteContext {
     readonly path: string;
     readonly params: Params;
+    /**
+     * The decoded query (`+` is a space, `%XX` is decoded). A repeated key keeps
+     * its last value: `?tag=a&tag=b` is `{ tag: "b" }`. Two locations are the
+     * same route — for duplicate detection and `RouterLink` exact-active — when
+     * their queries have the same entries in any order.
+     */
     readonly query: Params;
     readonly hash: string;
     readonly meta: RouteMeta;

package/dist/plugins.d.ts

@@ -1,6 +1,6 @@
 import { A as Accessor } from './signal-EotCj4hS.js';
-import { N as NodeChildren } from './types-CJFViL6Q.js';
-import { T as TrustedHTML } from './ssr-Bli9XRW5.js';
+import { C as Component$1, N as NodeChildren } from './types-CJFViL6Q.js';
+import { T as TrustedHTML } from './ssr-C8hgIAw7.js';
 export { P as PluginContext, a as PluginInstallCancelledError, b as PluginRegistry, S as SibuPlugin, c as createPlugin, d as createPluginRegistry, i as inject, e as isPluginInstallCancelledError, p as plugin, r as resetPlugins, s as setDefaultPluginRegistry, t as triggerPluginError, f as triggerPluginMount, g as triggerPluginUnmount } from './plugin-DVgSnTfK.js';
 export { L as LazyModule, M as Migration, a as MigrationStorageError, P as PackageExportTarget, S as SemVer, V as VERSION, b as bundlerMetadata, c as checkCompatibility, d as compareSemVer, e as createBootSequence, f as createBundle, g as createMigrationRunner, h as createModuleRegistry, i as createSSRCache, j as createTestHarness, k as deferNonCritical, l as env, m as healthCheck, n as lazyModule, p as packageInfo, o as parseSemVer, q as preloadCritical, r as prerenderRoutes, s as satisfies } from './startup-BLfSeL15.js';
 
@@ -166,7 +166,12 @@ declare function hasTranslation(key: string): boolean;
  */
 declare function getAvailableLocales(): string[];
 
-type Component = () => Element;
+/**
+ * A route component. An alias of the public `Component` (props-less, any
+ * `Element` root), kept under this name so existing imports of the router's
+ * `Component` continue to work.
+ */
+type Component = Component$1<void, Element>;
 type AsyncComponent = () => Promise<Element>;
 type LazyComponent = () => Promise<{
     default: Component;
@@ -175,6 +180,12 @@ type Params = Record<string, string>;
 interface RouteContext {
     readonly path: string;
     readonly params: Params;
+    /**
+     * The decoded query (`+` is a space, `%XX` is decoded). A repeated key keeps
+     * its last value: `?tag=a&tag=b` is `{ tag: "b" }`. Two locations are the
+     * same route — for duplicate detection and `RouterLink` exact-active — when
+     * their queries have the same entries in any order.
+     */
     readonly query: Params;
     readonly hash: string;
     readonly meta: RouteMeta;

package/dist/plugins.js

@@ -19,10 +19,7 @@ import {
   preloadCritical,
   prerenderRoutes,
   satisfies
-} from "./chunk-4AWA2PVD.js";
-import {
-  isUnsafeKey
-} from "./chunk-H3SRKIYX.js";
+} from "./chunk-CF2KCWRE.js";
 import {
   PluginInstallCancelledError,
   createPlugin,
@@ -38,40 +35,45 @@ import {
 } from "./chunk-J6FW5TV6.js";
 import {
   span
-} from "./chunk-7LUJQAOJ.js";
+} from "./chunk-QBKCK6MJ.js";
 import {
   escapeScriptJson,
   renderToString,
   serializeHeadEntry
-} from "./chunk-HURREPU2.js";
+} from "./chunk-FC6KCJSA.js";
+import {
+  isUnsafeKey,
+  readOwnGlobal
+} from "./chunk-62BDYGAG.js";
 import {
   appendChildren,
   resolveClassValue
-} from "./chunk-UOL2ECCS.js";
-import "./chunk-FNJXNGYZ.js";
+} from "./chunk-5MLWTIQE.js";
 import {
-  isUrlAttribute,
-  sanitizeStyleAttribute,
-  sanitizeUrl,
-  stripControlChars
-} from "./chunk-2INLLLMZ.js";
+  setSafeAttribute
+} from "./chunk-MPWDSTYK.js";
+import "./chunk-3ACAAQIN.js";
 import {
   globalSingleton
 } from "./chunk-7ZHH77QA.js";
 import {
   effect
-} from "./chunk-WEQ3DMVL.js";
+} from "./chunk-SBTZEYNI.js";
+import {
+  sanitizeUrl,
+  stripControlChars
+} from "./chunk-EXXSN3BW.js";
 import {
   getRequestStore
 } from "./chunk-7XHATCIH.js";
 import "./chunk-5HZXGZ6T.js";
 import {
   signal
-} from "./chunk-FQRUXCEE.js";
+} from "./chunk-SYHGGDNW.js";
 import {
   track,
   untracked
-} from "./chunk-JWKYU5GV.js";
+} from "./chunk-G2WHYEL7.js";
 import {
   devWarn,
   dispose,
@@ -116,6 +118,7 @@ function getLocale() {
   }
   return clientLocale();
 }
+_i18n.getLocale ?? (_i18n.getLocale = getLocale);
 function registerTranslations(locale, messages) {
   const prepared = { ...messages };
   const merged = Object.assign(/* @__PURE__ */ Object.create(null), dictionaryFor(locale), prepared);
@@ -177,9 +180,14 @@ function normalizePathname(path) {
   const trimmed = path.length > 1 ? path.replace(/\/+$/, "") : path;
   return trimmed || "/";
 }
-function normalizeQuery(query) {
-  const params = new URLSearchParams(query);
-  return [...params.entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${k}=${v}`).join("&");
+function parseQuery(query) {
+  return Object.fromEntries(new URLSearchParams(query));
+}
+function paramsIdentity(params) {
+  return JSON.stringify(Object.entries(params).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0));
+}
+function queryIdentity(query) {
+  return paramsIdentity(typeof query === "string" ? parseQuery(query) : query);
 }
 function isPathnameAncestor(target, current) {
   if (target === current) return true;
@@ -880,7 +888,7 @@ var _SibuRouter = class _SibuRouter {
   }
   createRouteContext(fullPath) {
     const { path, query: queryString, hash } = splitRouteUrl(fullPath);
-    const query = Object.fromEntries(new URLSearchParams(queryString));
+    const query = parseQuery(queryString);
     const match = this.matcher.match(path || "/");
     const params = match?.params || {};
     const meta = match?.route.meta || {};
@@ -1044,7 +1052,7 @@ var _SibuRouter = class _SibuRouter {
   }
   isSameRoute(from, to) {
     if (from.matched.length === 0 && to.matched.length > 0) return false;
-    return from.path === to.path && JSON.stringify(from.params) === JSON.stringify(to.params) && JSON.stringify(from.query) === JSON.stringify(to.query) && from.hash === to.hash;
+    return from.path === to.path && paramsIdentity(from.params) === paramsIdentity(to.params) && queryIdentity(from.query) === queryIdentity(to.query) && from.hash === to.hash;
   }
   updateHistory(to, options) {
     const fullPath = this.options.base + to.path + (Object.keys(to.query).length ? `?${new URLSearchParams(to.query).toString()}` : "") + (to.hash ? `#${to.hash}` : "");
@@ -1554,8 +1562,7 @@ function KeepAliveRoute(options) {
       return;
     }
     if (!("component" in routeDef)) return;
-    const queryStr = Object.keys(route2.query).length > 0 ? `?${new URLSearchParams(route2.query).toString()}` : "";
-    const cacheKey = `${route2.path}${queryStr}${route2.hash ? `#${route2.hash}` : ""}`;
+    const cacheKey = JSON.stringify([route2.path, queryIdentity(route2.query), route2.hash]);
     const shouldCache = !includeNames || routeDef.name != null && includeNames.includes(routeDef.name);
     if (cacheKey === currentKey && currentNode) return;
     if (!anchor.parentNode) return;
@@ -1657,7 +1664,7 @@ function RouterLink(props, children) {
   const href = kind === "unsafe" ? "#" : rawHref;
   const { path: hrefPathRaw, query: hrefQueryRaw, hash: hrefHash } = splitRouteUrl(href);
   const targetPath = normalizePathname(hrefPathRaw);
-  const targetQuery = normalizeQuery(hrefQueryRaw);
+  const targetQuery = queryIdentity(hrefQueryRaw);
   const link = document.createElement("a");
   link.href = href;
   if (target) {
@@ -1675,7 +1682,7 @@ function RouterLink(props, children) {
     const route2 = routeGetter();
     const currentPath = normalizePathname(route2.path);
     const isActive = kind === "internal" && isPathnameAncestor(targetPath, currentPath);
-    const isExactActive = kind === "internal" && currentPath === targetPath && normalizeQuery(route2.query) === targetQuery && route2.hash === hrefHash;
+    const isExactActive = kind === "internal" && currentPath === targetPath && queryIdentity(route2.query) === targetQuery && route2.hash === hrefHash;
     const classes = [];
     if (isActive) {
       if (activeClass) classes.push(activeClass);
@@ -1692,15 +1699,7 @@ function RouterLink(props, children) {
     const lkey = key.toLowerCase();
     if (lkey === "href" || lkey[0] === "o" && lkey[1] === "n") return;
     if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-      const str = String(value);
-      if (isUrlAttribute(lkey)) {
-        const safe = sanitizeUrl(str);
-        if (safe) link.setAttribute(key, safe);
-      } else if (lkey === "style") {
-        link.setAttribute(key, sanitizeStyleAttribute(str, { element: link }));
-      } else {
-        link.setAttribute(key, str);
-      }
+      setSafeAttribute(link, key, String(value), { syncValueProperty: false, label: "RouterLink" });
     }
   });
   if (content !== void 0) appendChildren(link, content);
@@ -2228,8 +2227,7 @@ function serializeRouteState(state, nonce) {
   return `<script${nonceAttr}>window.${SSR_ROUTE_STATE_KEY}=${json}</script>`;
 }
 function deserializeRouteState() {
-  if (typeof window === "undefined") return void 0;
-  return window[SSR_ROUTE_STATE_KEY];
+  return readOwnGlobal(SSR_ROUTE_STATE_KEY);
 }
 function hydrateRouter(routes, options) {
   const serverState = deserializeRouteState();
@@ -2243,7 +2241,7 @@ function hydrateRouter(routes, options) {
   const liveUrl = `${window.location.pathname}${window.location.search}${window.location.hash}`;
   const resolved = resolveServerRoute(liveUrl, routes);
   const bootstrapEpoch = __getNavigationEpoch();
-  import("./ssr-XOTUASDO.js").then(async ({ hydrate }) => {
+  import("./ssr-5OWAH3U2.js").then(async ({ hydrate }) => {
     const { replaceChildrenSafely } = await import("./dispose-GEIG2KOF.js");
     if (__getNavigationEpoch() !== bootstrapEpoch) return;
     if (resolved.component) {

package/dist/{ssr-XOTUASDO.js → ssr-5OWAH3U2.js}

@@ -17,8 +17,10 @@ import {
   ssrSuspense,
   suspenseSwapScript,
   trustHTML
-} from "./chunk-HURREPU2.js";
-import "./chunk-2INLLLMZ.js";
+} from "./chunk-FC6KCJSA.js";
+import "./chunk-62BDYGAG.js";
+import "./chunk-3ACAAQIN.js";
+import "./chunk-EXXSN3BW.js";
 import "./chunk-7XHATCIH.js";
 import "./chunk-NYNYSPK7.js";
 export {

package/dist/{ssr-Bli9XRW5.d.ts → ssr-C8hgIAw7.d.cts}

@@ -103,6 +103,12 @@ declare function renderToDocument(component: () => HTMLElement, options?: {
     title?: string;
     meta?: Record<string, string>[];
     links?: Record<string, string>[];
+    /**
+     * External script URLs appended to `<body>`. Each passes the scheme
+     * allowlist; an allowed URL is still code that runs with the page's
+     * authority, so this option is an explicit trust decision — first-party
+     * or pinned URLs only, never request-derived values.
+     */
     scripts?: string[];
     bodyAttrs?: Record<string, string>;
     /**

package/dist/{ssr-Bli9XRW5.d.cts → ssr-C8hgIAw7.d.ts}

@@ -103,6 +103,12 @@ declare function renderToDocument(component: () => HTMLElement, options?: {
     title?: string;
     meta?: Record<string, string>[];
     links?: Record<string, string>[];
+    /**
+     * External script URLs appended to `<body>`. Each passes the scheme
+     * allowlist; an allowed URL is still code that runs with the page's
+     * authority, so this option is an explicit trust decision — first-party
+     * or pinned URLs only, never request-derived values.
+     */
     scripts?: string[];
     bodyAttrs?: Record<string, string>;
     /**