fix(extractor): preserve JavaScript semantics and eliminate redundant arrow wrappers

.changepacks/changepack_log_constant_read_work.json

@@ -0,0 +1,7 @@
+{
+  "changes": {
+    "bindings/devup-ui-wasm/package.json": "Patch"
+  },
+  "note": "Avoid cloning unreferenced constant initializers and defer initialization analysis until constant reads need it. Extraction output and build errors are unchanged.",
+  "date": "2026-10-24T00:00:00.000Z"
+}

.changepacks/changepack_log_extraction_coverage.json

@@ -0,0 +1,7 @@
+{
+  "changes": {
+    "bindings/devup-ui-wasm/package.json": "Patch"
+  },
+  "note": "Add regression coverage for extraction safety, property pruning and source-order behavior; remove unreachable post-flatten spread handling and consolidate unknown property-shape rejection. Extraction output and build errors are unchanged.",
+  "date": "2026-10-24T00:00:00.000Z"
+}

.changepacks/changepack_log_js_semantics.json

@@ -0,0 +1,9 @@
+{
+  "changes": {
+    "bindings/devup-ui-wasm/package.json": "Patch",
+    "packages/components/package.json": "Patch",
+    "packages/reset-css/package.json": "Patch"
+  },
+  "note": "Keep unknown element-prop spreads wholly as native pass-through data: their keys never select, replace or remove separately authored styles, regardless of order. Preserve fully known ordinary spread composition, canonical aliases, source-ordered once-only values and native className/style merging without spread-key styling variables, fallbacks or conversion code. Preserve exact imported enum and Math values including negative zero, lexical constants, binding-aware CommonJS require, React createElement calls, type-only imports, and compiled reset CSS tests. Retain located errors for intrinsically unreadable explicit styles, runtime styleOrder, unmovable lazy logical suspension, whole Devup UI namespaces escaping to runtime, and immediate lexical temporal-dead-zone reads. Native Emotion css spread restrictions and separate styled css overlap restrictions remain unchanged. Inline eager styled render stages, attrs merges and destructuring carriers into their existing render scope, and reuse scoped captures for CSS composition and StyleX units. Preserve per-instance dynamic component targets, parameter environments, getter and iterator effects, function names and call receivers while removing unnecessary generated arrow functions.",
+  "date": "2026-10-01T00:00:00.000Z"
+}

.changepacks/changepack_log_jsx_call_spread.json

@@ -0,0 +1,7 @@
+{
+  "changes": {
+    "bindings/devup-ui-wasm/package.json": "Patch"
+  },
+  "note": "Attach extracted classes and authored CSS variables to jsx, jsxs and jsxDEV props wrapped in parentheses, as const or satisfies. Preserve source evaluation order, responsive and conditional styleOrder output, native className/style merging and whole unknown-spread pass-through. Syntax wrappers do not introduce spread replacement diagnostics or a styling runtime.",
+  "date": "2026-10-12T00:00:00.000Z"
+}

.changepacks/changepack_log_refresh_dependencies_20261102.json

@@ -0,0 +1,12 @@
+{
+  "changes": {
+    "bindings/devup-ui-wasm/package.json": "Patch",
+    "packages/components/package.json": "Patch",
+    "packages/eslint-plugin/package.json": "Patch",
+    "packages/react/package.json": "Patch",
+    "packages/rsbuild-plugin/package.json": "Patch",
+    "packages/vite-plugin/package.json": "Patch"
+  },
+  "note": "Refresh dependencies, including Oxc 0.156, wasm-bindgen 0.2.130, parse5 8.1 and Rsbuild 2.3. Preserve the React 18 compatibility fixture while updating its build tooling.",
+  "date": "2026-11-02T00:00:00.000Z"
+}

.github/workflows/publish.yml

@@ -106,138 +106,6 @@ jobs:
       - name: Compare the Devup UI rows with the baseline
         run: bun benchmark-check.js
 
-  wasm-size:
-    runs-on: ubuntu-latest
-    timeout-minutes: 60
-    permissions:
-      contents: read
-    env:
-      CARGO_BUILD_JOBS: "2"
-      RUSTUP_TOOLCHAIN: stable
-    steps:
-      - name: Checkout the tested source and both histories
-        uses: actions/checkout@v7
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-      - uses: actions-rust-lang/setup-rust-toolchain@v2
-        with:
-          toolchain: stable
-          target: wasm32-unknown-unknown
-          cache: false
-      - uses: oven-sh/setup-bun@v2
-        with:
-          bun-version: latest
-      - uses: actions/setup-node@v7
-        with:
-          node-version: '*'
-          check-latest: true
-      - name: Resolve and report exact WASM comparison sources
-        run: node resolve-wasm-size-sources.js
-      - *install-wasm-pack
-      - name: Cache registry downloads only
-        uses: actions/cache@v6
-        with:
-          path: |
-            ~/.cargo/registry/index/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-          key: cargo-wasm-size-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
-      - name: Install the latest shared optimizer once
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          mkdir -p "$RUNNER_TEMP/wasm-size-tools/binaryen"
-          gh release download --repo WebAssembly/binaryen --pattern '*-x86_64-linux.tar.gz' --dir "$RUNNER_TEMP/wasm-size-tools"
-          tar -xzf "$RUNNER_TEMP"/wasm-size-tools/*.tar.gz --strip-components=1 -C "$RUNNER_TEMP/wasm-size-tools/binaryen"
-          echo "$RUNNER_TEMP/wasm-size-tools/binaryen/bin" >> "$GITHUB_PATH"
-      - name: Build exact sources with shared tools and lock-matched bindgen
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          set -euo pipefail
-          export SIZE_ROOT="$RUNNER_TEMP/wasm-size"
-          mkdir -p "$SIZE_ROOT"
-          stage=source
-          trap 'echo "## WASM size: FAIL - $stage build or provenance failed; no comparison was skipped or substituted." >> "$GITHUB_STEP_SUMMARY"' ERR
-          for side in base candidate; do
-            if [[ "$side" == base ]]; then sha="$BASE_SHA"; else sha="$CANDIDATE_SHA"; fi
-            git cat-file -e "$sha^{commit}"
-            mkdir -p "$SIZE_ROOT/$side"
-            git archive "$sha" | tar -x -C "$SIZE_ROOT/$side"
-          done
-          cat > "$SIZE_ROOT/provenance.mjs" <<'NODE'
-          import { execFileSync } from 'node:child_process'
-          import { createHash } from 'node:crypto'
-          import { readFileSync, writeFileSync } from 'node:fs'
-          import { join } from 'node:path'
-          const run = (command, args) => execFileSync(command, args, { encoding: 'utf8' }).trim()
-          const tools = Object.fromEntries([
-            ['rustc', 'rustc', ['--version', '--verbose']],
-            ['wasmPack', 'wasm-pack', ['--version']],
-            ['wasmBindgen', 'wasm-bindgen', ['--version']],
-            ['wasmOpt', 'wasm-opt', ['--version']],
-            ['bun', 'bun', ['--version']],
-            ['node', 'node', ['--version']],
-          ].map(([key, command, args]) => {
-            const path = run('which', [command])
-            const hash = createHash('sha256').update(readFileSync(path)).digest('hex')
-            return [key, `${run(command, args)}\n${path}\nsha256:${hash}`]
-          }))
-          const side = process.argv[2]
-          const file = join(process.env.SIZE_ROOT, 'metadata.json')
-          const metadata = side === 'base' ? {
-            jobId: `${process.env.GITHUB_RUN_ID}/${process.env.GITHUB_RUN_ATTEMPT}/${process.env.GITHUB_JOB}`,
-            buildCommand: 'cargo metadata --locked --format-version 1 > /dev/null && wasm-pack build --mode no-install --release --target nodejs --out-dir ./pkg --out-name index --locked && node script.js',
-          } : JSON.parse(readFileSync(file, 'utf8'))
-          const sha = side === 'base' ? process.env.BASE_SHA : process.env.CANDIDATE_SHA
-          metadata[side] = {
-            commit: run('git', ['rev-parse', `${sha}^{commit}`]),
-            tree: run('git', ['rev-parse', `${sha}^{tree}`]),
-            wasmBindgenVersion: process.env.WASM_BINDGEN_VERSION,
-            packageDir: join(process.env.SIZE_ROOT, side, 'bindings/devup-ui-wasm/pkg'), tools,
-          }
-          writeFileSync(file, JSON.stringify(metadata, null, 2) + '\n')
-          NODE
-          shared_path="$PATH"
-          for side in base candidate; do
-            stage="$side"
-            (
-              WASM_BINDGEN_VERSION="$(bun resolve-wasm-bindgen.js "$SIZE_ROOT/$side/Cargo.lock")"
-              export WASM_BINDGEN_VERSION
-              bindgen_root="$SIZE_ROOT/abi-tools/$WASM_BINDGEN_VERSION"
-              if [[ ! -x "$bindgen_root/bin/wasm-bindgen" ]]; then
-                cargo binstall wasm-bindgen-cli --version "=$WASM_BINDGEN_VERSION" --root "$bindgen_root" --no-confirm --force
-              fi
-              export PATH="$bindgen_root/bin:$shared_path"
-              node "$SIZE_ROOT/provenance.mjs" "$side"
-              cd "$SIZE_ROOT/$side/bindings/devup-ui-wasm"
-              export CARGO_TARGET_DIR="$SIZE_ROOT/$side-target"
-              cargo metadata --locked --format-version 1 > /dev/null
-              wasm-pack build --mode no-install --release --target nodejs --out-dir ./pkg --out-name index --locked
-              node script.js
-            ) 2>&1 | tee "$SIZE_ROOT/$side-build.log"
-          done
-      - name: Compare all four relative size metrics
-        run: |
-          node verify-wasm-size.js \
-            --base-pkg "$RUNNER_TEMP/wasm-size/base/bindings/devup-ui-wasm/pkg" \
-            --candidate-pkg "$RUNNER_TEMP/wasm-size/candidate/bindings/devup-ui-wasm/pkg" \
-            --metadata "$RUNNER_TEMP/wasm-size/metadata.json" \
-            --report "$RUNNER_TEMP/wasm-size/wasm-size.json"
-      - name: Upload size measurements and build evidence
-        uses: actions/upload-artifact@v7
-        if: ${{ !cancelled() }}
-        with:
-          name: wasm-size
-          path: |
-            ${{ runner.temp }}/wasm-size/metadata.json
-            ${{ runner.temp }}/wasm-size/wasm-size.json
-            ${{ runner.temp }}/wasm-size/*-build.log
-          if-no-files-found: error
-          retention-days: 30
-
   # The landing app is the only real-scale acceptance target in this repo, and
   # `publish` runs it against the deployed vinext/@devup-ui/vite-plugin build.
   # This job runs the SAME 128 assertions and the SAME screenshot baselines

.gitignore

@@ -25,6 +25,5 @@ playwright-report
 .omo
 /.changepacks/publish.tgz
 benchmark-run.json
-wasm-size.json
 release-results.json
 release-package-build.json