/*!
* Statum - client-side state library.
*
* An HTMX-inspired state layer. The library manages signed "snapshots" of
* application state (one per slot type), keeps them fresh via the server's
* `transmit_after` / `invalid_after` timestamps, and binds them to the DOM
* through `stm-*` attributes. See model.md for the full specification.
*
* Distribution: a single IIFE that attaches `window.statum` (no dependencies,
* no build step). Targets modern evergreen browsers (uses fetch,
* BroadcastChannel, queueMicrotask, URLSearchParams, FormData).
*/
(function () {
'use strict';
/** Content-Type used by every Statum directive response. */
var STATUM_CONTENT_TYPE = 'application/vnd.statum+json';
/** Request/response header carrying one slot's reference (or base64 frame). */
var SLOT_HEADER = 'X-Statum-Slot';
/** Request header carrying an action's opaque `private` blob. */
var PRIVATE_HEADER = 'X-Statum-Private';
/** Session-cookie marker used to detect a fresh browser session. */
var SESSION_COOKIE = '_statum_sdc';
/** BroadcastChannel name used to sync session/device state across tabs. */
var CHANNEL_NAME = 'statum';
/** localStorage / sessionStorage key prefix for persisted frames. */
var STORAGE_PREFIX = 'statum:';
// ---------------------------------------------------------------------------
// Configuration
// ---------------------------------------------------------------------------
/**
* Endpoint URLs. These defaults may be overridden per-page with the
* `stm-entrypoint` and `stm-slots` attributes on the `
` element.
*
* @type {{entrypointUrl: string, slotsUrl: string}}
*/
var config = {
entrypointUrl: '/_statum/entrypoint',
slotsUrl: '/_statum/slots'
};
// ---------------------------------------------------------------------------
// State store
// ---------------------------------------------------------------------------
/**
* In-memory store, keyed by slot type. Each value is `{frame, snapshot}`
* where `snapshot` is the parsed `frame.content`. This map is the single
* source of truth for rendering; persistent backends merely hydrate it.
*
* @type {Map}
*/
var store = new Map();
/** Listeners, keyed by type name. @type {Map>} */
var listeners = new Map();
/** @type {BroadcastChannel|null} */
var channel = null;
/** Whether {@link init} has already run. */
var initialized = false;
// ---------------------------------------------------------------------------
// Small utilities
// ---------------------------------------------------------------------------
/**
* Parse an ISO 8601 timestamp to epoch millis, or `undefined`.
* @param {string|undefined} s
* @returns {number|undefined}
*/
function parseTime(s) {
if (!s) return undefined;
var t = new Date(s).getTime();
return isNaN(t) ? undefined : t;
}
/**
* Base64-encode a UTF-8 string (safe for frames containing non-Latin1 data).
* @param {string} str
* @returns {string}
*/
function b64encode(str) {
var bytes = new TextEncoder().encode(str);
var bin = '';
var chunk = 0x8000;
for (var i = 0; i < bytes.length; i += chunk) {
bin += String.fromCharCode.apply(null, bytes.subarray(i, i + chunk));
}
return btoa(bin);
}
/** Read a cookie value, or `null` if absent. @param {string} name */
function getCookie(name) {
var escaped = name.replace(/([.$?*|{}()[\]\\/+^])/g, '\\$1');
var match = document.cookie.match(new RegExp('(?:^|; )' + escaped + '=([^;]*)'));
return match ? decodeURIComponent(match[1]) : null;
}
/** Set a session cookie (no expiry => cleared when the browser closes). */
function setCookie(name, value) {
document.cookie = name + '=' + encodeURIComponent(value) + '; path=/; SameSite=Lax';
}
// ---------------------------------------------------------------------------
// Expression evaluation
// ---------------------------------------------------------------------------
/**
* Compiled-expression cache. Expressions are evaluated as JavaScript against
* a scope object (the page's HTML is trusted, per the model).
* @type {Map}
*/
var exprCache = new Map();
/**
* Compile (and cache) an expression string into a function of `scope`.
* Uses `with` so that arbitrary type names and loop variables are resolved
* as bare identifiers. Returns a function that yields `undefined` on any
* runtime or compile error.
* @param {string} expr
* @returns {Function}
*/
function compileExpr(expr) {
var cached = exprCache.get(expr);
if (cached !== undefined) return cached;
var fn;
try {
// Function-constructor bodies are non-strict by default, so `with` is
// permitted. The inner try/catch turns reference errors into `undefined`
// so a missing path simply yields no value.
fn = new Function('scope', 'with(scope){try{return (' + expr + ');}catch(e){return undefined;}}');
} catch (e) {
fn = function () { return undefined; };
}
exprCache.set(expr, fn);
return fn;
}
/**
* Evaluate an expression against a scope.
* @param {string} expr
* @param {object} [scope]
* @returns {*} `undefined` if the expression is empty or fails.
*/
function evalExpr(expr, scope) {
if (expr == null || expr === '') return undefined;
try {
return compileExpr(expr)(scope || {});
} catch (e) {
return undefined;
}
}
/**
* Build a child scope that inherits the parent (so type bindings remain
* visible) and adds one own loop variable.
* @param {object} parent
* @param {string} name
* @param {*} value
* @returns {object}
*/
function childScope(parent, name, value) {
var scope = Object.create(parent || null);
scope[name] = value;
return scope;
}
// ---------------------------------------------------------------------------
// StatumError
// ---------------------------------------------------------------------------
/**
* Error type thrown for HTTP failures and `error` directives.
* @param {string} [message]
* @param {string} [code]
* @param {object} [data]
*/
function StatumError(message, code, data) {
this.name = 'StatumError';
this.message = message || '';
this.code = code || undefined;
this.data = data || undefined;
}
StatumError.prototype = Object.create(Error.prototype);
// ---------------------------------------------------------------------------
// Persistence
// ---------------------------------------------------------------------------
/**
* Pick the storage backend for a scope.
* @param {string} scope
* @returns {Storage|null} `null` for in-memory scopes.
*/
function storageFor(scope) {
if (scope === 'device' || scope === 'session') return localStorage;
if (scope === 'flow') return sessionStorage;
return null; // page / transient
}
/**
* Persist a slot's frame to the backend matching its scope, removing any
* stale copy from the other backend first (in case the scope changed).
* @param {string} type
* @param {{frame: object, snapshot: object}} entry
*/
function persistEntry(type, entry) {
var scope = entry.snapshot.slot && entry.snapshot.slot.scope;
removePersisted(type);
var storage = storageFor(scope);
if (!storage) return;
try {
storage.setItem(STORAGE_PREFIX + type, JSON.stringify(entry.frame));
} catch (e) {
/* storage full or unavailable; remain in-memory only */
}
}
/** Remove a persisted frame from both backends. @param {string} type */
function removePersisted(type) {
try { localStorage.removeItem(STORAGE_PREFIX + type); } catch (e) {}
try { sessionStorage.removeItem(STORAGE_PREFIX + type); } catch (e) {}
}
/** Load every persisted frame from a backend into the in-memory store. */
function loadFrom(storage) {
for (var i = 0; i < storage.length; i++) {
var key = storage.key(i);
if (!key || key.indexOf(STORAGE_PREFIX) !== 0) continue;
try {
var frame = JSON.parse(storage.getItem(key));
var snapshot = JSON.parse(frame.content);
var type = snapshot.slot && snapshot.slot.type;
if (type && !store.has(type)) store.set(type, { frame: frame, snapshot: snapshot });
} catch (e) {
/* corrupt entry: ignore */
}
}
}
/** Hydrate the store from localStorage and sessionStorage. */
function hydrate() {
try { loadFrom(localStorage); } catch (e) {}
try { loadFrom(sessionStorage); } catch (e) {}
}
// ---------------------------------------------------------------------------
// Session-cookie initialization
// ---------------------------------------------------------------------------
/**
* Detect a fresh browser session using the `_statum_sdc` session cookie.
* On a fresh session, clear all `session`-scoped persisted frames, then set
* the marker. Session cookies are shared across tabs, so a tab opened
* mid-session sees the marker and leaves session data intact.
*/
function initSession() {
if (getCookie(SESSION_COOKIE) !== null) return;
clearSessionSlotsFromStorage();
setCookie(SESSION_COOKIE, '1');
}
/** Remove all `session`-scoped frames from localStorage. */
function clearSessionSlotsFromStorage() {
var toRemove = [];
for (var i = 0; i < localStorage.length; i++) {
var key = localStorage.key(i);
if (!key || key.indexOf(STORAGE_PREFIX) !== 0) continue;
try {
var frame = JSON.parse(localStorage.getItem(key));
var snapshot = JSON.parse(frame.content);
if (snapshot.slot && snapshot.slot.scope === 'session') toRemove.push(key);
} catch (e) {}
}
for (var j = 0; j < toRemove.length; j++) localStorage.removeItem(toRemove[j]);
}
// ---------------------------------------------------------------------------
// Listeners & cross-tab broadcast
// ---------------------------------------------------------------------------
/**
* Fire all listeners for a type.
* @param {string} type
* @param {object|null} frame
* @param {object|null} snapshot
*/
function notify(type, frame, snapshot) {
var set = listeners.get(type);
if (!set) return;
var event = { type: type, frame: frame, snapshot: snapshot };
set.forEach(function (cb) {
try { cb(event); } catch (e) { console.error('[statum] listener error', e); }
});
}
/**
* Broadcast a state change to other tabs. Only `session`/`device` scopes are
* shared (flow/page/transient are per-tab).
* @param {object} message
* @param {string} [scope]
*/
function broadcast(message, scope) {
if (!channel) return;
if (scope !== 'session' && scope !== 'device') return;
try { channel.postMessage(message); } catch (e) {}
}
/** Open the BroadcastChannel and wire inbound messages. */
function setupChannel() {
if (typeof BroadcastChannel === 'undefined') return;
try {
channel = new BroadcastChannel(CHANNEL_NAME);
} catch (e) {
channel = null;
return;
}
channel.onmessage = function (ev) {
var msg = ev.data;
if (!msg || msg.kind !== 'set' && msg.kind !== 'clear') return;
if (msg.kind === 'set' && msg.frame) {
try {
var snapshot = JSON.parse(msg.frame.content);
var type = snapshot.slot && snapshot.slot.type;
if (type) {
var entry = { frame: msg.frame, snapshot: snapshot };
store.set(type, entry);
persistEntry(type, entry);
notify(type, msg.frame, snapshot);
renderAll();
}
} catch (e) { /* ignore malformed */ }
} else if (msg.kind === 'clear' && msg.type) {
clearType(msg.type, { broadcast: false });
renderAll();
}
};
}
// ---------------------------------------------------------------------------
// State mutation
// ---------------------------------------------------------------------------
/**
* Remove a type from the store, un-persist it, fire listeners, and
* (optionally) broadcast the clear to other tabs.
* @param {string} type
* @param {{broadcast?: boolean}} [opts]
*/
function clearType(type, opts) {
var entry = store.get(type);
if (!entry) return;
var scope = entry.snapshot.slot && entry.snapshot.slot.scope;
store.delete(type);
removePersisted(type);
notify(type, null, null);
if (opts && opts.broadcast) broadcast({ kind: 'clear', type: type }, scope);
}
/**
* Apply a `set` directive: store/refresh a slot's snapshot.
* @param {object} directive `{ snapshot_frame }`
*/
function applySet(directive) {
var frame = directive.snapshot_frame;
if (!frame || !frame.content) return;
var snapshot;
try { snapshot = JSON.parse(frame.content); } catch (e) { return; }
var type = snapshot.slot && snapshot.slot.type;
if (!type) return;
var entry = { frame: frame, snapshot: snapshot };
store.set(type, entry);
persistEntry(type, entry);
notify(type, frame, snapshot);
var scope = snapshot.slot && snapshot.slot.scope;
broadcast({ kind: 'set', frame: frame }, scope);
}
/**
* Apply a `clear` directive. The directive carries a slot key, so the type
* holding that key is resolved and removed.
* @param {object} directive `{ key }`
*/
function applyClear(directive) {
var key = directive.key;
var typeToRemove = null;
store.forEach(function (entry, type) {
if (entry.snapshot.slot && entry.snapshot.slot.key === key) typeToRemove = type;
});
if (typeToRemove) clearType(typeToRemove, { broadcast: true });
}
// ---------------------------------------------------------------------------
// Snapshot freshness & request headers
// ---------------------------------------------------------------------------
/**
* Categorize a held snapshot relative to the current time.
* @returns {'silent'|'always'|'invalid'|'stale'|'fresh'}
* - `silent`: unidirectional (`transmit_after` undefined) - never sent.
* - `always`: `transmit_after === as_at` - send the base64 frame each time.
* - `invalid`: past `invalid_after` - drop and refetch.
* - `stale`: past `transmit_after` but not yet invalid - pre-flight first.
* - `fresh`: still cached server-side - send the `as_at` reference.
*/
function entryCategory(entry) {
var snap = entry.snapshot;
var transmit = snap.transmit_after;
if (transmit === undefined || transmit === null) return 'silent';
if (transmit === snap.as_at) return 'always';
var now = Date.now();
var invalidAt = parseTime(snap.invalid_after);
var transmitAt = parseTime(transmit);
if (invalidAt !== undefined && now >= invalidAt) return 'invalid';
if (transmitAt !== undefined && now >= transmitAt) return 'stale';
return 'fresh';
}
/**
* Drop locally-invalid snapshots and pre-flight any stale ones. Pre-flighting
* posts the stale frames to the slot endpoint and applies the returned `set`
* directives, refreshing their `as_at` values before the real request runs.
*
* Single-flight: concurrent callers share one in-flight preparation.
* @returns {Promise}
*/
var preparePromise = null;
function prepareSlots() {
if (preparePromise) return preparePromise;
preparePromise = doPrepareSlots().then(function () {
preparePromise = null;
}, function () {
preparePromise = null;
});
return preparePromise;
}
async function doPrepareSlots() {
var stale = [];
store.forEach(function (entry, type) {
var cat = entryCategory(entry);
if (cat === 'invalid') {
clearType(type, { broadcast: false });
} else if (cat === 'stale') {
stale.push(entry.frame);
}
});
if (stale.length) {
var directives = await postSlots(stale);
applyDirectives(directives, { originElement: null });
}
}
/**
* Build the `X-Statum-Slot` header values for every held slot, using the
* freshness rules. Assumes {@link prepareSlots} has just run.
* @returns {string[]}
*/
function buildSlotHeaders() {
var headers = [];
store.forEach(function (entry) {
var snap = entry.snapshot;
var cat = entryCategory(entry);
if (cat === 'silent' || cat === 'invalid') return;
if (cat === 'always') {
headers.push(b64encode(JSON.stringify(entry.frame)));
} else {
headers.push('key=' + snap.slot.key + '; as_at=' + snap.as_at);
}
});
return headers;
}
// ---------------------------------------------------------------------------
// HTTP helpers
// ---------------------------------------------------------------------------
/** True if a response is a Statum directive response. */
function isStatum(res) {
return (res.headers.get('Content-Type') || '').indexOf(STATUM_CONTENT_TYPE) !== -1;
}
/**
* POST an array of frames to the slot endpoint (the pre-flight target) and
* return its directive array. This request intentionally carries no slot
* headers (it is itself the refresh).
* @param {object[]} frames
* @returns {Promise