René's URL Explorer Experiment

Title: Version Release 1.4.0 by JosunLP · Pull Request #40 · bQuery/bQuery · GitHub

Open Graph Title: Version Release 1.4.0 by JosunLP · Pull Request #40 · bQuery/bQuery

X Title: Version Release 1.4.0 by JosunLP · Pull Request #40 · bQuery/bQuery

Description: This pull request adds comprehensive documentation and project metadata for the bQuery.js library, focusing on development rules, architecture, usage examples, and funding information. The changes ensure that contributors and AI tools have clear, up-to-date guidance on project structure, coding standards, and available modules. Documentation and Development Guidelines: Added .clinerules and .cursorrules files that define strict coding standards, security requirements (notably mandatory use of sanitizeHtml() for DOM writes), TypeScript conventions, testing patterns, and file structure for bQuery.js. These files also provide quick reference tables for core APIs and signals. [1] [2] Significantly expanded .github/copilot-instructions.md: Updated the project overview and module architecture, listing all major modules (including new ones like router, store, and view) and their responsibilities. Added new sections with code examples for router, store, and declarative view usage, helping contributors understand advanced features. Included new scripts in the development workflow, such as formatting, API doc generation, and cleaning commands. Clarified important files, TypeScript configuration, and AI agent resources for onboarding and automation. [1] [2] Expanded the list of common pitfalls and conventions, especially around signals, store usage, and CSP requirements for the view module. Project Metadata: Added .github/FUNDING.yml to specify supported funding platforms (GitHub Sponsors, Ko-fi) for project sponsorship and sustainability. Added (1.4.0) Core: css() on BQueryElement and BQueryCollection now acts as a getter when called with a single property name, returning the computed style value via getComputedStyle(). TypeScript overload signatures distinguish getter (string) from setter (this). Core: is(selector) method on BQueryElement as a jQuery-style alias for matches(). Core: find(selector) method on BQueryCollection to query descendant elements matching a CSS selector across all elements, with automatic deduplication via Set. Core: debounce() and throttle() now return enhanced functions with a .cancel() method — debounce.cancel() clears the pending timeout, throttle.cancel() resets the throttle timer allowing immediate re-execution. Core: Exported DebouncedFn and ThrottledFn interfaces from @bquery/bquery/core for typed usage of cancellable debounced/throttled functions. Reactive: Signal.dispose() method to remove all subscribers from a signal, preventing memory leaks when a signal is no longer needed. Also cleans up observer dependency references bidirectionally. Fixed (1.4.0) Reactive: effect() now catches errors thrown inside the effect body and logs them via console.error instead of crashing the reactive system. Subsequent signal updates continue to trigger the effect. Reactive: Effect cleanup functions are now wrapped in try/catch — errors during cleanup are caught and logged rather than propagating and breaking the reactive graph. Reactive: Batch flush (flushObservers()) now catches errors thrown by individual observers and continues executing remaining pending observers, preventing a single failing observer from blocking others. Reactive: endBatch() now guards against underflow — calling endBatch() without a matching beginBatch() is a safe no-op instead of decrementing batchDepth below zero. Platform: WebStorageAdapter.keys() now uses the spec-compliant Storage.key(index) iteration API instead of Object.keys(), which is more reliable across environments (e.g., happy-dom, Safari). View: parseObjectExpression() now correctly handles escaped backslashes before quotes by counting consecutive backslashes — a double backslash (\\) before a quote no longer incorrectly treats the quote as escaped, fixing edge cases in bq-class and bq-style object expressions. Security (1.4.0) srcset attributes are now validated per-URL rather than as a single URL string, correctly catching javascript: URLs embedded in responsive image descriptors (e.g., "safe.jpg 1x, javascript:alert(1) 2x"). action attribute on