anentrypoint-design 0.0.338 → 0.0.339

package/dist/247420.js

@@ -152,7 +152,7 @@ var Lc=Object.defineProperty;var ie=(e,t)=>()=>(e&&(t=e(e=0)),t);var ct=(e,t)=>{
 .ds-247420[data-motion="reduced"] [data-anim="ready"] {
   transition: none !important;
 }`.trim(),document.head.appendChild(e)}function kn(e){if(!e||typeof e.querySelectorAll!="function")return;e.querySelectorAll(".ds-hero,.panel,.ds-section,.app-main > *").forEach((n,s)=>{if(n.dataset.anim==="ready")return;n.dataset.anim="in";let a=Math.min(s,6)*30;setTimeout(()=>{n.dataset.anim="ready"},a)})}Ye();It();Ta();Qn();It();var be=tt;function ic(e){return e.replace(/`([^`]+)`/g,"<code>$1</code>").replace(/\*\*([^*]+)\*\*/g,"<strong>$1</strong>").replace(/\[([^\]]+)\]\(([^)]+)\)/g,'<a href="$2">$1</a>')}function Pr(e){return String(e||"").trim().toLowerCase().replace(/[^\w\s-]/g,"").replace(/\s+/g,"-")}function Ou(e){let t=String(e||"").split(`
-`),n=[],s=!1,a=!1;for(let r of t){if(r.startsWith("```")){s?(n.push("</pre>"),s=!1):(n.push("<pre>"),s=!0);continue}if(s){n.push(be(r));continue}if(r.startsWith("# ")){let o=r.slice(2);n.push(`<h1 id="${Pr(o)}">${be(o)}</h1>`)}else if(r.startsWith("## ")){let o=r.slice(3);n.push(`<h2 id="${Pr(o)}">${be(o)}</h2>`)}else if(r.startsWith("### ")){let o=r.slice(4);n.push(`<h3 id="${Pr(o)}">${be(o)}</h3>`)}else r.startsWith("- ")?(a||(n.push("<ul>"),a=!0),n.push(`<li>${ic(be(r.slice(2)))}</li>`)):(a&&(n.push("</ul>"),a=!1),r.trim()&&n.push(`<p>${ic(be(r))}</p>`))}return a&&n.push("</ul>"),s&&n.push("</pre>"),n.join(`
+`),n=[],s=!1,a=!1,r=!1;for(let o of t){if(o.trim()==="```html"&&!s){r=!0;continue}if(o.startsWith("```")){if(r){r=!1;continue}s?(n.push("</pre>"),s=!1):(n.push("<pre>"),s=!0);continue}if(r){n.push(o);continue}if(s){n.push(be(o));continue}if(o.startsWith("# ")){let l=o.slice(2);n.push(`<h1 id="${Pr(l)}">${be(l)}</h1>`)}else if(o.startsWith("## ")){let l=o.slice(3);n.push(`<h2 id="${Pr(l)}">${be(l)}</h2>`)}else if(o.startsWith("### ")){let l=o.slice(4);n.push(`<h3 id="${Pr(l)}">${be(l)}</h3>`)}else o.startsWith("- ")?(a||(n.push("<ul>"),a=!0),n.push(`<li>${ic(be(o.slice(2)))}</li>`)):(a&&(n.push("</ul>"),a=!1),o.trim()&&n.push(`<p>${ic(be(o))}</p>`))}return a&&n.push("</ul>"),s&&n.push("</pre>"),n.join(`
 `)}function Nu(e,t){if(!t)return"#";let n=String(t);if(/^([a-z]+:|#|\/\/)/i.test(n)||!e)return n;let s=e.replace(/\/+$/,"");return n.startsWith("/")?s+n:s+"/"+n.replace(/^\.?\//,"")}function qu({title:e,siteName:t,seo:n}){let s=be(n.description||""),a=be(n.lang||"en"),r=be(n.url||""),o=be(n.image||""),l=be(n.author||t),i=be(n.twitter||""),c=be(n.locale||"en_US"),d=be(Array.isArray(n.keywords)?n.keywords.join(", "):n.keywords||""),u=be(e),p=be(n.description||t),f=`
 <meta name="description" content="${s}">
 ${d?`<meta name="keywords" content="${d}">`:""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anentrypoint-design",
-  "version": "0.0.338",
+  "version": "0.0.339",
   "description": "247420 design system SDK — webjsx + modified ripple-ui, single-file ESM bundle for reproducible use of the AnEntrypoint design.",
   "type": "module",
   "main": "./dist/247420.js",

package/src/page-html.js

@@ -37,12 +37,26 @@ export function slugify(s) {
         .replace(/\s+/g, '-');
 }
 
+// Raw-HTML passthrough block, opt-in via ```html fences. Distinct from a
+// plain ``` code fence (which still escapes+<pre>-wraps its contents) — this
+// is for SSR call sites that are trusted, repo-authored content (a theme.mjs
+// page body sourced from the project's own YAML, never end-user input) and
+// need to emit real markup (e.g. an <iframe> demo embed) that must NOT be
+// escaped. There is no sanitization here by design: the caller owns trust.
+// A consumer rendering untrusted content must not route it through this
+// path — use markdown.js's DOMPurify-backed renderMarkdown for that instead.
 export function renderMarkdown(md) {
     const lines = String(md || '').split('\n');
     const out = [];
-    let inCode = false, inList = false;
+    let inCode = false, inList = false, inRawHtml = false;
     for (const line of lines) {
-        if (line.startsWith('```')) { if (inCode) { out.push('</pre>'); inCode = false; } else { out.push('<pre>'); inCode = true; } continue; }
+        if (line.trim() === '```html') { if (!inCode) { inRawHtml = true; continue; } }
+        if (line.startsWith('```')) {
+            if (inRawHtml) { inRawHtml = false; continue; }
+            if (inCode) { out.push('</pre>'); inCode = false; } else { out.push('<pre>'); inCode = true; }
+            continue;
+        }
+        if (inRawHtml) { out.push(line); continue; }
         if (inCode) { out.push(escape(line)); continue; }
         if (line.startsWith('# ')) { const t = line.slice(2); out.push(`<h1 id="${slugify(t)}">${escape(t)}</h1>`); }
         else if (line.startsWith('## ')) { const t = line.slice(3); out.push(`<h2 id="${slugify(t)}">${escape(t)}</h2>`); }