tungsten 0.3.2 → 0.3.4

package/dist/hydrate/hydrate.js

@@ -1,4 +1,4 @@
-import { integrateElementUpdateVdom } from "../update/integrateUpdateVdom.js";
+import { applyUpdate, integrateElementUpdateVdom } from "../update/integrateUpdateVdom.js";
 //import type { RouteType } from '../routing/RouteType.js'
 import { $number, $string, makeRenderedContentNodeNonRendered, makeRenderedContentNodeClassComponent, makeRenderedContentNodeFunctionComponent } from "../RenderedContentNode.js";
 import { ContentNodeElementIsHtml, ContentNodeIsHtml, ContentNodeIsComponent, ContentNodeComponentIsClassComponent, ContentNodeIsElement } from "../ContentNode.js";
@@ -29,6 +29,7 @@ import { MatchedRoute } from "../routing/MatchedRoute.js";
 import { isDev } from "../isDev.js";
 import { warn } from "../appOutput.js";
 import { reconcileHydratedAttributes } from "./reconcileHydratedAttributes.js";
+import { renderHydrationMismatchBanner } from "./renderHydrationMismatchBanner.js";
 import { setCurrentInstance } from "../hmr/instanceRegistry.js";
 // side-effect only: pulls applyHmrModule.js (and its clean, non-dynamic-import dependencies)
 // into the framework's traced dependency graph so it gets copied to .packages/ and is servable
@@ -39,12 +40,13 @@ import { setCurrentInstance } from "../hmr/instanceRegistry.js";
 import "../hmr/applyHmrModule.js";
 import { jsx as _jsx } from "tungsten/jsxRuntime.js";
 function debug(...texts) {
-  console.log(...texts);
+  //console.log(...texts)
   //console.log(getStackTrace().split('\n')[2])
 }
 function makeDefaultHydrateMeta() {
   return {
-    insideForm: false
+    insideForm: false,
+    mismatches: []
   };
 } // can we opto this out in production?
 export async function hydrate(appRoutes, RootComponent, instanceConfig) {
@@ -89,6 +91,7 @@ export async function hydrate(appRoutes, RootComponent, instanceConfig) {
     // hydrateNode(content, null, domPointer, instance, meta)
   }
   instance.hydrationComplete = true;
+  if (isDev) renderHydrationMismatchBanner(meta.mismatches);
   //// Can components update while hydrating is still taking place
   //// -- probably yes
   //// Can we pause any further update until hydration completes, to retain coherency?
@@ -114,12 +117,20 @@ routes) {
     };
   }
 }
-export async function hydrateRootComponent(instance, RootComponent, domPointer, meta) {
+export async function hydrateRootComponent(instance, RootComponent, domPointer, meta,
+// Real app hydration (hydrate(), above) always hydrates a root with no props of its own -
+// route data comes through the store instead - so the default reproduces that. A test
+// harness hydrating an arbitrary component (see testing/hydrateTestApp.ts) passes its own.
+props = {},
+// eslint-disable-line no-type-assertion/no-type-assertion -- default only reached when Props is empty, same as the hardcoded {} this replaces
+routeParams, routeData) {
   debug('hydrateRootComponent');
+  // matches createTungstenRootComponent's identical cast, the create-path equivalent of this function
+  // eslint-disable-next-line no-type-assertion/no-type-assertion
   const element = new RootComponent({
-    props: {},
-    routeParams: undefined,
-    routeData: undefined,
+    props,
+    routeParams,
+    routeData,
     instance,
     parentElement: null
   });
@@ -489,7 +500,7 @@ async function hydrateNodeSingle(node, parentElement, domPointer, instance, meta
     //     node[$props].ref.current = domNode
     // }
     debug('hydarating atts');
-    hydrateAttributes(node, domNode);
+    hydrateAttributes(node, domNode, meta);
     //!!! node.domElement = domNode
     const props = node[$props];
     if (node[$type] === 'textarea') {
@@ -525,7 +536,22 @@ async function hydrateNodeSingle(node, parentElement, domPointer, instance, meta
     debug('valid children', validChildren(node[$props].children), node[$props].children);
     const children = node[$props].children;
     let renderedChildren = $contentNull;
-    if (node[$props].__opaque !== true && validChildren(children)) {
+    if (node[$type] === 'body' && instance.config.csr) {
+      // CSR: body shipped empty on purpose, nothing to hydrate against - create fresh.
+      if (parentElement === null) {
+        throwError('hydrateNodeSingle', 'CSR hydration reached <body> with no owning component');
+      }
+      const childDomPointer = new DomPointer(domNode);
+      renderedChildren = await applyUpdate({
+        tungstenElement: parentElement,
+        instance,
+        newNode: children,
+        oldNode: $contentNull,
+        domRegion: null,
+        domPointer: childDomPointer,
+        parentNode: null
+      });
+    } else if (node[$props].__opaque !== true && validChildren(children)) {
       debug('node.props.children', children);
       const childDomPointer = new DomPointer(domNode);
       renderedChildren = await hydrateNode(children, parentElement, childDomPointer, instance, meta);
@@ -570,17 +596,27 @@ async function hydrateNodeComponent(node, parentElement, domPointer, instance, m
 }
 // export type HTMLBindableElement = HTMLButtonElement | HTMLDataElement | HTMLInputElement | HTMLLIElement
 // | HTMLMeterElement | HTMLOptionElement | HTMLParamElement | HTMLProgressElement | HTMLSelectElement | HTMLTextAreaElement
-function hydrateAttributes(node, domNode) {
+function hydrateAttributes(node, domNode, meta) {
   // handle bind attributes and merge together event handlers
   processAttributes(node);
   // Bring the server's attributes into line with what this render produced.
   // Runs in production as well as development: leaving a known-wrong value in
   // place is not better in production, it is only quieter. Only genuine
   // differences are written, so a page that matches costs reads and no
-  // writes. The report is dev-only, because a mismatch is a bug in the
-  // application's rendering rather than something a user can act on.
+  // writes. Collection always runs (it is what a hydration-test harness reads
+  // to assert on - see testing/hydrateTestApp.ts); only the console report and
+  // the on-page banner (hydrate(), below) are dev-only, because a mismatch is
+  // a bug in the application's rendering rather than something a user can act on.
   if (ContentNodeElementIsHtml(node)) {
-    reconcileHydratedAttributes(node, domNode, isDev ? mismatch => warn(`hydration mismatch on <${node[$type]}>:` + ` ${mismatch.name} rendered as ${JSON.stringify(mismatch.expected)}` + ` but the server sent ${JSON.stringify(mismatch.actual)}.` + ` The rendered value has been applied.`) : undefined);
+    reconcileHydratedAttributes(node, domNode, mismatch => {
+      meta.mismatches.push({
+        tagName: node[$type],
+        ...mismatch
+      });
+      if (isDev) {
+        warn(`hydration mismatch on <${node[$type]}>:` + ` ${mismatch.name} rendered as ${JSON.stringify(mismatch.expected)}` + ` but the server sent ${JSON.stringify(mismatch.actual)}.` + ` The rendered value has been applied.`);
+      }
+    });
   }
   debug('--\nhydrateAttributes', domNode);
   for (const key in node[$props]) {
@@ -698,6 +734,8 @@ function hydrateAttributes(node, domNode) {
 function processAttributes(node) {
   const props = node[$props];
   debug('--\nprocessAttributes', node);
+  // set a button without specified type to button, so buttons don't submit forms unless instructed to
+  if (node[$type] === 'button' && !('type' in props)) props.type = 'button';
   for (const key in node[$props]) {
     if (key === 'bind' && ContentNodeElementIsHtml(node)) {
       const eventName = 'onInput';

package/dist/hydrate/reconcileHydratedAttributes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconcileHydratedAttributes.d.ts","sourceRoot":"","sources":["../../src/hydrate/reconcileHydratedAttributes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAIxD,MAAM,MAAM,iBAAiB,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB,CAAA;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACvC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GACnD,IAAI,CAuCN"}
+{"version":3,"file":"reconcileHydratedAttributes.d.ts","sourceRoot":"","sources":["../../src/hydrate/reconcileHydratedAttributes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAKxD,MAAM,MAAM,iBAAiB,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB,CAAA;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACvC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,IAAI,GACnD,IAAI,CAuCN"}

package/dist/hydrate/reconcileHydratedAttributes.js

@@ -1,5 +1,6 @@
 import { $props } from "../contentNodeSymbols.js";
 import { processProps } from "../render/processProps.js";
+import { booleanAttributeValue } from "../booleanAttributeValue.js";
 /**
  * The attribute value a render produces for a prop, or null for "no attribute".
  *
@@ -7,8 +8,8 @@ import { processProps } from "../render/processProps.js";
  * the server and `addAttributes()` on the client — so that a value which
  * round-trips unchanged compares equal here.
  */
-function attributeValue(value) {
-  if (typeof value === 'boolean') return value ? '' : null;
+function attributeValue(name, value) {
+  if (typeof value === 'boolean') return booleanAttributeValue(name, value);
   if (value === undefined || value === null) return null;
   return String(value);
 }
@@ -55,7 +56,7 @@ export function reconcileHydratedAttributes(node, domNode, onMismatch) {
   const handled = new Set();
   for (const name in expected) {
     handled.add(name.toLowerCase());
-    const value = attributeValue(expected[name]);
+    const value = attributeValue(name, expected[name]);
     const actual = domNode.getAttribute(name);
     if (value === actual) continue;
     if (value === null) removeAttribute(domNode, name);else setAttribute(domNode, name, value);

package/dist/hydrate/renderHydrationMismatchBanner.d.ts

@@ -0,0 +1,7 @@
+import type { AttributeMismatch } from './reconcileHydratedAttributes.js';
+export type TaggedAttributeMismatch = AttributeMismatch & {
+    tagName: string;
+};
+export declare const hydrationMismatchAttribute = "data-tungsten-hydration-mismatches";
+export declare function renderHydrationMismatchBanner(mismatches: readonly TaggedAttributeMismatch[], doc?: Document): void;
+//# sourceMappingURL=renderHydrationMismatchBanner.d.ts.map

package/dist/hydrate/renderHydrationMismatchBanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderHydrationMismatchBanner.d.ts","sourceRoot":"","sources":["../../src/hydrate/renderHydrationMismatchBanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AAEzE,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAI7E,eAAO,MAAM,0BAA0B,uCAAuC,CAAA;AA2C9E,wBAAgB,6BAA6B,CACzC,UAAU,EAAE,SAAS,uBAAuB,EAAE,EAC9C,GAAG,GAAE,QAAmB,GACzB,IAAI,CA4BN"}

package/dist/hydrate/renderHydrationMismatchBanner.js

@@ -0,0 +1,69 @@
+// Read by the CSS rule below via attr() - not by Tungsten. Exported so an
+// application that wants different styling can target the same selector.
+export const hydrationMismatchAttribute = 'data-tungsten-hydration-mismatches';
+const styleId = 'tungsten-hydration-mismatches-style';
+// Reports hydration mismatches in the page, not only the console, without
+// adding a real DOM node to the hydrated tree.
+//
+// A real element - even one appended after hydration finishes and never
+// touched again by this code - is not actually safe here. Every container
+// Tungsten re-renders gets a fresh `new DomRegion(containerDomNode)` built
+// from whatever is *actually* in its childNodes at that moment, and every
+// position Tungsten writes to next is a raw index into that same list
+// (DomPointer.get/next/prev, and several inline `childNodes[domPointer.index]`
+// reads in integrateUpdateVdom.ts/hydrate.tsx). An extra, untracked child
+// shifts every index after it, so the next update touching that container
+// - body, in a typical app - would compare and write to the wrong nodes.
+// There is no flag on an element that makes the walker skip it; it would
+// have to be built into DomPointer/DomRegion and every direct childNodes
+// access alongside them, which is a core-framework change, not a banner.
+//
+// Attributes are a different story: reconcileHydratedAttributes only runs
+// once, during hydration, before this ever runs, and every later update
+// (updateAttributes) diffs against domNode.__tungsten_oldAttributes - its
+// own private record of what it last set - never the DOM's live attribute
+// list. A plain setAttribute() here is in neither its old props nor its new
+// props, so it is never visited, and never removed.
+//
+// So: set an attribute on <html> (outside Tungsten's own bookkeeping, so
+// permanently untouched by it) and let a `content: attr(...)` pseudo-element
+// display it. A pseudo-element is not a real node - never in .childNodes,
+// never visited by DomPointer or DomRegion - so this carries zero index risk
+// for the app's own reconciliation, at the cost of one small, deliberately
+// hacky wrinkle: a single <style> tag inserted into <head> once.
+//
+// head is not structurally exempt from diffing in general - it currently
+// just never gets diffed node-by-node during hydration (hydrateNodeSingle's
+// 'head' case skips it outright, a known hack, not a guarantee), and nothing
+// in a typical app changes head's vdom children after mount, so the general
+// update path never exercises it either. That could change. What head does
+// already have is a marker for exactly this situation - data--t-persist,
+// used by processHead.ts for framework-injected head content (the entry
+// script, the component CSS link) that isn't part of the app's own vdom and
+// must survive hydration - so this style tag carries it too, rather than
+// riding on the blanket skip alone.
+export function renderHydrationMismatchBanner(mismatches, doc = document) {
+  if (mismatches.length === 0) return;
+  if (doc.getElementById(styleId) === null) {
+    const style = doc.createElement('style');
+    style.id = styleId;
+    style.setAttribute('data--t-persist', 'true');
+    style.textContent = `
+            html[${hydrationMismatchAttribute}]::before {
+                content: attr(${hydrationMismatchAttribute});
+                display: block;
+                background: #7a1f1f;
+                color: #fff;
+                font: 13px/1.5 monospace;
+                padding: 8px 12px;
+                max-height: 33vh;
+                overflow: auto;
+                white-space: pre-wrap;
+            }
+        `;
+    doc.head.appendChild(style);
+  }
+  const heading = `Tungsten: ${mismatches.length} hydration mismatch${mismatches.length === 1 ? '' : 'es'} (dev only)`;
+  const lines = mismatches.map(mismatch => `<${mismatch.tagName}> ${mismatch.name}: ` + `rendered ${JSON.stringify(mismatch.expected)}, server sent ${JSON.stringify(mismatch.actual)}`);
+  doc.documentElement.setAttribute(hydrationMismatchAttribute, [heading, ...lines].join('\n'));
+}

package/dist/indexInner.d.ts

@@ -16,22 +16,26 @@ export * from './components/bindable/BindableTextarea.jsx';
 export * from './components/GoToComponent.jsx';
 export * from './components/Lazy.js';
 export * from './components/Link.jsx';
+export * from './components/PopMessages.jsx';
 export * from './components/RawHtml.jsx';
 export * from './components/RouteRedirectComponent.jsx';
 export { parseHtml, type ParseHtmlOptions } from './rawHtml/parseHtml.js';
 export { safeHtmlAllowList } from './rawHtml/safeHtmlAllowList.js';
 export type { HtmlAllowList } from './rawHtml/HtmlAllowList.js';
+export { sanitizeHtml, type SanitizeHtmlOptions } from './rawHtml/sanitizeHtml.js';
+export { filterContentNode } from './rawHtml/filterContentNode.js';
+export { contentNodeToHtml } from './render/contentNodeToHtml.js';
 export * from './components/WebRedirectComponent.jsx';
-export * from './nbsp.js';
+export * from './nbsp.jsx';
+export { pop, dismissPop } from './pop.js';
 export * from './browserStorage.js';
 export { createElement } from './createElement.js';
 export * from './createRef.js';
 export { foreach } from './foreach.js';
 export * from './helpers/index.js';
 export * from './hooks/index.js';
-export * from './hydrate/hydrate.js';
+export * from './hydrate/hydrate.jsx';
 export * from './jsxRuntime.js';
-export * from './env/parseEnv.js';
 export * from './makeServerRpc.js';
 export { isBrowser } from './isBrowser.js';
 export { isClient } from './isClient.js';
@@ -41,10 +45,10 @@ export { isProd } from './isProd.js';
 export { logAndReturn } from './logAndReturn.js';
 export * from './requests/index.js';
 export { registerGlobalData, type GlobalData, type GlobalDataFunction } from './routing/registerGlobalData.js';
-export * from './routing/MatchedRoute.jsx';
+export * from './routing/MatchedRoute.js';
 export * from './routing/RedirectCode.js';
 export * from './routing/Route.jsx';
-export * from './routing/Router.js';
+export * from './routing/Router.jsx';
 export * from './routing/RouteContentFunction.js';
 export * from './routing/RoutingRedirect.js';
 export * from './routing/WebRedirect.js';
@@ -56,6 +60,7 @@ export * from './Store/registerStore.js';
 export * from './components/Stylesheet.jsx';
 export { TungstenError } from './TungstenError.js';
 export * from './__deproxy.js';
+export { $original } from './componentProxyHandlers.js';
 export type { Request } from './api/Request.js';
 export type { Response } from './api/Response.js';
 export type { BindVariable, TypedBindVariable } from './components/bindable/BindVariable.js';
@@ -64,12 +69,15 @@ export * from './ContentNode.js';
 export type { GenericObject } from './GenericObject.type.js';
 export type { Instance } from './Instance/Instance.js';
 export type { Key } from './Key.js';
+export type { PopMessage } from './PopMessage.type.js';
 export type { ReqRes, ReqResOrNull } from './ReqRes.js';
 export type { Params } from './routing/Params.js';
 export type { ParamsFromPath } from './routing/ParamsFromPath.js';
 export type { RouteType, Route } from './routing/RouteType.js';
 export { type RouteKey, type Path, type Path as RoutePath, StringIsPath, RouteKeyIsPath } from './routing/RouteTypes.js';
 export type { Routes, CustomRoutes } from './routing/Routes.js';
+export type { ErrorRouteType } from './routing/ErrorRouteType.js';
+export { type TungstenErrorInfo, makeTungstenErrorInfo } from './routing/TungstenErrorInfo.js';
 export type { RouteParams } from './routing/RouteParams.type.js';
 export type { RouteData } from './routing/RouteData.js';
 export type { RouteDataFunction } from './routing/RouteDataFunction.type.js';

package/dist/indexInner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indexInner.d.ts","sourceRoot":"","sources":["../src/indexInner.ts"],"names":[],"mappings":"AAEA,cAAc,qBAAqB,CAAA;AACnC,OAAO,EACH,uBAAuB,EAAE,uBAAuB,IAAI,eAAe,EAAE,mBAAmB;AACxF,yBAAyB,EAAE,yBAAyB,IAAI,iBAAiB,EAAE,qBAAqB;AAEhG,gCAAgC,EAAE,gCAAgC,IAAI,wBAAwB,EAC9F,kCAAkC,EAAE,kCAAkC,IAAI,0BAA0B,GACvG,MAAM,kBAAkB,CAAA;AAEzB,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,YAAY,CAAA;AAC1B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4CAA4C,CAAA;AAC1D,cAAc,yCAAyC,CAAA;AACvD,cAAc,8CAA8C,CAAA;AAC5D,cAAc,yCAAyC,CAAA;AACvD,cAAc,0CAA0C,CAAA;AACxD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,gCAAgC,CAAA;AAC9C,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,0BAA0B,CAAA;AACxC,cAAc,yCAAyC,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,cAAc,uCAAuC,CAAA;AACrD,cAAc,WAAW,CAAA;AACzB,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,cAAc,gBAAgB,CAAA;AAG9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,iBAAiB,CAAA;AAE/B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,cAAc,qBAAqB,CAAA;AAEnC,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AAC9G,cAAc,4BAA4B,CAAA;AAC1C,cAAc,2BAA2B,CAAA;AACzC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,mCAAmC,CAAA;AACjD,cAAc,8BAA8B,CAAA;AAC5C,cAAc,0BAA0B,CAAA;AACxC,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,0BAA0B,CAAA;AACxC,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,cAAc,gBAAgB,CAAA;AAI9B,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC/C,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAC5F,YAAY,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AACnF,cAAc,kBAAkB,CAAA;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,YAAY,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACjD,YAAY,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,IAAI,IAAI,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxH,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAC5E,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,YAAY,EACR,0BAA0B,EAAE,0BAA0B,IAAI,SAAS,EACnE,gCAAgC,EAAE,gCAAgC,IAAI,eAAe,EACrF,cAAc,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAG7C,mBAAmB,mBAAmB,CAAA"}
+{"version":3,"file":"indexInner.d.ts","sourceRoot":"","sources":["../src/indexInner.ts"],"names":[],"mappings":"AAEA,cAAc,qBAAqB,CAAA;AACnC,OAAO,EACH,uBAAuB,EAAE,uBAAuB,IAAI,eAAe,EAAE,mBAAmB;AACxF,yBAAyB,EAAE,yBAAyB,IAAI,iBAAiB,EAAE,qBAAqB;AAEhG,gCAAgC,EAAE,gCAAgC,IAAI,wBAAwB,EAC9F,kCAAkC,EAAE,kCAAkC,IAAI,0BAA0B,GACvG,MAAM,kBAAkB,CAAA;AAEzB,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,oBAAoB,CAAA;AAClC,cAAc,YAAY,CAAA;AAC1B,cAAc,uBAAuB,CAAA;AACrC,cAAc,4CAA4C,CAAA;AAC1D,cAAc,yCAAyC,CAAA;AACvD,cAAc,8CAA8C,CAAA;AAC5D,cAAc,yCAAyC,CAAA;AACvD,cAAc,0CAA0C,CAAA;AACxD,cAAc,4CAA4C,CAAA;AAC1D,cAAc,gCAAgC,CAAA;AAC9C,cAAc,sBAAsB,CAAA;AACpC,cAAc,uBAAuB,CAAA;AACrC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,0BAA0B,CAAA;AACxC,cAAc,yCAAyC,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,YAAY,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,cAAc,uCAAuC,CAAA;AACrD,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC1C,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,cAAc,gBAAgB,CAAA;AAG9B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA;AAChC,cAAc,uBAAuB,CAAA;AACrC,cAAc,iBAAiB,CAAA;AAG/B,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,cAAc,qBAAqB,CAAA;AAEnC,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AAC9G,cAAc,2BAA2B,CAAA;AACzC,cAAc,2BAA2B,CAAA;AACzC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,mCAAmC,CAAA;AACjD,cAAc,8BAA8B,CAAA;AAC5C,cAAc,0BAA0B,CAAA;AACxC,cAAc,WAAW,CAAA;AACzB,cAAc,gBAAgB,CAAA;AAC9B,cAAc,eAAe,CAAA;AAC7B,cAAc,qBAAqB,CAAA;AACnC,cAAc,0BAA0B,CAAA;AACxC,cAAc,6BAA6B,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,cAAc,gBAAgB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAA;AAIvD,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC/C,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AACjD,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAC5F,YAAY,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AACnF,cAAc,kBAAkB,CAAA;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC5D,YAAY,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,YAAY,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AACnC,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,YAAY,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACjD,YAAY,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,IAAI,IAAI,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxH,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,KAAK,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAC9F,YAAY,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAC5E,YAAY,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,YAAY,EACR,0BAA0B,EAAE,0BAA0B,IAAI,SAAS,EACnE,gCAAgC,EAAE,gCAAgC,IAAI,eAAe,EACrF,cAAc,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAG7C,mBAAmB,mBAAmB,CAAA"}

package/dist/indexInner.js

@@ -21,12 +21,17 @@ export * from "./components/bindable/BindableTextarea.js";
 export * from "./components/GoToComponent.js";
 export * from "./components/Lazy.js";
 export * from "./components/Link.js";
+export * from "./components/PopMessages.js";
 export * from "./components/RawHtml.js";
 export * from "./components/RouteRedirectComponent.js";
 export { parseHtml } from "./rawHtml/parseHtml.js";
 export { safeHtmlAllowList } from "./rawHtml/safeHtmlAllowList.js";
+export { sanitizeHtml } from "./rawHtml/sanitizeHtml.js";
+export { filterContentNode } from "./rawHtml/filterContentNode.js";
+export { contentNodeToHtml } from "./render/contentNodeToHtml.js";
 export * from "./components/WebRedirectComponent.js";
 export * from "./nbsp.js";
+export { pop, dismissPop } from "./pop.js";
 export * from "./browserStorage.js";
 export { createElement } from "./createElement.js";
 export * from "./createRef.js";
@@ -38,7 +43,7 @@ export * from "./hooks/index.js";
 export * from "./hydrate/hydrate.js";
 export * from "./jsxRuntime.js";
 //export { tungstenPrivateEnv, tungstenPublicEnv } from './env/env.js'
-export * from "./env/parseEnv.js";
+//export * from './env/parseEnv.js'
 export * from "./makeServerRpc.js";
 export { isBrowser } from "./isBrowser.js";
 export { isClient } from "./isClient.js";
@@ -65,5 +70,7 @@ export * from "./Store/registerStore.js";
 export * from "./components/Stylesheet.js";
 export { TungstenError } from "./TungstenError.js";
 export * from "./__deproxy.js";
+export { $original } from "./componentProxyHandlers.js";
 export * from "./ContentNode.js"; // types and type guards
-export { StringIsPath, RouteKeyIsPath } from "./routing/RouteTypes.js";
+export { StringIsPath, RouteKeyIsPath } from "./routing/RouteTypes.js";
+export { makeTungstenErrorInfo } from "./routing/TungstenErrorInfo.js";

package/dist/makeInstanceConfigFromFrameworkConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"makeInstanceConfigFromFrameworkConfig.d.ts","sourceRoot":"","sources":["../src/makeInstanceConfigFromFrameworkConfig.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAEnE,wBAAgB,qCAAqC,CACjD,eAAe,EAAE,uBAAuB,EAAE,GAAG,GAAE,OAAe,GAC/D,cAAc,CAUhB"}
+{"version":3,"file":"makeInstanceConfigFromFrameworkConfig.d.ts","sourceRoot":"","sources":["../src/makeInstanceConfigFromFrameworkConfig.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAEnE,wBAAgB,qCAAqC,CACjD,eAAe,EAAE,uBAAuB,EAAE,GAAG,GAAE,OAAe,GAC/D,cAAc,CAWhB"}

package/dist/makeInstanceConfigFromFrameworkConfig.js

@@ -5,7 +5,8 @@ export function makeInstanceConfigFromFrameworkConfig(frameworkConfig, dev = fal
     useRootComponent: frameworkConfig.useRootComponent,
     clientSideNav: frameworkConfig.clientSideNav,
     siteBasePath: dev ? '' : frameworkConfig.siteBasePath,
-    staticSite: frameworkConfig.staticSite
+    staticSite: frameworkConfig.staticSite,
+    csr: frameworkConfig.csr
   };
   if ('sourceDir' in frameworkConfig) c.sourceDir = frameworkConfig.sourceDir;
   return c;

package/dist/pop.d.ts

@@ -0,0 +1,10 @@
+import type { Instance } from './Instance/Instance.js';
+export declare function registerPopInstance(newInstance: Instance): void;
+export declare function dismissPop(id: number): void;
+export declare function pop(text: string): void;
+type PopFunction = typeof pop;
+declare global {
+    var pop: PopFunction;
+}
+export {};
+//# sourceMappingURL=pop.d.ts.map

package/dist/pop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pop.d.ts","sourceRoot":"","sources":["../src/pop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAStD,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAE/D;AAQD,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAO3C;AAID,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAatC;AAMD,KAAK,WAAW,GAAG,OAAO,GAAG,CAAA;AAE7B,OAAO,CAAC,MAAM,CAAC;IAEX,IAAI,GAAG,EAAE,WAAW,CAAA;CACvB"}

package/dist/pop.js

@@ -0,0 +1,49 @@
+import { isServer } from "./isServer.js";
+import { log, warn } from "./appOutput.js";
+// Set once by PopMessages.clientInit, from this.__instance - one Instance per app, shared
+// across the whole client lifetime, so no per-component proxy/subscription is needed here.
+let instance = null;
+export function registerPopInstance(newInstance) {
+  instance = newInstance;
+}
+let nextId = 0;
+const AUTO_DISMISS_MS = 3000;
+const LEAVE_MS = 200; // match .pop-message.leaving's transition duration in PopMessages.tsx
+// Shared by pop()'s auto-dismiss and PopMessages' click-to-dismiss, so both leave the same way.
+export function dismissPop(id) {
+  if (instance === null) return;
+  const {
+    popMessages
+  } = instance.internalStore;
+  popMessages.set(popMessages.get().map(message => message.id === id ? {
+    ...message,
+    leaving: true
+  } : message));
+  setTimeout(() => {
+    popMessages.set(popMessages.get().filter(message => message.id !== id));
+  }, LEAVE_MS);
+}
+// Shows a dismissible banner via <PopMessages/> (an app mounts one in its Root). Also available
+// as global.pop / window.pop for ad-hoc use outside component code, on server and client alike.
+export function pop(text) {
+  if (isServer) {
+    log('pop: ' + text);
+    return;
+  }
+  if (instance === null) {
+    warn('pop() called before the app finished mounting; message dropped:', text);
+    return;
+  }
+  const message = {
+    id: nextId++,
+    text
+  };
+  const {
+    popMessages
+  } = instance.internalStore;
+  popMessages.set([...popMessages.get(), message]);
+  setTimeout(() => dismissPop(message.id), AUTO_DISMISS_MS);
+}
+// Assigned at module load in both environments, so a pre-mount browser call hits pop()'s
+// no-bridge branch instead of throwing.
+globalThis.pop = pop;

package/dist/postcssPlugins/TransformCssNames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TransformCssNames.d.ts","sourceRoot":"","sources":["../../src/postcssPlugins/TransformCssNames.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,IAAI,EAAQ,MAAM,SAAS,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAyD9C,KAAK,IAAI,GAAG;IACR,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,QAAQ,CAAA;CACrB,CAAA;AAKD,eAAO,MAAM,iBAAiB;WAAU,IAAI;;mBAezB,IAAI;;;CAoHtB,CAAA"}
+{"version":3,"file":"TransformCssNames.d.ts","sourceRoot":"","sources":["../../src/postcssPlugins/TransformCssNames.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,IAAI,EAAQ,MAAM,SAAS,CAAA;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAkE9C,KAAK,IAAI,GAAG;IACR,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,QAAQ,CAAA;CACrB,CAAA;AAKD,eAAO,MAAM,iBAAiB;WAAU,IAAI;;mBAezB,IAAI;;;CAoHtB,CAAA"}

package/dist/postcssPlugins/TransformCssNames.js

@@ -36,9 +36,17 @@ function transformClass(moduleName, className) {
 }
 const escapedHash = '\\0023';
 //const escapedDollar = '\\0024'
+// A module name may carry a `#` marking it as framework-owned rather than
+// app-owned (see modulePrefix). `#` cannot appear raw in a selector, so the CSS
+// side takes the escaped form while the JS side keeps the literal one that goes
+// into the DOM class attribute. The 4-digit escape needs a non-hex character
+// after it to terminate, which the prefix's trailing `-` provides.
+function escapeModuleName(moduleName) {
+  return moduleName.replaceAll('#', escapedHash);
+}
 function transformTag(moduleName, tag) {
   return {
-    css: moduleName + '_' + escapedHash + '_' + tag,
+    css: escapeModuleName(moduleName) + '_' + escapedHash + '_' + tag,
     jsx: moduleName + '_#_' + tag
   };
 }
@@ -94,7 +102,7 @@ export const TransformCssNames = opts => {
             } else if (type === 'class') {
               const className = content.slice(1);
               const newClassName = transformClass(moduleName, className);
-              newSelectors.push('.' + newClassName);
+              newSelectors.push('.' + transformClass(escapeModuleName(moduleName), className));
               names.classes[className] = newClassName;
             } else if (type === 'tag') {
               const newName = transformTag(moduleName, content);

package/dist/propsAreEqual.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `since` is the tick at which the receiving component last rendered. It is only consulted
+ * when the two sides are the same object, which is where a structural comparison cannot
+ * help: deep state is mutated in place, so both sides are the already-mutated object.
+ */
+export declare function valuesAreEqual(a: unknown, b: unknown, since?: number): boolean;
+export declare function propsAreEqual(previous: unknown, next: unknown, since?: number): boolean;
+//# sourceMappingURL=propsAreEqual.d.ts.map

package/dist/propsAreEqual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"propsAreEqual.d.ts","sourceRoot":"","sources":["../src/propsAreEqual.ts"],"names":[],"mappings":"AA+DA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAwC9E;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAEvF"}

package/dist/propsAreEqual.js

@@ -0,0 +1,97 @@
+import { objectTypesToProxy } from "./objectTypesToProxy.js";
+import { changedAt } from "./stateTracking.js";
+/**
+ * Structural comparison of component props, used to skip updating a child whose
+ * props have not changed.
+ *
+ * Follows the same reachability rule as the state proxy (see componentProxyHandlers):
+ * arrays and plain objects are data holders and are traversed; anything built from
+ * another constructor is an integral entity and is compared by identity. That keeps
+ * `state.form.x` style deep props working without walking into class instances.
+ *
+ * Reference identity short-circuits, so an unchanged array prop costs one comparison
+ * regardless of its length.
+ */
+function constructorNameOf(value) {
+  const proto = Object.getPrototypeOf(value);
+  if (proto === null || proto === undefined) return undefined;
+  const ctor = Reflect.get(proto, 'constructor');
+  if (typeof ctor !== 'function') return undefined;
+  return ctor.name;
+}
+/** treated as a data holder, and therefore traversed rather than compared by identity */
+function isTraversable(value) {
+  const name = constructorNameOf(value);
+  return name !== undefined && objectTypesToProxy.includes(name);
+}
+/**
+ * Has anything inside this object been mutated since the given tick?
+ *
+ * Walks down through data holders only, exactly as the comparison does, and stops at the
+ * first stamp newer than `since`. Cycles are possible in user state, so visited objects
+ * are tracked.
+ */
+function hasChangedSince(value, since, seen) {
+  if (seen.has(value)) return false;
+  seen.add(value);
+  // read through the proxy: $changed lives on the object and every get trap forwards
+  // unrecognised symbol keys to its target, so this works proxied or not
+  if (changedAt(value) > since) return true;
+  const raw = value;
+  if (Array.isArray(raw)) {
+    for (const entry of raw) {
+      if (typeof entry === 'object' && entry !== null && hasChangedSince(entry, since, seen)) return true;
+    }
+    return false;
+  }
+  if (!isTraversable(raw)) return false; // integral entity: its internals are not our business
+  for (const key of Object.keys(raw)) {
+    const entry = Reflect.get(raw, key);
+    if (typeof entry === 'object' && entry !== null && hasChangedSince(entry, since, seen)) return true;
+  }
+  return false;
+}
+/**
+ * `since` is the tick at which the receiving component last rendered. It is only consulted
+ * when the two sides are the same object, which is where a structural comparison cannot
+ * help: deep state is mutated in place, so both sides are the already-mutated object.
+ */
+export function valuesAreEqual(a, b, since) {
+  if (a === b) {
+    // primitives cannot have been mutated behind our back
+    if (typeof a !== 'object' || a === null) return true;
+    // no render baseline means we cannot prove the object is unchanged, and deep state
+    // is mutated in place -- so assume it changed rather than silently skipping
+    if (since === undefined) return false;
+    return !hasChangedSince(a, since, new Set());
+  }
+  // TODO: compare functions by source (String(fn)), so an inline handler recreated
+  // on each render does not by itself force a child to re-render. Left as identity
+  // for now because source equality ignores captured variables: two closures written
+  // identically but capturing different values would compare equal, and a child whose
+  // only differing prop is such a closure would be skipped and keep the old binding.
+  // Memoize String(fn) per function object if this is implemented -- it allocates.
+  if (typeof a === 'function' || typeof b === 'function') return false;
+  if (typeof a !== 'object' || typeof b !== 'object' || a === null || b === null) return false;
+  if (Array.isArray(a) || Array.isArray(b)) {
+    if (!Array.isArray(a) || !Array.isArray(b) || a.length !== b.length) return false;
+    for (let i = 0; i < a.length; i++) {
+      if (!valuesAreEqual(a[i], b[i], since)) return false;
+    }
+    return true;
+  }
+  // class instances are integral entities: not equal unless the same object,
+  // which `a === b` above already covered
+  if (!isTraversable(a) || !isTraversable(b)) return false;
+  const aKeys = Object.keys(a);
+  const bKeys = Object.keys(b);
+  if (aKeys.length !== bKeys.length) return false;
+  for (const key of aKeys) {
+    if (!Object.prototype.hasOwnProperty.call(b, key)) return false;
+    if (!valuesAreEqual(Reflect.get(a, key), Reflect.get(b, key), since)) return false;
+  }
+  return true;
+}
+export function propsAreEqual(previous, next, since) {
+  return valuesAreEqual(previous, next, since);
+}

package/dist/rawHtml/filterContentNode.d.ts

@@ -0,0 +1,20 @@
+import type { ContentNode } from '../ContentNode.js';
+import type { HtmlAllowList } from './HtmlAllowList.js';
+/**
+ * Applies an allow list to a content tree that already exists, rather than
+ * one being built - the same decisions `parseHtml(html, { allowList })` makes
+ * while parsing, for a tree that did not come from parsing HTML at all (one
+ * rebuilt from storage, for instance) and so never had the chance to.
+ *
+ * A disallowed element is unwrapped, keeping its children in its place, so
+ * filtering a tag never costs the reader the words inside it - the same rule
+ * `parseHtml` applies. An element holding program text rather than prose
+ * (`<script>`, and anything on the same footing as `<script>` even under a
+ * permissive allow list) is dropped whole instead. `on*` props, `ref`, and
+ * `dangerouslySetInnerHTML` are always stripped - the tree-shape equivalent
+ * of what `parseHtml` refuses to produce in the first place - and a `href`/
+ * `src`/... value using an executable scheme (`javascript:`, `vbscript:`) or,
+ * on a navigating attribute, `data:` is dropped the same way.
+ */
+export declare function filterContentNode(node: ContentNode, allowList: HtmlAllowList): ContentNode;
+//# sourceMappingURL=filterContentNode.d.ts.map

package/dist/rawHtml/filterContentNode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filterContentNode.d.ts","sourceRoot":"","sources":["../../src/rawHtml/filterContentNode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,mBAAmB,CAAA;AAI/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAyFvD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,GAAG,WAAW,CAE1F"}