@barefootjs/jsx 0.25.0 → 0.26.0

package/dist/adapters/dangerous-inner-html.d.ts

@@ -1,34 +1,49 @@
 /**
  * Shared `dangerouslySetInnerHTML={{ __html: expr }}` recognition + policy
- * (#2207). Single place every template adapter calls from `renderElement`,
- * so the injection-safety-relevant policy — "only a compile-time string
- * literal is lowered; anything else refuses loudly" — lives in exactly one
- * reviewable spot instead of being re-derived independently in 8 adapters.
+ * (#2207, dynamic lowering #2319). Single place every template adapter calls
+ * from `renderElement`, so the injection-safety-relevant policy lives in
+ * exactly one reviewable spot instead of being re-derived independently in
+ * 8 adapters. `resolveDangerousInnerHtml` classifies the `__html` value into
+ * three cases the adapter then renders uniformly:
  *
- * Scope, deliberately narrow for v1 (see #2207 / #2215 for the follow-up):
- * a static literal is spliced directly into the adapter's OWN template
- * source as trusted text (same trust domain as hand-writing the HTML into
- * the template) — never routed through a `|safe`/`|raw`/`{!! !!}`-style
- * runtime raw-output primitive, which would reopen a template-source
- * injection surface for no benefit (the value is already fully known at
- * compile time). A DYNAMIC value (signal, prop, a template literal WITH a
- * substitution, local const, anything non-literal) is refused with
- * `BF101` — a no-substitution template literal is NOT dynamic; the parser
- * normalizes it to the same `{kind:'literal', literalType:'string'}` shape
- * as a plain string literal, so it's treated identically (see
- * `staticHtmlLiteral` below). Hono/CSR already support it (the client
- * drives a `createEffect`-based `el.innerHTML = …`
- * assignment — see `ir-to-client-js/emit-reactive.ts`), so this is a
- * template-adapter-only gap, tracked separately (#2215) rather than folded
- * into this literal-only cut.
+ * - `static` — a compile-time string literal. Spliced directly into the
+ *   adapter's OWN template source as trusted text (same trust domain as
+ *   hand-writing the HTML into the template), guarded per-adapter against
+ *   that language's template metacharacters (`dangerousInnerHtmlMetachar
+ *   Violation`). NOT routed through a runtime raw-output primitive — the
+ *   value is fully known at compile time, so a runtime sink would reopen a
+ *   template-source injection surface for no benefit.
+ *
+ * - `dynamic` — a prop-/signal-derived value (a signal read, prop, template
+ *   literal WITH a substitution, local const, `??`-fallback, anything
+ *   non-literal). The adapter serializes the `__html` expression via its own
+ *   `convertExpressionTo<Lang>` and wraps the result in its runtime
+ *   raw-output sink (Blade `{!! !!}`, ERB bare `<%= %>`, Go `template.HTML`,
+ *   Jinja/MiniJinja `|safe`, Twig `|raw`, Mojolicious `<%== %>`, Xslate
+ *   `mark_raw`). The runtime evaluates the expression at request time — the
+ *   VALUE is never spliced into template source, so no metachar guard
+ *   applies. This matches React's contract ("dangerously" = the caller owns
+ *   the value's safety) and the Hono/CSR path, which already drives a
+ *   `createEffect`-based `el.innerHTML = …` assignment (see
+ *   `ir-to-client-js/emit-reactive.ts`).
+ *
+ * - `unlowerable` — the value is not a `{ __html: <expr> }` object literal
+ *   at all (bare boolean/spread, or a variable holding the object). No
+ *   `__html` expression to lower, so the adapter refuses with `BF101`.
  */
 import type { CompilerError, IRAttribute, IRElement, SourceLocation } from '../types.ts';
+import { type ParsedExpr } from '../expression-parser.ts';
 export declare function isDangerousInnerHtmlAttr(attr: IRAttribute): boolean;
 export type DangerousInnerHtmlResolution = {
     kind: 'static';
     html: string;
 } | {
     kind: 'dynamic';
+    valueExpr: string;
+    valueParsed: ParsedExpr;
+    loc: SourceLocation;
+} | {
+    kind: 'unlowerable';
     expr: string;
     loc: SourceLocation;
 };
@@ -68,10 +83,23 @@ export declare function resolveDangerousInnerHtml(element: IRElement): Dangerous
 export declare function dangerousInnerHtmlMetacharViolation(html: string, adapterId: string): string | null;
 /**
  * Purpose-built `BF101` for a `dangerouslySetInnerHTML` value this adapter
- * can't lower — either genuinely dynamic (not a literal) or a static
- * literal that fails the metachar guard above. Named `reason` so both
- * refusal paths funnel through the same message shape rather than growing
- * two near-identical adapter-side error strings.
+ * can't lower. Two distinct failure families funnel through here, so the base
+ * message is chosen by whether a `reason` is supplied:
+ *
+ * - WITHOUT a `reason` — the value is not the required SHAPE: it must be an
+ *   object literal with exactly one `__html` property (no spreads, extra keys,
+ *   or computed keys). The message states that contract so a near-miss like
+ *   `{ __html: x, extra: 1 }` (refused as `unlowerable`) doesn't get told it
+ *   "expects an { __html: … }" it already appears to have.
+ * - WITH a `reason` — the value IS a well-formed `{ __html: … }` object
+ *   literal that this adapter still can't lower: a static literal carrying
+ *   template metacharacters (`dangerousInnerHtmlMetacharViolation`), or — on
+ *   the Go adapter — a template-literal / conditional inner expression with no
+ *   single-argument raw form. The `reason` is the real story; the base states
+ *   only that the value can't be lowered here, not that the shape is wrong.
+ *
+ * A genuinely dynamic value with a lowerable inner expression no longer
+ * reaches here — it is lowered through the adapter's raw-output sink (#2319).
  */
 export declare function dangerousInnerHtmlDiagnostic(expr: string, loc: SourceLocation, reason?: string): CompilerError;
 //# sourceMappingURL=dangerous-inner-html.d.ts.map

package/dist/adapters/dangerous-inner-html.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dangerous-inner-html.d.ts","sourceRoot":"","sources":["../../src/adapters/dangerous-inner-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAKxF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEnE;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAAA;AAE1D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,GAAG,4BAA4B,GAAG,IAAI,CAWjG;AAwED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlG;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,cAAc,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAYf"}
+{"version":3,"file":"dangerous-inner-html.d.ts","sourceRoot":"","sources":["../../src/adapters/dangerous-inner-html.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACxF,OAAO,EAAwC,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAI/F,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAEnE;AAED,MAAM,MAAM,4BAA4B,GAIpC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAahC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,GAKpF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAAA;AAE9D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,GAAG,4BAA4B,GAAG,IAAI,CAyBjG;AAmED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mCAAmC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlG;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,cAAc,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAcf"}

package/dist/analyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAA;AAK3B,OAAO,EACL,KAAK,eAAe,EAUrB,MAAM,uBAAuB,CAAA;AAqB9B;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAU/D;AA8BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf;IAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;IAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAA;CAAE,GAAG,IAAI,CA8CpF;AAMD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,mBAAmB,CAAC,EAAE,MAAM,EAC5B,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,GACnB,eAAe,CAwJjB;AAugBD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAavE;AAm4CD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CA6BpE;AA2LD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAuCzE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,CAelE;AAgrCD,eAAO,MAAM,wBAAwB,aAOnC,CAAA;AAkBF;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CA0DV;AAcD,eAAO,MAAM,mBAAmB,aAG9B,CAAA;AA4yCF;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CA4EvE;AAiID,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA"}
+{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../src/analyzer.ts"],"names":[],"mappings":"AACA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,YAAY,CAAA;AAK3B,OAAO,EACL,KAAK,eAAe,EAUrB,MAAM,uBAAuB,CAAA;AAqB9B;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAU/D;AA8BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf;IAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;IAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC;IAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAA;CAAE,GAAG,IAAI,CA8CpF;AAMD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,mBAAmB,CAAC,EAAE,MAAM,EAC5B,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,GACnB,eAAe,CAwJjB;AAugBD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAavE;AAm4CD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CA6BpE;AA2LD;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAuCzE;AAuDD;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,OAAO,CAelE;AAgrCD,eAAO,MAAM,wBAAwB,aAOnC,CAAA;AAkBF;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,EAAE,CA0DV;AAcD,eAAO,MAAM,mBAAmB,aAG9B,CAAA;AA25CF;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CA4EvE;AAiID,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA"}