forma-ir

FMIR binary format parser, walker, and HTML generator for the Forma Stack. Parses compiled component IR and generates server-rendered HTML with hydration markers — no JavaScript runtime needed.

Install

[dependencies]
forma-ir = "0.1"

What It Does

• Parses .ir binary files (FMIR format) into a validated IrModule
• Walks the opcode stream and generates HTML with proper escaping
• Fills dynamic values (text, attributes, conditionals, lists) from typed SlotData
• Emits hydration markers (<!--f:t0-->, <!--f:s0-->, etc.) for FormaJS client-side hydration
• Compiles to WASM for client-side island re-renders

Quick Start

use forma_ir::{IrModule, SlotData, walker};

// Parse a compiled .ir binary
let module = IrModule::parse(&ir_bytes)?;

// Fill slots with runtime data
let slots = SlotData::from_json(r#"{"count": 42}"#, &module)?;

// Generate HTML
let html = walker::walk_to_html(&module, &slots)?;

When You Need This

• Building your own server (not Axum) — parse IR and generate HTML yourself
• Client-side WASM — re-render islands in the browser without a server round-trip
• Build tools — inspect, transform, or generate IR files

If you're using Axum, use forma-server instead — it wraps forma-ir with page rendering, asset serving, and CSP headers.

Security

• All dynamic text and attributes are HTML-escaped
• Recursion depth limited to 64 (prevents stack overflow from malicious IR)
• List nesting limited to 4 levels
• Comment content escaped (-- → --)
• Script tag props escaped (</script> → <\/script>)
• Zero unsafe blocks
• 126 tests including XSS payload verification

Part of the Forma Stack

Frontend (TypeScript)

Backend (Rust)

Full Framework

License

MIT