@svelte-vitals/core 0.46.0 → 0.47.1

package/dist/internal.js

@@ -1,955 +1,1034 @@
-import {
-  CHILD_NODE_KEYS,
-  IDREF_ATTRS,
-  LANDMARK_ROLES,
-  SEVERITY_RANK,
-  a11yAccessibleName,
-  a11yDeprecatedAria,
-  a11yDeprecatedAttr,
-  a11yDeprecatedElement,
-  a11yDisallowedAriaProps,
-  a11yDisallowedElement,
-  a11yDoctype,
-  a11yDuplicateLandmark,
-  a11yIdDuplication,
-  a11yInteractiveNesting,
-  a11yInvalidAriaValue,
-  a11yInvalidRole,
-  a11yLabelHasControl,
-  a11yNoMissingIdRef,
-  a11yPermittedContents,
-  a11yPlaceholderLabelOption,
-  a11yRequireDatetime,
-  a11yRequiredAriaProps,
-  a11yRequiredElement,
-  a11yTopLevelLandmark,
-  a11yUnknownAriaAttribute,
-  a11yUseList,
-  allRules,
-  applyOverrides,
-  applyRuleSeverities,
-  architectureComponentSize,
-  architectureDirectoryNaming,
-  architectureDocLinkTarget,
-  architecturePrivateScopeImport,
-  architecturePropCount,
-  architectureReservedDirectoryNames,
-  architectureReservedNamePlacement,
-  architectureRouteComponentImport,
-  architectureUnitEntryFile,
-  attrText,
-  attrTextOf,
-  attrValue,
-  attrValueOf,
-  buildJsonReport,
-  classify,
-  collectNamedImportAliases,
-  collectSuppressions,
-  collectTopLevelBindings,
-  compileOverrides,
-  computeHealth,
-  computeScore,
-  correctnessBasePathNavigation,
-  correctnessCheckableBindValue,
-  correctnessEachIndexKey,
-  correctnessEachKey,
-  correctnessEffectAsDerived,
-  correctnessEffectAsOnMount,
-  correctnessInstanceBrowserGlobal,
-  correctnessNonreactiveBuiltinState,
-  correctnessOrphanEffect,
-  correctnessOrphanLifecycle,
-  correctnessPropMutation,
-  correctnessServerBrowserGlobal,
-  correctnessStalePropDerivation,
-  correctnessUnmutatedState,
-  decodeFragmentId,
-  defaultConfig,
-  defaultProject,
-  docsUrlFor,
-  effectiveSeverity,
-  explainRule,
-  findAttr,
-  foldOccurrences,
-  formatFailedRuleWarning,
-  formatGithubReport,
-  formatJsonReport,
-  formatMarkdownReport,
-  hasFailureAtOrAbove,
-  headTagRule,
-  imageRule,
-  intOption,
-  isMentionedAnywhere,
-  isPenalized,
-  isTopFragment,
-  lineOf,
-  linkRule,
-  listOption,
-  mapOption,
-  mdEscape,
-  messageText,
-  overrideMatches,
-  parseComponentFacts,
-  parseInMemoryExports,
-  parseKitModuleFacts,
-  parseModuleProgram,
-  parseSvelte,
-  performanceFontPreloadCrossorigin,
-  performanceHeavyImport,
-  performanceImageDimensions,
-  performanceImageLoadingHint,
-  performanceLcpImage,
-  performanceLoadWaterfall,
-  performanceMinifyDisabled,
-  performanceNamespaceImport,
-  performancePreconnect,
-  performancePreloadMissingAs,
-  performanceRenderBlockingScript,
-  performanceResponsiveImage,
-  performanceSequentialAwaits,
-  performanceStateRaw,
-  resolveRepoLocalPath,
-  resolveRuleOptions,
-  resolveRunesModuleSpecifier,
-  ruleMetaById,
-  scoresByCategory,
-  securityHandlerStateWrite,
-  securityJavascriptUrl,
-  securityRawHtml,
-  securityServerModuleState,
-  securitySharedStateImport,
-  selectRules,
-  seoCanonicalUrl,
-  seoCharset,
-  seoDescriptionLength,
-  seoDescriptionPresence,
-  seoDuplicateDescription,
-  seoDuplicateTitle,
-  seoHeadingLevelSkip,
-  seoHreflang,
-  seoHtmlLang,
-  seoImageAlt,
-  seoIndexability,
-  seoJsonLd,
-  seoJsonLdDateFormat,
-  seoJsonLdDeprecatedType,
-  seoJsonLdPlaceholder,
-  seoJsonLdRelativeUrl,
-  seoJsonLdRequiredProps,
-  seoJsonLdValidity,
-  seoOgDescription,
-  seoOgImage,
-  seoOgTitle,
-  seoOgUrl,
-  seoRobotsTxt,
-  seoSingleH1,
-  seoSitemapInRobots,
-  seoSitemapXml,
-  seoSsrDisabled,
-  seoTitleLength,
-  seoTitlePresence,
-  seoTwitterCard,
-  seoViewport,
-  settingOptions,
-  settingSeverity,
-  severityToSarifLevel,
-  shouldSkipRangeCheck,
-  splitTokens,
-  stripTextDirective,
-  summarize,
-  terminalSafe,
-  textFromNodes,
-  unwrapTs,
-  validateRuleOptions,
-  validateRuleSetting,
-  valueFromNodes,
-  withFailedRulesOff
-} from "./chunk-M7RA6QQW.js";
-
-// src/inline-directives.ts
+import { $ as parseInMemoryExports, $n as hasFailureAtOrAbove, $t as seoCharset, A as a11yPlaceholderLabelOption, An as settingSeverity, At as securityJavascriptUrl, B as performanceSequentialAwaits, Bn as imageRule, Bt as correctnessPropMutation, C as a11yPermittedContents, Cn as applyOverrides, Ct as textFromNodes, D as a11yDeprecatedAttr, Dn as overrideMatches, Dt as securitySharedStateImport, E as a11yDisallowedAriaProps, En as formatFailedRuleWarning, Et as architectureComponentSize, F as a11yInvalidAriaValue, Fn as performancePreloadMissingAs, Ft as correctnessOrphanLifecycle, G as architectureDocLinkTarget, Gn as seoOgTitle, Gt as correctnessEachKey, H as performanceMinifyDisabled, Hn as seoSitemapXml, Ht as correctnessEffectAsOnMount, I as a11yRequiredAriaProps, In as linkRule, It as correctnessOrphanEffect, J as architectureReservedDirectoryNames, Jn as seoDescriptionPresence, Jt as seoDuplicateDescription, K as architectureRouteComponentImport, Kn as seoOgImage, Kt as seoSsrDisabled, L as a11yUnknownAriaAttribute, Ln as performanceResponsiveImage, Lt as correctnessCheckableBindValue, M as a11yLabelHasControl, Mn as performanceRenderBlockingScript, Mt as correctnessInstanceBrowserGlobal, N as a11yAccessibleName, Nn as performanceLcpImage, Nt as correctnessServerBrowserGlobal, O as a11yDeprecatedElement, On as selectRules, Ot as securityServerModuleState, P as a11yInteractiveNesting, Pn as performanceFontPreloadCrossorigin, Pt as correctnessBasePathNavigation, Q as collectTopLevelBindings, Qn as effectiveSeverity, Qt as seoImageAlt, R as a11yInvalidRole, Rn as performanceImageLoadingHint, Rt as correctnessNonreactiveBuiltinState, S as a11yRequiredElement, Sn as validateRuleSetting, St as parseSvelte, T as a11yDeprecatedAria, Tn as compileOverrides, Tt as architecturePropCount, U as performanceNamespaceImport, Un as seoRobotsTxt, Ut as correctnessEffectAsDerived, V as performanceLoadWaterfall, Vn as seoHtmlLang, Vt as correctnessUnmutatedState, W as performanceHeavyImport, Wn as seoJsonLd, Wt as correctnessEachIndexKey, X as architectureUnitEntryFile, Xn as seoTitlePresence, Xt as seoSingleH1, Y as architectureDirectoryNaming, Yn as headTagRule, Yt as seoDuplicateTitle, Z as architecturePrivateScopeImport, Zn as classify, Zt as seoHreflang, _ as a11yNoMissingIdRef, _n as listOption, _t as attrTextOf, a as formatJsonReport, an as seoJsonLdRelativeUrl, ar as defaultProject, at as parseComponentFacts, b as a11yDuplicateLandmark, bn as shouldSkipRangeCheck, bt as findAttr, c as scoresByCategory, cn as seoSitemapInRobots, ct as IDREF_ATTRS, d as messageText, dn as seoOgDescription, dt as foldOccurrences, en as seoDescriptionLength, er as summarize, et as parseKitModuleFacts, f as ruleMetaById, fn as seoTwitterCard, ft as isTopFragment, g as a11yUnverifiedIdRef, gn as isMentionedAnywhere, gt as attrText, h as explainRule, hn as intOption, ht as CHILD_NODE_KEYS, i as buildJsonReport, in as seoJsonLdDateFormat, ir as defaultConfig, it as collectSuppressions, j as a11yUseList, jn as withFailedRulesOff, jt as securityRawHtml, k as a11yRequireDatetime, kn as settingOptions, kt as securityHandlerStateWrite, l as formatGithubReport, ln as seoViewport, lt as LANDMARK_ROLES, m as allRules, mn as performancePreconnect, mt as stripTextDirective, n as mdEscape, nn as seoJsonLdRequiredProps, nr as isPenalized, nt as resolveRunesModuleSpecifier, o as computeHealth, on as seoJsonLdDeprecatedType, ot as parseModuleProgram, p as severityToSarifLevel, pn as seoIndexability, pt as splitTokens, q as architectureReservedNamePlacement, qn as seoCanonicalUrl, qt as seoHeadingLevelSkip, r as terminalSafe, rn as seoJsonLdPlaceholder, rt as collectNamedImportAliases, s as computeScore, sn as seoJsonLdValidity, st as unwrapTs, t as formatMarkdownReport, tn as seoTitleLength, tr as docsUrlFor, tt as resolveRepoLocalPath, u as SEVERITY_RANK, un as seoOgUrl, ut as decodeFragmentId, v as a11yIdDuplication, vn as mapOption, vt as attrValue, w as a11yDisallowedElement, wn as applyRuleSeverities, wt as valueFromNodes, x as a11yDoctype, xn as validateRuleOptions, xt as lineOf, y as a11yTopLevelLandmark, yn as resolveRuleOptions, yt as attrValueOf, z as performanceStateRaw, zn as performanceImageDimensions, zt as correctnessStalePropDerivation } from "./markdown-CUNuKq3Z.js";
+//#region src/inline-directives.ts
+/** The directive silencing `r`, if one sits on its line and names its rule (or names nothing). */
 function directiveFor(index, r) {
-  const line = r.line;
-  if (r.location === void 0 || line === void 0 || line <= 0) return void 0;
-  return (index.get(r.location) ?? []).find((d) => d.line === line && (!d.ruleIds || d.ruleIds.includes(r.id)));
+	const line = r.line;
+	if (r.location === void 0 || line === void 0 || line <= 0) return void 0;
+	return (index.get(r.location) ?? []).find((d) => d.line === line && (!d.ruleIds || d.ruleIds.includes(r.id)));
 }
+/**
+* Apply inline `svelte-vitals-disable-next-line` directives to a finished result set — one
+* mechanism, over `Result`s, so any rule that emits a line-anchored finding is covered by
+* construction rather than by per-family wiring (design 2026-08-17).
+*
+* Runs on the output of `applyOverrides(applyRuleSeverities(...))`, so a directive silences
+* whatever survived config, and every consumer downstream — scoring, `--fail-on`, the suppressions
+* file, the reporters — sees the same suppressed set. `fileRule` keeps its own earlier filter and
+* is unaffected: a result it already suppressed never arrives here, and its PASS is not penalized.
+*
+* A rule+route whose every penalized result was suppressed gains one PASS, located at the first
+* suppressed result in emission order — the anchor the rules themselves use. Its message is the
+* rule's `passLabel` when it declares one, else its `title`.
+*/
 function applyInlineDirectives(results, index, rules, config) {
-  const labels = new Map(rules.map((r) => [r.id, r.passLabel ?? r.title]));
-  const kept = [];
-  const silenced = /* @__PURE__ */ new Map();
-  const survived = /* @__PURE__ */ new Set();
-  for (const r of results) {
-    if (!isPenalized(r.detection, config.treatDynamicAs)) {
-      kept.push(r);
-      continue;
-    }
-    const key = `${r.id} ${r.route ?? ""}`;
-    if (directiveFor(index, r) !== void 0) {
-      if (!silenced.has(key)) silenced.set(key, r);
-      continue;
-    }
-    survived.add(key);
-    kept.push(r);
-  }
-  for (const [key, r] of silenced) {
-    if (survived.has(key)) continue;
-    kept.push({
-      id: r.id,
-      ...r.category ? { category: r.category } : {},
-      severity: r.severity,
-      detection: { presence: "own", value: "static" },
-      ...r.route !== void 0 ? { route: r.route } : {},
-      ...r.location !== void 0 ? { location: r.location } : {},
-      message: labels.get(r.id) ?? r.id
-    });
-  }
-  return kept;
+	const labels = new Map(rules.map((r) => [r.id, r.passLabel ?? r.title]));
+	const kept = [];
+	/** rule+route → the first suppressed result, for the PASS this pair may need. */
+	const silenced = /* @__PURE__ */ new Map();
+	const survived = /* @__PURE__ */ new Set();
+	for (const r of results) {
+		if (!isPenalized(r.detection, config.treatDynamicAs)) {
+			kept.push(r);
+			continue;
+		}
+		const key = `${r.id} ${r.route ?? ""}`;
+		if (directiveFor(index, r) !== void 0) {
+			if (!silenced.has(key)) silenced.set(key, r);
+			continue;
+		}
+		survived.add(key);
+		kept.push(r);
+	}
+	for (const [key, r] of silenced) {
+		if (survived.has(key)) continue;
+		kept.push({
+			id: r.id,
+			...r.category ? { category: r.category } : {},
+			severity: r.severity,
+			detection: {
+				presence: "own",
+				value: "static"
+			},
+			...r.route !== void 0 ? { route: r.route } : {},
+			...r.location !== void 0 ? { location: r.location } : {},
+			message: labels.get(r.id) ?? r.id
+		});
+	}
+	return kept;
 }
+/**
+* Directives naming a rule id that no rule declares. Unlike a directive that matches no finding —
+* legitimate whenever the code was fixed, the rule turned off, or the run scoped — a misspelled id
+* can never be right, so it is reported rather than silently suppressing nothing.
+*
+* Compared against every registered rule, not the selected ones: disabling a rule in config must
+* not turn its directives into errors.
+*/
 function unknownDirectiveIds(index, rules) {
-  const known = new Set(rules.map((r) => r.id));
-  const seen = /* @__PURE__ */ new Set();
-  for (const [file, directives] of index) {
-    for (const d of directives) {
-      for (const id of d.ruleIds ?? []) {
-        if (!known.has(id)) seen.add(`${file}:${d.line - 1} disables unknown rule "${id}"`);
-      }
-    }
-  }
-  return [...seen].sort();
+	const known = new Set(rules.map((r) => r.id));
+	const seen = /* @__PURE__ */ new Set();
+	for (const [file, directives] of index) for (const d of directives) for (const id of d.ruleIds ?? []) if (!known.has(id)) seen.add(`${file}:${d.line - 1} disables unknown rule "${id}"`);
+	return [...seen].sort();
 }
-
-// src/component.ts
+//#endregion
+//#region src/component.ts
+/**
+* Warnings for files a collector could not read or parse: the file contributes empty facts, so any
+* findings it would have produced are simply missing rather than reported as fixed. The two causes
+* are reported separately — an unreadable file is an environment problem (permissions, a descriptor
+* limit) and a malformed one is the author's, and sharing a message is how a descriptor limit once
+* read as hundreds of broken components. Capped at 10 inline paths so one badly-broken directory
+* cannot flood the terminal.
+*/
 function skippedFileWarnings(facts) {
-  const list = (files) => {
-    const shown = files.slice(0, 10);
-    return files.length > shown.length ? `${shown.join(", ")}, \u2026 and ${files.length - shown.length} more` : shown.join(", ");
-  };
-  const names = (pick) => [...new Set(facts.filter(pick).map((f) => f.file))].sort();
-  const unread = names((f) => f.readFailed === true);
-  const unparsed = names((f) => f.parseFailed === true && f.readFailed !== true);
-  const out = [];
-  if (unread.length > 0) {
-    out.push(
-      `skipped ${unread.length} file(s) that could not be read: ${list(unread)}`,
-      "this is an environment problem, not a code one \u2014 check file permissions and the open-file limit (`ulimit -n`)."
-    );
-  }
-  if (unparsed.length > 0) {
-    out.push(
-      `skipped ${unparsed.length} file(s) that could not be parsed: ${list(unparsed)}`,
-      "findings for these files are unavailable until they parse."
-    );
-  }
-  return out;
+	const list = (files) => {
+		const shown = files.slice(0, 10);
+		return files.length > shown.length ? `${shown.join(", ")}, … and ${files.length - shown.length} more` : shown.join(", ");
+	};
+	const names = (pick) => [...new Set(facts.filter(pick).map((f) => f.file))].sort();
+	const unread = names((f) => f.readFailed === true);
+	const unparsed = names((f) => f.parseFailed === true && f.readFailed !== true);
+	const out = [];
+	if (unread.length > 0) out.push(`skipped ${unread.length} file(s) that could not be read: ${list(unread)}`, "this is an environment problem, not a code one — check file permissions and the open-file limit (`ulimit -n`).");
+	if (unparsed.length > 0) out.push(`skipped ${unparsed.length} file(s) that could not be parsed: ${list(unparsed)}`, "findings for these files are unavailable until they parse.");
+	return out;
 }
-
-// src/component-collect.ts
+//#endregion
+//#region src/component-collect.ts
+/**
+* Fallback facts for a file that fails to read or parse (dev tooling must never
+* throw). This is the single source of truth for the empty-facts shape — add new
+* `ComponentFacts` fields HERE so TypeScript catches every call site that still
+* needs updating.
+*/
 function emptyComponentFacts(file) {
-  return {
-    file,
-    eachBlocks: [],
-    effects: [],
-    htmlTags: [],
-    javascriptUrls: [],
-    loc: 0,
-    propCount: 0,
-    imports: [],
-    importSpans: [],
-    namespaceImports: [],
-    constableStates: [],
-    mutatedProps: [],
-    stalePropDerivations: [],
-    rawableStates: [],
-    nonreactiveBuiltinStates: [],
-    checkableBindValues: [],
-    basePathLinks: [],
-    orphanEffects: [],
-    orphanLifecycleCalls: [],
-    browserGlobalRefs: [],
-    moduleStateDecls: [],
-    suppressions: [],
-    commentLinks: []
-  };
+	return {
+		file,
+		eachBlocks: [],
+		effects: [],
+		htmlTags: [],
+		javascriptUrls: [],
+		loc: 0,
+		propCount: 0,
+		imports: [],
+		importSpans: [],
+		namespaceImports: [],
+		constableStates: [],
+		mutatedProps: [],
+		stalePropDerivations: [],
+		rawableStates: [],
+		nonreactiveBuiltinStates: [],
+		checkableBindValues: [],
+		basePathLinks: [],
+		orphanEffects: [],
+		orphanLifecycleCalls: [],
+		browserGlobalRefs: [],
+		moduleStateDecls: [],
+		suppressions: [],
+		commentLinks: []
+	};
 }
+/**
+* Scan every `.svelte` component and `.svelte.ts`/`.svelte.js` runes module under `src/`
+* for Correctness/Security/Architecture/Bundle-Performance/Accessibility facts. Independent
+* of route resolution — covers `$lib` and non-route components too. A file that fails to
+* read or parse contributes empty facts instead of aborting the whole scan (dev tooling
+* must never throw).
+*/
 async function collectComponentFacts(rt, cwd) {
-  const files = await rt.glob("src/**/*.svelte{,.ts,.js}", cwd);
-  return Promise.all(
-    files.sort().map(async (rel) => {
-      let source;
-      try {
-        source = await rt.readFile(rt.join(cwd, rel));
-      } catch {
-        return { ...emptyComponentFacts(rel), parseFailed: true, readFailed: true };
-      }
-      try {
-        return { file: rel, ...parseComponentFacts(source, rel) };
-      } catch {
-        return { ...emptyComponentFacts(rel), parseFailed: true };
-      }
-    })
-  );
+	const files = await rt.glob("src/**/*.svelte{,.ts,.js}", cwd);
+	return Promise.all(files.sort().map(async (rel) => {
+		let source;
+		try {
+			source = await rt.readFile(rt.join(cwd, rel));
+		} catch {
+			return {
+				...emptyComponentFacts(rel),
+				parseFailed: true,
+				readFailed: true
+			};
+		}
+		try {
+			return {
+				file: rel,
+				...parseComponentFacts(source, rel)
+			};
+		} catch {
+			return {
+				...emptyComponentFacts(rel),
+				parseFailed: true
+			};
+		}
+	}));
 }
-
-// src/source-files.ts
+//#endregion
+//#region src/source-files.ts
+/**
+* Every file under `src/`, as project-relative paths, sorted. Paths only — nothing is
+* read, so this is the cheaper of the two passes over `src/` (the component collector
+* already walks the same tree and reads every `.svelte`).
+*
+* Directory-shaped rules derive their directory set from these paths' ancestor prefixes
+* rather than globbing a second time; see `architecture/unit-entry-file`. The list is
+* sorted so anything that picks "the first file under a directory" is deterministic.
+*
+* Two properties of the result the directory-shaped rules depend on: a directory containing no file
+* at any depth does not appear among these paths' ancestor prefixes and so does not exist as far as
+* those rules are concerned, and dot directories never appear at all (see `Runtime.glob`).
+*/
 async function collectSourceFiles(rt, cwd) {
-  const files = await rt.glob("src/**/*", cwd);
-  return files.slice().sort();
+	return (await rt.glob("src/**/*", cwd)).slice().sort();
 }
-
-// src/kit-module-collect.ts
+//#endregion
+//#region src/kit-module-collect.ts
+/** Fallback facts for a Kit file that fails to read or parse (dev tooling must never throw). */
 function emptyKitModuleFacts(file, kind) {
-  return {
-    file,
-    kind,
-    moduleStateReassignments: [],
-    importedStateWrites: [],
-    importedStateWritesOutsideHandlers: [],
-    pendingServerStoreWrites: [],
-    runesModuleImports: [],
-    lifecycleCalls: [],
-    browserGlobalRefs: [],
-    basePathLinks: [],
-    suppressions: []
-  };
+	return {
+		file,
+		kind,
+		moduleStateReassignments: [],
+		importedStateWrites: [],
+		importedStateWritesOutsideHandlers: [],
+		pendingServerStoreWrites: [],
+		runesModuleImports: [],
+		lifecycleCalls: [],
+		browserGlobalRefs: [],
+		basePathLinks: [],
+		suppressions: []
+	};
 }
+/** 'server' when the file only ever runs on the server; 'universal' for +page.ts/+layout.ts. */
 function kindOf(file) {
-  const base = file.split("/").pop() ?? file;
-  return base.includes(".server.") || base.startsWith("+server.") ? "server" : "universal";
+	const base = file.split("/").pop() ?? file;
+	return base.includes(".server.") || base.startsWith("+server.") ? "server" : "universal";
 }
+/**
+* Scan SvelteKit route/hooks files for SSR shared-state facts (the security kit-module rules): route
+* `+page`/`+layout` server and universal modules, `+server` endpoints, and
+* `src/hooks.server`. `src/lib/server/**` is deliberately NOT scanned — legitimate
+* module singletons (DB connections, clients) live there (design). A file that
+* fails to read or parse contributes empty facts instead of aborting the scan.
+*
+* `aliases` is the project's compiled alias list (`Project.kitAliases`); omitted,
+* specifiers resolve through `$lib` → `src/lib` only.
+*/
 async function collectKitModuleFacts(rt, cwd, aliases) {
-  const patterns = [
-    "src/routes/**/+{page,layout}.server.{ts,js}",
-    "src/routes/**/+{page,layout}.{ts,js}",
-    "src/routes/**/+server.{ts,js}",
-    "src/hooks.server.{ts,js}"
-  ];
-  const lists = await Promise.all(patterns.map((p) => rt.glob(p, cwd)));
-  const files = [...new Set(lists.flat())];
-  const facts = await Promise.all(
-    files.sort().map(async (rel) => {
-      const kind = kindOf(rel);
-      let source;
-      try {
-        source = await rt.readFile(rt.join(cwd, rel));
-      } catch {
-        return { ...emptyKitModuleFacts(rel, kind), parseFailed: true, readFailed: true };
-      }
-      try {
-        return { file: rel, kind, ...parseKitModuleFacts(source, rel, aliases) };
-      } catch {
-        return { ...emptyKitModuleFacts(rel, kind), parseFailed: true };
-      }
-    })
-  );
-  return arbitrateServerStoreWrites(rt, cwd, facts);
+	const lists = await Promise.all([
+		"src/routes/**/+{page,layout}.server.{ts,js}",
+		"src/routes/**/+{page,layout}.{ts,js}",
+		"src/routes/**/+server.{ts,js}",
+		"src/hooks.server.{ts,js}"
+	].map((p) => rt.glob(p, cwd)));
+	const files = [...new Set(lists.flat())];
+	return arbitrateServerStoreWrites(rt, cwd, await Promise.all(files.sort().map(async (rel) => {
+		const kind = kindOf(rel);
+		let source;
+		try {
+			source = await rt.readFile(rt.join(cwd, rel));
+		} catch {
+			return {
+				...emptyKitModuleFacts(rel, kind),
+				parseFailed: true,
+				readFailed: true
+			};
+		}
+		try {
+			return {
+				file: rel,
+				kind,
+				...parseKitModuleFacts(source, rel, aliases)
+			};
+		} catch {
+			return {
+				...emptyKitModuleFacts(rel, kind),
+				parseFailed: true
+			};
+		}
+	})));
 }
+/**
+* The files a resolved specifier may name, in resolution order. An extensionless path takes an
+* extension or an index file; a path that already ends in `.js` is checked as written and then
+* remapped to `.ts`, which is how a NodeNext/ESM TypeScript project spells an import of its own
+* `.ts` source (`from '$lib/server/store.js'` -> `src/lib/server/store.ts`).
+*/
 function moduleCandidates(repoPath) {
-  if (repoPath.endsWith(".js")) return [repoPath, `${repoPath.slice(0, -3)}.ts`];
-  if (repoPath.endsWith(".ts")) return [repoPath];
-  return [`${repoPath}.ts`, `${repoPath}.js`, `${repoPath}/index.ts`, `${repoPath}/index.js`];
+	if (repoPath.endsWith(".js")) return [repoPath, `${repoPath.slice(0, -3)}.ts`];
+	if (repoPath.endsWith(".ts")) return [repoPath];
+	return [
+		`${repoPath}.ts`,
+		`${repoPath}.js`,
+		`${repoPath}/index.ts`,
+		`${repoPath}/index.js`
+	];
 }
+/**
+* Read the module a pending write targets and return the names it exports as an in-memory
+* container. Returns an empty set when the file cannot be found or read: unresolvable means
+* unarbitrated, which leaves the write exempt.
+*/
 async function inMemoryExportsOf(rt, cwd, repoPath) {
-  for (const rel of moduleCandidates(repoPath)) {
-    try {
-      if (!await rt.exists(rt.join(cwd, rel))) continue;
-      return parseInMemoryExports(await rt.readFile(rt.join(cwd, rel)), rel);
-    } catch {
-      return /* @__PURE__ */ new Set();
-    }
-  }
-  return /* @__PURE__ */ new Set();
+	for (const rel of moduleCandidates(repoPath)) try {
+		if (!await rt.exists(rt.join(cwd, rel))) continue;
+		return parseInMemoryExports(await rt.readFile(rt.join(cwd, rel)), rel);
+	} catch {
+		return /* @__PURE__ */ new Set();
+	}
+	return /* @__PURE__ */ new Set();
 }
+/**
+* Decide the `.set()`/`.update()` calls the parse could not: a call on a binding exported from
+* under the `$lib` server root is shared module state when that binding is an in-memory
+* container, and persistence when it is anything else. Only the modules actually targeted are
+* read, so a project whose handlers never write to `$lib/server` pays nothing.
+*/
 async function arbitrateServerStoreWrites(rt, cwd, facts) {
-  const targets = [...new Set(facts.flatMap((f) => f.pendingServerStoreWrites.map((w) => w.resolved)))];
-  if (targets.length === 0) return facts;
-  const byPath = new Map(
-    await Promise.all(targets.map(async (t) => [t, await inMemoryExportsOf(rt, cwd, t)]))
-  );
-  return facts.map((f) => {
-    const promoted = f.pendingServerStoreWrites.filter((w) => byPath.get(w.resolved)?.has(w.imported)).map((w) => ({ name: w.name, line: w.line, via: "set-call" }));
-    if (promoted.length === 0) return f;
-    return {
-      ...f,
-      importedStateWrites: [...f.importedStateWrites, ...promoted].sort((a, b) => a.line - b.line)
-    };
-  });
+	const targets = [...new Set(facts.flatMap((f) => f.pendingServerStoreWrites.map((w) => w.resolved)))];
+	if (targets.length === 0) return facts;
+	const byPath = new Map(await Promise.all(targets.map(async (t) => [t, await inMemoryExportsOf(rt, cwd, t)])));
+	return facts.map((f) => {
+		const promoted = f.pendingServerStoreWrites.filter((w) => byPath.get(w.resolved)?.has(w.imported)).map((w) => ({
+			name: w.name,
+			line: w.line,
+			via: "set-call"
+		}));
+		if (promoted.length === 0) return f;
+		return {
+			...f,
+			importedStateWrites: [...f.importedStateWrites, ...promoted].sort((a, b) => a.line - b.line)
+		};
+	});
 }
-
-// src/config-object.ts
+//#endregion
+//#region src/config-object.ts
+/**
+* Non-computed property of an object literal, by key name (`build` or `'build'`).
+* Returns the LAST matching property, honoring JavaScript object semantics where
+* duplicate keys are resolved to the rightmost value — UNLESS a `SpreadElement`
+* appears after that match in the same object literal, in which case the spread
+* could re-introduce or overwrite the key at runtime and the effective value is
+* unknowable, so this conservatively returns undefined. A spread BEFORE the
+* match doesn't matter — the literal property still wins.
+*/
 function propOf(obj, name) {
-  let found;
-  for (const p of obj.properties) {
-    if (p.type === "SpreadElement") {
-      if (found) found = void 0;
-      continue;
-    }
-    if (p.type !== "Property" || p.computed) continue;
-    if (p.key.type === "Identifier" && p.key.name === name) found = p;
-    else if (p.key.type === "Literal" && p.key.value === name) found = p;
-  }
-  return found;
+	let found;
+	for (const p of obj.properties) {
+		if (p.type === "SpreadElement") {
+			if (found) found = void 0;
+			continue;
+		}
+		if (p.type !== "Property" || p.computed) continue;
+		if (p.key.type === "Identifier" && p.key.name === name) found = p;
+		else if (p.key.type === "Literal" && p.key.value === name) found = p;
+	}
+	return found;
 }
+/**
+* Unwrap an expression to an object literal, resolving up to 4 steps of: TS
+* wrappers (`satisfies`/`as`), an `Identifier` through same-file top-level
+* `bindings`, and a `CallExpression`'s first argument (so both
+* `defineConfig({…})` and `defineConfig(config)` — a same-file identifier
+* argument — resolve, and so does either nested inside the other). Stops as
+* soon as an `ObjectExpression` is reached, or when a step can't make further
+* progress (an unresolvable identifier, or anything else that isn't a wrapper,
+* identifier, or call).
+*/
 function unwrapToObjectExpression(expr, bindings) {
-  let current = expr;
-  for (let i = 0; i < 4 && current; i++) {
-    const e = unwrapTs(current);
-    if (e.type === "ObjectExpression") return e;
-    if (e.type === "Identifier") {
-      current = bindings.get(e.name);
-      continue;
-    }
-    if (e.type === "CallExpression") {
-      current = e.arguments[0];
-      continue;
-    }
-    return void 0;
-  }
-  const final = current ? unwrapTs(current) : void 0;
-  return final?.type === "ObjectExpression" ? final : void 0;
+	let current = expr;
+	for (let i = 0; i < 4 && current; i++) {
+		const e = unwrapTs(current);
+		if (e.type === "ObjectExpression") return e;
+		if (e.type === "Identifier") {
+			current = bindings.get(e.name);
+			continue;
+		}
+		if (e.type === "CallExpression") {
+			current = e.arguments[0];
+			continue;
+		}
+		return;
+	}
+	const final = current ? unwrapTs(current) : void 0;
+	return final?.type === "ObjectExpression" ? final : void 0;
 }
+/**
+* The exported config expression's raw (un-unwrapped) node: an ESM
+* `export default …` declaration, or — when no default export exists — the
+* RHS of the LAST top-level CJS `module.exports = …` assignment (mirrors
+* JavaScript's last-assignment-wins semantics, same rationale as `propOf`'s
+* last-wins). Undefined when neither form is present.
+*/
 function findExportedExpression(program) {
-  let exported;
-  for (const stmt of program.body) {
-    if (stmt.type === "ExportDefaultDeclaration") exported = stmt.declaration;
-  }
-  if (exported) return exported;
-  let cjsExported;
-  for (const stmt of program.body) {
-    if (stmt.type !== "ExpressionStatement") continue;
-    const expr = stmt.expression;
-    if (expr.type !== "AssignmentExpression" || expr.operator !== "=") continue;
-    const left = expr.left;
-    if (left.type === "MemberExpression" && !left.computed && left.object.type === "Identifier" && left.object.name === "module" && left.property.type === "Identifier" && left.property.name === "exports") {
-      cjsExported = expr.right;
-    }
-  }
-  return cjsExported;
+	let exported;
+	for (const stmt of program.body) if (stmt.type === "ExportDefaultDeclaration") exported = stmt.declaration;
+	if (exported) return exported;
+	let cjsExported;
+	for (const stmt of program.body) {
+		if (stmt.type !== "ExpressionStatement") continue;
+		const expr = stmt.expression;
+		if (expr.type !== "AssignmentExpression" || expr.operator !== "=") continue;
+		const left = expr.left;
+		if (left.type === "MemberExpression" && !left.computed && left.object.type === "Identifier" && left.object.name === "module" && left.property.type === "Identifier" && left.property.name === "exports") cjsExported = expr.right;
+	}
+	return cjsExported;
 }
+/**
+* Resolve the exported config expression to an object literal: ESM
+* `export default {…}`, `export default defineConfig({…})` (any call's first
+* argument — the callee name is not verified), a same-file alias
+* (`const config = {…}; export default config`) including one passed as
+* `defineConfig`'s argument, or CJS `module.exports = {…}` in the same forms —
+* with `satisfies`/`as` unwrapped at every step. Function-form configs and
+* anything else resolve to undefined — the CLI channel is deliberately
+* literal-only; the Vite plugin channel sees the resolved value instead.
+*/
 function resolveConfigObject(program) {
-  const exported = findExportedExpression(program);
-  if (!exported) return void 0;
-  return unwrapToObjectExpression(exported, collectTopLevelBindings(program));
+	const exported = findExportedExpression(program);
+	if (!exported) return void 0;
+	return unwrapToObjectExpression(exported, collectTopLevelBindings(program));
 }
-
-// src/vite-config-parse.ts
+//#endregion
+//#region src/vite-config-parse.ts
+/**
+* The `build: { minify: false }` override, when present as a literal: returns the
+* `minify` property's 1-based line in the ORIGINAL source. Undefined for clean,
+* dynamic, or unparsable configs (never throws).
+*/
 function findMinifyDisabled(source) {
-  let program;
-  let wrapped;
-  try {
-    ({ program, wrapped } = parseModuleProgram(source, "vite.config.ts"));
-  } catch {
-    return void 0;
-  }
-  if (!program) return void 0;
-  const config = resolveConfigObject(program);
-  if (!config) return void 0;
-  const build = propOf(config, "build");
-  const buildValue = build ? unwrapTs(build.value) : void 0;
-  if (buildValue?.type !== "ObjectExpression") return void 0;
-  const minify = propOf(buildValue, "minify");
-  const minifyValue = minify ? unwrapTs(minify.value) : void 0;
-  if (!minify || minifyValue?.type !== "Literal" || minifyValue.value !== false) return void 0;
-  return { line: Math.max(0, lineOf(wrapped, minify.start) - 1) };
+	let program;
+	let wrapped;
+	try {
+		({program, wrapped} = parseModuleProgram(source, "vite.config.ts"));
+	} catch {
+		return;
+	}
+	if (!program) return void 0;
+	const config = resolveConfigObject(program);
+	if (!config) return void 0;
+	const build = propOf(config, "build");
+	const buildValue = build ? unwrapTs(build.value) : void 0;
+	if (buildValue?.type !== "ObjectExpression") return void 0;
+	const minify = propOf(buildValue, "minify");
+	const minifyValue = minify ? unwrapTs(minify.value) : void 0;
+	if (!minify || minifyValue?.type !== "Literal" || minifyValue.value !== false) return void 0;
+	return { line: Math.max(0, lineOf(wrapped, minify.start) - 1) };
 }
-
-// src/svelte-config-parse.ts
+//#endregion
+//#region src/svelte-config-parse.ts
+/**
+* `paths.base` off a resolved Kit-config object: `{ value }` for a non-empty string literal,
+* `{}` for any other expression (base exists, value unknowable — the `dev ? '' : '/repo'`
+* deploy form), and undefined when absent or an explicit empty string.
+*/
 function basePathOf(kitConfig, bindings) {
-  const paths = propOf(kitConfig, "paths");
-  const pathsObj = paths ? unwrapToObjectExpression(paths.value, bindings) : void 0;
-  if (!pathsObj) return void 0;
-  const base = propOf(pathsObj, "base");
-  if (!base) return void 0;
-  const value = unwrapTs(base.value);
-  if (value.type === "Literal") {
-    return typeof value.value === "string" && value.value !== "" ? { value: value.value } : void 0;
-  }
-  return {};
+	const paths = propOf(kitConfig, "paths");
+	const pathsObj = paths ? unwrapToObjectExpression(paths.value, bindings) : void 0;
+	if (!pathsObj) return void 0;
+	const base = propOf(pathsObj, "base");
+	if (!base) return void 0;
+	const value = unwrapTs(base.value);
+	if (value.type === "Literal") return typeof value.value === "string" && value.value !== "" ? { value: value.value } : void 0;
+	return {};
 }
+/** A property's key when it is a plain (non-computed) string or identifier key. */
 function keyNameOf(p) {
-  if (p.computed) return void 0;
-  if (p.key.type === "Identifier") return p.key.name;
-  if (p.key.type === "Literal" && typeof p.key.value === "string") return p.key.value;
-  return void 0;
+	if (p.computed) return void 0;
+	if (p.key.type === "Identifier") return p.key.name;
+	if (p.key.type === "Literal" && typeof p.key.value === "string") return p.key.value;
 }
+/** A property's value when it is a string literal, else undefined. */
 function stringValueOf(p) {
-  const v = unwrapTs(p.value);
-  return v.type === "Literal" && typeof v.value === "string" ? v.value : void 0;
+	const v = unwrapTs(p.value);
+	return v.type === "Literal" && typeof v.value === "string" ? v.value : void 0;
 }
+/**
+* `kit.alias`'s entries in source order. Undefined when the key set cannot be known (see
+* `RawKitAliases.entries`); `[]` when `propOf` finds no `alias` property — which also covers the
+* case where a spread in the `kit` object could have supplied one, matching how every other
+* fact in this file treats that unknowability rather than inventing a stricter rule for alias
+* alone. Duplicate literal keys collapse the way `Object.entries` does — FIRST position, LAST
+* value — because that is the object Kit iterates.
+*/
 function aliasEntriesOf(kitConfig, bindings) {
-  const alias = propOf(kitConfig, "alias");
-  if (!alias) return [];
-  const obj = unwrapToObjectExpression(alias.value, bindings);
-  if (!obj) return void 0;
-  const out = [];
-  const at = /* @__PURE__ */ new Map();
-  for (const p of obj.properties) {
-    if (p.type !== "Property") return void 0;
-    const key = keyNameOf(p);
-    if (key === void 0) return void 0;
-    const entry = { key, value: stringValueOf(p) ?? null };
-    const seen = at.get(key);
-    if (seen === void 0) {
-      at.set(key, out.length);
-      out.push(entry);
-    } else out[seen] = entry;
-  }
-  return out;
+	const alias = propOf(kitConfig, "alias");
+	if (!alias) return [];
+	const obj = unwrapToObjectExpression(alias.value, bindings);
+	if (!obj) return void 0;
+	const out = [];
+	const at = /* @__PURE__ */ new Map();
+	for (const p of obj.properties) {
+		if (p.type !== "Property") return void 0;
+		const key = keyNameOf(p);
+		if (key === void 0) return void 0;
+		const entry = {
+			key,
+			value: stringValueOf(p) ?? null
+		};
+		const seen = at.get(key);
+		if (seen === void 0) {
+			at.set(key, out.length);
+			out.push(entry);
+		} else out[seen] = entry;
+	}
+	return out;
 }
+/**
+* `kit.files.lib` in the three states documented on `RawKitAliases.filesLib`: `undefined` when
+* there is no `lib` property to read (including when `files` itself doesn't resolve to an object
+* literal), `null` when `lib` exists but is not statically a string, else the string.
+*/
 function filesLibOf(kitConfig, bindings) {
-  const files = propOf(kitConfig, "files");
-  const obj = files ? unwrapToObjectExpression(files.value, bindings) : void 0;
-  const lib = obj ? propOf(obj, "lib") : void 0;
-  if (!lib) return void 0;
-  return stringValueOf(lib) ?? null;
+	const files = propOf(kitConfig, "files");
+	const obj = files ? unwrapToObjectExpression(files.value, bindings) : void 0;
+	const lib = obj ? propOf(obj, "lib") : void 0;
+	if (!lib) return void 0;
+	return stringValueOf(lib) ?? null;
 }
+/** `kit.alias` and `kit.files.lib` from a `svelte.config.{js,ts}` source. */
 function findKitAliasesInSvelteConfig(source) {
-  const program = programOf(source, "svelte.config.js");
-  const config = program ? resolveConfigObject(program) : void 0;
-  if (!program || !config) return { entries: [] };
-  const bindings = collectTopLevelBindings(program);
-  const kit = propOf(config, "kit");
-  const kitObj = kit ? unwrapToObjectExpression(kit.value, bindings) : void 0;
-  if (!kitObj) return { entries: [] };
-  const filesLib = filesLibOf(kitObj, bindings);
-  return { entries: aliasEntriesOf(kitObj, bindings), ...filesLib !== void 0 ? { filesLib } : {} };
+	const program = programOf(source, "svelte.config.js");
+	const config = program ? resolveConfigObject(program) : void 0;
+	if (!program || !config) return { entries: [] };
+	const bindings = collectTopLevelBindings(program);
+	const kit = propOf(config, "kit");
+	const kitObj = kit ? unwrapToObjectExpression(kit.value, bindings) : void 0;
+	if (!kitObj) return { entries: [] };
+	const filesLib = filesLibOf(kitObj, bindings);
+	return {
+		entries: aliasEntriesOf(kitObj, bindings),
+		...filesLib !== void 0 ? { filesLib } : {}
+	};
 }
+/**
+* The normalisation Kit applies to an alias value — `posixify`, then a trailing `/*` stripped —
+* plus the trailing-slash trim that Kit gets for free from `path.resolve` and this parser does
+* not (it works in project-relative strings and never resolves). Applied to the `$lib` entry
+* too, which Kit builds with neither step: `kit.files.lib` is a user-written string with the
+* same irregularities available to it.
+*/
 function normalizeAliasValue(value) {
-  const posix = value.replace(/\\/g, "/");
-  const noStar = posix.endsWith("/*") ? posix.slice(0, -2) : posix;
-  return noStar.replace(/\/+$/, "");
+	const posix = value.replace(/\\/g, "/");
+	return (posix.endsWith("/*") ? posix.slice(0, -2) : posix).replace(/\/+$/, "");
 }
+/**
+* Compile raw config values into Kit's ordered entry list: `$lib` first (from `kit.files.lib`,
+* else `src/lib`), then the user's entries in declaration order. Modes come from the DECLARED
+* key set — `key + '/*'` present makes the plain key exact — never from the subset whose values
+* happened to be readable. `raw.filesLib === null` (a `kit.files.lib` present but not statically a
+* string) compiles to an opaque `$lib` entry, `replacement: null` — `??` would otherwise collapse
+* that into the `src/lib` default, which is a wrong answer, not a missing one, for a project that
+* moved `$lib` to something this parser couldn't read.
+*/
 function compileKitAliases(raw) {
-  const filesLib = raw.filesLib === null ? null : normalizeAliasValue(raw.filesLib ?? "src/lib");
-  const out = [{ find: "$lib", replacement: filesLib, match: "prefix" }];
-  const entries = raw.entries ?? [];
-  const declared = new Set(entries.map((e) => e.key));
-  for (const { key, value } of entries) {
-    const star = key.endsWith("/*");
-    out.push({
-      find: star ? key.slice(0, -2) : key,
-      replacement: value === null ? null : normalizeAliasValue(value),
-      match: star ? "contents" : declared.has(`${key}/*`) ? "exact" : "prefix"
-    });
-  }
-  return out;
+	const out = [{
+		find: "$lib",
+		replacement: raw.filesLib === null ? null : normalizeAliasValue(raw.filesLib ?? "src/lib"),
+		match: "prefix"
+	}];
+	const entries = raw.entries ?? [];
+	const declared = new Set(entries.map((e) => e.key));
+	for (const { key, value } of entries) {
+		const star = key.endsWith("/*");
+		out.push({
+			find: star ? key.slice(0, -2) : key,
+			replacement: value === null ? null : normalizeAliasValue(value),
+			match: star ? "contents" : declared.has(`${key}/*`) ? "exact" : "prefix"
+		});
+	}
+	return out;
 }
+/**
+* The project's compiled alias list, following SvelteKit's config precedence: options passed to
+* the `sveltekit()` Vite plugin make `svelte.config` irrelevant (Kit logs "svelte.config.js is
+* ignored when options are passed via your Vite config"), so aliases are read from
+* `svelte.config` only when the Vite config carries no plugin config. Reading `kit.alias` out of
+* a plugin config is deliberately not done — that costs reach, not correctness, and such a
+* project keeps the resolver's default `$lib` behaviour. Undefined means "no config was read".
+*/
 function resolveKitAliases(viteConfig, svelteConfig) {
-  if (viteConfig && findKitPathsBaseInViteConfig(viteConfig.source).kind !== "no-plugin-config") return void 0;
-  if (!svelteConfig) return void 0;
-  return compileKitAliases(findKitAliasesInSvelteConfig(svelteConfig.source));
+	if (viteConfig && findKitPathsBaseInViteConfig(viteConfig.source).kind !== "no-plugin-config") return void 0;
+	if (!svelteConfig) return void 0;
+	return compileKitAliases(findKitAliasesInSvelteConfig(svelteConfig.source));
 }
+/** Parse a config source to a program, or undefined when it cannot be parsed. */
 function programOf(source, filename) {
-  try {
-    return parseModuleProgram(source, filename).program ?? void 0;
-  } catch {
-    return void 0;
-  }
+	try {
+		return parseModuleProgram(source, filename).program ?? void 0;
+	} catch {
+		return;
+	}
 }
+/** `kit.paths.base` from a `svelte.config.{js,ts}` source. */
 function findKitPathsBaseInSvelteConfig(source) {
-  const program = programOf(source, "svelte.config.js");
-  if (!program) return void 0;
-  const config = resolveConfigObject(program);
-  if (!config) return void 0;
-  const bindings = collectTopLevelBindings(program);
-  const kit = propOf(config, "kit");
-  const kitObj = kit ? unwrapToObjectExpression(kit.value, bindings) : void 0;
-  return kitObj ? basePathOf(kitObj, bindings) : void 0;
+	const program = programOf(source, "svelte.config.js");
+	if (!program) return void 0;
+	const config = resolveConfigObject(program);
+	if (!config) return void 0;
+	const bindings = collectTopLevelBindings(program);
+	const kit = propOf(config, "kit");
+	const kitObj = kit ? unwrapToObjectExpression(kit.value, bindings) : void 0;
+	return kitObj ? basePathOf(kitObj, bindings) : void 0;
 }
+/**
+* Local names bound to `sveltekit` imported from '@sveltejs/kit/vite'. When no such import is
+* found (an unusual or unparsed import form), the bare name `sveltekit` is assumed — the call
+* shape is distinctive enough that a false match is not a realistic concern.
+*/
 function sveltekitLocalNames(program) {
-  const out = collectNamedImportAliases(program, "@sveltejs/kit/vite", /* @__PURE__ */ new Set(["sveltekit"]));
-  if (out.size === 0) out.add("sveltekit");
-  return out;
+	const out = collectNamedImportAliases(program, "@sveltejs/kit/vite", /* @__PURE__ */ new Set(["sveltekit"]));
+	if (out.size === 0) out.add("sveltekit");
+	return out;
 }
+/** SvelteKit config passed to the `sveltekit()` plugin in a Vite config source (since Kit 2.62). */
 function findKitPathsBaseInViteConfig(source) {
-  const none = { kind: "no-plugin-config" };
-  const program = programOf(source, "vite.config.ts");
-  if (!program) return none;
-  const config = resolveConfigObject(program);
-  if (!config) return none;
-  const bindings = collectTopLevelBindings(program);
-  const plugins = propOf(config, "plugins");
-  const pluginsValue = plugins ? unwrapTs(plugins.value) : void 0;
-  if (pluginsValue?.type !== "ArrayExpression") return none;
-  const locals = sveltekitLocalNames(program);
-  for (const el of pluginsValue.elements) {
-    if (!el || el.type === "SpreadElement") continue;
-    const call = unwrapTs(el);
-    if (call.type !== "CallExpression") continue;
-    if (call.callee.type !== "Identifier" || !locals.has(call.callee.name)) continue;
-    const arg = call.arguments[0];
-    if (arg === void 0) return none;
-    const kitConfig = unwrapToObjectExpression(arg, bindings);
-    if (!kitConfig) return { kind: "unresolvable" };
-    const base = basePathOf(kitConfig, bindings);
-    return base ? { kind: "resolved", base } : { kind: "resolved" };
-  }
-  return none;
+	const none = { kind: "no-plugin-config" };
+	const program = programOf(source, "vite.config.ts");
+	if (!program) return none;
+	const config = resolveConfigObject(program);
+	if (!config) return none;
+	const bindings = collectTopLevelBindings(program);
+	const plugins = propOf(config, "plugins");
+	const pluginsValue = plugins ? unwrapTs(plugins.value) : void 0;
+	if (pluginsValue?.type !== "ArrayExpression") return none;
+	const locals = sveltekitLocalNames(program);
+	for (const el of pluginsValue.elements) {
+		if (!el || el.type === "SpreadElement") continue;
+		const call = unwrapTs(el);
+		if (call.type !== "CallExpression") continue;
+		if (call.callee.type !== "Identifier" || !locals.has(call.callee.name)) continue;
+		const arg = call.arguments[0];
+		if (arg === void 0) return none;
+		const kitConfig = unwrapToObjectExpression(arg, bindings);
+		if (!kitConfig) return { kind: "unresolvable" };
+		const base = basePathOf(kitConfig, bindings);
+		return base ? {
+			kind: "resolved",
+			base
+		} : { kind: "resolved" };
+	}
+	return none;
 }
+/**
+* The project's effective `kit.paths.base`, following SvelteKit's precedence: the `sveltekit()`
+* plugin config when it carries one, otherwise `svelte.config`. `file` is the config the base
+* came from (as passed in by the caller). Undefined means "no base path" — the gate stays shut.
+*/
 function resolveKitPathsBase(viteConfig, svelteConfig) {
-  if (viteConfig) {
-    const result = findKitPathsBaseInViteConfig(viteConfig.source);
-    if (result.kind === "unresolvable") return void 0;
-    if (result.kind === "resolved") {
-      return result.base ? { ...result.base, file: viteConfig.file } : void 0;
-    }
-  }
-  if (!svelteConfig) return void 0;
-  const base = findKitPathsBaseInSvelteConfig(svelteConfig.source);
-  return base ? { ...base, file: svelteConfig.file } : void 0;
+	if (viteConfig) {
+		const result = findKitPathsBaseInViteConfig(viteConfig.source);
+		if (result.kind === "unresolvable") return void 0;
+		if (result.kind === "resolved") return result.base ? {
+			...result.base,
+			file: viteConfig.file
+		} : void 0;
+	}
+	if (!svelteConfig) return void 0;
+	const base = findKitPathsBaseInSvelteConfig(svelteConfig.source);
+	return base ? {
+		...base,
+		file: svelteConfig.file
+	} : void 0;
 }
-
-// src/project-paths.ts
-var ROBOTS_SOURCE_PATHS = [
-  "static/robots.txt",
-  "src/routes/robots.txt/+server.ts",
-  "src/routes/robots.txt/+server.js"
+//#endregion
+//#region src/project-paths.ts
+/**
+* Source-file locations that satisfy the project-scope rules, shared by every
+* mode so the static (CLI) and rendered (plugin) collectors never drift. This
+* module is pure data: no I/O, no `node:` imports (design §8).
+*/
+/** Locations that satisfy the robots.txt project rule (seo/robots-txt). */
+const ROBOTS_SOURCE_PATHS = [
+	"static/robots.txt",
+	"src/routes/robots.txt/+server.ts",
+	"src/routes/robots.txt/+server.js"
 ];
-var SITEMAP_SOURCE_PATHS = [
-  "static/sitemap.xml",
-  "src/routes/sitemap.xml/+server.ts",
-  "src/routes/sitemap.xml/+server.js"
+/** Locations that satisfy the sitemap.xml project rule (seo/sitemap-xml). */
+const SITEMAP_SOURCE_PATHS = [
+	"static/sitemap.xml",
+	"src/routes/sitemap.xml/+server.ts",
+	"src/routes/sitemap.xml/+server.js"
 ];
-var VITE_CONFIG_FILES = [
-  "vite.config.js",
-  "vite.config.mjs",
-  "vite.config.ts",
-  "vite.config.cjs",
-  "vite.config.mts",
-  "vite.config.cts"
+/** Vite's own config resolution order — only the first existing file is the one Vite loads. */
+const VITE_CONFIG_FILES = [
+	"vite.config.js",
+	"vite.config.mjs",
+	"vite.config.ts",
+	"vite.config.cjs",
+	"vite.config.mts",
+	"vite.config.cts"
 ];
-var SVELTE_CONFIG_FILES = ["svelte.config.js", "svelte.config.ts"];
-
-// src/runtime.ts
-var READ_CONCURRENCY = 64;
-function withReadLimit(readFile, limit = READ_CONCURRENCY) {
-  let active = 0;
-  const waiting = [];
-  const release = () => {
-    active--;
-    waiting.shift()?.();
-  };
-  return async (path) => {
-    if (active >= limit) await new Promise((resolve) => waiting.push(resolve));
-    active++;
-    try {
-      return await readFile(path);
-    } finally {
-      release();
-    }
-  };
+/** SvelteKit's config resolution order (`@sveltejs/kit` checks js before ts). */
+const SVELTE_CONFIG_FILES = ["svelte.config.js", "svelte.config.ts"];
+//#endregion
+//#region src/runtime.ts
+/**
+* How many file reads may be in flight at once. Analysis reads every `.svelte` file in a project
+* in parallel, which on a large project opens more descriptors than the process is allowed: at
+* `ulimit -n 1024` — a common container default — a 1 681-route project raised `EMFILE`, and
+* because a failed read lands in the same `catch` as a malformed component, 682 files were dropped
+* and the run still reported a normal score. The cap is what keeps the analysis whole.
+*
+* 64 is chosen to sit well under the stock 256 on macOS while leaving descriptors for everything
+* else the process holds open. It is not a throughput knob: reads are a few percent of the work.
+*/
+const READ_CONCURRENCY = 64;
+/**
+* `readFile` with at most `limit` reads in flight. A plain counter plus a queue of waiters —
+* deliberately not a dependency, and pure enough to live in core.
+*/
+function withReadLimit(readFile, limit = 64) {
+	let active = 0;
+	const waiting = [];
+	const release = () => {
+		active--;
+		waiting.shift()?.();
+	};
+	return async (path) => {
+		if (active >= limit) await new Promise((resolve) => waiting.push(resolve));
+		active++;
+		try {
+			return await readFile(path);
+		} finally {
+			release();
+		}
+	};
 }
-
-// src/engine.ts
+//#endregion
+//#region src/engine.ts
+/**
+* Run a set of rules against a shared context and collect their findings.
+* Rules are independent, so they run concurrently; results are flattened in
+* rule order for stable output. A rule that throws (sync or async) contributes
+* no results instead of taking the whole run down with it — dev tooling must
+* never throw — and is reported in `failedRules` instead.
+*/
 async function runRules(rules, ctx) {
-  const examined = {};
-  const perRule = await Promise.all(
-    rules.map(async (rule) => {
-      try {
-        return await rule.check({ ...ctx, recordExamined: (counts) => void (examined[rule.id] = counts) });
-      } catch (err) {
-        return { id: rule.id, message: err instanceof Error ? err.message : String(err) };
-      }
-    })
-  );
-  const results = [];
-  const failedRules = [];
-  for (const outcome of perRule) {
-    if (Array.isArray(outcome)) results.push(...outcome);
-    else failedRules.push(outcome);
-  }
-  return { results, examined, failedRules };
+	const examined = {};
+	const perRule = await Promise.all(rules.map(async (rule) => {
+		try {
+			return await rule.check({
+				...ctx,
+				recordExamined: (counts) => void (examined[rule.id] = counts)
+			});
+		} catch (err) {
+			return {
+				id: rule.id,
+				message: err instanceof Error ? err.message : String(err)
+			};
+		}
+	}));
+	const results = [];
+	const failedRules = [];
+	for (const outcome of perRule) if (Array.isArray(outcome)) results.push(...outcome);
+	else failedRules.push(outcome);
+	return {
+		results,
+		examined,
+		failedRules
+	};
 }
-
-// src/reporter/palette.ts
-var noColorPalette = {
-  bold: (s) => s,
-  dim: (s) => s,
-  red: (s) => s,
-  yellow: (s) => s,
-  green: (s) => s,
-  cyan: (s) => s
+//#endregion
+//#region src/reporter/palette.ts
+/** Default: no decoration (identity) — output is byte-identical to plain text. */
+const noColorPalette = {
+	bold: (s) => s,
+	dim: (s) => s,
+	red: (s) => s,
+	yellow: (s) => s,
+	green: (s) => s,
+	cyan: (s) => s
 };
+/** Green ≥ 90, yellow ≥ 70, red otherwise — for a 0–100 score. */
 function scoreColor(p, score) {
-  if (score >= 90) return p.green;
-  if (score >= 70) return p.yellow;
-  return p.red;
+	if (score >= 90) return p.green;
+	if (score >= 70) return p.yellow;
+	return p.red;
 }
-
-// src/reporter/console.ts
-var RULE = "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500";
-var SEVERITY_TITLE = {
-  critical: "Critical",
-  warning: "Warnings",
-  info: "Info"
+//#endregion
+//#region src/reporter/console.ts
+const RULE = "────────────────────────";
+const SEVERITY_TITLE = {
+	critical: "Critical",
+	warning: "Warnings",
+	info: "Info"
 };
-var CATEGORY_LABEL = {
-  seo: "SEO",
-  performance: "Performance",
-  correctness: "Correctness",
-  security: "Security",
-  architecture: "Architecture",
-  a11y: "Accessibility"
+const CATEGORY_LABEL = {
+	seo: "SEO",
+	performance: "Performance",
+	correctness: "Correctness",
+	security: "Security",
+	architecture: "Architecture",
+	a11y: "Accessibility"
 };
-var CATEGORY_ORDER = Object.keys(CATEGORY_LABEL);
-var categoryLabel = (c) => CATEGORY_LABEL[c];
-var MAX_RULE_GROUPS_PER_BUCKET = 5;
+const CATEGORY_ORDER = Object.keys(CATEGORY_LABEL);
+const categoryLabel = (c) => CATEGORY_LABEL[c];
+const MAX_RULE_GROUPS_PER_BUCKET = 5;
+/** Groups results by rule id, ranked by descending group size (most-affected rule first); ties broken by id for determinism. */
 function groupByRule(results) {
-  const groups = /* @__PURE__ */ new Map();
-  for (const r of results) {
-    const bucket = groups.get(r.id);
-    if (bucket) bucket.push(r);
-    else groups.set(r.id, [r]);
-  }
-  return [...groups.entries()].map(([id, rs]) => ({ id, results: rs })).sort((a, b) => b.results.length - a.results.length || a.id.localeCompare(b.id));
+	const groups = /* @__PURE__ */ new Map();
+	for (const r of results) {
+		const bucket = groups.get(r.id);
+		if (bucket) bucket.push(r);
+		else groups.set(r.id, [r]);
+	}
+	return [...groups.entries()].map(([id, rs]) => ({
+		id,
+		results: rs
+	})).sort((a, b) => b.results.length - a.results.length || a.id.localeCompare(b.id));
 }
 function scoreLine(p, label, { score, scoreModel }) {
-  const parts = [`route avg ${scoreModel.routeAverage}`];
-  if (scoreModel.sitePenalty > 0) parts.push(`site \u2212${scoreModel.sitePenalty}`);
-  if (scoreModel.criticalCap !== null) parts.push(`capped at ${scoreModel.criticalCap}: critical present`);
-  return `${label} Score: ${scoreColor(p, score)(`${score}/100`)}   ${p.dim(`(${parts.join(" \xB7 ")})`)}`;
+	const parts = [`route avg ${scoreModel.routeAverage}`];
+	if (scoreModel.sitePenalty > 0) parts.push(`site −${scoreModel.sitePenalty}`);
+	if (scoreModel.criticalCap !== null) parts.push(`capped at ${scoreModel.criticalCap}: critical present`);
+	return `${label} Score: ${scoreColor(p, score)(`${score}/100`)}   ${p.dim(`(${parts.join(" · ")})`)}`;
 }
-var MAX_ROUTES_BY_ROUTE = 10;
+const MAX_ROUTES_BY_ROUTE = 10;
 function byRouteTree(p, results, config, verbose) {
-  const routes = /* @__PURE__ */ new Map();
-  for (const r of results) {
-    if (r.route === void 0) continue;
-    if (!routes.has(r.route)) routes.set(r.route, []);
-    routes.get(r.route).push(r);
-  }
-  const scored = [...routes.entries()].map(([route, rs]) => ({
-    route,
-    rs,
-    score: computeScore(rs, config, { applyCriticalCap: false }).score
-  }));
-  scored.sort((a, b) => a.score - b.score || a.route.localeCompare(b.route));
-  const shown = verbose ? scored : scored.slice(0, MAX_ROUTES_BY_ROUTE);
-  const lines = [p.bold("By route"), p.dim(RULE)];
-  for (const { route, rs, score } of shown) {
-    lines.push(`${terminalSafe(route).padEnd(28)} ${scoreColor(p, score)(`${score}`)}`);
-    for (const r of rs.filter((x) => classify(x, config) === "fail")) {
-      lines.push(`    ${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
-    }
-  }
-  if (!verbose && scored.length > MAX_ROUTES_BY_ROUTE) {
-    const remaining = scored.slice(MAX_ROUTES_BY_ROUTE);
-    const avgScore = Math.floor(remaining.reduce((sum, r) => sum + r.score, 0) / remaining.length);
-    lines.push(
-      p.dim(
-        `\u2026and ${remaining.length} more route${remaining.length > 1 ? "s" : ""} (avg score ${avgScore}) \u2014 run with --verbose to see all`
-      )
-    );
-  }
-  lines.push("");
-  return lines;
+	const routes = /* @__PURE__ */ new Map();
+	for (const r of results) {
+		if (r.route === void 0) continue;
+		if (!routes.has(r.route)) routes.set(r.route, []);
+		routes.get(r.route).push(r);
+	}
+	const scored = [...routes.entries()].map(([route, rs]) => ({
+		route,
+		rs,
+		score: computeScore(rs, config, { applyCriticalCap: false }).score
+	}));
+	scored.sort((a, b) => a.score - b.score || a.route.localeCompare(b.route));
+	const shown = verbose ? scored : scored.slice(0, MAX_ROUTES_BY_ROUTE);
+	const lines = [p.bold("By route"), p.dim(RULE)];
+	for (const { route, rs, score } of shown) {
+		lines.push(`${terminalSafe(route).padEnd(28)} ${scoreColor(p, score)(`${score}`)}`);
+		for (const r of rs.filter((x) => classify(x, config) === "fail")) lines.push(`    ${p.red("✗")} ${r.id}  ${terminalSafe(r.message)}`);
+	}
+	if (!verbose && scored.length > MAX_ROUTES_BY_ROUTE) {
+		const remaining = scored.slice(MAX_ROUTES_BY_ROUTE);
+		const avgScore = Math.floor(remaining.reduce((sum, r) => sum + r.score, 0) / remaining.length);
+		lines.push(p.dim(`…and ${remaining.length} more route${remaining.length > 1 ? "s" : ""} (avg score ${avgScore}) — run with --verbose to see all`));
+	}
+	lines.push("");
+	return lines;
 }
+/**
+* Render results as a console report string (design §7). Pure: returns a string,
+* the caller is responsible for printing. Prepends a score header; when byRoute is
+* set, adds a per-route score tree.
+*/
 function formatConsoleReport(results, config, options = {}) {
-  const p = options.palette ?? noColorPalette;
-  const summary = summarize(results, config);
-  const { health, categories: byCat } = computeHealth(results, config);
-  const present = CATEGORY_ORDER.filter((c) => byCat[c] !== void 0);
-  const lines = [];
-  if (!options.omitHeader) {
-    lines.push(
-      p.bold(`Svelte Vitals  \xB7  ${options.mode ?? "static mode"}`),
-      "",
-      `${p.bold("Health:")} ${scoreColor(p, health)(`${health}/100`)}`
-    );
-  }
-  for (const c of present) {
-    lines.push(scoreLine(p, categoryLabel(c), byCat[c]));
-  }
-  lines.push("");
-  const SEVERITY_COLOR = {
-    critical: (s) => p.red(p.bold(s)),
-    warning: (s) => p.yellow(p.bold(s)),
-    info: (s) => p.dim(s)
-  };
-  const failures = results.filter((r) => classify(r, config) === "fail");
-  for (const severity of ["critical", "warning", "info"]) {
-    const bucket = failures.filter((r) => effectiveSeverity(r, config) === severity);
-    if (bucket.length === 0) continue;
-    lines.push(SEVERITY_COLOR[severity](`${SEVERITY_TITLE[severity]} (${bucket.length})`), p.dim(RULE));
-    if (options.verbose) {
-      for (const r of bucket) {
-        lines.push(`${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
-        if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
-        if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
-      }
-    } else {
-      const groups = groupByRule(bucket);
-      const shownGroups = groups.slice(0, MAX_RULE_GROUPS_PER_BUCKET);
-      for (const group of shownGroups) {
-        const r = group.results[0];
-        lines.push(`${p.red("\u2717")} ${r.id}  ${terminalSafe(r.message)}`);
-        if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
-        if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
-        if (group.results.length > 1) {
-          lines.push(p.dim(`            \u2026and ${group.results.length - 1} more`));
-        }
-      }
-      if (groups.length > MAX_RULE_GROUPS_PER_BUCKET) {
-        const remaining = groups.length - MAX_RULE_GROUPS_PER_BUCKET;
-        lines.push(
-          p.dim(`\u2026and ${remaining} more rule${remaining > 1 ? "s" : ""} affected \u2014 run with --verbose to see all`)
-        );
-      }
-    }
-    lines.push("");
-  }
-  const passed = results.filter((r) => classify(r, config) !== "fail");
-  if (passed.length > 0) {
-    lines.push(p.bold(`Passed (${passed.length})`), p.dim(RULE));
-    if (options.verbose) {
-      for (const r of passed) {
-        const marker = classify(r, config) === "dynamic" ? p.cyan("  \u21AF dynamic") : "";
-        const where = r.location ?? r.route;
-        const suffix = where ? `  ${terminalSafe(where)}` : "";
-        lines.push(`${p.green("\u2713")} ${r.id}  ${terminalSafe(r.message)}${marker}${suffix}`);
-      }
-    }
-    lines.push("");
-  }
-  if (options.byRoute) lines.push(...byRouteTree(p, results, config, options.verbose ?? false));
-  if (options.verbose && summary.dynamic > 0) lines.push(p.dim("\u21AF = set dynamically (verified at runtime)."));
-  return lines.join("\n").replace(/\n+$/, "\n");
+	const p = options.palette ?? noColorPalette;
+	const summary = summarize(results, config);
+	const { health, categories: byCat } = computeHealth(results, config);
+	const present = CATEGORY_ORDER.filter((c) => byCat[c] !== void 0);
+	const lines = [];
+	if (!options.omitHeader) lines.push(p.bold(`Svelte Vitals  ·  ${options.mode ?? "static mode"}`), "", `${p.bold("Health:")} ${scoreColor(p, health)(`${health}/100`)}`);
+	for (const c of present) lines.push(scoreLine(p, categoryLabel(c), byCat[c]));
+	lines.push("");
+	const SEVERITY_COLOR = {
+		critical: (s) => p.red(p.bold(s)),
+		warning: (s) => p.yellow(p.bold(s)),
+		info: (s) => p.dim(s)
+	};
+	const failures = results.filter((r) => classify(r, config) === "fail");
+	for (const severity of [
+		"critical",
+		"warning",
+		"info"
+	]) {
+		const bucket = failures.filter((r) => effectiveSeverity(r, config) === severity);
+		if (bucket.length === 0) continue;
+		lines.push(SEVERITY_COLOR[severity](`${SEVERITY_TITLE[severity]} (${bucket.length})`), p.dim(RULE));
+		if (options.verbose) for (const r of bucket) {
+			lines.push(`${p.red("✗")} ${r.id}  ${terminalSafe(r.message)}`);
+			if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
+			if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
+		}
+		else {
+			const groups = groupByRule(bucket);
+			const shownGroups = groups.slice(0, MAX_RULE_GROUPS_PER_BUCKET);
+			for (const group of shownGroups) {
+				const r = group.results[0];
+				lines.push(`${p.red("✗")} ${r.id}  ${terminalSafe(r.message)}`);
+				if (r.route) lines.push(p.dim(`            ${terminalSafe(r.route)}`));
+				if (r.location) lines.push(p.dim(`            ${terminalSafe(r.location)}${r.line ? `:${r.line}` : ""}`));
+				if (group.results.length > 1) lines.push(p.dim(`            …and ${group.results.length - 1} more`));
+			}
+			if (groups.length > MAX_RULE_GROUPS_PER_BUCKET) {
+				const remaining = groups.length - MAX_RULE_GROUPS_PER_BUCKET;
+				lines.push(p.dim(`…and ${remaining} more rule${remaining > 1 ? "s" : ""} affected — run with --verbose to see all`));
+			}
+		}
+		lines.push("");
+	}
+	const passed = results.filter((r) => classify(r, config) !== "fail");
+	if (passed.length > 0) {
+		lines.push(p.bold(`Passed (${passed.length})`), p.dim(RULE));
+		if (options.verbose) for (const r of passed) {
+			const marker = classify(r, config) === "dynamic" ? p.cyan("  ↯ dynamic") : "";
+			const where = r.location ?? r.route;
+			const suffix = where ? `  ${terminalSafe(where)}` : "";
+			lines.push(`${p.green("✓")} ${r.id}  ${terminalSafe(r.message)}${marker}${suffix}`);
+		}
+		lines.push("");
+	}
+	if (options.byRoute) lines.push(...byRouteTree(p, results, config, options.verbose ?? false));
+	if (options.verbose && summary.dynamic > 0) lines.push(p.dim("↯ = set dynamically (verified at runtime)."));
+	return lines.join("\n").replace(/\n+$/, "\n");
 }
-
-// src/reporter/agent.ts
+//#endregion
+//#region src/reporter/agent.ts
+/** Render failing findings as an agent-actionable Markdown remediation document (issue #18). */
 function formatAgentReport(results, config) {
-  const failing = results.filter((r) => classify(r, config) === "fail");
-  const { health } = computeHealth(results, config);
-  const lines = ["# svelte-vitals \u2014 fixes", "", `Health: ${health}/100`, ""];
-  if (failing.length === 0) {
-    lines.push("No issues to fix.", "");
-    return lines.join("\n").replace(/\n+$/, "\n");
-  }
-  lines.push(
-    `${failing.length} issue(s) to fix, ordered most-severe first. Fix critical issues first; warning and info items improve SEO but do not fail the default build. Apply each fix below, then re-run \`svelte-vitals\` (or the build) to confirm each rule passes. Run \`svelte-vitals explain <rule-id>\` for any rule's rationale and options (works offline).`,
-    ""
-  );
-  const groups = /* @__PURE__ */ new Map();
-  for (const r of failing) {
-    const key = r.location ?? r.route ?? "(project)";
-    if (!groups.has(key)) groups.set(key, []);
-    groups.get(key).push(r);
-  }
-  const groupSeverity = (rs) => Math.min(...rs.map((r) => SEVERITY_RANK[effectiveSeverity(r, config)]));
-  const orderedGroups = [...groups.entries()].sort(
-    (a, b) => groupSeverity(a[1]) - groupSeverity(b[1]) || a[0].localeCompare(b[0])
-  );
-  for (const [loc, rs] of orderedGroups) {
-    rs.sort(
-      (x, y) => SEVERITY_RANK[effectiveSeverity(x, config)] - SEVERITY_RANK[effectiveSeverity(y, config)] || x.id.localeCompare(y.id)
-    );
-    lines.push(`## ${mdEscape(loc)}`, "");
-    for (const r of rs) {
-      lines.push(`### ${r.id} \xB7 ${mdEscape(r.message)} (${effectiveSeverity(r, config)})`);
-      if (r.fix) {
-        lines.push(`- Fix: ${mdEscape(r.fix.description)}`);
-        if (r.fix.snippet) lines.push("", "```" + (r.fix.lang ?? "svelte"), r.fix.snippet, "```");
-      } else if (r.recommendation) {
-        lines.push(`- Fix: ${mdEscape(r.recommendation)}`);
-      }
-      if (r.docsUrl) lines.push(`- Docs: ${r.docsUrl}`);
-      lines.push(`- Accept: re-run svelte-vitals; ${r.id} passes${r.route ? ` for ${mdEscape(r.route)}` : ""}.`, "");
-    }
-  }
-  return lines.join("\n").replace(/\n+$/, "\n");
+	const failing = results.filter((r) => classify(r, config) === "fail");
+	const { health } = computeHealth(results, config);
+	const lines = [
+		"# svelte-vitals — fixes",
+		"",
+		`Health: ${health}/100`,
+		""
+	];
+	if (failing.length === 0) {
+		lines.push("No issues to fix.", "");
+		return lines.join("\n").replace(/\n+$/, "\n");
+	}
+	lines.push(`${failing.length} issue(s) to fix, ordered most-severe first. Fix critical issues first; warning and info items improve SEO but do not fail the default build. Apply each fix below, then re-run \`svelte-vitals\` (or the build) to confirm each rule passes. Run \`svelte-vitals explain <rule-id>\` for any rule's rationale and options (works offline).`, "");
+	const groups = /* @__PURE__ */ new Map();
+	for (const r of failing) {
+		const key = r.location ?? r.route ?? "(project)";
+		if (!groups.has(key)) groups.set(key, []);
+		groups.get(key).push(r);
+	}
+	const groupSeverity = (rs) => Math.min(...rs.map((r) => SEVERITY_RANK[effectiveSeverity(r, config)]));
+	const orderedGroups = [...groups.entries()].sort((a, b) => groupSeverity(a[1]) - groupSeverity(b[1]) || a[0].localeCompare(b[0]));
+	for (const [loc, rs] of orderedGroups) {
+		rs.sort((x, y) => SEVERITY_RANK[effectiveSeverity(x, config)] - SEVERITY_RANK[effectiveSeverity(y, config)] || x.id.localeCompare(y.id));
+		lines.push(`## ${mdEscape(loc)}`, "");
+		for (const r of rs) {
+			lines.push(`### ${r.id} · ${mdEscape(r.message)} (${effectiveSeverity(r, config)})`);
+			if (r.fix) {
+				lines.push(`- Fix: ${mdEscape(r.fix.description)}`);
+				if (r.fix.snippet) lines.push("", "```" + (r.fix.lang ?? "svelte"), r.fix.snippet, "```");
+			} else if (r.recommendation) lines.push(`- Fix: ${mdEscape(r.recommendation)}`);
+			if (r.docsUrl) lines.push(`- Docs: ${r.docsUrl}`);
+			lines.push(`- Accept: re-run svelte-vitals; ${r.id} passes${r.route ? ` for ${mdEscape(r.route)}` : ""}.`, "");
+		}
+	}
+	return lines.join("\n").replace(/\n+$/, "\n");
 }
-
-// src/reporter/sarif.ts
+//#endregion
+//#region src/reporter/sarif.ts
+/** Render penalized findings as a SARIF 2.1.0 log string (issue #18, design slice 5). */
 function formatSarifReport(results, config, meta) {
-  const penalized = results.filter((r) => isPenalized(r.detection, config.treatDynamicAs));
-  const rules = [];
-  const ruleIndex = /* @__PURE__ */ new Map();
-  const sarifResults = penalized.map((r) => {
-    if (!ruleIndex.has(r.id)) {
-      const m = ruleMetaById(r.id);
-      const name = m?.title ?? r.id;
-      ruleIndex.set(r.id, rules.length);
-      rules.push({
-        id: r.id,
-        name,
-        shortDescription: { text: name },
-        helpUri: r.docsUrl ?? m?.docsUrl ?? docsUrlFor(r.id),
-        defaultConfiguration: { level: severityToSarifLevel(m?.severity ?? r.severity) }
-      });
-    }
-    const result = {
-      ruleId: r.id,
-      ruleIndex: ruleIndex.get(r.id),
-      level: severityToSarifLevel(effectiveSeverity(r, config)),
-      message: { text: messageText(r) },
-      partialFingerprints: {
-        "svelteVitals/v1": `${r.id}:${r.route ?? "project"}${r.line !== void 0 ? `:${r.location ?? ""}:${r.line}` : ""}`
-      }
-    };
-    if (r.location) {
-      result.locations = [
-        {
-          physicalLocation: {
-            artifactLocation: { uri: r.location },
-            ...r.line !== void 0 ? { region: { startLine: r.line } } : {}
-          }
-        }
-      ];
-    }
-    return result;
-  });
-  const log = {
-    $schema: "https://json.schemastore.org/sarif-2.1.0.json",
-    version: "2.1.0",
-    runs: [
-      {
-        tool: {
-          driver: {
-            name: "svelte-vitals",
-            informationUri: "https://oekazuma.github.io/svelte-vitals",
-            version: meta.version,
-            rules
-          }
-        },
-        results: sarifResults
-      }
-    ]
-  };
-  return JSON.stringify(log, null, 2);
+	const penalized = results.filter((r) => isPenalized(r.detection, config.treatDynamicAs));
+	const rules = [];
+	const ruleIndex = /* @__PURE__ */ new Map();
+	const sarifResults = penalized.map((r) => {
+		if (!ruleIndex.has(r.id)) {
+			const m = ruleMetaById(r.id);
+			const name = m?.title ?? r.id;
+			ruleIndex.set(r.id, rules.length);
+			rules.push({
+				id: r.id,
+				name,
+				shortDescription: { text: name },
+				helpUri: r.docsUrl ?? m?.docsUrl ?? docsUrlFor(r.id),
+				defaultConfiguration: { level: severityToSarifLevel(m?.severity ?? r.severity) }
+			});
+		}
+		const result = {
+			ruleId: r.id,
+			ruleIndex: ruleIndex.get(r.id),
+			level: severityToSarifLevel(effectiveSeverity(r, config)),
+			message: { text: messageText(r) },
+			partialFingerprints: { "svelteVitals/v1": `${r.id}:${r.route ?? "project"}${r.line !== void 0 ? `:${r.location ?? ""}:${r.line}` : ""}` }
+		};
+		if (r.location) result.locations = [{ physicalLocation: {
+			artifactLocation: { uri: r.location },
+			...r.line !== void 0 ? { region: { startLine: r.line } } : {}
+		} }];
+		return result;
+	});
+	const log = {
+		$schema: "https://json.schemastore.org/sarif-2.1.0.json",
+		version: "2.1.0",
+		runs: [{
+			tool: { driver: {
+				name: "svelte-vitals",
+				informationUri: "https://oekazuma.github.io/svelte-vitals",
+				version: meta.version,
+				rules
+			} },
+			results: sarifResults
+		}]
+	};
+	return JSON.stringify(log, null, 2);
 }
-
-// src/reporter/app-shell.ts
-var BAND_COLOR = {
-  good: "#2FA968",
-  warn: "#E8A317",
-  poor: "#E5484D"
+//#endregion
+//#region src/reporter/app-shell.ts
+const BAND_COLOR = {
+	good: "#2FA968",
+	warn: "#E8A317",
+	poor: "#E5484D"
 };
 function scoreBand(score) {
-  return score >= 90 ? "good" : score >= 50 ? "warn" : "poor";
+	return score >= 90 ? "good" : score >= 50 ? "warn" : "poor";
 }
 function escapeHtml(s) {
-  return s.replace(
-    /[&<>"']/g,
-    (c) => c === "&" ? "&amp;" : c === "<" ? "&lt;" : c === ">" ? "&gt;" : c === '"' ? "&quot;" : "&#39;"
-  );
+	return s.replace(/[&<>"']/g, (c) => c === "&" ? "&amp;" : c === "<" ? "&lt;" : c === ">" ? "&gt;" : c === "\"" ? "&quot;" : "&#39;");
 }
+/**
+* Return the URL only when it uses a safe http/https scheme, else null.
+* Guards a finding's `docsUrl` against `javascript:`/`data:` hrefs — escapeHtml
+* neutralizes attribute breakout but not a malicious scheme. Browsers strip
+* ASCII whitespace (tab/newline/CR) from a URL before resolving its scheme (so
+* `java\tscript:` runs as `javascript:`), so strip whitespace first; anything not
+* plainly http(s):// afterward is rejected. Pure string work — no `URL` global,
+* keeping core runtime-agnostic and lib-minimal.
+*/
 function safeHref(url) {
-  const normalized = url.replace(/\s/g, "").toLowerCase();
-  return /^https?:\/\//.test(normalized) ? url : null;
+	const normalized = url.replace(/\s/g, "").toLowerCase();
+	return /^https?:\/\//.test(normalized) ? url : null;
 }
+/**
+* JSON.stringify escapes `"` inside string values but not `<` or the JS line terminators
+* U+2028/U+2029 — all three matter once the result is embedded inside an inline
+* <script type="application/json"> element: an unescaped `<\/script>` in any finding-derived
+* string (route path, location, recommendation, fix snippet, title) would close the tag
+* early, and U+2028/U+2029 can still break some script-parsing environments.
+*/
 function embedJson(value) {
-  return JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
+	return JSON.stringify(value).replace(/</g, "\\u003c").replace(/\u2028/g, "\\u2028").replace(/\u2029/g, "\\u2029");
 }
+/**
+* The client script renders `docsUrl` straight into an <a href>, so a malicious scheme
+* (`javascript:`, `data:`) must never reach the embedded snapshot — `buildHtmlDocument`
+* is a public API fed loosely-typed reports. Sanitized server-side once, here.
+*/
 function sanitizeDocsUrl(issue) {
-  if (issue.docsUrl === void 0) return issue;
-  if (safeHref(issue.docsUrl) !== null) return issue;
-  return { ...issue, docsUrl: void 0 };
+	if (issue.docsUrl === void 0) return issue;
+	if (safeHref(issue.docsUrl) !== null) return issue;
+	return {
+		...issue,
+		docsUrl: void 0
+	};
 }
 function sanitizeReport(report) {
-  return {
-    ...report,
-    routes: report.routes.map((route) => ({ ...route, issues: route.issues.map(sanitizeDocsUrl) })),
-    siteIssues: report.siteIssues.map(sanitizeDocsUrl)
-  };
+	return {
+		...report,
+		routes: report.routes.map((route) => ({
+			...route,
+			issues: route.issues.map(sanitizeDocsUrl)
+		})),
+		siteIssues: report.siteIssues.map(sanitizeDocsUrl)
+	};
 }
-var APP_STYLE = `
+/**
+* Hand-authored CSS for the master/detail shell. Reuses the same design-token
+* names/values as the rest of the project, and adds a dark theme via
+* `:root[data-theme="dark"]` plus a `prefers-color-scheme` fallback for a
+* first-ever visit with no stored preference.
+*/
+const APP_STYLE = `
 :root{--ground:#f6f7f9;--panel:#fff;--ink:#0c1322;--muted:#5a6472;--faint:#8c95a3;--line:#e4e7ec;--line-strong:#d3d8e0;--accent:#ff3e00;--good:#2fa968;--warn:#e8a317;--poor:#e5484d;--code-bg:#0e1525;--code-ink:#e7ecf4;--active-bg:#0c1322;--active-ink:#fff;--mono:ui-monospace,"SF Mono","JetBrains Mono",Menlo,Consolas,monospace;--sans:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif}
 :root[data-theme="dark"]{--ground:#0b0e14;--panel:#12161f;--ink:#e7ecf4;--muted:#9aa4b2;--faint:#6b7484;--line:#232838;--line-strong:#2d3345;--code-bg:#05070c;--code-ink:#e7ecf4;--active-bg:#e7ecf4;--active-ink:#0b0e14}
 @media (prefers-color-scheme:dark){:root:not([data-theme="light"]){--ground:#0b0e14;--panel:#12161f;--ink:#e7ecf4;--muted:#9aa4b2;--faint:#6b7484;--line:#232838;--line-strong:#2d3345;--code-bg:#05070c;--code-ink:#e7ecf4;--active-bg:#e7ecf4;--active-ink:#0b0e14}}
@@ -1039,7 +1118,7 @@ body{background:var(--ground);color:var(--ink);font-family:var(--sans);line-heig
 .dv-ai-prompt{margin-top:12px;border:1px solid var(--line);border-radius:8px;overflow:hidden}
 .dv-ai-prompt>summary{cursor:pointer;list-style:none;padding:8px 12px;font-size:12px;font-weight:600;color:var(--muted);display:flex;align-items:center;gap:6px;user-select:none}
 .dv-ai-prompt>summary::-webkit-details-marker{display:none}
-.dv-ai-prompt>summary::before{content:"\u25B8";display:inline-block;transition:transform .15s ease}
+.dv-ai-prompt>summary::before{content:"▸";display:inline-block;transition:transform .15s ease}
 .dv-ai-prompt[open]>summary::before{transform:rotate(90deg)}
 .dv-ai-prompt-body{padding:0 12px 12px;display:flex;flex-direction:column;gap:8px}
 .dv-ai-prompt-pre{margin:0;padding:10px 12px;background:var(--code-bg);color:var(--code-ink);border-radius:8px;font-family:var(--mono);font-size:12px;line-height:1.6;white-space:pre-wrap;word-break:break-word;max-height:280px;overflow-y:auto}
@@ -1050,13 +1129,22 @@ body{background:var(--ground);color:var(--ink);font-family:var(--sans);line-heig
 @media (max-width:640px){.dv-app{grid-template-columns:1fr;grid-template-areas:"top" "main"}.dv-menu-toggle{display:inline-flex}.dv-sidebar{position:fixed;inset:0 20% 0 0;transform:translateX(-100%);transition:transform .2s ease;z-index:10}.dv-sidebar.open{transform:translateX(0)}}
 @media (prefers-reduced-motion:reduce){*{transition:none!important}}
 `;
-var APP_SCRIPT = `
+/**
+* Hand-authored client script for the shell — no bundler, no framework. Parses the
+* AppSnapshot embedded by renderAppShell, then owns all rendering: sidebar
+* (search/sort/route list) and detail pane (Overview or a selected route). When the
+* snapshot says `live`, it additionally re-fetches /data.json on every SSE `update`
+* and on the EventSource's `open` event (covers the initial connection and every
+* auto-reconnect, since EventSource replays no missed events) — discarding any
+* response whose `sequence` isn't newer than what's already rendered.
+*/
+const APP_SCRIPT = `
 (function(){
   var BAND_COLOR = { good: '#2fa968', warn: '#e8a317', poor: '#e5484d' };
   var CATEGORY_NAMES = ${JSON.stringify(CATEGORY_LABEL)};
   function scoreBand(score) { return score >= 90 ? 'good' : score >= 50 ? 'warn' : 'poor'; }
 
-  // Same mark as the docs site's hero wordmark (docs/public/wordmark.svg) \u2014 an inline
+  // Same mark as the docs site's hero wordmark (docs/public/wordmark.svg) — an inline
   // copy, not an <img src>, since the dashboard is a single self-contained HTML response
   // with no other static assets to serve alongside it. Fixed brand colors (not CSS custom
   // properties), matching the docs usage: the wordmark reads the same in both themes.
@@ -1157,12 +1245,12 @@ var APP_SCRIPT = `
     return pre;
   }
 
-  // Plain-text, copy-pasteable prompt for a single finding \u2014 same ingredients as the
+  // Plain-text, copy-pasteable prompt for a single finding — same ingredients as the
   // agent reporter's per-finding block (rule id, location, recommendation, fix, docs),
   // reshaped for a standalone request rather than a whole-project remediation doc.
   function buildAiPrompt(issue, route) {
     var lines = ['Fix this svelte-vitals finding:', ''];
-    lines.push('- Rule: ' + issue.id + ' \u2014 ' + issue.title + ' (' + issue.severity + ')');
+    lines.push('- Rule: ' + issue.id + ' — ' + issue.title + ' (' + issue.severity + ')');
     if (route) lines.push('- Route: ' + route);
     if (issue.location) {
       lines.push('- Location: ' + issue.location + (issue.line !== undefined ? ':' + issue.line : ''));
@@ -1267,7 +1355,7 @@ var APP_SCRIPT = `
     var s = state.snapshot;
     var findings = s.report.routes.reduce(function (n, r) { return n + r.issues.length; }, 0) + s.report.siteIssues.length;
     var kids = [
-      h('button', { type: 'button', class: 'dv-menu-toggle', 'aria-label': 'Toggle route list', onclick: toggleSidebar, text: '\u2261' }, []),
+      h('button', { type: 'button', class: 'dv-menu-toggle', 'aria-label': 'Toggle route list', onclick: toggleSidebar, text: '≡' }, []),
       brandEl(),
       h('div', { class: 'dv-meta' }, [
         h('span', { text: 'v' + s.meta.version }, []),
@@ -1276,9 +1364,9 @@ var APP_SCRIPT = `
         h('span', { text: findings + ' findings' }, [])
       ].filter(Boolean)),
       h('div', { class: 'dv-status' }, [
-        s.live && s.analyzing ? h('span', { class: 'dv-analyzing', text: 'Analyzing\u2026' }, []) : null,
+        s.live && s.analyzing ? h('span', { class: 'dv-analyzing', text: 'Analyzing…' }, []) : null,
         s.live ? h('span', { class: 'dv-conn dv-conn-' + state.connection, title: state.connection }, []) : null,
-        h('button', { type: 'button', class: 'dv-theme-toggle', 'aria-label': 'Toggle dark mode', onclick: toggleTheme, text: state.theme === 'dark' ? '\u2600' : '\u263E' }, [])
+        h('button', { type: 'button', class: 'dv-theme-toggle', 'aria-label': 'Toggle dark mode', onclick: toggleTheme, text: state.theme === 'dark' ? '☀' : '☾' }, [])
       ].filter(Boolean))
     ];
     mount('dv-topbar', h('div', { class: 'dv-topbar-inner' }, kids));
@@ -1324,7 +1412,7 @@ var APP_SCRIPT = `
       kids.push(h('span', { class: 'dv-nav-meta' }, [
         badge ? h('span', { class: 'dv-badge dv-badge-' + badge, text: badge }, []) : null,
         h('span', { class: 'dv-nav-score', style: 'color:' + BAND_COLOR[band], text: String(route.score) }, []),
-        h('span', { class: 'dv-nav-sum', text: summary.length ? summary.join(' \xB7 ') : 'no issues' }, [])
+        h('span', { class: 'dv-nav-sum', text: summary.length ? summary.join(' · ') : 'no issues' }, [])
       ].filter(Boolean)));
     }
     return h('div', {
@@ -1351,7 +1439,7 @@ var APP_SCRIPT = `
     state.routeBySlug = {};
 
     // mount() clears and rebuilds the whole sidebar, including the <input> itself, so
-    // a naive re-render on every keystroke drops focus and cursor position \u2014 capture
+    // a naive re-render on every keystroke drops focus and cursor position — capture
     // them before rebuilding and restore them on the freshly-created input afterward.
     var prevSearch = document.querySelector('.dv-search');
     var hadFocus = !!prevSearch && document.activeElement === prevSearch;
@@ -1361,7 +1449,7 @@ var APP_SCRIPT = `
     var searchInput = h('input', {
       type: 'search',
       class: 'dv-search',
-      placeholder: 'Search routes or rules\u2026',
+      placeholder: 'Search routes or rules…',
       value: state.search,
       oninput: function (e) { state.search = e.target.value; renderSidebar(); }
     }, []);
@@ -1473,7 +1561,7 @@ var APP_SCRIPT = `
       var band = scoreBand(c.score);
       var weight = s.report.weights[cat];
       var name = CATEGORY_NAMES[cat] || cat;
-      // keys/affectedKeys are absent on hand-built snapshots (older fixtures, tests) \u2014
+      // keys/affectedKeys are absent on hand-built snapshots (older fixtures, tests) —
       // render nothing rather than "undefined of undefined". 0 affected of N keys is still
       // rendered: on a real project that's the signal a thin score can't give, that the
       // category is clean project-wide and not just on the one key it happened to look at
@@ -1505,7 +1593,7 @@ var APP_SCRIPT = `
     });
     var body = entries.length
       ? entries.map(function (e) { return renderFinding(e.issue, e.route); })
-      : [h('p', { class: 'dv-empty', text: totalCount ? 'No issues match the current filter.' : 'No issues found \u2014 nice work!' }, [])];
+      : [h('p', { class: 'dv-empty', text: totalCount ? 'No issues match the current filter.' : 'No issues found — nice work!' }, [])];
     var findings = h('section', { class: 'dv-section' }, [h('h2', { text: 'Findings' }, [])].concat(body));
     return h('div', { class: 'dv-overview' }, [gauge, h('div', { class: 'dv-cats' }, cats), chips, findings].filter(Boolean));
   }
@@ -1589,213 +1677,32 @@ var APP_SCRIPT = `
   boot();
 })();
 `;
+/** The shell HTML: empty sidebar/detail/topbar containers, the stylesheet, the
+* client script, and the snapshot embedded as JSON for the client's first paint. */
 function renderAppShell(snapshot) {
-  const safe = { ...snapshot, report: sanitizeReport(snapshot.report) };
-  const title = snapshot.live ? "svelte-vitals dashboard" : "svelte-vitals report";
-  return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${title}</title><style>${APP_STYLE}</style></head><body><div class="dv-app" id="dv-app"><header class="dv-topbar" id="dv-topbar"></header><nav class="dv-sidebar" id="dv-sidebar"></nav><main class="dv-detail" id="dv-detail"></main></div><script type="application/json" id="svelte-vitals-data">${embedJson(safe)}</script><script>${APP_SCRIPT}</script></body></html>`;
+	const safe = {
+		...snapshot,
+		report: sanitizeReport(snapshot.report)
+	};
+	return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${snapshot.live ? "svelte-vitals dashboard" : "svelte-vitals report"}</title><style>${APP_STYLE}</style></head><body><div class="dv-app" id="dv-app"><header class="dv-topbar" id="dv-topbar"></header><nav class="dv-sidebar" id="dv-sidebar"></nav><main class="dv-detail" id="dv-detail"></main></div><script type="application/json" id="svelte-vitals-data">${embedJson(safe)}<\/script><script>${APP_SCRIPT}<\/script></body></html>`;
 }
+/**
+* Static (non-live) document over a prebuilt JsonReport — kept as the public name the
+* html reporter has always exported.
+*/
 function buildHtmlDocument(report, meta) {
-  return renderAppShell({
-    report,
-    badges: {},
-    analyzing: false,
-    sequence: 0,
-    live: false,
-    meta
-  });
+	return renderAppShell({
+		report,
+		badges: {},
+		analyzing: false,
+		sequence: 0,
+		live: false,
+		meta
+	});
 }
+/** Render results as the self-contained HTML report (the CLI's `--reporter html`). */
 function formatHtmlReport(results, config, meta) {
-  return buildHtmlDocument(buildJsonReport(results, config, meta), meta);
+	return buildHtmlDocument(buildJsonReport(results, config, meta), meta);
 }
-export {
-  APP_SCRIPT,
-  APP_STYLE,
-  BAND_COLOR,
-  CHILD_NODE_KEYS,
-  IDREF_ATTRS,
-  LANDMARK_ROLES,
-  READ_CONCURRENCY,
-  ROBOTS_SOURCE_PATHS,
-  SITEMAP_SOURCE_PATHS,
-  SVELTE_CONFIG_FILES,
-  VITE_CONFIG_FILES,
-  a11yAccessibleName,
-  a11yDeprecatedAria,
-  a11yDeprecatedAttr,
-  a11yDeprecatedElement,
-  a11yDisallowedAriaProps,
-  a11yDisallowedElement,
-  a11yDoctype,
-  a11yDuplicateLandmark,
-  a11yIdDuplication,
-  a11yInteractiveNesting,
-  a11yInvalidAriaValue,
-  a11yInvalidRole,
-  a11yLabelHasControl,
-  a11yNoMissingIdRef,
-  a11yPermittedContents,
-  a11yPlaceholderLabelOption,
-  a11yRequireDatetime,
-  a11yRequiredAriaProps,
-  a11yRequiredElement,
-  a11yTopLevelLandmark,
-  a11yUnknownAriaAttribute,
-  a11yUseList,
-  allRules,
-  applyInlineDirectives,
-  applyOverrides,
-  applyRuleSeverities,
-  architectureComponentSize,
-  architectureDirectoryNaming,
-  architectureDocLinkTarget,
-  architecturePrivateScopeImport,
-  architecturePropCount,
-  architectureReservedDirectoryNames,
-  architectureReservedNamePlacement,
-  architectureRouteComponentImport,
-  architectureUnitEntryFile,
-  attrText,
-  attrTextOf,
-  attrValue,
-  attrValueOf,
-  buildHtmlDocument,
-  buildJsonReport,
-  classify,
-  collectComponentFacts,
-  collectKitModuleFacts,
-  collectSourceFiles,
-  collectSuppressions,
-  compileOverrides,
-  computeHealth,
-  computeScore,
-  correctnessBasePathNavigation,
-  correctnessCheckableBindValue,
-  correctnessEachIndexKey,
-  correctnessEachKey,
-  correctnessEffectAsDerived,
-  correctnessEffectAsOnMount,
-  correctnessInstanceBrowserGlobal,
-  correctnessNonreactiveBuiltinState,
-  correctnessOrphanEffect,
-  correctnessOrphanLifecycle,
-  correctnessPropMutation,
-  correctnessServerBrowserGlobal,
-  correctnessStalePropDerivation,
-  correctnessUnmutatedState,
-  decodeFragmentId,
-  defaultConfig,
-  defaultProject,
-  docsUrlFor,
-  effectiveSeverity,
-  emptyComponentFacts,
-  emptyKitModuleFacts,
-  escapeHtml,
-  explainRule,
-  findAttr,
-  findKitAliasesInSvelteConfig,
-  findKitPathsBaseInSvelteConfig,
-  findKitPathsBaseInViteConfig,
-  findMinifyDisabled,
-  foldOccurrences,
-  formatAgentReport,
-  formatConsoleReport,
-  formatFailedRuleWarning,
-  formatGithubReport,
-  formatHtmlReport,
-  formatJsonReport,
-  formatMarkdownReport,
-  formatSarifReport,
-  hasFailureAtOrAbove,
-  headTagRule,
-  imageRule,
-  intOption,
-  isMentionedAnywhere,
-  isPenalized,
-  isTopFragment,
-  lineOf,
-  linkRule,
-  listOption,
-  mapOption,
-  noColorPalette,
-  overrideMatches,
-  parseComponentFacts,
-  parseKitModuleFacts,
-  parseSvelte,
-  performanceFontPreloadCrossorigin,
-  performanceHeavyImport,
-  performanceImageDimensions,
-  performanceImageLoadingHint,
-  performanceLcpImage,
-  performanceLoadWaterfall,
-  performanceMinifyDisabled,
-  performanceNamespaceImport,
-  performancePreconnect,
-  performancePreloadMissingAs,
-  performanceRenderBlockingScript,
-  performanceResponsiveImage,
-  performanceSequentialAwaits,
-  performanceStateRaw,
-  renderAppShell,
-  resolveKitAliases,
-  resolveKitPathsBase,
-  resolveRepoLocalPath,
-  resolveRuleOptions,
-  resolveRunesModuleSpecifier,
-  runRules,
-  safeHref,
-  scoreBand,
-  scoreColor,
-  scoresByCategory,
-  securityHandlerStateWrite,
-  securityJavascriptUrl,
-  securityRawHtml,
-  securityServerModuleState,
-  securitySharedStateImport,
-  selectRules,
-  seoCanonicalUrl,
-  seoCharset,
-  seoDescriptionLength,
-  seoDescriptionPresence,
-  seoDuplicateDescription,
-  seoDuplicateTitle,
-  seoHeadingLevelSkip,
-  seoHreflang,
-  seoHtmlLang,
-  seoImageAlt,
-  seoIndexability,
-  seoJsonLd,
-  seoJsonLdDateFormat,
-  seoJsonLdDeprecatedType,
-  seoJsonLdPlaceholder,
-  seoJsonLdRelativeUrl,
-  seoJsonLdRequiredProps,
-  seoJsonLdValidity,
-  seoOgDescription,
-  seoOgImage,
-  seoOgTitle,
-  seoOgUrl,
-  seoRobotsTxt,
-  seoSingleH1,
-  seoSitemapInRobots,
-  seoSitemapXml,
-  seoSsrDisabled,
-  seoTitleLength,
-  seoTitlePresence,
-  seoTwitterCard,
-  seoViewport,
-  settingOptions,
-  settingSeverity,
-  shouldSkipRangeCheck,
-  skippedFileWarnings,
-  splitTokens,
-  stripTextDirective,
-  summarize,
-  terminalSafe,
-  textFromNodes,
-  unknownDirectiveIds,
-  validateRuleOptions,
-  validateRuleSetting,
-  valueFromNodes,
-  withFailedRulesOff,
-  withReadLimit
-};
+//#endregion
+export { APP_SCRIPT, APP_STYLE, BAND_COLOR, CHILD_NODE_KEYS, IDREF_ATTRS, LANDMARK_ROLES, READ_CONCURRENCY, ROBOTS_SOURCE_PATHS, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, VITE_CONFIG_FILES, a11yAccessibleName, a11yDeprecatedAria, a11yDeprecatedAttr, a11yDeprecatedElement, a11yDisallowedAriaProps, a11yDisallowedElement, a11yDoctype, a11yDuplicateLandmark, a11yIdDuplication, a11yInteractiveNesting, a11yInvalidAriaValue, a11yInvalidRole, a11yLabelHasControl, a11yNoMissingIdRef, a11yPermittedContents, a11yPlaceholderLabelOption, a11yRequireDatetime, a11yRequiredAriaProps, a11yRequiredElement, a11yTopLevelLandmark, a11yUnknownAriaAttribute, a11yUnverifiedIdRef, a11yUseList, allRules, applyInlineDirectives, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, collectSuppressions, compileOverrides, computeHealth, computeScore, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, decodeFragmentId, defaultConfig, defaultProject, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, foldOccurrences, formatAgentReport, formatConsoleReport, formatFailedRuleWarning, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, isTopFragment, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, parseSvelte, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, skippedFileWarnings, splitTokens, stripTextDirective, summarize, terminalSafe, textFromNodes, unknownDirectiveIds, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff, withReadLimit };