npm - @svelte-vitals/core - Versions diffs - 0.41.0 → 0.41.1 - Mend

@svelte-vitals/core 0.41.0 → 0.41.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.d.ts CHANGED Viewed

@@ -612,6 +612,29 @@ interface KitModuleFacts {
     parseFailed?: true;
 }
+/**
+ * Resolve an import specifier to a path relative to the analyzed project's root (the
+ * cwd svelte-vitals runs from — not necessarily a repo root; in a monorepo the project
+ * may live at e.g. `apps/web/`) against the importing file, or undefined when it cannot
+ * be a project-local module: the caller's `aliases` list decides which non-relative
+ * specifiers resolve, defaulting to `$lib` → `src/lib`; `./`/`../` resolve against the
+ * importing file's directory; bare packages and other aliases are skipped (they can't
+ * be resolved to a project-local path at all). Also undefined when a relative
+ * specifier's `..` segments escape the project root (see `normalizePosix`), or when a
+ * matched alias's value is itself absolute (e.g. `/opt/shared/src`, or a posixified Windows
+ * drive-letter path like `C:/shared/src`): an absolute target is outside the analyzed project by
+ * definition, and without this check `normalizePosix` would quietly drop the leading empty
+ * segment and hand back a project-relative-LOOKING path that actually names a different file.
+ *
+ * Exported from the package's public barrel because `architecture/private-scope-import`
+ * and `architecture/route-component-import` (inside `packages/core`) both need resolution
+ * that is not restricted to runes modules, unlike `resolveRunesModuleSpecifier` — and
+ * because `resolveComponentPath` (`packages/cli/src/providers/source/resolve.ts`), which
+ * drives transitive `<head>`/heading resolution, delegates its alias/`$lib`/relative
+ * mapping here too, rather than duplicating it. This is the single site for every
+ * repo-local specifier resolution in the repo.
+ */
+declare function resolveRepoLocalPath(spec: string, importerFile: string, aliases?: readonly KitAlias[]): string | undefined;
 /**
  * Resolve an import specifier to a repo-relative `.svelte.ts`/`.svelte.js` path, or
  * undefined when it cannot be a runes module: delegates to `resolveRepoLocalPath` with
@@ -780,6 +803,14 @@ declare function settingSeverity(setting: RuleSetting | undefined): Severity | '
 declare function settingOptions(setting: RuleSetting | undefined): RuleOptions | undefined;
 /** Drop rules disabled via config (design §6). */
 declare function selectRules(rules: Rule[], config: Config): Rule[];
+/**
+ * `config` with `failedRuleIds` (from `runRules`' `failedRules`) forced `'off'`: a rule that threw
+ * examined nothing, so leaving it in the inventory would score it as if it had run clean, silently
+ * inflating Health. Reuses the exact mechanism a `rules: { id: 'off' }` config entry already gets —
+ * `selectRules`/`buildInventory` both drop an `'off'` id from the denominator — rather than adding a
+ * second, parallel notion of "not counted" for callers to keep in sync.
+ */
+declare function withFailedRulesOff(config: Config, failedRuleIds: readonly string[]): Config;
 /** Apply per-rule severity overrides to results (design §6). */
 declare function applyRuleSeverities(results: Result[], config: Config): Result[];
 /** An override entry with its globs compiled once. Build with `compileOverrides`. */
@@ -1009,14 +1040,21 @@ declare function docsUrlFor(id: string): string;
  */
 declare function isPenalized(detection: Detection, treatDynamicAs: TreatDynamicAs): boolean;
+interface FailedRule {
+    id: string;
+    message: string;
+}
 /**
  * Run a set of rules against a shared context and collect their findings.
  * Rules are independent, so they run concurrently; results are flattened in
- * rule order for stable output.
+ * rule order for stable output. A rule that throws (sync or async) contributes
+ * no results instead of taking the whole run down with it — dev tooling must
+ * never throw — and is reported in `failedRules` instead.
  */
 declare function runRules(rules: Rule[], ctx: RuleContext): Promise<{
     results: Result[];
     examined: Record<string, Record<string, number>>;
+    failedRules: FailedRule[];
 }>;
 /**
@@ -1696,4 +1734,4 @@ declare function escapeHtml(s: string): string;
  */
 declare function safeHref(url: string): string | null;
-export { APP_SCRIPT, APP_STYLE, type AppSnapshot, BAND_COLOR, CATEGORIES, CHILD_NODE_KEYS, type Category, type Classification, type CompiledOverride, type ComponentFacts, type Config, type ConsoleReportOptions, type Detection, type EachBlockFact, type EffectFact, type Fix, type HeadProvider, type HeadTag, type HeadingInfo, type HealthResult, type ImageInfo, type JsonReport, type KitAlias, type KitModuleFacts, type OrphanEffectFact, type Palette, type Presence, type Project, ROBOTS_SOURCE_PATHS, type RawKitAliases, type ResolvedHead, type ResolvedHeadings, type ResolvedImages, type Result, type RouteBadge, type Rule, type RuleContext, type RuleEvidence, type RuleInfo, type RuleOptionInfo, type RuleOptionSpec, type RuleOptions, type RuleOptionsSpec, type RuleOverride, type RuleSetting, type RuleSettingObject, type Runtime, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, type Scope, type ScoreModel, type ScoreOptions, type ScoreResult, type Severity, type SourceSpan, type Summary, type SuppressionDirective, type TreatDynamicAs, VITE_CONFIG_FILES, type Value, type ViteKitConfigResult, allRules, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, compileOverrides, computeHealth, computeScore, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, defaultConfig, defaultProject, defineConfig, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, formatAgentReport, formatConsoleReport, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, summarize, textFromNodes, validateRuleOptions, validateRuleSetting, valueFromNodes };
+export { APP_SCRIPT, APP_STYLE, type AppSnapshot, BAND_COLOR, CATEGORIES, CHILD_NODE_KEYS, type Category, type Classification, type CompiledOverride, type ComponentFacts, type Config, type ConsoleReportOptions, type Detection, type EachBlockFact, type EffectFact, type FailedRule, type Fix, type HeadProvider, type HeadTag, type HeadingInfo, type HealthResult, type ImageInfo, type JsonReport, type KitAlias, type KitModuleFacts, type OrphanEffectFact, type Palette, type Presence, type Project, ROBOTS_SOURCE_PATHS, type RawKitAliases, type ResolvedHead, type ResolvedHeadings, type ResolvedImages, type Result, type RouteBadge, type Rule, type RuleContext, type RuleEvidence, type RuleInfo, type RuleOptionInfo, type RuleOptionSpec, type RuleOptions, type RuleOptionsSpec, type RuleOverride, type RuleSetting, type RuleSettingObject, type Runtime, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, type Scope, type ScoreModel, type ScoreOptions, type ScoreResult, type Severity, type SourceSpan, type Summary, type SuppressionDirective, type TreatDynamicAs, VITE_CONFIG_FILES, type Value, type ViteKitConfigResult, allRules, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, compileOverrides, computeHealth, computeScore, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, defaultConfig, defaultProject, defineConfig, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, formatAgentReport, formatConsoleReport, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, summarize, textFromNodes, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff };

package/dist/index.js CHANGED Viewed

@@ -2464,9 +2464,21 @@ function isPenalized(detection, treatDynamicAs) {
 async function runRules(rules, ctx) {
   const examined = {};
   const perRule = await Promise.all(
-    rules.map((rule) => rule.check({ ...ctx, recordExamined: (counts) => void (examined[rule.id] = counts) }))
+    rules.map(async (rule) => {
+      try {
+        return await rule.check({ ...ctx, recordExamined: (counts) => void (examined[rule.id] = counts) });
+      } catch (err) {
+        return { id: rule.id, message: err instanceof Error ? err.message : String(err) };
+      }
+    })
   );
-  return { results: perRule.flat(), examined };
+  const results = [];
+  const failedRules = [];
+  for (const outcome of perRule) {
+    if (Array.isArray(outcome)) results.push(...outcome);
+    else failedRules.push(outcome);
+  }
+  return { results, examined, failedRules };
 }
 // src/rules/seo/title-presence.ts
@@ -3061,6 +3073,16 @@ function settingOptions(setting) {
 function selectRules(rules, config) {
   return rules.filter((rule) => settingSeverity(config.rules[rule.id]) !== "off");
 }
+function withFailedRulesOff(config, failedRuleIds) {
+  if (failedRuleIds.length === 0) return config;
+  return {
+    ...config,
+    rules: {
+      ...config.rules,
+      ...Object.fromEntries(failedRuleIds.map((id) => [id, "off"]))
+    }
+  };
+}
 function applyRuleSeverities(results, config) {
   return results.map((result) => {
     const severity = settingSeverity(config.rules[result.id]);
@@ -4720,6 +4742,39 @@ var SCHEMA_ORG_CONTEXT_RE = /^https?:\/\/schema\.org\/?$/;
 var LOWERCASE_TO_CANONICAL = new Map(
   [...SCHEMA_ORG_TYPES].map((name) => [name.toLowerCase(), name])
 );
+var SORTED_TYPES = [...SCHEMA_ORG_TYPES].sort();
+var MAX_SUGGEST_DISTANCE = 2;
+function levenshteinWithin(a, b, maxDistance) {
+  if (Math.abs(a.length - b.length) > maxDistance) return maxDistance + 1;
+  let prev = Array.from({ length: b.length + 1 }, (_, j) => j);
+  for (let i = 1; i <= a.length; i++) {
+    const curr = [i];
+    let rowMin = i;
+    for (let j = 1; j <= b.length; j++) {
+      const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+      const v = Math.min(prev[j] + 1, curr[j - 1] + 1, prev[j - 1] + cost);
+      curr.push(v);
+      if (v < rowMin) rowMin = v;
+    }
+    if (rowMin > maxDistance) return maxDistance + 1;
+    prev = curr;
+  }
+  return prev[b.length];
+}
+function closestType(name, catalog) {
+  const lower = name.toLowerCase();
+  let best;
+  let bestDistance = MAX_SUGGEST_DISTANCE + 1;
+  for (const candidate of catalog) {
+    if (Math.abs(candidate.length - name.length) > MAX_SUGGEST_DISTANCE) continue;
+    const d = levenshteinWithin(lower, candidate.toLowerCase(), MAX_SUGGEST_DISTANCE);
+    if (d < bestDistance) {
+      bestDistance = d;
+      best = candidate;
+    }
+  }
+  return bestDistance <= MAX_SUGGEST_DISTANCE ? best : void 0;
+}
 function isSchemaOrgContextValue(v) {
   if (typeof v === "string") return SCHEMA_ORG_CONTEXT_RE.test(v);
   if (Array.isArray(v)) return v.every((m) => typeof m === "string" && SCHEMA_ORG_CONTEXT_RE.test(m));
@@ -4740,7 +4795,7 @@ function unknownTypeNames(nodes) {
   return [...seen];
 }
 function unknownTypeMessage(name) {
-  const canonical = LOWERCASE_TO_CANONICAL.get(name.toLowerCase());
+  const canonical = LOWERCASE_TO_CANONICAL.get(name.toLowerCase()) ?? closestType(name, SORTED_TYPES);
   return canonical ? `Unknown @type '${name}' \u2014 not a schema.org type. Did you mean '${canonical}'?` : `Unknown @type '${name}' \u2014 not a schema.org type.`;
 }
 var seoJsonLdValidity = {
@@ -5594,7 +5649,8 @@ var correctnessOrphanEffect = componentRule({
   rationale: "An $effect created outside component initialisation throws effect_orphan at runtime. The compiler does not catch it \u2014 the server compiler deletes $effect calls entirely, so SSR renders without error \u2014 and the crash happens client-side, when the module evaluates in the browser, breaking hydration rather than producing a server error.",
   // `orphanEffects` is typed required, but a facts object built by an older/external
   // constructor may omit it — default to empty rather than let `applies` throw and
-  // take the whole `runRules` Promise.all down with it.
+  // surface this rule as failed (the engine isolates a throwing rule, but this one
+  // can just work instead of getting flagged).
   applies: (c) => (c.orphanEffects ?? []).length > 0,
   bad: (c) => (c.orphanEffects ?? []).map((o) => ({
     line: o.line,
@@ -7397,6 +7453,20 @@ function scoreColor(p, score) {
   return p.red;
 }
+// src/reporter/sanitize.ts
+function inlineCode(text) {
+  const longestRun = Math.max(0, ...(text.match(/`+/g) ?? []).map((run) => run.length));
+  const fence = "`".repeat(longestRun + 1);
+  const pad = text.startsWith("`") || text.endsWith("`") ? " " : "";
+  return `${fence}${pad}${text}${pad}${fence}`;
+}
+function mdEscape(text) {
+  return text.replace(/\r\n|\r|\n/g, " ").replace(/<[^>]+>/g, (tag) => inlineCode(tag)).replace(/\[([^\]]*)\]\(([^)]*)\)/g, "[$1]\\($2\\)");
+}
+function terminalSafe(text) {
+  return text.replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)?/g, "").replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, "").replace(/[\x00-\x08\x0b-\x1f\x7f]/g, "");
+}
 // src/reporter/console.ts
 var RULE = "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";
 var SEVERITY_TITLE = {
@@ -7445,9 +7515,9 @@ function byRouteTree(p, results, config, verbose) {
   const shown = verbose ? scored : scored.slice(0, MAX_ROUTES_BY_ROUTE);
   const lines = [p.bold("By route"), p.dim(RULE)];
   for (const { route, rs, score } of shown) {
-    lines.push(`${route.padEnd(28)} ${scoreColor(p, score)(`${score}`)}`);
+    lines.push(`${terminalSafe(route).padEnd(28)} ${scoreColor(p, score)(`${score}`)}`);
     for (const r of rs.filter((x) => classify(x, config) === "fail")) {
-      lines.push(`    ${p.red("\u2717")} ${r.id}  ${r.message}`);
+      lines.push(`    ${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
     }
   }
   if (!verbose && scored.length > MAX_ROUTES_BY_ROUTE) {
@@ -7491,18 +7561,18 @@ function formatConsoleReport(results, config, options = {}) {
     lines.push(SEVERITY_COLOR[severity](`${SEVERITY_TITLE[severity]} (${bucket.length})`), p.dim(RULE));
     if (options.verbose) {
       for (const r of bucket) {
-        lines.push(`${p.red("\u2717")} ${r.id}  ${r.message}`);
-        if (r.route) lines.push(p.dim(`            ${r.route}`));
-        if (r.location) lines.push(p.dim(`            ${r.location}${r.line ? `:${r.line}` : ""}`));
+        lines.push(`${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
+        if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
+        if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
       }
     } else {
       const groups = groupByRule(bucket);
       const shownGroups = groups.slice(0, MAX_RULE_GROUPS_PER_BUCKET);
       for (const group of shownGroups) {
         const r = group.results[0];
-        lines.push(`${p.red("\u2717")} ${r.id}  ${r.message}`);
-        if (r.route) lines.push(p.dim(`            ${r.route}`));
-        if (r.location) lines.push(p.dim(`            ${r.location}${r.line ? `:${r.line}` : ""}`));
+        lines.push(`${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
+        if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
+        if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
         if (group.results.length > 1) {
           lines.push(p.dim(`            \u2026and ${group.results.length - 1} more`));
         }
@@ -7523,8 +7593,8 @@ function formatConsoleReport(results, config, options = {}) {
       for (const r of passed) {
         const marker = classify(r, config) === "dynamic" ? p.cyan("  \u21AF dynamic") : "";
         const where = r.location ?? r.route;
-        const suffix = where ? `  ${where}` : "";
-        lines.push(`${p.green("\u2713")} ${r.id}  ${r.message}${marker}${suffix}`);
+        const suffix = where ? `  ${terminalSafe(where)}` : "";
+        lines.push(`${p.green("\u2713")} ${r.id}  ${terminalSafe(r.message)}${marker}${suffix}`);
       }
     }
     lines.push("");
@@ -7607,9 +7677,6 @@ function formatJsonReport(results, config, meta, ruleIds, examined) {
 // src/reporter/agent.ts
 var SEVERITY_RANK = { critical: 0, warning: 1, info: 2 };
-function mdTags(text) {
-  return text.replace(/<[^>]+>/g, (tag) => `\`${tag}\``);
-}
 function formatAgentReport(results, config) {
   const failing = results.filter((r) => classify(r, config) === "fail");
   const { health } = computeHealth(results, config);
@@ -7636,17 +7703,17 @@ function formatAgentReport(results, config) {
     rs.sort(
       (x, y) => SEVERITY_RANK[effectiveSeverity(x, config)] - SEVERITY_RANK[effectiveSeverity(y, config)] || x.id.localeCompare(y.id)
     );
-    lines.push(`## ${loc}`, "");
+    lines.push(`## ${mdEscape(loc)}`, "");
     for (const r of rs) {
-      lines.push(`### ${r.id} \xB7 ${mdTags(r.message)} (${effectiveSeverity(r, config)})`);
+      lines.push(`### ${r.id} \xB7 ${mdEscape(r.message)} (${effectiveSeverity(r, config)})`);
       if (r.fix) {
-        lines.push(`- Fix: ${mdTags(r.fix.description)}`);
+        lines.push(`- Fix: ${mdEscape(r.fix.description)}`);
         if (r.fix.snippet) lines.push("", "```" + (r.fix.lang ?? "svelte"), r.fix.snippet, "```");
       } else if (r.recommendation) {
-        lines.push(`- Fix: ${mdTags(r.recommendation)}`);
+        lines.push(`- Fix: ${mdEscape(r.recommendation)}`);
       }
       if (r.docsUrl) lines.push(`- Docs: ${r.docsUrl}`);
-      lines.push(`- Accept: re-run svelte-vitals; ${r.id} passes${r.route ? ` for ${r.route}` : ""}.`, "");
+      lines.push(`- Accept: re-run svelte-vitals; ${r.id} passes${r.route ? ` for ${mdEscape(r.route)}` : ""}.`, "");
     }
   }
   return lines.join("\n").replace(/\n+$/, "\n");
@@ -7757,7 +7824,7 @@ var MAX_FINDINGS = 50;
 var SEVERITY_EMOJI = { critical: "\u{1F534}", warning: "\u{1F7E1}", info: "\u{1F535}" };
 var SEVERITY_RANK2 = { critical: 0, warning: 1, info: 2 };
 function escapeCell(s) {
-  return s.replace(/\|/g, "\\|").replace(/\r\n|\r|\n/g, " ");
+  return mdEscape(s).replace(/(\\*)\|/g, (_, bs) => bs + bs + "\\|");
 }
 function locationOf(issue, route) {
   if (issue.location) return issue.line !== void 0 ? `${issue.location}:${issue.line}` : issue.location;
@@ -8629,6 +8696,7 @@ export {
   renderAppShell,
   resolveKitAliases,
   resolveKitPathsBase,
+  resolveRepoLocalPath,
   resolveRuleOptions,
   resolveRunesModuleSpecifier,
   runRules,
@@ -8680,5 +8748,6 @@ export {
   textFromNodes,
   validateRuleOptions,
   validateRuleSetting,
-  valueFromNodes
+  valueFromNodes,
+  withFailedRulesOff
 };

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@svelte-vitals/core",
-  "version": "0.41.0",
+  "version": "0.41.1",
   "description": "Shared, runtime-agnostic core for svelte-vitals (types, rule engine, scorer, reporter).",
   "type": "module",
   "license": "MIT",