@constela/start 1.0.0 → 1.1.0

package/dist/index.js

@@ -460,6 +460,38 @@ function isCustomComponent(name) {
   if (!name) return false;
   return /^[A-Z]/.test(name);
 }
+var DISALLOWED_PATTERNS = [
+  /\bfunction\b/i,
+  /\b(eval|Function|setTimeout|setInterval)\b/,
+  /\bimport\b/,
+  /\brequire\b/,
+  /\bfetch\b/,
+  /\bwindow\b/,
+  /\bdocument\b/,
+  /\bglobal\b/,
+  /\bprocess\b/,
+  /\b__proto__\b/,
+  /\bconstructor\b/,
+  /\bprototype\b/
+];
+function isSafeLiteral(value) {
+  return !DISALLOWED_PATTERNS.some((pattern) => pattern.test(value));
+}
+function safeEvalLiteral(value) {
+  try {
+    return JSON.parse(value);
+  } catch {
+  }
+  if (!isSafeLiteral(value)) {
+    return null;
+  }
+  try {
+    const fn = new Function(`return (${value});`);
+    return fn();
+  } catch {
+    return null;
+  }
+}
 function parseAttributeValue(attr) {
   if (attr.value === null) {
     return lit(true);
@@ -474,6 +506,12 @@ function parseAttributeValue(attr) {
     if (exprValue === "null") return lit(null);
     const num = Number(exprValue);
     if (!Number.isNaN(num)) return lit(num);
+    if (exprValue.startsWith("[") || exprValue.startsWith("{")) {
+      const parsed = safeEvalLiteral(exprValue);
+      if (parsed !== null && parsed !== void 0) {
+        return lit(parsed);
+      }
+    }
     return lit(exprValue);
   }
   return lit(null);
@@ -610,36 +648,130 @@ function transformJsxElement(node, ctx) {
   const children = transformChildren(node.children, ctx);
   return elementNode(name, props, children);
 }
+function substituteExpression(expr, props) {
+  const exprAny = expr;
+  if (exprAny.expr === "param") {
+    const paramExpr = expr;
+    const propValue = props[paramExpr.name];
+    if (!propValue) {
+      return { expr: "lit", value: null };
+    }
+    if (paramExpr.path && propValue.expr === "var") {
+      const varExpr = propValue;
+      return {
+        expr: "var",
+        name: varExpr.name,
+        path: paramExpr.path
+      };
+    }
+    return propValue;
+  }
+  if (expr.expr === "bin") {
+    const binExpr = expr;
+    return {
+      expr: "bin",
+      op: binExpr.op,
+      left: substituteExpression(binExpr.left, props),
+      right: substituteExpression(binExpr.right, props)
+    };
+  }
+  if (expr.expr === "not") {
+    const notExpr = expr;
+    return {
+      expr: "not",
+      operand: substituteExpression(notExpr.operand, props)
+    };
+  }
+  if (expr.expr === "cond") {
+    const condExpr = expr;
+    return {
+      expr: "cond",
+      if: substituteExpression(condExpr.if, props),
+      then: substituteExpression(condExpr.then, props),
+      else: substituteExpression(condExpr.else, props)
+    };
+  }
+  if (expr.expr === "get") {
+    const getExpr = expr;
+    return {
+      expr: "get",
+      base: substituteExpression(getExpr.base, props),
+      path: getExpr.path
+    };
+  }
+  return expr;
+}
 function applyComponentView(view, props, children) {
   return substituteInNode(view, props, children);
 }
 function substituteInNode(node, props, children) {
-  if (node.kind === "element") {
-    const elem = node;
-    const newProps = elem.props ? { ...elem.props } : {};
-    for (const [key, value] of Object.entries(props)) {
-      if (!(key in newProps)) {
-        newProps[key] = value;
+  switch (node.kind) {
+    case "each": {
+      const eachNode = node;
+      const result = {
+        kind: "each",
+        items: substituteExpression(eachNode.items, props),
+        as: eachNode.as,
+        body: substituteInNode(eachNode.body, props, children)
+      };
+      if (eachNode.index) {
+        result.index = eachNode.index;
+      }
+      if (eachNode.key) {
+        result.key = substituteExpression(eachNode.key, props);
       }
+      return result;
     }
-    let newChildren;
-    if (elem.children) {
-      newChildren = [];
-      for (const child of elem.children) {
-        if (child.kind === "slot") {
-          newChildren.push(...children);
-        } else {
-          newChildren.push(substituteInNode(child, props, children));
+    case "text": {
+      const textNode2 = node;
+      return {
+        kind: "text",
+        value: substituteExpression(textNode2.value, props)
+      };
+    }
+    case "if": {
+      const ifNode = node;
+      const result = {
+        kind: "if",
+        condition: substituteExpression(ifNode.condition, props),
+        then: substituteInNode(ifNode.then, props, children)
+      };
+      if (ifNode.else) {
+        result.else = substituteInNode(ifNode.else, props, children);
+      }
+      return result;
+    }
+    case "element": {
+      const elem = node;
+      const newProps = {};
+      if (elem.props) {
+        for (const [key, value] of Object.entries(elem.props)) {
+          newProps[key] = substituteExpression(value, props);
         }
       }
+      let newChildren;
+      if (elem.children) {
+        newChildren = [];
+        for (const child of elem.children) {
+          if (child.kind === "slot") {
+            newChildren.push(...children);
+          } else {
+            newChildren.push(substituteInNode(child, props, children));
+          }
+        }
+      }
+      return elementNode(
+        elem.tag,
+        Object.keys(newProps).length > 0 ? newProps : void 0,
+        newChildren && newChildren.length > 0 ? newChildren : void 0
+      );
     }
-    return elementNode(
-      elem.tag,
-      Object.keys(newProps).length > 0 ? newProps : void 0,
-      newChildren && newChildren.length > 0 ? newChildren : void 0
-    );
+    case "markdown":
+    case "code":
+      return node;
+    default:
+      return node;
   }
-  return node;
 }
 function transformChildren(children, ctx) {
   const result = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constela/start",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Meta-framework for Constela applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -39,11 +39,11 @@
     "remark-parse": "^11.0.0",
     "unified": "^11.0.0",
     "vite": "^6.0.0",
-    "@constela/compiler": "0.6.1",
-    "@constela/core": "0.7.0",
-    "@constela/router": "6.0.0",
-    "@constela/server": "2.0.0",
-    "@constela/runtime": "0.9.1"
+    "@constela/compiler": "0.7.0",
+    "@constela/server": "3.0.0",
+    "@constela/runtime": "0.9.2",
+    "@constela/router": "7.0.0",
+    "@constela/core": "0.7.0"
   },
   "devDependencies": {
     "@types/mdast": "^4.0.4",