anentrypoint-design 0.0.217 → 0.0.218

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anentrypoint-design",
-  "version": "0.0.217",
+  "version": "0.0.218",
   "description": "247420 design system SDK — webjsx + modified ripple-ui, single-file ESM bundle for reproducible use of the AnEntrypoint design.",
   "type": "module",
   "main": "./dist/247420.js",

package/src/components/shell.js

@@ -164,27 +164,38 @@ const ICON_PATHS = {
 // rather than an h() vnode. Same path table, same viewBox/stroke contract as
 // Icon(); use innerHTML = iconMarkup(name). Keeps the icon paths upstream so
 // raw-DOM call sites never reintroduce decorative glyph literals.
-export function iconMarkup(name, { size = 16 } = {}) {
-    // Accept the props-object shape too - every sibling component takes a
-    // single object, so Icon({name}) is what the barrel trains consumers to try.
+// The single SVG attribute contract (viewBox/stroke/linecap…) shared by both
+// the markup-string and the vnode renderers below, so the icon shape is defined
+// once. Insertion order is the serialized attribute order iconMarkup emits.
+function iconAttrs(name, size) {
+    return {
+        class: 'ds-icon ds-icon-' + name,
+        width: String(size), height: String(size), viewBox: '0 0 24 24',
+        fill: 'none', stroke: 'currentColor', 'stroke-width': 'var(--ds-icon-stroke, 1.6)',
+        'stroke-linecap': 'round', 'stroke-linejoin': 'round', 'aria-hidden': 'true',
+    };
+}
+// Normalize the (name) | ({name,size}) call shapes both renderers accept.
+function iconArgs(name, size) {
     if (name && typeof name === 'object') ({ name, size = 16 } = name);
+    return { name, size };
+}
+// Raw-DOM consumers (no webjsx render in scope) need the SVG as a markup string
+// rather than an h() vnode. Same path table + attr contract as Icon(); use
+// innerHTML = iconMarkup(name). Keeps the icon paths upstream so raw-DOM call
+// sites never reintroduce decorative glyph literals.
+export function iconMarkup(name, { size = 16 } = {}) {
+    ({ name, size } = iconArgs(name, size));
     const inner = ICON_PATHS[name];
     if (!inner) return '';
-    return '<svg class="ds-icon ds-icon-' + name + '" width="' + size + '" height="' + size +
-        '" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="var(--ds-icon-stroke, 1.6)"' +
-        ' stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">' + inner + '</svg>';
+    const attrs = Object.entries(iconAttrs(name, size)).map(([k, v]) => `${k}="${v}"`).join(' ');
+    return `<svg ${attrs}>${inner}</svg>`;
 }
 export function Icon(name, { size = 16 } = {}) {
-    if (name && typeof name === 'object') ({ name, size = 16 } = name);
+    ({ name, size } = iconArgs(name, size));
     const inner = ICON_PATHS[name];
     if (!inner) return h('span', { class: 'glyph', 'aria-hidden': 'true' }, '');
-    return h('svg', {
-        class: 'ds-icon ds-icon-' + name,
-        width: String(size), height: String(size), viewBox: '0 0 24 24',
-        fill: 'none', stroke: 'currentColor', 'stroke-width': 'var(--ds-icon-stroke, 1.6)',
-        'stroke-linecap': 'round', 'stroke-linejoin': 'round', 'aria-hidden': 'true',
-        dangerouslySetInnerHTML: { __html: inner }
-    });
+    return h('svg', { ...iconAttrs(name, size), dangerouslySetInnerHTML: { __html: inner } });
 }
 
 export function Topbar({ brand = '247420', leaf = '', items = [], active = '', onNav, search } = {}) {

package/src/markdown.js

@@ -44,7 +44,9 @@ export async function ensureReady() {
     return _ready;
 }
 
-function escapeHtml(s) {
+// The single HTML-entity escape for the whole SDK (full set incl. quotes, so it
+// is safe in attribute contexts too). page-html.js re-exports this as `escape`.
+export function escapeHtml(s) {
     return String(s).replace(/[&<>"']/g, (c) => ({
         '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
     })[c]);

package/src/page-html.js

@@ -16,9 +16,10 @@
 //     cssHref, headExtra,
 //   })
 
-export function escape(s) {
-    return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
-}
+// Single source of HTML escaping lives in markdown.js (full entity set). Kept
+// the `escape` export name for backward compatibility with any consumer.
+import { escapeHtml } from './markdown.js';
+export const escape = escapeHtml;
 
 export function inlineMd(s) {
     return s