@visulima/html 1.0.1 → 1.0.2

package/CHANGELOG.md

@@ -1,3 +1,5 @@
+## @visulima/html [1.0.2](https://github.com/visulima/visulima/compare/%40visulima%2Fhtml%401.0.1...%40visulima%2Fhtml%401.0.2) (2026-08-02)
+
 ## @visulima/html [1.0.1](https://github.com/visulima/visulima/compare/%40visulima%2Fhtml%401.0.0...%40visulima%2Fhtml%401.0.1) (2026-07-15)
 
 ## @visulima/html 1.0.0 (2026-07-03)

package/dist/css.d.ts

@@ -1,38 +1,38 @@
 import { Properties } from 'csstype';
 /**
-* The standard CSS properties type from `csstype`.
-*/
+ * The standard CSS properties type from `csstype`.
+ */
 type CSSProperties = Properties;
 /**
-* Flexible CSS properties type that allows autocomplete for property names
-* while accepting string, number, null, or undefined values.
-*/
-type FlexibleCSSProperties = { [K in keyof Properties]?: Properties[K] | string | number | null | undefined };
+ * Flexible CSS properties type that allows autocomplete for property names
+ * while accepting string, number, null, or undefined values.
+ */
+type FlexibleCSSProperties = { [K in keyof Properties]?: Properties[K] | string | number | null | undefined; };
 /**
-* Template tag function for CSS that returns a minified one-line CSS string.
-* Template strings are used as-is, but interpolated values are escaped by default.
-* Whitespace and newlines outside of quoted strings are collapsed into single spaces;
-* whitespace inside single-/double-quoted values (e.g. `content: "a   b"`) is preserved.
-* @param strings Template literal strings
-* @param values Template literal values (escaped by default)
-* @returns A minified one-line CSS string
-* @example
-* css`:where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }`
-* // Returns: ":where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }"
-*/
+ * Template tag function for CSS that returns a minified one-line CSS string.
+ * Template strings are used as-is, but interpolated values are escaped by default.
+ * Whitespace and newlines outside of quoted strings are collapsed into single spaces;
+ * whitespace inside single-/double-quoted values (e.g. `content: "a   b"`) is preserved.
+ * @param strings Template literal strings
+ * @param values Template literal values (escaped by default)
+ * @returns A minified one-line CSS string
+ * @example
+ * css`:where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }`
+ * // Returns: ":where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }"
+ */
 declare function css(strings: TemplateStringsArray, ...values: unknown[]): string;
 /**
-* Function overload for CSS with escaping control.
-* Supports both string and object inputs.
-* @param value The CSS string or object to process
-* @param shouldEscape If true, escapes CSS. If false, returns CSS as-is.
-* @returns The processed CSS string
-* @example
-* css(':where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }', true)
-* @example
-* css({ padding: "1px" }, true)
-* @example
-* css({ margin: 20, padding: 10 }, false)
-*/
+ * Function overload for CSS with escaping control.
+ * Supports both string and object inputs.
+ * @param value The CSS string or object to process
+ * @param shouldEscape If true, escapes CSS. If false, returns CSS as-is.
+ * @returns The processed CSS string
+ * @example
+ * css(':where(.UnderlineNav-actions ul) { animation: 1ms rgh-selector-observer; }', true)
+ * @example
+ * css({ padding: "1px" }, true)
+ * @example
+ * css({ margin: 20, padding: 10 }, false)
+ */
 declare function css(value: string | FlexibleCSSProperties | Properties, shouldEscape?: boolean): string;
 export { type CSSProperties, type FlexibleCSSProperties, css as default };

package/dist/css.js

@@ -1,2 +1,2 @@
-import{escapeCss as f}from"./packem_shared/escapeCss-BtzOEJZW.js";const l=new Map,u=t=>{const e=l.get(t);if(e!==void 0)return e;let r;if(t.startsWith("--"))r=t;else{const n=t.replaceAll(/([A-Z])/g,"-$1").toLowerCase();r=n.startsWith("ms-")?`-ms-${n.slice(3)}`:n}return l.set(t,r),r},g=t=>{const e=[];return Object.entries(t).forEach(([r,n])=>{n!=null&&e.push(`${u(r)}: ${String(n)};`)}),e.join(" ")},p=new Set([" ","	",`
-`,"\r","\f","\v"]),h=t=>{let e="",r,n=!1;for(let i=0;i<t.length;i+=1){const s=t[i];if(r!==void 0){e+=s,s==="\\"&&i+1<t.length?(i+=1,e+=t[i]):s===r&&(r=void 0);continue}if(s==='"'||s==="'")r=s,n=!1;else if(p.has(s)){if(n)continue;n=!0,e+=" ";continue}else n=!1;e+=s}return e.trim()};function m(t,...e){if(Array.isArray(t)&&"raw"in t){const s=t;let o=s[0]??"";for(const[c,a]of e.entries())o+=f(String(a??"")),o+=s[c+1]??"";return h(o)}const r=t,n=e[0],i=typeof r=="string"?r:g(r);return n===!0?f(i):i}export{m as default};
+import{escapeCss as f}from"./packem_shared/escapeCss-BtzOEJZW.js";const a=new Map,g=1e3,h=t=>{if(t.startsWith("--"))return t;const e=a.get(t);if(e!==void 0)return e;const n=t.replaceAll(/([A-Z])/g,"-$1").toLowerCase(),s=n.startsWith("ms-")?`-ms-${n.slice(3)}`:n;return a.size<g&&a.set(t,s),s},p=t=>{const e=[];return Object.entries(t).forEach(([n,s])=>{s!=null&&e.push(`${h(n)}: ${String(s)};`)}),e.join(" ")},l=new Set([" ","	",`
+`,"\r","\f","\v"]),d=t=>{let e,n=!1,s=!1,i="";for(let o=0;o<t.length;o+=1){const r=t[o];if(e!==void 0){r==="\\"&&o+1<t.length?(i+=r+t[o+1],o+=1):(r===e&&(e=void 0),i+=r);continue}if(n){r==="*"&&t[o+1]==="/"?(i+="*/",o+=1,n=!1,s=!1):l.has(r)?(s||(i+=" "),s=!0):(i+=r,s=!1);continue}r==="/"&&t[o+1]==="*"?(i+="/*",o+=1,n=!0,s=!1):r==='"'||r==="'"?(e=r,i+=r,s=!1):l.has(r)?(s||(i+=" "),s=!0):(i+=r,s=!1)}return i.trim()};function v(t,...e){if(Array.isArray(t)&&"raw"in t){const o=t;let r=o[0]??"";for(const[u,c]of e.entries())r+=f(String(c??"")),r+=o[u+1]??"";return d(r)}const n=t,s=e[0],i=typeof n=="string"?n:p(n);return s===!0?f(i):i}export{v as default};

package/dist/escape.d.ts

@@ -1,20 +1,20 @@
 export { escapeCss } from '@std/html/unstable-escape-css';
 export { escapeJs } from '@std/html/unstable-escape-js';
 /**
-* Escapes HTML special characters in a string.
-* Optimized for performance with minimal allocations.
-* @param value The value to escape. Will be converted to string.
-* @param isAttribute If true, also escapes double quotes (for HTML attributes).
-* @returns The escaped string.
-* @example
-* escapeHtml('<script>alert("xss")<\/script>');
-* // => '&lt;script>alert("xss")&lt;/script>'
-* @example
-* escapeHtml('<div>', true);
-* // => '&lt;div>'
-* @example
-* escapeHtml('value="test"', true);
-* // => 'value=&quot;test&quot;'
-*/
+ * Escapes HTML special characters in a string.
+ * Optimized for performance with minimal allocations.
+ * @param value The value to escape. Will be converted to string.
+ * @param isAttribute If true, also escapes double quotes (for HTML attributes).
+ * @returns The escaped string.
+ * @example
+ * escapeHtml('<script>alert("xss")<\/script>');
+ * // => '&lt;script>alert("xss")&lt;/script>'
+ * @example
+ * escapeHtml('<div>', true);
+ * // => '&lt;div>'
+ * @example
+ * escapeHtml('value="test"', true);
+ * // => 'value=&quot;test&quot;'
+ */
 declare const escapeHtml: (value: unknown, isAttribute?: boolean) => string;
 export { escapeHtml };

package/dist/html.d.ts

@@ -1,58 +1,59 @@
 /**
-* Branded wrapper produced by {@link html.raw}. Values wrapped in this marker are
-* interpolated into the `html` tagged template (or composed via arrays) verbatim,
-* without escaping. Use it only for HTML you already trust.
-*/
+ * Branded wrapper produced by {@link html.raw}. Values wrapped in this marker are
+ * interpolated into the `html` tagged template (or composed via arrays) verbatim,
+ * without escaping. Use it only for HTML you already trust.
+ */
+declare const RAW_BRAND: unique symbol;
 interface RawHtml {
   /** Internal brand used to detect trusted fragments. */
-  readonly __isRawHtml: true;
+  readonly [RAW_BRAND]: true;
   /** The trusted HTML payload. */
   readonly value: string;
 }
 /**
-* Type guard that detects a {@link RawHtml} marker (including nested fragments
-* produced by the `html` tag, which are themselves marked as raw).
-* @param value The value to test.
-* @returns `true` when the value is a trusted raw HTML fragment.
-*/
+ * Type guard that detects a {@link RawHtml} marker (including nested fragments
+ * produced by the `html` tag, which are themselves marked as raw).
+ * @param value The value to test.
+ * @returns `true` when the value is a trusted raw HTML fragment.
+ */
 declare const isRawHtml: (value: unknown) => value is RawHtml;
 /**
-* Template tag function for HTML that escapes interpolated values to prevent XSS.
-* Template strings are used as-is, but all interpolated values are HTML-escaped.
-*
-* Interpolated arrays are flattened and joined with an empty string (no commas), and
-* values wrapped with {@link html.raw} are inlined without escaping, enabling fragment
-* composition. Because the tag returns a plain string, nested fragments must be wrapped
-* with `html.raw` to avoid double-escaping.
-* @param strings Template literal strings
-* @param values Template literal values (escaped unless wrapped with {@link html.raw})
-* @returns The HTML string with interpolated values escaped
-* @example
-* html`<div>Hello</div>`
-* // => '<div>Hello</div>'
-* @example
-* html`<div>${'<script>alert("xss")<\/script>'}</div>`
-* // => '<div>&lt;script>alert("xss")&lt;/script></div>'
-* @example
-* html`<ul>${items.map((i) => html.raw(html`<li>${i}</li>`))}</ul>`
-* // => '<ul><li>a</li><li>b</li></ul>'
-*/
+ * Template tag function for HTML that escapes interpolated values to prevent XSS.
+ * Template strings are used as-is, but all interpolated values are HTML-escaped.
+ *
+ * Interpolated arrays are flattened and joined with an empty string (no commas), and
+ * values wrapped with {@link html.raw} are inlined without escaping, enabling fragment
+ * composition. Because the tag returns a plain string, nested fragments must be wrapped
+ * with `html.raw` to avoid double-escaping.
+ * @param strings Template literal strings
+ * @param values Template literal values (escaped unless wrapped with {@link html.raw})
+ * @returns The HTML string with interpolated values escaped
+ * @example
+ * html`<div>Hello</div>`
+ * // => '<div>Hello</div>'
+ * @example
+ * html`<div>${'<script>alert("xss")<\/script>'}</div>`
+ * // => '<div>&lt;script>alert("xss")&lt;/script></div>'
+ * @example
+ * html`<ul>${items.map((i) => html.raw(html`<li>${i}</li>`))}</ul>`
+ * // => '<ul><li>a</li><li>b</li></ul>'
+ */
 declare function html(strings: TemplateStringsArray, ...values: unknown[]): string;
 /**
-* Function overload for HTML with explicit escaping control.
-*
-* Escapes by default (attribute-safe), matching the template-tag form. Pass
-* `shouldEscape: false` to opt out and return the input verbatim — only do this
-* for HTML you already trust or have sanitized, since it disables XSS protection.
-* @param value The HTML string to process
-* @param shouldEscape When `true`/omitted, escapes HTML. When `false`, returns the input as-is (unsafe for untrusted input).
-* @returns The processed HTML string
-* @example
-* html('<script>alert("xss")<\/script>')
-* // => '&lt;script>alert(&quot;xss&quot;)&lt;/script>'
-* @example
-* html('<div></div>', false)
-* // => '<div></div>'
-*/
+ * Function overload for HTML with explicit escaping control.
+ *
+ * Escapes by default (attribute-safe), matching the template-tag form. Pass
+ * `shouldEscape: false` to opt out and return the input verbatim — only do this
+ * for HTML you already trust or have sanitized, since it disables XSS protection.
+ * @param value The HTML string to process
+ * @param shouldEscape When `true`/omitted, escapes HTML. When `false`, returns the input as-is (unsafe for untrusted input).
+ * @returns The processed HTML string
+ * @example
+ * html('<script>alert("xss")<\/script>')
+ * // => '&lt;script>alert(&quot;xss&quot;)&lt;/script>'
+ * @example
+ * html('<div></div>', false)
+ * // => '<div></div>'
+ */
 declare function html(value: string, shouldEscape?: boolean): string;
 export { type RawHtml, html as default, isRawHtml };

package/dist/html.js

@@ -1 +1 @@
-import o from"./packem_shared/escapeHtml-CiWsYlrs.js";const u="__isRawHtml",l=r=>typeof r=="object"&&r!==null&&r[u]===!0,s=r=>{if(l(r))return r.value;if(Array.isArray(r)){let e="";for(const t of r)e+=s(t);return e}return o(r,!0)};function c(r,...e){if(Array.isArray(r)&&"raw"in r){const n=r;let a=n[0]??"";for(const[f,i]of e.entries())a+=s(i),a+=n[f+1]??"";return a}const t=r;return e[0]===!1?t:o(t,!0)}c.raw=r=>({[u]:!0,value:r});export{c as default,l as isRawHtml};
+import u from"./packem_shared/escapeHtml-CiWsYlrs.js";const n=Symbol("visulima.rawHtml"),s=r=>typeof r=="object"&&r!==null&&r[n]===!0,f=r=>{if(s(r))return r.value;if(Array.isArray(r)){let e="";for(const o of r)e+=f(o);return e}return u(r,!0)};function c(r,...e){if(Array.isArray(r)&&"raw"in r){const t=r;let a=t[0]??"";for(const[i,l]of e.entries())a+=f(l),a+=t[i+1]??"";return a}const o=r;return e[0]===!1?o:u(o,!0)}c.raw=r=>({[n]:!0,value:r});export{c as default,s as isRawHtml};

package/dist/index.d.ts

@@ -22,20 +22,11 @@ interface DecodeOptions extends CommonOptions {
   scope?: DecodeScope;
 }
 /** Encodes all the necessary (specified by `level`) characters in the text */
-declare function encode(text: string | undefined | null, {
-  mode,
-  numeric,
-  level
-}?: EncodeOptions): string;
+declare function encode(text: string | undefined | null, { mode, numeric, level }?: EncodeOptions): string;
 /** Decodes a single entity */
-declare function decodeEntity(entity: string | undefined | null, {
-  level
-}?: CommonOptions): string;
+declare function decodeEntity(entity: string | undefined | null, { level }?: CommonOptions): string;
 /** Decodes all entities in the text */
-declare function decode(text: string | undefined | null, {
-  level,
-  scope
-}?: DecodeOptions): string;
+declare function decode(text: string | undefined | null, { level, scope }?: DecodeOptions): string;
 type HtmlTags = 'a' | 'abbr' | 'address' | 'area' | 'article' | 'aside' | 'audio' | 'b' | 'base' | 'bdi' | 'bdo' | 'blockquote' | 'body' | 'br' | 'button' | 'canvas' | 'caption' | 'cite' | 'code' | 'col' | 'colgroup' | 'data' | 'datalist' | 'dd' | 'del' | 'details' | 'dfn' | 'dialog' | 'div' | 'dl' | 'dt' | 'em' | 'embed' | 'fieldset' | 'figcaption' | 'figure' | 'footer' | 'form' | 'h1' | 'h2' | 'h3' | 'h4' | 'h5' | 'h6' | 'head' | 'header' | 'hgroup' | 'hr' | 'html' | 'i' | 'iframe' | 'img' | 'input' | 'ins' | 'kbd' | 'label' | 'legend' | 'li' | 'link' | 'main' | 'map' | 'mark' | 'math' | 'menu' | 'meta' | 'meter' | 'nav' | 'noscript' | 'object' | 'ol' | 'optgroup' | 'option' | 'output' | 'p' | 'picture' | 'pre' | 'progress' | 'q' | 'rp' | 'rt' | 'ruby' | 's' | 'samp' | 'script' | 'search' | 'section' | 'select' | 'selectedcontent' | 'slot' | 'small' | 'source' | 'span' | 'strong' | 'style' | 'sub' | 'summary' | 'sup' | 'svg' | 'table' | 'tbody' | 'td' | 'template' | 'textarea' | 'tfoot' | 'th' | 'thead' | 'time' | 'title' | 'tr' | 'track' | 'u' | 'ul' | 'var' | 'video' | 'wbr';
 type VoidHtmlTags = 'area' | 'base' | 'br' | 'col' | 'embed' | 'hr' | 'img' | 'input' | 'link' | 'meta' | 'source' | 'track' | 'wbr';
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visulima/html",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Functions for HTML, such as escaping or unescaping HTML entities",
   "keywords": [
     "css",