velox-sfc 0.1.2

use crate::component_resolver::ComponentResolver;
use crate::script_index::{
    PropField, StateMethod, extract_state_methods, method_names, resolve_method_name,
};
use crate::template_ast::{AttrKind, Node, TemplateAttr};
use crate::template_parse::is_all_ws;
use std::collections::{HashMap, HashSet};

/// Determines how identifiers are resolved in generated code.
#[derive(Debug, Clone, Copy, PartialEq)]
enum TransformMode {
    /// Wrap identifiers in `resolve()` calls — used by `render_with()`.
    Resolve,
    /// Reference `state.field.get()` directly — used by `render_with_state()`.
    State,
    /// Reference the component's own `Props` struct directly — used by
    /// `render_with_props()`, the entry point a parent calls to hand props to a
    /// child that has no persistent `State` field of its own.
    ///
    /// It differs from [`TransformMode::Resolve`] at exactly one place, the
    /// `v-for` collection: a collection that names a declared `Props` field is
    /// read off that field and the loop item becomes a real Rust binding, so the
    /// body reads the item directly instead of asking the resolver for a
    /// runtime-formatted key. Every other read is a `resolve(...)` lookup, the
    /// same one `render_with` makes, because `render_with_props` hands this
    /// renderer's body a closure that answers from the props first and the
    /// child's `State` getters second.
    Props,
}

/// Parsed v-for directive information.
#[allow(dead_code)]
struct VForInfo {
    /// The item variable name (e.g., "item" from `item in items` or `(item, index) in items`)
    item_name: String,
    /// The index variable name (e.g., "index" from `(item, index) in items`), defaults to "__idx"
    index_name: String,
    /// The collection expression (e.g., "items" from `item in items`)
    expr: String,
    /// Whether destructuring was used: `(item, index) in items`
    has_destructuring: bool,
}

/// Parse a v-for directive value like `item in items` or `(item, index) in items`.
fn parse_v_for(value: &str) -> Option<VForInfo> {
    let idx = value.find(" in ")?;
    let left = value[..idx].trim();
    let expr = value[idx + 4..].trim();

    if expr.is_empty() {
        return None;
    }

    let (item_name, index_name, has_destructuring) = if left.starts_with('(') && left.ends_with(')')
    {
        let inner = &left[1..left.len() - 1];
        let parts: Vec<&str> = inner.split(',').map(|s| s.trim()).collect();
        let item = if parts.is_empty() || parts[0].is_empty() {
            "__item".to_string()
        } else {
            parts[0].to_string()
        };
        let idx = if parts.len() >= 2 && !parts[1].is_empty() {
            parts[1].to_string()
        } else {
            "__idx".to_string()
        };
        (item, idx, true)
    } else if left.is_empty() {
        ("__item".to_string(), "__idx".to_string(), false)
    } else {
        (left.to_string(), "__idx".to_string(), false)
    };

    Some(VForInfo {
        item_name,
        index_name,
        expr: expr.to_string(),
        has_destructuring,
    })
}

/// The resolver key a `:key` attribute contributes in the Resolve-mode `v-for`
/// body.
///
/// Nothing has rewritten the attribute value before it reaches the emit site, so
/// it is normalized here exactly once: surrounding whitespace is dropped and the
/// documented `{{ … }}` spelling is unwrapped to the bare expression it contains.
/// The result is emitted as a single `resolve("…")` lookup — the same shape the
/// sibling `v-for` branch uses for its collection (`let __for_expr =
/// resolve("items");`) — so the expression is interpolated exactly once and the
/// generated code compiles.
fn resolve_key_expr(key_val: &str) -> String {
    let trimmed = key_val.trim();
    let unwrapped = trimmed
        .strip_prefix("{{")
        .and_then(|rest| rest.strip_suffix("}}"))
        .map(str::trim)
        .filter(|expr| !expr.is_empty());
    unwrapped.unwrap_or(trimmed).to_string()
}

/// The Resolve-mode read of an expression rooted at a `v-for` loop variable.
///
/// The Resolve-mode loop body iterates an index over the collection string, so
/// the loop item is *not* a Rust binding there: it is read the same way the same
/// body already reads an interpolated `{ todo.text }` — an indexed resolver
/// lookup. The loop index is a real binding and is read directly.
///
/// Returns `None` for anything this cannot read (a compound expression such as
/// `todo.a + todo.b`), so the caller keeps the plain resolver lookup and the
/// diagnostic still reports the binding rather than leaving it silently empty.
fn resolve_loop_item_expr(expr: &str, for_info: &VForInfo) -> Option<String> {
    let expr = expr.trim();
    if expr == for_info.index_name {
        // The loop index *is* a real binding in this body.
        return Some(for_info.index_name.clone());
    }
    if expr == for_info.item_name {
        return Some(format!(
            r#"resolve(&format!("{}[{{}}]", {idx}))"#,
            for_info.expr,
            idx = for_info.index_name
        ));
    }
    if let Some(path) = expr.strip_prefix(&for_info.item_name)
        && let Some(path) = path.strip_prefix('.')
        && is_field_path(path)
    {
        return Some(format!(
            r#"resolve(&format!("{}[{{}}].{path}", {idx}))"#,
            for_info.expr,
            idx = for_info.index_name
        ));
    }
    None
}

/// Whether `s` is a plain field path — dot-separated Rust identifiers, and
/// nothing else. It keeps a compound expression such as `todo.a + todo.b` out of
/// the indexed-resolver rewrite, where only the field path is rewritable.
fn is_field_path(s: &str) -> bool {
    !s.is_empty()
        && s.split('.').all(|seg| {
            let mut chars = seg.chars();
            matches!(chars.next(), Some(c) if c.is_ascii_alphabetic() || c == '_')
                && chars.all(is_ident_char)
        })
}

/// The `String` value a Resolve-mode `v-for` element's `:key` is set from.
///
/// `make_resolve` is built once, outside every loop, so a key rooted at the loop
/// variable has no arm to answer it there. It is read the way the same loop body
/// reads an interpolated loop value instead; a key the loop cannot read that way
/// keeps the resolver lookup, which the diagnostic reports.
fn resolve_mode_key_value(key_val: &str, for_info: &VForInfo) -> String {
    let authored = resolve_key_expr(key_val);
    match resolve_loop_item_expr(&authored, for_info) {
        Some(indexed) => format!("{indexed}.to_string()"),
        None => format!("resolve({}).to_string()", string_lit(&authored)),
    }
}

/// The bool a resolver-backed condition evaluates to, using the same truthiness
/// a non-loop condition gets from `rewrite_if_expr`. The ONE notion of it, for
/// both call sites.
///
/// A loop item read in the Resolve renderer is a `String` from the resolver, not
/// a `bool`, so it needs this test in an `if` position exactly as a resolver-backed
/// condition does.
///
/// A resolver answer is a formatted value, so an operand that is a NUMBER arrives
/// as its digits: `0` and `0.0` are not empty and are not `"false"`, so a test on
/// emptiness alone would read them as TRUTHY — silently, and in the same way an
/// empty string would have been silently falsy before an operand was registered at
/// all. A value that parses as a number is therefore compared numerically, and only
/// a value that is not a number is judged as text: `"true"`, and anything else that
/// is not empty and not `"false"`. So `"abc"` is truthy, and so is a name.
fn resolver_truthiness(read: &str) -> String {
    format!(
        r#"{{ let __v = {read}; __v == "true" || match __v.trim().parse::<f64>() {{ Ok(__n) => __n != 0.0, Err(_) => !__v.is_empty() && __v != "false" }} }}"#
    )
}

/// Validate the parsed template AST and collect structural errors.
/// Returns a list of error/warning messages (empty if the template is valid).
fn validate_template(nodes: &[Node]) -> Vec<String> {
    let mut errors: Vec<String> = Vec::new();

    // 1. Multiple root template nodes
    // A well-formed SFC template should have exactly one root element.
    // (Whitespace-only text nodes are already trimmed by the parser, so
    //  any remaining root nodes are real elements.)
    let root_elements: Vec<&Node> = nodes
        .iter()
        .filter(|n| matches!(n, Node::Element { .. }))
        .collect();
    if root_elements.len() > 1 {
        let tags: Vec<String> = root_elements
            .iter()
            .filter_map(|n| match n {
                Node::Element { tag, .. } => Some(tag.clone()),
                _ => None,
            })
            .collect();
        errors.push(format!(
            "template has multiple root elements: <{}> — a valid SFC template must have exactly one root element",
            tags.join(", ")
        ));
    }

    // 2. Stray v-else / v-else-if without preceding v-if
    // Walk the tree checking that every v-else or v-else-if is immediately
    // preceded by a sibling with v-if or v-else-if (part of a valid chain).
    fn check_stray_else(nodes: &[Node], errors: &mut Vec<String>) {
        for i in 0..nodes.len() {
            if let Node::Element { attrs, tag, .. } = &nodes[i]
                && let Some(dir) = attrs.iter().find(|a| {
                    matches!(a.kind, AttrKind::Directive)
                        && (a.name == "else" || a.name == "else-if" || a.name == "elseif")
                })
            {
                // Check that the nearest preceding element sibling has
                // v-if or v-else-if (i.e., is part of a conditional chain).
                let has_valid_preceding = if i > 0 {
                    // Walk backwards to find the nearest element sibling
                    // (text nodes between v-if and v-else are valid in Vue)
                    let mut found = false;
                    for j in (0..i).rev() {
                        if let Node::Element {
                            attrs: prev_attrs, ..
                        } = &nodes[j]
                        {
                            found = prev_attrs.iter().any(|a| {
                                matches!(a.kind, AttrKind::Directive)
                                    && (a.name == "if" || a.name == "else-if" || a.name == "elseif")
                            });
                            break;
                        }
                    }
                    found
                } else {
                    false
                };

                if !has_valid_preceding {
                    errors.push(format!(
                            "stray v-{} on <{}> without a preceding v-if — v-else/v-else-if must follow an element with v-if",
                            dir.name, tag
                        ));
                }
            }
            // Recurse into children
            if let Node::Element { children, .. } = &nodes[i] {
                check_stray_else(children, errors);
            }
        }
    }
    check_stray_else(nodes, &mut errors);

    errors
}

/// Which renderer a compiled component is expected to be rendered through.
///
/// A generated module always exposes both entry points, so this is not a
/// codegen switch: it records which one the consumer calls, which decides
/// whether an unresolvable template binding is worth reporting.
#[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
pub enum RenderMode {
    /// The component is rendered through `render_with_state`, which reads
    /// `Signal`/`Ref` fields and `v-for` loop items directly from the persistent
    /// `State`. This is what `veloxc` and every generated `main.rs` use.
    #[default]
    State,
    /// The component is rendered through `render_with`/`render_with_props`,
    /// which can only see strings a resolver closure supplies. A binding rooted
    /// at a `v-for` loop item cannot resolve there, so it is reported.
    Resolve,
}

/// Compile a `<template>` with no script indexing or cross-component handlers.
/// Convenience wrapper used by tests and single-file compilation.
pub fn compile_template_to_rs(
    template_src: &str,
    component_name: &str,
    resolver: Option<&mut ComponentResolver>,
) -> Result<String, String> {
    compile_template_to_rs_full(template_src, component_name, resolver, None, None)
}

/// Full public API: compile `<template>` string to a Rust module body with `render()`.
///
/// The component is assumed to be rendered in [`RenderMode::State`]; use
/// [`compile_template_to_rs_full_with_mode`] for a resolver-only consumer.
///
/// `script_setup` is the raw `<script setup>` block (if any); it is indexed so
/// template keys can be resolved to the actual State method names and component
/// tags can be matched to persistent child-state fields.
///
/// `scope_id` is the optional CSS scope attribute (e.g. `"data-v-abc123"`) that
/// should be added to every rendered element so scoped CSS selectors match.
///
/// When a `resolver` is provided, handlers are collected across the component
/// tree so the root dispatcher can route child-component events to the owning
/// persistent State field.
pub fn compile_template_to_rs_full(
    template_src: &str,
    component_name: &str,
    resolver: Option<&mut ComponentResolver>,
    script_setup: Option<&str>,
    scope_id: Option<&str>,
) -> Result<String, String> {
    compile_template_to_rs_full_with_mode(
        template_src,
        component_name,
        resolver,
        script_setup,
        scope_id,
        RenderMode::State,
    )
}

/// [`compile_template_to_rs_full`] with the renderer's mode, which decides
/// whether a binding the resolver cannot satisfy is reported: a `v-for`
/// loop-rooted binding renders correctly in [`RenderMode::State`] and is only
/// reported for [`RenderMode::Resolve`]. The generated module is identical in
/// both modes — only the diagnostics differ.
pub fn compile_template_to_rs_full_with_mode(
    template_src: &str,
    _component_name: &str,
    mut resolver: Option<&mut ComponentResolver>,
    script_setup: Option<&str>,
    scope_id: Option<&str>,
    mode: RenderMode,
) -> Result<String, String> {
    let nodes = crate::template_parse::parse_template_to_ast(template_src)?;

    // Validate template structure before codegen.
    let validation_errors = validate_template(&nodes);
    if !validation_errors.is_empty() {
        return Err(validation_errors.join("\n"));
    }

    // Surface `unknown component` warnings here: pure template parsing is
    // component-agnostic, but this is the point where the SFC's registered
    // component names are known — via the resolver (imports parsed from
    // `<script setup>` by the caller) and/or the raw `<script setup>` block.
    // Must run before `transform_components` renames known component tags.
    {
        let mut known: Vec<String> = Vec::new();
        if let Some(resolver) = &resolver {
            known.extend(resolver.component_names());
        }
        if let Some(script_setup) = script_setup {
            let mut scratch = ComponentResolver::new(std::path::PathBuf::from("."));
            scratch.parse_imports(script_setup);
            for name in scratch.component_names() {
                if !known.contains(&name) {
                    known.push(name);
                }
            }
        }
        let known_refs: Vec<&str> = known.iter().map(String::as_str).collect();
        for warning in
            crate::template_parse::unknown_component_warnings(&nodes, &known_refs, template_src)
        {
            eprintln!("velox: warning: {warning}");
        }
    }

    // For MVP, assume a single root node.
    let mut nodes = nodes;

    // Index the script block so codegen can resolve template keys to the real
    // State method names and match component tags to persistent state fields.
    let methods = script_setup.map(extract_state_methods).unwrap_or_default();
    let fields = script_setup
        .map(crate::script_index::extract_state_fields)
        .unwrap_or_default();

    // Transform components if resolver is provided.
    if let Some(resolver) = &mut resolver {
        super::component_resolver::transform_components(&mut nodes, resolver);
    }

    // Collect handlers from the whole component tree so the dispatcher can route
    // child-component events to the owning persistent State field.
    let tree_handlers = if let Some(resolver) = &mut resolver {
        collect_component_tree_handlers(&nodes, resolver, &fields)
    } else {
        Vec::new()
    };

    if nodes.is_empty() {
        return Ok(empty_component_module());
    }

    // The typed channel across the component boundary. The component's own
    // `Props` struct is what a parent now builds, so its declared fields — with
    // the types it declared them with — are what codegen needs to know.
    let props_fields = script_setup
        .map(crate::script_index::extract_props_fields)
        .unwrap_or_default();
    // A `State` that carries a `props` field owns the props it is handed, so
    // assigning is what makes `self.props.x` mean something inside the child's
    // own methods. Without that field there is nothing to assign to, and the
    // props are read straight off the parameter.
    let props_root = if !props_fields.is_empty() && fields.iter().any(|f| f == "props") {
        "state.props"
    } else {
        "props"
    };
    let child_props = collect_child_props_fields(&nodes, resolver);
    let props = PropsChannel {
        fields: &props_fields,
        root: props_root,
        state_fields: &fields,
        children: &child_props,
    };

    // For MVP, assume a single root node.
    let root = &nodes[0];
    let body_with = emit_node_with(root, &fields, &props, scope_id);
    let body_with_state = emit_node_with_state(root, &fields, &props, scope_id);

    let mut out = format!(
        r#"pub fn render() -> velox_dom::VNode {{
    render_with(|_| String::new())
}}

pub fn render_with<F>(mut resolve: F) -> velox_dom::VNode where F: FnMut(&str) -> String {{
    use velox_dom::*;
    {body_with}
}}"#,
        body_with = body_with
    );

    // render_with_state accepts a `state: Arc<script_rs::State>`; the param is
    // named `state` so v-for/component codegen can read `state.{field}`.
    out.push_str("\n\n");
    out.push_str(&format!(
        r#"#[allow(clippy::arc_with_non_send_sync)]
#[allow(unused_variables)]
pub fn render_with_state<F>(state: std::sync::Arc<script_rs::State>, mut resolve: F) -> velox_dom::VNode where F: FnMut(&str) -> String {{
    use velox_dom::*;
    {body_with_state}
}}"#,
        body_with_state = body_with_state
    ));

    // make_resolve: maps every key the render path looks up through `resolve()`
    // (interpolations and bound-attribute expressions) to State getters so
    // main.rs does not hand-write a resolve closure. Supports both bare
    // (`title()`) and prefixed (`get_title()`) getter conventions.
    let resolver_keys = collect_resolver_keys(&nodes, &methods, &fields, mode, &props);
    for warning in &resolver_keys.warnings {
        eprintln!("velox: warning: {warning}");
    }
    // A `v-for` whose collection nothing can supply renders as a loop that
    // never runs, which is the one silent defect here with no visible trace in
    // the output — so it refuses rather than reports. Every refusal is listed,
    // not just the first: they are independent mistakes in independent
    // templates-as-authored, and an author fixing one loop and hitting the
    // next one one build at a time is a worse experience than a longer message.
    // `join` is the same shape [`validate_template`] failures take a few lines
    // above, so this is the crate's existing fatal convention, not a new one.
    if !resolver_keys.errors.is_empty() {
        return Err(resolver_keys.errors.join("\n"));
    }
    out.push_str("\n\n");
    out.push_str(&generate_make_resolve(
        &resolver_keys.keys,
        &methods,
        &fields,
    ));

    // make_on_event: dispatch every template handler (plus, for the root, every
    // handler anywhere in the component tree) to the owning State method.
    //
    // A function-typed prop contributes a handler here too. The child calls
    // through a closure rather than through `emit`, but the method the closure
    // re-enters is still this component's, so the arm has to exist — and the
    // arity it dispatches with is read off the method declaration here rather
    // than assumed at the call site, which is what lets one binding serve both
    // a zero-argument handler and a payload handler.
    let mut handlers = collect_handlers(&nodes);
    for handler in collect_function_prop_handlers(&nodes, &props) {
        if !handlers.contains(&handler) {
            handlers.push(handler);
        }
    }
    out.push_str("\n\n");
    out.push_str(&generate_make_on_event(&handlers, &tree_handlers, &methods));

    // render_with_props: for presentational child components. Props take
    // priority; interpolations fall back to State getters.
    out.push_str("\n\n");
    out.push_str(&generate_render_with_props(
        &resolver_keys.keys,
        &methods,
        &fields,
        &props,
        root,
        scope_id,
        script_setup.is_some(),
    ));

    Ok(out)
}

fn collect_handlers(nodes: &[Node]) -> Vec<String> {
    let mut set: HashSet<String> = HashSet::new();
    // The `v-for` loop variables in scope, outermost first. A `v-model` rooted
    // at one of them has no setter to dispatch to — see
    // `vmodel_is_loop_rooted` — and `extract_vmodel` emits no handler for it, so
    // neither can the dispatcher.
    fn walk(n: &Node, set: &mut HashSet<String>, loop_vars: &mut Vec<(String, String)>) {
        if let Node::Element {
            attrs, children, ..
        } = n
        {
            if let Some(info) = v_for_scope(attrs) {
                loop_vars.push((info.item_name.clone(), info.index_name.clone()));
            }
            let (item_name, idx_name) = loop_vars.last().map_or((None, None), |(item, idx)| {
                (Some(item.as_str()), Some(idx.as_str()))
            });
            for a in attrs {
                if let AttrKind::On = a.kind
                    && let Some(v) = &a.value
                {
                    // Parse event modifiers: @click.stop, @click.prevent, etc.
                    let (base_event, modifier) = parse_event_modifier(v);
                    let handler_key = if let Some(m) = modifier {
                        format!("{}.{}", base_event, m)
                    } else {
                        base_event.clone()
                    };
                    set.insert(handler_key);
                }
                // Collect v-model handlers: v-model="field" → __vmodel_set_field
                if matches!(a.kind, AttrKind::Directive)
                    && a.name == "model"
                    && let Some(ref expr) = a.value
                    && !vmodel_is_loop_rooted(expr, item_name, idx_name)
                {
                    set.insert(vmodel_setter_name(expr));
                }
            }
            for c in children {
                walk(c, set, loop_vars);
            }
            if v_for_scope(attrs).is_some() {
                loop_vars.pop();
            }
        }
    }
    let mut loop_vars: Vec<(String, String)> = Vec::new();
    for n in nodes {
        walk(n, &mut set, &mut loop_vars);
    }
    let mut v: Vec<String> = set.into_iter().collect();
    v.sort();
    v
}

/// Parse an event handler string into (base_event, modifier).
/// e.g., "click.stop" → ("click", Some("stop"))
/// e.g., "click" → ("click", None)
fn parse_event_modifier(handler: &str) -> (String, Option<String>) {
    let parts: Vec<&str> = handler.split('.').collect();
    if parts.len() >= 2 {
        // Check if the last part is a known modifier
        let modifier = parts[parts.len() - 1].to_string();
        let known_modifiers = ["stop", "prevent", "once", "capture", "self"];
        if known_modifiers.iter().any(|&m| m == modifier) {
            let base: String = parts[..parts.len() - 1].join(".");
            (base, Some(modifier))
        } else {
            // Not a known modifier, treat as regular handler
            (handler.to_string(), None)
        }
    } else {
        (handler.to_string(), None)
    }
}

/// Collect every `@event` handler across the component tree, attributing each to
/// the nearest persistent State field (the field on this component's State that
/// matches the lowercased component tag). Used to build the root dispatcher so
/// child-component events route to `state.{owner}.{method}`.
fn collect_component_tree_handlers(
    nodes: &[Node],
    resolver: &mut ComponentResolver,
    fields: &[String],
) -> Vec<crate::script_index::TreeHandler> {
    let mut out = Vec::new();
    let mut seen: HashSet<String> = HashSet::new();
    collect_tree_handlers_inner(nodes, resolver, fields, None, None, &mut out, &mut seen);
    out
}

#[allow(clippy::too_many_arguments)]
fn collect_tree_handlers_inner(
    nodes: &[Node],
    resolver: &mut ComponentResolver,
    fields: &[String],
    owner: Option<&str>,
    owner_methods: Option<&[StateMethod]>,
    out: &mut Vec<crate::script_index::TreeHandler>,
    seen: &mut HashSet<String>,
) {
    for n in nodes {
        let Node::Element {
            attrs, children, ..
        } = n
        else {
            continue;
        };

        // Local @event handlers on this element.
        for a in attrs {
            if let AttrKind::On = a.kind
                && let Some(v) = &a.value
            {
                let takes_payload = owner_methods
                    .map(|ms| ms.iter().any(|m| m.name == *v && m.takes_payload))
                    .unwrap_or(false);
                out.push(crate::script_index::TreeHandler {
                    name: v.clone(),
                    owner: owner.map(String::from),
                    takes_payload,
                });
            }
        }

        // Component element: descend into its template.
        if let Some(comp_attr) = attrs
            .iter()
            .find(|a| a.name == "data-velox-component" && a.kind == AttrKind::Static)
            && let Some(comp_name) = &comp_attr.value
        {
            let field = comp_name.to_lowercase();
            let becomes_owner = owner.is_none() && fields.contains(&field);
            let child_owner: Option<String> = if becomes_owner {
                Some(field)
            } else {
                owner.map(String::from)
            };

            if seen.insert(comp_name.clone())
                && let Ok(sfc) = resolver.load_component(comp_name)
            {
                // Clone content so `sfc`'s borrow ends before recursing.
                let child_script = sfc.script_setup.as_ref().map(|b| b.content.clone());
                let child_tpl = sfc.template.as_ref().map(|t| t.content.clone());

                // When this component becomes the owner, its State methods tell us
                // which handlers take a payload. Otherwise inherit the owner's.
                let subtree_methods = if becomes_owner {
                    child_script.as_deref().map(extract_state_methods)
                } else {
                    None
                };
                let child_methods: Option<&[StateMethod]> = if becomes_owner {
                    subtree_methods.as_deref()
                } else {
                    owner_methods
                };

                if let Some(tpl) = child_tpl
                    && let Ok(child_nodes) = crate::template_parse::parse_template_to_ast(&tpl)
                {
                    collect_tree_handlers_inner(
                        &child_nodes,
                        resolver,
                        fields,
                        child_owner.as_deref(),
                        child_methods,
                        out,
                        seen,
                    );
                }
            }
        }

        // Recurse into plain element children.
        collect_tree_handlers_inner(children, resolver, fields, owner, owner_methods, out, seen);
    }
}

/// The `Props` fields every child component used in this template declares.
///
/// Keyed by the tag's local name, which is what the emitted struct literal is
/// qualified with (`{Comp}::PropsArg { .. }`). A child that declares no `Props`
/// struct contributes an empty list, and the literal a parent builds for it is
/// therefore the empty one — so binding anything to a child that declared no
/// props is a compile error, not a silently dropped attribute.
fn collect_child_props_fields(
    nodes: &[Node],
    resolver: Option<&mut ComponentResolver>,
) -> Vec<(String, Vec<PropField>)> {
    let Some(resolver) = resolver else {
        return Vec::new();
    };
    let mut out: Vec<(String, Vec<PropField>)> = Vec::new();
    let mut seen: HashSet<String> = HashSet::new();
    collect_child_props_fields_inner(nodes, resolver, &mut out, &mut seen);
    out
}

fn collect_child_props_fields_inner(
    nodes: &[Node],
    resolver: &mut ComponentResolver,
    out: &mut Vec<(String, Vec<PropField>)>,
    seen: &mut HashSet<String>,
) {
    for node in nodes {
        let Node::Element {
            attrs, children, ..
        } = node
        else {
            continue;
        };

        if let Some(comp_attr) = attrs
            .iter()
            .find(|a| a.name == "data-velox-component" && a.kind == AttrKind::Static)
            && let Some(comp_name) = &comp_attr.value
            && seen.insert(comp_name.clone())
            && let Ok(sfc) = resolver.load_component(comp_name)
        {
            let script = sfc.script_setup.as_ref().map(|b| b.content.clone());
            out.push((
                comp_name.clone(),
                script
                    .as_deref()
                    .map(crate::script_index::extract_props_fields)
                    .unwrap_or_default(),
            ));
        }

        collect_child_props_fields_inner(children, resolver, out, seen);
    }
}

fn generate_make_on_event(
    handlers: &[String],
    extra_handlers: &[crate::script_index::TreeHandler],
    methods: &[StateMethod],
) -> String {
    // Generate a dispatch helper that routes every template event to a State
    // method. v-model handlers (`__vmodel_set_*`) and methods declared with a
    // payload parameter receive the event payload; other handlers are zero-arg.
    // Handlers owned by a persistent child component state (`extra_handlers`)
    // route to `state.{owner}.{method}` instead of this component's State.
    // Event modifiers (`.stop`, `.prevent`, `.once`, `.capture`, `.self`) are
    // parsed from the handler name and the appropriate DOM method is called on
    // the payload event.
    let names = method_names(methods);
    let mut extra_by_name: HashMap<&str, &crate::script_index::TreeHandler> = HashMap::new();
    for eh in extra_handlers {
        extra_by_name.entry(&eh.name).or_insert(eh);
    }

    let mut arms = String::new();
    let mut used: HashSet<String> = HashSet::new();

    // Known event modifiers — reserved for future modifier codegen (currently inlined)
    let _modifier_handlers: HashMap<&str, &str> = [
        ("stop", "e.stop_propagation()"),
        ("prevent", "e.prevent_default()"),
        ("once", "// mark as handled once"),
        ("capture", "// capture phase handling"),
        ("self", "// only handle if event target is this element"),
    ]
    .iter()
    .cloned()
    .collect();

    for h in handlers {
        if h.starts_with("__vmodel_set_") {
            arms.push_str(&format!(
                "        \"{name}\" => {{ if let Some(p) = payload {{ state.{name}(p); }} }},\n",
                name = h
            ));
        } else if let Some(eh) = extra_by_name.get(h.as_str())
            && let Some(owner) = eh.owner.as_deref()
        {
            // Handler owned by a persistent child component state field.
            if eh.takes_payload {
                arms.push_str(&format!(
                    "        \"{name}\" => {{ if let Some(p) = payload {{ state.{owner}.{method}(p); }} }},\n",
                    name = h, owner = owner, method = eh.name
                ));
            } else {
                arms.push_str(&format!(
                    "        \"{name}\" => {{ state.{owner}.{method}(); }},\n",
                    name = h,
                    owner = owner,
                    method = eh.name
                ));
            }
        } else {
            // Local handler on this component's State.
            // Parse event modifiers from the handler name (e.g., "click.stop")
            let (base_event, modifier) = parse_event_modifier(h);
            let method = resolve_method_name(&names, &base_event);
            let takes_payload = methods.iter().any(|m| m.name == method && m.takes_payload);

            if takes_payload {
                // Generate arm with modifier handling
                let mod_code = match modifier.as_deref() {
                    Some("stop") => "e.stop_propagation()",
                    Some("prevent") => "e.prevent_default()",
                    Some("once") => "// mark as handled once",
                    Some("capture") => "// capture phase handling",
                    Some("self") => "// only handle if event target is this element",
                    _ => "",
                };
                arms.push_str(&format!(
                    "        \"{original}\" => {{ if let Some(p) = payload {{ state.{method}(p); {mod_code} }} }},\n",
                    original = h,
                    method = method,
                    mod_code = mod_code
                ));
            } else {
                // Zero-arg handler with modifier
                let mod_code = match modifier.as_deref() {
                    Some("stop") => "e.stop_propagation()",
                    Some("prevent") => "e.prevent_default()",
                    Some("once") => "// mark as handled once",
                    Some("capture") => "// capture phase handling",
                    Some("self") => "// only handle if event target is this element",
                    _ => "",
                };
                arms.push_str(&format!(
                    "        \"{original}\" => {{ state.{method}(); {mod_code} }},\n",
                    original = h,
                    method = method,
                    mod_code = mod_code
                ));
            }
        }
        used.insert(h.clone());
    }

    // Extra handlers not already covered by a local template event still need
    // an arm — they may be defined only inside a child component's template.
    // Handlers without an owner are local to this component (already covered);
    // only owner-attributed ones route through a persistent State field.
    for eh in extra_handlers {
        if used.contains(&eh.name) {
            continue;
        }
        let Some(owner) = eh.owner.as_deref() else {
            continue;
        };
        if eh.takes_payload {
            arms.push_str(&format!(
                "        \"{name}\" => {{ if let Some(p) = payload {{ state.{owner}.{method}(p); }} }},\n",
                name = eh.name, owner = owner, method = eh.name
            ));
        } else {
            arms.push_str(&format!(
                "        \"{name}\" => {{ state.{owner}.{method}(); }},\n",
                name = eh.name,
                owner = owner,
                method = eh.name
            ));
        }
    }

    // The allow below is emitted onto the generated dispatch function itself, and
    // deliberately not at module level: a component's hand-written `<script>`
    // lands in the same generated module, so a module-level allow would also mask a
    // genuine `single_match` in the user's own code. Scoping it to this one shim
    // silences only the dispatch shape we generate. The lint fires because a
    // component with exactly one handler produces a one-armed `match` whose
    // wildcard arm does nothing. Rewriting that as an `if name == "..."` would
    // silence it without an allow, but the shape of this dispatch is the contract
    // the generated-code tests read back (see `vmodel_dispatch_arms` in
    // velox-sfc/tests/vmodel_tests.rs), so changing it is a codegen decision and
    // not a lint fix.
    format!(
        r#"#[allow(clippy::arc_with_non_send_sync, clippy::single_match)]
pub fn make_on_event(state: std::sync::Arc<script_rs::State>) -> impl FnMut(&str, Option<&str>) + 'static {{
    move |name: &str, payload: Option<&str>| {{
        match name {{
{arms}            _ => {{}}
        }}
    }}
}}"#,
        arms = arms
    )
}

/// Generate a `make_resolve(state)` helper that maps template interpolation keys
/// to State getters. `main.rs` uses it instead of hand-writing a resolve closure.
fn generate_make_resolve(
    interp_keys: &[String],
    methods: &[StateMethod],
    fields: &[String],
) -> String {
    let mut arms = String::new();
    for key in interp_keys {
        let method = resolve_getter_call(methods, fields, key);
        arms.push_str(&format!(
            "        \"{}\" => state.{}.to_string(),\n",
            key, method
        ));
    }
    format!(
        r#"#[allow(clippy::arc_with_non_send_sync)]
pub fn make_resolve(state: std::sync::Arc<script_rs::State>) -> impl FnMut(&str) -> String {{
    move |name: &str| match name {{
{arms}        _ => String::new(),
    }}
}}"#,
        arms = arms
    )
}

/// How a resolver key is answered, when it is: one variant per shape an arm
/// body can take.
#[derive(Debug, Clone, PartialEq, Eq)]
enum Answer {
    /// A bare name, answered by the one zero-argument `State` method whose
    /// return type renders as text: `{{ title }}` → `title()`.
    Getter { root: String, name: String },
    /// A member path, answered by a chain of calls on the root accessor:
    /// `{{ user.name }}` → `user().name()`.
    MemberChain { root: String, chain: String },
    /// A key that is neither a bare name nor a member path — a call expression
    /// (`user.name()`), an unterminated index (`a.b[0`), anything whose
    /// segments are not names — answered by the name-only spelling, which is the
    /// only thing the emitter has ever been able to write down for one.
    ///
    /// It is `Ok` because refusing it is a behaviour change, not a fix: a
    /// `{{ user.name() }}` interpolation compiles today only as
    /// `state.user.name()()`, and that arm text is pinned. Nothing in this crate
    /// can say whether such a key means anything — codegen cannot type it — so
    /// gating it needs a typed resolver and is a separate task. See the report.
    Conventional { name: String },
}

impl Answer {
    /// The call expression the arm body makes on `state`, parentheses included.
    fn call(&self) -> String {
        match self {
            Answer::Getter { name, .. } | Answer::Conventional { name } => format!("{name}()"),
            Answer::MemberChain { chain, .. } => chain.clone(),
        }
    }

    /// The sentence [`unresolvable_key_reason`] shows for a key this function
    /// ANSWERS.
    ///
    /// One caller can be handed an answerable key: the bound-attribute path
    /// gates on [`has_state_getter`], a narrower question than `answerable`
    /// asks — a member chain and a `State` field's name both answer here and not
    /// there — so a key it refuses still needs naming. The register is the
    /// caller's, and it is this shape's own, so nothing here re-tests the key.
    fn refusal(&self, key: &str, methods: &[StateMethod], fields: &[String]) -> String {
        match self {
            // The root is a provable accessor, so the only sentence that can
            // describe a provable accessor refused for a chain is the root
            // register's.
            Answer::MemberChain { root, .. } => root_reason(root, true, methods, fields),
            // A key nothing is known about names no method at all.
            Answer::Conventional { .. } => key_reason(key, false, methods, fields),
            // A bare name, and the register is its own. Unreachable from every
            // call site: `Ok(Getter)` asserts a zero-argument renderable method
            // named `key` exists, which is exactly what the one caller that can
            // reach an answerable key has already tested. Total so this stays a
            // reader of [`answerable`] rather than a second decision.
            Answer::Getter { .. } => key_reason(key, true, methods, fields),
        }
    }
}

/// A key nothing answers, and the words a refusal is reported in.
///
/// The wording is two registers because it has always been two and both are
/// frozen: one quotes the key as the author wrote it ([`key_reason`], read by
/// [`unresolvable_key_reason`] for the bound-attribute, `v-model` and condition
/// paths) and one quotes the key's first segment together with the fix
/// ([`root_reason`] and [`remedy`], read by [`keep_answerable_interpolation_keys`]
/// for the interpolation gate). The DECISION is [`answerable`]'s alone and is
/// made exactly once; only the sentence carrying it is per-caller, because
/// R-1/R-1c/R-1d/R-3's reviews pinned both registers and an author shown new
/// wording for an old mistake is being told the mistake is new.
#[derive(Debug, Clone, PartialEq, Eq)]
struct Unrenderable {
    /// Names the key as authored.
    key_reason: String,
    /// Names the key's first segment.
    root_reason: String,
    /// The fix the interpolation gate offers, in its own words.
    remedy: String,
}

/// Can a resolver key be read at all, and if not, what to tell the author.
///
/// This is the whole of answerability. Everything that has to decide asks here:
/// the arm emitter (which call expression the arm body makes), the registration
/// gate (whether a key is registered at all) and every diagnostic that refuses
/// one. Those are one question asked at three layers, and while each had its own
/// copy the copies disagreed — a key could end up registered but unanswerable, or
/// answerable but unregistered, and which of the two happened depended on which
/// path the template happened to take. `Result` is the contract that closes that:
/// `Ok` is an answer the emitter can write down, `Err` is a refusal that already
/// carries its sentence, and a key is registered only when it is `Ok`. A later
/// task adds an arm here for the loop collection `State` cannot hand over; the
/// boundary it will cross is this `Result`, not a copy of this question.
///
/// The tests below run in the order of the shapes an arm can take, and each one
/// is asked by the answer rather than guessed from the key.
fn answerable(
    key: &str,
    methods: &[StateMethod],
    fields: &[String],
) -> Result<Answer, Unrenderable> {
    // A member path is answered by a chain on its root accessor, so what is
    // wrong with the key is whatever is wrong with the root. Asked first because
    // `member_path` is the stricter of the two shapes: it refuses a key with a
    // call in it, which a bare name cannot be.
    if let Some((root, _)) = member_path(key) {
        let reason = root_reason(root, true, methods, fields);
        return match member_path_call(methods, key) {
            Some(chain) => Ok(Answer::MemberChain {
                root: root.to_string(),
                chain,
            }),
            None => Err(Unrenderable {
                key_reason: reason.clone(),
                root_reason: reason,
                remedy: path_remedy(root),
            }),
        };
    }
    if is_bare_identifier(key) {
        return match getter_method_name(methods, key) {
            Some(name) => Ok(Answer::Getter {
                root: key.to_string(),
                name: name.to_string(),
            }),
            None => Err(Unrenderable {
                key_reason: key_reason(key, true, methods, fields),
                root_reason: root_reason(key, false, methods, fields),
                remedy: name_remedy(key),
            }),
        };
    }
    // Neither shape. `member_path` refuses it and no `State` method can be named
    // after it, so the two tests above have nothing to say about it — see
    // `Answer::Conventional` for why the answer is still `Ok`.
    Ok(Answer::Conventional {
        name: conventional_name(methods, key),
    })
}

/// The method name a key is called by when the naming convention is all there is
/// to go on: the exact name if `State` has it, else the `get_`/`is_`/`has_`
/// variant, else the key itself. One helper for [`answerable`]'s ungated shape
/// and for [`resolve_getter_call`]'s dead arm, so a guessed name is spelled once.
fn conventional_name(methods: &[StateMethod], key: &str) -> String {
    resolve_method_name(&method_names(methods), key)
}

/// Why `key` as authored cannot be read — the register the bound-attribute,
/// `v-model` and condition diagnostics quote in.
///
/// `is_bare` is the CALLER's knowledge of the key's shape, never a re-test of
/// it: [`answerable`] has already decided, and a caller holding an [`Answer`]
/// knows which shape it is. Nothing here decides anything; the arms are frozen
/// wording, and this is the whole of the key register R-1/R-1c/R-1d/R-3 left.
fn key_reason(key: &str, is_bare: bool, methods: &[StateMethod], fields: &[String]) -> String {
    // The exact declared name only, with no `get_`/`is_`/`has_` fallback: this
    // register names the method the author wrote, so naming a different one here
    // would be a second answer to the same question.
    let named = methods.iter().find(|m| m.name == key);
    match named {
        Some(m) if m.takes_payload => {
            format!("`{key}` is a payload-taking State method, not a getter")
        }
        Some(m) if m.return_type.is_none() => {
            format!("`{key}` declares no return type, so there is no text to render")
        }
        Some(m) => format!(
            "`{key}` returns `{}`, which cannot be rendered as text",
            m.return_type.as_deref().unwrap_or_default()
        ),
        None if fields.iter().any(|f| f == key) => format!(
            "`{key}` is a `State` field, not a getter — reading a field in a \
             template needs a typed field resolver, which is not implemented yet"
        ),
        None if !is_bare => {
            format!("`{key}` is an expression, not a `State` getter name")
        }
        None => format!("`{key}` is not a zero-argument `State` getter"),
    }
}

/// Why the first segment of a key cannot be read — the register the
/// interpolation gate quotes in, so `{{ form.name }}` and `v-model="form.name"`
/// name the same cause in the same words.
///
/// `is_path` is the caller's knowledge of the key's shape, as in [`key_reason`].
/// The arms are frozen wording, reproduced as R-1/R-1c/R-1d/R-3 left them.
fn root_reason(root: &str, is_path: bool, methods: &[StateMethod], fields: &[String]) -> String {
    let declared = methods.iter().find(|m| m.name == root);
    match declared {
        Some(m) if m.takes_payload => {
            format!("`{root}` is a payload-taking State method, not an accessor")
        }
        Some(m) if !returns_a_value(m.return_type.as_deref()) => {
            format!("`{root}` returns nothing, so there is no value to read from")
        }
        Some(_) if is_path => {
            format!("`{root}` is a State method, but a member path needs an accessor")
        }
        Some(_) => {
            format!("`{root}` is a `State` method, but its return type cannot be rendered as text")
        }
        None if fields.iter().any(|f| f == root) => format!(
            "`{root}` is a `State` field, not an accessor — reading a field in a \
             template needs a typed field resolver, which is not implemented yet"
        ),
        None => format!("`{root}` is not a zero-argument `State` method"),
    }
}

/// The fix the interpolation gate offers for a bare name.
fn name_remedy(name: &str) -> String {
    format!("Declare `pub fn {name}(&self) -> impl std::fmt::Display` on `State`.")
}

/// The fix the interpolation gate offers for a member path, which needs an
/// accessor for the root and a method for every segment after it.
fn path_remedy(root: &str) -> String {
    format!(
        "Declare `pub fn {root}(&self) -> YourType` on `State` and a method for each \
         segment after it."
    )
}

/// Why a key cannot be answered by a resolver arm, in the register the
/// bound-attribute, `v-model` and condition diagnostics quote it in.
///
/// A reader of [`answerable`], not a second question. The one caller that can be
/// handed an answerable key is the bound-attribute path, which gates on
/// [`has_state_getter`], and [`Answer::refusal`] covers it. One predicate for
/// every diagnostic that asks "can this key be looked up?", so the
/// bound-attribute path and the `v-model` value path cannot drift into
/// describing the same mistake differently.
fn unresolvable_key_reason(key: &str, methods: &[StateMethod], fields: &[String]) -> String {
    match answerable(key, methods, fields) {
        Err(unrenderable) => unrenderable.key_reason,
        Ok(answer) => answer.refusal(key, methods, fields),
    }
}

/// The `v-for` write a `v-model` on a loop item cannot make, reported in State
/// mode.
///
/// The read is real — the input shows the loop item's own field — but the write
/// has no route: `on:input` carries a handler *name*, and `make_on_event`
/// resolves it against `State`, which has no handle on the loop item. So no
/// setter is generated and no dispatcher arm is emitted; an arm naming one would
/// be `state.__vmodel_set_todo_text(p)` against a method that cannot exist, and
/// the setter body would be `vmodel_set(&self.todo.text, …)` on a field the
/// `State` does not have. Both are E0609, not a working binding. The same
/// family and the same remedy sentence as [`resolve_loop_warning`].
/// Why a `v-if` / `v-show` condition cannot be read, in the terms of the
/// directive that reads it.
///
/// Both directives ask the same question of the same key through the same gate
/// ([`key_is_answerable`]), so they say the same thing the same way — and each
/// names the consequence ITS OWN emission has rather than a capability the
/// emitted code lacks: an unregistered key answers `""`, which is falsy, so a
/// `v-if` leaves the element and its subtree out of the tree and a `v-show`
/// leaves the element hidden.
///
/// This is a DISTINCT condition from the Resolve-mode loop diagnostic
/// ([`resolve_loop_warning`]): that one is about a loop that cannot render and
/// reads no key set, and this one is about a key that has no getter. Neither is
/// derived from the other.
fn condition_unresolvable_warning(
    directive: &str,
    expr: &str,
    key: &str,
    methods: &[StateMethod],
    fields: &[String],
) -> String {
    let consequence = if directive == "show" {
        "the condition reads an empty value, so the element renders with `display: none`"
    } else {
        "the condition reads an empty value, so the element and everything inside it are not rendered"
    };
    format!(
        "{directive}=\"{expr}\" cannot be resolved — {}; {consequence}. Bind a zero-argument \
         State getter for `{key}` instead.",
        unresolvable_key_reason(key, methods, fields)
    )
}

fn vmodel_loop_write_warning(expr: &str) -> String {
    format!(
        "v-model=\"{expr}\" on a `v-for` item cannot be written, and no template syntax \
         reaches it — the read works, so the input shows the item's value, but typing does \
         not change it. Both hops of every write path break: the loop body iterates a \
         DETACHED COPY, because `Signal::get` returns `T` by value rather than a handle, \
         and the event dispatcher is `FnMut(&str, Option<&str>)` — a name and a payload, \
         with no index — so a write to \"the third item\" cannot even be NAMED. Two routes \
         do work: bind `v-model` on a `State` field instead of on the loop item, where the \
         generated `__vmodel_set_<field>` setter is dispatched and writes through the \
         signal; or render this component through `render_with_state` and do the write in \
         a `State` method the component calls itself, since that is the only place the \
         index still exists. This is a limitation of `v-model` on a loop item, not a typo \
         to work around: a `v-for` item is read-only by design."
    )
}

/// The write half a `v-model` does not have in Resolve mode.
///
/// Resolve mode renders through `render_with(resolve)`, which has no `State` at
/// all: the generated `make_on_event` takes one, so nothing dispatches the write
/// there. R-1's ruling is that Resolve mode reports rather than grows a write
/// path, and this is that report — the same family and remedy as
/// [`resolve_loop_warning`], and deliberately a separate function from it,
/// because a `v-model` is a different condition from a loop that cannot render.
fn vmodel_resolve_mode_warning(expr: &str) -> String {
    format!(
        "v-model=\"{expr}\" cannot be written in Resolve mode — the resolver renders values but \
         dispatches no events, so only the read side exists here. Render this component through \
         `render_with_state`, which reads the value and writes it from the State directly."
    )
}

/// The typed props channel on both sides of a parent→child call.
///
/// A child declares `pub struct Props { … }`; codegen exposes it as
/// `pub type PropsArg = script_rs::Props`, and a parent builds it with a struct
/// literal. The boundary is therefore checked: `rustc` rejects a parent that
/// leaves a field out, names a field the child never declared, or supplies a
/// value of the wrong type — at compile time, not as a silently absent prop at
/// run time.
#[derive(Debug, Clone, Copy, Default)]
struct PropsChannel<'a> {
    /// This component's own declared `Props` fields, in declaration order.
    fields: &'a [PropField],
    /// The expression that reads a value of one of those fields, e.g.
    /// `state.props`. `props` when the child's `State` has nowhere to keep the
    /// value, `state.props` when it does.
    root: &'a str,
    /// This component's own `State` field names. Not a second copy of
    /// `collect_resolver_keys`'s `fields`: it is the same slice, carried so a
    /// diagnostic that has to explain WHY a collection is unreachable can ask
    /// the one predicate that owns the answer, `answerable`, the question it
    /// already knows how to answer.
    state_fields: &'a [String],
    /// What each child component declares, keyed by its tag name, so a parent
    /// builds that child's `PropsArg` with the types that child asked for.
    children: &'a [(String, Vec<PropField>)],
}

impl<'a> PropsChannel<'a> {
    /// Does a `v-for` over `expr` have a real collection to read?
    ///
    /// A `Vec<T>`-shaped declared field is the only kind this can bind an item
    /// from, and the shape is what the generated loop actually needs — `item` is
    /// a `&T`, so the body reads `{item}.{path}` as a real field read.
    fn declares_vec_field(&self, expr: &str) -> bool {
        self.field(expr).is_some_and(|f| is_vec_shaped(&f.ty))
    }

    /// This component's own `Props` field named `name`, whatever its declared
    /// type.
    ///
    /// The ONE place "did the author declare this?" is asked, so the two things
    /// that follow from the answer cannot disagree. [`Self::declares_vec_field`]
    /// narrows this to the shape a `v-for` can bind an item from and so cannot
    /// answer "declared at all" — a field declared `String` is declared and
    /// still uniterable, and a diagnostic that asked the shape test for the
    /// plain question would call it undeclared and name the wrong mistake.
    fn field(&self, name: &str) -> Option<&'a PropField> {
        self.fields.iter().find(|f| f.name == name)
    }

    /// Does this component already HOLD `name` as a collection, in a way some
    /// renderer reads directly?
    ///
    /// The two that hold one are a declared `Props` field of a `Vec`-shaped type
    /// ([`Self::declares_vec_field`]) and a `State` field a generated renderer
    /// reads off `state` — `state.items.get()`, which is how a `State`-mode
    /// `v-for` has always worked. Both answer `true` for a component that is NOT
    /// broken, which is exactly what separates them from a name nothing holds:
    /// [`unrenderable_collection_error`] only ever describes the latter.
    ///
    /// The `State` side is deliberately the plain name test, not a shape test.
    /// The field's TYPE is not something codegen can read a collection out of —
    /// `Rc<Signal<Vec<T>>>` is the shape, and the shape is the renderer's
    /// business — and a `State` field that were somehow not a collection would
    /// fail to type-check in the generated `state.{name}.get()` read, which is
    /// a louder and more precise failure than anything said here.
    fn holds_collection(&self, name: &str) -> bool {
        self.declares_vec_field(name) || self.state_fields.iter().any(|f| f == name)
    }

    /// Is this component's inventory of names it can be SUPPLIED closed, so that
    /// a name outside it is provably unanswerable and refusing to compile is
    /// sound?
    ///
    /// A component that declares a `Props` interface has one. Only its declared
    /// fields can be handed to it, so a `v-for` over a name that is not one of
    /// them can never be answered by anything, and
    /// [`unrenderable_collection_error`] is the right response.
    ///
    /// A component with NO declared `Props` does not. Its generated
    /// `render_with` entry point takes a caller closure `|name| String`, and
    /// that closure can answer any name at all — the inventory is open, and the
    /// caller's closure is a legitimate supplier. This is not a loophole: it is
    /// the documented shape of a `render_with` template, and `velox init`
    /// scaffolds exactly this (a root component that has a `<script setup>` and
    /// is rendered by the caller). Treating presence-of-script as "the
    /// inventory is closed" refused those working templates, which is the exact
    /// mirror of the silent-hole defect this gate exists to close: instead of
    /// shipping a hole it made a working template unbuildable.
    ///
    /// So the question is never whether a `<script setup>` is present but whether
    /// this component's own declaration bounds what can be supplied to it.
    fn inventory_is_closed(&self) -> bool {
        !self.fields.is_empty()
    }

    /// The field `name` of the child component tagged `comp_name`, if that
    /// child is known to this component and declares such a field.
    fn child_field(&self, comp_name: &str, name: &str) -> Option<&'a PropField> {
        self.children
            .iter()
            .find(|(tag, _)| tag == comp_name)
            .and_then(|(_, fields)| fields.iter().find(|f| f.name == name))
    }

    /// Every field `comp_name` declares, in declaration order, or an empty
    /// slice when this component cannot see that child.
    fn child_fields(&self, comp_name: &str) -> &'a [PropField] {
        self.children
            .iter()
            .find(|(tag, _)| tag == comp_name)
            .map(|(_, fields)| fields.as_slice())
            .unwrap_or(&[])
    }

    /// Does the child component tagged `comp_name` declare a `Props` struct at
    /// all?
    ///
    /// It decides the SHAPE of the literal a parent builds for that child: a
    /// child with declared fields takes them by name, and a child with none
    /// takes nothing at all. So a bind to a child that declares no props is
    /// written into a field that child does not have, and does not compile.
    ///
    /// `None` when the template names a child this component cannot see — a tag
    /// no import or resolver entry matches. There is no declaration to check
    /// against, so the caller falls back to the name/value form.
    fn child_declares_props(&self, comp_name: &str) -> Option<bool> {
        self.children
            .iter()
            .find(|(tag, _)| tag == comp_name)
            .map(|(_, fields)| !fields.is_empty())
    }
}

/// Is `ty` a `Vec`/`&[T]`/`[T; N]` — something with `.iter()` and `.is_empty()`?
///
/// Textual, not a parsed type: a `.vx` script is emitted verbatim and may name
/// types from anywhere, so the check is on the shape the generated loop needs
/// (`item` becomes a `&T`) and nothing more. `String` and `Rc<Signal<T>>` are
/// not: a `Signal` holds a value, not a borrow, so an item binding could not be
/// a `&T` through it.
fn is_vec_shaped(ty: &str) -> bool {
    let ty = ty.trim();
    ty.starts_with("Vec<")
        || ty.starts_with("&[")
        || (ty.starts_with('[') && ty.contains(';'))
        || ty.starts_with("std::vec::Vec<")
        || ty.starts_with("std::collections::")
}

/// Is `ty` one a `{{ }}` interpolation can read — something with a `to_string()`
/// that means something in a template?
///
/// The same question `props_field_value` asks when it converts a parent's
/// binding, asked of the other side of the same declaration.
fn is_text_shaped(ty: &str) -> bool {
    let ty = ty.trim();
    matches!(ty, "String" | "str" | "&str" | "bool") || is_numeric_type(ty)
}

/// Generate `render_with_props` — the entry point a parent calls to hand props to
/// a child that has no persistent `State` field of its own.
///
/// It answers every read the same way `render_with` does, through one `resolve`
/// closure: the child's own declared `Props` fields first, then its `State`
/// getters, then nothing. The difference is that the props value is the child's
/// own `Props` type, so the arms over it are a `match` on struct fields rather
/// than a `HashMap` lookup that can miss, and `rustc` checks the parent's struct
/// literal against the child's declaration.
///
/// The third body is not `render_with`'s. It is emitted in
/// [`TransformMode::Props`] so a `v-for` collection that names a declared `Props`
/// field is read off that field and its item bound directly, rather than
/// resolved as a runtime-formatted string key.
///
/// A component that declares no `Props` struct gets no third body: there is no
/// typed field for the difference to be about, and the extra copy of the tree
/// would be a second place for the generated render to change.
fn generate_render_with_props(
    interp_keys: &[String],
    methods: &[StateMethod],
    fields: &[String],
    props: &PropsChannel<'_>,
    root: &Node,
    scope_id: Option<&str>,
    has_script: bool,
) -> String {
    if props.fields.is_empty() {
        return r#"pub fn render_with_props(props: PropsArg) -> velox_dom::VNode {
    let resolve_props = |key: &str| -> String {
        props.values.get(key).cloned().unwrap_or_default()
    };
    render_with(resolve_props)
}"#
        .to_string();
    }
    let props_root = props.root;

    let mut match_arms = String::new();
    for f in props.fields {
        // A `Vec<T>` collection, a struct, anything without a text form gets no
        // arm: an interpolation resolves to a `String`, and `.to_string()` on a
        // type that is not `Display` does not compile. A collection is read by
        // the loop, not by an interpolation, so it loses nothing by being absent.
        if !is_text_shaped(&f.ty) {
            continue;
        }
        match_arms.push_str(&format!(
            "            \"{}\" => {}.{}.to_string(),\n",
            f.name, props_root, f.name
        ));
    }
    for key in interp_keys {
        // A Props field already answers for this key above; a second arm with the
        // same literal would be an unreachable pattern, not a fallback.
        if props.fields.iter().any(|f| &f.name == key) {
            continue;
        }
        let method = resolve_getter_call(methods, fields, key);
        match_arms.push_str(&format!(
            "            \"{}\" => state.{}.to_string(),\n",
            key, method
        ));
    }
    // `props` is owned here and has been moved into `state.props` when the child's
    // `State` has a `props` field, so the arms read it back off the state. A
    // component that declares no `Props` struct gets the empty stand-in, which
    // nothing can read, so it is dropped by name.
    let assign_props = if props_root == "state.props" {
        "    state.props = props;\n"
    } else {
        "    let _ = props;\n"
    };
    let state_binding = if has_script {
        if props_root == "state.props" {
            "    let mut state = script_rs::State::new();\n"
        } else {
            "    let state = script_rs::State::new();\n"
        }
    } else {
        ""
    };
    let body = emit_node_with_mode(root, TransformMode::Props, fields, *props, scope_id);
    format!(
        r#"pub fn render_with_props(props: PropsArg) -> velox_dom::VNode {{
    use velox_dom::*;
{state_binding}{assign_props}    let resolve = |key: &str| -> String {{
        match key {{
{match_arms}            _ => String::new(),
        }}
    }};
    {body}
}}"#,
    )
}

/// Minimal module emitted when a component has no template.
fn empty_component_module() -> String {
    r#"pub fn render() -> velox_dom::VNode {
    use velox_dom::*;
    text("")
}

pub fn render_with<F>(mut resolve: F) -> velox_dom::VNode where F: FnMut(&str) -> String {
    use velox_dom::*;
    text("")
}

#[allow(clippy::arc_with_non_send_sync)]
pub fn render_with_state<F>(state: std::sync::Arc<script_rs::State>, mut resolve: F) -> velox_dom::VNode where F: FnMut(&str) -> String {
    use velox_dom::*;
    text("")
}

#[allow(clippy::arc_with_non_send_sync)]
pub fn make_resolve(state: std::sync::Arc<script_rs::State>) -> impl FnMut(&str) -> String {
    move |_name: &str| String::new()
}

pub fn make_on_event(state: std::sync::Arc<script_rs::State>) -> impl FnMut(&str, Option<&str>) + 'static {
    move |_name: &str, _payload: Option<&str>| {}
}

pub fn render_with_props(props: PropsArg) -> velox_dom::VNode {
    let _ = props;
    render_with(|_key: &str| String::new())
}"#
    .to_string()
}

/// The KEY a child looks up for the slot outlet its attrs describe — the
/// `name` attribute of a `<slot>`, folded the way the parent folded the name it
/// stored.
///
/// # Why the fold is not optional
///
/// A slot name is written twice, on opposite sides of a component boundary, and
/// the two spellings have to meet. The parent half is a directive, so the parser
/// folds it: `v-slot:footerBar` arrives as `slot:footer-bar` and `#footerBar` as
/// the same string, and `slots_map_expr` uses that as the map key. The child half
/// is a plain static attribute, so nothing folded it — the lookup used the raw
/// `footerBar`, the map held `footer-bar`, and `render_slot` found nothing.
///
/// The symptom is the worst kind: the outlet rendered its FALLBACK, so the page
/// looked like a component that had chosen to ignore its caller, with no
/// diagnostic anywhere. Folding the child's name through the same function the
/// parent's went through is what makes `v-slot:footerBar` and `name="footerBar"`
/// the same slot, and `name="footer-bar"` the same slot too — so a project that
/// kebab-cases on one side and camel-cases on the other still works.
///
/// # An unmatched name is not an error
///
/// The fallback is the feature: a `<slot name="footer">` on a component that is
/// sometimes used without a footer is supposed to render its own children. There
/// is no way to tell "no caller passed this" from "the caller passed a different
/// name" at this level — the map is built by the CALLER, in a different file, and
/// an empty result is equally correct for both — so this stays a lookup with a
/// fallback. A mismatch is a naming mistake, not a broken component.
fn normalize_slot_name(name: &str) -> String {
    crate::template_parse::normalize_directive_name(name.trim())
}

/// The `name` a `<slot>` element looks itself up under, from its static `name`
/// attribute; `"default"` when it names none.
fn slot_outlet_name(attrs: &[TemplateAttr]) -> String {
    attrs
        .iter()
        .find(|a| a.name == "name" && matches!(a.kind, AttrKind::Static))
        .and_then(|a| a.value.clone())
        .map(|raw| normalize_slot_name(&raw))
        .unwrap_or_else(|| "default".to_string())
}

/// Emit code for a `<slot>` element.
///
/// `<slot>` elements appear inside component templates and act as outlets for
/// slot content passed from the parent component. The slot's name is determined
/// by the `name` attribute (defaulting to "default"), folded by
/// [`slot_outlet_name`] so it meets the key the parent stored.
///
/// Slot content is passed from the parent as a `HashMap<&str, VNode>` under
/// the key "slot:{name}". At render time, `render_slot` looks up the slot name
/// and returns the slot VNode, falling back to the slot's own children
/// (fallback content) if no slot was provided.
fn emit_slot_node(
    attrs: &[TemplateAttr],
    children: &[Node],
    mode: TransformMode,
    fields: &[String],
    props: PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    let slot_name = slot_outlet_name(attrs);

    // The fallback is the slot's own children, and `emit_children_with_mode`
    // returns a BLOCK that evaluates to a `Vec<VNode>`. `render_slot` takes
    // `FnOnce() -> VNode`, so the children are handed to `h("slot", …)` exactly
    // as `slots_map_expr` hands a multi-node entry to it — the fallback has to
    // be ONE node, and the wrapper is what makes several children into one. The
    // earlier `|| { { …__children } }` passed the `Vec` straight through and did
    // not compile (E0308, expected `VNode`, found `Vec<VNode>`) for every slot
    // that had fallback content at all.
    let fallback = emit_children_with_mode(children, mode, fields, props, scope_id);

    format!(
        r#"render_slot({slot_name_lit}, || velox_dom::h("slot", velox_dom::Props::new(), {fallback}))"#,
        slot_name_lit = string_lit(&slot_name),
        fallback = fallback,
    )
}

pub(crate) fn emit_node(n: &Node) -> String {
    match n {
        Node::Text(t) => format!(r#"text({})"#, string_lit(t)),
        Node::Interpolation(expr) => {
            let key = string_lit(expr.trim());
            format!(r#"text(resolve({}))"#, key)
        }
        Node::Element {
            tag,
            attrs,
            children,
            ..
        } => {
            let elem_props = emit_props(attrs);
            let kids = emit_children(children);
            format!(r#"h("{}", {elem_props}, {kids})"#, tag)
        }
    }
}

#[allow(dead_code)]
pub(crate) fn emit_props(attrs: &[TemplateAttr]) -> String {
    if attrs.is_empty() {
        return "Props::new()".to_string();
    }
    let mut parts = vec!["Props::new()".to_string()];
    for a in attrs {
        match a.kind {
            AttrKind::Static => {
                let v = a.value.clone().unwrap_or_default();
                parts.push(format!(r#".set("{}", {})"#, a.name, string_lit(&v)));
            }
            AttrKind::Bind => {
                let expr = a.value.clone().unwrap_or_else(|| a.name.clone());
                parts.push(format!(
                    r#".set("{}", &format!("{{}}", {}))"#,
                    a.name,
                    expr.trim()
                ));
            }
            AttrKind::Directive => {
                // directives are not emitted as props
            }
            AttrKind::On => {
                // Store as a string for now; renderer will wire this later
                let handler = a.value.clone().unwrap_or_default();
                parts.push(format!(
                    r#".set("on:{}", {})"#,
                    a.name,
                    string_lit(&handler)
                ));
            }
        }
    }
    parts.join("")
}

#[allow(dead_code)]
pub(crate) fn emit_children(children: &[Node]) -> String {
    if children.is_empty() {
        return "vec![]".to_string();
    }
    let items: Vec<String> = children.iter().map(emit_node).collect();
    format!("vec![{}]", items.join(", "))
}

/// Is this character part of a comparison operator? `==`, `!=`, `>=` and `<=`
/// all END in one of these, so the last character of what has been emitted is
/// enough to tell whether a token sits next to one.
fn is_comparison_char(ch: char) -> bool {
    matches!(ch, '=' | '!' | '<' | '>')
}

/// The end of the member path starting at `start`, where `chars[start]` is the
/// first character of an identifier the caller has already accepted.
///
/// `user.name` is ONE key, not two identifiers, and `items[0].name` is one too:
/// the arm that answers such a key is the method chain `state.user().name()`, so
/// splitting the path would ask the resolver for `user` and `name` — keys no
/// getter is named after — and leave a field access on a `String` in the middle
/// of the emitted expression. [`condition_resolver_keys`] collects the same
/// tokens through this same function, which is what keeps the registered keys
/// and the emitted lookups one set; `condition_resolver_keys_match_rewrite_if_expr_lookups`
/// pins their agreement.
///
/// A segment is `.` followed by an identifier, or an index `[…]` copied verbatim
/// (brackets included, so [`member_path`] splits it back the same way). Anything
/// else ends the path, leaving the caller looking at the character that stopped
/// it.
fn member_path_end(chars: &[char], start: usize) -> usize {
    let mut i = start;
    // The advance past the entry character is UNCONDITIONAL — see the contract on
    // `is_ident_char`, and the note in `condition_resolver_keys` that this is why
    // no scanner here can spin.
    i += 1;
    while i < chars.len() && is_ident_char(chars[i]) {
        i += 1;
    }
    loop {
        match chars.get(i) {
            Some('.') => match chars.get(i + 1) {
                Some(c) if c.is_ascii_alphabetic() || *c == '_' => {
                    i += 2;
                    while i < chars.len() && is_ident_char(chars[i]) {
                        i += 1;
                    }
                }
                _ => return i,
            },
            Some('[') => {
                let mut j = i + 1;
                while j < chars.len() && chars[j] != ']' {
                    j += 1;
                }
                if j >= chars.len() {
                    return i;
                }
                i = j + 1;
            }
            _ => return i,
        }
    }
}

pub(crate) fn rewrite_if_expr(expr: &str) -> String {
    let has_cmp = expr.contains("==")
        || expr.contains("!=")
        || expr.contains(">=")
        || expr.contains("<=")
        || expr.contains('>')
        || expr.contains('<');
    let has_negation = expr.contains('!');

    let chars: Vec<char> = expr.chars().collect();
    let mut out = String::new();
    let mut i = 0;

    /// Emit one looked-up token. A token in `if` position is a CONDITION, so it
    /// gets the string truthiness [`resolver_truthiness`] defines; a token next
    /// to a comparison operator is an OPERAND of that comparison, which is a
    /// number in every expression this has ever accepted.
    fn flush_token(out: &mut String, token: &str, numeric: bool) {
        if token.is_empty() {
            return;
        }
        // Literals and emitted code are values already, not lookups.
        if matches!(token, "true" | "false" | "resolve" | "state") {
            out.push_str(token);
        } else if numeric {
            out.push_str(&format!(
                "resolve({}).parse::<f64>().unwrap_or(0.0)",
                string_lit(token)
            ));
        } else {
            out.push_str(&resolver_truthiness(&format!(
                "resolve({})",
                string_lit(token)
            )));
        }
    }

    while i < chars.len() {
        let ch = chars[i];
        if ch.is_ascii_alphabetic() || ch == '_' {
            let end = member_path_end(&chars, i);
            let token: String = chars[i..end].iter().collect();
            i = end;
            // Whitespace after the token is held back, not dropped, so a token
            // followed by a comparison operator keeps the spacing it was
            // authored with.
            let mut pending = String::new();
            let mut j = i;
            let mut next_is_cmp = false;
            while j < chars.len() {
                if chars[j].is_whitespace() {
                    pending.push(chars[j]);
                    j += 1;
                } else if is_comparison_char(chars[j]) {
                    next_is_cmp = true;
                    break;
                } else {
                    break;
                }
            }
            // The last character emitted is what decides what came before the
            // token: `&`/`|`/`(`/`)`, a digit or `}` are all "not a comparison".
            let prev_is_cmp = out
                .trim_end()
                .chars()
                .last()
                .is_some_and(is_comparison_char);
            flush_token(&mut out, &token, has_cmp && (prev_is_cmp || next_is_cmp));
            out.push_str(&pending);
        } else if has_cmp && ch.is_ascii_digit() {
            let mut num = String::new();
            num.push(ch);
            i += 1;
            while i < chars.len() && (chars[i].is_ascii_digit() || chars[i] == '.') {
                num.push(chars[i]);
                i += 1;
            }
            if !num.contains('.') {
                num.push_str(".0");
            }
            out.push_str(&num);
        } else if ch == '!' && has_negation {
            // `!` operator: if followed by an identifier, negate the truthy
            // check, e.g. `!is_positive` -> !(resolve("is_positive") == "true"
            // || ...). The identifier after `!` is consumed here because the
            // closing paren has to follow it and the ident branch cannot know
            // that.
            out.push_str("!(");
            i += 1;
            // A negated condition is a PATH, not a bare name: `!user.name` reads
            // `user.name` as one value, and scanning only the identifier would
            // leave the `.` and the second segment to the main loop, which turns
            // them into a field access on a `String`. The entry test is the one
            // the main scanner uses, so `!=` — which also contains `!` — is left
            // for it.
            let mut neg_ident = String::new();
            if chars
                .get(i)
                .is_some_and(|c| c.is_ascii_alphabetic() || *c == '_')
            {
                let end = member_path_end(&chars, i);
                neg_ident = chars[i..end].iter().collect();
                i = end;
            }
            if neg_ident.is_empty() {
                // standalone !, just emit it
                out.pop(); // remove the "(" we just pushed
                out.push('!');
            } else if neg_ident == "true" || neg_ident == "false" {
                out.push_str(&neg_ident);
                out.push(')');
            } else {
                // A negated condition sits in `if` position, never in
                // comparison-operand position, so it gets the same truthiness
                // as a bare one.
                out.push_str(&resolver_truthiness(&format!(
                    "resolve({})",
                    string_lit(&neg_ident)
                )));
                out.push(')');
            }
        } else {
            out.push(ch);
            i += 1;
        }
    }
    out
}

/// Extract v-model directive from attrs and convert to :value + @input.
/// Returns (remaining_attrs, optional_vmodel_handler_name).
/// The handler name follows the convention `__vmodel_set_{field}` so that
/// `make_on_event` can dispatch to it and the codegen can emit the setter.
/// The `v-for` binding an element declares, or `None`.
///
/// The scope a `v-model` expression is resolved against: the two loop variables
/// in scope when the element is inside a `v-for` body.
fn v_for_scope(attrs: &[TemplateAttr]) -> Option<VForInfo> {
    attrs
        .iter()
        .find(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
        .and_then(|a| a.value.as_deref())
        .and_then(parse_v_for)
}

/// Whether a `v-model` expression is rooted at a `v-for` loop variable.
///
/// A loop-rooted `v-model` is a read the loop item can answer — `todo.text` is a
/// real field read in State mode — but its write has nowhere to go. This is
/// READ-ONLY BY DESIGN, and the two structural facts below are why. Neither is
/// a gap a smarter template could close:
///
/// 1. `Signal::get` returns `T` BY VALUE (`velox-core/src/signal.rs`), so the
///    loop body iterates a DETACHED CLONE. `item` is a value, not a handle, and
///    there is nothing to write through.
/// 2. The event dispatcher is `FnMut(&str, Option<&str>)` — a static name plus an
///    optional payload, with no index — so a write to "the third item" cannot be
///    named, let alone routed.
///
/// Lifting this would take handle semantics for `Signal`, which is a redesign of
/// the reactivity core and out of scope for this programme. Do not read this as a
/// small codegen gap to close later; a future attempt should start at
/// `velox-core/src/signal.rs`.
///
/// `extract_vmodel` therefore emits the read and no handler, and
/// `collect_resolver_keys` reports the missing write ([`vmodel_loop_write_warning`])
/// instead of emitting an arm that cannot compile. The predicate is
/// [`expr_reads_root`] over the loop variables in scope — the same test the read
/// path uses to decide it can answer the expression.
fn vmodel_is_loop_rooted(expr: &str, item_name: Option<&str>, idx_name: Option<&str>) -> bool {
    let roots: Vec<&str> = [item_name, idx_name].into_iter().flatten().collect();
    !roots.is_empty() && expr_reads_roots(expr, &roots)
}

/// The generated setter name for a `v-model` expression.
///
/// ONE spelling, produced by every side of the write path so the dispatcher arm
/// and the `State` method it calls can never disagree: the template emitter
/// (`extract_vmodel`) and the handler collector (`collect_handlers`) both build
/// it here, and the setter generator is fed by [`collect_vmodel_expressions`],
/// which uses the same rule. A `.` becomes `_` because the name has to be a Rust
/// method name, so `v-model="form.name"` maps to `__vmodel_set_form_name` and the
/// setter it pairs with writes `self.form.name`.
fn vmodel_setter_name(expr: &str) -> String {
    format!("__vmodel_set_{}", expr.replace('.', "_"))
}

/// Desugar `v-model="expr"` into a `:value` bind plus an `@input` handler, and
/// report the expression.
///
/// `item_name`/`idx_name` are the `v-for` loop variables in scope. A loop-rooted
/// expression gets the value bind only: its read is a direct field read of the
/// loop item — the shape State mode already emits for a loop-rooted binding — and
/// there is no handler to name, because a write to a loop item cannot be routed
/// through the `State`-rooted dispatcher. This is deliberate, not a missing arm:
/// a loop item is read-only by design, and [`vmodel_is_loop_rooted`] records the
/// two structural facts (value-semantics `Signal::get`, an index-less dispatcher)
/// that make it so, plus what lifting it would cost.
/// `collect_resolver_keys` reports the case as
/// [`vmodel_loop_write_warning`].
fn extract_vmodel(
    attrs: &[TemplateAttr],
    item_name: Option<&str>,
    idx_name: Option<&str>,
) -> (Vec<TemplateAttr>, Option<String>) {
    let vmodel_pos = attrs
        .iter()
        .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "model");

    if let Some(pos) = vmodel_pos {
        let vmodel_attr = &attrs[pos];
        let model_expr = vmodel_attr.value.clone().unwrap_or_default();

        // Build remaining attrs without v-model
        let mut remaining: Vec<TemplateAttr> = attrs.to_vec();
        remaining.remove(pos);

        // Add :value binding for v-model
        remaining.push(TemplateAttr {
            name: "value".to_string(),
            value: Some(model_expr.clone()),
            kind: AttrKind::Bind,
        });

        // Generate @input handler that calls state.__vmodel_set_{field}(payload).
        // A loop-rooted expression has no such setter: its write target is the
        // loop item, which the dispatcher cannot reach, so the input is emitted
        // as a read-only value and the missing write is reported instead.
        if !vmodel_is_loop_rooted(&model_expr, item_name, idx_name) {
            remaining.push(TemplateAttr {
                name: "input".to_string(),
                value: Some(vmodel_setter_name(&model_expr)),
                kind: AttrKind::On,
            });
        }

        (remaining, Some(model_expr))
    } else {
        (attrs.to_vec(), None)
    }
}

fn emit_node_with_mode(
    n: &Node,
    mode: TransformMode,
    fields: &[String],
    props: PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    match n {
        Node::Text(t) => format!(r#"text({})"#, string_lit(t)),
        Node::Interpolation(expr) => {
            let key = string_lit(expr.trim());
            format!(r#"text(resolve({}))"#, key)
        }
        Node::Element {
            tag,
            attrs,
            children,
            ..
        } => {
            // Handle <slot> elements: render slot content passed as props from parent.
            // Slot content is stored as a serialized VNode tree in props under
            // "slot:{name}" (or "slot:default" for unnamed slots).
            if tag == "slot" {
                return emit_slot_node(attrs, children, mode, fields, props, scope_id);
            }

            // Handle v-model directive: convert to :value + @input
            let (attrs2, _v_model_handler) = extract_vmodel(attrs, None, None);
            let attrs = &attrs2;

            // handle directive `v-if`
            if let Some(pos) = attrs
                .iter()
                .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "if")
            {
                let mut attrs2 = attrs.clone();
                let dir = attrs2.remove(pos);
                let expr = rewrite_if_expr(&dir.value.unwrap_or_default());
                let tmp = Node::Element {
                    tag: tag.clone(),
                    attrs: attrs2,
                    children: children.clone(),
                    self_closing: false,
                };
                let inner = emit_node_with_mode(&tmp, mode, fields, props, scope_id);
                return format!(r#"if {} {{ {} }} else {{ text("") }}"#, expr.trim(), inner);
            }

            // handle directive `v-show`
            // v-show always renders the element but toggles CSS `display: none`
            // based on the expression, preserving it in the DOM (unlike v-if).
            if let Some(pos) = attrs
                .iter()
                .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "show")
            {
                let mut attrs2 = attrs.clone();
                let dir = attrs2.remove(pos);
                let expr = rewrite_if_expr(&dir.value.unwrap_or_default());

                // Build the element without the v-show directive, then conditionally
                // set display style based on the expression value.
                let inner = emit_node_with_mode(
                    &Node::Element {
                        tag: tag.clone(),
                        attrs: attrs2,
                        children: children.clone(),
                        self_closing: false,
                    },
                    mode,
                    fields,
                    props,
                    scope_id,
                );

                // If the element already has a `style` attribute, we merge the
                // display value. Otherwise, we add a style attribute.
                let has_style = attrs.iter().any(|a| {
                    a.name == "style" && matches!(a.kind, AttrKind::Static | AttrKind::Bind)
                });

                if has_style {
                    // The style attr is already emitted by emit_node_with_mode.
                    // We wrap the result: if expression is false, override display.
                    return format!(
                        r#"{{ let mut __node = {inner}; if !({expr}) {{ if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.entry("style".to_string()).and_modify(|s| {{ if s.contains("display:") {{ /* preserve existing display */ }} else {{ s.push_str("; display: none"); }} }}).or_insert_with(|| "display: none".to_string()); }} }} __node }}"#,
                        inner = inner,
                        expr = expr.trim()
                    );
                } else {
                    return format!(
                        r#"{{ let mut __node = {inner}; if !({expr}) {{ if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert("style".to_string(), "display: none".to_string()); }} }} __node }}"#,
                        inner = inner,
                        expr = expr.trim()
                    );
                }
            }

            // Check if this is a component (has data-velox-component marker).
            // A component with v-for falls through to the v-for branch below so
            // it iterates instead of rendering once.
            let has_v_for = attrs
                .iter()
                .any(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for");
            if !has_v_for
                && let Some(component_attr) = attrs
                    .iter()
                    .find(|a| a.name == "data-velox-component" && a.kind == AttrKind::Static)
                && let Some(comp_name) = &component_attr.value
            {
                let mut clean_attrs = attrs.clone();
                clean_attrs.retain(|a| a.name != "data-velox-component");

                // Separate slot children from props/events. Every child is slot
                // content; the slot it belongs to is the one it names
                // (`v-slot:footer`, `#footer`), or the default slot when it names
                // none. `slots_map_expr` does the grouping — see its doc comment
                // for why the content it emits carries this caller's scope id.
                let has_slot_children = !children.is_empty();

                // Persistent child state: when the parent State declares a field
                // matching the lowercased component tag and the instance is
                // prop-less, render with the child's persistent State so it can
                // own mutable state across renders (state survives because it is
                // created once in the parent's State::new()).
                let field = comp_name.to_lowercase();
                let has_props_events = clean_attrs
                    .iter()
                    .any(|a| matches!(a.kind, AttrKind::Bind | AttrKind::On));
                if mode == TransformMode::State
                    && !has_props_events
                    && !has_slot_children
                    && fields.contains(&field)
                {
                    return format!(
                        r#"{comp_name}::render_with_state(std::sync::Arc::clone(&state.{field}), {comp_name}::make_resolve(std::sync::Arc::clone(&state.{field})))"#,
                    );
                }

                let (_has_props, props_expr) =
                    generate_component_props_expr(&clean_attrs, comp_name, &props);
                let callbacks = collect_component_callbacks(&clean_attrs);

                // Make every handler this tag binds callable by the child, before
                // any of the render entry points below. State mode only — see
                // `emit_dispatch_registrations`.
                let dispatch = if mode == TransformMode::State {
                    emit_dispatch_registrations(
                        comp_name,
                        &component_dispatch_handlers(&clean_attrs, comp_name, &props),
                    )
                } else {
                    String::new()
                };

                if callbacks.is_empty() && !has_slot_children {
                    return format!(
                        r#"{{ {dispatch}let __props = {props_expr}; {comp_name}::render_with_props(__props) }}"#,
                    );
                }

                // One map entry per slot the children name; see `slots_map_expr`.
                let slots_expr = if has_slot_children {
                    slots_map_expr(children, &|c| {
                        emit_node_with_mode(c, mode, fields, props, scope_id)
                    })
                } else {
                    "std::collections::HashMap::new()".to_string()
                };

                // No slot children but has callbacks: use render_with_callbacks
                if !has_slot_children {
                    let callback_map = format_callback_map(&callbacks);
                    let callback_names: Vec<String> = callbacks
                        .iter()
                        .map(|(_, handler)| handler.clone())
                        .collect();

                    return format!(
                        r#"{{ {dispatch}let __props = {props_expr}; let __callbacks = {callback_map}; {comp_name}::render_with_callbacks(__props, &__callbacks, &[{callback_names}]) }}"#,
                        callback_names = callback_names
                            .iter()
                            .map(|n| format!("\"{}\"", n))
                            .collect::<Vec<_>>()
                            .join(", ")
                    );
                }

                // Has both callbacks and slot children: use render_with_slots
                let callback_map = format_callback_map(&callbacks);
                let callback_names: Vec<String> = callbacks
                    .iter()
                    .map(|(_, handler)| handler.clone())
                    .collect();

                return format!(
                    r#"{{ {dispatch}let __props = {props_expr}; let __callbacks = {callback_map}; let __slots = {slots_expr}; {comp_name}::render_with_slots(__props, &__callbacks, &[{callback_names}], &__slots) }}"#,
                    callback_names = callback_names
                        .iter()
                        .map(|n| format!("\"{}\"", n))
                        .collect::<Vec<_>>()
                        .join(", ")
                );
            }

            // handle v-for directive
            if let Some(pos_for) = attrs
                .iter()
                .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
            {
                let v_if_pos = attrs
                    .iter()
                    .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "if");

                let mut attrs_f = attrs.clone();
                let dir = attrs_f.remove(pos_for);
                let val = dir.value.unwrap_or_default();

                let key_attr_pos = attrs_f
                    .iter()
                    .position(|a| a.kind == AttrKind::Bind && a.name == "key");
                let key_expr: Option<Option<String>> = if let Some(kp) = key_attr_pos {
                    let key_val = attrs_f[kp].value.clone();
                    attrs_f.remove(kp);
                    Some(key_val)
                } else {
                    None
                };

                if let Some(for_info) = parse_v_for(&val) {
                    let tmp_elem = Node::Element {
                        tag: tag.clone(),
                        attrs: attrs_f.clone(),
                        children: children.clone(),
                        self_closing: false,
                    };

                    let mut loop_code = String::new();
                    loop_code
                        .push_str("{ let mut __children: Vec<velox_dom::VNode> = Vec::new();\n");

                    // Where the collection comes from, and therefore what the loop
                    // item is.
                    //
                    // `State` reads a State field. `PropField` reads a declared
                    // `Props` field off the typed struct, so the item is a real
                    // `&T` and the body reads it as one. `Counted` is the
                    // fallback: a comma-counted string the resolver handed over,
                    // which has no item to bind, so the body keeps asking the
                    // resolver for a runtime-formatted key — the behaviour that
                    // makes an unanswerable collection render nothing at all.
                    let prop_field =
                        mode == TransformMode::Props && props.declares_vec_field(&for_info.expr);
                    let counted = !prop_field && mode != TransformMode::State;

                    if counted {
                        // String-based iteration via resolve()
                        loop_code.push_str(&format!(
                            "let __for_expr = resolve(\"{}\");\n",
                            for_info.expr
                        ));
                        loop_code.push_str(
                            "let __for_count = if let Ok(n) = __for_expr.parse::<usize>() {\n",
                        );
                        loop_code.push_str("    n\n");
                        loop_code.push_str("} else if __for_expr.is_empty() {\n");
                        loop_code.push_str("    0\n");
                        loop_code.push_str("} else {\n");
                        loop_code.push_str("    __for_expr.split(',').count()\n");
                        loop_code.push_str("};\n");
                        loop_code.push_str(&format!(
                            "for {idx_var} in 0..__for_count {{\n",
                            idx_var = for_info.index_name
                        ));
                    } else if prop_field {
                        // `props.root` is `state.props` when the child's `State`
                        // has a `props` field, because `render_with_props` moved
                        // the value into that State before the body runs. The
                        // borrow is what makes `item` a `&T` instead of a
                        // `String` the resolver formatted. Only the props body
                        // can read it: the other two bodies have no `props`
                        // argument at all, which is why the gate above admits
                        // this form in `TransformMode::Props` and nowhere else.
                        loop_code
                            .push_str(&format!("let __col = &{}.{};\n", props.root, for_info.expr));
                        loop_code.push_str("if !__col.is_empty() {\n");
                        loop_code.push_str(&format!(
                            "    for ({idx_var}, {item_var}) in __col.iter().enumerate() {{\n",
                            idx_var = for_info.index_name,
                            item_var = for_info.item_name
                        ));
                    } else {
                        // Collection-based iteration via state.{expr}.get()
                        loop_code
                            .push_str(&format!("let __col = state.{}.get();\n", for_info.expr));
                        loop_code.push_str("if !__col.is_empty() {\n");
                        loop_code.push_str(&format!(
                            "    for ({idx_var}, {item_var}) in __col.iter().enumerate() {{\n",
                            idx_var = for_info.index_name,
                            item_var = for_info.item_name
                        ));
                    }

                    let inner = if counted {
                        emit_node_with_ctx_for_loop(&tmp_elem, &for_info, scope_id)
                    } else {
                        emit_node_with_ctx_state(
                            &tmp_elem,
                            Some(&for_info.item_name),
                            Some(&for_info.index_name),
                            mode,
                            props,
                            scope_id,
                        )
                    };

                    let inner_with_key = if let Some(Some(key_val)) = &key_expr {
                        if counted {
                            format!(
                                "{{ let mut __node = {}; if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert(\"key\".to_string(), {}); }} __node }}",
                                inner,
                                resolve_mode_key_value(key_val, &for_info)
                            )
                        } else {
                            let key_path_str = key_val
                                .strip_prefix(&for_info.item_name)
                                .map(|s| s.trim_start_matches('.'))
                                .unwrap_or("id");
                            format!(
                                "{{ let mut __node = {}; if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert(\"key\".to_string(), {item_var}.{key_path}.to_string()); }} __node }}",
                                inner,
                                item_var = for_info.item_name,
                                key_path = key_path_str
                            )
                        }
                    } else {
                        inner
                    };

                    if let Some(if_pos) = v_if_pos {
                        let dir_if = &attrs[if_pos];
                        let expr_if = rewrite_if_expr(&dir_if.value.clone().unwrap_or_default());
                        loop_code.push_str(&format!(
                            "    if {} {{\n        __children.push({});\n    }}\n",
                            expr_if.trim(),
                            inner_with_key
                        ));
                    } else {
                        loop_code.push_str(&format!("    __children.push({});\n", inner_with_key));
                    }

                    if !counted {
                        loop_code.push_str("    }\n");
                        loop_code.push_str("}\n");
                    }

                    loop_code.push_str("__children; }");
                    return loop_code;
                }
            }

            let elem_props = emit_props_with(attrs);
            let kids = emit_children_with_mode(children, mode, fields, props, scope_id);
            format!(
                r#"h("{}", {}, {kids})"#,
                tag,
                append_scope_attr(&elem_props, scope_id)
            )
        }
    }
}

fn emit_node_with(
    n: &Node,
    fields: &[String],
    props: &PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    emit_node_with_mode(n, TransformMode::Resolve, fields, *props, scope_id)
}

/// Generate code that builds a `HashMap<&str, String>` of component props
/// from `:attr` (Bind) and `@event` (On) attributes.
/// Returns a tuple of (has_props, props_expr) where has_props indicates if
/// any bind/on attrs were found, and props_expr is the generated code.
fn generate_component_props_expr(
    clean_attrs: &[TemplateAttr],
    comp_name: &str,
    props: &PropsChannel<'_>,
) -> (bool, String) {
    component_props_arg(clean_attrs, comp_name, props, None, None)
}

/// Build the `PropsArg` a parent hands to `comp_name`.
///
/// A struct literal, not a `HashMap`: the child's `Props` fields are named and
/// typed on both sides, so `rustc` checks this call. A field the child never
/// declared is a compile error, and a field the child declared but the parent
/// left out is a compile error naming the field — the silent default that
/// produced the props render whose value no script could read is not available
/// here. `@event` attributes are not fields: the handler names travel through
/// the separate callbacks map that `render_with_callbacks` registers, and the
/// `on:*` props keys they used to occupy were read by nothing.
fn component_props_arg(
    clean_attrs: &[TemplateAttr],
    comp_name: &str,
    props: &PropsChannel<'_>,
    item_name: Option<&str>,
    idx_name: Option<&str>,
) -> (bool, String) {
    match props.child_declares_props(comp_name) {
        // A child that declares no `Props` struct has no named fields to bind,
        // so the only literal that names anything is one it does not have. What
        // it DOES have is a `values` map (the struct `generate_props_arg` emits
        // on that branch), and a struct literal is exhaustive: leaving `values`
        // out is E0063. An empty map is the honest reading of "this parent
        // binds nothing" and still leaves the child able to accept a binding —
        // the field is the boundary, not an accident.
        Some(false) => {
            return (
                false,
                format!("{comp_name}::PropsArg {{ values: std::collections::HashMap::new() }}"),
            );
        }
        Some(true) => {}
        // A child this component cannot see has no declaration to check
        // against, so its attributes are passed as the name/value form every
        // resolver lookup produces. A real build cannot reach this: the child's
        // module has to exist for the parent to compile at all.
        None => {
            let mut pairs: Vec<String> = Vec::new();
            for a in clean_attrs {
                if let AttrKind::Bind = a.kind {
                    let expr = a.value.clone().unwrap_or_else(|| a.name.clone());
                    let value = bind_attr_value(&a.name, &expr, item_name, idx_name);
                    pairs.push(format!("({:?}, {value}.to_string())", a.name));
                }
            }
            return (
                !pairs.is_empty(),
                format!(
                    "{comp_name}::PropsArg {{ values: std::collections::HashMap::from([{}]) }}",
                    pairs.join(", ")
                ),
            );
        }
    }
    let mut fields: Vec<String> = Vec::new();
    let mut bound: Vec<String> = Vec::new();
    for a in clean_attrs {
        if let AttrKind::Bind = a.kind {
            let expr = a.value.clone().unwrap_or_else(|| a.name.clone());
            let declared = props.child_field(comp_name, &a.name);
            let value = match declared {
                // A function-typed prop is handed over, not converted. Every
                // other type below is reached through the resolver and arrives
                // as a `String`, and `format!("{}", closure)` is a type error at
                // best — so the string path is never taken for one.
                Some(f) if is_function_prop_type(&f.ty) && !is_handler_name(&expr) => {
                    format!(
                        "{name}: compile_error!(\"velox: <{comp_name}> prop `{name}` is a function, and this parent bound it to `{expr}`; a function prop takes the NAME of a method on this component's State, because the handler is invoked through this component's own event dispatcher — bind it as :{name}=\\\"on_confirm\\\"\")",
                        name = a.name
                    )
                }
                // A callback the builder cannot construct. `function_prop_value`
                // emits one closure and one signature — `Fn(&str)`, no return
                // value — so a child declaring `Option<Box<dyn Fn(String) ->
                // bool>>` cannot be handed anything at all. Without this arm it
                // went down the conversion path below and came out as a quoted
                // string, which failed as a type error inside a props literal
                // the author never wrote. Refusing here names the prop, the type
                // they declared, and the signature that works.
                Some(f)
                    if is_function_prop_type(&f.ty) && !is_buildable_function_prop_type(&f.ty) =>
                {
                    let name = a.name.clone();
                    let ty = f.ty.clone();
                    format!(
                        "{name}: compile_error!(\"velox: <{comp_name}> declares prop `{name}` as `{ty}`, and this parent bound a method name to it. The generated handler is a `Fn(&str)` that returns nothing and dispatches by name, so this generator cannot produce that signature. Declare the prop `Option<Box<dyn Fn(&str)>>` (or `Box<dyn Fn(&str)>`) and have the child call it as `f(payload)`\")"
                    )
                }
                Some(f) if is_function_prop_type(&f.ty) => {
                    // The name is prefixed HERE, as every other arm does, rather
                    // than inside `function_prop_value` — the value builder is
                    // about the closure's shape, not about struct-literal
                    // punctuation, and an unprefixed value in this list is a
                    // literal with a field name missing (E0063), which is what
                    // the other arms guard against by construction.
                    format!(
                        "{}: {}",
                        a.name,
                        function_prop_value(comp_name, f, expr.trim())
                    )
                }
                Some(f) => {
                    let value = bind_attr_value(&a.name, &expr, item_name, idx_name);
                    format!("{}: {}", a.name, props_field_value(f, &value))
                }
                // The child is not visible from here, so there is no declared
                // type to convert to. A `String` is what every resolver lookup
                // produces, and a child that wanted anything else will not
                // compile — which is the honest outcome, not a missing prop.
                None => format!(
                    "{}: {}",
                    a.name,
                    bind_attr_value(&a.name, &expr, item_name, idx_name)
                ),
            };
            bound.push(a.name.clone());
            fields.push(value);
        }
    }
    // A field the child declares but the parent never bound is a hole in a
    // struct literal, and the generator cannot tell an intentional omission
    // from a mistake: `PropField` is `{ name, ty }` with no `optional` and no
    // `default` (`script_index::PropField`), and `generate_props_arg` has only
    // the empty / non-empty branches, so there is no third state to read. A
    // fill would have to guess, and a wrong guess is a prop that means
    // something else at run time with nothing to say so — which is how this
    // shipped once. So the literal refuses instead: `compile_error!` names the
    // component and the prop, where the bare E0063 that omitting the field
    // would leave behind points into `OUT_DIR/.../todos.rs` at code the author
    // never wrote.
    //
    // The `compile_error!` is the field's VALUE rather than a bare omission so
    // the literal stays exhaustive: rustc then reports exactly these errors,
    // one per prop, and no E0063 cascade on top.
    //
    // An `Option` prop is the one declaration that says what the omission
    // MEANS, so there is nothing to guess: `None` is the value the author asked
    // for by declaring it optional, and filling it is reading the type rather
    // than inventing a default. That is what makes a callback a prop at all —
    // `<Modal :on_cancel="close">` and `<Modal>` are both legal parents, and
    // without this the second could not compile.
    for declared in props.child_fields(comp_name) {
        if bound.contains(&declared.name) {
            continue;
        }
        if is_optional_type(&declared.ty) {
            fields.push(format!("{}: None", declared.name));
            continue;
        }
        fields.push(format!(
            "{}: compile_error!(\"velox: <{comp_name}> declares prop `{}` and this parent did not bind it; bind it on <{comp_name}> or drop the prop from its Props struct\")",
            declared.name, declared.name
        ));
    }
    (
        true,
        format!("{comp_name}::PropsArg {{ {} }}", fields.join(", ")),
    )
}

/// Convert a resolver-produced value to the type the child declared for it.
///
/// The boundary answer is always a `String`, so a child that declares `bool` or
/// a number gets a conversion rather than a type error. A type with no
/// conversion here is left as the `String` and does not compile: better a
/// compiler message naming the field and its type than a prop that silently
/// means something else at run time.
fn props_field_value(field: &PropField, value: &str) -> String {
    match field.ty.trim() {
        "String" | "str" | "&str" => value.to_string(),
        "bool" => format!("({value}) == \"true\""),
        ty if is_numeric_type(ty) => format!("({value}).parse().unwrap_or_default()"),
        _ => value.to_string(),
    }
}

/// Is `ty` one of the primitive integer or float types `str::parse` can build?
fn is_numeric_type(ty: &str) -> bool {
    matches!(
        ty,
        "i8" | "i16"
            | "i32"
            | "i64"
            | "i128"
            | "isize"
            | "u8"
            | "u16"
            | "u32"
            | "u64"
            | "u128"
            | "usize"
            | "f32"
            | "f64"
    )
}

/// If `expr` references a v-for loop variable, return the direct Rust expression
/// to read it (e.g. `todo` → `todo`, `todo.text` → `todo.text`, `idx` → `idx`).
/// Returns `None` when the expression is not a loop-variable reference (codegen
/// falls back to `resolve(...)`).
fn rewrite_ctx_expr(expr: &str, item_name: Option<&str>, idx_name: Option<&str>) -> Option<String> {
    let expr = expr.trim();
    if let Some(item) = item_name {
        if expr == item {
            return Some(item.to_string());
        }
        if expr.starts_with(item) && expr.len() > item.len() && expr.as_bytes()[item.len()] == b'.'
        {
            return Some(expr.to_string());
        }
    }
    if let Some(idx) = idx_name
        && expr == idx
    {
        return Some(idx.to_string());
    }
    None
}

/// Like [`generate_component_props_expr`] but resolves bind values that reference
/// v-for loop variables directly instead of through `resolve()`.
fn generate_component_props_expr_with_ctx(
    clean_attrs: &[TemplateAttr],
    comp_name: &str,
    props: &PropsChannel<'_>,
    item_name: Option<&str>,
    idx_name: Option<&str>,
) -> (bool, String) {
    component_props_arg(clean_attrs, comp_name, props, item_name, idx_name)
}

/// Like [`emit_props_with`] but resolves loop-variable bindings directly.
fn emit_props_with_ctx(
    attrs: &[TemplateAttr],
    item_name: Option<&str>,
    idx_name: Option<&str>,
) -> String {
    emit_props_in_loop(attrs, item_name, idx_name, None)
}

/// The props chain for an element that is not inside a `v-for` body.
fn emit_props_with(attrs: &[TemplateAttr]) -> String {
    emit_props_in_loop(attrs, None, None, None)
}

/// Build the props chain for an element.
///
/// `resolve_loop` is the `v-for` body the element sits in, and is set only when
/// the Resolve renderer is being generated: there the loop item is an indexed
/// resolver lookup, not a field read, so a loop-rooted `:bind` is normalized
/// accordingly. It is `None` for the State renderer, where the loop item is a
/// real binding and is read directly.
fn emit_props_in_loop(
    attrs: &[TemplateAttr],
    item_name: Option<&str>,
    idx_name: Option<&str>,
    resolve_loop: Option<&VForInfo>,
) -> String {
    if attrs.is_empty() {
        return "Props::new()".to_string();
    }
    let mut parts = vec!["Props::new()".to_string()];
    // Vue MERGES a static `class` with a dynamic `:class` on the same element:
    // the element's class list is both, in any order. `Props::set` replaces, so
    // emitting them as two entries would let whichever came last win — which is
    // order-dependent, and the opposite of what a browser does. One merged entry
    // is emitted instead, in the position of the first class-related attribute.
    //
    // Only an element that HAS both gets a merged entry. A static class alone, a
    // `:class` alone, and a static class on an element with no `:class` keep the
    // exact bytes they had, so this cannot move a golden that has no `:class`
    // next to a static one.
    let static_class = attrs
        .iter()
        .position(|a| matches!(a.kind, AttrKind::Static) && a.name == "class");
    let bound_class: Vec<usize> = attrs
        .iter()
        .enumerate()
        .filter(|(_, a)| matches!(a.kind, AttrKind::Bind) && a.name == "class")
        .map(|(i, _)| i)
        .collect();
    let merged_class = match (static_class, bound_class.first()) {
        (Some(first_static), Some(&first_bound)) => {
            let at = first_static.min(first_bound);
            let mut additions: Vec<String> =
                class_tokens(attrs[first_static].value.as_deref().unwrap_or_default())
                    .iter()
                    .map(|name| format!("__classes.push({});", string_lit(name)))
                    .collect();
            for &i in &bound_class {
                let expr = attrs[i]
                    .value
                    .clone()
                    .unwrap_or_else(|| attrs[i].name.clone());
                let emission = emit_bind_attr("class", &expr, item_name, idx_name, resolve_loop);
                match &emission.value {
                    BindValue::ClassObject { conditions } => {
                        additions.extend(conditions.iter().cloned());
                    }
                    // A `:class` that is not object syntax is a string of class
                    // names — a resolver lookup, or a loop item's field in a loop
                    // body — and it joins the list the same way, by name.
                    // The value is bound first: a `for` head cannot hold a
                    // borrow of a temporary, and the class list outlives this
                    // statement, so the borrow has to have a name.
                    other => additions.push(format!(
                        "let __src = &{}; for __t in __src.split_whitespace() {{ __classes.push(__t); }}",
                        other.expr()
                    )),
                }
            }
            Some((
                at,
                format!(r#".set("class", {})"#, class_block_value(&additions)),
            ))
        }
        _ => None,
    };
    for (i, a) in attrs.iter().enumerate() {
        if let Some((at, entry)) = &merged_class {
            if *at == i {
                parts.push(entry.clone());
                continue;
            }
            let is_class = a.name == "class" && matches!(a.kind, AttrKind::Static | AttrKind::Bind);
            if is_class {
                continue;
            }
        }
        match a.kind {
            AttrKind::Static => {
                let v = a.value.clone().unwrap_or_default();
                parts.push(format!(r#".set("{}", {})"#, a.name, string_lit(&v)));
            }
            AttrKind::Bind => {
                let expr = a.value.clone().unwrap_or_else(|| a.name.clone());
                let key = if a.name == "click-payload" || a.name == "payload" {
                    "on:click-payload"
                } else {
                    &a.name
                };
                parts.push(bind_prop_entry(
                    key,
                    &a.name,
                    &expr,
                    item_name,
                    idx_name,
                    resolve_loop,
                ));
            }
            AttrKind::Directive => {
                // directives are not emitted as props
            }
            AttrKind::On => {
                let handler = a.value.clone().unwrap_or_default();
                parts.push(format!(
                    r#".set("on:{}", {})"#,
                    a.name,
                    string_lit(&handler)
                ));
            }
        }
    }
    parts.join("")
}

/// Append the CSS scope attribute (e.g. `data-v-abc123`) to a props chain string.
/// When `scope_id` is `Some("data-v-xxx")`, appends `.set("data-v-xxx", "")` to the
/// Props builder so scoped CSS selectors match this element.
fn append_scope_attr(props: &str, scope_id: Option<&str>) -> String {
    if let Some(id) = scope_id {
        format!(r#"{}.set("{}", "")"#, props, id)
    } else {
        props.to_string()
    }
}

fn emit_children_with_mode(
    children: &[Node],
    mode: TransformMode,
    fields: &[String],
    props: PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    if children.is_empty() {
        return "vec![]".to_string();
    }
    let mut out = String::new();
    out.push_str("{ let mut __children: Vec<velox_dom::VNode> = Vec::new();\n");
    let mut i = 0usize;
    while i < children.len() {
        match &children[i] {
            Node::Element {
                tag,
                attrs,
                children: ch,
                self_closing,
            } => {
                // v-if chain handling
                if let Some(pos) = attrs
                    .iter()
                    .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "if")
                {
                    let mut attrs_if = attrs.clone();
                    let dir = attrs_if.remove(pos);
                    let expr_if = rewrite_if_expr(&dir.value.unwrap_or_default());
                    let tmp_if = Node::Element {
                        tag: tag.clone(),
                        attrs: attrs_if,
                        children: ch.clone(),
                        self_closing: *self_closing,
                    };
                    let inner_if = emit_node_with_mode(&tmp_if, mode, fields, props, scope_id);

                    let mut chain_parts: Vec<String> = Vec::new();
                    let mut j = i + 1;
                    let mut else_part: Option<String> = None;
                    while j < children.len() {
                        if let Node::Element {
                            tag: tag2,
                            attrs: attrs2,
                            children: ch2,
                            self_closing: sc2,
                        } = &children[j]
                        {
                            if let Some(pos2) = attrs2.iter().position(|a| {
                                matches!(a.kind, AttrKind::Directive)
                                    && (a.name == "else-if" || a.name == "elseif")
                            }) {
                                let mut attrs_ei = attrs2.clone();
                                let dir_ei = attrs_ei.remove(pos2);
                                let expr_ei = rewrite_if_expr(&dir_ei.value.unwrap_or_default());
                                let tmp_ei = Node::Element {
                                    tag: tag2.clone(),
                                    attrs: attrs_ei,
                                    children: ch2.clone(),
                                    self_closing: *sc2,
                                };
                                let inner_ei =
                                    emit_node_with_mode(&tmp_ei, mode, fields, props, scope_id);
                                chain_parts.push(format!(
                                    r#"else if {} {{ {} }}"#,
                                    expr_ei.trim(),
                                    inner_ei
                                ));
                                j += 1;
                                continue;
                            }
                            if let Some(pos3) = attrs2.iter().position(|a| {
                                matches!(a.kind, AttrKind::Directive) && a.name == "else"
                            }) {
                                let mut attrs_e = attrs2.clone();
                                attrs_e.remove(pos3);
                                let tmp_e = Node::Element {
                                    tag: tag2.clone(),
                                    attrs: attrs_e,
                                    children: ch2.clone(),
                                    self_closing: *sc2,
                                };
                                let inner_e =
                                    emit_node_with_mode(&tmp_e, mode, fields, props, scope_id);
                                else_part = Some(format!(r#"else {{ {} }}"#, inner_e));
                                j += 1;
                                break;
                            }
                        }
                        if let Node::Text(t) = &children[j]
                            && is_all_ws(t)
                        {
                            j += 1;
                            continue;
                        }
                        break;
                    }

                    let mut cond = String::new();
                    // No outer `{ … }` around the whole conditional.
                    //
                    // The parens that used to wrap it were a real bug (a
                    // conditional cannot be pushed as a parenthesized value), and
                    // the block that replaced them was an over-correction: an
                    // expression does not need braces, and wrapping one in them
                    // emits `unused_braces` at every site whose body rustc can see
                    // on one line. The braces still needed are the INNER ones —
                    // the `if` arm's own block, which holds the component render's
                    // `let __props` / `let __callbacks` bindings and therefore
                    // cannot be an expression. Four such warnings ship in every
                    // scaffolded app's generated `app.rs`; see
                    // `codegen_unit_tests::v_if_else_emits_block_push`, which pins
                    // both the shape and the per-render-fn count.
                    cond.push_str(&format!(r#"if {} {{ {} }}"#, expr_if.trim(), inner_if));
                    for part in chain_parts.iter() {
                        cond.push(' ');
                        cond.push_str(part);
                    }
                    if let Some(e) = else_part {
                        cond.push(' ');
                        cond.push_str(&e);
                    } else {
                        cond.push_str(r#" else { text("") }"#);
                    }
                    out.push_str(&format!("__children.push({});\n", cond));
                    i = if j > i { j } else { i + 1 };
                    continue;
                }

                // v-for handling
                if let Some(posf) = attrs
                    .iter()
                    .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
                {
                    let v_if_pos = attrs
                        .iter()
                        .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "if");

                    let mut attrs_f = attrs.clone();
                    let dir = attrs_f.remove(posf);
                    let val = dir.value.unwrap_or_default();

                    let key_attr_pos = attrs_f
                        .iter()
                        .position(|a| a.kind == AttrKind::Bind && a.name == "key");
                    let key_expr = if let Some(kp) = key_attr_pos {
                        let key_val = attrs_f[kp].value.clone();
                        attrs_f.remove(kp);
                        Some(key_val)
                    } else {
                        None
                    };

                    if let Some(for_info) = parse_v_for(&val) {
                        let tmp_elem = Node::Element {
                            tag: tag.clone(),
                            attrs: attrs_f,
                            children: ch.clone(),
                            self_closing: *self_closing,
                        };

                        // Where the collection comes from, and therefore what the
                        // loop item is. See the same three-way choice in
                        // `emit_node_with_mode`.
                        let prop_field = mode == TransformMode::Props
                            && props.declares_vec_field(&for_info.expr);
                        let counted = !prop_field && mode != TransformMode::State;

                        if counted {
                            // String-based iteration via resolve()
                            out.push_str(&format!(
                                "let __for_expr = resolve(\"{}\");\n",
                                for_info.expr
                            ));
                            out.push_str(
                                "let __for_count = if let Ok(n) = __for_expr.parse::<usize>() {\n",
                            );
                            out.push_str("    n\n");
                            out.push_str("} else if __for_expr.is_empty() {\n");
                            out.push_str("    0\n");
                            out.push_str("} else {\n");
                            out.push_str("    __for_expr.split(',').count()\n");
                            out.push_str("};\n");
                            out.push_str(&format!(
                                "for {idx_var} in 0..__for_count {{\n",
                                idx_var = for_info.index_name
                            ));
                        } else if prop_field {
                            out.push_str(&format!(
                                "let __col = &{}.{};\n",
                                // `render_with_props` is the only body with a
                                // `props` local; the `render_with_state` body of
                                // the same component reaches the same field
                                // through `state.props`, which is where the props
                                // body put it.
                                if mode == TransformMode::Props {
                                    props.root
                                } else {
                                    "state.props"
                                },
                                for_info.expr
                            ));
                            out.push_str("if !__col.is_empty() {\n");
                            out.push_str(&format!(
                                "    for ({idx_var}, {item_var}) in __col.iter().enumerate() {{\n",
                                idx_var = for_info.index_name,
                                item_var = for_info.item_name
                            ));
                        } else {
                            out.push_str(&format!("let __col = state.{}.get();\n", for_info.expr));
                            out.push_str("if !__col.is_empty() {\n");
                            out.push_str(&format!(
                                "    for ({idx_var}, {item_var}) in __col.iter().enumerate() {{\n",
                                idx_var = for_info.index_name,
                                item_var = for_info.item_name
                            ));
                        }

                        let inner = if counted {
                            emit_node_with_ctx_for_loop(&tmp_elem, &for_info, scope_id)
                        } else {
                            emit_node_with_ctx_state(
                                &tmp_elem,
                                Some(&for_info.item_name),
                                Some(&for_info.index_name),
                                mode,
                                props,
                                scope_id,
                            )
                        };

                        let inner_with_key = if let Some(Some(key_val)) = &key_expr {
                            if counted {
                                format!(
                                    "{{ let mut __node = {}; if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert(\"key\".to_string(), {}); }} __node }}",
                                    inner,
                                    resolve_mode_key_value(key_val, &for_info)
                                )
                            } else {
                                let key_path_str = key_val
                                    .strip_prefix(&for_info.item_name)
                                    .map(|s| s.trim_start_matches('.'))
                                    .unwrap_or("id");
                                format!(
                                    "{{ let mut __node = {}; if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert(\"key\".to_string(), {item_var}.{key_path}.to_string()); }} __node }}",
                                    inner,
                                    item_var = for_info.item_name,
                                    key_path = key_path_str
                                )
                            }
                        } else {
                            inner
                        };

                        if let Some(if_pos) = v_if_pos {
                            let dir_if = &attrs[if_pos];
                            let expr_if =
                                rewrite_if_expr(&dir_if.value.clone().unwrap_or_default());
                            out.push_str(&format!(
                                "    if {} {{\n        __children.push({});\n    }}\n",
                                expr_if.trim(),
                                inner_with_key
                            ));
                        } else {
                            out.push_str(&format!("    __children.push({});\n", inner_with_key));
                        }

                        if !counted {
                            out.push_str("    }\n");
                            out.push_str("}\n");
                        }

                        // A counted collection opens `for {idx} in 0..count {` but
                        // does not close it inline; a real one already closed its for
                        // and if above.
                        if counted {
                            out.push_str("}\n");
                        }
                        i += 1;
                        continue;
                    }
                }

                // default element
                let expr = emit_node_with_mode(&children[i], mode, fields, props, scope_id);
                out.push_str(&format!("__children.push({});\n", expr));
                i += 1;
            }
            _ => {
                let expr = emit_node_with_mode(&children[i], mode, fields, props, scope_id);
                out.push_str(&format!("__children.push({});\n", expr));
                i += 1;
            }
        }
    }
    out.push_str("__children\n}");
    out
}

fn emit_node_with_state(
    n: &Node,
    fields: &[String],
    props: &PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    emit_node_with_mode(n, TransformMode::State, fields, *props, scope_id)
}

fn emit_node_with_ctx_state(
    n: &Node,
    item_name: Option<&str>,
    idx_name: Option<&str>,
    mode: TransformMode,
    props: PropsChannel<'_>,
    scope_id: Option<&str>,
) -> String {
    match n {
        Node::Text(t) => format!(r#"text({})"#, string_lit(t)),
        Node::Interpolation(expr) => {
            let key = expr.trim();
            if let Some(item) = item_name {
                if key == item {
                    return format!(r#"text(format!("{{}}", {item}))"#);
                }
                // Handle dot notation: item.property or item.nested.property
                if key.starts_with(item)
                    && key.len() > item.len()
                    && key.as_bytes()[item.len()] == b'.'
                {
                    let prop_path = &key[item.len()..];
                    return format!(
                        r#"text({{ let __obj = &{item}; __obj{}.to_string() }})"#,
                        prop_path
                    );
                }
            }
            if let Some(idx) = idx_name
                && key == idx
            {
                return format!(r#"text({idx}.to_string())"#);
            }
            let key_lit = string_lit(key);
            format!(r#"text(resolve({}))"#, key_lit)
        }
        Node::Element {
            tag,
            attrs,
            children,
            ..
        } => {
            // Desugar `v-model` here, where the loop variables are in scope:
            // this is the only loop-body emitter on the State-mode path, and
            // `emit_props_with_ctx` drops every directive, so a `v-model` that
            // reached it would lose both its value bind and its handler. The
            // read is a direct field read of the loop item, the shape State mode
            // already emits for a loop-rooted binding; a loop-rooted expression
            // gets no handler, and `collect_resolver_keys` reports the write it
            // cannot route.
            let (attrs2, _v_model_handler) = extract_vmodel(attrs, item_name, idx_name);
            let attrs = &attrs2;
            // Handle <slot> inside v-for context
            if tag == "slot" {
                // Folded the same way as the parent's key — see
                // `normalize_slot_name`.
                let slot_name = slot_outlet_name(attrs);

                // Fallback children rendered with ctx state
                let fallback_children: Vec<String> = children
                    .iter()
                    .map(|c| {
                        emit_node_with_ctx_state(c, item_name, idx_name, mode, props, scope_id)
                    })
                    .collect();
                let fallback = format!("vec![{}]", fallback_children.join(", "));

                return format!(
                    r#"render_slot({slot_name_lit}, || {{ velox_dom::h(\"slot\", velox_dom::Props::new(), {fallback}) }})"#,
                    slot_name_lit = string_lit(&slot_name),
                    fallback = fallback,
                );
            }

            // handle directive `v-show` inside the loop body
            // v-show always renders the element but toggles CSS `display: none`
            // based on the expression, preserving it in the DOM (unlike v-if).
            if let Some(pos) = attrs
                .iter()
                .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "show")
            {
                let mut attrs2 = attrs.clone();
                let dir = attrs2.remove(pos);
                // A condition rooted at the loop variable is a real field read
                // here, so it goes through the one function that knows the loop
                // scope — the same one `:class` conditions use. `resolve_loop` is
                // `None` because this is the State renderer, where the loop item
                // IS a binding.
                let (expr, _keys) =
                    condition_expr(&dir.value.unwrap_or_default(), item_name, idx_name, None);

                // Build the element without the v-show directive, then conditionally
                // set display style based on the expression value.
                let inner = emit_node_with_ctx_state(
                    &Node::Element {
                        tag: tag.clone(),
                        attrs: attrs2.clone(),
                        children: children.clone(),
                        self_closing: false,
                    },
                    item_name,
                    idx_name,
                    mode,
                    props,
                    scope_id,
                );

                // If the element already has a `style` attribute, we merge the
                // display value. Otherwise, we add a style attribute.
                let has_style = attrs.iter().any(|a| {
                    a.name == "style" && matches!(a.kind, AttrKind::Static | AttrKind::Bind)
                });

                if has_style {
                    // The style attr is already emitted by emit_node_with_ctx_state.
                    // We wrap the result: if expression is false, override display.
                    return format!(
                        r#"{{ let mut __node = {inner}; if !({expr}) {{ if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.entry("style".to_string()).and_modify(|s| {{ if s.contains("display:") {{ /* preserve existing display */ }} else {{ s.push_str("; display: none"); }} }}).or_insert_with(|| "display: none".to_string()); }} }} __node }}"#,
                        inner = inner,
                        expr = expr.trim()
                    );
                }
                return format!(
                    r#"{{ let mut __node = {inner}; if !({expr}) {{ if let velox_dom::VNode::Element {{ ref mut props, .. }} = __node {{ props.attrs.insert("style".to_string(), "display: none".to_string()); }} }} __node }}"#,
                    inner = inner,
                    expr = expr.trim()
                );
            }

            // v-if inside the loop body
            if let Some(pos) = attrs
                .iter()
                .position(|a| matches!(a.kind, AttrKind::Directive) && a.name == "if")
            {
                let mut attrs2 = attrs.clone();
                let dir = attrs2.remove(pos);
                // See the `v-show` branch above: a loop-rooted condition is a field
                // read in this renderer, and a condition on a `State` getter is a
                // resolver lookup. One function emits both, so the element appears
                // for the same reason a root `v-if` does.
                let (expr_if, _keys) =
                    condition_expr(&dir.value.unwrap_or_default(), item_name, idx_name, None);
                let tmp = Node::Element {
                    tag: tag.clone(),
                    attrs: attrs2,
                    children: children.clone(),
                    self_closing: false,
                };
                let inner =
                    emit_node_with_ctx_state(&tmp, item_name, idx_name, mode, props, scope_id);
                return format!(
                    r#"if {} {{ {} }} else {{ text("") }}"#,
                    expr_if.trim(),
                    inner
                );
            }

            // Component inside the loop body: props must be built from the loop
            // variables directly (resolve() returns "" for loop vars).
            if let Some(component_attr) = attrs
                .iter()
                .find(|a| a.name == "data-velox-component" && a.kind == AttrKind::Static)
                && let Some(comp_name) = &component_attr.value
            {
                let mut clean_attrs = attrs.clone();
                clean_attrs.retain(|a| a.name != "data-velox-component");

                let has_slot_children = !children.is_empty();

                let (_has_props, props_expr) = generate_component_props_expr_with_ctx(
                    &clean_attrs,
                    comp_name,
                    &props,
                    item_name,
                    idx_name,
                );
                let callbacks = collect_component_callbacks(&clean_attrs);

                // A component in a loop body is reached from the same render
                // path as one outside it, so the handlers it binds are
                // registered the same way — with the loop's own `item` still in
                // scope for the dispatcher to close over.
                //
                // State mode only, exactly as outside the loop: the registration
                // closes over `state` (`emit_dispatch_registrations` emits
                // `Arc::downgrade(&state)`), and only the State path binds
                // `state` as the `Arc<State>` that call needs. This function is
                // reached from Props mode too — a `v-for` over a declared `Vec`
                // field lands here — and there `state` is either absent
                // (E0425) or a plain `script_rs::State` (E0308). Resolve mode
                // has no `State` to dispatch through at all.
                let dispatch = if mode == TransformMode::State {
                    emit_dispatch_registrations(
                        comp_name,
                        &component_dispatch_handlers(&clean_attrs, comp_name, &props),
                    )
                } else {
                    String::new()
                };

                // One map entry per slot the children name; see `slots_map_expr`.
                let slots_expr = if has_slot_children {
                    slots_map_expr(children, &|c| {
                        emit_node_with_ctx_state(c, item_name, idx_name, mode, props, scope_id)
                    })
                } else {
                    "std::collections::HashMap::new()".to_string()
                };

                if callbacks.is_empty() {
                    if !has_slot_children {
                        return format!(
                            r#"{{ {dispatch}let __props = {props_expr}; {comp_name}::render_with_props(__props) }}"#,
                        );
                    }
                    return format!(
                        r#"{{ {dispatch}let __props = {props_expr}; let __slots = {slots_expr}; {comp_name}::render_with_slots_only(__props, &__slots) }}"#,
                    );
                }

                // No slot children but has callbacks: use render_with_callbacks
                if !has_slot_children {
                    let callback_map = format_callback_map(&callbacks);
                    let callback_names: Vec<String> = callbacks
                        .iter()
                        .map(|(_, handler)| handler.clone())
                        .collect();

                    return format!(
                        r#"{{ {dispatch}let __props = {props_expr}; let __callbacks = {callback_map}; {comp_name}::render_with_callbacks(__props, &__callbacks, &[{callback_names}]) }}"#,
                        callback_names = callback_names
                            .iter()
                            .map(|n| format!("\"{}\"", n))
                            .collect::<Vec<_>>()
                            .join(", ")
                    );
                }

                // Has both callbacks and slot children: use render_with_slots
                let callback_map = format_callback_map(&callbacks);
                let callback_names: Vec<String> = callbacks
                    .iter()
                    .map(|(_, handler)| handler.clone())
                    .collect();

                return format!(
                    r#"{{ {dispatch}let __props = {props_expr}; let __callbacks = {callback_map}; let __slots = {slots_expr}; {comp_name}::render_with_slots(__props, &__callbacks, &[{callback_names}], &__slots) }}"#,
                    callback_names = callback_names
                        .iter()
                        .map(|n| format!("\"{}\"", n))
                        .collect::<Vec<_>>()
                        .join(", ")
                );
            }

            // Plain element inside the loop body.
            let elem_props = emit_props_with_ctx(attrs, item_name, idx_name);
            let mut k_items: Vec<String> = Vec::new();
            for c in children {
                k_items.push(emit_node_with_ctx_state(
                    c, item_name, idx_name, mode, props, scope_id,
                ));
            }
            let kids = format!("vec![{}]", k_items.join(", "));
            format!(
                r#"h("{}", {}, {kids})"#,
                tag,
                append_scope_attr(&elem_props, scope_id)
            )
        }
    }
}

#[allow(dead_code)]
fn emit_node_with_ctx(n: &Node, loop_var: Option<&str>, scope_id: Option<&str>) -> String {
    match n {
        Node::Text(t) => format!(r#"text({})"#, string_lit(t)),
        Node::Interpolation(expr) => {
            let key = expr.trim();
            if let Some(var) = loop_var {
                if key == var {
                    return "text(__i.to_string())".to_string();
                }
                // Handle dot notation: item.property or item.nested.property
                if key.starts_with(var)
                    && key.len() > var.len()
                    && key.as_bytes()[var.len()] == b'.'
                {
                    let prop_path = &key[var.len()..];
                    return format!(
                        r#"text({{ let __obj = __i; __obj{}.to_string() }})"#,
                        prop_path
                    );
                }
            }
            let key_lit = string_lit(key);
            format!(r#"text(resolve({}))"#, key_lit)
        }
        Node::Element {
            tag,
            attrs,
            children,
            ..
        } => {
            let elem_props = emit_props_with(attrs);
            let kids = {
                let mut k_items: Vec<String> = Vec::new();
                for c in children {
                    k_items.push(emit_node_with_ctx(c, loop_var, scope_id));
                }
                format!("vec![{}]", k_items.join(", "))
            };
            format!(
                r#"h("{}", {}, {kids})"#,
                tag,
                append_scope_attr(&elem_props, scope_id)
            )
        }
    }
}

/// Emit a node with context for the render() path inside a v-for loop.
/// This version uses resolve() with indexed access for collection items.
/// For `item in items`, it generates code like `resolve("items[__i].property")`
/// or `resolve("items[__i]")` for the item itself.
fn emit_node_with_ctx_for_loop(n: &Node, for_info: &VForInfo, scope_id: Option<&str>) -> String {
    match n {
        Node::Text(t) => format!(r#"text({})"#, string_lit(t)),
        Node::Interpolation(expr) => {
            let key = expr.trim();
            if key == for_info.item_name {
                // Direct item reference: use indexed access via resolve
                return format!(
                    r#"text(resolve(&format!("{}[{{}}]", {})))"#,
                    for_info.expr, for_info.index_name
                );
            }
            // Handle dot notation: item.property -> items[__i].property
            if key.starts_with(&for_info.item_name)
                && key.len() > for_info.item_name.len()
                && key.as_bytes()[for_info.item_name.len()] == b'.'
            {
                let prop_path = &key[for_info.item_name.len()..];
                return format!(
                    r#"text(resolve(&format!("{expr}[{{}}]{prop_path}", {idx})))"#,
                    expr = for_info.expr,
                    idx = for_info.index_name,
                );
            }
            if key == for_info.index_name {
                return format!(r#"text({}.to_string())"#, for_info.index_name);
            }
            let key_lit = string_lit(key);
            format!(r#"text(resolve({}))"#, key_lit)
        }
        Node::Element {
            tag,
            attrs,
            children,
            ..
        } => {
            // Inside a Resolve-mode loop body the loop item is an indexed
            // resolver read, so a loop-rooted binding is normalized as such.
            let elem_props = emit_props_in_loop(
                attrs,
                Some(&for_info.item_name),
                Some(&for_info.index_name),
                Some(for_info),
            );
            let kids = {
                let mut k_items: Vec<String> = Vec::new();
                for c in children {
                    k_items.push(emit_node_with_ctx_for_loop(c, for_info, scope_id));
                }
                format!("vec![{}]", k_items.join(", "))
            };
            format!(
                r#"h("{}", {}, {kids})"#,
                tag,
                append_scope_attr(&elem_props, scope_id)
            )
        }
    }
}

/// Collect `@event="handler"` attrs from component attributes.
/// Returns a list of `(event_name, handler_name)` pairs.
fn collect_component_callbacks(attrs: &[TemplateAttr]) -> Vec<(String, String)> {
    attrs
        .iter()
        .filter(|a| a.kind == AttrKind::On)
        .filter_map(|a| {
            let handler = a.value.clone().unwrap_or_default();
            if handler.is_empty() {
                None
            } else {
                Some((a.name.clone(), handler))
            }
        })
        .collect()
}

/// Generate a Rust expression for a HashMap of callbacks.
/// Input: `[("change", "on_change"), ("submit", "on_submit")]`
/// Output: `std::collections::HashMap::from([("change", "on_change"), ("submit", "on_submit")])`
fn format_callback_map(callbacks: &[(String, String)]) -> String {
    if callbacks.is_empty() {
        return "std::collections::HashMap::new()".to_string();
    }
    let entries: Vec<String> = callbacks
        .iter()
        .map(|(event, handler)| format!("({}, {})", string_lit(event), string_lit(handler)))
        .collect();
    format!("std::collections::HashMap::from([{}])", entries.join(", "))
}

/// --- Function-typed props -------------------------------------------------
///
/// A prop whose declared type is a closure is the one binding that cannot go
/// through the resolver. Every other prop arrives at the boundary as a
/// `String` — that is the shape `resolve()` returns and the shape the literal
/// converts from — and a closure has no string that can be called back. So a
/// function prop is passed THROUGH: the parent's own dispatcher goes into the
/// props literal as a closure, and the child calls it.
///
/// Passing it through the same registry `@event` uses is what keeps the two
/// syntaxes to one mechanism. The parent's `make_on_event` already owns an arm
/// per handler with the arity the method declared, so the closure re-enters the
/// dispatcher by NAME rather than calling the method itself: the child states
/// which handler it wants, and the parent — the only side that knows what
/// `on_confirm` means — decides what running it looks like. A zero-argument
/// handler and a payload handler therefore both work through the same emitted
/// closure, and the child never carries a `State` reference around to make the
/// call itself.
///
/// The contract, in the terms a component author writes against:
///
/// - Declare `on_confirm: Option<Box<dyn Fn(&str)>>` in the child's `Props`.
/// - The parent binds `:on_confirm="on_confirm"`, where `on_confirm` is the
///   name of a zero- or one-argument method on the PARENT's `State`.
/// - The child calls it as `props.on_confirm.as_ref().map(|f| f("payload"))`,
///   or through the generated `script_rs::emit`-equivalent path.
/// - `Option` is what makes the binding optional: a parent that leaves an
///   optional function prop unbound compiles, and a parent that leaves a
///   required one unbound gets the same `compile_error!` that names it as every
///   other unbound prop does.
///
/// The containers a `Props` struct conventionally puts around a callback, and
/// the constructor that rebuilds each one.
///
/// ONE list, read by the two functions that must not disagree: the predicate
/// that recognises a function prop ([`fn_prop_core`]) and the builder that wraps
/// the emitted closure ([`wrap_by_declared_type`]). A wrapper one of them
/// recognises and the other does not is a prop that is correctly identified and
/// then filled with a value of the wrong shape — a type error inside generated
/// code, which is the failure mode this module is written to avoid.
///
/// The fully-qualified spellings come before the bare ones because the peel is a
/// prefix strip rather than a token match: `std::rc::Rc<` has to be tried
/// before `Rc<`, or the bare marker would match and leave `::` behind.
const PROP_TYPE_WRAPPERS: [(&str, &str); 9] = [
    ("std::option::Option<", "Some"),
    ("Option<", "Some"),
    ("Box<", "Box::new"),
    ("std::rc::Rc<", "std::rc::Rc::new"),
    ("std::sync::Arc<", "std::sync::Arc::new"),
    ("std::cell::RefCell<", "std::cell::RefCell::new"),
    ("Rc<", "std::rc::Rc::new"),
    ("Arc<", "std::sync::Arc::new"),
    ("RefCell<", "std::cell::RefCell::new"),
];

/// The closure type a declared `Props` type wraps down to, with the containers
/// peeled off and a `dyn ` dropped — `Option<Box<dyn Fn(&str)>>` gives
/// `Fn(&str)`, the bare `dyn Fn(&str)` gives `Fn(&str)`.
fn fn_prop_core(ty: &str) -> Option<&str> {
    let mut inner = ty.trim();
    let mut peeled = false;
    loop {
        // The LONGEST matching marker wins, so `std::rc::Rc<` beats `Rc<`.
        let Some(marker) = PROP_TYPE_WRAPPERS
            .iter()
            .filter(|(marker, _)| inner.starts_with(marker))
            .map(|(marker, _)| *marker)
            .max_by_key(|marker| marker.len())
        else {
            break;
        };
        inner = inner[marker.len()..].trim_end_matches('>').trim();
        peeled = true;
    }
    if !peeled {
        return None;
    }
    Some(inner.strip_prefix("dyn ").unwrap_or(inner).trim())
}

/// Is `ty` a callback the parent has to hand OVER rather than convert?
///
/// This is a RECOGNITION question and is deliberately broad: a `Props` field
/// whose type names a closure is a callback, whatever the argument list says, and
/// recognising it is what routes it away from the `String`-conversion path at
/// all. How much of that the builder can actually produce is a separate question,
/// asked by [`is_buildable_function_prop_type`].
fn is_function_prop_type(ty: &str) -> bool {
    // Deliberately a prefix test rather than a parse: the generator has no type
    // information for the argument list, and a `Props` field whose type starts
    // with `Fn` is a callback far more often than anything else.
    fn_prop_core(ty).is_some_and(|core| core.starts_with("Fn"))
}

/// Can `function_prop_value` build a value for a prop declared `ty`?
///
/// It emits exactly one closure —
/// `move |__vx_payload: &str| { Comp::dispatch_emit(name, __vx_payload); }` — so
/// exactly one signature is buildable: one borrowed payload in, nothing out.
/// `FnMut` and `FnOnce` are accepted alongside `Fn` because a closure that
/// implements `Fn` satisfies all three, which is what makes
/// `RefCell<Box<dyn FnMut(&str)>>` a shape the wrappers can reach.
///
/// This exists so the generator can REFUSE what it cannot build.
/// `Option<Box<dyn Fn(String) -> bool>>` passes [`is_function_prop_type`], and
/// without this question the author got a type error deep inside a props literal
/// they never wrote, pointing into `OUT_DIR`. With it they get a
/// `compile_error!` naming the prop, the type they declared, and the signature
/// that works — the same deliberate refusal the call-binding case in
/// `generate_component_props_expr` already emits.
fn is_buildable_function_prop_type(ty: &str) -> bool {
    fn_prop_core(ty).is_some_and(|core| matches!(core, "Fn(&str)" | "FnMut(&str)" | "FnOnce(&str)"))
}

/// Is `ty` an `Option<…>`, i.e. a field a parent may legitimately leave unbound?
///
/// Both spellings count. `std::option::Option<String>` is what an author gets
/// from writing the path out in full, and it names the same type as `Option<`;
/// treating it as a REQUIRED prop would emit the `compile_error!` for a field
/// the author explicitly declared optional.
fn is_optional_type(ty: &str) -> bool {
    let ty = ty.trim();
    PROP_TYPE_WRAPPERS
        .iter()
        .filter(|(marker, _)| marker.ends_with("Option<"))
        .any(|(marker, _)| ty.starts_with(marker))
}

/// Is `expr` a name the parent can HAND OVER — one identifier, and nothing else?
///
/// A function prop is a different question from the one `is_bare_identifier`
/// asks, and it is asked of different syntax. That one answers whether a
/// resolver KEY can be rendered as text, and the guard in
/// `tests/answerability_decides_in_one_place.rs` holds it to a single predicate
/// on purpose. This one answers whether the generator can BUILD A CLOSURE that
/// re-enters the parent's dispatcher by this name: it has to name the handler,
/// and a call or a member path is an expression it would have to re-evaluate
/// inside the closure, whose own captures would not survive the move. Filing
/// that under `is_bare_identifier` would put a props-path decision inside a
/// decision named for answerability, and the guard's whole point is that
/// nothing else gets to do that.
///
/// The two agree on every expression the generator can see today — the
/// difference is only which question the answer is filed under.
fn is_handler_name(expr: &str) -> bool {
    let expr = expr.trim();
    !expr.is_empty()
        && !expr.starts_with(|c: char| c.is_ascii_digit())
        && expr.chars().all(|c| c.is_ascii_alphanumeric() || c == '_')
}

/// The function-typed prop bindings on one component tag, as
/// `(prop field name, handler name)` pairs.
///
/// The binding is a bare name, the restriction [`is_handler_name`] states: the
/// closure the parent hands over is built from the parent's own `State`, so the
/// generator has to name the handler to dispatch it. A bind that is a function
/// prop and not a bare name is reported at the call site by a `compile_error!`
/// naming the constraint, rather than failing as a type error inside a
/// stringified prop.
fn collect_function_prop_bindings(
    attrs: &[TemplateAttr],
    comp_name: &str,
    props: &PropsChannel<'_>,
) -> Vec<(String, String)> {
    let mut out: Vec<(String, String)> = Vec::new();
    for a in attrs {
        if a.kind != AttrKind::Bind {
            continue;
        }
        let Some(field) = props.child_field(comp_name, &a.name) else {
            continue;
        };
        if !is_function_prop_type(&field.ty) {
            continue;
        }
        let expr = a.value.clone().unwrap_or_else(|| a.name.clone());
        if is_handler_name(&expr) {
            out.push((a.name.clone(), expr.trim().to_string()));
        }
    }
    out
}

/// The Rust value a function-typed prop binding takes in the parent's props
/// literal: a closure that hands the payload to the child's handler registry,
/// by handler name.
///
/// The closure calls `{comp_name}::dispatch_emit(name, payload)` — the child's
/// OWN static entry point — rather than a dispatcher local to this render. Two
/// consequences, both wanted:
///
/// * It needs no `State` in scope, so a function prop is expressible on every
///   render path, including `resolve`, which has none.
/// * The `State` the handler finally runs against is the one the STATE render
///   registered (see `emit_dispatch_registrations`), not a throwaway built for
///   the render that happened to build this literal. Dispatching through a local
///   dispatcher would have handed the child a handler over a `State` that no
///   longer exists by the time the child fires.
///
/// So the value is the closure and the wrapper the child's DECLARED type asks
/// for — read off the type, never assumed, because the parent is filling in
/// somebody else's struct field: `Option<Box<dyn Fn(&str)>>` is the shape a
/// Confirm should declare, and it is a `Box` around a `Fn`, NOT the
/// `Rc<RefCell<…>>` the registry itself stores. Those are two different
/// contracts and conflating them produces a literal that does not coerce.
fn function_prop_value(comp_name: &str, field: &PropField, handler: &str) -> String {
    let body = format!(
        "move |__vx_payload: &str| {{ {comp_name}::dispatch_emit({}, __vx_payload); }}",
        string_lit(handler)
    );
    wrap_by_declared_type(field.ty.trim(), body)
}

/// Apply exactly the wrappers the declared type names, outermost first.
///
/// Each wrapper is peeled off the front of the type and its constructor pushed
/// onto a list, which is then applied in reverse — so `Option<Box<dyn Fn(&str)>>`
/// peels as `Option` then `Box` and rebuilds as `Some(Box::new(closure))`. An
/// unknown wrapper (a named type alias, a `Signal`, a tuple) peels nothing and
/// leaves the bare closure, which is the right answer for `dyn Fn(&str)`, and a
/// type error the author can see for anything else.
fn wrap_by_declared_type(ty: &str, body: String) -> String {
    let mut ctors: Vec<&str> = Vec::new();
    let mut rest = ty.trim();
    loop {
        // The LONGEST matching marker wins, so `std::rc::Rc<` is peeled as
        // itself rather than as the `Rc<` that its tail also starts with.
        let Some((marker, ctor)) = PROP_TYPE_WRAPPERS
            .iter()
            .filter(|(marker, _)| rest.starts_with(marker))
            .max_by_key(|(marker, _)| marker.len())
        else {
            break;
        };
        ctors.push(ctor);
        rest = &rest[marker.len()..];
    }
    ctors
        .into_iter()
        .rev()
        .fold(body, |inner, ctor| format!("{ctor}({inner})"))
}

/// The statements a parent emits immediately before it renders a child, so
/// every handler the parent bound on that tag is callable by the child.
///
/// One dispatcher per handler, not one per child: the dispatcher borrows its
/// `State`, so each closure needs its own instance to `move`, and the
/// alternative — a shared `&mut` behind an `Rc` — would mean the child can only
/// ever hold one handler.
///
/// `handlers` are the handler NAMES the parent bound on this tag, and the name is
/// both halves of what gets emitted: it is the registry key the child's `emit`
/// resolves to, and it is what the parent's own `make_on_event` is asked for.
/// That is the same name twice because `make_on_event` matches on handler names
/// — it is the dispatcher every `@click="fire"` in this component's template goes
/// through, so its arms are keyed by method name and nothing else. Asking it for
/// the EVENT instead (`@confirm="on_confirm"` -> `"confirm"`) reaches no arm at
/// all: the closure runs, the `match` falls through to its wildcard, and the
/// payload is dropped with nothing to show for it.
///
/// # The registry holds a WEAK state, and that is load-bearing
///
/// The child fires long after this render returned — from its own event handler,
/// from a click — so the registry cannot borrow the `State` and has to own
/// something. Owning an `Arc` clone means the LAST reference to a component's
/// `State` lives in a `thread_local!`, so the `State` is not destroyed when the
/// app drops it but when the THREAD exits, inside that thread-local's own
/// destructor. A component `State` holds `Signal`s, and a live `Signal` holds an
/// `EffectHandle` whose `Drop` calls `mark_stopped`, which reads a `thread_local!`
/// in `velox-core` — by then already destroyed. `thread_local!` destructors run in
/// reverse construction order across crates, so the ordering is not ours to
/// control, and `mark_stopped`'s `LocalKey::with` panics with `AccessError`. A
/// panic in a destructor aborts the process, so this shows up as the whole test
/// binary dying at exit rather than as a failed assertion.
///
/// A `Weak` inverts the ownership: the registry no longer extends the `State`'s
/// life, so the `State` is destroyed when the app drops it — while every
/// thread-local is still alive, which is the only ordering in which a `Signal`'s
/// `Drop` is allowed to touch one. The cost is that a handler fired after the app
/// dropped the `State` is a no-op rather than a resurrection of freed state,
/// which is the correct way round: a component whose state is gone has no method
/// left to run.
///
/// So the dispatcher is built per CALL, from an upgraded `Weak`, rather than once
/// per render: `make_on_event` takes an `Arc` by value, and there is no `Arc` to
/// give it at registration time. That is one `Arc` upgrade and one small closure
/// per dispatched event, against a re-render per keystroke.
///
/// Only the State render path emits this. The `resolve` path has no `State` to
/// dispatch through at all, and the props path has only just built a `State`
/// that belongs to this render and dies with it — registering into it would
/// hand the child a handler whose `State` is stale by the time it fires.
fn emit_dispatch_registrations(comp_name: &str, handlers: &[String]) -> String {
    if handlers.is_empty() {
        return String::new();
    }
    let mut out = String::new();
    for (i, handler) in handlers.iter().enumerate() {
        out.push_str(&format!(
            "let __vx_state_{i} = std::sync::Arc::downgrade(&state); \
             {comp_name}::set_emit_dispatch({name}, std::rc::Rc::new(std::cell::RefCell::new(\
             move |__vx_payload: &str| {{ \
             if let Some(__vx_state) = __vx_state_{i}.upgrade() {{ \
             let mut __vx_dispatch = make_on_event(__vx_state); \
             __vx_dispatch({name}, Some(__vx_payload)); \
             }} \
             }}))); ",
            name = string_lit(handler),
        ));
    }
    out
}

/// Every handler name a child on this tag can be reached by: the `@event`
/// bindings plus the function-typed prop bindings, deduplicated so one handler
/// bound twice registers once.
///
/// For `@confirm="on_confirm"` that is `on_confirm`, and for a function prop
/// `:on_confirm="on_confirm"` it is also `on_confirm` — but for the opposite
/// reason, and the difference is the whole reason the function-prop case keys on
/// the handler and not on the prop field: `function_prop_value` builds the
/// closure the child receives as `dispatch_emit(<bound name>)`, so the bound name
/// is what `dispatch_emit` will look the dispatcher up under. Registering the
/// prop field name instead finds nothing when the two differ
/// (`:on_confirm="handle_ok"`), and the child's call is dropped at run time.
fn component_dispatch_handlers(
    clean_attrs: &[TemplateAttr],
    comp_name: &str,
    props: &PropsChannel<'_>,
) -> Vec<String> {
    let mut out: Vec<String> = collect_component_callbacks(clean_attrs)
        .into_iter()
        .map(|(_event, handler)| handler)
        .collect();
    for (_prop_name, handler) in collect_function_prop_bindings(clean_attrs, comp_name, props) {
        if !out.contains(&handler) {
            out.push(handler);
        }
    }
    out
}

/// Handler names a function-typed prop binding introduces, so the parent's
/// dispatcher emits an arm for each.
///
/// `:on_confirm="on_confirm"` needs the arm `@confirm="on_confirm"` gets: the
/// method the child calls still lives on the parent's `State`, so the parent
/// has to own it. Without this the closure would dispatch to a name with no arm
/// and the child's call would be dropped at run time — the same silent no-op
/// `emit` had before the dispatch registry existed, one layer down.
fn collect_function_prop_handlers(nodes: &[Node], props: &PropsChannel<'_>) -> Vec<String> {
    fn walk(node: &Node, props: &PropsChannel<'_>, out: &mut Vec<String>) {
        let Node::Element {
            attrs, children, ..
        } = node
        else {
            return;
        };
        if let Some(comp_name) = attrs
            .iter()
            .find(|a| a.name == "data-velox-component" && a.kind == AttrKind::Static)
            .and_then(|a| a.value.clone())
        {
            for (_, handler) in collect_function_prop_bindings(attrs, &comp_name, props) {
                if !out.contains(&handler) {
                    out.push(handler);
                }
            }
        }
        for c in children {
            walk(c, props, out);
        }
    }
    let mut out: Vec<String> = Vec::new();
    for n in nodes {
        walk(n, props, &mut out);
    }
    out
}

// --- Named slots ----------------------------------------------------------

/// The slot NAME a child element is bound to, from `v-slot:foo` or the `#foo`
/// shorthand. `None` for a child that names no slot, which is the default slot.
///
/// `pub(crate)` for the crate's unit tests: this and the two functions below are
/// pure AST transforms, and the only way to say what they do to a node is to hand
/// them one. Asserting it through the generated Rust does not work — the props
/// builder ignores `AttrKind::Directive`, so whether the `slot:` attribute was
/// stripped is invisible in the output and the assertion would hold either way.
pub(crate) fn slot_binding(node: &Node) -> Option<String> {
    let Node::Element { attrs, .. } = node else {
        return None;
    };
    for a in attrs {
        if !matches!(a.kind, AttrKind::Directive) {
            continue;
        }
        // The parser folds both spellings into one name: `v-slot:foo` arrives as
        // `slot:foo` (the `v-` prefix is stripped and the name is kebab-cased by
        // `normalize_directive_name`), and `#foo` is mapped onto the same
        // spelling so the two cannot drift apart downstream. The name is
        // therefore kebab-case, which is also what `<slot name="foo-bar">` on the
        // child side has to say to match `v-slot:fooBar`.
        if let Some(name) = a.name.strip_prefix("slot:") {
            let name = name.trim();
            if !name.is_empty() {
                return Some(name.to_string());
            }
        }
    }
    None
}

/// The element with its slot binding removed, so `v-slot:footer` is not also
/// emitted as an unknown directive on the slot content.
///
/// The binding names the slot; it is not an attribute of the content. Leaving it
/// on is a latent defect rather than a present one: `emit_props_in_loop` emits
/// `AttrKind::Static` and `AttrKind::Bind` and ignores `AttrKind::Directive`
/// entirely, so today the binding would be dropped anyway. It is removed HERE so
/// that the content node is correct on its own terms, and so the guarantee does
/// not silently stop holding the moment a directive becomes something the props
/// builder emits — at which point every `<p v-slot:footer>` would start writing
/// a `slot:footer` attribute into the caller's DOM.
pub(crate) fn strip_slot_binding(node: &Node) -> Node {
    let Node::Element {
        tag,
        attrs,
        children,
        self_closing,
    } = node
    else {
        return node.clone();
    };
    let attrs: Vec<TemplateAttr> = attrs
        .iter()
        .filter(|a| !(a.kind == AttrKind::Directive && a.name.starts_with("slot:")))
        .cloned()
        .collect();
    Node::Element {
        tag: tag.clone(),
        attrs,
        children: children.clone(),
        self_closing: *self_closing,
    }
}

/// What a slot-bound child element contributes to its slot, with the binding
/// itself removed.
///
/// A `<template v-slot:footer>` wrapper contributes its CHILDREN, not itself:
/// `template` is not an element the renderer knows, so a fragment bound through
/// one has to be flattened or it renders as an inert `<template>` node with the
/// caller's content inside it. A plain element (`<h1 v-slot:header>`) is its own
/// content. Either way the `v-slot:` / `#` attribute comes off: it named the
/// slot, it is not an attribute of the content, and leaving it on would emit a
/// `slot:footer` directive the emitter has no handler for.
pub(crate) fn slot_content(node: &Node) -> Vec<Node> {
    match node {
        Node::Element { tag, children, .. }
            if tag == "template" && slot_binding(node).is_some() =>
        {
            children.clone()
        }
        other => vec![strip_slot_binding(other)],
    }
}

/// Build the `HashMap` a parent hands a child as its slots: slot name to the
/// already-rendered `VNode` the child reads back out of `render_slot`.
///
/// Children are grouped by the slot they name. Several children may name the
/// same slot (`<p v-slot:footer>a</p><p v-slot:footer>b</p>`) and land in one
/// entry as a `<slot>` wrapper element, which is the same shape a multi-child
/// default slot already has. A child that names no slot is the default slot,
/// and the default slot is a real entry in the same map — there is no separate
/// path for it.
///
/// # Slotted content carries the CALLER's scope id, so a child's `scoped` CSS
/// cannot style it
///
/// `emit` is called with THIS component's `scope_id`, and every node it produces
/// is tagged with it. Slot content is produced by the CALLER's `emit`, with the
/// caller's `scope_id` — so a node a caller passes into a slot carries the
/// caller's `data-v-*`, never this component's. A `scoped` style block here
/// cannot reach it: its selectors are suffixed with this component's scope
/// attribute, and no slotted node has it. The caller's own `scoped` CSS can
/// reach it, because the nodes are the caller's own.
///
/// This is a consequence of WHERE slot content is evaluated, not a defect to fix
/// here, and it is not fixable by a different data structure: the content is a
/// fragment of the caller's template, built from the caller's bindings, and any
/// arrangement that let a child reach into it would have to hand the child the
/// caller's bindings — which is a scoped-slots channel this framework does not
/// have. The consequence for component authors is a rule, not a caveat: **a core
/// component whose slotted regions need styling must ship an UNSCOPED `<style>`
/// block and be styled by class name.** A Modal with a header, a body and a
/// footer is exactly that case. The alternative — unscoped-by-default for
/// components that take slots — would leak the child's styles back out to every
/// element of the same tag in the app.
fn slots_map_expr(children: &[Node], emit: &dyn Fn(&Node) -> String) -> String {
    let mut groups: Vec<(String, Vec<Node>)> = Vec::new();
    for child in children {
        let name = slot_binding(child).unwrap_or_else(|| "default".to_string());
        let content = slot_content(child);
        match groups.iter_mut().find(|(existing, _)| *existing == name) {
            Some((_, nodes)) => nodes.extend(content),
            None => groups.push((name, content)),
        }
    }
    let entries: Vec<String> = groups
        .iter()
        .filter(|(_, nodes)| !nodes.is_empty())
        .map(|(name, nodes)| {
            let vnodes: Vec<String> = nodes.iter().map(emit).collect();
            let vnode = if vnodes.len() == 1 {
                vnodes[0].clone()
            } else {
                format!(
                    "velox_dom::h(\"slot\", velox_dom::Props::new(), vec![{}])",
                    vnodes.join(", ")
                )
            };
            format!("({}, {vnode})", string_lit(name))
        })
        .collect();
    if entries.is_empty() {
        // No entry at all: an empty array literal leaves the map's key and value
        // types to inference from a call that may not constrain them, and the
        // child's fallback is what an empty slot should render anyway.
        return "std::collections::HashMap::new()".to_string();
    }
    format!("std::collections::HashMap::from([{}])", entries.join(", "))
}

fn string_lit(s: &str) -> String {
    // Basic escape for quotes and backslashes; good enough for tests
    let mut out = String::with_capacity(s.len() + 8);
    out.push('"');
    for ch in s.chars() {
        match ch {
            '\\' => out.push_str("\\\\"),
            '"' => out.push_str("\\\""),
            '\n' => out.push_str("\\n"),
            '\r' => out.push_str("\\r"),
            '\t' => out.push_str("\\t"),
            _ => out.push(ch),
        }
    }
    out.push('"');
    out
}

/// Collect all v-model expressions from a template AST.
/// Returns a list of (model_expr, handler_name) pairs.
/// For `v-model="counter"`, returns `("counter", "__vmodel_set_counter")`.
pub fn collect_vmodel_expressions(nodes: &[Node]) -> Vec<(String, String)> {
    let mut results = Vec::new();
    // The `v-for` loop variables in scope, outermost first: a loop-rooted
    // `v-model` gets no setter, because the dispatcher cannot reach a loop item
    // (see `vmodel_is_loop_rooted`).
    fn walk(
        nodes: &[Node],
        out: &mut Vec<(String, String)>,
        loop_vars: &mut Vec<(String, String)>,
    ) {
        for node in nodes {
            if let Node::Element {
                attrs, children, ..
            } = node
            {
                if let Some(info) = v_for_scope(attrs) {
                    loop_vars.push((info.item_name.clone(), info.index_name.clone()));
                }
                let (item_name, idx_name) = loop_vars.last().map_or((None, None), |(item, idx)| {
                    (Some(item.as_str()), Some(idx.as_str()))
                });
                for attr in attrs {
                    if matches!(attr.kind, AttrKind::Directive)
                        && attr.name == "model"
                        && let Some(expr) = &attr.value
                        && !vmodel_is_loop_rooted(expr, item_name, idx_name)
                    {
                        let handler = vmodel_setter_name(expr);
                        out.push((expr.clone(), handler));
                    }
                }
                walk(children, out, loop_vars);
                if v_for_scope(attrs).is_some() {
                    loop_vars.pop();
                }
            }
        }
    }
    let mut loop_vars: Vec<(String, String)> = Vec::new();
    walk(nodes, &mut results, &mut loop_vars);
    results
}

/// Collect all interpolation key names from the template AST.
/// Returns unique keys like `["text", "completed", "counter"]` that are used
/// in `{{ key }}` expressions. These correspond to method names on the
/// component's State struct.
///
/// An interpolation inside a `v-for` body that names a loop variable is NOT a
/// key: both renderers read the loop item and index directly, from the binding
/// the loop itself introduces, so it is a real read rather than a
/// `resolve(...)` lookup. Registering one would emit an arm against the
/// `State` — `"item.name" => state.item.name().to_string()` — and the loop
/// item is not a `State` field, so that arm does not compile (E0609). This is
/// the same rule the bind path applies, reached there through `emit_bind_attr`.
pub fn collect_interpolation_keys(nodes: &[Node]) -> Vec<String> {
    let mut keys = Vec::new();
    // Every loop variable in scope, outermost first. A nested `v-for` that
    // rebinds the same names shadows them, but either way an expression naming
    // one of them is read by the loop, so every enclosing scope is consulted.
    let mut loop_vars: Vec<(String, String)> = Vec::new();
    fn walk(nodes: &[Node], out: &mut Vec<String>, loop_vars: &mut Vec<(String, String)>) {
        for node in nodes {
            match node {
                Node::Interpolation(expr) => {
                    let key = expr.trim().to_string();
                    if key.is_empty() || out.contains(&key) {
                        continue;
                    }
                    let roots: Vec<&str> = loop_vars
                        .iter()
                        .flat_map(|(item, index)| [item.as_str(), index.as_str()])
                        .collect();
                    if expr_reads_roots(&key, &roots) {
                        continue;
                    }
                    out.push(key);
                }
                Node::Element {
                    attrs, children, ..
                } => {
                    let scope = attrs
                        .iter()
                        .find(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
                        .and_then(|a| a.value.as_deref())
                        .and_then(parse_v_for)
                        .map(|info| (info.item_name, info.index_name));
                    if let Some(pair) = &scope {
                        loop_vars.push(pair.clone());
                    }
                    walk(children, out, loop_vars);
                    if scope.is_some() {
                        loop_vars.pop();
                    }
                }
                _ => {}
            }
        }
    }
    walk(nodes, &mut keys, &mut loop_vars);
    keys
}

/// Is `expr` a bare identifier (no field access, call, or literal)?
fn is_bare_identifier(expr: &str) -> bool {
    let mut chars = expr.chars();
    match chars.next() {
        Some(c) if c.is_ascii_alphabetic() || c == '_' => {}
        _ => return false,
    }
    chars.all(is_ident_char)
}
/// The `State` method that provides the value for `key`, when that method is a
/// genuine zero-argument getter whose return type can be rendered as text.
/// Payload-taking methods are event handlers, not getters: `state.on_input()`
/// does not compile, so their names must never be registered as resolver keys.
/// Neither can a method that returns nothing (`state.reset()` has no `Display`
/// form), so the return type is checked as well.
fn getter_method_name<'a>(methods: &'a [StateMethod], key: &'a str) -> Option<&'a str> {
    find_state_method(methods, key, |m| {
        !m.takes_payload && return_type_is_renderable(m.return_type.as_deref())
    })
}

/// A zero-argument `State` method that yields a value, whatever its type.
///
/// [`getter_method_name`] additionally requires that value to be renderable as
/// text, which is right when the arm renders the value itself
/// (`"title" => state.title().to_string()`) and wrong for the ROOT of a member
/// path: `{{ user.name }}` needs `state.user()` to return the user's own type,
/// and the `String` that renders is the last segment's. This is the same lookup
/// with the renderability test lifted, not a second notion of "answerable" —
/// both call sites go through [`find_state_method`], so the `get_`/`is_`/`has_`
/// convention and the payload test cannot drift between them.
fn accessor_method_name<'a>(methods: &'a [StateMethod], key: &'a str) -> Option<&'a str> {
    find_state_method(methods, key, |m| {
        !m.takes_payload && returns_a_value(m.return_type.as_deref())
    })
}

/// Does the method yield something a template can go on to read?
///
/// Deliberately permissive: a user struct is a perfectly good start of a member
/// path even though it has no `Display` form of its own, and the inner segments
/// decide what the chain ends up producing. A unit return is the one case that
/// cannot start anything.
fn returns_a_value(ty: Option<&str>) -> bool {
    match ty.map(str::trim) {
        Some(ty) => !matches!(strip_borrow(ty), "()" | "Self" | ""),
        None => false,
    }
}

/// The `State` method `key` names: the exact name first, then the `get_`/`is_`/
/// `has_` variants, keeping the first that satisfies `usable`.
fn find_state_method<'a>(
    methods: &'a [StateMethod],
    key: &str,
    usable: impl Fn(&StateMethod) -> bool,
) -> Option<&'a str> {
    if let Some(m) = methods.iter().find(|m| m.name == key && usable(m)) {
        return Some(m.name.as_str());
    }
    ["get_", "is_", "has_"].iter().find_map(|prefix| {
        let candidate = format!("{prefix}{key}");
        methods
            .iter()
            .find(|m| m.name == candidate && usable(m))
            .map(|m| m.name.as_str())
    })
}

/// Can a method's declared return type be rendered as text?
///
/// A resolver arm calls `state.<getter>().to_string()`, so only types that
/// implement `Display` qualify: the string types, `bool`, `char`, the integer
/// and float primitives (templates already render `:class="{ done: completed }"`
/// from a `bool` getter, and the truthy check matches the resulting `"true"`),
/// and string wrappers. An absent return type means `()`, and collections,
/// `Result`/`Option` and framework handles have no `Display` form, so they are
/// rejected rather than guessed at.
fn return_type_is_renderable(ty: Option<&str>) -> bool {
    let Some(ty) = ty else {
        return false;
    };
    let base = strip_borrow(ty);
    if matches!(
        base,
        "String"
            | "str"
            | "bool"
            | "char"
            | "i8"
            | "i16"
            | "i32"
            | "i64"
            | "i128"
            | "isize"
            | "u8"
            | "u16"
            | "u32"
            | "u64"
            | "u128"
            | "usize"
            | "f32"
            | "f64"
    ) {
        return true;
    }
    ["Rc<", "Arc<", "Cow<"].iter().any(|wrapper| {
        base.strip_prefix(wrapper)
            .and_then(|inner| inner.strip_suffix('>'))
            .is_some_and(|inner| matches!(strip_borrow(inner.trim()), "String" | "str"))
    })
}

/// Strip a leading borrow and lifetime from a type, e.g. `&'static str` → `str`.
fn strip_borrow(ty: &str) -> &str {
    let mut ty = ty.trim();
    if let Some(rest) = ty.strip_prefix('&') {
        ty = rest.trim_start();
    }
    if let Some(rest) = ty.strip_prefix('\'') {
        // A lifetime: `'static`, `'a`, or the anonymous `'_` of `Cow<'_, str>`.
        ty = match rest.strip_prefix("_,") {
            Some(after) => after.trim_start(),
            None => {
                let end = rest.find(|c: char| !is_ident_char(c)).unwrap_or(rest.len());
                rest[end..].trim_start()
            }
        };
    }
    ty
}

/// Does `State` expose a zero-argument getter for `key`? Only expressions backed
/// by such a getter are registered as resolver keys, so a binding over a plain
/// `Signal`/`Ref` field (which has no getter to call) keeps generating
/// compiling code.
fn has_state_getter(methods: &[StateMethod], key: &str) -> bool {
    getter_method_name(methods, key).is_some()
}

/// The call expression a resolver arm should make on `state` for `key`,
/// parentheses included: `title()`, `is_open()`, `user().name()`.
///
/// A reader of [`answerable`], which is where the choice between a getter, a
/// member chain and the name-only spelling is made. Nothing decides here, so the
/// arm an emitter writes and the arm a gate believed it was writing cannot be
/// two different arms.
///
/// Every key that reaches an arm was registered by a path that asked
/// [`answerable`] — `keep_answerable_interpolation_keys` registers an `Ok` and
/// nothing else, and the bound-attribute, `v-model` and condition paths all gate
/// on a question `answerable` answers — so the `Err` arm is dead, and
/// `every_registered_key_is_answerable` is what keeps it dead.
///
/// The guess is what the arm used to be in that case, kept byte for byte rather
/// than turned into a panic. An `Err` key cannot be answered by anything, so the
/// guess is a name `State` does not expose, and the arm it produces is a compile
/// error in the generated crate — not a silent wrong value. Codegen must not
/// turn a compile error into a process exit, and R-1e-1's second commit is where
/// the guess can go away for good, because by then the loop's `items` ask has
/// somewhere else to land.
fn resolve_getter_call(methods: &[StateMethod], fields: &[String], key: &str) -> String {
    match answerable(key, methods, fields) {
        Ok(answer) => answer.call(),
        Err(_) => format!("{}()", conventional_name(methods, key)),
    }
}

/// The call chain a member path resolves to, or `None` when `key` is not one.
///
/// `user.name` → `user().name`, `a.b.c` → `a().b().c`, `items[0].name` →
/// `items()[0].name`: the root is the zero-argument accessor the arm already
/// looks up, and every later segment is a method call on what came before. An
/// index segment is a place rather than a method, so it is emitted as written
/// and the segments after it stay calls.
///
/// The whole chain is rewritten uniformly. Rewriting only the segments codegen
/// can vouch for would leave code whose legality depends on types it cannot
/// see, which is the silent-wrongness this exists to remove.
fn member_path_call(methods: &[StateMethod], key: &str) -> Option<String> {
    let (root, segments) = member_path(key)?;
    let mut chain = format!("{}()", accessor_method_name(methods, root)?);
    for segment in segments {
        if segment.starts_with('[') {
            chain.push_str(segment);
        } else {
            chain.push('.');
            chain.push_str(segment);
            chain.push_str("()");
        }
    }
    Some(chain)
}

/// Split a member path into its root and the segments after it: `user.name` →
/// `("user", ["name"])`, `items[0].name` → `("items", ["[0]", "name"])`.
///
/// `None` for anything that is not a member path, so every caller keeps its
/// existing behaviour: a bare name has nothing to chain, and a segment that is
/// neither a name nor an index is not a path this can speak about.
///
/// A key with a call in it (`user.name()`) is `None` too, and **nothing in this
/// crate emits `state.user(state.name())`** — such a key falls through to the
/// name-only fallback, which is [`keep_answerable_interpolation_keys`]'s caller
/// and is deliberately not gated. That is pre-existing behaviour and out of
/// scope here; see the report.
fn member_path(key: &str) -> Option<(&str, Vec<&str>)> {
    if key.contains('(') || key.contains(')') {
        return None;
    }
    let split = key
        .find(['.', '['])
        .filter(|&i| i > 0 && key[..i].chars().all(is_ident_char))?;
    let root = &key[..split];
    let mut segments = Vec::new();
    // The separator that ended the root is not itself a segment: `user.name`
    // continues with `name`, and `items[0]` continues with the index.
    let rest = key[split..].strip_prefix('.').unwrap_or(&key[split..]);
    for segment in rest.split('.') {
        let is_index = segment.starts_with('[') && segment.ends_with(']');
        let is_name = !segment.is_empty() && segment.chars().all(is_ident_char);
        if !is_index && !is_name {
            return None;
        }
        segments.push(segment);
    }
    if segments.is_empty() {
        return None;
    }
    Some((root, segments))
}

/// The shared identifier predicate: one definition for every site that asks
/// "is this character part of an identifier?".
///
/// ITS CONTRACT, for a caller: a scanner that enters on a *first-character* test
/// and then extends with this predicate must advance the cursor on the entry
/// character before extending. Otherwise the two predicates are coupled by an
/// invariant nobody wrote down — this one being wider than the entry test — and
/// narrowing it to exclude a character the entry test accepts leaves the cursor
/// where it is and the scanner spins forever. `condition_resolver_keys` and
/// `expr_reads_roots` both advance unconditionally for exactly that reason, and
/// `a_scanner_that_enters_on_a_first_char_test_advances_even_when_this_is_narrow`
/// pins it.
///
/// Narrowing it is otherwise a behaviour change at every call site, including the
/// two scanners' tokenisation, and must be measured rather than assumed.
fn is_ident_char(ch: char) -> bool {
    ch.is_ascii_alphanumeric() || ch == '_'
}

/// The interpolation keys that have a getter, or a root accessor, to answer
/// them — with a warning for each one that has not.
///
/// A **bare name** (`{{ title }}`) is registered only when a zero-argument,
/// renderable `State` method answers it, because the arm is
/// `"title" => state.title().to_string()` and a `State` without `title` cannot
/// compile that. A **member path** (`{{ user.name }}`) is registered only when
/// its ROOT has a zero-argument accessor, because the arm is
/// `state.user().name().to_string()` and without a `user()` there is nothing to
/// call. Both decisions ask the same lookup the emitter asks, so a key that is
/// kept is a key whose arm has something to call.
///
/// A key that is neither a bare name nor a member path — `user.name()`, `a.b[0`
/// — is **not gated** and keeps the long-standing fallback. Those keys are
/// refused by [`member_path`] and are not a name a `State` method can have, so
/// the two rules above have nothing to say about them; gating them is a
/// separate task, and the report discloses them rather than claiming this
/// function closes them.
///
/// This is the same family diagnostic the bound-attribute path already reports,
/// asked of one predicate: the name the emitter will call, which is the ROOT of
/// a member path and the whole key otherwise. The decision reads
/// [`StateMethod`]s only — never the loop families, and never the `v-for`
/// collection — so it cannot silence a loop report.
/// Whether `key` has a resolver arm. This is the one question a key's origin must
/// not change: a bare name needs a getter of that name, and a member path needs
/// an accessor for its root plus a method for every segment after it. A key that
/// is neither — a call expression, say — is left alone, exactly as
/// `keep_answerable_interpolation_keys` leaves it, because an arm for it is the
/// fallback's business.
///
/// `keep_answerable_interpolation_keys` asks this for interpolated text and the
/// `v-model` path asks it for a two-way binding, so `{{ form.name }}` and
/// `v-model="form.name"` are answered or dropped together instead of one of them
/// quietly rendering empty.
fn key_is_answerable(methods: &[StateMethod], fields: &[String], key: &str) -> bool {
    answerable(key, methods, fields).is_ok()
}

fn keep_answerable_interpolation_keys(
    methods: &[StateMethod],
    fields: &[String],
    keys: Vec<String>,
    warnings: &mut Vec<String>,
) -> Vec<String> {
    let mut registered = Vec::with_capacity(keys.len());
    for key in keys {
        // One predicate for the gate, so a key is registered exactly when it can
        // be read and the reason for a refusal is the same sentence the other
        // three call sites would print for it.
        let Err(unrenderable) = answerable(&key, methods, fields) else {
            registered.push(key);
            continue;
        };
        warnings.push(format!(
            "interpolation {{{{ {key} }}}} cannot be resolved — {}; the interpolation \
             renders empty. {}",
            unrenderable.root_reason, unrenderable.remedy
        ));
    }
    registered
}

/// The Rust value one `:attr="expr"` binding emits, together with the resolver
/// keys that value looks up.
enum BindValue {
    /// `resolve("<key>")` — the authored expression is looked up verbatim.
    Lookup(String),
    /// Object-syntax `:class="{ cls: cond, ... }"` — the statements that add a
    /// class name to the element's class list when its condition is truthy, in
    /// authored order. They are kept apart from the block that joins them so a
    /// static `class` on the same element can be merged in; see
    /// [`class_block_value`].
    ClassObject { conditions: Vec<String> },
    /// A v-for loop variable or one of its fields, read directly.
    Direct(String),
}

impl BindValue {
    /// The emitted Rust expression, ready to be interpolated into generated
    /// code (`resolve("key")`, a direct loop-variable read, or a block that
    /// joins class names).
    fn expr(&self) -> String {
        match self {
            BindValue::Lookup(expr) | BindValue::Direct(expr) => expr.clone(),
            BindValue::ClassObject { conditions } => class_block_value(conditions),
        }
    }
}

/// The `class` prop value: the class names the element ends up with, joined by a
/// space. Each entry in `additions` adds a name — unconditionally for a static
/// `class`, and behind its condition for an object-syntax `:class` — so a
/// merged list is the same block with more entries, and the single-source form
/// is this block with one.
fn class_block_value(additions: &[String]) -> String {
    format!(
        "{{ let mut __classes: Vec<&str> = Vec::new(); {} __classes.join(\" \") }}",
        additions.join(" ")
    )
}

/// The class names a static `class="a  b"` attribute carries. A browser puts
/// every whitespace-separated name in the list, and so does the cascade that
/// reads it, so the split is here rather than in the stylesheet.
fn class_tokens(value: &str) -> Vec<String> {
    value.split_whitespace().map(str::to_string).collect()
}

/// One normalized bound attribute.
struct BindEmission {
    value: BindValue,
    /// The resolver keys `value` looks up, in lookup order.
    keys: Vec<String>,
    /// The authored expression, kept for diagnostics.
    authored: String,
}

/// Normalize a bound attribute for emission.
///
/// Every `resolve(...)` codegen emits for a `:attr="expr"` binding comes from
/// this function, and [`collect_resolver_keys`] reads the `keys` it reports, so
/// the lookups codegen emits and the keys the resolver registers cannot drift
/// apart.
///
/// `resolve_loop` is the `v-for` body the element sits in, set only when the
/// Resolve renderer is being generated. It is `None` for the State renderer,
/// where the loop item is a real binding and is read directly.
/// The Rust expression for one condition, and the resolver keys it looks up.
///
/// ONE function decides both, because the emitter and the key collector have to
/// agree. A condition whose keys are never registered is permanently falsy —
/// `resolve` answers an unregistered key with `""`, so `v-if` drops the element
/// and `:class` drops the class — and that is exactly how a root `v-if` and a
/// root `:class` parsed, compiled and then did nothing.
///
/// A condition rooted at the loop variable is a direct field read in the State
/// renderer and the loop's indexed resolver read in the Resolve one, so it
/// registers no key: the whole loop is reported as a family instead. Every other
/// condition is rewritten by [`rewrite_if_expr`] — this is the no-loop-scope half
/// of it, and the root `v-if`/`v-show`/`v-else` emit sites call that directly
/// because they have no loop scope to consult — and its keys come from
/// [`condition_resolver_keys`], which tokenises the same way.
fn condition_expr(
    expr: &str,
    item_name: Option<&str>,
    idx_name: Option<&str>,
    resolve_loop: Option<&VForInfo>,
) -> (String, Vec<String>) {
    match rewrite_ctx_expr(expr, item_name, idx_name) {
        Some(direct) => {
            let read = match resolve_loop {
                Some(info) => match resolve_loop_item_expr(&direct, info) {
                    // The loop index is a number already. Any other loop read is a
                    // resolver-backed `String` in the Resolve renderer, so it needs
                    // the string truthiness to sit in an `if` position.
                    Some(indexed) if indexed != info.index_name => resolver_truthiness(&indexed),
                    _ => direct,
                },
                None => direct,
            };
            (read, Vec::new())
        }
        None => (rewrite_if_expr(expr), condition_resolver_keys(expr)),
    }
}

fn emit_bind_attr(
    attr_name: &str,
    expr: &str,
    item_name: Option<&str>,
    idx_name: Option<&str>,
    resolve_loop: Option<&VForInfo>,
) -> BindEmission {
    let authored = if attr_name == "key" {
        // A `:key` value is normalized by the same helper the `v-for` key emit
        // sites use, so this path analyzes exactly the expression codegen emits
        // instead of the raw `{{ … }}` spelling. The `v-for` branches strip `:key`
        // out before emitting, so the only way a `:key` reaches here as a prop is
        // a non-`v-for` element — which is normalized consistently too.
        resolve_key_expr(expr)
    } else {
        expr.trim().to_string()
    };

    if attr_name == "class" {
        let pairs = class_object_pairs(&authored);
        if !pairs.is_empty() {
            let mut conditions: Vec<String> = Vec::new();
            let mut keys: Vec<String> = Vec::new();
            for (cls, cond) in pairs {
                if cls.is_empty() || cond.is_empty() {
                    continue;
                }

                // A loop-rooted condition is a direct field read in the State
                // renderer, and a bare loop index is left as the direct read, which
                // is KNOWN-BROKEN in both renderers: a condition of `:class="{even:
                // i}"` becomes `if i`, a `usize` in `if` position (E0308). It is
                // left alone because no emitted form of it compiles without
                // inventing a `bool` the template never wrote.
                let (value, cond_keys) = condition_expr(&cond, item_name, idx_name, resolve_loop);
                for key in cond_keys {
                    push_unique(&mut keys, key);
                }
                conditions.push(format!(
                    "if {} {{ __classes.push({}); }}",
                    value,
                    string_lit(&cls)
                ));
            }
            if !conditions.is_empty() {
                return BindEmission {
                    value: BindValue::ClassObject { conditions },
                    keys,
                    authored,
                };
            }
        }
    }

    if let Some(direct) = rewrite_ctx_expr(&authored, item_name, idx_name) {
        // In the Resolve renderer the loop item is not a Rust binding, so a
        // loop-rooted binding is normalized to the indexed resolver read the
        // same loop body already uses for an interpolated `{ todo.text }`.
        // A root the loop cannot read that way (a compound expression such as
        // `todo.a + todo.b`) keeps the resolver lookup, so the diagnostic
        // reports it rather than leaving it silently empty.
        let direct = match resolve_loop {
            Some(info) => match resolve_loop_item_expr(&direct, info) {
                Some(indexed) => indexed,
                None => {
                    return BindEmission {
                        value: BindValue::Lookup(format!("resolve({})", string_lit(&authored))),
                        keys: vec![authored.clone()],
                        authored,
                    };
                }
            },
            None => direct,
        };
        return BindEmission {
            value: BindValue::Direct(direct),
            keys: Vec::new(),
            authored,
        };
    }

    BindEmission {
        value: BindValue::Lookup(format!("resolve({})", string_lit(&authored))),
        keys: vec![authored.clone()],
        authored,
    }
}

/// The component-prop form of a normalized binding value: both are `String`.
fn bind_attr_value(
    attr_name: &str,
    expr: &str,
    item_name: Option<&str>,
    idx_name: Option<&str>,
) -> String {
    let emission = emit_bind_attr(attr_name, expr, item_name, idx_name, None);
    match &emission.value {
        BindValue::Direct(direct) => format!("format!(\"{{}}\", {direct})"),
        _ => format!("{}.clone()", emission.value.expr()),
    }
}

/// The element-prop form of a normalized binding value (`Props::set` entry).
fn bind_prop_entry(
    key: &str,
    attr_name: &str,
    expr: &str,
    item_name: Option<&str>,
    idx_name: Option<&str>,
    resolve_loop: Option<&VForInfo>,
) -> String {
    let emission = emit_bind_attr(attr_name, expr, item_name, idx_name, resolve_loop);
    match &emission.value {
        BindValue::Direct(direct) => format!(r#".set("{}", &format!("{{}}", {direct}))"#, key),
        BindValue::ClassObject { conditions } => {
            format!(r#".set("class", {})"#, class_block_value(conditions))
        }
        BindValue::Lookup(value) => format!(r#".set("{}", &{value})"#, key),
    }
}

/// The `class: condition` pairs of an object-syntax `:class="{ ... }"` binding.
fn class_object_pairs(expr: &str) -> Vec<(String, String)> {
    let trimmed = expr.trim();
    if !(trimmed.starts_with('{') && trimmed.ends_with('}')) {
        return Vec::new();
    }
    let inner = &trimmed[1..trimmed.len() - 1];
    inner
        .split(',')
        .filter_map(|pair| pair.split_once(':'))
        .map(|(cls, cond)| (strip_class_quotes(cls), cond.trim().to_string()))
        .filter(|(cls, cond)| !cls.is_empty() && !cond.is_empty())
        .collect()
}

/// The class name an object-syntax `:class` key names, without the quotes an
/// author may write around it. `{'is-wide': cond}` names `is-wide`; keeping the
/// quotes would look for a class literally called `'is-wide'`, which no
/// stylesheet has.
fn strip_class_quotes(cls: &str) -> String {
    cls.trim()
        .trim_matches(|c| c == '\'' || c == '"')
        .trim()
        .to_string()
}

/// The resolver keys a `v-if`/`:class` condition expression looks up.
///
/// Mirrors the tokens `rewrite_if_expr` turns into `resolve("<key>")` lookups —
/// through the same [`member_path_end`], so a member path is one key in both —
/// so a condition's operands are registered as keys — `:class` conditions
/// included — whether they are bare (`completed`), a member path
/// (`user.active`), negated (`!completed`) or part of a comparison
/// (`count > 0`). A key the loop emitter reads directly registers nothing, and
/// the loop that declares it is reported as a whole instead.
fn condition_resolver_keys(expr: &str) -> Vec<String> {
    let chars: Vec<char> = expr.chars().collect();
    let mut keys: Vec<String> = Vec::new();
    let mut i = 0;

    while i < chars.len() {
        let c = chars[i];
        if c.is_ascii_alphabetic() || c == '_' {
            let start = i;
            // The advance past the entry character is UNCONDITIONAL. This scanner
            // enters on `[A-Za-z_]` and extends on `is_ident_char`, and a
            // scanner that enters on one predicate while extending on another
            // must advance on the entry character: if `is_ident_char` is ever
            // narrowed to exclude a character this test accepts, the old
            // `while is_ident_char(chars[i])` loop would not move the cursor and
            // this would spin forever. Every token is therefore at least one
            // character wide, which is what the old loop produced too, because
            // `is_ident_char` accepts every character the entry test accepts.
            // `member_path_end` advances on the entry character and then
            // extends over any `.segment` / `[index]` continuation, so the token
            // is the whole path — the same token `rewrite_if_expr` emits a
            // lookup for.
            i = member_path_end(&chars, start);
            let token: String = chars[start..i].iter().collect();
            // Literals and emitted code are not lookups.
            if !matches!(token.as_str(), "true" | "false" | "resolve" | "state") {
                keys.push(token);
            }
        } else {
            i += 1;
        }
    }
    keys
}

/// A `v-for` in the Resolve renderer, and whether anything in its body reads the
/// loop in a way the renderer cannot answer.
struct ResolveLoopFamily {
    /// The collection expression, the one the renderer hands to `resolve(...)`.
    collection: String,
    /// Whether a binding, condition, `:key` or interpolation in the body reads
    /// the loop in a form the Resolve renderer cannot answer.
    ///
    /// THE DECISION RULE, in full:
    ///
    /// * A read of the loop ITEM always counts. Every item form is emitted as
    ///   the indexed resolver read `items[0]…`, which no flat arm answers.
    /// * A read of the loop INDEX counts UNLESS the site emits the direct
    ///   binding read. The two index forms that render are a bare-index binding
    ///   — a `:bind`, including `:class` and `:style`, and the `:key` the loop
    ///   branch reads itself (`format!("{}", index)`) — and a bare-index
    ///   interpolation (`text(index.to_string())`): in each case exactly the
    ///   expression that is the index name and nothing else. Any other
    ///   expression naming the index, such as `i + 1` or `{a: i > 2}`, is
    ///   emitted as the flat `resolve("…")` lookup, which answers `"""`, and so
    ///   is a condition: `rewrite_if_expr` rewrites every bare identifier it is
    ///   given into `resolve("<ident>")`, which is why `v-if="i"` is not a
    ///   direct read however bare it is. The exemption is therefore per
    ///   expression, never per loop: a direct index read does not launder a
    ///   compound sibling on the same element.
    body_reads_loop: bool,
}

/// How a site emits a read of the loop index.
#[derive(Clone, Copy, PartialEq)]
enum IndexEmission {
    /// The site emits the index itself — a binding or an interpolation — so a
    /// bare index name is the direct binding read.
    Direct,
    /// The site hands the expression to the flat resolver, so even a bare index
    /// name is an empty answer. A `v-for` collection emits
    /// `let __for_expr = resolve("<expr>")`, and a condition on a loop element
    /// is rewritten by `rewrite_if_expr` into `resolve("<ident>")`; see
    /// [`directive_emission`].
    Resolver,
}

/// Where an attribute sits relative to the `v-for` it belongs to.
///
/// The two positions are emitted by different paths, and that difference — not
/// the attribute's name — decides how a read of the loop index is emitted. A
/// directive on the loop element is handled by `emit_node_with_mode` before the
/// loop branch, and its value goes through `rewrite_if_expr`; a directive on any
/// element inside the body is dropped by `emit_props_in_loop` and emits nothing.
#[derive(Clone, Copy, PartialEq)]
enum AttrSite {
    /// The element that carries the `v-for`.
    LoopElement,
    /// An element inside that loop's body, emitted by `emit_props_in_loop`.
    InLoopBody,
}

/// How a directive emits a read of the loop index.
///
/// The classification follows the EMIT PATH, read off `emit_node_with_mode` and
/// `emit_props_in_loop`, not the directive's name. `rewrite_if_expr` rewrites
/// every bare identifier into `resolve("<ident>")`, so a condition never emits
/// the direct binding read — `v-if="i"` is `resolve("i")`, an empty answer.
///
/// The two fallback arms are deliberately set at opposite defaults, and the
/// asymmetry is the point:
///
/// - Inside the body, an unrecognised directive is `Direct`. Every directive
///   there is dropped by `emit_props_in_loop` (`:1600-1602`), so it emits no
///   read at all and there is nothing to be wrong about; `Resolver` there
///   would report loops that render perfectly.
/// - On the loop element, an unrecognised directive is `Resolver`. Today the
///   emitter handles only `v-for`, `v-if`/`v-else-if`/`v-else`, `v-show` and
///   `v-model`, and `v-model` is listed explicitly below, so nothing reaches
///   this arm in the current tree. A directive added later is the case this
///   rule has to be right about, and if it is routed through
///   `rewrite_if_expr` like every other condition then `Resolver` is the
///   answer — while `Direct` would silently exempt it. A read wrongly
///   exempted is the silent failure this rule exists to prevent (N3, N6), so
///   the unknown case is reported rather than dismissed; an extra sentence in
///   a diagnostic is the cheap direction to be wrong in.
fn directive_emission(name: &str, site: AttrSite) -> IndexEmission {
    match (name, site) {
        // `v-for` is not classified here: its value is `(item, i) in expr`, not
        // a read, so the caller has already parsed out the collection and passes
        // that to `expr_reads_loop_var` itself — see `attrs_read_loop_root`.
        //
        // Conditions on the loop element: `v-if` (which owns the whole
        // `v-if`/`v-else-if`/`v-else` chain) and `v-show` are both rewritten by
        // `rewrite_if_expr` in `emit_node_with_mode`, before the loop branch,
        // so the read is a resolver lookup. `v-else-if` on the same element as
        // the `v-for` is rejected by the parser, but it is listed with its
        // chain rather than left to the fallback.
        ("if" | "show" | "else-if" | "elseif" | "else", AttrSite::LoopElement) => {
            IndexEmission::Resolver
        }
        // Every directive inside the body is dropped by `emit_props_in_loop`,
        // so it emits no read at all and the direct index exemption is right.
        (_, AttrSite::InLoopBody) => IndexEmission::Direct,
        // `v-model` becomes a `:value` bind plus an `@input` handler in
        // `extract_vmodel` before the loop branch, so its value read is a
        // bind's — the same path as `:value`, which renders. This is the only
        // loop-element directive that is not a condition, and naming it keeps
        // the fallback below free to fail loud.
        ("model", AttrSite::LoopElement) => IndexEmission::Direct,
        // Any directive the emitter does not handle today. Treated as a
        // resolver read: see the note on the two fallbacks above.
        (_, AttrSite::LoopElement) => IndexEmission::Resolver,
    }
}

/// Whether `attrs` read either loop variable in a form the Resolve renderer
/// cannot answer.
fn attrs_read_loop_root(attrs: &[TemplateAttr], item: &str, index: &str, site: AttrSite) -> bool {
    attrs.iter().any(|a| match a.kind {
        AttrKind::Bind => a
            .value
            .as_deref()
            .map(|value| expr_reads_loop_var(value, item, index, IndexEmission::Direct))
            .unwrap_or(false),
        AttrKind::Directive => a
            .value
            .as_deref()
            // A `v-for` introduces its loop variables rather than reading them,
            // so only its collection expression can read an enclosing loop.
            .map(|value| match parse_v_for(value) {
                Some(info) => expr_reads_loop_var(&info.expr, item, index, IndexEmission::Resolver),
                None => expr_reads_loop_var(value, item, index, directive_emission(&a.name, site)),
            })
            .unwrap_or(false),
        AttrKind::Static | AttrKind::On => false,
    })
}

/// Whether anything in `node`'s subtree reads either loop variable in a form
/// the Resolve renderer cannot answer.
///
/// A nested `v-for` rebinding those same names shadows them for its own
/// attributes. It does NOT shadow them for its children: those children see the
/// NESTED binding, not the outer one, so a read there is attributed to the
/// outer loop as well. That over-attributes — a nested loop body cannot really
/// be reading the outer item — and the rule deliberately errs that way, because
/// a false positive here is one extra sentence in a diagnostic while a false
/// negative is a loop that renders empty with nothing said about it.
fn reads_loop_root(node: &Node, item: &str, index: &str) -> bool {
    match node {
        Node::Text(_) => false,
        Node::Interpolation(expr) => expr_reads_loop_var(expr, item, index, IndexEmission::Direct),
        Node::Element {
            attrs, children, ..
        } => {
            let roots = [item, index];
            let shadowed = attrs
                .iter()
                .find(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
                .and_then(|a| a.value.as_deref())
                .and_then(parse_v_for)
                .is_some_and(|info| {
                    !roots.is_empty()
                        && roots
                            .iter()
                            .all(|root| *root == info.item_name || *root == info.index_name)
                });
            (!shadowed && attrs_read_loop_root(attrs, item, index, AttrSite::InLoopBody))
                || children.iter().any(|c| reads_loop_root(c, item, index))
        }
    }
}

/// Whether an authored expression reads either loop variable — as the variable
/// itself, as a field path rooted at it, or anywhere inside a compound
/// expression such as `todo.a == todo.b` — in a form the resolver cannot
/// answer, per the rule on [`ResolveLoopFamily::body_reads_loop`].
fn expr_reads_loop_var(expr: &str, item: &str, index: &str, emission: IndexEmission) -> bool {
    if expr_reads_roots(expr, &[item]) {
        return true;
    }
    expr_reads_roots(expr, &[index])
        && (emission == IndexEmission::Resolver || expr.trim() != index)
}

/// Whether an authored expression reads either loop variable at all, with no
/// exemption for the direct index read.
///
/// This is the per-BINDING skip's test, not the family's: a binding rooted at
/// the loop — including a compound one — is left to the loop's own message,
/// which says the whole body cannot render. Whether that body is a false
/// positive is decided by the family, above, not here.
fn expr_reads_loop_root(expr: &str, item: &str, index: &str) -> bool {
    expr_reads_roots(expr, &[item, index])
}

/// Whether an authored expression names `root` as an identifier token.
fn expr_reads_roots(expr: &str, roots: &[&str]) -> bool {
    let chars: Vec<char> = expr.chars().collect();
    let mut i = 0;

    while i < chars.len() {
        if chars[i].is_ascii_alphabetic() || chars[i] == '_' {
            let start = i;
            // The advance past the entry character is UNCONDITIONAL, for the same
            // reason as in `condition_resolver_keys`: entering on `[A-Za-z_]` and
            // extending on `is_ident_char` means the cursor must move on the entry
            // character, or a narrowing of `is_ident_char` that excludes a
            // character this test accepts leaves the cursor where it is and this
            // loop never terminates. Every token stays at least one character wide,
            // which is what the old `while is_ident_char` produced too.
            i += 1;
            while i < chars.len() && is_ident_char(chars[i]) {
                i += 1;
            }
            let token: String = chars[start..i].iter().collect();
            if roots.contains(&token.as_str()) {
                return true;
            }
        } else {
            i += 1;
        }
    }
    false
}

/// The diagnostic for one `v-for` in the Resolve renderer.
///
/// That renderer's resolver is a flat `&str -> String` table built once, outside
/// every loop. An arm is only useful to a loop when it is backed by a real
/// zero-argument `State` getter: a key collected from an interpolation elsewhere
/// in the template is emitted as `"<key>" => state.<key>().to_string()` against a
/// struct that has no such field, so it does not answer the collection either.
/// With no arm the loop counts zero items and never runs its body at all; with an
/// arm the loop item is still read as `items[0].name`, which no arm answers, so
/// every read of the ITEM is empty while a direct read of the index still renders.
/// One message says so for the whole body rather than one contradictory message
/// per binding, and it also names the case it cannot check — a read the emitter
/// drops — rather than asserting that every value in the body is empty.
fn resolve_loop_warning(family: &ResolveLoopFamily, methods: &[StateMethod]) -> String {
    let collection = &family.collection;
    let has_arm = has_state_getter(methods, collection);
    let cause = if has_arm {
        format!(
            "the loop's values are read as indexed resolver keys (`{collection}[0]…`), which \
             no resolver arm answers, so every read of the loop ITEM renders empty — only a \
             direct read of the loop index, such as `{{{{ index }}}}`, survives. This is also \
             reported for a read that the emitter DROPS rather than makes, such as a condition \
             on an element inside the body: that read renders nothing to be wrong, but it \
             cannot be checked from here, and a loop reported for the wrong reason is better \
             than one that is broken for the wrong reason without saying so"
        )
    } else {
        format!(
            "`{collection}` is not a registered `State` getter, so the resolver returns an empty \
             string for it, the loop counts zero items and its body never runs at all"
        )
    };
    format!(
        "`v-for` over `{collection}` cannot render in Resolve mode — {cause}. Render this \
         component through `render_with_state`, which reads the collection and the loop item \
         directly."
    )
}

/// The fatal diagnostic for a `v-for` whose collection nothing can supply.
///
/// A loop whose collection answers `""` counts zero items and never runs its
/// body, so the component renders with the loop simply absent — no empty
/// string, no placeholder, no clue that anything was asked for. That is the one
/// failure a build should not carry silently, so it fails the build instead.
/// The other Resolve-mode loop defect, where an arm DOES back the collection
/// and only the loop ITEM's reads are empty, stays a warning: there the loop
/// runs, and the warning says which quantity is wrong.
fn unrenderable_collection_error(collection: &str, props: &PropsChannel<'_>) -> String {
    // Each branch ends in a full stop, because the `format!` below adds one and
    // a remedy that already carries its own would read `..` here.
    let cause = if let Some(field) = props.field(collection) {
        format!(
            "it is declared as a `Props` field, but as `{}` rather than a collection type, so \
             the generated `for` cannot read it: a `Vec<T>`, a slice or an array is what a \
             `v-for` can iterate",
            field.ty
        )
    } else {
        match answerable(collection, &[], props.state_fields) {
            // `answerable` has already named the mistake and the fix; the fix
            // sentence is lifted whole, so this reports the same defect the same
            // way every other gate does.
            Err(unrenderable) => unrenderable.remedy.trim_end_matches('.').to_string(),
            // Reached only for a collection that is an EXPRESSION rather than a
            // name — `items()`, `a + b` — which is neither a member path nor a
            // bare identifier, so no `State` method can be named after it and
            // the resolver table, which is keyed by name, has no key for it.
            Ok(_) => "the resolver table is keyed by name, and this collection is an expression \
                      rather than a name, so no arm can answer it"
                .to_string(),
        }
    };
    format!(
        "`v-for` over `{collection}` cannot render — {cause}. The resolver is a flat \
         `\"<key>\" => state.<getter>().to_string()` table built once, outside every loop, so the \
         loop asks it for the collection and it answers an empty string, the count is zero, and \
         the body never runs at all. Give the loop something it can read: declare `{collection}` \
         in this component's `pub struct Props` as a `Vec<T>`, give it a zero-argument `State` \
         getter, or render this component through `render_with_state`, which reads the collection \
         and the loop item directly."
    )
}

/// The resolver keys to register, plus diagnostics for bound expressions that
/// cannot be resolved.
///
/// `errors` is the one family that is fatal rather than reported: a `v-for`
/// whose collection nothing can supply. Everything else a key cannot be read
/// for degrades to an empty string, which is visible in the output; a loop that
/// never runs is not.
struct ResolverKeys {
    keys: Vec<String>,
    warnings: Vec<String>,
    errors: Vec<String>,
}

/// Collect every key the generated render path looks up through `resolve(...)`.
///
/// Interpolation keys are the historical source; bound attributes are emitted
/// as `resolve("..."")` just the same (`:value="draft"`, `:placeholder="hint"`,
/// `:click-payload="index"`), as are the conditions of an object-syntax
/// `:class`. Both sides are derived from [`emit_bind_attr`], so a key codegen
/// emits is always a key this registers or a diagnostic it reports.
///
/// The generated module carries two renderers: `render_with` (Resolve mode,
/// which only has the resolver's strings) and `render_with_state` (State mode,
/// which reads loop items and fields directly). A binding rooted at a loop
/// variable is a real read in both: a field read in State mode, an indexed
/// resolver lookup in Resolve mode. Neither registers a key, so `mode` does not
/// change which bound expressions are reportable. Every diagnostic is therefore
/// mode-independent: it describes a key the resolver cannot satisfy in either
/// renderer — a loop-rooted expression the loop cannot read, such as
/// `todo.a + todo.b`, among them.
fn collect_resolver_keys(
    nodes: &[Node],
    methods: &[StateMethod],
    fields: &[String],
    mode: RenderMode,
    props: &PropsChannel<'_>,
) -> ResolverKeys {
    let mut warnings: Vec<String> = Vec::new();
    let mut errors: Vec<String> = Vec::new();
    // An interpolation key is registered only when the arm for it can be
    // answered; a member path whose root has no accessor is reported instead.
    let mut keys = keep_answerable_interpolation_keys(
        methods,
        fields,
        collect_interpolation_keys(nodes),
        &mut warnings,
    );
    // Resolve-mode `v-for` bodies, reported once the key set is final: whether a
    // collection has a resolver arm depends on every key collected in the tree.
    let mut resolve_loops: Vec<ResolveLoopFamily> = Vec::new();

    // The `v-for` bindings in scope for a node: the two loop variables the
    // emitted bindings read directly, and the parse they came from, which
    // Resolve mode needs to route a loop-rooted bind through the indexed
    // resolver. They are one value because they are always in scope together —
    // a node either declares a `v-for` or inherits its parent's — so carrying
    // them as three parallel `Option`s invited exactly the mixed-scope bugs the
    // tuple form already made impossible.
    #[derive(Clone, Copy)]
    struct LoopScope<'a> {
        item_name: Option<&'a str>,
        idx_name: Option<&'a str>,
        info: Option<&'a VForInfo>,
    }

    fn walk(
        nodes: &[Node],
        methods: &[StateMethod],
        fields: &[String],
        mode: RenderMode,
        scope: LoopScope<'_>,
        keys: &mut Vec<String>,
        warnings: &mut Vec<String>,
        resolve_loops: &mut Vec<ResolveLoopFamily>,
    ) {
        for node in nodes {
            let Node::Element {
                attrs, children, ..
            } = node
            else {
                continue;
            };
            // A `v-for` element is emitted — props and children alike — with its
            // own loop variables in scope, which the bindings read directly.
            let loop_scope = attrs
                .iter()
                .find(|a| matches!(a.kind, AttrKind::Directive) && a.name == "for")
                .and_then(|a| a.value.as_deref())
                .and_then(parse_v_for);
            let scope = match &loop_scope {
                Some(info) => LoopScope {
                    item_name: Some(info.item_name.as_str()),
                    idx_name: Some(info.index_name.as_str()),
                    info: Some(info),
                },
                None => scope,
            };
            let LoopScope {
                item_name,
                idx_name,
                info: loop_info,
            } = scope;
            // A `v-for` is one whole family: the collection it counts and every
            // value its body reads. It is reported once, below, from that
            // collection's getter alone — not from the collected key set, which
            // counts interpolation keys too and would silence a loop whose
            // collection has no arm.
            //
            if let (RenderMode::Resolve, Some(info)) = (mode, &loop_scope) {
                resolve_loops.push(ResolveLoopFamily {
                    collection: info.expr.clone(),
                    body_reads_loop: attrs_read_loop_root(
                        attrs,
                        &info.item_name,
                        &info.index_name,
                        AttrSite::LoopElement,
                    ) || children
                        .iter()
                        .any(|c| reads_loop_root(c, &info.item_name, &info.index_name)),
                });
            }
            for attr in attrs {
                // A `v-model` desugars to a `:value` bind at emit time, so its
                // key is not in the AST this walks. It is collected here
                // instead, through the same gate every other key goes through,
                // so a `v-model` value reads a real getter or reports why it
                // cannot. The write half is reported on its own below.
                if matches!(attr.kind, AttrKind::Directive) && attr.name == "model" {
                    let Some(expr) = attr.value.as_deref() else {
                        continue;
                    };
                    if vmodel_is_loop_rooted(expr, item_name, idx_name) {
                        // The read is a direct field read of the loop item in
                        // State mode and an indexed resolver lookup in Resolve
                        // mode, so it registers no key. The write is the part
                        // that cannot be routed, and in Resolve mode the write
                        // half does not exist at all.
                        if matches!(mode, RenderMode::State) {
                            warnings.push(vmodel_loop_write_warning(expr));
                        }
                        continue;
                    }
                    // The same question the interpolation gate asks, so a dotted
                    // `v-model` is answered by the same method chain `{{ form.name }}`
                    // reads, and an unanswerable one is reported in the same terms.

                    if key_is_answerable(methods, fields, expr) {
                        push_unique(keys, expr);
                    } else {
                        // The write is named, not claimed: the generated setter is
                        // `VModel::vmodel_set(&self.{expr}, payload)`, so it
                        // compiles only when every segment of `{expr}` is a field
                        // of `State` and the last one is a type `VModel` is
                        // implemented for. Saying the write works when the
                        // expression names no such field would promise a
                        // capability the emitted code does not have.
                        warnings.push(format!(
                            "v-model=\"{expr}\" cannot render its value — {}; the input renders \
             empty. The write needs every segment of `{expr}` to be a `State` \
             field and the last one to be a type `VModel` is implemented for \
             (`Signal<T>`, `RefCell<String>` or `Cell<T>`); otherwise the \
             generated setter does not compile. Bind a zero-argument `State` \
             getter, or a method for each segment of a dotted expression.",
                            unresolvable_key_reason(expr, methods, fields)
                        ));
                    }

                    if matches!(mode, RenderMode::Resolve) {
                        warnings.push(vmodel_resolve_mode_warning(expr));
                    }
                    continue;
                }
                // A `v-if` / `v-show` condition is a resolver read like any other:
                // `rewrite_if_expr` emits `resolve("<key>")` for each operand, and
                // an unregistered key answers `""` — which is falsy — so the element
                // never appears and a `v-show` element is hidden forever. The keys
                // are collected here, through the same gate every other key goes
                // through, which is what makes the condition live. `v-show` is on
                // this path deliberately: it reads its condition the same way `v-if`
                // does, so it is registered the same way or not at all. `v-else-if`
                // and its `v-elseif` spelling are on it too, for the same reason and
                // with the same consequence: the emitter rewrites the chain's
                // condition through `rewrite_if_expr` exactly as it does a `v-if`'s,
                // so an unregistered operand there leaves a `resolve("")` that is
                // always falsy and the `v-else-if` element never renders. A `v-else`
                // is absent because it has no condition of its own.
                if matches!(attr.kind, AttrKind::Directive)
                    && matches!(attr.name.as_str(), "if" | "show" | "else-if" | "elseif")
                {
                    let Some(expr) = attr.value.as_deref() else {
                        continue;
                    };
                    // A condition rooted at the loop variable is a field read, not a
                    // lookup, so it registers nothing; the loop that declares it is
                    // reported as a whole by the family diagnostic below.
                    if expr_reads_loop_root(expr, item_name.unwrap_or(""), idx_name.unwrap_or("")) {
                        continue;
                    }
                    for key in condition_resolver_keys(expr) {
                        if key_is_answerable(methods, fields, &key) {
                            push_unique(keys, &key);
                        } else {
                            warnings.push(condition_unresolvable_warning(
                                &attr.name, expr, &key, methods, fields,
                            ));
                        }
                    }
                    continue;
                }
                if !matches!(attr.kind, AttrKind::Bind) {
                    continue;
                }
                let Some(expr) = attr.value.as_deref() else {
                    continue;
                };
                // The Resolve renderer reads a loop-rooted binding through the
                // indexed resolver the loop body itself uses; the State renderer
                // reads the loop item directly. Either way it registers no key,
                // and the whole loop is reported once, below.
                let resolve_loop = match mode {
                    RenderMode::Resolve => loop_info,
                    RenderMode::State => None,
                };
                let emission = emit_bind_attr(&attr.name, expr, item_name, idx_name, resolve_loop);
                if matches!(emission.value, BindValue::Direct(_)) {
                    continue;
                }

                for key in &emission.keys {
                    if has_state_getter(methods, key) {
                        push_unique(keys, key);
                        continue;
                    }
                    // A loop-rooted binding inside a Resolve-mode `v-for` is
                    // already covered, as a whole, by the loop's own diagnostic
                    // below: that one says the loop cannot render and why. A
                    // second message about the same binding would only restate
                    // it. A binding that is not rooted at the loop is an ordinary
                    // one and is still reported.
                    if matches!(mode, RenderMode::Resolve)
                        && loop_info.is_some()
                        && expr_reads_loop_root(
                            expr,
                            item_name.unwrap_or(""),
                            idx_name.unwrap_or(""),
                        )
                    {
                        continue;
                    }
                    // Only bare, zero-argument State getters with a renderable
                    // return type can be looked up. Everything else is a mistake
                    // worth saying out loud rather than rendering as an empty
                    // string.
                    let reason = unresolvable_key_reason(key, methods, fields);
                    warnings.push(format!(
                        "bound attribute :{}=\"{}\" cannot be resolved — {reason}; \
                         the binding renders empty. Bind a zero-argument State getter instead.",
                        attr.name, emission.authored
                    ));
                }
            }
            walk(
                children,
                methods,
                fields,
                mode,
                LoopScope {
                    item_name,
                    idx_name,
                    info: loop_info,
                },
                keys,
                warnings,
                resolve_loops,
            );
        }
    }

    walk(
        nodes,
        methods,
        fields,
        mode,
        LoopScope {
            item_name: None,
            idx_name: None,
            info: None,
        },
        &mut keys,
        &mut warnings,
        &mut resolve_loops,
    );
    // Loop families arrive only from Resolve mode, so every report below
    // describes the Resolve renderer and none of them needs a mode test.
    //
    // That is not a limitation of where the family is COLLECTED but where the
    // defect is: in State mode an unsupplied collection generates
    // `state.<name>.get()`, and `rustc` rejects that outright, so a hole there
    // is already loud at compile time. In Resolve mode the same hole
    // compiles and renders nothing, which is why it is a report and, below, a
    // refusal. Only the silent mode needs to be loud about it.
    for family in &resolve_loops {
        // Only a real `State` getter backs an arm that can answer the
        // collection; a key that merely appears as an interpolation elsewhere in
        // the template does not, and treating it as one would leave this loop
        // silent and unrenderable.
        if has_state_getter(methods, &family.collection) {
            if family.body_reads_loop {
                warnings.push(resolve_loop_warning(family, methods));
            }
            continue;
        }
        // No getter behind the arm. Three things can hand a loop a collection,
        // and this is the whole list: a declared `Props` field, a `State` field
        // a renderer reads directly, and a `State` getter. The first two are
        // collections this component already HOLDS, so the renderer that reads
        // one of them binds the item and the loop runs — those are reported
        // (the Resolve renderer counts a string they do not back) and not
        // refused, because the component is not broken.
        //
        // What is left is a name the component's own declaration does not
        // contain. Whether that is a mistake or the caller's business turns on
        // whether the component's inventory of supplyable names is CLOSED, and
        // that is what decides fatal from reported.
        if props.holds_collection(&family.collection) {
            warnings.push(held_collection_loop_warning(&family.collection, props));
        } else if props.inventory_is_closed() {
            // Closed inventory: only this component's declared `Props` fields
            // can be supplied, and this name is not one of them, so no arm can
            // ever answer it. The loop counts zero items and its body never
            // runs — a list-shaped hole with nothing in the output to show for
            // it. A warning on stderr does not stop that from shipping; the
            // `Err` does, so this is where refusing is sound.
            errors.push(unrenderable_collection_error(&family.collection, props));
        } else {
            // Open inventory: the generated `render_with` entry point takes a
            // caller closure `|name| String` that can supply ANY name, so a
            // name outside this component's declaration is not a typo — it is
            // the caller's, bound at run time through that closure. Refusing
            // here would make a working template unbuildable, which is the
            // exact mirror of the defect this gate exists to close, so the
            // pre-existing report stands unchanged: the loop may still go
            // unanswered, and this is the one place that says so.
            warnings.push(resolve_loop_warning(family, methods));
        }
    }
    ResolverKeys {
        keys,
        warnings,
        errors,
    }
}

/// The warning for a `v-for` over a collection this component already holds, for
/// the renderers that count the collection's string instead of reading the
/// field it is held in.
///
/// Not fatal, and the difference matters: the collection IS here, so the
/// renderer that reads it renders the loop. What is missing is a getter behind
/// the string the OTHER renderer counts, so the message names which renderer
/// reads the field and which one is left with nothing.
fn held_collection_loop_warning(collection: &str, props: &PropsChannel<'_>) -> String {
    let (holding, reads_it) = match props.field(collection) {
        Some(field) => (
            format!("a `Props` field of type `{}`", field.ty),
            "`render_with_props`",
        ),
        None => ("a `State` field".to_string(), "`render_with_state`"),
    };
    format!(
        "`v-for` over `{collection}` is {holding}, so {reads_it} reads it directly and binds the \
         loop item — but `render_with` counts the resolver's string for it instead, and there is \
         no zero-argument `State` getter behind that string, so `render_with` counts zero items \
         and never runs the body. A parent that renders this component through {reads_it} is \
         unaffected; a parent that calls `render_with` is not. Give `{collection}` a \
         zero-argument `State` getter and both agree."
    )
}

fn push_unique(out: &mut Vec<String>, key: impl AsRef<str>) {
    let key = key.as_ref();
    if !out.iter().any(|k| k == key) {
        out.push(key.to_string());
    }
}

/// Generate setter methods on the State struct for v-model fields.
/// For `v-model="counter"` with State containing `counter: Cell<i32>`,
/// generates:
/// ```ignore
/// pub fn __vmodel_set_counter(&self, payload: &str) {
///     velox_core::vmodel::VModel::vmodel_set(&self.counter, payload);
/// }
/// ```
pub fn generate_vmodel_setters(vmodels: &[(String, String)]) -> String {
    if vmodels.is_empty() {
        return String::new();
    }
    let mut out = String::new();
    for (expr, handler) in vmodels {
        let field_path = format!("self.{}", expr);
        out.push_str(&format!(
            r#"
    pub fn {handler}(&self, payload: &str) {{
        velox_core::vmodel::VModel::vmodel_set(&{field_path}, payload);
    }}"#,
            handler = handler,
            field_path = field_path,
        ));
    }
    out
}

#[cfg(test)]
mod tests {
    use super::*;

    fn methods(script: &str) -> Vec<StateMethod> {
        extract_state_methods(script)
    }

    /// The `PropsChannel` for a test that compiles a component declaring no
    /// `Props` of its own: no declared fields, and the `State` field list the
    /// caller already passes as its third argument — that list IS the `State`
    /// fields, so a test asking whether a collection is a declared prop and
    /// whether it is a `State` field is answered from the same names the real
    /// codegen pass sees, rather than from a fixture that answers both `no`.
    fn props_of(state_fields: &[String]) -> PropsChannel<'_> {
        PropsChannel {
            fields: &[],
            root: "props",
            state_fields,
            children: &[],
        }
    }

    /// A bound expression that cannot become a resolver lookup has to be
    /// reported, not silently rendered as an empty string.
    #[test]
    fn unsupported_bound_expression_is_reported_as_a_warning() {
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="draft.trim()" />"#)
                .unwrap();
        let collected =
            collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));

        assert!(
            collected.keys.is_empty(),
            "an unresolvable expression must not be registered: {:?}",
            collected.keys
        );
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        let warning = &collected.warnings[0];
        assert!(warning.contains(":value=\"draft.trim()\""), "{warning}");
        assert!(warning.contains("`draft.trim()`"), "{warning}");
        assert!(warning.contains("renders empty"), "{warning}");
    }

    /// A bound name that is a payload-taking method is reported the same way:
    /// registering it would emit `state.on_input().to_string()`.
    #[test]
    fn payload_taking_handler_binding_is_reported_as_a_warning() {
        let script = "impl State { pub fn on_input(&self, payload: &str) { let _ = payload; } }";
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="on_input" />"#).unwrap();
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );

        assert!(collected.keys.is_empty(), "{:?}", collected.keys);
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        assert!(
            collected.warnings[0].contains("payload-taking State method"),
            "{}",
            collected.warnings[0]
        );
    }

    /// A binding over a `Signal`/`Ref` field has no getter, so it cannot be
    /// looked up: the author is told instead of getting an empty render.
    #[test]
    fn field_backed_binding_is_reported_as_a_warning() {
        let script = "pub struct State { pub count: std::rc::Rc<velox_core::signal::Signal<i32>> }";
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="count" />"#).unwrap();
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &["count".to_string()],
            RenderMode::State,
            &props_of(&["count".to_string()]),
        );

        assert!(collected.keys.is_empty(), "{:?}", collected.keys);
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        let warning = &collected.warnings[0];
        assert!(warning.contains(":value=\"count\""), "{warning}");
        assert!(warning.contains("`count`"), "{warning}");
        assert!(warning.contains("renders empty"), "{warning}");
    }

    /// A loop-rooted binding is a real read in State mode — a field read off the
    /// loop item — so State mode has no key to register and nothing to report.
    ///
    /// In Resolve mode the loop as a whole cannot render, so it is reported once,
    /// for the loop, and not once per binding inside it: the loop message already
    /// says every one of those reads comes back empty.
    #[test]
    fn loop_rooted_binding_is_covered_by_the_loop_diagnostic_in_resolve_mode() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div v-for="(todo, idx) in todos"><p :value="todo.text">x</p></div>"#,
        )
        .unwrap();

        let state =
            collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));
        assert!(state.keys.is_empty(), "{:?}", state.keys);
        assert!(
            state.warnings.is_empty(),
            "State mode reads the field off the loop item: {:?}",
            state.warnings
        );

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(""),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(resolve.keys.is_empty(), "{:?}", resolve.keys);
        assert_eq!(
            resolve.warnings.len(),
            1,
            "one message for the loop, not one for the loop and one for the \
             binding inside it: {:?}",
            resolve.warnings
        );
        let warning = &resolve.warnings[0];
        assert!(warning.contains("`todos`"), "{warning}");
        assert!(
            !warning.contains(":value=\"todo.text\""),
            "the loop message must not restate the binding: {warning}"
        );
    }

    /// A loop body is reported as a whole, so an expression the loop itself
    /// cannot reduce is not reported a second time on its own. State mode reads
    /// the same expression straight off the loop item, so it resolves there and
    /// is not reported.
    #[test]
    fn compound_loop_rooted_binding_is_covered_by_the_loop_diagnostic() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div v-for="todo in todos"><p :value="todo.a + todo.b">x</p></div>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(""),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(resolve.keys.is_empty(), "{:?}", resolve.keys);
        assert_eq!(resolve.warnings.len(), 1, "{:?}", resolve.warnings);
        let warning = &resolve.warnings[0];
        assert!(warning.contains("`todos`"), "{warning}");
        assert!(
            !warning.contains("renders empty"),
            "the loop message already covers every read in the body, so this \
             binding must not add a second one: {warning}"
        );

        let state =
            collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));
        assert!(
            state.warnings.is_empty(),
            "State mode reads the fields off the loop item, so it resolves: {:?}",
            state.warnings
        );
    }

    /// A binding inside a Resolve-mode loop that is *not* rooted at the loop is
    /// an ordinary one, and the loop diagnostic must not swallow its own.
    #[test]
    fn non_loop_rooted_binding_inside_a_resolve_loop_is_still_reported() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div v-for="todo in todos"><input :value="draft.trim()" /></div>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(""),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(resolve.warnings.len(), 2, "{:?}", resolve.warnings);
        let binding = resolve
            .warnings
            .iter()
            .find(|w| w.contains(":value=\"draft.trim()\""))
            .unwrap_or_else(|| panic!("{:?}", resolve.warnings));
        assert!(binding.contains("renders empty"), "{binding}");
    }

    /// A `State` field resolves through no renderer, so its diagnostic is
    /// mode-independent.
    #[test]
    fn field_backed_binding_is_reported_in_both_modes() {
        let script = "pub struct State { pub count: Rc<Signal<i32>> }";
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="count" />"#).unwrap();
        let methods = methods(script);
        let fields = ["count".to_string()];

        for mode in [RenderMode::State, RenderMode::Resolve] {
            let collected =
                collect_resolver_keys(&nodes, &methods, &fields, mode, &props_of(&fields));
            assert!(collected.keys.is_empty(), "{mode:?}: {:?}", collected.keys);
            assert_eq!(
                collected.warnings.len(),
                1,
                "{mode:?}: {:?}",
                collected.warnings
            );
            assert!(
                collected.warnings[0].contains(":value=\"count\""),
                "{mode:?}: {}",
                collected.warnings[0]
            );
        }
    }

    /// `:key` on a `v-for` element is the same case, and both spellings of the
    /// key expression normalize to the same read. State mode reads the loop item
    /// directly and reports nothing; Resolve mode reports the loop, once, because
    /// the loop cannot render — never the key on its own.
    #[test]
    fn v_for_key_binding_is_covered_by_the_loop_diagnostic_in_resolve_mode() {
        // Both spellings of the same key expression: the collector must analyze
        // the normalized expression codegen emits, not the raw `{{ … }}` text.
        for tpl in [
            r#"<div v-for="todo in todos" :key="todo.id">x</div>"#,
            r#"<div v-for="todo in todos" :key="{{ todo.id }}">x</div>"#,
        ] {
            let nodes = crate::template_parse::parse_template_to_ast(tpl).unwrap();

            let state =
                collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));
            assert!(state.keys.is_empty(), "{tpl} {:?}", state.keys);
            assert!(
                state.warnings.is_empty(),
                "{tpl}: State mode reads the key off the loop item: {:?}",
                state.warnings
            );

            let resolve = collect_resolver_keys(
                &nodes,
                &methods(""),
                &[],
                RenderMode::Resolve,
                &props_of(&[]),
            );
            assert!(resolve.keys.is_empty(), "{tpl} {:?}", resolve.keys);
            assert_eq!(resolve.warnings.len(), 1, "{tpl} {:?}", resolve.warnings);
            assert!(
                !resolve.warnings[0].contains(":key="),
                "{tpl}: the key must not be reported separately from its loop: {}",
                resolve.warnings[0]
            );
        }
    }

    /// The `{{ … }}` spelling of a `v-for` `:key` is a loop-rooted binding whose
    /// key codegen normalizes before emitting, so the raw `{{ … }}` text is never
    /// an expression codegen produces. No diagnostic may quote it: it would
    /// describe a defect that is not there.
    #[test]
    fn mustache_key_is_never_quoted_by_a_diagnostic() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div v-for="todo in todos" :key="{{ todo.id }}">x</div>"#,
        )
        .unwrap();

        for mode in [RenderMode::Resolve, RenderMode::State] {
            let collected = collect_resolver_keys(&nodes, &methods(""), &[], mode, &props_of(&[]));
            for warning in &collected.warnings {
                assert!(
                    !warning.contains("{{"),
                    "{mode:?}: a diagnostic quoting the raw mustache text: {warning}"
                );
            }
        }
    }

    /// What R-1 delivers, stated as an outcome rather than as a shape: a
    /// Resolve-mode `v-for` over a collection the resolver cannot answer runs
    /// its body zero times, so every read inside it is worth nothing — and the
    /// case is reported instead of passing silently.
    ///
    /// Nothing in this workspace compiles a generated module and runs it, so a
    /// runtime value assertion is not available here. The chain asserted below is
    /// the strongest honest form of one, and each link is the generated text a
    /// reader can check: the loop bound is a count, the count is computed from
    /// one resolver answer, the resolver has no arm for that answer, and the
    /// catch-all is the empty string.
    #[test]
    fn resolve_mode_v_for_over_an_unregistered_collection_is_diagnosed_as_empty() {
        const TPL: &str =
            r#"<ul><li v-for="item in items" :key="item.id">{{ item.name }}</li></ul>"#;
        let rs = compile_template_to_rs_full_with_mode(
            TPL,
            "App",
            None,
            None,
            None,
            RenderMode::Resolve,
        )
        .expect("template compiles");

        // The bound of the loop is a count, and the count is one resolver answer.
        assert!(rs.contains("for __idx in 0..__for_count {"), "{rs}");
        assert!(
            rs.contains("let __for_count = if let Ok(n) = __for_expr.parse::<usize>()"),
            "the loop bound must be derived from the collection read: {rs}"
        );
        assert!(
            rs.contains(r#"let __for_expr = resolve("items");"#),
            "the collection is read through the resolver: {rs}"
        );
        // That answer is the empty string: no arm, and the catch-all.
        assert!(
            !rs.contains(r#""items" =>"#),
            "the collection must have no resolver arm: {rs}"
        );
        assert!(rs.contains("_ => String::new()"), "{rs}");
        // An empty answer takes the `is_empty()` branch, so the count is zero and
        // the body never runs. Reported, not silent.
        let nodes = crate::template_parse::parse_template_to_ast(TPL).unwrap();
        let resolve = collect_resolver_keys(
            &nodes,
            &methods(""),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(resolve.warnings.len(), 1, "{:?}", resolve.warnings);
        let warning = &resolve.warnings[0];
        assert!(warning.contains("`items`"), "{warning}");
        assert!(
            warning.contains("never runs"),
            "the diagnosis must say the body never runs: {warning}"
        );

        // State mode reads the collection and the item straight off the state, so
        // the same template renders and is not reported there.
        let state =
            collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));
        assert!(state.warnings.is_empty(), "{:?}", state.warnings);
    }

    /// An object `:class` condition the loop cannot reduce is covered by the
    /// loop's own diagnostic, like any other binding in the body. The generated
    /// condition is still wrong in Resolve mode — it names the loop item, which
    /// that renderer does not bind — and that is left for the collection work;
    /// what this pins is that it is not left *silent*, and not reported twice.
    #[test]
    fn compound_class_condition_in_a_resolve_loop_adds_no_second_warning() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<li v-for="todo in todos" :class="{ active: todo.a == todo.b }">x</li>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(""),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(resolve.warnings.len(), 1, "{:?}", resolve.warnings);
        assert!(
            resolve.warnings[0].contains("`todos`"),
            "{}",
            resolve.warnings[0]
        );
    }

    /// The loop diagnostic must name the loop only when the loop really cannot
    /// render. A collection the resolver can answer, over a body that reads no
    /// loop variable, renders: reporting it would train the reader to ignore it.
    #[test]
    fn resolve_loop_over_a_registered_collection_is_not_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
            pub fn draft(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div v-for="item in items"><p :value="draft">x</p></div>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(
            resolve.keys,
            vec!["draft".to_string()],
            "{:?}",
            resolve.keys
        );
        assert!(
            resolve.warnings.is_empty(),
            "the collection is a registered getter and the body reads no loop \
             variable, so the loop renders: {:?}",
            resolve.warnings
        );
    }

    /// The loop index is a real binding in the loop body — an interpolated
    /// index becomes `text(i.to_string())` and a bare-index bind, directive or
    /// `:class` becomes `format!("{}", index)` — so a loop whose body reads
    /// ONLY the index, directly, renders, and reporting it would be a false
    /// positive. Every index form here is the direct read: the value is the
    /// index name and nothing else.
    #[test]
    fn resolve_loop_reading_only_the_index_is_not_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items">{{ i }}<b :value="i" :class="i" :style="i">x</b></li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(
            resolve.warnings.is_empty(),
            "the collection is a registered getter and the body reads only the loop \
             index, directly, which is a real binding: {:?}",
            resolve.warnings
        );
    }

    /// A CONDITION on the loop element is not a direct read, however bare the
    /// expression is. `emit_node_with_mode` routes `v-if` through
    /// `rewrite_if_expr`, which rewrites every bare identifier into
    /// `resolve("<ident>")`, so `v-if="i"` is emitted as
    /// `{ let __v = resolve("i"); … }` around the whole loop: the flat resolver
    /// answers `""`, the condition is falsy and the loop renders nothing.
    #[test]
    fn resolve_loop_with_a_condition_reading_only_the_index_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" v-if="i">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// The same through `v-show` on the template's ROOT loop element, the other
    /// directive the emitter rewrites with `rewrite_if_expr`:
    /// `if !({ let __v = resolve("i"); … })`, so the element is hidden whatever
    /// the loop renders.
    #[test]
    fn resolve_loop_with_a_show_condition_reading_only_the_index_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<li v-for="(item, i) in items" v-show="i">x</li>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// A `v-show` on a loop element that is NOT the template root is dropped
    /// outright: only `v-if` is honoured by the children emitter's `v-for`
    /// branch, so no read is emitted and the condition is silently ignored.
    ///
    /// It is reported anyway, deliberately. Erring toward reporting is this
    /// diagnostic's standing direction — a false positive is one extra sentence,
    /// a false negative is silence — and the classification also stays correct
    /// if the dropped directive is ever fixed, whereas exempting it now would
    /// become a fresh silence the day that happens.
    #[test]
    fn resolve_loop_reports_a_dropped_show_condition_on_a_nested_loop_element() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" v-show="i">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// F1: the two fallback arms are set at opposite defaults, and each is
    /// pinned here with its reason.
    ///
    /// On the loop element an unrecognised directive is `Resolver`: it is the
    /// one classification with no emit path to read off, it is the case a future
    /// condition directive arrives as, and `Direct` there would silently exempt
    /// a read the resolver cannot answer — the N3/N6 failure. Inside the body it
    /// is `Direct`, because every directive there is dropped by
    /// `emit_props_in_loop` and emits no read at all, so `Resolver` would report
    /// loops that render perfectly. `v-model` is the one loop-element directive
    /// that is not a condition; `extract_vmodel` re-emits it as a `:value` bind,
    /// so it must stay exempt.
    #[test]
    fn unrecognised_directives_fail_loud_on_the_loop_element_and_stay_quiet_in_the_body() {
        assert!(
            directive_emission("if", AttrSite::LoopElement) == IndexEmission::Resolver,
            "a condition on the loop element is rewritten by `rewrite_if_expr`"
        );
        assert!(
            directive_emission("show", AttrSite::LoopElement) == IndexEmission::Resolver,
            "so is `v-show`, through the same handler"
        );
        assert!(
            directive_emission("text", AttrSite::LoopElement) == IndexEmission::Resolver,
            "a directive the emitter does not handle has no direct read to claim, \
             so it must not be exempted from the loop diagnostic"
        );
        assert!(
            directive_emission("text", AttrSite::InLoopBody) == IndexEmission::Direct,
            "inside the body every directive is dropped, so it emits no read to \
             be wrong about and reporting it would flag a loop that renders"
        );
        assert!(
            directive_emission("model", AttrSite::LoopElement) == IndexEmission::Direct,
            "`v-model` becomes a `:value` bind, which renders"
        );
    }

    /// F1, at the decision: an unrecognised directive naming the index on the
    /// loop element must not be exempt, so the loop is reported.
    #[test]
    fn an_unrecognised_directive_naming_the_index_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" v-when="i">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// F2: the cause for a collection WITH an arm must not claim that every
    /// value in the body renders empty — a direct index read renders. It names
    /// the loop item instead.
    #[test]
    fn the_loop_message_blames_the_item_read_not_every_value() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items">{{ item.name }}</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
        let warning = &resolve.warnings[0];
        assert!(
            warning.contains("every read of the loop ITEM renders empty"),
            "the unanswerable read is the loop item's: {warning}"
        );
        assert!(
            !warning.contains("every value in the body renders empty"),
            "a direct index read renders, so that claim would be false: {warning}"
        );
    }

    /// F2: when the only read that triggered the report is one the emitter
    /// DROPS, the message must say so instead of claiming the body renders
    /// empty. A diagnostic that fires for a right reason with a wrong
    /// explanation teaches its reader to ignore the explanation.
    ///
    /// The `v-show` here is on a loop element nested in a parent, and
    /// `emit_children_with_mode`'s `v-for` branch has no `v-show` branch (only
    /// `emit_node_with_mode`'s does), so the read is dropped — see the
    /// `resolves_index: false` case in `index_classification_agrees_with_the_
    /// emitted_read`. The loop is reported anyway, which is the safe direction.
    #[test]
    fn the_loop_message_says_a_dropped_read_is_not_checkable() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" v-show="i">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        // Reported on purpose — the direction that is safe to be wrong in.
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
        let warning = &resolve.warnings[0];
        assert!(
            warning.contains("the emitter DROPS rather than makes"),
            "the read that triggered this is dropped, so the message must say so: {warning}"
        );
    }

    /// The boundary across attribute KINDS: one element carrying both a
    /// genuinely-rendering direct index bind and a condition the resolver
    /// answers `""` for is still reported. Without this, reclassifying
    /// conditions could have been done by suppressing the loop instead.
    #[test]
    fn resolve_loop_reports_a_condition_beside_a_direct_index_read() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" :value="i" v-if="i">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// A directive on an element INSIDE the body is dropped by
    /// `emit_props_in_loop`, so it emits no read and cannot leave the body
    /// empty; the loop is not reported for it. (That the condition is silently
    /// ignored is a separate pre-existing defect, not this rule.)
    #[test]
    fn resolve_loop_condition_on_a_child_in_the_body_is_not_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items"><b v-if="i">x</b></li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(
            resolve.warnings.is_empty(),
            "a dropped directive emits no read, so nothing in the body renders \
             empty: {:?}",
            resolve.warnings
        );
    }

    /// The classification table, checked against BOTH facts at once: what the
    /// Resolve renderer emits for that read of the index, and what the family
    /// diagnostic then says about the loop. Neither column is computed from the
    /// other — the emitted form comes from codegen and the decision from the
    /// collector — so a classification that drifts from the emit path fails here
    /// instead of silently exempting an unanswerable read.
    ///
    /// Every expectation below was read off the emitted module, not assumed from
    /// the attribute's name. Only the first `pub fn render_with_state` onwards is
    /// examined: the module also carries the State renderer, whose loop body
    /// reads the loop variables differently.
    #[test]
    fn index_classification_agrees_with_the_emitted_read() {
        // (label, template, emits a resolver read of the index, reported, why)
        let cases: [(&str, &str, bool, bool, &str); 10] = [
            (
                "v-if on a nested loop element",
                r#"<ul><li v-for="(item, i) in items" v-if="i">x</li></ul>"#,
                true,
                true,
                "the children emitter's v-for branch rewrites it to resolve(\"i\")",
            ),
            (
                "v-if on the root loop element",
                r#"<li v-for="(item, i) in items" v-if="i">x</li>"#,
                true,
                true,
                "emit_node_with_mode rewrites it before the loop branch",
            ),
            (
                "v-show on the root loop element",
                r#"<li v-for="(item, i) in items" v-show="i">x</li>"#,
                true,
                true,
                "the same handler, negated",
            ),
            (
                "v-show on a nested loop element",
                r#"<ul><li v-for="(item, i) in items" v-show="i">x</li></ul>"#,
                false,
                true,
                "dropped by that branch, and still reported on purpose",
            ),
            (
                "a call condition naming the index",
                r#"<ul><li v-for="(item, i) in items" v-if="i()">x</li></ul>"#,
                true,
                true,
                "the expression is not the index name, so no exemption",
            ),
            (
                "a compound binding",
                r#"<ul><li v-for="(item, i) in items" :value="i + 1">x</li></ul>"#,
                true,
                true,
                "emitted as resolve(\"i + 1\")",
            ),
            (
                "a direct index bind",
                r#"<ul><li v-for="(item, i) in items" :value="i">x</li></ul>"#,
                false,
                false,
                "emitted as format!(\"{}\", i)",
            ),
            (
                "a bare index interpolation",
                r#"<ul><li v-for="(item, i) in items">{{ i }}</li></ul>"#,
                false,
                false,
                "emitted as i.to_string()",
            ),
            (
                "a condition on a child in the body",
                r#"<ul><li v-for="(item, i) in items"><b v-if="i">x</b></li></ul>"#,
                false,
                false,
                "emit_props_in_loop drops the directive, so it reads nothing",
            ),
            (
                "v-model on the loop element",
                r#"<ul><li v-for="(item, i) in items" v-model="i">x</li></ul>"#,
                false,
                false,
                "no index read is emitted for it",
            ),
        ];
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        for (label, tpl, resolves_index, reported, why) in cases {
            let rs = crate::compile_template_to_rs_full_with_mode(
                tpl,
                script,
                None,
                None,
                None,
                RenderMode::Resolve,
            )
            .expect("template compiles");
            let resolve_renderer = rs
                .split("pub fn render_with_state")
                .next()
                .expect("the module has a Resolve renderer");
            let emitted_resolver_read = resolve_renderer.contains("resolve(\"i\")")
                || resolve_renderer.contains("resolve(\"i + 1\")");
            let nodes = crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
            let resolve = collect_resolver_keys(
                &nodes,
                &methods(script),
                &[],
                RenderMode::Resolve,
                &props_of(&[]),
            );
            assert_eq!(
                emitted_resolver_read, resolves_index,
                "{label}: the emitted read changed ({why})\n{resolve_renderer}"
            );
            assert_eq!(
                !resolve.warnings.is_empty(),
                reported,
                "{label}: the decision disagrees with the emitted read ({why}): {:?}",
                resolve.warnings
            );
        }
    }

    /// A COMPOUND expression rooted at the index is not the direct binding read.
    /// `rewrite_ctx_expr` reduces only a bare index or an `item.`-prefixed path,
    /// so `i + 1` falls through to the flat resolver and is emitted as
    /// `resolve("i + 1")`, which the one-arm-per-key table answers `""`. The
    /// loop renders an empty attribute, so it must be reported.
    #[test]
    fn resolve_loop_reading_a_compound_index_binding_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" :value="i + 1">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// The same compound-index hole through a `:class` condition, which also
    /// happens to emit a non-compiling comparison in both renderers — the
    /// closed compound-`:class` limitation, reached here through the index.
    #[test]
    fn resolve_loop_reading_a_compound_index_condition_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" :class="{a: i > 2}">x</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// The same compound-index hole through an interpolation, which is emitted
    /// as `text(resolve("i + 1"))` and answers `""`.
    #[test]
    fn resolve_loop_reading_a_compound_index_interpolation_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items">{{ i + 1 }}</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// The exemption is per EXPRESSION, not per loop: one element carrying both
    /// a direct index read and a compound one is still reported, so the direct
    /// forms cannot launder a compound sibling.
    #[test]
    fn resolve_loop_reports_a_compound_index_read_beside_direct_ones() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items" :value="i" :title="i + 1">{{ i }} {{ i * 2 }}</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// A nested `v-for` whose COLLECTION is the outer index is not a direct
    /// read: the collection is emitted as `let __for_expr = resolve("i")`, which
    /// answers `""`, so the nested loop counts zero items and its body never
    /// runs. The direct-index exemption must not reach that site, and the outer
    /// loop — whose body contains that unreadable read — must not be masked by
    /// it either.
    #[test]
    fn resolve_loop_reading_the_index_as_a_nested_collection_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items"><p v-for="row in i">{{ row }}</p></li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(resolve.warnings.len(), 2, "{:?}", resolve.warnings);
        let nested = resolve
            .warnings
            .iter()
            .find(|w| w.contains("`v-for` over `i` cannot render in Resolve mode"))
            .unwrap_or_else(|| {
                panic!(
                    "the nested loop over the index must be reported: {:?}",
                    resolve.warnings
                )
            });
        assert!(
            nested.contains("is not a registered `State` getter"),
            "`resolve(\"i\")` answers an empty string, so the count is zero: {nested}"
        );
        assert!(
            resolve
                .warnings
                .iter()
                .any(|w| w.contains("`v-for` over `items` cannot render in Resolve mode")),
            "the outer loop reads the index, so it reports too: {:?}",
            resolve.warnings
        );
    }

    /// Exactly one message for the loop, naming the loop and blaming the
    /// unreadable indexed read — the collection here IS a registered getter, so
    /// "not a registered `State` getter" would be the wrong cause.
    fn assert_loop_reported_for_unanswerable_reads(warnings: &[String]) {
        assert_eq!(warnings.len(), 1, "{warnings:?}");
        let warning = &warnings[0];
        assert!(
            warning.contains("`v-for` over `items` cannot render in Resolve mode"),
            "{warning}"
        );
        assert!(
            warning.contains("indexed resolver keys"),
            "the collection has a getter, so the cause must be the unreadable \
             indexed read: {warning}"
        );
    }

    /// A body that reads the ITEM and nothing else still reports: the direct
    /// index exemption is about the index, never a blanket suppression of the
    /// loop. Every item form — an indexed resolver read, a bound field, a
    /// `{{ … }}` — is unanswerable.
    #[test]
    fn resolve_loop_reading_only_the_item_is_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items"><b>{{ item.name }}</b></li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_loop_reported_for_unanswerable_reads(&resolve.warnings);
    }

    /// The converse of the index-only case: reading the ITEM as well still
    /// cannot be answered by any resolver arm, so it stays reported. Without
    /// this the N1 fix would be a blanket suppression.
    #[test]
    fn resolve_loop_reading_the_index_and_the_item_is_still_reported() {
        let script = r#"
        impl State {
            pub fn items(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(item, i) in items">{{ i }}{{ item.name }}</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert_eq!(resolve.warnings.len(), 1, "{:?}", resolve.warnings);
        let warning = &resolve.warnings[0];
        assert!(
            warning.contains("`v-for` over `items` cannot render in Resolve mode"),
            "{warning}"
        );
        assert!(
            warning.contains("indexed resolver keys"),
            "the collection has a getter, so the cause must be the unreadable \
             indexed read: {warning}"
        );
    }

    /// A collection `State` has no getter for cannot be answered by an arm, so a
    /// loop over it counts zero items and must be reported.
    ///
    /// R-1 found this while a collection name could still reach the key set
    /// without a getter, which is why `has_arm` consults the getter alone: a key
    /// is not an arm. R-1d's gate closes that route for interpolation keys, and
    /// the binding route was already gated by `has_state_getter`, so the hazard
    /// is now unreachable from the template — asserted below rather than
    /// assumed, because a test that no longer holds its premise is how a
    /// narrowing like this hides.
    #[test]
    fn resolve_loop_over_a_collection_with_no_accessor_is_reported() {
        let script = r#"
        impl State {
            pub fn draft(&self) -> String { String::new() }
        }"#;
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<p :x="items">{{ items }}</p><ul><li v-for="(item, i) in items">{{ i }}</li></ul>"#,
        )
        .unwrap();

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(
            !resolve.keys.iter().any(|k| k == "items"),
            "neither route can register a key `State` has no getter for — the \
             binding is gated by `has_state_getter` and the interpolation by \
             R-1d's gate — so no key can stand in for the getter: {:?}",
            resolve.keys
        );
        assert!(
            resolve
                .warnings
                .iter()
                .any(|w| w.contains("interpolation {{ items }} cannot be resolved")),
            "the interpolation reports why it was dropped: {:?}",
            resolve.warnings
        );
        // Three warnings, all of them about `items`, in this order: the dropped
        // interpolation (this round's gate), the dropped binding (the bind path's
        // own gate) and the loop itself.
        assert_eq!(resolve.warnings.len(), 3, "{:?}", resolve.warnings);
        let warning = &resolve.warnings[2];
        assert!(
            warning.contains("`v-for` over `items` cannot render in Resolve mode"),
            "{warning}"
        );
        assert!(
            warning.contains("not a registered `State` getter"),
            "no getter backs the key, so the cause must be the empty answer: {warning}"
        );

        // The State renderer reads the collection and the item directly, so the
        // loop is not reported there — the family is pushed only under
        // `if let (RenderMode::Resolve, Some(info))`, and this is the pin: the two
        // key-gate warnings are mode-independent, the loop report is not.
        let state = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );
        assert_eq!(state.keys, resolve.keys, "the key set is mode-independent");
        assert_eq!(state.warnings.len(), 2, "{:?}", state.warnings);
        assert!(
            !state
                .warnings
                .iter()
                .any(|w| w.contains("`v-for` over `items` cannot render")),
            "a loop report is Resolve-mode only: {:?}",
            state.warnings
        );
    }

    /// A zero-argument method that returns nothing is not a getter: the arm would
    /// be `state.reset().to_string()`, which does not compile.
    #[test]
    fn method_without_return_type_is_reported_as_a_warning() {
        let script = "impl State { pub fn reset(&self) {} }";
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="reset" />"#).unwrap();
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );

        assert!(collected.keys.is_empty(), "{:?}", collected.keys);
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        let warning = &collected.warnings[0];
        assert!(warning.contains(":value=\"reset\""), "{warning}");
        assert!(
            warning.contains("return type") || warning.contains("returns"),
            "the warning must explain the return type: {warning}"
        );
    }

    /// A zero-argument method with an unrenderable return type is not a getter.
    #[test]
    fn unrenderable_return_type_is_reported_as_a_warning() {
        let script = "impl State { pub fn items(&self) -> Vec<String> { Vec::new() } }";
        let nodes =
            crate::template_parse::parse_template_to_ast(r#"<input :value="items" />"#).unwrap();
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );

        assert!(collected.keys.is_empty(), "{:?}", collected.keys);
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        assert!(
            collected.warnings[0].contains("Vec<String>"),
            "the warning must name the return type: {}",
            collected.warnings[0]
        );
    }

    /// Only zero-argument methods whose return type renders as text are getters.
    #[test]
    fn getter_method_name_requires_a_zero_argument_renderable_getter() {
        let script = r#"
impl State {
    pub fn title(&self) -> String { String::new() }
    pub fn get_count(&self) -> i32 { 0 }
    pub fn is_open(&self) -> bool { true }
    pub fn has_items(&self) -> bool { true }
    pub fn on_input(&self, payload: &str) { let _ = payload; }
    pub fn pick(&self, index: usize) -> usize { index }
    pub fn reset(&self) {}
    pub fn rows(&self) -> Vec<String> { Vec::new() }
    pub fn result(&self) -> Result<String, String> { Ok(String::new()) }
}
"#;
        let methods = methods(script);

        assert_eq!(getter_method_name(&methods, "title"), Some("title"));
        assert_eq!(getter_method_name(&methods, "count"), Some("get_count"));
        assert_eq!(getter_method_name(&methods, "open"), Some("is_open"));
        // The prefixed convention still resolves a key whose exact-name method
        // is not a getter, as long as the prefixed one is.
        assert_eq!(getter_method_name(&methods, "items"), Some("has_items"));
        assert_eq!(getter_method_name(&methods, "on_input"), None);
        assert_eq!(getter_method_name(&methods, "pick"), None);
        assert_eq!(getter_method_name(&methods, "reset"), None);
        assert_eq!(getter_method_name(&methods, "rows"), None);
        assert_eq!(getter_method_name(&methods, "result"), None);
        assert!(has_state_getter(&methods, "title"));
        assert!(!has_state_getter(&methods, "on_input"));
        // A prefixed payload-taking method is a handler, not a getter either.
        assert!(!has_state_getter(&methods, "input"));
    }

    /// The two lookups differ in exactly one test, and both go through the same
    /// search — a user struct is a fine start of a member path even though it
    /// has no `Display` form, while the same type as the value itself is not
    /// renderable. Proving both call sites here is what keeps them one notion.
    #[test]
    fn accessor_and_getter_share_one_lookup_and_differ_only_on_renderability() {
        let script = r#"
impl State {
    pub fn user(&self) -> User { User }
    pub fn get_count(&self) -> i32 { 0 }
    pub fn title(&self) -> String { String::new() }
    pub fn on_input(&self, payload: &str) { let _ = payload; }
    pub fn reset(&self) {}
}
"#;
        let methods = methods(script);

        // A user struct: an accessor (it starts a chain), not a getter (it does
        // not render).
        assert_eq!(accessor_method_name(&methods, "user"), Some("user"));
        assert_eq!(getter_method_name(&methods, "user"), None);
        // The `get_`/`is_`/`has_` convention is shared, not re-invented.
        assert_eq!(accessor_method_name(&methods, "count"), Some("get_count"));
        assert_eq!(getter_method_name(&methods, "count"), Some("get_count"));
        assert_eq!(accessor_method_name(&methods, "title"), Some("title"));
        // A payload-taking method and a unit-returning one are neither.
        assert_eq!(accessor_method_name(&methods, "on_input"), None);
        assert_eq!(accessor_method_name(&methods, "reset"), None);
    }

    /// A member path is split into a root and the segments after it, and
    /// anything that is not one is refused so every caller keeps its own
    /// behaviour.
    #[test]
    fn member_path_splits_a_path_and_refuses_everything_else() {
        assert_eq!(member_path("user.name"), Some(("user", vec!["name"])));
        assert_eq!(member_path("a.b.c"), Some(("a", vec!["b", "c"])));
        assert_eq!(
            member_path("items[0].name"),
            Some(("items", vec!["[0]", "name"]))
        );
        for not_a_path in [
            "title",       // a bare name has nothing to chain
            "user.name()", // a call is not a path; it keeps the fallback, ungated
            "user.",       // a trailing separator names no segment
            ".name",       // no root
            "user..name",  // an empty segment
            "user name",   // not an identifier
            "items[0",     // an unterminated index
            "",            // nothing at all
        ] {
            assert_eq!(member_path(not_a_path), None, "{not_a_path:?}");
        }
    }

    /// The invariant, on the key set itself: a member path is registered only
    /// when its root has an accessor, and dropped with a diagnostic otherwise.
    #[test]
    fn a_member_path_key_is_registered_only_when_its_root_has_an_accessor() {
        let script = r#"
impl State {
    pub fn user(&self) -> User { User }
    pub fn title(&self) -> String { String::new() }
}
"#;
        let with_accessor =
            crate::template_parse::parse_template_to_ast(r#"<p>{{ user.name }} {{ title }}</p>"#)
                .unwrap();
        let answerable = collect_resolver_keys(
            &with_accessor,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );
        assert_eq!(
            answerable.keys,
            vec!["user.name".to_string(), "title".to_string()],
            "an answerable member path keeps its key, in order"
        );
        assert!(answerable.warnings.is_empty(), "{:?}", answerable.warnings);

        let without =
            crate::template_parse::parse_template_to_ast(r#"<p>{{ user.name }} {{ title }}</p>"#)
                .unwrap();
        for mode in [RenderMode::State, RenderMode::Resolve] {
            let dropped = collect_resolver_keys(&without, &methods(""), &[], mode, &props_of(&[]));
            assert_eq!(
                dropped.keys,
                Vec::<String>::new(),
                "an unanswerable member path is not registered, so it cannot emit an arm, and \
                 neither is the bare name beside it, in {mode:?}"
            );
            assert_eq!(dropped.warnings.len(), 2, "{:?}", dropped.warnings);
            let warning = &dropped.warnings[0];
            assert!(warning.contains("{{ user.name }}"), "{warning}");
            assert!(
                warning.contains("`user` is not a zero-argument `State` method"),
                "{warning}"
            );
            assert!(warning.contains("renders empty"), "{warning}");
        }
    }

    /// The diagnostic says which part of the path is the problem and why, using
    /// the same reasons the bound-attribute path reports.
    #[test]
    fn the_member_path_diagnostic_names_the_root_and_why() {
        let tpl = r#"<p>{{ user.name }}</p>"#;
        let nodes = crate::template_parse::parse_template_to_ast(tpl).unwrap();

        let payload = r#"
impl State { pub fn user(&self, payload: &str) -> String { payload.to_string() } }
"#;
        let unit = r#"
impl State { pub fn user(&self) {} }
"#;
        let script = r#"
pub struct State { user: String }
impl State { pub fn new() -> Self { Self { user: String::new() } } }
"#;
        for (script_text, fields, expected) in [
            (
                payload,
                Vec::new(),
                "`user` is a payload-taking State method",
            ),
            (unit, Vec::new(), "`user` returns nothing"),
            (
                script,
                vec!["user".to_string()],
                "`user` is a `State` field",
            ),
        ] {
            let collected = collect_resolver_keys(
                &nodes,
                &methods(script_text),
                &fields,
                RenderMode::State,
                &props_of(&fields),
            );
            assert_eq!(collected.keys, Vec::<String>::new(), "{expected}");
            assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
            assert!(
                collected.warnings[0].contains(expected),
                "expected {expected:?} in {:?}",
                collected.warnings
            );
        }
    }

    /// A bare name IS gated, and only on a getter — the arm it produces is
    /// `state.title().to_string()`, which a `State` without `title` cannot
    /// compile. With a getter it is registered unchanged, which is the case the
    /// examples and the goldens rest on.
    ///
    /// `{{ user.name() }}` is NOT gated: a key with a call in it is not a name a
    /// `State` method can have and not a member path, so it keeps the
    /// long-standing fallback. That is pre-existing and disclosed, not claimed
    /// closed.
    #[test]
    fn a_bare_interpolation_key_is_gated_on_a_getter_and_otherwise_untouched() {
        let template = r#"<p>{{ title }} {{ user.name() }} {{ count }}</p>"#;
        let nodes = crate::template_parse::parse_template_to_ast(template).unwrap();

        // No getters at all: every bare name is dropped, and the paren key — which
        // no rule here can speak about — is the only one that survives.
        let collected =
            collect_resolver_keys(&nodes, &methods(""), &[], RenderMode::State, &props_of(&[]));
        assert_eq!(
            collected.keys,
            vec!["user.name()".to_string()],
            "a bare name with no getter is not registered, so it cannot emit an \
             unanswerable arm; a call key is not gated"
        );
        assert_eq!(collected.warnings.len(), 2, "{:?}", collected.warnings);
        for (key, warning) in [
            ("title", &collected.warnings[0]),
            ("count", &collected.warnings[1]),
        ] {
            assert!(warning.contains(&format!("{{{{ {key} }}}}")), "{warning}");
            assert!(
                warning.contains(&format!("`{key}` is not a zero-argument `State` method")),
                "{warning}"
            );
            assert!(warning.contains("Declare `pub fn"), "{warning}");
        }

        // A getter answers the bare name, and the key keeps its place in the set.
        let with_getters = r#"
impl State {
    pub fn title(&self) -> String { String::new() }
    pub fn count(&self) -> i32 { 0 }
}
"#;
        let answered = collect_resolver_keys(
            &nodes,
            &methods(with_getters),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );
        assert_eq!(
            answered.keys,
            vec![
                "title".to_string(),
                "user.name()".to_string(),
                "count".to_string()
            ],
            "a getter-backed bare name is registered exactly as before, in order"
        );
        assert!(answered.warnings.is_empty(), "{:?}", answered.warnings);
    }

    /// A bare name whose accessor returns something with no `Display` form is
    /// dropped too: `state.items().to_string()` on a `Vec<Item>` is the same
    /// compile break as a missing method.
    #[test]
    fn a_bare_name_with_an_unrenderable_return_type_is_not_registered() {
        let script = r#"
impl State {
    pub fn items(&self) -> Vec<Item> { Vec::new() }
}
"#;
        let nodes = crate::template_parse::parse_template_to_ast(r#"<p>{{ items }}</p>"#).unwrap();
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );
        assert_eq!(collected.keys, Vec::<String>::new(), "{:?}", collected.keys);
        assert_eq!(collected.warnings.len(), 1, "{:?}", collected.warnings);
        assert!(
            collected.warnings[0].contains(
                "`items` is a `State` method, but its return type cannot be rendered as text"
            ),
            "{}",
            collected.warnings[0]
        );
    }

    /// The renderability gate accepts what `.to_string()` accepts for the scalar
    /// and string types a template can show, and nothing else.
    #[test]
    fn return_type_is_renderable_accepts_only_display_types() {
        for ty in [
            Some("String"),
            Some("&str"),
            Some("&'static str"),
            Some("str"),
            Some("bool"),
            Some("char"),
            Some("i32"),
            Some("usize"),
            Some("f64"),
            Some("Rc<String>"),
            Some("Cow<'_, str>"),
        ] {
            assert!(return_type_is_renderable(ty), "{ty:?} should be renderable");
        }
        for ty in [
            None,
            Some("()"),
            Some("Self"),
            Some("Vec<String>"),
            Some("Option<String>"),
            Some("Result<String, String>"),
            Some("Signal<i32>"),
            Some("Todo"),
        ] {
            assert!(!return_type_is_renderable(ty), "{ty:?} is not renderable");
        }
    }

    /// The condition keys collected must match the lookups
    /// `rewrite_if_expr` actually emits, for every supported condition shape.
    #[test]
    fn condition_resolver_keys_match_rewrite_if_expr_lookups() {
        for cond in [
            "completed",
            "!completed",
            "count > 0",
            "todo.completed",
            "is_empty()",
            "true",
            "!false",
            "filter == \"all\"",
        ] {
            let rewritten = rewrite_if_expr(cond);
            let emitted: Vec<&str> = rewritten
                .match_indices("resolve(\"")
                .map(|(i, _)| {
                    let rest = &rewritten[i + "resolve(\"".len()..];
                    &rest[..rest.find('"').expect("closing quote")]
                })
                .collect();
            let collected = condition_resolver_keys(cond);
            assert_eq!(
                collected,
                emitted
                    .iter()
                    .map(|k| k.to_string())
                    .collect::<Vec<String>>(),
                "condition `{cond}` emits {emitted:?} but collects {collected:?}"
            );
        }
    }

    /// Both identifier scanners must RETURN on input whose continuation stops at
    /// once, and they must do it observably.
    ///
    /// Each scanner enters on `[A-Za-z_]` and extends with the shared
    /// `is_ident_char`, then advances. That is two predicates, so the cursor is
    /// moved on the entry character unconditionally — see the comment at each
    /// scanner. If `is_ident_char` is ever narrowed to exclude a character the
    /// entry test accepts, a scanner that only advanced inside the `while` would
    /// leave the cursor where it is and spin forever.
    ///
    /// WHY A THREAD AND A TIMEOUT: with today's `is_ident_char` the two forms are
    /// extensionally identical, so no input can tell them apart and **this test
    /// passes with or without the unconditional advance — it is a GUARD, not
    /// evidence for the advance.** What it buys is that the landmine is
    /// observable: without the thread a narrowed predicate would hang the whole
    /// suite with no output at all, and here the spin arrives as a failed
    /// assertion on this test instead. The evidence for the advance itself is the
    /// narrowing experiment in the report, not this test.
    ///
    /// The inputs are the ones a continuation-only `while` stops on: a letter or
    /// underscore followed by a non-identifier character, and the digit-leading
    /// form that the entry test declines (so it must be skipped, not consumed).
    #[test]
    fn a_scanner_that_enters_on_a_first_char_test_advances_even_when_this_is_narrow() {
        use std::sync::mpsc;
        use std::time::Duration;

        // (expression, keys the condition scanner must collect, whether the
        // root scanner must report a read of `item`)
        let cases = [
            ("a!", vec!["a"], false),
            ("_x!", vec!["_x"], false),
            ("a!b", vec!["a", "b"], false),
            ("9a!", vec!["a"], false),
            ("item!", vec!["item"], true),
            // A member path is ONE token, since the arm that answers it is the
            // method chain `state.item().name()`. R-3 changed that tokenisation
            // deliberately — it is what stops a `v-if="item.name"` from emitting
            // a field access on a `String` — and the advance this test guards is
            // still unconditional, inside `member_path_end`.
            ("item.name", vec!["item.name"], true),
            ("item[0].name", vec!["item[0].name"], true),
        ];

        for (expr, expected_keys, reads_item) in cases {
            let (tx, rx) = mpsc::channel();
            let expr_owned = expr.to_string();
            let probe = tx.clone();
            std::thread::spawn(move || {
                let _ = probe.send(condition_resolver_keys(&expr_owned));
            });
            let (tx2, rx2) = mpsc::channel();
            let expr_owned = expr.to_string();
            std::thread::spawn(move || {
                let _ = tx2.send(expr_reads_roots(&expr_owned, &["item", "i"]));
            });

            let collected = rx.recv_timeout(Duration::from_secs(10)).unwrap_or_else(|_| {
                panic!("condition_resolver_keys did not return on `{expr}` — the scanner is not making progress")
            });
            let reads = rx2.recv_timeout(Duration::from_secs(10)).unwrap_or_else(|_| {
                panic!("expr_reads_roots did not return on `{expr}` — the scanner is not making progress")
            });

            assert_eq!(collected, expected_keys, "keys collected from `{expr}`");
            assert_eq!(reads, reads_item, "root read reported for `{expr}`");
        }
    }

    // ---- R-1c: a loop item is not a `State` field, so an interpolation that
    // reads one must not become a resolver key. Before this, `{{ item.name }}`
    // inside `v-for="item in items"` collected the top-level key `item.name`
    // and `generate_make_resolve` emitted `"item.name" => state.item.name()`,
    // which is E0609: the field is `items` and there is no `item()` getter.
    // The key set is asserted WHOLE, not by absence of one name, so a key
    // reappearing under another name fails here too.

    /// R-1c's script, plus the accessor a member path needs: R-1d gates a
    /// member-path key on its ROOT having a zero-argument accessor, so a script
    /// without one would make these tests fail for a reason that has nothing to
    /// do with what they are about (loop-rooted keys, and document order).
    const R1C_SCRIPT: &str = r#"
        pub struct User { name: String }
        impl State {
            pub fn items(&self) -> String { String::new() }
            pub fn title(&self) -> String { String::new() }
            pub fn user(&self) -> User { User { name: String::new() } }
        }"#;

    fn keys_of(tpl: &str, mode: RenderMode) -> Vec<String> {
        let nodes = crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
        collect_resolver_keys(&nodes, &methods(R1C_SCRIPT), &[], mode, &props_of(&[])).keys
    }

    #[test]
    fn a_loop_rooted_interpolation_is_not_a_resolver_key() {
        for tpl in [
            // the canonical idiom, the one the golden used to encode as E0609
            r#"<ul><li v-for="item in items">{{ item.name }}</li></ul>"#,
            // an explicitly indexed loop, so the item name is `__idx` by default
            r#"<ul><li v-for="item in items">{{ item.name }} {{ item.id }}</li></ul>"#,
            // the index, and the collection itself
            r#"<ul><li v-for="(item, i) in items">{{ i }}</li></ul>"#,
            // an interpolation nested deeper in the body
            r#"<ul><li v-for="item in items"><span><b>{{ item.name }}</b></span></li></ul>"#,
            // the outer item read inside a nested loop, which the inner `v-for`
            // does not shadow
            r#"<ul><li v-for="(item, i) in items"><ul><li v-for="c in rows">{{ item.name }} {{ c }}</li></ul></li></ul>"#,
        ] {
            for mode in [RenderMode::State, RenderMode::Resolve] {
                assert_eq!(
                    keys_of(tpl, mode),
                    Vec::<String>::new(),
                    "{mode:?}: a read of a loop variable cannot be answered by a \
                     flat arm over `State` fields: {tpl}"
                );
            }
        }
    }

    /// The fix is scoped to loop-rooted keys. A dotted interpolation that
    /// appears at the top level of the component is a lookup of a state field
    /// path and is collected exactly as before — the whole set, in order.
    #[test]
    fn a_root_level_dotted_interpolation_is_still_a_key() {
        for mode in [RenderMode::State, RenderMode::Resolve] {
            assert_eq!(
                keys_of(
                    r#"<p>{{ user.name }} {{ items[0].name }} {{ title }}</p>"#,
                    mode
                ),
                vec!["user.name", "items[0].name", "title"],
                "{mode:?}: nothing here is inside a loop, so nothing is dropped"
            );
        }
    }

    /// Dropping a loop-rooted key must not disturb the ones that stay: the
    /// surrounding keys keep their document order, and a key read inside a
    /// loop body does not leak out to the top level either.
    #[test]
    fn loop_rooted_interpolations_are_dropped_and_the_rest_keep_document_order() {
        for mode in [RenderMode::State, RenderMode::Resolve] {
            assert_eq!(
                keys_of(
                    r#"<header>{{ title }}</header><ul><li v-for="(item, i) in items">{{ item.name }} {{ i }} {{ i + 1 }}</li></ul><footer>{{ user.name }}</footer>"#,
                    mode
                ),
                vec!["title", "user.name"],
                "{mode:?}: the two loop-rooted keys go, the two that surround \
                 them keep their order"
            );
        }
    }

    /// The open question R-1 left behind, pinned from both sides at once.
    ///
    /// R-1 treats a bare-index interpolation (`{{ i }}`) as one of only two
    /// forms that emit a DIRECT read of the loop variable and therefore
    /// render, so its diagnostic does not report a loop whose body reads
    /// nothing but the index. That is a decision about whether to REPORT a
    /// loop; this task removes `{{ i }}` from the KEY set, which is a decision
    /// about whether to EMIT an arm. The two are independent, and this test
    /// asserts both facts on the same two templates: `{{ i }}` is not a key
    /// and is not reported, while `{{ i + 1 }}` is also not a key but IS
    /// reported (it is emitted as the flat `resolve("i + 1")`, which the arm
    /// table cannot answer). Neither decision can move without this test
    /// showing the other.
    #[test]
    fn the_bare_index_interpolation_is_direct_and_is_still_not_a_key() {
        let direct = r#"<ul><li v-for="(item, i) in items">{{ i }}</li></ul>"#;
        let compound = r#"<ul><li v-for="(item, i) in items">{{ i + 1 }}</li></ul>"#;
        let nodes =
            |tpl: &str| crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
        let direct_resolve = collect_resolver_keys(
            &nodes(direct),
            &methods(R1C_SCRIPT),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        let compound_resolve = collect_resolver_keys(
            &nodes(compound),
            &methods(R1C_SCRIPT),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );

        assert_eq!(
            direct_resolve.keys,
            Vec::<String>::new(),
            "`{{ i }}` is loop-rooted, so it is not a top-level key: {:?}",
            direct_resolve.keys
        );
        assert!(
            direct_resolve.warnings.is_empty(),
            "R-1's exemption: a bare-index interpolation emits `text(i.to_string())`, \
             a direct read, so the loop is not reported: {:?}",
            direct_resolve.warnings
        );
        assert_eq!(
            compound_resolve.keys,
            Vec::<String>::new(),
            "the same key-set rule applies to a compound index read: {:?}",
            compound_resolve.keys
        );
        assert_eq!(
            compound_resolve.warnings.len(),
            1,
            "and R-1's N3 rule is untouched: the body emits `text(resolve(\"i + 1\"))`, \
             which no arm answers, so the loop IS reported: {:?}",
            compound_resolve.warnings
        );
    }

    /// The same closed state, asserted from the key-set side: a `v-for`
    /// collection with no accessor contributes no key from either route, and the
    /// loop is still reported (R-1's N2 finding, re-pinned because this task
    /// edits the key set its premise was about).
    #[test]
    fn a_collection_with_no_accessor_registers_no_key_and_is_still_reported() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<p :x="items">{{ items }}</p><ul><li v-for="(item, i) in items">{{ i }}</li></ul>"#,
        )
        .expect("template parses");
        let script = r#"
        impl State {
            pub fn draft(&self) -> String { String::new() }
        }"#;

        let resolve = collect_resolver_keys(
            &nodes,
            &methods(script),
            &[],
            RenderMode::Resolve,
            &props_of(&[]),
        );
        assert!(
            !resolve.keys.iter().any(|k| k == "items"),
            "a collection with no accessor is registered from neither route: {:?}",
            resolve.keys
        );
        assert_eq!(
            resolve.warnings.len(),
            3,
            "the loop report, the dropped interpolation and the dropped binding, and \
             nothing else: {:?}",
            resolve.warnings
        );
        assert!(
            !resolve.keys.iter().any(|k| k == "item" || k == "i"),
            "but nothing loop-rooted is: {:?}",
            resolve.keys
        );
    }
    // =========================================================================
    // R-2. `v-model`: the read side is a resolver key like any other, and the two
    // conditions codegen cannot honour are reported in R-1's family.
    // =========================================================================

    const R2_SCRIPT: &str = r#"
        pub struct User { name: String }
        impl User {
            pub fn name(&self) -> String { String::new() }
        }
        impl State {
            pub fn items(&self) -> String { String::new() }
            pub fn draft(&self) -> String { String::new() }
            pub fn user(&self) -> User { User { name: String::new() } }
        }"#;

    fn r2_keys_and_warnings(
        tpl: &str,
        script: &str,
        fields: &[&str],
        mode: RenderMode,
    ) -> (Vec<String>, Vec<String>) {
        let nodes = crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
        let fields: Vec<String> = fields.iter().map(|f| f.to_string()).collect();
        let collected =
            collect_resolver_keys(&nodes, &methods(script), &fields, mode, &props_of(&fields));
        (collected.keys, collected.warnings)
    }

    /// The live read. The synthetic `:value` bind is created at emit time, so before
    /// this it was invisible to key collection and every `v-model` read resolved to
    /// the empty string.
    #[test]
    fn a_v_model_on_an_accessor_is_registered_as_a_resolver_key() {
        for mode in [RenderMode::State, RenderMode::Resolve] {
            let (keys, warnings) =
                r2_keys_and_warnings(r#"<input v-model="draft"/>"#, R2_SCRIPT, &[], mode);
            assert_eq!(
                keys,
                vec!["draft".to_string()],
                "a v-model on a `State` accessor must get a resolver arm, in {mode:?}"
            );
            if matches!(mode, RenderMode::State) {
                assert!(warnings.is_empty(), "{:?}", warnings);
            }
        }
    }

    /// A dotted `v-model` is answered by the same chain an interpolation of the same
    /// path reads, and dropped under the same conditions.
    #[test]
    fn a_dotted_v_model_is_answered_by_the_same_chain_as_an_interpolation() {
        let (keys, warnings) = r2_keys_and_warnings(
            r#"<input v-model="user.name"/>"#,
            R2_SCRIPT,
            &[],
            RenderMode::State,
        );
        assert_eq!(keys, vec!["user.name".to_string()], "{:?}", keys);
        assert!(warnings.is_empty(), "{:?}", warnings);

        // Without the accessor the read cannot be answered, so it is reported rather
        // than left to the empty-string fallback.
        let (keys, warnings) = r2_keys_and_warnings(
            r#"<input v-model="form.name"/>"#,
            R2_SCRIPT,
            &["form"],
            RenderMode::State,
        );
        assert_eq!(keys, Vec::<String>::new(), "{:?}", keys);
        assert_eq!(warnings.len(), 1, "{:?}", warnings);
        assert!(
            warnings[0].contains(r#"v-model="form.name""#),
            "{}",
            warnings[0]
        );
        assert!(
            warnings[0].contains("is a `State` field"),
            "{}",
            warnings[0]
        );
        assert!(warnings[0].contains("renders empty"), "{}", warnings[0]);
    }

    /// E-1. A `v-model` on a loop item reads the item's value and writes nothing,
    /// because the dispatcher resolves `on:input` against `State` and `State` has no
    /// handle on the loop item.
    #[test]
    fn a_v_model_on_a_loop_item_reads_it_and_writes_nothing() {
        for mode in [RenderMode::State, RenderMode::Resolve] {
            let (keys, warnings) = r2_keys_and_warnings(
                r#"<ul><li v-for="item in items"><input v-model="item.name"/></li></ul>"#,
                R2_SCRIPT,
                &[],
                mode,
            );
            assert_eq!(
                keys,
                Vec::<String>::new(),
                "a loop-rooted v-model must not register a resolver key, in {mode:?}"
            );
            // State reports the write, because the loop renders there and the write
            // is the part that cannot happen. Resolve mode reports the loop instead,
            // which is the stronger fact: nothing in the body renders at all, so a
            // second warning about its write would only repeat it.
            if matches!(mode, RenderMode::State) {
                assert_eq!(warnings.len(), 1, "{:?}", warnings);
                // Pinned on the two routes that actually WORK, not only on the
                // fact that the write fails. A warning that names no remedy is
                // half the message, and the whole point of R-2 is that a user
                // can act on it, so the actionable half is what is asserted.
                for expected in [
                    r#"v-model="item.name""#,
                    "cannot be written",
                    // the two structural facts that make it unfixable here
                    "DETACHED COPY",
                    "no index",
                    // the two routes that work
                    "render_with_state",
                    "__vmodel_set_",
                ] {
                    assert!(
                        warnings[0].contains(expected),
                        "the warning must mention {expected:?} so the message is actionable, \
                         but it read:\n{}",
                        warnings[0]
                    );
                }
            } else {
                assert_eq!(warnings.len(), 1, "{:?}", warnings);
                assert!(
                    warnings[0].contains("`v-for` over `items` cannot render"),
                    "{}",
                    warnings[0]
                );
            }
        }
    }

    /// Ruling 1: Resolve mode grows no write path, so it reports instead. The
    /// diagnostic is in R-1's family and says which renderer does support it.
    #[test]
    fn a_v_model_in_resolve_mode_is_reported() {
        let (keys, warnings) = r2_keys_and_warnings(
            r#"<input v-model="draft"/>"#,
            R2_SCRIPT,
            &[],
            RenderMode::Resolve,
        );
        assert_eq!(keys, vec!["draft".to_string()], "the read still resolves");
        assert_eq!(warnings.len(), 1, "{:?}", warnings);
        assert!(
            warnings[0].contains(r#"v-model="draft""#),
            "{}",
            warnings[0]
        );
        assert!(
            warnings[0].contains("cannot be written in Resolve mode"),
            "{}",
            warnings[0]
        );
        assert!(
            warnings[0].contains("render_with_state"),
            "the report names the renderer that does support it: {}",
            warnings[0]
        );
    }

    /// One name, from one place: the dotted translation is a hardcoded literal here,
    /// not a call into the function under test, and the loop-rooted case is skipped by
    /// both collectors.
    #[test]
    fn the_v_model_collectors_agree_on_one_hardcoded_setter_name() {
        for (tpl, expected_expressions, expected_handlers) in [
            (
                r#"<input v-model="draft"/>"#,
                vec!["draft"],
                vec!["__vmodel_set_draft"],
            ),
            (
                r#"<input v-model="user.name"/>"#,
                vec!["user.name"],
                vec!["__vmodel_set_user_name"],
            ),
            (
                r#"<ul><li v-for="item in items"><input v-model="item.name"/></li></ul>"#,
                vec![],
                vec![],
            ),
        ] {
            let nodes = crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
            let collected = collect_vmodel_expressions(&nodes);
            let expressions: Vec<String> = collected.iter().map(|(expr, _)| expr.clone()).collect();
            assert_eq!(expressions, expected_expressions, "expressions for {tpl}");

            // The handler the setter is generated under is the one the dispatcher
            // carries, and the dotted translation lives in one place.
            let handlers: Vec<String> = collected
                .iter()
                .map(|(_, handler)| handler.clone())
                .collect();
            assert_eq!(handlers, expected_handlers, "handlers for {tpl}");

            let dispatcher: Vec<String> = collect_handlers(&nodes)
                .into_iter()
                .filter(|h| h.starts_with("__vmodel_set_"))
                .collect();
            assert_eq!(
                dispatcher, expected_handlers,
                "the dispatcher must carry an arm for every non-loop-rooted v-model, under \
                 the same name, and none for a loop-rooted one, in {tpl}"
            );
        }
    }
    // =========================================================================
    // R-3. `v-if` / `v-show` conditions are resolver reads like any other, and a
    // static `class` merges with a dynamic one.
    // =========================================================================

    const R3_SCRIPT: &str = r#"
        pub struct User { name: String }
        impl User {
            pub fn name(&self) -> String { String::new() }
        }
        impl State {
            pub fn items(&self) -> String { String::new() }
            pub fn visible(&self) -> bool { false }
            pub fn wide(&self) -> bool { false }
            pub fn count(&self) -> i32 { 0 }
            pub fn user(&self) -> User { User { name: String::new() } }
        }"#;

    /// The `class` props expression the template compiles to, with the surrounding
    /// `Props::new()` noise left in so a second `.set` for the same attribute is
    /// visible.
    fn class_set_of(tpl: &str) -> String {
        let rs = compile_template_to_rs_full_with_mode(
            tpl,
            "App",
            None,
            Some(R3_SCRIPT),
            None,
            RenderMode::State,
        )
        .expect("template compiles");
        let start = rs
            .find(r#".set("class""#)
            .unwrap_or_else(|| panic!("no class is set for {tpl}: {rs}"));
        let rest = &rs[start..];
        // a `.set` value ends at the matching close paren of the call
        let mut depth = 0i32;
        for (i, c) in rest.char_indices() {
            match c {
                '(' => depth += 1,
                ')' => {
                    depth -= 1;
                    if depth == 0 {
                        return rest[..=i].to_string();
                    }
                }
                _ => {}
            }
        }
        panic!("unterminated class value for {tpl}: {rest}");
    }

    fn r3_keys_and_warnings(tpl: &str, mode: RenderMode) -> (Vec<String>, Vec<String>) {
        let nodes = crate::template_parse::parse_template_to_ast(tpl).expect("template parses");
        let collected =
            collect_resolver_keys(&nodes, &methods(R3_SCRIPT), &[], mode, &props_of(&[]));
        (collected.keys, collected.warnings)
    }

    /// The live read, and the reason the audit called the directive inert: the
    /// condition became a `resolve("…")` call, and nothing ever registered the
    /// key, so every condition was permanently falsy.
    #[test]
    fn a_v_if_condition_is_registered_as_a_resolver_key() {
        for tpl in [
            r#"<div v-if="visible"/>"#,
            r#"<div><p v-if="visible">x</p></div>"#,
            r#"<div v-show="wide"/>"#,
            r#"<div v-if="user.name"/>"#,
            r#"<div><p v-if="count > 0">x</p></div>"#,
        ] {
            for mode in [RenderMode::State, RenderMode::Resolve] {
                let (keys, warnings) = r3_keys_and_warnings(tpl, mode);
                assert!(
                    warnings.is_empty(),
                    "a condition on a `State` accessor needs no warning: {warnings:?} in \
                     {mode:?} for {tpl}"
                );
                assert!(
                    !keys.is_empty(),
                    "a `v-if`/`v-show` condition is a resolver read and must be \
                     registered, in {mode:?} for {tpl}"
                );
            }
        }
        // and the keys are the ones the emission actually looks up
        assert_eq!(
            r3_keys_and_warnings(r#"<div><p v-if="user.name">x</p></div>"#, RenderMode::State).0,
            vec!["user.name".to_string()],
            "a dotted condition is one key, not one per segment: the emission reads it \
             as a single path"
        );
    }

    /// The diagnostic is a DISTINCT condition from R-1's loop report, in the same
    /// style: the requirement and the consequence, never a claim about a
    /// capability the emitted code does not have.
    #[test]
    fn an_unanswerable_condition_is_reported_with_its_consequence() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<div><p v-if="missing">x</p><b v-show="gone"/></div>"#,
        )
        .expect("template parses");
        let collected = collect_resolver_keys(
            &nodes,
            &methods(R3_SCRIPT),
            &[],
            RenderMode::State,
            &props_of(&[]),
        );
        assert!(
            collected.keys.is_empty(),
            "nothing about the condition is answerable, so nothing is registered: {:?}",
            collected.keys
        );
        assert_eq!(collected.warnings.len(), 2, "{:?}", collected.warnings);
        assert!(
            collected.warnings[0].contains("if=\"missing\"")
                && collected.warnings[0]
                    .contains("the element and everything inside it are not rendered"),
            "a `v-if` names what a falsy condition costs: {:?}",
            collected.warnings[0]
        );
        assert!(
            collected.warnings[1].contains("show=\"gone\"")
                && collected.warnings[1].contains("display: none"),
            "a `v-show` names its own consequence, because it is a different one: {:?}",
            collected.warnings[1]
        );
        assert!(
            !collected
                .warnings
                .iter()
                .any(|w| w.contains("The write still works")),
            "no diagnostic may claim a capability the emitted code lacks: {:?}",
            collected.warnings
        );
    }

    /// R-1c's rule, applied to conditions: a read of a loop variable is answered
    /// by the loop body, not by an arm over `State` fields, so it is not
    /// registered — and the loop itself is already reported by R-1's family, so
    /// adding a second report for the same loop would be noise.
    #[test]
    fn a_loop_rooted_condition_is_not_registered_and_is_not_reported_again() {
        let nodes = crate::template_parse::parse_template_to_ast(
            r#"<ul><li v-for="(todo, i) in todos" v-if="todo.keep">x</li></ul>"#,
        )
        .expect("template parses");
        let script = r#"
        impl State {
            pub fn todos(&self) -> String { String::new() }
        }"#;
        for mode in [RenderMode::State, RenderMode::Resolve] {
            let collected =
                collect_resolver_keys(&nodes, &methods(script), &[], mode, &props_of(&[]));
            assert!(
                collected.keys.is_empty(),
                "a read of a loop item is not a `State` field: {:?} in {mode:?}",
                collected.keys
            );
            assert!(
                !collected.warnings.iter().any(|w| w.contains("todo.keep")),
                "the loop report already covers the read, so the condition must not \
                 be reported as well: {:?}",
                collected.warnings
            );
            assert_eq!(
                collected.warnings.len(),
                usize::from(matches!(mode, RenderMode::Resolve)),
                "in State mode the loop renders, so nothing is reported at all; in \
                 Resolve mode the loop's own report is the only one: {:?}",
                collected.warnings
            );
        }
    }

    /// `v-else-if` is on the `v-if` rewrite path — the chain's condition goes
    /// through `rewrite_if_expr` exactly as a `v-if`'s does — so its operands are
    /// resolver reads too, and an unregistered one answers `""` and is always
    /// falsy: the `v-else-if` element then never renders, and nothing says so.
    /// Both spellings the validator accepts are here.
    #[test]
    fn a_v_else_if_condition_is_registered_like_a_v_if() {
        for tpl in [
            r#"<div><p v-if="count > 0">a</p><p v-else-if="visible">b</p></div>"#,
            r#"<div><p v-if="count > 0">a</p><p v-elseif="visible">b</p></div>"#,
            r#"<div><p v-if="count > 0">a</p><p v-else-if="user.name">b</p></div>"#,
            r#"<div><p v-if="count > 0">a</p><p v-else-if="count > 1">b</p></div>"#,
        ] {
            for mode in [RenderMode::State, RenderMode::Resolve] {
                let (keys, warnings) = r3_keys_and_warnings(tpl, mode);
                assert!(
                    !keys.is_empty(),
                    "a `v-else-if` condition is a resolver read and must be \
                     registered, in {mode:?} for {tpl}"
                );
                assert!(
                    warnings.is_empty(),
                    "a `v-else-if` condition on a `State` accessor needs no \
                     warning: {warnings:?} in {mode:?} for {tpl}"
                );
                let rs = compile_template_to_rs_full_with_mode(
                    tpl,
                    "App",
                    None,
                    Some(R3_SCRIPT),
                    None,
                    mode,
                )
                .expect("template compiles");
                for key in &keys {
                    let looked_up = format!("resolve({})", string_lit(key));
                    assert!(
                        rs.contains(&looked_up),
                        "`{key}` is registered, so the emission must look it up: {rs}"
                    );
                }
            }
        }
    }

    /// The R-1c round-2 review's companion finding, pinned on the shape it must
    /// keep: in a compound condition only the operands of a comparison are read
    /// as numbers. `count > 0 && visible` makes `count` numeric because it sits
    /// next to `>`, and `visible` a truthiness test because it does not — which
    /// is what makes the expression compile. Reading BOTH as numbers is an
    /// `f64 && f64`, and rustc reports that as
    /// `error[E0308]: mismatched types … expected bool, found f64`, so the
    /// earlier whole-expression `has_cmp` decision was a compile error, not a
    /// silent wrong render.
    ///
    /// This pins EMISSION SHAPE, so it is a guard, not behavioural evidence: the
    /// pixels are in
    /// `root_vif_class_behaviour::a_compound_condition_re_evaluates_both_of_its_operands`.
    #[test]
    fn a_compound_condition_reads_only_its_comparison_operands_as_numbers() {
        let rs = compile_template_to_rs_full_with_mode(
            r#"<div v-if="count > 0 && visible">x</div>"#,
            "App",
            None,
            Some(R3_SCRIPT),
            None,
            RenderMode::State,
        )
        .expect("template compiles");
        assert!(
            rs.contains(&format!("resolve({}).parse::<f64>()", string_lit("count"))),
            "`count` is an operand of `>`, so it is read as a number: {rs}"
        );
        assert!(
            !rs.contains(&format!(
                "resolve({}).parse::<f64>()",
                string_lit("visible")
            )),
            "`visible` is not an operand of any comparison, so it must be a \
             truthiness test and not a number — a number here makes the `&&` an \
             `f64`, which does not compile: {rs}"
        );
        assert!(
            rs.contains(&resolver_truthiness(&format!(
                "resolve({})",
                string_lit("visible")
            ))),
            "the one notion of truthiness is what a non-comparison operand gets: {rs}"
        );
    }

    /// The six answers a resolver can give, judged by the ONE truthiness test, by
    /// COMPILING AND RUNNING the condition the emitter produces.
    ///
    /// A string-shape assertion cannot decide whether `"0"` is truthy — that is
    /// the whole defect — so this compiles the emitted condition with a stub
    /// `resolve`, runs it once per answer, and reads the `bool` back. Nothing
    /// here re-derives the rule: the expression under test is the codegen output.
    #[test]
    fn each_resolver_answer_is_judged_by_the_one_truthiness_test() {
        let rs = compile_template_to_rs_full_with_mode(
            r#"<div v-if="visible"/>"#,
            "App",
            None,
            Some(R3_SCRIPT),
            None,
            RenderMode::State,
        )
        .expect("template compiles");
        let start = rs
            .find("if { let __v = resolve(")
            .expect("a v-if condition is emitted")
            + 3;
        let condition = &rs[start..];
        let mut depth = 0i32;
        let mut closed = None;
        for (i, c) in condition.char_indices() {
            match c {
                '{' => depth += 1,
                '}' => {
                    depth -= 1;
                    if depth == 0 {
                        closed = Some(i + 1);
                        break;
                    }
                }
                _ => {}
            }
        }
        let end = closed.unwrap_or_else(|| panic!("the condition is not closed in {rs}"));

        let dir = std::env::temp_dir().join("velox-r3-truthiness");
        std::fs::create_dir_all(&dir).expect("temp dir");
        let src = dir.join("verdict.rs");
        std::fs::write(
            &src,
            format!(
                "fn resolve(_key: &str) -> String {{ std::env::args().nth(1).unwrap() }}\n\
                 fn main() {{ println!(\"{{}}\", {}\n); }}\n",
                &condition[..end]
            ),
        )
        .expect("write the probe");
        let bin = dir.join("verdict");
        let rustc = std::env::var("RUSTC").unwrap_or_else(|_| "rustc".to_string());
        let build = std::process::Command::new(&rustc)
            .args(["--edition", "2024", "-o"])
            .arg(&bin)
            .arg(&src)
            .output()
            .unwrap_or_else(|e| panic!("`{rustc}` must be runnable: {e}"));
        assert!(
            build.status.success(),
            "the emitted condition must compile on its own:\n{}\n{}",
            std::fs::read_to_string(&src).expect("read back the probe"),
            String::from_utf8_lossy(&build.stderr)
        );

        for (answer, want) in [
            ("", "false"),
            ("false", "false"),
            ("0", "false"),
            ("0.0", "false"),
            ("-0.0", "false"),
            ("0.00", "false"),
            ("true", "true"),
            ("false ", "true"),
            ("1", "true"),
            ("-3.5", "true"),
            ("abc", "true"),
            ("a b c", "true"),
        ] {
            let run = std::process::Command::new(&bin)
                .arg(answer)
                .output()
                .expect("run");
            assert_eq!(
                String::from_utf8_lossy(&run.stdout).trim(),
                want,
                "the resolver answered {:?} and the condition must read that as {want}",
                answer
            );
        }
        let _ = std::fs::remove_dir_all(&dir);
    }

    /// The ONE truthiness test reaches every path a condition can take. This is
    /// the shape of the expression, not its verdicts — the verdicts are
    /// `each_resolver_answer_is_judged_by_the_one_truthiness_test`, which runs the
    /// emitted code. What this pins is that no path grew a second test of its own.
    #[test]
    fn every_condition_path_gets_the_one_truthiness_test() {
        let read = format!("resolve({})", string_lit("visible"));
        let want = resolver_truthiness(&read);
        for (label, tpl) in [
            ("a v-if", r#"<div v-if="visible"/>"#),
            ("a v-show", r#"<div v-show="visible"/>"#),
            (
                "a v-else-if",
                r#"<div><p v-if="count > 0"/><p v-else-if="visible"/></div>"#,
            ),
            (
                "an object :class condition",
                r#"<div :class="{ active: visible }"/>"#,
            ),
        ] {
            let rs = compile_template_to_rs_full_with_mode(
                tpl,
                "App",
                None,
                Some(R3_SCRIPT),
                None,
                RenderMode::State,
            )
            .expect("template compiles");
            assert!(
                rs.contains(&want),
                "{label} must be judged by the one truthiness test, {want:?}: {rs}"
            );
        }
        // The second call site: a `:class` condition on an element inside a v-for
        // body is read through the resolver in the Resolve renderer, where it is
        // a `String` in an `if` position, and it is indexed by the loop counter.
        let rs = compile_template_to_rs_full_with_mode(
            r#"<div v-for="item in items"><span :class="{ active: item.keep }"/></div>"#,
            "App",
            None,
            Some(R3_SCRIPT),
            None,
            RenderMode::Resolve,
        )
        .expect("template compiles");
        let indexed = r#"resolve(&format!("items[{}].keep", __idx))"#;
        assert!(
            rs.contains(&resolver_truthiness(indexed)),
            "a loop-rooted condition in the Resolve renderer must get the one truthiness \
             test as well: {rs}"
        );
    }

    /// Vue semantics: a static `class` and a dynamic `:class` on the same
    /// element MERGE, so the class list is `card active` when the condition holds
    /// and `card` when it does not. `Props::set` replaces, so the merge has to be
    /// built before it is set.
    #[test]
    fn a_static_class_and_an_object_syntax_class_are_emitted_as_one_set() {
        let tpl = r#"<div class="card" :class="{ active: visible, 'is-wide': wide }"/>"#;
        let set = class_set_of(tpl);
        assert_eq!(
            set.matches(r#".set("class""#).count(),
            1,
            "one `.set` for the class, or the second replaces the first: {set}"
        );
        assert!(
            set.contains(r#"__classes.push("card");"#),
            "the static class is the first entry whatever the authored order: {set}"
        );
        assert!(
            set.contains(r#"__classes.push("active");"#)
                && set.contains(r#"__classes.push("is-wide");"#),
            "both conditions contribute their class: {set}"
        );
        assert!(
            !set.contains('\''),
            "an object key written in quotes is a class NAME; the quotes must not \
             become part of it, or the cascade's whole-word match misses: {set}"
        );
        // order of the conditions is the authored order
        let active = set.find("__classes.push(\"active\")").unwrap();
        let wide = set.find("__classes.push(\"is-wide\")").unwrap();
        assert!(active < wide, "the authored order is kept: {set}");
    }

    /// The merge only engages when both are present. An element with a static
    /// class alone, or a `:class` alone, keeps the bytes it had before this task,
    /// which is what keeps State-mode output identical where the task does not
    /// target it.
    #[test]
    fn a_class_on_its_own_is_emitted_exactly_as_before() {
        assert_eq!(
            class_set_of(r#"<div class="card"/>"#),
            r#".set("class", "card")"#,
            "a static class alone is unchanged"
        );
        assert_eq!(
            class_set_of(r#"<div :class="{ active: visible }"/>"#),
            format!(
                r#".set("class", {{ let mut __classes: Vec<&str> = Vec::new(); if {truthy} {{ __classes.push("active"); }} __classes.join(" ") }})"#,
                truthy = resolver_truthiness(&format!("resolve({})", string_lit("visible")))
            ),
            "a `:class` alone is the object block it was before this task, byte for \
             byte: the same `Vec<&str>`, the same single push, the same join, and the ONE \
             truthiness test rather than a second one of its own"
        );
        assert_eq!(
            class_set_of(r#"<div :class="label"/>"#),
            r#".set("class", &resolve("label"))"#,
            "a non-object `:class` alone is unchanged too"
        );
    }

    /// The string form appends its words, in both authored orders. Vue merges
    /// whatever each binding contributes; it does not depend on which was written
    /// first.
    #[test]
    fn a_string_syntax_class_is_merged_in_either_authored_order() {
        for tpl in [
            r#"<div class="card" :class="label"/>"#,
            r#"<div :class="label" class="card"/>"#,
        ] {
            let set = class_set_of(tpl);
            assert_eq!(
                set.matches(r#".set("class""#).count(),
                1,
                "one `.set` for the class, whichever order they were written in: {set}"
            );
            assert!(
                set.contains(r#"__classes.push("card");"#)
                    && set.contains("__src.split_whitespace()"),
                "the static class and the bound words both reach the list: {set}"
            );
        }
    }

    /// The one notion of truthiness, and the one notion of an identifier: a
    /// condition is rewritten into the same `resolve` reads the collector
    /// registers, so a key can never be missing for a reason the emission did not
    /// have.
    #[test]
    fn the_condition_collector_and_the_condition_rewrite_agree_on_every_shape() {
        for cond in [
            "visible",
            "!visible",
            "count > 0",
            "count > 0 && visible",
            "user.name",
            "!user.name",
            "items[0].name",
            "user.name == 'a'",
            "is_empty()",
        ] {
            let keys = condition_resolver_keys(cond);
            let emitted = rewrite_if_expr(cond);
            for key in &keys {
                assert!(
                    emitted.contains(&format!(r#"resolve("{}")"#, key)),
                    "`{cond}` is rewritten into a read of {key:?}, so {key:?} must be a \
                     registered key: {emitted}"
                );
            }
            let looked_up: Vec<String> = emitted
                .match_indices(r#"resolve(""#)
                .map(|(i, _)| {
                    emitted[i + 9..]
                        .find('"')
                        .map(|e| emitted[i + 9..i + 9 + e].to_string())
                        .unwrap_or_default()
                })
                .collect();
            assert_eq!(
                looked_up, keys,
                "`{cond}` is rewritten into exactly the reads that are registered, so \
                 there is no way for a key to be missing"
            );
        }
    }

    /// A `State` with one method of every kind the answerability rules care
    /// about: a renderable getter, a prefixed getter, a payload-taking method, a
    /// method with no return type, a `()` method, a collection, a struct-valued
    /// accessor and a `bool`. Two `State` fields are in scope as well, so the
    /// "a field is not an accessor" arm is reachable.
    ///
    /// This is the fixture the R-1e differential was measured against: every
    /// expectation below was read off the code as it stood BEFORE the predicate
    /// existed, so a table entry that drifts is a behaviour change, not a
    /// restatement of what the new code does.
    fn answerable_fixture() -> (Vec<StateMethod>, Vec<String>) {
        let method = |name: &str, takes_payload: bool, return_type: Option<&str>| StateMethod {
            name: name.to_string(),
            takes_payload,
            return_type: return_type.map(|t| t.to_string()),
        };
        let methods = vec![
            method("title", false, Some("String")),
            method("get_sub", false, Some("String")),
            method("on_input", true, Some("String")),
            method("nothing", false, None),
            method("unit", false, Some("()")),
            method("vecs", false, Some("Vec<String>")),
            method("user", false, Some("User")),
            method("flag", false, Some("bool")),
        ];
        let fields = vec!["rows".to_string(), "sub".to_string()];
        (methods, fields)
    }

    /// The keys the differential was measured over: a member path, an index, a
    /// call, a compound expression, a key no `State` member can be named after,
    /// and the empty key.
    const ANSWERABLE_KEYS: [&str; 23] = [
        "title",
        "get_sub",
        "on_input",
        "nothing",
        "unit",
        "vecs",
        "user",
        "flag",
        "nope",
        "user.name",
        "user.missing",
        "vecs[0]",
        "items[0].name",
        "user.name()",
        "a.b[0",
        "1bad",
        "a + b",
        "user + other",
        "items[0",
        "a.b()",
        "",
        "user.name.deep",
        "sub",
    ];

    /// Every shape an arm body can take is an `Ok` answer, and each one emits the
    /// call expression it was emitting before the predicate existed.
    ///
    /// The three variants are the point: a getter, a member chain and a
    /// name-only spelling are different answers to the same question, and a
    /// single one of them used to be inferred at the arm site from whichever
    /// helper happened to be tried first.
    #[test]
    fn answerable_names_each_of_the_three_arms_a_key_can_take() {
        let (methods, fields) = answerable_fixture();

        // A bare name with a renderable getter, whether declared under the
        // template's name or under the `get_` convention.
        assert_eq!(
            answerable("title", &methods, &fields),
            Ok(Answer::Getter {
                root: "title".to_string(),
                name: "title".to_string(),
            })
        );
        assert_eq!(
            answerable("sub", &methods, &fields),
            Ok(Answer::Getter {
                root: "sub".to_string(),
                name: "get_sub".to_string(),
            })
        );

        // A member path is answered by a chain on the root accessor, and every
        // later segment is a call — including the ones no `State` member names,
        // because a chain's legality is the type's business, not codegen's.
        assert_eq!(
            answerable("user.name", &methods, &fields),
            Ok(Answer::MemberChain {
                root: "user".to_string(),
                chain: "user().name()".to_string(),
            })
        );
        assert_eq!(
            answerable("vecs[0]", &methods, &fields),
            Ok(Answer::MemberChain {
                root: "vecs".to_string(),
                chain: "vecs()[0]".to_string(),
            })
        );
        assert_eq!(
            answerable("user.name.deep", &methods, &fields),
            Ok(Answer::MemberChain {
                root: "user".to_string(),
                chain: "user().name().deep()".to_string(),
            })
        );

        // A key that is neither a bare name nor a member path keeps the
        // name-only spelling it has always been answered with.
        for key in ["user.name()", "a.b[0", "1bad", "a + b", "items[0", ""] {
            assert_eq!(
                answerable(key, &methods, &fields),
                Ok(Answer::Conventional {
                    name: key.to_string(),
                }),
                "`{key}` is not a shape the arm emitter can spell, so it keeps the \\
                 name-only answer it has always had"
            );
        }
    }

    /// The call expression each answer emits is byte-identical to the one the
    /// arm emitter produced before the predicate existed, for every key the
    /// differential covered — including the keys nothing answers, whose arm text
    /// the three old fallbacks all agreed on by accident.
    #[test]
    fn the_arm_text_of_every_key_is_unchanged() {
        let (methods, fields) = answerable_fixture();
        // (key, the `state.…` expression the arm body used to make)
        let expected = [
            ("title", "title()"),
            ("get_sub", "get_sub()"),
            ("on_input", "on_input()"),
            ("nothing", "nothing()"),
            ("unit", "unit()"),
            ("vecs", "vecs()"),
            ("user", "user()"),
            ("flag", "flag()"),
            ("nope", "nope()"),
            ("user.name", "user().name()"),
            ("user.missing", "user().missing()"),
            ("vecs[0]", "vecs()[0]"),
            ("items[0].name", "items[0].name()"),
            ("user.name()", "user.name()()"),
            ("a.b[0", "a.b[0()"),
            ("1bad", "1bad()"),
            ("a + b", "a + b()"),
            ("user + other", "user + other()"),
            ("items[0", "items[0()"),
            ("a.b()", "a.b()()"),
            ("", "()"),
            ("user.name.deep", "user().name().deep()"),
            ("sub", "get_sub()"),
        ];
        for (key, call) in expected {
            assert_eq!(
                resolve_getter_call(&methods, &fields, key),
                call,
                "the arm text for `{key}` moved"
            );
        }
    }

    /// Every sentence a refusal is reported in, byte for byte, in the register
    /// the caller quotes it in.
    ///
    /// These are user-facing strings, they were frozen by the reviews of R-1,
    /// R-1c, R-1d and R-3, and they were read off that code rather than
    /// re-derived from it. Two registers exist and both are pinned: the
    /// key-as-authored one the bound-attribute, `v-model` and condition paths
    /// print, and the root one the interpolation gate prints. They disagree for
    /// a bare key — "not a zero-argument `State` getter" against "not a
    /// zero-argument `State` method" — and that disagreement is pre-existing and
    /// frozen, so it is pinned rather than tidied.
    #[test]
    fn every_refusal_sentence_is_unchanged() {
        let (methods, fields) = answerable_fixture();
        let expected = [
            (
                "title",
                "`title` returns `String`, which cannot be rendered as text",
            ),
            (
                "get_sub",
                "`get_sub` returns `String`, which cannot be rendered as text",
            ),
            (
                "on_input",
                "`on_input` is a payload-taking State method, not a getter",
            ),
            (
                "nothing",
                "`nothing` declares no return type, so there is no text to render",
            ),
            (
                "unit",
                "`unit` returns `()`, which cannot be rendered as text",
            ),
            (
                "vecs",
                "`vecs` returns `Vec<String>`, which cannot be rendered as text",
            ),
            (
                "user",
                "`user` returns `User`, which cannot be rendered as text",
            ),
            (
                "flag",
                "`flag` returns `bool`, which cannot be rendered as text",
            ),
            ("nope", "`nope` is not a zero-argument `State` getter"),
            (
                "user.name",
                "`user` is a State method, but a member path needs an accessor",
            ),
            (
                "user.missing",
                "`user` is a State method, but a member path needs an accessor",
            ),
            (
                "vecs[0]",
                "`vecs` is a State method, but a member path needs an accessor",
            ),
            (
                "items[0].name",
                "`items` is not a zero-argument `State` method",
            ),
            (
                "user.name()",
                "`user.name()` is an expression, not a `State` getter name",
            ),
            (
                "a.b[0",
                "`a.b[0` is an expression, not a `State` getter name",
            ),
            ("1bad", "`1bad` is an expression, not a `State` getter name"),
            (
                "a + b",
                "`a + b` is an expression, not a `State` getter name",
            ),
            (
                "user + other",
                "`user + other` is an expression, not a `State` getter name",
            ),
            (
                "items[0",
                "`items[0` is an expression, not a `State` getter name",
            ),
            (
                "a.b()",
                "`a.b()` is an expression, not a `State` getter name",
            ),
            ("", "`` is an expression, not a `State` getter name"),
            (
                "user.name.deep",
                "`user` is a State method, but a member path needs an accessor",
            ),
            (
                "sub",
                "`sub` is a `State` field, not a getter — reading a field in a template needs a typed field resolver, which is not implemented yet",
            ),
        ];
        for (key, reason) in expected {
            assert_eq!(
                unresolvable_key_reason(key, &methods, &fields),
                reason,
                "the key register's sentence for `{key}` moved"
            );
        }
    }

    /// The interpolation gate registers exactly the keys it used to, and reports
    /// exactly the sentences it used to — one whole decision with one whole set
    /// of words, so the two cannot be right about the key and wrong about the
    /// sentence.
    #[test]
    fn the_interpolation_gate_registers_and_reports_exactly_what_it_did() {
        let (methods, fields) = answerable_fixture();
        let mut warnings = Vec::new();
        let registered = keep_answerable_interpolation_keys(
            &methods,
            &fields,
            ANSWERABLE_KEYS.iter().map(|k| k.to_string()).collect(),
            &mut warnings,
        );
        // `sub` stays registered: `get_sub` answers it, and a key that is also a
        // `State` field is answered by the getter that exists.
        assert_eq!(
            registered,
            [
                "title",
                "get_sub",
                "flag",
                "user.name",
                "user.missing",
                "vecs[0]",
                "user.name()",
                "a.b[0",
                "1bad",
                "a + b",
                "user + other",
                "items[0",
                "a.b()",
                "",
                "user.name.deep",
                "sub",
            ]
            .map(String::from)
        );
        let expected = [
            "interpolation {{ on_input }} cannot be resolved — `on_input` is a payload-taking State method, not an accessor; the interpolation renders empty. Declare `pub fn on_input(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ nothing }} cannot be resolved — `nothing` returns nothing, so there is no value to read from; the interpolation renders empty. Declare `pub fn nothing(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ unit }} cannot be resolved — `unit` returns nothing, so there is no value to read from; the interpolation renders empty. Declare `pub fn unit(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ vecs }} cannot be resolved — `vecs` is a `State` method, but its return type cannot be rendered as text; the interpolation renders empty. Declare `pub fn vecs(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ user }} cannot be resolved — `user` is a `State` method, but its return type cannot be rendered as text; the interpolation renders empty. Declare `pub fn user(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ nope }} cannot be resolved — `nope` is not a zero-argument `State` method; the interpolation renders empty. Declare `pub fn nope(&self) -> impl std::fmt::Display` on `State`.",
            "interpolation {{ items[0].name }} cannot be resolved — `items` is not a zero-argument `State` method; the interpolation renders empty. Declare `pub fn items(&self) -> YourType` on `State` and a method for each segment after it.",
        ];
        assert_eq!(warnings, expected);
    }

    /// A refusal carries the sentence the interpolation gate prints AND the one
    /// the bound-attribute path prints, because the gate and the diagnostic
    /// disagree about a bare key's wording and both are frozen. The two are
    /// produced from the same answer, so neither can be right about the key
    /// while the other is wrong about it.
    #[test]
    fn a_refusal_carries_both_frozen_registers() {
        let (methods, fields) = answerable_fixture();
        let unrenderable = answerable("on_input", &methods, &fields)
            .expect_err("a payload-taking method cannot be read as a value");
        assert_eq!(
            unrenderable.root_reason,
            "`on_input` is a payload-taking State method, not an accessor"
        );
        assert_eq!(
            unrenderable.key_reason,
            "`on_input` is a payload-taking State method, not a getter"
        );
        assert_eq!(
            unrenderable.remedy,
            "Declare `pub fn on_input(&self) -> impl std::fmt::Display` on `State`."
        );
    }

    /// The invariant [`resolve_getter_call`] relies on: a key only ever reaches
    /// an arm emitter because a registration path asked [`answerable`] and took
    /// its `Ok` branch, so `Err` there would mean a registration path stopped
    /// consulting the predicate. [`resolve_getter_call`] keeps answering `Err`
    /// with the guess it always produced rather than panicking, which means this
    /// test — not an assertion inside the codegen pass — is what makes the dead
    /// arm dead, and it fails the moment a gate grows a second notion.
    ///
    /// The template names all four registration paths, and the expected set is
    /// read off it: `flag` from the `:class` object condition, from `v-if` and
    /// from `:data-name`; `sub` from `:title`, from the interpolation and from
    /// `v-show`; `title` from the interpolation and from `v-model`; and
    /// `user.name()` from the ungated call shape. `{{ rows }}` is the one
    /// refusal: `rows` is a `State` field, and a field is not a getter. `user`
    /// is not registered even though it is a getter, because `User` is not a
    /// renderable return type — which is why the bound attributes bind `sub`
    /// and `flag` and not `user`.
    ///
    /// The three refusals are one per gate, each pinned to the sentence that
    /// gate assembles: `{{ rows }}` is the interpolation register, and `rows`
    /// is a `State` field, which is not a getter; `v-if="nope"` and
    /// `v-model="nope"` are the condition and `v-model` gates refusing a name
    /// `State` does not declare, through the reason register a bare key is
    /// answered with. Without those two this invariant would be measured over
    /// the interpolation gate alone, and a condition or `v-model` gate that
    /// stopped asking the predicate would not show up.
    ///
    /// The last `v-if="user.name"` is there for the other half: a member path
    /// whose root IS a real accessor is answerable even though that accessor
    /// returns something unrenderable, so it registers — and `User` not being
    /// renderable is not what lets it.
    #[test]
    fn every_registered_key_is_answerable() {
        let template = r#"
<p :class="{ on: flag }" :title="sub">{{ title }} {{ user.name() }} {{ sub }}</p>
<input v-model="title" />
<p v-if="flag">{{ rows }}</p>
<span v-show="sub" :data-name="flag">x</span>
<p v-if="nope">CH</p>
<input v-model="nope" />
<p v-if="user.name">CH</p>
"#;
        let script = r#"
pub struct User { pub name: String }
impl State {
    pub fn title(&self) -> String { String::new() }
    pub fn flag(&self) -> bool { true }
    pub fn user(&self) -> User { User { name: String::new() } }
    pub fn sub(&self) -> String { String::new() }
}
"#;
        let nodes = crate::template_parse::parse_template_to_ast(template).unwrap();
        let fields = vec!["rows".to_string()];
        let collected = collect_resolver_keys(
            &nodes,
            &methods(script),
            &fields,
            RenderMode::State,
            &props_of(&fields),
        );

        let registered: std::collections::BTreeSet<&str> =
            collected.keys.iter().map(String::as_str).collect();
        assert_eq!(
            registered,
            ["flag", "sub", "title", "user.name", "user.name()"]
                .into_iter()
                .collect::<std::collections::BTreeSet<&str>>(),
            "the set of keys a template registers is itself a decision about \
             answerability, so it is pinned: a fourth key here means a gate \
             stopped asking the one predicate, and a missing key means one \
             started refusing what it used to register"
        );

        assert_eq!(
            collected.warnings,
            vec![
                "interpolation {{ rows }} cannot be resolved — `rows` is a \
                  `State` field, not an accessor — reading a field in a \
                  template needs a typed field resolver, which is not \
                  implemented yet; the interpolation renders empty. Declare \
                  `pub fn rows(&self) -> impl std::fmt::Display` on `State`."
                    .to_string(),
                "if=\"nope\" cannot be resolved — `nope` is not a \
                  zero-argument `State` getter; the condition reads an empty \
                  value, so the element and everything inside it are not \
                  rendered. Bind a zero-argument State getter for `nope` \
                  instead."
                    .to_string(),
                "v-model=\"nope\" cannot render its value — `nope` is not a \
                  zero-argument `State` getter; the input renders empty. The \
                  write needs every segment of `nope` to be a `State` field and \
                  the last one to be a type `VModel` is implemented for \
                  (`Signal<T>`, `RefCell<String>` or `Cell<T>`); otherwise the \
                  generated setter does not compile. Bind a zero-argument \
                  `State` getter, or a method for each segment of a dotted \
                  expression."
                    .to_string()
            ],
            "one of the names in the template is refused by each of the three \
             gates, and each sentence is the register that gate assembles"
        );

        for key in &collected.keys {
            let answered = answerable(key, &methods(script), &fields);
            assert!(
                answered.is_ok(),
                "`{key}` was registered by a path that has not asked the \
                 predicate, so its arm is the guess and not an answer: {:?}",
                answered.err()
            );
        }
    }
}