@zvndev/darkmown 1.0.0 → 1.1.0

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to Darkmown are documented here. Versions follow [semver](https://semver.org); pre-1.0 minor versions may contain breaking changes.
 
+## 1.1.0 — 2026-06-27
+
+Follow-up to 1.0: turn the two rough edges flagged at release into real fixes. No runtime change (still ~7.4 KB gzipped).
+
+- **Multi-line `:state` / `:store` / `:theme` values.** An array or object seed may now span several lines for readability — open the `[`/`{` on the directive line and let it run until it balances:
+
+  ```wd
+  :store rows = [
+    {"id": 1, "label": "One"},
+    {"id": 2, "label": "Two"}
+  ]
+  ```
+
+  1.0 made the old silent-corruption case (the literal stored verbatim as the string `"["`) a compile error; 1.1 makes the readable multi-line form actually *work*. The compiler joins the balanced literal (string- and escape-aware bracket counting) into one line before parsing. The literal must balance with no blank line inside it; an unterminated literal stays a clear compile error. Quote genuinely literal bracket text (`:state tag = "[draft]"`). The Ledger demo's seed data is now written this way.
+- **Single source of truth for the runtime-size budget (internal).** The gzip budget had drifted into four hardcoded copies (`package.json`, `scripts/size-check.mjs`, `.github/workflows/ci.yml`, `tests/size.test.js`) — a mismatch in `ci.yml` failed the 1.0 PR. The budget now lives only in `.size-snapshot.json` (`runtime.budget`); `scripts/size-check.mjs` reads it and everything else delegates to that script. A `tests/size.test.js` drift guard fails if any config reintroduces a hardcoded budget or an inline size gate.
+
 ## 1.0.0 — 2026-06-27
 
 The 1.0 release. The directive surface is now stable, and this version closes the biggest "I'd have to drop to raw HTML/JS for that" gaps an audit found — display formatting, time, an explicit theme toggle, live table sort, media, and a real escape hatch — while holding the zero-JS-by-default promise. Six additions, all either compile-time or sharing the one runtime, which moves from ~5.8 KB to **~7.4 KB gzipped**; the CI budget is raised 6 KB → **8 KB** to match (still un-minified, fully commented). No source-level breaking changes: existing `.wd` pages compile and behave identically.

package/README.md

@@ -556,6 +556,16 @@ You have { cart } items.
 - **Shared across tabs.** Change a store in one tab and every other tab on the same site updates live.
 - **Global by name.** A bare `{ cart }` reads the same store everywhere — stores are never section-scoped.
 - **Same value grammar as `:state`** — string, number, boolean, `null`, array, or object — and the **same** button actions (`cart += …`, `count++`, `theme = "dark"`, and so on).
+- **Multi-line seeds.** An array or object literal may span several lines for readability — open the `[`/`{` on the `:store`/`:state` line and let it run until it closes:
+
+  ```wd
+  :store rows = [
+    {"id": 1, "label": "One"},
+    {"id": 2, "label": "Two"}
+  ]
+  ```
+
+  The literal must balance with no blank line inside it (a blank line ends the value); an unterminated literal is a compile error. Quote genuinely literal bracket text — `:state tag = "[draft]"`.
 
 The declared value is a **seed**: it is used only the first time, when the store is absent from storage. After that the persisted value wins, so visitors keep their data.
 

package/docs/spec-alignment.md

@@ -93,6 +93,13 @@ The post-8/10-review sprint: one reactive-loop capability, a deploy-hardening la
 - **Dark-mode theming — `tokens dark`:** a `.skin` file may add a `tokens dark` block alongside its base `tokens`; the dark tokens compile to `@media (prefers-color-scheme: dark) :root { … }`, overriding the matching base tokens under the visitor's OS dark preference. Rules keep referencing the same `$name` tokens, so dark mode is a palette swap with **zero JavaScript** — consistent with the existing zero-JS `.skin` output. A skin with no `tokens dark` block is unchanged.
 - **Test backfill + compile-error line numbers:** the sprint backfilled runtime/compiler tests for the new surface, and compile errors now carry the offending **line number** alongside the file path and corrective suggestion. **Honest caveat:** this entry documents the intended sprint scope; the exact assertion count and the precise error-message format are owned by the test/compiler tracks and were not verified from this docs track.
 
+## Stage 17 additions (2026-06-27, v1.1.0)
+
+Follow-up hardening of the two rough edges flagged at the 1.0 release. No runtime change.
+
+- **Multi-line `:state`/`:store`/`:theme` JSON values:** an array/object seed may span lines. `body.js` detects an unbalanced `[`/`{` after `=` on the directive line and gathers contiguous continuation lines (stopping at a blank line, which delimits the literal) until the brackets balance — string- and escape-aware so a `]`/`}` or `\"` inside a JSON string is not miscounted — then collapses them to one line the existing single-line handler parses. 1.0 turned the silent `"["` corruption into a compile error; 1.1 makes the readable multi-line form work. An unterminated literal stays a clear compile error; quote literal bracket text. **Honest caveat:** no blank lines inside the literal (a blank line ends the scan), and the opening bracket must be on the directive line.
+- **Single source of truth for the runtime-size budget (internal):** the gzip ceiling lives only in `.size-snapshot.json` (`runtime.budget`); `scripts/size-check.mjs` reads it and `package.json` + `ci.yml` delegate to that script. A `tests/size.test.js` drift guard fails if any config reintroduces a hardcoded budget or inline gate — closing the class of bug that failed the 1.0 PR (a stale `6144` left in `ci.yml`).
+
 ## Stage 16 additions (2026-06-27, v1.0.0)
 
 The 1.0 release: a value layer, a time primitive, an explicit theme toggle, reactive table sort, media, and a first-class escape hatch — the gaps an audit flagged as "drop to raw HTML/JS." All compile-time or shared-runtime; the runtime moved from ~5.8 KB to ~7.4 KB gzipped and the CI budget was raised 6 KB → **8 KB** to match (still un-minified). No source-level breaking changes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zvndev/darkmown",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -18,7 +18,7 @@
   "types": "./types/index.d.ts",
   "scripts": {
     "build": "node src/cli.js build",
-    "runtime:size": "node -e \"const fs=require('fs'),zlib=require('zlib'); const size=zlib.gzipSync(fs.readFileSync('dist/__wd/runtime.js')).length; console.log('shipped runtime gzipped: '+size+' bytes (budget: 8192)'); if (size >= 8192) process.exit(1)\"",
+    "runtime:size": "node scripts/size-check.mjs",
     "dev": "node src/cli.js dev",
     "test": "node --test tests/*.test.js",
     "test:cov": "node scripts/test-coverage-gate.mjs 100",

package/site/pages/docs/index.wd

@@ -349,6 +349,7 @@ You have { cart } items.
 - Saved to localStorage under `wd:store:<name>` and reloaded on the next visit; changes sync live to other open tabs.
 - The declared value is a **seed**, used only the first time — afterward the persisted value wins.
 - Same value grammar and the same button actions as `:state`.
+- An array/object seed may span **multiple lines** for readability — open the `[`/`{` on the directive line and let it run until it closes (no blank line inside; an unterminated literal is a compile error). Quote literal bracket text: `:state tag = "[draft]"`.
 - Add `ephemeral` for an in-memory store that resets on reload: `:store sidebarOpen = false ephemeral`.
 
 ## Forms and persistence

package/site/pages/ledger/index.wd

@@ -13,7 +13,16 @@ transitions: true
 ::: section #ledger
 
 :theme
-:store expenses = [{"id":1,"date":"2026-06-22","merchant":"Aurora Studio","category":"Software","amount":149},{"id":2,"date":"2026-06-20","merchant":"Briza Coffee","category":"Meals","amount":18.4},{"id":3,"date":"2026-06-19","merchant":"Cobalt Cloud","category":"Hosting","amount":312.5},{"id":4,"date":"2026-06-18","merchant":"Dune Print Co","category":"Office","amount":64},{"id":5,"date":"2026-06-16","merchant":"Aurora Studio","category":"Software","amount":29},{"id":6,"date":"2026-06-15","merchant":"Ember Transit","category":"Travel","amount":212.75},{"id":7,"date":"2026-06-13","merchant":"Briza Coffee","category":"Meals","amount":11.2},{"id":8,"date":"2026-06-11","merchant":"Cobalt Cloud","category":"Hosting","amount":312.5}]
+:store expenses = [
+  {"id":1,"date":"2026-06-22","merchant":"Aurora Studio","category":"Software","amount":149},
+  {"id":2,"date":"2026-06-20","merchant":"Briza Coffee","category":"Meals","amount":18.4},
+  {"id":3,"date":"2026-06-19","merchant":"Cobalt Cloud","category":"Hosting","amount":312.5},
+  {"id":4,"date":"2026-06-18","merchant":"Dune Print Co","category":"Office","amount":64},
+  {"id":5,"date":"2026-06-16","merchant":"Aurora Studio","category":"Software","amount":29},
+  {"id":6,"date":"2026-06-15","merchant":"Ember Transit","category":"Travel","amount":212.75},
+  {"id":7,"date":"2026-06-13","merchant":"Briza Coffee","category":"Meals","amount":11.2},
+  {"id":8,"date":"2026-06-11","merchant":"Cobalt Cloud","category":"Hosting","amount":312.5}
+]
 :state q = ""
 :state sortKey = "amount"
 :state sortDir = "desc"

package/src/compiler/body.js

@@ -98,12 +98,16 @@ export function compileBody(lines, ctx) {
     }
     if (/^:state\s/.test(line)) {
       flush();
-      out.push(handleState(line, ctx, i));
+      const v = joinValueDirective(lines, i);
+      out.push(handleState(v.line, ctx, i));
+      i = v.end;
       continue;
     }
     if (/^:store\s/.test(line)) {
       flush();
-      out.push(handleStore(line, ctx, i));
+      const v = joinValueDirective(lines, i);
+      out.push(handleStore(v.line, ctx, i));
+      i = v.end;
       continue;
     }
     if (/^:fetch\s/.test(line)) {
@@ -128,7 +132,9 @@ export function compileBody(lines, ctx) {
     }
     if (/^:theme(?:\s|$)/.test(line)) {
       flush();
-      out.push(handleTheme(line, ctx, i));
+      const v = joinValueDirective(lines, i);
+      out.push(handleTheme(v.line, ctx, i));
+      i = v.end;
       continue;
     }
     const media = line.match(/^:(video|audio)\s/);
@@ -261,6 +267,61 @@ function warnUnknownDirective(line, ctx) {
   }
 }
 
+/**
+ * Net bracket depth of a string, ignoring brackets inside JSON string literals.
+ * Positive means more openers (`[`/`{`) than closers — the value is unbalanced.
+ * @param {string} s
+ * @returns {number}
+ */
+function bracketDepth(s) {
+  let depth = 0;
+  let inStr = false;
+  let esc = false;
+  for (const ch of s) {
+    if (inStr) {
+      if (esc) esc = false;
+      else if (ch === "\\") esc = true;
+      else if (ch === '"') inStr = false;
+      continue;
+    }
+    if (ch === '"') inStr = true;
+    else if (ch === "[" || ch === "{") depth++;
+    else if (ch === "]" || ch === "}") depth--;
+  }
+  return depth;
+}
+
+/**
+ * `:state`/`:store`/`:theme` take a single-line value, but a JSON array/object
+ * seed reads far better across several lines. When the value after `=` opens an
+ * unbalanced `[`/`{` on the directive line, gather the contiguous continuation
+ * lines (stopping at a blank line, which delimits the literal) until the brackets
+ * balance, then collapse them into one physical line the existing single-line
+ * handler parses unchanged — JSON ignores the inter-token whitespace. A literal
+ * that never balances falls through as-is, so `parseStateValue` reports it.
+ * @param {string[]} lines
+ * @param {number} start Index of the directive line.
+ * @returns {{ line: string, end: number }} `end` = last consumed line index.
+ */
+function joinValueDirective(lines, start) {
+  const opener = lines[start];
+  const eq = opener.indexOf("=");
+  if (eq === -1) return { line: opener, end: start };
+  const value = opener.slice(eq + 1);
+  // Only a JSON array/object literal can span lines; bare scalars/strings cannot.
+  if (!/^\s*[[{]/.test(value)) return { line: opener, end: start };
+  let depth = bracketDepth(value);
+  if (depth <= 0) return { line: opener, end: start }; // already balanced on one line
+  const parts = [opener];
+  let i = start;
+  while (depth > 0 && i + 1 < lines.length && lines[i + 1].trim() !== "") {
+    i++;
+    parts.push(lines[i]);
+    depth += bracketDepth(lines[i]);
+  }
+  return { line: parts.join(" "), end: i };
+}
+
 /**
  * Capture lines from an opener until a matching close token, honoring nesting and fences.
  * @param {string[]} lines

package/src/compiler/interpolation.js

@@ -119,10 +119,12 @@ export function safeScriptJson(value) {
 }
 
 /**
- * Parse a single-line `:state`/`:store`/`:theme` value: quoted string, boolean,
- * null, number, or JSON literal — falling back to the bare string. A value that
- * opens a JSON array/object but won't parse throws (almost always a multi-line
- * literal, which these single-line directives can't express).
+ * Parse a `:state`/`:store`/`:theme` value: quoted string, boolean, null, number,
+ * or JSON literal — falling back to the bare string. Multi-line array/object
+ * literals are joined into one line before reaching here (see `joinValueDirective`
+ * in body.js), so a value that opens a `[`/`{` but won't parse is genuinely
+ * unbalanced (a missing `]`/`}`) and throws, rather than being stored verbatim as
+ * the partial string `"["` — the silent-corruption footgun this guard replaces.
  * @param {string} raw
  * @param {string} [where] `file:line` for the error message.
  * @returns {unknown}
@@ -137,18 +139,17 @@ export function parseStateValue(raw, where) {
   try {
     return JSON.parse(value);
   } catch {
-    // A value that opens a JSON array/object but won't parse is almost always a
-    // multi-line literal — :state/:store/:theme take a single-line value, so the
-    // unterminated "[" used to get stored verbatim as the string "[" and silently
-    // break the page. Fail loudly with the fix instead. Quote it to keep literal
-    // brackets (e.g. `= "[draft]"`).
-    if (/^[[{]/.test(value))
+    if (/^[[{]/.test(value)) {
+      const open = value[0];
+      const close = open === "[" ? "]" : "}";
+      const shown = value.length > 60 ? `${value.slice(0, 57)}…` : value;
       throw new Error(
-        `Invalid value ${value}${where ? ` in ${where}` : ""}: this looks like the start of a ` +
-          `multi-line array/object, but :state/:store values must fit on one line. ` +
-          `Put the whole literal on one line, or quote it for literal text. ` +
-          `Use: name = [{"id":1,"label":"…"}]`
+        `Unbalanced JSON value "${shown}"${where ? ` in ${where}` : ""}: this opens "${open}" but ` +
+          `never closes it. :state/:store/:theme accept a multi-line array/object, but the literal ` +
+          `must balance (a "${close}" is missing) with no blank lines inside it. ` +
+          `Quote it for literal bracket text (e.g. = "[draft]").`
       );
+    }
     return value;
   }
 }