@velarscript/web 0.30.1 → 0.32.0

package/dist/analysis/reactivity/retired-accessors.js

@@ -0,0 +1,118 @@
+/**
+ * The retired 'computed(...)' accessor: the intrinsic a call around it is still
+ * typed by, and the shape of one declaration held for the migration message.
+ *
+ * D115 P4 R3a: a frozen table and a record shape, read by the analyzer and by
+ * the intrinsic that types the call, so they read as a module.
+ *
+ * D115 P4 R3c: the migration pass itself joins them — what one declaration
+ * records, what one read records, and the one message per site the whole-program
+ * report writes — over a `RetiredAccessorHost`.
+ */
+import {} from "@velarscript/compiler";
+import { spanIdentity, unknownType } from "@velarscript/compiler/extension";
+import { isRetiredAccessorName } from "../reactive-names.js";
+import { diagnostic } from "../web-types.js";
+export const RETIRED_ACCESSOR_INTRINSIC = "reactive.retired-accessor";
+const retiredAccessorReaderType = Object.freeze({ kind: "function", parameters: [], requiredParameters: 0, result: unknownType });
+export const RETIRED_ACCESSOR_TYPE = Object.freeze({
+    kind: "intrinsic",
+    name: RETIRED_ACCESSOR_INTRINSIC,
+    parameterNames: ["read"],
+    parameters: [retiredAccessorReaderType],
+    requiredParameters: 1,
+    result: retiredAccessorReaderType,
+});
+/**
+ * D71 rule 183: `computed(...)` the function — the shape Vue and the signals
+ * libraries teach — is not how a derived value is written here; the `computed`
+ * declaration is. The declaration is recorded before the core walks the module
+ * so its reads can be matched against it — the rewrite that removes the call
+ * parentheses is only offered when every read is a plain `x()`.
+ */
+export function recordRetiredAccessorDeclaration(host, statement) {
+    const initializer = statement.initializer;
+    if (initializer.kind !== "CallExpression" || initializer.callee.kind !== "IdentifierExpression"
+        || !isRetiredAccessorName(initializer.callee.name) || host.lookup(initializer.callee.name) !== null)
+        return;
+    if (statement.binding !== "const" || statement.pattern.kind !== "NameBindingPattern")
+        return;
+    const read = initializer.arguments.length === 1 && initializer.argumentNames === undefined
+        ? initializer.arguments[0] : null;
+    // Only the `() => E` shape has a body that becomes the declaration's
+    // initializer verbatim. Every other argument — a named function, a partial
+    // application — would need the rewriter to invent an expression, so it is
+    // left to the author with the call spelled out as its only mechanical answer.
+    const body = read?.kind === "ArrowFunctionExpression" && !read.asynchronous && read.parameters.length === 0
+        ? read.body : null;
+    host.retiredAccessorDeclarations.set(spanIdentity(statement.pattern.span), {
+        name: statement.pattern.name,
+        exported: statement.exported,
+        readName: read?.kind === "IdentifierExpression" ? read.name : null,
+        declarationSpan: statement.span,
+        callSpan: initializer.span,
+        bodySpan: body ? body.span : null,
+    });
+    host.migratedComputedCallees.add(spanIdentity(initializer.callee.span));
+}
+/** Returns true when the name is one of the retired accessor globals this pass owns. */
+export function recordRetiredAccessorRead(host, expression) {
+    if (isRetiredAccessorName(expression.name)) {
+        if (host.lookup(expression.name) !== null)
+            return false;
+        if (!host.migratedComputedCallees.has(spanIdentity(expression.span))) {
+            host.retiredComputedReferences.set(spanIdentity(expression.span), { name: expression.name, span: expression.span });
+        }
+        return true;
+    }
+    const binding = host.lookup(expression.name);
+    if (!binding)
+        return false;
+    const key = spanIdentity(binding.span);
+    if (!host.retiredAccessorDeclarations.has(key))
+        return false;
+    const reads = host.retiredAccessorReads.get(key);
+    if (reads)
+        reads.push(expression.span);
+    else
+        host.retiredAccessorReads.set(key, [expression.span]);
+    return false;
+}
+/**
+ * D71 migration: one message per site, and a mechanical rewrite only where
+ * the compile can prove the rewrite. Where the
+ * accessor is used as a value there is no second spelling left to offer, so
+ * that site is told to declare the value and write an ordinary `def` where a
+ * callable is what the caller wants — and it gets no edit, because moving a
+ * reader out of a value position is the author's decision.
+ */
+export function reportRetiredComputedFunction(host) {
+    for (const [key, accessor] of host.retiredAccessorDeclarations) {
+        const reads = host.retiredAccessorReads.get(key) ?? [];
+        const calls = reads.map((span) => host.plainCallSpans.get(spanIdentity(span)) ?? null);
+        const rewritable = accessor.bodySpan !== null && calls.every((call) => call !== null);
+        const edits = rewritable
+            ? [
+                { span: { start: accessor.declarationSpan.start, end: accessor.bodySpan.start }, text: `${accessor.exported ? "export " : ""}computed ${accessor.name} = ` },
+                { span: { start: accessor.bodySpan.end, end: accessor.callSpan.end }, text: "" },
+                ...reads.map((span, index) => ({ span: { start: span.end, end: calls[index].end }, text: "" })),
+            ]
+            : null;
+        const alternative = accessor.bodySpan === null
+            ? ` Where the argument is a function rather than an expression, write the call — 'computed ${accessor.name} = ${accessor.readName ?? "read"}()'`
+            : ` Where the reader itself is passed on rather than read here, declare the value — 'computed ${accessor.name} = ...' — and write an ordinary 'def' where a callable is required`;
+        host.diagnostics.push({
+            code: "VEL5055",
+            message: `A derived value is declared, not called: write 'computed ${accessor.name} = ...' and read '${accessor.name}' bare.${rewritable ? "" : alternative}`,
+            span: accessor.declarationSpan,
+            ...(edits ? { fix: { title: `Declare '${accessor.name}' with computed`, edits } } : {}),
+        });
+    }
+    // There is no `fix`: the rewrite is a declaration, not a rename, and the
+    // declaration form is offered above where the compile can see the whole
+    // shape.
+    for (const reference of host.retiredComputedReferences.values()) {
+        host.diagnostics.push(diagnostic("VEL5055", "'computed' declares a derived value — 'computed name = expression'. There is no function form, and 'computed' already caches", reference.span));
+    }
+}
+//# sourceMappingURL=retired-accessors.js.map

package/dist/analysis/reactivity/retired-accessors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retired-accessors.js","sourceRoot":"","sources":["../../../src/analysis/reactivity/retired-accessors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAA8B,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAmD,MAAM,iCAAiC,CAAC;AAC7H,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA+B7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC;AACtE,MAAM,yBAAyB,GAAc,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AAC7I,MAAM,CAAC,MAAM,qBAAqB,GAAc,MAAM,CAAC,MAAM,CAAC;IAC5D,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,0BAA0B;IAChC,cAAc,EAAE,CAAC,MAAM,CAAC;IACxB,UAAU,EAAE,CAAC,yBAAyB,CAAC;IACvC,kBAAkB,EAAE,CAAC;IACrB,MAAM,EAAE,yBAAyB;CAClC,CAAC,CAAC;AAaH;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,IAAyB,EACzB,SAAuE;IAEvE,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;IAC1C,IAAI,WAAW,CAAC,IAAI,KAAK,gBAAgB,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,sBAAsB;WAC1F,CAAC,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO;IAC9G,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO;IAC7F,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS;QACxF,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,KAAK,yBAAyB,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QACzG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACrB,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACzE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI;QAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAClE,eAAe,EAAE,SAAS,CAAC,IAAI;QAC/B,QAAQ,EAAE,WAAW,CAAC,IAAI;QAC1B,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,yBAAyB,CACvC,IAAyB,EACzB,UAA0E;IAE1E,IAAI,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACtH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;;QAClC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAyB;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC;gBACA,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,QAAQ,CAAC,IAAI,KAAK,EAAE;gBAC7J,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;gBACjF,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAE,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;aACjG;YACD,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC5C,CAAC,CAAC,2FAA2F,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,QAAQ,IAAI,MAAM,KAAK;YAChJ,CAAC,CAAC,8FAA8F,QAAQ,CAAC,IAAI,oEAAoE,CAAC;QACpL,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACpB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,4DAA4D,QAAQ,CAAC,IAAI,qBAAqB,QAAQ,CAAC,IAAI,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YAC7J,IAAI,EAAE,QAAQ,CAAC,eAAe;YAC9B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,QAAQ,CAAC,IAAI,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IACD,yEAAyE;IACzE,wEAAwE;IACxE,SAAS;IACT,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAC9B,SAAS,EACT,8HAA8H,EAC9H,SAAS,CAAC,IAAI,CACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/analysis/renderable.d.ts

@@ -0,0 +1,47 @@
+/**
+ * What a type may stand for in a JSX position: the six questions asked of a
+ * `ValueType` and of nothing else — whether it is a Look, a class list, a
+ * renderable child, exactly one text node, an attribute value, or an optional
+ * string.
+ *
+ * D115 P4 R3c. These are pure readings of a type, so the only thing they ask of
+ * the analyzer is alias expansion, which arrives as a one-member host rather
+ * than as a whole face. The two that answer over the written type — `isLookInput`
+ * and `isClassInput` — read no aliases at all and take no host.
+ */
+import { type ValueType } from "@velarscript/compiler/extension";
+/** The whole of what the four alias-reading predicates ask of the analyzer. */
+export interface RenderableHost {
+    expandAliases(type: ValueType): ValueType;
+}
+export declare function isLookInput(type: ValueType): boolean;
+export declare function isClassInput(type: ValueType): boolean;
+export declare function isJsxRenderable(host: RenderableHost, type: ValueType): boolean;
+/**
+ * F1's qualifying rule, and the whole of it: the types whose rendering is
+ * *exactly* one text node.
+ *
+ * `string` and `number` are the two. `__velarAppend` answers a string with one
+ * text node carrying it — the empty string included, which is why `""` is not
+ * a special case — and a number with one text node carrying `String(value)`,
+ * or refuses a non-finite number. An enum member is text at runtime and is
+ * assignable to `string`, so it rides the same branch it always did.
+ *
+ * Everything else stays on the full dynamic region, and the reason is always
+ * the same one: it does not render as *one* node.
+ * - `bool` renders **zero** nodes (`__velarAppend` returns on `true`/`false`),
+ *   so a text node would be an added child where an element previously had
+ *   none — observable to `:empty`, to `childNodes`, and to anything that
+ *   walks them.
+ * - An optional of either renders zero nodes when null and one when present,
+ *   so it needs an anchor to come back to.
+ * - `WebNode`, lists, unions, `any` and every named type can hold markup or
+ *   several nodes, which is what the comment pair exists to bracket.
+ *
+ * Widening this set is a semantic ruling, not an optimisation: it would
+ * change the node count of a rendered document.
+ */
+export declare function isScalarTextType(host: RenderableHost, type: ValueType): boolean;
+export declare function isJsxAttributeValue(host: RenderableHost, type: ValueType): boolean;
+export declare function isOptionalString(host: RenderableHost, type: ValueType): boolean;
+//# sourceMappingURL=renderable.d.ts.map

package/dist/analysis/renderable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderable.d.ts","sourceRoot":"","sources":["../../src/analysis/renderable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAIjE,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;CAC3C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAOpD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAMrD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAS9E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAG/E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAQlF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAM/E"}

package/dist/analysis/renderable.js

@@ -0,0 +1,105 @@
+/**
+ * What a type may stand for in a JSX position: the six questions asked of a
+ * `ValueType` and of nothing else — whether it is a Look, a class list, a
+ * renderable child, exactly one text node, an attribute value, or an optional
+ * string.
+ *
+ * D115 P4 R3c. These are pure readings of a type, so the only thing they ask of
+ * the analyzer is alias expansion, which arrives as a one-member host rather
+ * than as a whole face. The two that answer over the written type — `isLookInput`
+ * and `isClassInput` — read no aliases at all and take no host.
+ */
+import {} from "@velarscript/compiler/extension";
+import { isWebNodeType } from "../types.js";
+import { textualWebPrimitiveNames } from "./web-types.js";
+export function isLookInput(type) {
+    if (type.kind === "any" || type.kind === "null")
+        return true;
+    if (type.kind === "named")
+        return type.name === "Look";
+    if (type.kind === "optional")
+        return isLookInput(type.inner);
+    if (type.kind === "list")
+        return isLookInput(type.element);
+    if (type.kind === "union")
+        return type.members.every((member) => isLookInput(member));
+    return false;
+}
+export function isClassInput(type) {
+    if (type.kind === "any" || type.kind === "null" || type.kind === "string")
+        return true;
+    if (type.kind === "optional")
+        return isClassInput(type.inner);
+    if (type.kind === "list")
+        return isClassInput(type.element);
+    if (type.kind === "union")
+        return type.members.every((member) => isClassInput(member));
+    return false;
+}
+export function isJsxRenderable(host, type) {
+    const expanded = host.expandAliases(type);
+    if (expanded.kind === "any" || expanded.kind === "null" || expanded.kind === "string" || expanded.kind === "number"
+        || expanded.kind === "bool" || expanded.kind === "enum" || expanded.kind === "enumMember" || isWebNodeType(expanded))
+        return true;
+    if (expanded.kind === "named")
+        return textualWebPrimitiveNames.has(expanded.name);
+    if (expanded.kind === "optional")
+        return isJsxRenderable(host, expanded.inner);
+    if (expanded.kind === "list")
+        return isJsxRenderable(host, expanded.element);
+    if (expanded.kind === "union")
+        return expanded.members.every((member) => isJsxRenderable(host, member));
+    return false;
+}
+/**
+ * F1's qualifying rule, and the whole of it: the types whose rendering is
+ * *exactly* one text node.
+ *
+ * `string` and `number` are the two. `__velarAppend` answers a string with one
+ * text node carrying it — the empty string included, which is why `""` is not
+ * a special case — and a number with one text node carrying `String(value)`,
+ * or refuses a non-finite number. An enum member is text at runtime and is
+ * assignable to `string`, so it rides the same branch it always did.
+ *
+ * Everything else stays on the full dynamic region, and the reason is always
+ * the same one: it does not render as *one* node.
+ * - `bool` renders **zero** nodes (`__velarAppend` returns on `true`/`false`),
+ *   so a text node would be an added child where an element previously had
+ *   none — observable to `:empty`, to `childNodes`, and to anything that
+ *   walks them.
+ * - An optional of either renders zero nodes when null and one when present,
+ *   so it needs an anchor to come back to.
+ * - `WebNode`, lists, unions, `any` and every named type can hold markup or
+ *   several nodes, which is what the comment pair exists to bracket.
+ *
+ * Widening this set is a semantic ruling, not an optimisation: it would
+ * change the node count of a rendered document.
+ */
+export function isScalarTextType(host, type) {
+    const expanded = host.expandAliases(type);
+    return expanded.kind === "string" || expanded.kind === "number";
+}
+export function isJsxAttributeValue(host, type) {
+    const expanded = host.expandAliases(type);
+    if (expanded.kind === "any" || expanded.kind === "null" || expanded.kind === "string" || expanded.kind === "number"
+        || expanded.kind === "bool" || expanded.kind === "enum" || expanded.kind === "enumMember")
+        return true;
+    if (expanded.kind === "named")
+        return textualWebPrimitiveNames.has(expanded.name);
+    if (expanded.kind === "optional")
+        return isJsxAttributeValue(host, expanded.inner);
+    if (expanded.kind === "union")
+        return expanded.members.every((member) => isJsxAttributeValue(host, member));
+    return false;
+}
+export function isOptionalString(host, type) {
+    const expanded = host.expandAliases(type);
+    if (expanded.kind === "string" || expanded.kind === "null")
+        return true;
+    if (expanded.kind === "optional")
+        return isOptionalString(host, expanded.inner);
+    if (expanded.kind === "union")
+        return expanded.members.every((member) => isOptionalString(host, member));
+    return false;
+}
+//# sourceMappingURL=renderable.js.map

package/dist/analysis/renderable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderable.js","sourceRoot":"","sources":["../../src/analysis/renderable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAkB,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAO1D,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvF,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAoB,EAAE,IAAe;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;WAC9G,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,aAAa,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpI,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,IAAe;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB,EAAE,IAAe;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;WAC9G,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACzG,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,IAAe;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/analysis/routes.d.ts

@@ -0,0 +1,64 @@
+/**
+ * What a route accepts: the component a 'route(path, Component)' may name, the
+ * path spellings a router can match, and the two accessibility readings a route
+ * component's markup is asked for.
+ *
+ * D115 P4 R3a: 'web.route' asks these of an intrinsic context and the analyzer
+ * asks them of a record of routes, so they read as a module both can call.
+ *
+ * D115 P4 R3c: the analyzer's own two — the `<Router routes={...}>` list and the
+ * component slot inside it — join them here, so the two callers differ only in
+ * the environment they arrive with.
+ */
+import { type Diagnostic, type Span } from "@velarscript/compiler";
+import { type CompilerIntrinsicAnalysisContext, type Expression, type ValueType } from "@velarscript/compiler/extension";
+import { type WebJsxElementExpression as JSXElementExpression } from "../ast.ts";
+/**
+ * What the analyzer's two route readings ask of the analyzer that hosts them.
+ * The intrinsic twins take a `CompilerIntrinsicAnalysisContext` instead: they
+ * are called from inside an intrinsic, where that context is what the caller
+ * already holds.
+ */
+export interface WebRouteHost {
+    readonly diagnostics: Diagnostic[];
+    inferExpression(expression: Expression, contextualType?: ValueType): ValueType;
+    /**
+     * Assignability judged against the analyzer as the type environment. Asking
+     * for the answer rather than for the environment keeps `TypeEnvironment` out
+     * of this face.
+     */
+    isAssignableHere(actual: ValueType, expected: ValueType): boolean;
+    typeError(message: string, errorSpan: Span): void;
+}
+export declare function checkRouteComponent(type: ValueType, sourceSpan: Span, subject: string, context: CompilerIntrinsicAnalysisContext): void;
+export declare function checkRoutePath(path: string, sourceSpan: Span, report: (message: string, span: Span) => void): void;
+/**
+ * The elements of a `<Router routes={...}>` list literal, one at a time.
+ *
+ * A route written as `route("/a", Panel)` is checked at that call; the record
+ * that call returns — `{path: "/a", component: Panel}` — is a legal spelling
+ * of the same value, reaches the same runtime position, and until now was
+ * checked by nothing: `{path: "no-leading-slash", component: 5}` compiled
+ * clean and handed `5` to the Router as a component. Closing the sink rather
+ * than the spelling means asking the same questions wherever a route arrives,
+ * so this reports exactly what `route(...)` reports, word for word.
+ *
+ * The runtime is already the second referee (D90 R19): `routerTable`
+ * validates every path and refuses a component that is not callable. Nothing
+ * here changes which programs run — it moves a refusal the author would have
+ * met at mount to the place the source shows the mistake.
+ *
+ * The `any` component slot is skipped here rather than inside
+ * `checkWebRouteComponent`, which is why that function carries no `any` arm:
+ * this loop and the Router `fallback` attribute are its only two callers, and
+ * both filter first. An `any` reaches this slot for real — `web.lazy` answers
+ * `anyType` from each of its error paths — and it arrives with the author's
+ * real message already reported, so a second "received any" would be a
+ * cascade. The `route(...)` twin skips it for the same reason.
+ */
+export declare function checkWebRouteRecords(host: WebRouteHost, expression: Expression): void;
+export declare function checkWebRouteComponent(host: WebRouteHost, type: ValueType, sourceSpan: Span, subject: string): void;
+export declare function containsPromise(type: ValueType): boolean;
+export declare function hasAccessibleJsxContent(expression: JSXElementExpression): boolean;
+export declare function hasAccessibleSvgName(expression: JSXElementExpression): boolean;
+//# sourceMappingURL=routes.d.ts.map

package/dist/analysis/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/analysis/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAGL,KAAK,gCAAgC,EACrC,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,KAAK,uBAAuB,IAAI,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAIjF;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;IACnC,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/E;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC;IAClE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACnD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gCAAgC,GAAG,IAAI,CAUvI;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,IAAI,CAsBlH;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,IAAI,CA2BrF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAanH;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAQxD;AAGD,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAMjF;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,oBAAoB,GAAG,OAAO,CAY9E"}

package/dist/analysis/routes.js

@@ -0,0 +1,182 @@
+/**
+ * What a route accepts: the component a 'route(path, Component)' may name, the
+ * path spellings a router can match, and the two accessibility readings a route
+ * component's markup is asked for.
+ *
+ * D115 P4 R3a: 'web.route' asks these of an intrinsic context and the analyzer
+ * asks them of a record of routes, so they read as a module both can call.
+ *
+ * D115 P4 R3c: the analyzer's own two — the `<Router routes={...}>` list and the
+ * component slot inside it — join them here, so the two callers differ only in
+ * the environment they arrive with.
+ */
+import {} from "@velarscript/compiler";
+import { describeType, isInvalidType, } from "@velarscript/compiler/extension";
+import {} from "../ast.js";
+import { isWebComponentType } from "../types.js";
+import { routeContextIdentity } from "./web-types.js";
+export function checkRouteComponent(type, sourceSpan, subject, context) {
+    if (isInvalidType(type))
+        return;
+    if (!isWebComponentType(type)) {
+        if (type.kind !== "any")
+            context.typeError(`${subject} requires a component, received ${describeType(type)}`, sourceSpan);
+        return;
+    }
+    const unsupported = [...type.requiredProperties].filter((name) => name !== "route");
+    if (unsupported.length > 0)
+        context.typeError(`${subject} component cannot require props other than route: ${unsupported.join(", ")}`, sourceSpan);
+    const routeProp = type.properties.get("route");
+    if (routeProp && !context.isAssignable({ kind: "named", name: "RouteContext", identity: routeContextIdentity }, routeProp))
+        context.typeError(`${subject} component's route prop must accept RouteContext, received ${describeType(routeProp)}`, sourceSpan);
+}
+export function checkRoutePath(path, sourceSpan, report) {
+    if (!path.startsWith("/"))
+        report("A route path must start with '/'", sourceSpan);
+    if (path.includes("?") || path.includes("#"))
+        report("A route path describes only a pathname; read query and hash from RouteContext", sourceSpan);
+    if (path.includes("\\"))
+        report("A route path cannot contain a backslash", sourceSpan);
+    if (path.length > 1 && path.endsWith("/"))
+        report("A route path cannot end with '/'; matching already accepts one trailing slash", sourceSpan);
+    const segments = path.split("/").slice(1);
+    const parameters = new Set();
+    for (const [index, segment] of segments.entries()) {
+        if (segment.length === 0 && path !== "/")
+            report("A route path cannot contain an empty segment", sourceSpan);
+        if (segment === "*") {
+            if (index !== segments.length - 1)
+                report("A route wildcard must be the final segment", sourceSpan);
+            if (parameters.has("wildcard"))
+                report("A route parameter named 'wildcard' conflicts with the '*' capture", sourceSpan);
+            parameters.add("wildcard");
+            continue;
+        }
+        if (segment.includes("*"))
+            report("A route wildcard must occupy its whole final segment", sourceSpan);
+        if (!segment.startsWith(":"))
+            continue;
+        const name = segment.slice(1);
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/u.test(name))
+            report("A route parameter requires a valid name", sourceSpan);
+        else if (parameters.has(name))
+            report(`Route parameter '${name}' is repeated`, sourceSpan);
+        parameters.add(name);
+    }
+}
+/**
+ * The elements of a `<Router routes={...}>` list literal, one at a time.
+ *
+ * A route written as `route("/a", Panel)` is checked at that call; the record
+ * that call returns — `{path: "/a", component: Panel}` — is a legal spelling
+ * of the same value, reaches the same runtime position, and until now was
+ * checked by nothing: `{path: "no-leading-slash", component: 5}` compiled
+ * clean and handed `5` to the Router as a component. Closing the sink rather
+ * than the spelling means asking the same questions wherever a route arrives,
+ * so this reports exactly what `route(...)` reports, word for word.
+ *
+ * The runtime is already the second referee (D90 R19): `routerTable`
+ * validates every path and refuses a component that is not callable. Nothing
+ * here changes which programs run — it moves a refusal the author would have
+ * met at mount to the place the source shows the mistake.
+ *
+ * The `any` component slot is skipped here rather than inside
+ * `checkWebRouteComponent`, which is why that function carries no `any` arm:
+ * this loop and the Router `fallback` attribute are its only two callers, and
+ * both filter first. An `any` reaches this slot for real — `web.lazy` answers
+ * `anyType` from each of its error paths — and it arrives with the author's
+ * real message already reported, so a second "received any" would be a
+ * cascade. The `route(...)` twin skips it for the same reason.
+ */
+export function checkWebRouteRecords(host, expression) {
+    if (expression.kind !== "ListExpression")
+        return;
+    for (const element of expression.elements) {
+        if (element.kind !== "ObjectExpression")
+            continue;
+        for (const entry of element.properties) {
+            if (entry.kind !== "ObjectProperty")
+                continue;
+            if (entry.name === "path") {
+                const path = entry.value;
+                if (path.kind === "LiteralExpression" && typeof path.value === "string") {
+                    checkRoutePath(path.value, path.span, (message, span) => host.typeError(message, span));
+                }
+                continue;
+            }
+            if (entry.name !== "component")
+                continue;
+            // The attribute has already been inferred as a whole, so every
+            // sub-expression here has been reported once. This second pass exists
+            // only to read the component slot's type back; anything it says is a
+            // repeat of what the author already has, and is dropped. Advisories
+            // need no such cursor — `advise` is deduplicated by code and span
+            // precisely so a re-analysis cannot raise one twice.
+            const reported = host.diagnostics.length;
+            const type = host.inferExpression(entry.value);
+            host.diagnostics.splice(reported);
+            if (type.kind === "any")
+                continue;
+            checkWebRouteComponent(host, type, entry.value.span, "A route");
+        }
+    }
+}
+export function checkWebRouteComponent(host, type, sourceSpan, subject) {
+    if (isInvalidType(type))
+        return;
+    if (!isWebComponentType(type)) {
+        // No `any` arm, unlike the `route(...)` twin above: both callers — the
+        // Router `fallback` attribute and `checkWebRouteRecords` — already filter
+        // `any` out before they call here, so a branch for it could never run.
+        host.typeError(`${subject} requires a component, received ${describeType(type)}`, sourceSpan);
+        return;
+    }
+    const unsupported = [...type.requiredProperties].filter((name) => name !== "route");
+    if (unsupported.length > 0)
+        host.typeError(`${subject} component cannot require props other than route: ${unsupported.join(", ")}`, sourceSpan);
+    const routeProp = type.properties.get("route");
+    if (routeProp && !host.isAssignableHere({ kind: "named", name: "RouteContext", identity: routeContextIdentity }, routeProp))
+        host.typeError(`${subject} component's route prop must accept RouteContext, received ${describeType(routeProp)}`, sourceSpan);
+}
+export function containsPromise(type) {
+    if (type.kind === "promise")
+        return true;
+    if (type.kind === "optional")
+        return containsPromise(type.inner);
+    if (type.kind === "list" || type.kind === "set")
+        return containsPromise(type.element);
+    if (type.kind === "map")
+        return containsPromise(type.key) || containsPromise(type.value);
+    if (type.kind === "record")
+        return containsPromise(type.value);
+    if (type.kind === "union")
+        return type.members.some(containsPromise);
+    return false;
+}
+export function hasAccessibleJsxContent(expression) {
+    return expression.children.some((child) => {
+        if (child.kind === "JSXText")
+            return child.value.trim().length > 0;
+        if (child.kind === "JSXExpressionChild")
+            return true;
+        return hasAccessibleJsxContent(child) || child.tag.length > 0;
+    });
+}
+export function hasAccessibleSvgName(expression) {
+    const named = expression.attributes.some((attribute) => {
+        if (attribute.name !== "aria-label" && attribute.name !== "aria-labelledby")
+            return false;
+        if (attribute.value === null)
+            return false;
+        return typeof attribute.value !== "string" || attribute.value.trim().length > 0;
+    });
+    if (named)
+        return true;
+    const hidden = expression.attributes.find((attribute) => attribute.name === "aria-hidden");
+    if (hidden?.value === "true" || (hidden?.value && typeof hidden.value !== "string"
+        && hidden.value.kind === "LiteralExpression" && hidden.value.value === true))
+        return true;
+    return expression.children.some((child) => child.kind === "ExtensionExpression:web:jsx"
+        && child.tag === "title" && hasAccessibleJsxContent(child));
+}
+//# sourceMappingURL=routes.js.map

package/dist/analysis/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/analysis/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAA8B,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,YAAY,EACZ,aAAa,GAId,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAwD,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAoBtD,MAAM,UAAU,mBAAmB,CAAC,IAAe,EAAE,UAAgB,EAAE,OAAe,EAAE,OAAyC;IAC/H,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO;IAChC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,mCAAmC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC1H,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACpF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,qDAAqD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACnJ,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,SAAS,CAAC;QAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,8DAA8D,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;AAC/P,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,UAAgB,EAAE,MAA6C;IAC1G,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,+EAA+E,EAAE,UAAU,CAAC,CAAC;IAClJ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,yCAAyC,EAAE,UAAU,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,+EAA+E,EAAE,UAAU,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM,CAAC,8CAA8C,EAAE,UAAU,CAAC,CAAC;QAC7G,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,4CAA4C,EAAE,UAAU,CAAC,CAAC;YACpG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,mEAAmE,EAAE,UAAU,CAAC,CAAC;YACxH,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,sDAAsD,EAAE,UAAU,CAAC,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,yCAAyC,EAAE,UAAU,CAAC,CAAC;aACtG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,oBAAoB,IAAI,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3F,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkB,EAAE,UAAsB;IAC7E,IAAI,UAAU,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO;IACjD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB;YAAE,SAAS;QAClD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,SAAS;YAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxE,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1F,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YACzC,+DAA+D;YAC/D,sEAAsE;YACtE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,qDAAqD;YACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS;YAClC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAkB,EAAE,IAAe,EAAE,UAAgB,EAAE,OAAe;IAC3G,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO;IAChC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,uEAAuE;QACvE,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,mCAAmC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACpF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,qDAAqD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAChJ,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,SAAS,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,8DAA8D,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;AAC7P,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe;IAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,MAAM,UAAU,uBAAuB,CAAC,UAAgC;IACtE,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAgC;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACrD,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAC1F,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;IAC3F,IAAI,MAAM,EAAE,KAAK,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;WAC7E,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,6BAA6B;WAClF,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/analysis/url-attributes.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The URL-scheme rule: which attributes carry a URL, and what a written one is
+ * refused for.
+ *
+ * D115 P4 R3a: one question about one string — asked of a literal `href`, of a
+ * JSX attribute value, and of an interpolation's parts — so it is written once
+ * here rather than in the middle of the analyzer's JSX pass.
+ */
+export declare const WEB_URL_ATTRIBUTES: Set<string>;
+/** The clause naming why one literal URL is refused, or null when it is fine. */
+export declare function urlSchemeRefusal(value: string): string | null;
+//# sourceMappingURL=url-attributes.d.ts.map

package/dist/analysis/url-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-attributes.d.ts","sourceRoot":"","sources":["../../src/analysis/url-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,eAAO,MAAM,kBAAkB,aAAmG,CAAC;AAsBnI,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU7D"}

package/dist/analysis/url-attributes.js

@@ -0,0 +1,48 @@
+/**
+ * The URL-scheme rule: which attributes carry a URL, and what a written one is
+ * refused for.
+ *
+ * D115 P4 R3a: one question about one string — asked of a literal `href`, of a
+ * JSX attribute value, and of an interpolation's parts — so it is written once
+ * here rather than in the middle of the analyzer's JSX pass.
+ */
+// WEB-S2: the attributes whose value the browser resolves as a URL and then
+// navigates, fetches, or submits to. A `javascript:`/`vbscript:` string in one
+// of them is script the page runs, which is the boundary the charter reserves
+// for `unsafe:html` — so the scheme is checked wherever it is written down.
+export const WEB_URL_ATTRIBUTES = new Set(["href", "src", "action", "formaction", "poster", "data", "xlink:href", "ping", "cite"]);
+const WEB_SCRIPT_URL_SCHEMES = new Set(["javascript", "vbscript"]);
+// A `data:` URL is a document the browser builds from the string itself, so it
+// is inert only for the media types that cannot carry script. `image/svg+xml`
+// is deliberately absent: an SVG document runs script.
+const WEB_INERT_DATA_MEDIA_TYPES = new Set([
+    "image/png", "image/jpeg", "image/gif", "image/webp", "image/avif", "image/bmp", "image/x-icon",
+    "video/mp4", "video/webm", "video/ogg", "audio/mpeg", "audio/ogg", "audio/wav", "audio/webm",
+    "font/woff", "font/woff2", "font/ttf", "font/otf", "text/plain", "text/css",
+]);
+/**
+ * The scheme a browser reads out of a URL string. Leading and embedded ASCII
+ * whitespace and control characters are stripped first, because the URL parser
+ * strips them too — `java\tscript:alert(1)` is a `javascript:` URL.
+ */
+function urlAttributeScheme(value) {
+    const stripped = value.replace(/[\u0000-\u0020]/gu, "");
+    const match = /^([A-Za-z][A-Za-z0-9+.-]*):/u.exec(stripped);
+    return match ? { scheme: match[1].toLowerCase(), rest: stripped.slice(match[0].length) } : null;
+}
+/** The clause naming why one literal URL is refused, or null when it is fine. */
+export function urlSchemeRefusal(value) {
+    const parsed = urlAttributeScheme(value);
+    if (!parsed)
+        return null;
+    if (WEB_SCRIPT_URL_SCHEMES.has(parsed.scheme)) {
+        return `'${parsed.scheme}:' is script, not a location — write an 'on:click' handler for behavior, or a real URL for navigation`;
+    }
+    if (parsed.scheme !== "data")
+        return null;
+    const media = (/^([^,;]*)/u.exec(parsed.rest)?.[1] ?? "").toLowerCase();
+    if (WEB_INERT_DATA_MEDIA_TYPES.has(media))
+        return null;
+    return `a 'data:' URL is only accepted for a media type that cannot carry script${media ? `, and '${media}' can` : ""}; the inert types are ${[...WEB_INERT_DATA_MEDIA_TYPES].join(", ")}`;
+}
+//# sourceMappingURL=url-attributes.js.map

package/dist/analysis/url-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-attributes.js","sourceRoot":"","sources":["../../src/analysis/url-attributes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACnI,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;AACnE,+EAA+E;AAC/E,8EAA8E;AAC9E,uDAAuD;AACvD,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc;IAC/F,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY;IAC5F,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU;CAC5E,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnG,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,MAAM,CAAC,MAAM,uGAAuG,CAAC;IAClI,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxE,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,2EAA2E,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,GAAG,0BAA0B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7L,CAAC"}