@barocss/kit 0.8.0 → 0.8.1

package/dist/index.d.ts

@@ -576,6 +576,13 @@ export declare type AstNode = {
    /** #248: a comment opener or closer anywhere in a variant (quoted or not) could leave a comment unclosed in the output. */
    export declare function hasCommentToken(value: string): boolean;
 
+   /**
+    * #323: true when emitted text contains a markup end-tag opener (less-than then slash). Generated CSS can be
+    * placed inside an HTML style element, where that sequence could end the element early. CSS escapes in the
+    * output never form it, and a lone less-than (range media queries) stays allowed.
+    */
+   export declare function hasHtmlEndTagOpener(text: string): boolean;
+
    export declare type HasItems = {
        items?: AstNode[];
    };

package/dist/index.js

@@ -657,6 +657,9 @@ function hasCommentDelimiter(text) {
   }
   return false;
 }
+function hasHtmlEndTagOpener(text) {
+  return text.includes("</");
+}
 function isStructureSafeValue(value) {
   if (hasCommentToken(value)) return false;
   return isSafeVariantValue(value, true);
@@ -804,8 +807,11 @@ function parseUtility(value, ctx) {
     priority
   };
 }
-const isSafePrelude = (text) => !hasCommentDelimiter(String(text ?? ""));
-const isSafeDecl = (prop, value) => isStructureSafeValue(String(prop)) && isStructureSafeValue(String(value ?? ""));
+const isSafePrelude = (text) => {
+  const t = String(text ?? "");
+  return !hasCommentDelimiter(t) && !hasHtmlEndTagOpener(t);
+};
+const isSafeDecl = (prop, value) => isStructureSafeValue(String(prop)) && isStructureSafeValue(String(value ?? "")) && !hasHtmlEndTagOpener(String(prop)) && !hasHtmlEndTagOpener(String(value ?? ""));
 const importantPrefix = "!important";
 function astToCss(ast, baseSelector, opts, _indent = "") {
   const minify = opts?.minify;
@@ -1109,7 +1115,7 @@ function animationToCssVars(animations) {
   }
   return result;
 }
-const COMMENT_OR_BLOCK = /\/\*|\*\/|[{};]/;
+const COMMENT_OR_BLOCK = /\/\*|\*\/|[{};]|<\//;
 function keyframesBlock(name, frames) {
   if (!name || COMMENT_OR_BLOCK.test(name) || /\s/.test(name) || !frames || typeof frames !== "object") return "";
   let body = "";
@@ -1227,8 +1233,15 @@ function isSelfReferencingVar(name, value) {
   const m = /^var\(\s*(--[\w-]+)\s*(?:,[\s\S]*)?\)$/.exec(value.trim());
   return !!m && m[1] === name.trim();
 }
+const SAFE_VAR_NAME = /^--(?:[\w-]|\\\.)+$/;
+function isSafeThemeVar(name, value) {
+  if (typeof name !== "string" || !SAFE_VAR_NAME.test(name) || hasHtmlEndTagOpener(name)) return false;
+  if (typeof value !== "string" && typeof value !== "number") return false;
+  const v2 = String(value);
+  return v2.trim() !== "" && isStructureSafeValue(v2) && !hasCommentDelimiter(v2) && !hasHtmlEndTagOpener(v2);
+}
 function toCssVarsBlock(vars, extra = "") {
-  return ":root,:host {\n" + Object.entries(vars).filter(([k, v2]) => !isSelfReferencingVar(k, v2)).map(([k, v2]) => `  ${k}: ${v2};`).join("\n") + "\n}\n" + extra + "\n";
+  return ":root,:host {\n" + Object.entries(vars).filter(([k, v2]) => isSafeThemeVar(k, v2) && !isSelfReferencingVar(k, v2)).map(([k, v2]) => `  ${k}: ${v2};`).join("\n") + "\n}\n" + extra + "\n";
 }
 const BARO_VAR = /--baro-/g;
 const PREFIXED_KEYS = /* @__PURE__ */ new Set(["prop", "value", "params", "selector", "nodes", "items"]);
@@ -8638,6 +8651,7 @@ export {
   getUtility,
   hasCommentDelimiter,
   hasCommentToken,
+  hasHtmlEndTagOpener,
   hasPreset,
   isDebug,
   isSafeVariantToken,