@barefootjs/client 0.31.7 → 0.31.9

package/dist/csr-adapter.js

@@ -169911,6 +169911,34 @@ var SVG_ROOT_TAGS = new Set([
   "animateTransform",
   "animateMotion"
 ]);
+var MATHML_ROOT_TAGS = new Set([
+  "math",
+  "mrow",
+  "mfrac",
+  "msup",
+  "msub",
+  "msubsup",
+  "mn",
+  "mi",
+  "mo",
+  "mtext",
+  "munder",
+  "mover",
+  "munderover",
+  "mtable",
+  "mtr",
+  "mtd",
+  "msqrt",
+  "mroot",
+  "mstyle",
+  "merror",
+  "mpadded",
+  "mphantom",
+  "menclose",
+  "semantics",
+  "annotation",
+  "annotation-xml"
+]);
 
 // ../jsx/src/ir-to-client-js/collect-elements.ts
 var EMPTY_RENDER_EXPRS = new Set(["null", "undefined", "false", "''", '""', "``"]);

package/dist/runtime/component.d.ts

@@ -141,6 +141,60 @@ export declare function escapeAttr(value: unknown): string;
  * the reactive path.
  */
 export declare function escapeText(value: unknown): string;
+/**
+ * Brand carried by `bfMarkup()` — see that function's docstring. A string
+ * key (not a `Symbol`) because the brand must survive `structuredClone`
+ * (props cloned across an SSR seed / island-serialization boundary): a
+ * symbol-keyed property is silently dropped by the structured-clone
+ * algorithm, which would un-brand the value in transit.
+ */
+declare const BF_MARKUP_BRAND = "__bfMarkup";
+/**
+ * Shape produced by `bfMarkup()` (#2651). Compiler-emitted code only —
+ * never construct one by hand from userland; doing so is exactly as unsafe
+ * as writing raw `innerHTML` yourself, since `escapeTextOrMarkup` /
+ * `escapeTextOrNode` (below) trust `__bfMarkup`'s contents to already be
+ * safe-to-splice HTML and skip escaping it.
+ */
+export interface BfMarkup {
+    readonly [BF_MARKUP_BRAND]: string;
+}
+/**
+ * Brand a compiler-built HTML string as pre-escaped markup safe to splice
+ * raw into a template (#2651). The compiler emits this ONLY around HTML it
+ * itself assembled from a JSX element passed at a non-`children` component
+ * prop position (`header={<strong>Title</strong>}`) — every text segment
+ * inside that assembly was already escaped node-by-node during the
+ * assembly (the same `escapeHtml` / `escapeTextSlotExpr` calls
+ * `html-template.ts` uses for ordinary element children), so the
+ * concatenated result is exactly as safe as any other compiler-emitted
+ * template fragment.
+ *
+ * Not exported from the public `@barefootjs/client` surface: this is
+ * compiler-emitted-code only, exported solely from
+ * `@barefootjs/client/runtime`. Calling it directly from userland to wrap
+ * an arbitrary string is exactly as unsafe as assigning that string to
+ * `innerHTML` yourself — the value is trusted verbatim by every consumer
+ * below.
+ */
+export declare function bfMarkup(html: string): BfMarkup;
+/** Type guard for the `bfMarkup()` brand (#2651). Compiler-emitted code only — see `bfMarkup`'s docstring. */
+export declare function isBfMarkup(value: unknown): value is BfMarkup;
+/**
+ * `escapeText`'s counterpart for a claim-plan slot the compiler has
+ * classified `kind: 'markup'` at STATIC/initial-render time
+ * (`html-template.ts`'s `escapeTextSlotExpr`, gated on the same
+ * `ctx.dynamicElements` membership `emit-reactive.ts` reads to pick the
+ * writer kind for the REACTIVE side, below) — #2651. A `bfMarkup()`-branded
+ * value is compiler-built HTML the compiler already escaped piecewise
+ * while assembling it, and must reach the template raw, unescaped a second
+ * time; anything else (plain string, number, nullish) gets the ordinary
+ * `escapeText` treatment — this function is a strict superset of
+ * `escapeText`'s behaviour for every non-branded value, so switching a
+ * call site from one to the other never changes output unless the value
+ * is actually branded.
+ */
+export declare function escapeTextOrMarkup(value: unknown): string;
 /**
  * `escapeText`'s counterpart for a claimed 'markup' slot's REACTIVE write
  * (slot unification A3 follow-up), where the value is a plain-JS expression
@@ -160,6 +214,14 @@ export declare function escapeText(value: unknown): string;
  * before handing it to a 'markup' writer — NOT the preamble-region case
  * (`stringify/loop.ts`), whose value is already-built HTML from a nested
  * compiled render and must stay unescaped.
+ *
+ * A `bfMarkup()`-branded value (#2651) — a component prop re-read on every
+ * reactive re-run, e.g. `initChild`'s `get header() { return bfMarkup(...) }`
+ * getter — is unwrapped to its raw string for the same reason a `Node` is
+ * passed through untouched: the compiler already escaped its contents once
+ * during assembly, so re-escaping it (or, worse, `String()`-stringifying
+ * the wrapper object into `"[object Object]"`) would corrupt it. Checked
+ * before the `Node` branch since the two shapes are mutually exclusive.
  */
 export declare function escapeTextOrNode(value: unknown): string | Node;
 /**
@@ -167,14 +229,16 @@ export declare function escapeTextOrNode(value: unknown): string | Node;
  * attribute values. All code that sets innerHTML on dynamic HTML should
  * use this instead of raw innerHTML assignment.
  *
- * When `parent` is provided and lives in the SVG namespace, the markup
- * is parsed under SVG foreign-content context by wrapping it in
- * `<svg>...</svg>`; the wrapper's children are moved into the returned
- * fragment so callers see the same shape as the HTML path. Without
- * this, dynamically-inserted SVG elements (e.g., a `<path>` in a
- * conditional drag preview) end up as `HTMLUnknownElement` in the
- * xhtml namespace and the SVG renderer ignores them. Surfaced by the
- * Graph/DAG Editor block (#135).
+ * When `parent` is provided and lives in the SVG or MathML namespace, the
+ * markup is parsed under the matching foreign-content context by wrapping
+ * it in `<svg>...</svg>` / `<math>...</math>`; the wrapper's children are
+ * moved into the returned fragment so callers see the same shape as the
+ * HTML path. Without this, dynamically-inserted SVG/MathML elements (e.g.,
+ * a `<path>` in a conditional drag preview, or an `<mrow>` in a dynamic
+ * equation) end up as `HTMLUnknownElement` in the xhtml namespace and the
+ * SVG/MathML renderer ignores them. Surfaced by the Graph/DAG Editor block
+ * (#135); ported to MathML in #1096.
  */
 export declare function parseHTML(html: string, parent?: Element | null): DocumentFragment;
+export {};
 //# sourceMappingURL=component.d.ts.map

package/dist/runtime/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/runtime/component.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAS9C,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAExD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,CAAA;AAsB9F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAI9E;AAQD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAQjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;GAGG;AACH;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,GAAG,YAAY,EAChC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACnC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EACrB,IAAI,CAAC,EAAE,uBAAuB,EAC9B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GACvB,WAAW,CAcb;AA4OD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CA6ER;AA+DD;;;;;GAKG;AACH;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOjD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGjD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAG9D;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,gBAAgB,CAcjF"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../src/runtime/component.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAS9C,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAExD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CAAE,CAAA;AAsB9F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAI9E;AAQD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAQjD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH;;;GAGG;AACH;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,GAAG,YAAY,EAChC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACnC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EACrB,IAAI,CAAC,EAAE,uBAAuB,EAC9B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GACvB,WAAW,CAcb;AA4OD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CA6ER;AA+DD;;;;;GAKG;AACH;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOjD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGjD;AAED;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,eAAe,CAAA;AAEpC;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CACnC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAE/C;AAED,8GAA8G;AAC9G,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAU5D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI9D;AAaD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,gBAAgB,CAejF"}

package/dist/runtime/index.d.ts

@@ -15,7 +15,7 @@ export { mapArrayLazy, type LazyRowEntry, type LazyRowPlan } from './map-array-l
 export { patchLeaf } from './patch-leaf.ts';
 export { claimSlots, lazySlots, lazyClaimSlots, textOrNode, type SlotSpec, type ClaimPlan, type ClaimedSlots, type ClaimedSlotsRW, type SlotWriter } from './claim-slots.ts';
 export { registerTemplate, getTemplate, hasTemplate, type TemplateFn } from './template.ts';
-export { createComponent, mountRowRoot, renderChild, parseHTML, escapeAttr, escapeText, escapeTextOrNode, } from './component.ts';
+export { createComponent, mountRowRoot, renderChild, parseHTML, escapeAttr, escapeText, escapeTextOrNode, bfMarkup, isBfMarkup, escapeTextOrMarkup, type BfMarkup, } from './component.ts';
 export { applyRestAttrs } from './apply-rest-attrs.ts';
 export { spreadAttrs } from './spread-attrs.ts';
 export { styleToCss } from './style.ts';

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,UAAU,EACV,SAAS,EACT,OAAO,EACP,OAAO,EACP,KAAK,EACL,eAAe,EACf,SAAS,EACT,OAAO,EACP,gBAAgB,EAOhB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAI9C,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,eAAe,EACf,KAAK,OAAO,GACb,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,eAAe,EACf,wBAAwB,EACxB,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,aAAa,CAAA;AAIpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAI3D,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAK3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG5K,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAG3F,OAAO,EACL,eAAe,EACf,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGvC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC9G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3F,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAQ3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAGrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAG1D,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACtB,UAAU,EACV,cAAc,EACd,UAAU,EACV,SAAS,EACT,OAAO,EACP,OAAO,EACP,KAAK,EACL,eAAe,EACf,SAAS,EACT,OAAO,EACP,gBAAgB,EAOhB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,IAAI,EACT,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,GACpB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAI9C,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,eAAe,EACf,KAAK,OAAO,GACb,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,eAAe,EACf,wBAAwB,EACxB,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,aAAa,CAAA;AAIpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAI3D,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAK3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG5K,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAG3F,OAAO,EACL,eAAe,EACf,YAAY,EACZ,WAAW,EACX,SAAS,EACT,UAAU,EACV,UAAU,EACV,gBAAgB,EAKhB,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,KAAK,QAAQ,GACd,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGvC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAC9G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3F,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAQ3C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAGrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAG1D,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/runtime/index.js

@@ -1543,17 +1543,47 @@ function escapeText(value) {
     return "";
   return escapeAttr(value);
 }
+var BF_MARKUP_BRAND = "__bfMarkup";
+function bfMarkup(html) {
+  return { [BF_MARKUP_BRAND]: html };
+}
+function isBfMarkup(value) {
+  if (typeof value !== "object" || value === null)
+    return false;
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null)
+    return false;
+  return typeof value[BF_MARKUP_BRAND] === "string";
+}
+function escapeTextOrMarkup(value) {
+  if (isBfMarkup(value))
+    return value[BF_MARKUP_BRAND];
+  return escapeText(value);
+}
 function escapeTextOrNode(value) {
+  if (isBfMarkup(value))
+    return value[BF_MARKUP_BRAND];
   if (typeof Node !== "undefined" && value instanceof Node)
     return value;
   return escapeText(value);
 }
 var SVG_NS = "http://www.w3.org/2000/svg";
+var MATHML_NS = "http://www.w3.org/1998/Math/MathML";
+function namespaceWrapTagFor(parent) {
+  if (!parent)
+    return null;
+  if (parent.namespaceURI === SVG_NS)
+    return "svg";
+  if (parent.namespaceURI === MATHML_NS)
+    return "math";
+  return null;
+}
 function parseHTML(html, parent) {
   const tpl = document.createElement("template");
   const escaped = escapeAttrGt(html);
-  if (parent && parent.namespaceURI === SVG_NS) {
-    tpl.innerHTML = `<svg>${escaped}</svg>`;
+  const wrapTag = namespaceWrapTagFor(parent);
+  if (wrapTag) {
+    tpl.innerHTML = `<${wrapTag}>${escaped}</${wrapTag}>`;
     const wrapper = tpl.content.firstElementChild;
     const frag = document.createDocumentFragment();
     if (wrapper) {
@@ -3273,6 +3303,7 @@ export {
   lazySlots,
   lazyClaimSlots,
   isSSRPortal,
+  isBfMarkup,
   insert,
   initChild,
   hydratedScopes,
@@ -3290,6 +3321,7 @@ export {
   findScope,
   find,
   escapeTextOrNode,
+  escapeTextOrMarkup,
   escapeText,
   escapeAttr,
   endTurn,
@@ -3309,6 +3341,7 @@ export {
   createComponent,
   cleanupPortalPlaceholder,
   claimSlots,
+  bfMarkup,
   beginTurn,
   batch,
   applyRestAttrs,

package/dist/runtime/standalone.js

@@ -1949,17 +1949,47 @@ function escapeText(value) {
     return "";
   return escapeAttr(value);
 }
+var BF_MARKUP_BRAND = "__bfMarkup";
+function bfMarkup(html) {
+  return { [BF_MARKUP_BRAND]: html };
+}
+function isBfMarkup(value) {
+  if (typeof value !== "object" || value === null)
+    return false;
+  const proto = Object.getPrototypeOf(value);
+  if (proto !== Object.prototype && proto !== null)
+    return false;
+  return typeof value[BF_MARKUP_BRAND] === "string";
+}
+function escapeTextOrMarkup(value) {
+  if (isBfMarkup(value))
+    return value[BF_MARKUP_BRAND];
+  return escapeText(value);
+}
 function escapeTextOrNode(value) {
+  if (isBfMarkup(value))
+    return value[BF_MARKUP_BRAND];
   if (typeof Node !== "undefined" && value instanceof Node)
     return value;
   return escapeText(value);
 }
 var SVG_NS = "http://www.w3.org/2000/svg";
+var MATHML_NS = "http://www.w3.org/1998/Math/MathML";
+function namespaceWrapTagFor(parent) {
+  if (!parent)
+    return null;
+  if (parent.namespaceURI === SVG_NS)
+    return "svg";
+  if (parent.namespaceURI === MATHML_NS)
+    return "math";
+  return null;
+}
 function parseHTML(html, parent) {
   const tpl = document.createElement("template");
   const escaped = escapeAttrGt(html);
-  if (parent && parent.namespaceURI === SVG_NS) {
-    tpl.innerHTML = `<svg>${escaped}</svg>`;
+  const wrapTag = namespaceWrapTagFor(parent);
+  if (wrapTag) {
+    tpl.innerHTML = `<${wrapTag}>${escaped}</${wrapTag}>`;
     const wrapper = tpl.content.firstElementChild;
     const frag = document.createDocumentFragment();
     if (wrapper) {
@@ -3672,6 +3702,7 @@ export {
   lazySlots,
   lazyClaimSlots,
   isSSRPortal,
+  isBfMarkup,
   insert,
   initChild,
   hydratedScopes,
@@ -3689,6 +3720,7 @@ export {
   findScope,
   find,
   escapeTextOrNode,
+  escapeTextOrMarkup,
   escapeText,
   escapeAttr,
   endTurn,
@@ -3708,6 +3740,7 @@ export {
   createComponent,
   cleanupPortalPlaceholder,
   claimSlots,
+  bfMarkup,
   beginTurn,
   batch,
   applyRestAttrs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@barefootjs/client",
-  "version": "0.31.7",
+  "version": "0.31.9",
   "description": "BarefootJS client package: reactive primitives (SSR-safe) plus browser runtime under the `/runtime` subpath (compiler target)",
   "type": "module",
   "main": "./dist/index.js",
@@ -55,7 +55,7 @@
     "directory": "packages/client"
   },
   "dependencies": {
-    "@barefootjs/shared": "0.31.7"
+    "@barefootjs/shared": "0.31.9"
   },
   "peerDependencies": {
     "@barefootjs/jsx": ">=0.2.0"

package/src/runtime/component.ts

@@ -612,6 +612,80 @@ export function escapeText(value: unknown): string {
   return escapeAttr(value)
 }
 
+/**
+ * Brand carried by `bfMarkup()` — see that function's docstring. A string
+ * key (not a `Symbol`) because the brand must survive `structuredClone`
+ * (props cloned across an SSR seed / island-serialization boundary): a
+ * symbol-keyed property is silently dropped by the structured-clone
+ * algorithm, which would un-brand the value in transit.
+ */
+const BF_MARKUP_BRAND = '__bfMarkup'
+
+/**
+ * Shape produced by `bfMarkup()` (#2651). Compiler-emitted code only —
+ * never construct one by hand from userland; doing so is exactly as unsafe
+ * as writing raw `innerHTML` yourself, since `escapeTextOrMarkup` /
+ * `escapeTextOrNode` (below) trust `__bfMarkup`'s contents to already be
+ * safe-to-splice HTML and skip escaping it.
+ */
+export interface BfMarkup {
+  readonly [BF_MARKUP_BRAND]: string
+}
+
+/**
+ * Brand a compiler-built HTML string as pre-escaped markup safe to splice
+ * raw into a template (#2651). The compiler emits this ONLY around HTML it
+ * itself assembled from a JSX element passed at a non-`children` component
+ * prop position (`header={<strong>Title</strong>}`) — every text segment
+ * inside that assembly was already escaped node-by-node during the
+ * assembly (the same `escapeHtml` / `escapeTextSlotExpr` calls
+ * `html-template.ts` uses for ordinary element children), so the
+ * concatenated result is exactly as safe as any other compiler-emitted
+ * template fragment.
+ *
+ * Not exported from the public `@barefootjs/client` surface: this is
+ * compiler-emitted-code only, exported solely from
+ * `@barefootjs/client/runtime`. Calling it directly from userland to wrap
+ * an arbitrary string is exactly as unsafe as assigning that string to
+ * `innerHTML` yourself — the value is trusted verbatim by every consumer
+ * below.
+ */
+export function bfMarkup(html: string): BfMarkup {
+  return { [BF_MARKUP_BRAND]: html }
+}
+
+/** Type guard for the `bfMarkup()` brand (#2651). Compiler-emitted code only — see `bfMarkup`'s docstring. */
+export function isBfMarkup(value: unknown): value is BfMarkup {
+  if (typeof value !== 'object' || value === null) return false
+  // Plain carrier objects only (Copilot review on #2651's PR): without the
+  // prototype check, a DOM Node (or any host object) carrying a string
+  // `__bfMarkup` expando would satisfy the shape test and be unwrapped as
+  // raw HTML — the brand must stay mutually exclusive with the Node branch
+  // of `escapeTextOrNode` by construction, not by property-name luck.
+  const proto = Object.getPrototypeOf(value)
+  if (proto !== Object.prototype && proto !== null) return false
+  return typeof (value as Record<string, unknown>)[BF_MARKUP_BRAND] === 'string'
+}
+
+/**
+ * `escapeText`'s counterpart for a claim-plan slot the compiler has
+ * classified `kind: 'markup'` at STATIC/initial-render time
+ * (`html-template.ts`'s `escapeTextSlotExpr`, gated on the same
+ * `ctx.dynamicElements` membership `emit-reactive.ts` reads to pick the
+ * writer kind for the REACTIVE side, below) — #2651. A `bfMarkup()`-branded
+ * value is compiler-built HTML the compiler already escaped piecewise
+ * while assembling it, and must reach the template raw, unescaped a second
+ * time; anything else (plain string, number, nullish) gets the ordinary
+ * `escapeText` treatment — this function is a strict superset of
+ * `escapeText`'s behaviour for every non-branded value, so switching a
+ * call site from one to the other never changes output unless the value
+ * is actually branded.
+ */
+export function escapeTextOrMarkup(value: unknown): string {
+  if (isBfMarkup(value)) return value[BF_MARKUP_BRAND]
+  return escapeText(value)
+}
+
 /**
  * `escapeText`'s counterpart for a claimed 'markup' slot's REACTIVE write
  * (slot unification A3 follow-up), where the value is a plain-JS expression
@@ -631,33 +705,53 @@ export function escapeText(value: unknown): string {
  * before handing it to a 'markup' writer — NOT the preamble-region case
  * (`stringify/loop.ts`), whose value is already-built HTML from a nested
  * compiled render and must stay unescaped.
+ *
+ * A `bfMarkup()`-branded value (#2651) — a component prop re-read on every
+ * reactive re-run, e.g. `initChild`'s `get header() { return bfMarkup(...) }`
+ * getter — is unwrapped to its raw string for the same reason a `Node` is
+ * passed through untouched: the compiler already escaped its contents once
+ * during assembly, so re-escaping it (or, worse, `String()`-stringifying
+ * the wrapper object into `"[object Object]"`) would corrupt it. Checked
+ * before the `Node` branch since the two shapes are mutually exclusive.
  */
 export function escapeTextOrNode(value: unknown): string | Node {
+  if (isBfMarkup(value)) return value[BF_MARKUP_BRAND]
   if (typeof Node !== 'undefined' && value instanceof Node) return value
   return escapeText(value)
 }
 
 const SVG_NS = 'http://www.w3.org/2000/svg'
+const MATHML_NS = 'http://www.w3.org/1998/Math/MathML'
+
+/** Synthetic wrap tag for a parent's namespace, or null when it's plain HTML. */
+function namespaceWrapTagFor(parent: Element | null | undefined): 'svg' | 'math' | null {
+  if (!parent) return null
+  if (parent.namespaceURI === SVG_NS) return 'svg'
+  if (parent.namespaceURI === MATHML_NS) return 'math'
+  return null
+}
 
 /**
  * Parse an HTML string into a DocumentFragment, safely escaping ">" in
  * attribute values. All code that sets innerHTML on dynamic HTML should
  * use this instead of raw innerHTML assignment.
  *
- * When `parent` is provided and lives in the SVG namespace, the markup
- * is parsed under SVG foreign-content context by wrapping it in
- * `<svg>...</svg>`; the wrapper's children are moved into the returned
- * fragment so callers see the same shape as the HTML path. Without
- * this, dynamically-inserted SVG elements (e.g., a `<path>` in a
- * conditional drag preview) end up as `HTMLUnknownElement` in the
- * xhtml namespace and the SVG renderer ignores them. Surfaced by the
- * Graph/DAG Editor block (#135).
+ * When `parent` is provided and lives in the SVG or MathML namespace, the
+ * markup is parsed under the matching foreign-content context by wrapping
+ * it in `<svg>...</svg>` / `<math>...</math>`; the wrapper's children are
+ * moved into the returned fragment so callers see the same shape as the
+ * HTML path. Without this, dynamically-inserted SVG/MathML elements (e.g.,
+ * a `<path>` in a conditional drag preview, or an `<mrow>` in a dynamic
+ * equation) end up as `HTMLUnknownElement` in the xhtml namespace and the
+ * SVG/MathML renderer ignores them. Surfaced by the Graph/DAG Editor block
+ * (#135); ported to MathML in #1096.
  */
 export function parseHTML(html: string, parent?: Element | null): DocumentFragment {
   const tpl = document.createElement('template')
   const escaped = escapeAttrGt(html)
-  if (parent && parent.namespaceURI === SVG_NS) {
-    tpl.innerHTML = `<svg>${escaped}</svg>`
+  const wrapTag = namespaceWrapTagFor(parent)
+  if (wrapTag) {
+    tpl.innerHTML = `<${wrapTag}>${escaped}</${wrapTag}>`
     const wrapper = tpl.content.firstElementChild
     const frag = document.createDocumentFragment()
     if (wrapper) {

package/src/runtime/index.ts

@@ -105,6 +105,14 @@ export {
   escapeAttr,
   escapeText,
   escapeTextOrNode,
+  // JSX-element-as-prop markup brand (#2651) — compiler-emitted code only.
+  // NOT re-exported from the public `@barefootjs/client` top-level entry;
+  // see `bfMarkup`'s docstring in `component.ts` for why calling it
+  // directly from userland is unsafe.
+  bfMarkup,
+  isBfMarkup,
+  escapeTextOrMarkup,
+  type BfMarkup,
 } from './component.ts'
 
 // Spread props helpers