@ape-egg/vibe 2.1.15 → 2.1.16

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [2.1.16] - 2026-06-22
+
+### Fixed
+
+- **Compiler 1.9.9 → 2.0.0 — bare prop substitution corrupted matching text inside string literals** (`compiler/src/parser/html.rs`, `runtime/component.js`) — the bare-prop-identifier rewrite added in 2.1.14 (so `onclick="pick(item)"` resolves the live prop) replaced *every* whole-word occurrence of the prop name, including ones inside a quoted string. A prop named `slot` rewrote the selector in `closest('brawler-slot')`, corrupting it. Both the compiler's `substitute_identifier` and the runtime's `substituteInExpr` now track string-literal boundaries (`'`, `"`, and backtick, honouring escapes; template `${…}` counts as part of the literal) and substitute only the code spans between them, leaving identifiers inside string literals intact. The two sides stay byte-for-byte identical, preserving compiled/runtime parity.
+
 ## [2.1.15] - 2026-06-22
 
 ### Fixed

package/compiler/src/Cargo.lock

@@ -1599,7 +1599,7 @@ checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
 
 [[package]]
 name = "vibe-compiler"
-version = "1.9.9"
+version = "2.0.0"
 dependencies = [
  "clap",
  "colored",

package/compiler/src/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "vibe-compiler"
-version = "1.9.9"
+version = "2.0.0"
 edition = "2021"
 description = "Vibe framework compiler - compiles Vibe source files into optimized output"
 authors = ["Kim Korte"]

package/compiler/src/parser/html.rs

@@ -542,7 +542,32 @@ fn substitute_identifier(expr: &str, name: &str, replacement: &str) -> String {
     }
     let mut out: Vec<u8> = Vec::with_capacity(bytes.len());
     let mut i = 0;
+    // Delimiter of the string literal we're currently inside, or 0 when in code.
+    // A prop identifier that appears inside a quoted string (e.g. the selector in
+    // `closest('brawler-slot')`) must be left intact, mirroring the runtime's
+    // substituteInExpr. Template `${…}` counts as part of the literal here.
+    let mut quote: u8 = 0;
     while i < bytes.len() {
+        let b = bytes[i];
+        if quote != 0 {
+            out.push(b);
+            if b == b'\\' && i + 1 < bytes.len() {
+                out.push(bytes[i + 1]);
+                i += 2;
+                continue;
+            }
+            if b == quote {
+                quote = 0;
+            }
+            i += 1;
+            continue;
+        }
+        if b == b'\'' || b == b'"' || b == b'`' {
+            quote = b;
+            out.push(b);
+            i += 1;
+            continue;
+        }
         if i + nlen <= bytes.len()
             && bytes[i..i + nlen].eq_ignore_ascii_case(nb)
             && (i == 0 || (!is_ident_byte(bytes[i - 1]) && bytes[i - 1] != b'.'))
@@ -551,7 +576,7 @@ fn substitute_identifier(expr: &str, name: &str, replacement: &str) -> String {
             out.extend_from_slice(replacement.as_bytes());
             i += nlen;
         } else {
-            out.push(bytes[i]);
+            out.push(b);
             i += 1;
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ape-egg/vibe",
-  "version": "2.1.15",
+  "version": "2.1.16",
   "type": "module",
   "description": "Runtime-first reactivity with optional compiler",
   "main": "index.js",

package/runtime/component.js

@@ -350,7 +350,23 @@ const renderPropsAndSlot = (temp, props, slotHtml) => {
       'gi'
     );
 
-    const substituteInExpr = (expr, replacement) => expr.replace(idRegex, replacement);
+    // Rewrite the identifier only outside string literals. A prop/alias that also
+    // appears inside a quoted string — e.g. the selector in `closest('brawler-slot')`
+    // when the prop is `slot` — must be left intact. Split on string literals
+    // (single/double/backtick, honouring escapes) and substitute only the code spans
+    // between them. Template `${…}` interpolation counts as part of the literal here.
+    const stringLiteral = /(['"`])(?:\\.|(?!\1)[^\\])*\1/g;
+    const substituteInExpr = (expr, replacement) => {
+      let out = '';
+      let last = 0;
+      let m;
+      stringLiteral.lastIndex = 0;
+      while ((m = stringLiteral.exec(expr))) {
+        out += expr.slice(last, m.index).replace(idRegex, replacement) + m[0];
+        last = m.index + m[0].length;
+      }
+      return out + expr.slice(last).replace(idRegex, replacement);
+    };
 
     if (bindingMatch) {
       const path = bindingMatch[1];