@wcstack/lint 1.28.0 → 1.30.0

package/dist/cli.cjs

@@ -110,6 +110,9 @@ var WcsDiagnosticCode = {
   // --- built-in wcs-* tag contract (generated/builtinTags.generated.ts が正本) ---
   // 未知メンバーへのバインド(プロパティ / command. / eventToken. キー)。黙って無視される。
   TagMemberUnknown: "wcs/tag-member-unknown",
+  // wcBindable 無宣言タグ(wcs-fetch-header 等のヘルパー)への spread。
+  // ランタイム(expandSpread)は raiseError で落とす。
+  SpreadNoBindable: "wcs/spread-no-bindable",
   // trigger バインド先スロットの true シード(エッジ検出なし・manual バイパスで即発火)。
   TriggerSeededTruthy: "wcs/trigger-seeded-truthy",
   // 非 manual <wcs-storage> value バインド先の空値シード(初期書き戻しが保存値を上書き)。
@@ -310,6 +313,8 @@ function parseWcsStateElements(html, stateTagName = "wcs-state") {
     const jsonAttr = extractAttribute(wcsMatch.tagContent, "json") ?? void 0;
     const stateAttr = extractAttribute(wcsMatch.tagContent, "state") ?? void 0;
     const srcAttr = extractAttribute(wcsMatch.tagContent, "src") ?? void 0;
+    const tagStart = pos;
+    const tagEnd = wcsMatch.end;
     pos = wcsMatch.end;
     const scriptBlocks = [];
     const wcsCloseIdx = findCloseTag(html, pos, stateTagName);
@@ -346,7 +351,7 @@ function parseWcsStateElements(html, stateTagName = "wcs-state") {
       pos = html.indexOf(">", scriptCloseIdx) + 1;
       if (pos === 0) break;
     }
-    elements.push({ stateName, jsonAttr, stateAttr, srcAttr, scriptBlocks });
+    elements.push({ stateName, jsonAttr, stateAttr, srcAttr, scriptBlocks, tagStart, tagEnd });
     pos = wcsEnd;
     if (wcsCloseIdx !== -1) {
       const closeEnd = html.indexOf(">", wcsCloseIdx);
@@ -515,6 +520,26 @@ function isNonFunctionLiteral(value) {
   if (/^(?:async\s+)?function\b/.test(trimmed) || scan.includes("=>")) return false;
   return /^["'`]/.test(trimmed) || /^-?\d/.test(trimmed) || /^(?:true|false|null|undefined)\b/.test(trimmed) || trimmed.startsWith("[") || trimmed.startsWith("{");
 }
+function findNonObjectWatch(scriptContent) {
+  const root = locateDefaultExportObject(scriptContent);
+  if (!root) return null;
+  const watchProp = parseTopLevelProperties(root.content).find((p) => p.name === RESERVED_WATCH_KEY);
+  if (!watchProp || watchProp.nameStart === void 0 || watchProp.nameEnd === void 0) {
+    return null;
+  }
+  const span = { start: root.start + watchProp.nameStart, end: root.start + watchProp.nameEnd };
+  if (watchProp.kind === "method") {
+    return span;
+  }
+  if (watchProp.kind !== "data" || !watchProp.value) return null;
+  const trimmed = watchProp.value.trim();
+  if (trimmed.startsWith("{")) return null;
+  const scan = maskCommentsAndStrings(trimmed).trim();
+  const isArrowFunction = /^(?:async\s+)?\([^()]*\)\s*=>/.test(scan) || /^(?:async\s+)?[$\w]+\s*=>/.test(scan);
+  const isWholeLiteral = /^(["'`])[^"'`]*\1$/.test(scan) || /^-?\d[\w.]*$/.test(scan) || /^(?:true|false|null)$/.test(scan) || /^(?:async\s+)?function\b[\s\S]*\}$/.test(scan);
+  if (!isArrowFunction && !isWholeLiteral) return null;
+  return span;
+}
 function collectReservedKeyPaths(prop, paths, pendingStreamValues, pendingListKeys, stateName) {
   if (prop.name === RESERVED_STREAMS_KEY && prop.kind === "data" && prop.value && isObjectLiteral(prop.value)) {
     const entries = parseTopLevelProperties(extractObjectContent(prop.value));
@@ -598,14 +623,9 @@ function pushDataPropertyPathsAt(path, prop, paths, stateName, depth) {
   if (prop.value && isArrayLiteral(prop.value)) {
     paths.push({ path: `${path}.*`, kind: "list", stateName });
     paths.push({ path: `${path}.length`, kind: "data", typeHint: "number", stateName });
-    const elementProps = extractArrayElementProperties(prop.value);
-    for (const childProp of elementProps) {
-      paths.push({
-        path: `${path}.*.${childProp.name}`,
-        kind: "data",
-        typeHint: childProp.typeHint,
-        stateName
-      });
+    if (depth >= MAX_OBJECT_NEST_DEPTH) return;
+    for (const childProp of extractArrayElementDataProperties(prop.value)) {
+      pushDataPropertyPathsAt(`${path}.*.${childProp.name}`, childProp, paths, stateName, depth + 1);
     }
     return;
   }
@@ -631,25 +651,27 @@ function analyzeJsonPaths(jsonString, stateName = "default") {
   return paths;
 }
 function collectJsonPaths(obj, prefix, paths, stateName, depth) {
-  if (depth > 5) return;
+  if (depth >= MAX_OBJECT_NEST_DEPTH) return;
   for (const [key, value] of Object.entries(obj)) {
     if (prefix === "" && key.startsWith("$")) continue;
     const path = prefix ? `${prefix}.${key}` : key;
-    const typeHint = inferJsonTypeHint(value);
-    paths.push({ path, kind: "data", typeHint, stateName });
-    if (Array.isArray(value)) {
-      paths.push({ path: `${path}.*`, kind: "list", stateName });
-      paths.push({ path: `${path}.length`, kind: "data", typeHint: "number", stateName });
-      if (value.length > 0 && typeof value[0] === "object" && value[0] !== null && !Array.isArray(value[0])) {
-        const firstElement = value[0];
-        for (const [childKey, childValue] of Object.entries(firstElement)) {
-          const childPath = `${path}.*.${childKey}`;
-          paths.push({ path: childPath, kind: "data", typeHint: inferJsonTypeHint(childValue), stateName });
-        }
+    pushJsonValuePaths(path, value, paths, stateName, depth);
+  }
+}
+function pushJsonValuePaths(path, value, paths, stateName, depth) {
+  paths.push({ path, kind: "data", typeHint: inferJsonTypeHint(value), stateName });
+  if (Array.isArray(value)) {
+    paths.push({ path: `${path}.*`, kind: "list", stateName });
+    paths.push({ path: `${path}.length`, kind: "data", typeHint: "number", stateName });
+    if (depth >= MAX_OBJECT_NEST_DEPTH) return;
+    if (value.length > 0 && typeof value[0] === "object" && value[0] !== null && !Array.isArray(value[0])) {
+      const firstElement = value[0];
+      for (const [childKey, childValue] of Object.entries(firstElement)) {
+        pushJsonValuePaths(`${path}.*.${childKey}`, childValue, paths, stateName, depth + 1);
       }
-    } else if (typeof value === "object" && value !== null) {
-      collectJsonPaths(value, path, paths, stateName, depth + 1);
     }
+  } else if (typeof value === "object" && value !== null) {
+    collectJsonPaths(value, path, paths, stateName, depth + 1);
   }
 }
 function inferJsonTypeHint(value) {
@@ -820,21 +842,15 @@ function extractObjectContent(value) {
   if (start === -1) return "";
   return extractBracedContent(trimmed, scan, start);
 }
-function extractArrayElementProperties(value) {
+function extractArrayElementDataProperties(value) {
   const trimmed = value.trim();
   if (!trimmed.startsWith("[")) return [];
   const scan = maskCommentsAndStrings(trimmed);
-  const objectStart = scan.indexOf("{");
-  if (objectStart === -1) return [];
-  const objectContent = extractBracedContent(trimmed, scan, objectStart);
-  const props = [];
-  const allProps = parseTopLevelProperties(objectContent);
-  for (const prop of allProps) {
-    if (prop.kind === "data") {
-      props.push({ name: prop.name, typeHint: prop.typeHint });
-    }
-  }
-  return props;
+  let first = 1;
+  while (first < scan.length && /\s/.test(scan[first])) first++;
+  if (scan[first] !== "{") return [];
+  const objectContent = extractBracedContent(trimmed, scan, first);
+  return parseTopLevelProperties(objectContent).filter((prop) => prop.kind === "data");
 }
 function extractJsDocType(content, propIndex) {
   const before = content.slice(Math.max(0, propIndex - 200), propIndex);
@@ -966,25 +982,30 @@ function isInsideForTemplate(html, offset, bindAttrName = "data-wcs") {
   return false;
 }
 function getInnermostForPath(html, offset, bindAttrName = "data-wcs") {
+  const chain = getEnclosingForPaths(html, offset, bindAttrName);
+  return chain.length === 0 ? null : chain[chain.length - 1];
+}
+function getEnclosingForPaths(html, offset, bindAttrName = "data-wcs") {
+  return getEnclosingFors(html, offset, bindAttrName).map((entry) => entry.path);
+}
+function getEnclosingFors(html, offset, bindAttrName = "data-wcs") {
   const escaped = bindAttrName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const openRegex = new RegExp(
     `<template[^>]*${escaped}\\s*=\\s*["']\\s*for\\s*:\\s*([^"']+?)\\s*["']`,
     "gi"
   );
-  let bestMatch = null;
-  let bestPos = -1;
+  const enclosing = [];
   let match;
   while ((match = openRegex.exec(html)) !== null) {
     if (match.index >= offset) break;
     const tagEnd = html.indexOf(">", match.index);
     if (tagEnd === -1 || tagEnd >= offset) continue;
     const depth = getForTemplateDepthAt(html, match.index, offset, bindAttrName);
-    if (depth > 0 && match.index > bestPos) {
-      bestMatch = match[1].trim();
-      bestPos = match.index;
+    if (depth > 0) {
+      enclosing.push({ path: match[1].trim(), anchor: match.index });
     }
   }
-  return bestMatch;
+  return enclosing;
 }
 function getForTemplateDepthAt(html, openPos, offset, bindAttrName) {
   const tagEnd = html.indexOf(">", openPos);
@@ -1028,6 +1049,7 @@ var JA_EXPECTED_LABEL = {
 var ja = {
   spreadFilterNotAllowed: () => `\u30B9\u30D7\u30EC\u30C3\u30C9\u306E\u30BF\u30FC\u30B2\u30C3\u30C8\u306B\u30D5\u30A3\u30EB\u30BF\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093`,
   spreadTargetRequired: () => `\u30B9\u30D7\u30EC\u30C3\u30C9\u306B\u306F\u30BF\u30FC\u30B2\u30C3\u30C8\u30D1\u30B9\u304C\u5FC5\u8981\u3067\u3059`,
+  structuralMustBeSingle: (d) => `'${d}' \u30D0\u30A4\u30F3\u30C7\u30A3\u30F3\u30B0\u306F\u5358\u72EC\u3067\u6307\u5B9A\u3059\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\uFF08';' \u3067\u4ED6\u306E\u30D0\u30A4\u30F3\u30C7\u30A3\u30F3\u30B0\u3068\u4F75\u8A18\u3067\u304D\u307E\u305B\u3093\u3002\u30E9\u30F3\u30BF\u30A4\u30E0\u306F\u8AAD\u307F\u8FBC\u307F\u6642\u306B throw \u3057\u307E\u3059\uFF09`,
   eventTokenUndeclared: (t) => `\u30A4\u30D9\u30F3\u30C8\u30C8\u30FC\u30AF\u30F3 "${t}" \u306F $eventTokens \u306B\u5BA3\u8A00\u3055\u308C\u3066\u3044\u307E\u305B\u3093`,
   commandRhsFormat: () => `command \u30D0\u30A4\u30F3\u30C7\u30A3\u30F3\u30B0\u306E\u53F3\u8FBA\u306B\u306F $command.<name>\uFF08$commandTokens \u3067\u5BA3\u8A00\uFF09\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`,
   commandTokenUndeclared: (t) => `\u30B3\u30DE\u30F3\u30C9\u30C8\u30FC\u30AF\u30F3 "${t}" \u306F $commandTokens \u306B\u5BA3\u8A00\u3055\u308C\u3066\u3044\u307E\u305B\u3093`,
@@ -1048,6 +1070,7 @@ var ja = {
   wcsTextInfo: (e) => `wcs-text \u30D0\u30A4\u30F3\u30C7\u30A3\u30F3\u30B0: ${e}`,
   moustacheFouc: (e) => `<template> \u5916\u306E {{ }} \u69CB\u6587\u306F FOUC\uFF08\u521D\u671F\u8868\u793A\u6642\u306B\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u6587\u5B57\u5217\u304C\u898B\u3048\u308B\uFF09\u306E\u539F\u56E0\u306B\u306A\u308A\u307E\u3059\u3002<!--@@:${e}--> \u307E\u305F\u306F\u30B3\u30E1\u30F3\u30C8\u69CB\u6587\u306E\u4F7F\u7528\u3092\u691C\u8A0E\u3057\u3066\u304F\u3060\u3055\u3044\u3002`,
   nestedAssign: (sp) => `\u30CD\u30B9\u30C8\u3055\u308C\u305F\u30D7\u30ED\u30D1\u30C6\u30A3\u3078\u306E\u4EE3\u5165\u306F\u30EA\u30A2\u30AF\u30C6\u30A3\u30D6\u66F4\u65B0\u3092\u30C8\u30EA\u30AC\u30FC\u3057\u307E\u305B\u3093\u3002this["${sp}"] \u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002`,
+  watchNotObject: () => `$watch \u306F\u300C\u30D1\u30B9 \u2192 \u30CF\u30F3\u30C9\u30E9\u95A2\u6570\u300D\u306E\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\uFF08\u3053\u306E\u5F62\u306F\u30E9\u30F3\u30BF\u30A4\u30E0\u304C\u8AAD\u307F\u8FBC\u307F\u6642\u306B throw \u3057\u307E\u3059\uFF09`,
   watchKeyCrossState: (k) => `$watch \u306E\u30AD\u30FC "${k}" \u306F\u4ED6\u306E state \u3092\u6307\u3057\u3066\u3044\u307E\u3059\u3002@ \u4ED8\u304D\u306E\u8D8A\u5883 watch \u306F\u4F7F\u3048\u307E\u305B\u3093\uFF08\u81EA state \u306E\u30D1\u30B9\u306E\u307F\uFF09`,
   watchKeyReserved: (k) => `$watch \u306E\u30AD\u30FC "${k}" \u306F "$" \u3067\u59CB\u3081\u3089\u308C\u307E\u305B\u3093\uFF08\u4E88\u7D04\u540D\u524D\u7A7A\u9593\uFF09`,
   watchKeyEmptySegment: (k) => `$watch \u306E\u30AD\u30FC "${k}" \u306B\u7A7A\u306E\u30D1\u30B9\u30BB\u30B0\u30E1\u30F3\u30C8\u304C\u3042\u308A\u307E\u3059`,
@@ -1058,6 +1081,7 @@ var ja = {
   arrayIndexAssign: (sp) => `\u914D\u5217\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u3078\u306E\u76F4\u63A5\u4EE3\u5165\u306F\u30EA\u30A2\u30AF\u30C6\u30A3\u30D6\u66F4\u65B0\u3092\u30C8\u30EA\u30AC\u30FC\u3057\u307E\u305B\u3093\u3002this["${sp}"] \u306E\u3088\u3046\u306A\u30C9\u30C3\u30C8\u30D1\u30B9\u4EE3\u5165\u3001\u307E\u305F\u306F with() \u3068\u518D\u4EE3\u5165\u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002`,
   tagMemberUnknown: (prop, tag) => `"${prop}" \u306F <${tag}> \u306E wcBindable \u30E1\u30F3\u30D0\u30FC\u3067\u306F\u3042\u308A\u307E\u305B\u3093\uFF08\u672A\u77E5\u30E1\u30F3\u30D0\u30FC\u3078\u306E\u30D0\u30A4\u30F3\u30C9\u306F\u9ED9\u3063\u3066\u7121\u8996\u3055\u308C\u307E\u3059\uFF09`,
   tagCommandUnknown: (name, tag, declared) => `"${name}" \u306F <${tag}> \u306E command \u3067\u306F\u3042\u308A\u307E\u305B\u3093\uFF08\u5BA3\u8A00\u6E08\u307F: ${declared}\uFF09`,
+  spreadNoBindable: (tag) => `'...'\uFF08spread\uFF09\u306F <${tag}> \u306B\u6709\u52B9\u306A wcBindable \u5BA3\u8A00\u304C\u5FC5\u8981\u3067\u3059 \u2014 \u3053\u306E\u30BF\u30B0\u306F\u5BA3\u8A00\u3092\u6301\u305F\u306A\u3044\u305F\u3081\u3001\u30E9\u30F3\u30BF\u30A4\u30E0\u306F\u30A8\u30E9\u30FC\u3092\u9001\u51FA\u3057\u307E\u3059`,
   tagEventTokenKeyUnknown: (name, tag, declared) => `eventToken \u306E\u30AD\u30FC "${name}" \u306F <${tag}> \u306E wcBindable \u30D7\u30ED\u30D1\u30C6\u30A3\u3067\u306F\u3042\u308A\u307E\u305B\u3093\u3002\u751F DOM \u30A4\u30D9\u30F3\u30C8\u540D\u306F\u767A\u706B\u3057\u307E\u305B\u3093 \u2014 \u30D7\u30ED\u30D1\u30C6\u30A3\u540D\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044\uFF08\u5BA3\u8A00\u6E08\u307F: ${declared}\uFF09`,
   didYouMean: (c) => `\u3002\u3082\u3057\u304B\u3057\u3066: "${c}"`,
   none: () => `\u306A\u3057`,
@@ -1075,6 +1099,7 @@ var EN_EXPECTED_LABEL = {
 var en = {
   spreadFilterNotAllowed: () => `Filters cannot be applied to a spread target`,
   spreadTargetRequired: () => `Spread requires a target path`,
+  structuralMustBeSingle: (d) => `'${d}' must be the only binding in this attribute (it cannot be combined with ';'; the runtime throws at load time)`,
   eventTokenUndeclared: (t) => `Event token "${t}" is not declared in $eventTokens`,
   commandRhsFormat: () => `The right side of a command binding must be $command.<name> (declared in $commandTokens)`,
   commandTokenUndeclared: (t) => `Command token "${t}" is not declared in $commandTokens`,
@@ -1095,6 +1120,7 @@ var en = {
   wcsTextInfo: (e) => `wcs-text binding: ${e}`,
   moustacheFouc: (e) => `{{ }} outside a <template> causes FOUC (the raw template string is visible before binding). Consider the comment syntax <!--@@:${e}--> instead.`,
   nestedAssign: (sp) => `Assigning to a nested property does not trigger a reactive update. Use this["${sp}"] instead.`,
+  watchNotObject: () => `$watch must be an object mapping state paths to handler functions (the runtime throws on this shape at load time)`,
   watchKeyCrossState: (k) => `$watch key "${k}" targets another state. Cross-state watching with @ is not supported (own paths only)`,
   watchKeyReserved: (k) => `$watch key "${k}" must not start with "$" (reserved namespace)`,
   watchKeyEmptySegment: (k) => `$watch key "${k}" has an empty path segment`,
@@ -1105,6 +1131,7 @@ var en = {
   arrayIndexAssign: (sp) => `Assigning directly to an array index does not trigger a reactive update. Use a dot-path assignment like this["${sp}"], or with() plus reassignment.`,
   tagMemberUnknown: (prop, tag) => `"${prop}" is not a wcBindable member of <${tag}> (bindings to unknown members are silently ignored)`,
   tagCommandUnknown: (name, tag, declared) => `"${name}" is not a command of <${tag}> (declared: ${declared})`,
+  spreadNoBindable: (tag) => `'...' (spread) requires <${tag}> to expose a valid wcBindable declaration \u2014 this tag declares none, so the runtime raises an error`,
   tagEventTokenKeyUnknown: (name, tag, declared) => `eventToken key "${name}" is not a wcBindable property of <${tag}>. Raw DOM event names never fire \u2014 use the property name (declared: ${declared})`,
   didYouMean: (c) => `. Did you mean "${c}"?`,
   none: () => `none`,
@@ -1140,6 +1167,25 @@ function validateBindings(html, attrName, stateTagName = "wcs-state", locale, fi
   const filterNameSet = new Set(BUILTIN_FILTERS.map((f) => f.name));
   for (const attr of attrs) {
     const bindings = splitBindingExpressions(attr.value);
+    const nonEmptyCount = bindings.filter((b) => b.trim().length > 0).length;
+    if (nonEmptyCount > 1) {
+      let scanPos = 0;
+      for (const b of bindings) {
+        const colon = b.indexOf(":");
+        const prop = (colon === -1 ? b : b.slice(0, colon)).trim();
+        if (STRUCTURAL_BINDING_TYPE_SET.has(prop)) {
+          const leading = b.length - b.trimStart().length;
+          diagnostics.push({
+            code: WcsDiagnosticCode.TemplateSyntax,
+            start: attr.valueStart + scanPos + leading,
+            end: attr.valueStart + scanPos + b.trimEnd().length,
+            message: msgs.structuralMustBeSingle(prop),
+            severity: "error"
+          });
+        }
+        scanPos += b.length + 1;
+      }
+    }
     let pos = 0;
     for (const binding of bindings) {
       const bindingStart = attr.valueStart + pos;
@@ -2032,6 +2078,7 @@ function isValidTemplatePath(path, pathSet, scopedPaths) {
 var BUILTIN_TAGS = {
   "wcs-accelerometer": {
     "package": "accelerometer",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "frequency": null
@@ -2050,6 +2097,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-ambient-light-sensor": {
     "package": "ambient-light-sensor",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "frequency": null
@@ -2066,6 +2114,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-audio": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "volume",
       "limiter",
@@ -2098,6 +2147,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-voice": {
     "package": "audio",
+    "hasWcBindable": false,
     "observedAttributes": [
       "poly"
     ],
@@ -2107,6 +2157,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-osc": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "frequency",
       "detune",
@@ -2132,6 +2183,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-noise": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "id",
       "out",
@@ -2146,6 +2198,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-biquad": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "frequency",
       "q",
@@ -2171,6 +2224,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-gain": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "gain",
       "id",
@@ -2188,6 +2242,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-delay": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "time",
       "feedback",
@@ -2209,6 +2264,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-shaper": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "amount",
       "id",
@@ -2226,6 +2282,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-env": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "attack",
       "decay",
@@ -2251,6 +2308,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-lfo": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "rate",
       "depth",
@@ -2272,6 +2330,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-analyser": {
     "package": "audio",
+    "hasWcBindable": true,
     "observedAttributes": [
       "fft",
       "smoothing",
@@ -2295,6 +2354,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-broadcast": {
     "package": "broadcast",
+    "hasWcBindable": true,
     "observedAttributes": [
       "name"
     ],
@@ -2315,6 +2375,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-camera": {
     "package": "camera",
+    "hasWcBindable": true,
     "observedAttributes": [
       "facing-mode",
       "device-id",
@@ -2350,6 +2411,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-recorder": {
     "package": "camera",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "mimeType": "mime-type",
@@ -2379,6 +2441,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-clipboard": {
     "package": "clipboard",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "monitor": "monitor"
@@ -2407,6 +2470,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-contacts": {
     "package": "contacts",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2422,6 +2486,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-credential": {
     "package": "credential",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2438,6 +2503,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-debounce": {
     "package": "debounce",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "source": null,
@@ -2459,6 +2525,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-throttle": {
     "package": "debounce",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "source": null,
@@ -2480,6 +2547,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-defined": {
     "package": "defined",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "tags": "tags",
@@ -2498,6 +2566,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-eyedropper": {
     "package": "eyedropper",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2514,6 +2583,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-fetch": {
     "package": "fetch",
+    "hasWcBindable": true,
     "observedAttributes": [
       "url"
     ],
@@ -2542,6 +2612,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-fetch-header": {
     "package": "fetch",
+    "hasWcBindable": false,
     "observedAttributes": [],
     "inputs": {},
     "properties": [],
@@ -2549,6 +2620,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-fetch-body": {
     "package": "fetch",
+    "hasWcBindable": false,
     "observedAttributes": [],
     "inputs": {},
     "properties": [],
@@ -2556,6 +2628,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-infinite-scroll": {
     "package": "fetch",
+    "hasWcBindable": false,
     "observedAttributes": [
       "target",
       "root",
@@ -2569,6 +2642,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-fullscreen": {
     "package": "fullscreen",
+    "hasWcBindable": true,
     "observedAttributes": [
       "target"
     ],
@@ -2587,6 +2661,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-geo": {
     "package": "geolocation",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "highAccuracy": "high-accuracy",
@@ -2618,6 +2693,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-gyroscope": {
     "package": "gyroscope",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "frequency": null
@@ -2636,6 +2712,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-idle": {
     "package": "idle",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "threshold": "threshold"
@@ -2655,6 +2732,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-intersect": {
     "package": "intersection",
+    "hasWcBindable": true,
     "observedAttributes": [
       "target",
       "root",
@@ -2688,6 +2766,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-magnetometer": {
     "package": "magnetometer",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "frequency": null
@@ -2706,6 +2785,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-midi": {
     "package": "midi",
+    "hasWcBindable": true,
     "observedAttributes": [
       "input",
       "output",
@@ -2743,6 +2823,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-network": {
     "package": "network",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2756,6 +2837,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-notify": {
     "package": "notification",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "notice": null,
@@ -2792,6 +2874,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-permission": {
     "package": "permission",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "name": "name",
@@ -2809,6 +2892,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-pip": {
     "package": "picture-in-picture",
+    "hasWcBindable": true,
     "observedAttributes": [
       "target"
     ],
@@ -2827,6 +2911,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-pointer-lock": {
     "package": "pointer-lock",
+    "hasWcBindable": true,
     "observedAttributes": [
       "target"
     ],
@@ -2845,6 +2930,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-raf": {
     "package": "raf",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "once": "once",
@@ -2870,6 +2956,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-resize": {
     "package": "resize",
+    "hasWcBindable": true,
     "observedAttributes": [
       "target",
       "box",
@@ -2898,6 +2985,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-screen-orientation": {
     "package": "screen-orientation",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2915,6 +3003,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-share": {
     "package": "share",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -2930,6 +3019,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-speak": {
     "package": "speech",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "say": null,
@@ -2960,6 +3050,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-listen": {
     "package": "speech",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {
       "lang": "lang",
@@ -2988,6 +3079,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-sse": {
     "package": "sse",
+    "hasWcBindable": true,
     "observedAttributes": [
       "url"
     ],
@@ -3015,6 +3107,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-storage": {
     "package": "storage",
+    "hasWcBindable": true,
     "observedAttributes": [
       "key",
       "type"
@@ -3041,6 +3134,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-tilt": {
     "package": "tilt",
+    "hasWcBindable": true,
     "observedAttributes": [],
     "inputs": {},
     "properties": [
@@ -3060,6 +3154,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-timer": {
     "package": "timer",
+    "hasWcBindable": true,
     "observedAttributes": [
       "interval"
     ],
@@ -3087,6 +3182,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-upload": {
     "package": "upload",
+    "hasWcBindable": true,
     "observedAttributes": [
       "url"
     ],
@@ -3118,6 +3214,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-wakelock": {
     "package": "wakelock",
+    "hasWcBindable": true,
     "observedAttributes": [
       "active",
       "type"
@@ -3139,6 +3236,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-ws": {
     "package": "websocket",
+    "hasWcBindable": true,
     "observedAttributes": [
       "url"
     ],
@@ -3171,6 +3269,7 @@ var BUILTIN_TAGS = {
   },
   "wcs-worker": {
     "package": "worker",
+    "hasWcBindable": true,
     "observedAttributes": [
       "src"
     ],
@@ -3224,10 +3323,28 @@ function validateIoNodes(html, bindAttribute = "data-wcs", stateTagName = "wcs-s
   const getPaths = () => statePaths ??= getStatePathsFromHtml(html, stateTagName, fileReader);
   for (const occ of occurrences) {
     const contract = BUILTIN_TAGS[occ.tagName];
-    if (contract.properties.length === 0 && contract.commands.length === 0 && Object.keys(contract.inputs).length === 0) continue;
     const bindAttr = extractAttributeValue(occ.attrsText, bindAttribute);
     if (!bindAttr) continue;
     const valueStart = occ.attrsStart + bindAttr.valueOffsetInAttrs;
+    if (!contract.hasWcBindable) {
+      let spreadExprOffset = 0;
+      for (const expr of splitBindingExpressions(bindAttr.value)) {
+        const exprStart = valueStart + spreadExprOffset;
+        spreadExprOffset += expr.length + 1;
+        if (parseBindingExpression(expr).property !== "...") continue;
+        const start = exprStart + expr.indexOf("...");
+        diagnostics.push({
+          code: WcsDiagnosticCode.SpreadNoBindable,
+          start,
+          end: start + 3,
+          severity: "error",
+          tag: occ.tagName,
+          message: msgs.spreadNoBindable(occ.tagName)
+        });
+      }
+      continue;
+    }
+    if (contract.properties.length === 0 && contract.commands.length === 0 && Object.keys(contract.inputs).length === 0) continue;
     const hasManual = hasBooleanAttribute(occ.attrsText, "manual");
     let exprOffset = 0;
     for (const expr of splitBindingExpressions(bindAttr.value)) {
@@ -3525,6 +3642,16 @@ function validateWatchDeclarations(html, stateTagName = "wcs-state", locale) {
   const msgs = getMessages(locale);
   const out = [];
   for (const block of parseWcsScriptBlocks(html, stateTagName)) {
+    const nonObject = findNonObjectWatch(block.content);
+    if (nonObject !== null) {
+      out.push({
+        code: WcsDiagnosticCode.WatchDeclarationInvalid,
+        start: block.contentStart + nonObject.start,
+        end: block.contentStart + nonObject.end,
+        message: msgs.watchNotObject(),
+        severity: "error"
+      });
+    }
     const entries = analyzeWatchEntries(block.content);
     if (entries.length === 0) continue;
     const paths = analyzeStatePaths(block.content, block.stateName);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wcstack/lint",
-  "version": "1.28.0",
+  "version": "1.30.0",
   "description": "Static-contract validator CLI (wcs-validate) for wcstack data-wcs bindings and wcstack.manifest.json sidecars. Thin npm wrapper around the wcstack-intellisense validator core.",
   "type": "module",
   "bin": {