@svelte-vitals/core 0.47.2 → 0.48.0

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { Ct as RuleSetting, Dt as TreatDynamicAs, Et as Severity, Ot as Value, St as RuleOverride, at as formatGithubReport, bt as Result, dt as summarize, ft as CATEGORIES, gt as Fix, ht as Detection, it as formatMarkdownReport, jt as defineConfig, mt as Config, n as RuleEvidence, o as ScoreModel, pt as Category, st as Summary, t as JsonReport, ut as hasFailureAtOrAbove, vt as Presence, wt as RuleSettingObject, xt as RuleOptions } from "./json-OdgY5Bpw.js";
+import { Ct as RuleSetting, Dt as TreatDynamicAs, Et as Severity, Ot as Value, St as RuleOverride, at as formatGithubReport, bt as Result, dt as summarize, ft as CATEGORIES, gt as Fix, ht as Detection, it as formatMarkdownReport, jt as defineConfig, mt as Config, n as RuleEvidence, o as ScoreModel, pt as Category, st as Summary, t as JsonReport, ut as hasFailureAtOrAbove, vt as Presence, wt as RuleSettingObject, xt as RuleOptions } from "./json-B551DazD.js";
 export { CATEGORIES, type Category, type Config, type Detection, type Fix, type JsonReport, type Presence, type Result, type RuleEvidence, type RuleOptions, type RuleOverride, type RuleSetting, type RuleSettingObject, type ScoreModel, type Severity, type Summary, type TreatDynamicAs, type Value, defineConfig, formatGithubReport, formatMarkdownReport, hasFailureAtOrAbove, summarize };

package/dist/index.js

@@ -1,2 +1,2 @@
-import { $n as hasFailureAtOrAbove, er as summarize, l as formatGithubReport, or as defineConfig, rr as CATEGORIES, t as formatMarkdownReport } from "./markdown-CUNuKq3Z.js";
+import { l as formatGithubReport, lr as defineConfig, nr as hasFailureAtOrAbove, or as CATEGORIES, rr as summarize, t as formatMarkdownReport } from "./markdown-BQwOMe_S.js";
 export { CATEGORIES, defineConfig, formatGithubReport, formatMarkdownReport, hasFailureAtOrAbove, summarize };

package/dist/internal.d.ts

@@ -1,4 +1,4 @@
-import { $ as HeadTag, A as formatFailedRuleWarning, At as defaultProject, B as IDREF_ATTRS, C as shouldSkipRangeCheck, D as applyOverrides, E as CompiledOverride, Et as Severity, F as withFailedRulesOff, Ft as OrphanEffectFact, G as isTopFragment, H as ResolvedA11y, I as KitModuleFacts, It as SourceSpan, J as HeadingInfo, K as splitTokens, L as A11yOccurrenceInfo, Lt as SuppressionDirective, M as selectRules, Mt as ComponentFacts, N as settingOptions, Nt as EachBlockFact, O as applyRuleSeverities, Ot as Value, P as settingSeverity, Pt as EffectFact, Q as HeadProvider, R as A11ySkipCause, Rt as skippedFileWarnings, S as resolveRuleOptions, T as validateRuleSetting, Tt as Scope, U as decodeFragmentId, V as LANDMARK_ROLES, W as foldOccurrences, X as ImageInfo, Y as ResolvedHeadings, Z as ResolvedImages, _ as RuleOptionsSpec, _t as KitAlias, a as HealthResult, at as formatGithubReport, b as listOption, bt as Result, c as ScoreResult, ct as classify, d as scoresByCategory, dt as summarize, et as ResolvedHead, f as Rule, g as RuleOptionSpec, gt as Fix, h as isPenalized, i as formatJsonReport, it as formatMarkdownReport, j as overrideMatches, k as compileOverrides, kt as defaultConfig, l as computeHealth, lt as effectiveSeverity, m as docsUrlFor, mt as Config, nt as Runtime, ot as Classification, p as RuleContext, pt as Category, q as stripTextDirective, r as buildJsonReport, rt as withReadLimit, s as ScoreOptions, t as JsonReport, tt as READ_CONCURRENCY, u as computeScore, ut as hasFailureAtOrAbove, v as intOption, w as validateRuleOptions, x as mapOption, y as isMentionedAnywhere, yt as Project, z as BranchStep } from "./json-OdgY5Bpw.js";
+import { $ as HeadTag, A as formatFailedRuleWarning, At as defaultProject, B as IDREF_ATTRS, C as shouldSkipRangeCheck, D as applyOverrides, E as CompiledOverride, Et as Severity, F as withFailedRulesOff, Ft as OrphanEffectFact, G as isTopFragment, H as ResolvedA11y, I as KitModuleFacts, It as SourceSpan, J as HeadingInfo, K as splitTokens, L as A11yOccurrenceInfo, Lt as SuppressionDirective, M as selectRules, Mt as ComponentFacts, N as settingOptions, Nt as EachBlockFact, O as applyRuleSeverities, Ot as Value, P as settingSeverity, Pt as EffectFact, Q as HeadProvider, R as A11ySkipCause, Rt as skippedFileWarnings, S as resolveRuleOptions, T as validateRuleSetting, Tt as Scope, U as decodeFragmentId, V as LANDMARK_ROLES, W as foldOccurrences, X as ImageInfo, Y as ResolvedHeadings, Z as ResolvedImages, _ as RuleOptionsSpec, _t as KitAlias, a as HealthResult, at as formatGithubReport, b as listOption, bt as Result, c as ScoreResult, ct as classify, d as scoresByCategory, dt as summarize, et as ResolvedHead, f as Rule, g as RuleOptionSpec, gt as Fix, h as isPenalized, i as formatJsonReport, it as formatMarkdownReport, j as overrideMatches, k as compileOverrides, kt as defaultConfig, l as computeHealth, lt as effectiveSeverity, m as docsUrlFor, mt as Config, nt as Runtime, ot as Classification, p as RuleContext, pt as Category, q as stripTextDirective, r as buildJsonReport, rt as withReadLimit, s as ScoreOptions, t as JsonReport, tt as READ_CONCURRENCY, u as computeScore, ut as hasFailureAtOrAbove, v as intOption, w as validateRuleOptions, x as mapOption, y as isMentionedAnywhere, yt as Project, z as BranchStep } from "./json-B551DazD.js";
 import { AST } from "svelte/compiler";
 //#region src/component-parse.d.ts
 /**
@@ -537,6 +537,17 @@ declare const correctnessNonreactiveBuiltinState: Rule;
  */
 declare const correctnessCheckableBindValue: Rule;
 //#endregion
+//#region src/rules/correctness/autoplay-muted.d.ts
+/**
+ * correctness/autoplay-muted — Chrome and Safari block autoplay with audio, and a blocked
+ * `<video autoplay>` does not error: it silently never starts. The author sees it work in dev
+ * (after interacting with the page, autoplay is often allowed for the session) and ships a
+ * video that stays frozen for real visitors. `muted` in any form (bare, `muted={expr}`,
+ * `bind:muted`, spread) passes — expression values are not evaluated, per issue #580's scope —
+ * and only a literal `autoplay` counts.
+ */
+declare const correctnessAutoplayMuted: Rule;
+//#endregion
 //#region src/rules/correctness/orphan-effect.d.ts
 declare const correctnessOrphanEffect: Rule;
 //#endregion
@@ -722,6 +733,11 @@ declare const performanceSequentialAwaits: Rule;
  */
 declare const performanceStateRaw: Rule;
 //#endregion
+//#region src/rules/perf/iframe-loading.d.ts
+/** Any literal `loading` value passes (the author made a choice); an expression value is
+ *  unknowable and passes; a spread could supply `loading` and passes. */
+declare const performanceIframeLoading: Rule;
+//#endregion
 //#region src/rules/a11y/invalid-role.d.ts
 declare const a11yInvalidRole: Rule;
 //#endregion
@@ -752,6 +768,18 @@ declare const a11yPlaceholderLabelOption: Rule;
 //#region src/rules/a11y/require-datetime.d.ts
 declare const a11yRequireDatetime: Rule;
 //#endregion
+//#region src/rules/a11y/positive-tabindex.d.ts
+/**
+ * Literal values only — an expression-valued `tabindex` is unknowable and passes. The
+ * Number()-based parse deliberately follows the Svelte compiler's a11y_positive_tabindex
+ * check so the scanner and the build agree (the docs page's Overlap section records the two
+ * divergences — bare `tabindex` and non-finite values, where this rule sides with the
+ * browser and stays silent). SVG elements are judged too, unlike the
+ * deprecated-* rules' `!inSvg` filter: SVG2 honours `tabindex` with identical focus-order
+ * semantics.
+ */
+declare const a11yPositiveTabindex: Rule;
+//#endregion
 //#region src/rules/a11y/deprecated-element.d.ts
 declare const a11yDeprecatedElement: Rule;
 //#endregion
@@ -1047,4 +1075,4 @@ declare function formatHtmlReport(results: Result[], config: Config, meta: {
   coreVersion?: string;
 }): string;
 //#endregion
-export { type A11yOccurrenceInfo, type A11ySkipCause, APP_SCRIPT, APP_STYLE, type AppSnapshot, BAND_COLOR, type BranchStep, CHILD_NODE_KEYS, type Classification, type CompiledOverride, type ComponentFacts, type ConsoleReportOptions, type DirectiveIndex, type EachBlockFact, type EffectFact, type FailedRule, type HeadProvider, type HeadTag, type HeadingInfo, type HealthResult, IDREF_ATTRS, type ImageInfo, type KitAlias, type KitModuleFacts, LANDMARK_ROLES, type OrphanEffectFact, type Palette, type Project, READ_CONCURRENCY, ROBOTS_SOURCE_PATHS, type RawKitAliases, type ResolvedA11y, type ResolvedHead, type ResolvedHeadings, type ResolvedImages, type RouteBadge, type Rule, type RuleContext, RuleInfo, RuleOptionInfo, type RuleOptionSpec, type RuleOptionsSpec, type Runtime, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, type Scope, type ScoreOptions, type ScoreResult, type SourceSpan, type SuppressionDirective, VITE_CONFIG_FILES, type ViteKitConfigResult, a11yAccessibleName, a11yDeprecatedAria, a11yDeprecatedAttr, a11yDeprecatedElement, a11yDisallowedAriaProps, a11yDisallowedElement, a11yDoctype, a11yDuplicateLandmark, a11yIdDuplication, a11yInteractiveNesting, a11yInvalidAriaValue, a11yInvalidRole, a11yLabelHasControl, a11yNoMissingIdRef, a11yPermittedContents, a11yPlaceholderLabelOption, a11yRequireDatetime, a11yRequiredAriaProps, a11yRequiredElement, a11yTopLevelLandmark, a11yUnknownAriaAttribute, a11yUnverifiedIdRef, a11yUseList, allRules, applyInlineDirectives, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, collectSuppressions, compileOverrides, computeHealth, computeScore, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, decodeFragmentId, defaultConfig, defaultProject, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, foldOccurrences, formatAgentReport, formatConsoleReport, formatFailedRuleWarning, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, isTopFragment, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, parseSvelte, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, skippedFileWarnings, splitTokens, stripTextDirective, summarize, terminalSafe, textFromNodes, unknownDirectiveIds, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff, withReadLimit };
+export { type A11yOccurrenceInfo, type A11ySkipCause, APP_SCRIPT, APP_STYLE, type AppSnapshot, BAND_COLOR, type BranchStep, CHILD_NODE_KEYS, type Classification, type CompiledOverride, type ComponentFacts, type ConsoleReportOptions, type DirectiveIndex, type EachBlockFact, type EffectFact, type FailedRule, type HeadProvider, type HeadTag, type HeadingInfo, type HealthResult, IDREF_ATTRS, type ImageInfo, type KitAlias, type KitModuleFacts, LANDMARK_ROLES, type OrphanEffectFact, type Palette, type Project, READ_CONCURRENCY, ROBOTS_SOURCE_PATHS, type RawKitAliases, type ResolvedA11y, type ResolvedHead, type ResolvedHeadings, type ResolvedImages, type RouteBadge, type Rule, type RuleContext, RuleInfo, RuleOptionInfo, type RuleOptionSpec, type RuleOptionsSpec, type Runtime, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, type Scope, type ScoreOptions, type ScoreResult, type SourceSpan, type SuppressionDirective, VITE_CONFIG_FILES, type ViteKitConfigResult, a11yAccessibleName, a11yDeprecatedAria, a11yDeprecatedAttr, a11yDeprecatedElement, a11yDisallowedAriaProps, a11yDisallowedElement, a11yDoctype, a11yDuplicateLandmark, a11yIdDuplication, a11yInteractiveNesting, a11yInvalidAriaValue, a11yInvalidRole, a11yLabelHasControl, a11yNoMissingIdRef, a11yPermittedContents, a11yPlaceholderLabelOption, a11yPositiveTabindex, a11yRequireDatetime, a11yRequiredAriaProps, a11yRequiredElement, a11yTopLevelLandmark, a11yUnknownAriaAttribute, a11yUnverifiedIdRef, a11yUseList, allRules, applyInlineDirectives, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, collectSuppressions, compileOverrides, computeHealth, computeScore, correctnessAutoplayMuted, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, decodeFragmentId, defaultConfig, defaultProject, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, foldOccurrences, formatAgentReport, formatConsoleReport, formatFailedRuleWarning, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, isTopFragment, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, parseSvelte, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceIframeLoading, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, skippedFileWarnings, splitTokens, stripTextDirective, summarize, terminalSafe, textFromNodes, unknownDirectiveIds, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff, withReadLimit };

package/dist/internal.js

@@ -1,4 +1,4 @@
-import { $ as parseInMemoryExports, $n as hasFailureAtOrAbove, $t as seoCharset, A as a11yPlaceholderLabelOption, An as settingSeverity, At as securityJavascriptUrl, B as performanceSequentialAwaits, Bn as imageRule, Bt as correctnessPropMutation, C as a11yPermittedContents, Cn as applyOverrides, Ct as textFromNodes, D as a11yDeprecatedAttr, Dn as overrideMatches, Dt as securitySharedStateImport, E as a11yDisallowedAriaProps, En as formatFailedRuleWarning, Et as architectureComponentSize, F as a11yInvalidAriaValue, Fn as performancePreloadMissingAs, Ft as correctnessOrphanLifecycle, G as architectureDocLinkTarget, Gn as seoOgTitle, Gt as correctnessEachKey, H as performanceMinifyDisabled, Hn as seoSitemapXml, Ht as correctnessEffectAsOnMount, I as a11yRequiredAriaProps, In as linkRule, It as correctnessOrphanEffect, J as architectureReservedDirectoryNames, Jn as seoDescriptionPresence, Jt as seoDuplicateDescription, K as architectureRouteComponentImport, Kn as seoOgImage, Kt as seoSsrDisabled, L as a11yUnknownAriaAttribute, Ln as performanceResponsiveImage, Lt as correctnessCheckableBindValue, M as a11yLabelHasControl, Mn as performanceRenderBlockingScript, Mt as correctnessInstanceBrowserGlobal, N as a11yAccessibleName, Nn as performanceLcpImage, Nt as correctnessServerBrowserGlobal, O as a11yDeprecatedElement, On as selectRules, Ot as securityServerModuleState, P as a11yInteractiveNesting, Pn as performanceFontPreloadCrossorigin, Pt as correctnessBasePathNavigation, Q as collectTopLevelBindings, Qn as effectiveSeverity, Qt as seoImageAlt, R as a11yInvalidRole, Rn as performanceImageLoadingHint, Rt as correctnessNonreactiveBuiltinState, S as a11yRequiredElement, Sn as validateRuleSetting, St as parseSvelte, T as a11yDeprecatedAria, Tn as compileOverrides, Tt as architecturePropCount, U as performanceNamespaceImport, Un as seoRobotsTxt, Ut as correctnessEffectAsDerived, V as performanceLoadWaterfall, Vn as seoHtmlLang, Vt as correctnessUnmutatedState, W as performanceHeavyImport, Wn as seoJsonLd, Wt as correctnessEachIndexKey, X as architectureUnitEntryFile, Xn as seoTitlePresence, Xt as seoSingleH1, Y as architectureDirectoryNaming, Yn as headTagRule, Yt as seoDuplicateTitle, Z as architecturePrivateScopeImport, Zn as classify, Zt as seoHreflang, _ as a11yNoMissingIdRef, _n as listOption, _t as attrTextOf, a as formatJsonReport, an as seoJsonLdRelativeUrl, ar as defaultProject, at as parseComponentFacts, b as a11yDuplicateLandmark, bn as shouldSkipRangeCheck, bt as findAttr, c as scoresByCategory, cn as seoSitemapInRobots, ct as IDREF_ATTRS, d as messageText, dn as seoOgDescription, dt as foldOccurrences, en as seoDescriptionLength, er as summarize, et as parseKitModuleFacts, f as ruleMetaById, fn as seoTwitterCard, ft as isTopFragment, g as a11yUnverifiedIdRef, gn as isMentionedAnywhere, gt as attrText, h as explainRule, hn as intOption, ht as CHILD_NODE_KEYS, i as buildJsonReport, in as seoJsonLdDateFormat, ir as defaultConfig, it as collectSuppressions, j as a11yUseList, jn as withFailedRulesOff, jt as securityRawHtml, k as a11yRequireDatetime, kn as settingOptions, kt as securityHandlerStateWrite, l as formatGithubReport, ln as seoViewport, lt as LANDMARK_ROLES, m as allRules, mn as performancePreconnect, mt as stripTextDirective, n as mdEscape, nn as seoJsonLdRequiredProps, nr as isPenalized, nt as resolveRunesModuleSpecifier, o as computeHealth, on as seoJsonLdDeprecatedType, ot as parseModuleProgram, p as severityToSarifLevel, pn as seoIndexability, pt as splitTokens, q as architectureReservedNamePlacement, qn as seoCanonicalUrl, qt as seoHeadingLevelSkip, r as terminalSafe, rn as seoJsonLdPlaceholder, rt as collectNamedImportAliases, s as computeScore, sn as seoJsonLdValidity, st as unwrapTs, t as formatMarkdownReport, tn as seoTitleLength, tr as docsUrlFor, tt as resolveRepoLocalPath, u as SEVERITY_RANK, un as seoOgUrl, ut as decodeFragmentId, v as a11yIdDuplication, vn as mapOption, vt as attrValue, w as a11yDisallowedElement, wn as applyRuleSeverities, wt as valueFromNodes, x as a11yDoctype, xn as validateRuleOptions, xt as lineOf, y as a11yTopLevelLandmark, yn as resolveRuleOptions, yt as attrValueOf, z as performanceStateRaw, zn as performanceImageDimensions, zt as correctnessStalePropDerivation } from "./markdown-CUNuKq3Z.js";
+import { $ as architecturePrivateScopeImport, $n as seoTitlePresence, $t as seoSingleH1, A as a11yRequireDatetime, An as overrideMatches, At as securityServerModuleState, B as performanceIframeLoading, Bn as performanceResponsiveImage, Bt as correctnessCheckableBindValue, C as a11yPermittedContents, Cn as shouldSkipRangeCheck, Ct as lineOf, D as a11yDeprecatedAttr, Dn as applyRuleSeverities, Dt as architecturePropCount, E as a11yDisallowedAriaProps, En as applyOverrides, Et as valueFromNodes, F as a11yInteractiveNesting, Fn as performanceRenderBlockingScript, Ft as correctnessServerBrowserGlobal, G as performanceNamespaceImport, Gn as seoSitemapXml, Gt as correctnessEffectAsOnMount, H as performanceSequentialAwaits, Hn as performanceImageDimensions, Ht as correctnessStalePropDerivation, I as a11yInvalidAriaValue, In as performanceLcpImage, It as correctnessBasePathNavigation, J as architectureRouteComponentImport, Jn as seoOgTitle, Jt as correctnessEachKey, K as performanceHeavyImport, Kn as seoRobotsTxt, Kt as correctnessEffectAsDerived, L as a11yRequiredAriaProps, Ln as performanceFontPreloadCrossorigin, Lt as correctnessOrphanLifecycle, M as a11yUseList, Mn as settingOptions, Mt as securityJavascriptUrl, N as a11yLabelHasControl, Nn as settingSeverity, Nt as securityRawHtml, O as a11yDeprecatedElement, On as compileOverrides, Ot as architectureComponentSize, P as a11yAccessibleName, Pn as withFailedRulesOff, Pt as correctnessInstanceBrowserGlobal, Q as architectureUnitEntryFile, Qn as headTagRule, Qt as seoDuplicateTitle, R as a11yUnknownAriaAttribute, Rn as performancePreloadMissingAs, Rt as correctnessOrphanEffect, S as a11yRequiredElement, Sn as resolveRuleOptions, St as findAttr, T as a11yDeprecatedAria, Tn as validateRuleSetting, Tt as textFromNodes, U as performanceLoadWaterfall, Un as imageRule, Ut as correctnessPropMutation, V as performanceStateRaw, Vn as performanceImageLoadingHint, Vt as correctnessNonreactiveBuiltinState, W as performanceMinifyDisabled, Wn as seoHtmlLang, Wt as correctnessUnmutatedState, X as architectureReservedDirectoryNames, Xn as seoCanonicalUrl, Xt as seoHeadingLevelSkip, Y as architectureReservedNamePlacement, Yn as seoOgImage, Yt as seoSsrDisabled, Z as architectureDirectoryNaming, Zn as seoDescriptionPresence, Zt as seoDuplicateDescription, _ as a11yNoMissingIdRef, _n as performancePreconnect, _t as CHILD_NODE_KEYS, a as formatJsonReport, an as seoJsonLdRequiredProps, ar as isPenalized, at as collectNamedImportAliases, b as a11yDuplicateLandmark, bn as listOption, bt as attrValue, c as scoresByCategory, cn as seoJsonLdRelativeUrl, cr as defaultProject, ct as parseModuleProgram, d as messageText, dn as seoSitemapInRobots, dt as LANDMARK_ROLES, en as seoHreflang, er as classify, et as collectTopLevelBindings, f as ruleMetaById, fn as seoViewport, ft as decodeFragmentId, g as a11yUnverifiedIdRef, gn as seoIndexability, gt as stripTextDirective, h as explainRule, hn as seoTwitterCard, ht as splitTokens, i as buildJsonReport, in as seoTitleLength, ir as docsUrlFor, it as resolveRunesModuleSpecifier, j as a11yPlaceholderLabelOption, jn as selectRules, jt as securityHandlerStateWrite, k as a11yPositiveTabindex, kn as formatFailedRuleWarning, kt as securitySharedStateImport, l as formatGithubReport, ln as seoJsonLdDeprecatedType, lt as unwrapTs, m as allRules, mn as seoOgDescription, mt as isTopFragment, n as mdEscape, nn as seoCharset, nr as hasFailureAtOrAbove, nt as parseKitModuleFacts, o as computeHealth, on as seoJsonLdPlaceholder, ot as collectSuppressions, p as severityToSarifLevel, pn as seoOgUrl, pt as foldOccurrences, q as architectureDocLinkTarget, qn as seoJsonLd, qt as correctnessEachIndexKey, r as terminalSafe, rn as seoDescriptionLength, rr as summarize, rt as resolveRepoLocalPath, s as computeScore, sn as seoJsonLdDateFormat, sr as defaultConfig, st as parseComponentFacts, t as formatMarkdownReport, tn as seoImageAlt, tr as effectiveSeverity, tt as parseInMemoryExports, u as SEVERITY_RANK, un as seoJsonLdValidity, ut as IDREF_ATTRS, v as a11yIdDuplication, vn as intOption, vt as attrText, w as a11yDisallowedElement, wn as validateRuleOptions, wt as parseSvelte, x as a11yDoctype, xn as mapOption, xt as attrValueOf, y as a11yTopLevelLandmark, yn as isMentionedAnywhere, yt as attrTextOf, z as a11yInvalidRole, zn as linkRule, zt as correctnessAutoplayMuted } from "./markdown-BQwOMe_S.js";
 //#region src/inline-directives.ts
 /** The directive silencing `r`, if one sits on its line and names its rule (or names nothing). */
 function directiveFor(index, r) {
@@ -1707,4 +1707,4 @@ function formatHtmlReport(results, config, meta) {
 	return buildHtmlDocument(buildJsonReport(results, config, meta), meta);
 }
 //#endregion
-export { APP_SCRIPT, APP_STYLE, BAND_COLOR, CHILD_NODE_KEYS, IDREF_ATTRS, LANDMARK_ROLES, READ_CONCURRENCY, ROBOTS_SOURCE_PATHS, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, VITE_CONFIG_FILES, a11yAccessibleName, a11yDeprecatedAria, a11yDeprecatedAttr, a11yDeprecatedElement, a11yDisallowedAriaProps, a11yDisallowedElement, a11yDoctype, a11yDuplicateLandmark, a11yIdDuplication, a11yInteractiveNesting, a11yInvalidAriaValue, a11yInvalidRole, a11yLabelHasControl, a11yNoMissingIdRef, a11yPermittedContents, a11yPlaceholderLabelOption, a11yRequireDatetime, a11yRequiredAriaProps, a11yRequiredElement, a11yTopLevelLandmark, a11yUnknownAriaAttribute, a11yUnverifiedIdRef, a11yUseList, allRules, applyInlineDirectives, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, collectSuppressions, compileOverrides, computeHealth, computeScore, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, decodeFragmentId, defaultConfig, defaultProject, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, foldOccurrences, formatAgentReport, formatConsoleReport, formatFailedRuleWarning, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, isTopFragment, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, parseSvelte, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, skippedFileWarnings, splitTokens, stripTextDirective, summarize, terminalSafe, textFromNodes, unknownDirectiveIds, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff, withReadLimit };
+export { APP_SCRIPT, APP_STYLE, BAND_COLOR, CHILD_NODE_KEYS, IDREF_ATTRS, LANDMARK_ROLES, READ_CONCURRENCY, ROBOTS_SOURCE_PATHS, SITEMAP_SOURCE_PATHS, SVELTE_CONFIG_FILES, VITE_CONFIG_FILES, a11yAccessibleName, a11yDeprecatedAria, a11yDeprecatedAttr, a11yDeprecatedElement, a11yDisallowedAriaProps, a11yDisallowedElement, a11yDoctype, a11yDuplicateLandmark, a11yIdDuplication, a11yInteractiveNesting, a11yInvalidAriaValue, a11yInvalidRole, a11yLabelHasControl, a11yNoMissingIdRef, a11yPermittedContents, a11yPlaceholderLabelOption, a11yPositiveTabindex, a11yRequireDatetime, a11yRequiredAriaProps, a11yRequiredElement, a11yTopLevelLandmark, a11yUnknownAriaAttribute, a11yUnverifiedIdRef, a11yUseList, allRules, applyInlineDirectives, applyOverrides, applyRuleSeverities, architectureComponentSize, architectureDirectoryNaming, architectureDocLinkTarget, architecturePrivateScopeImport, architecturePropCount, architectureReservedDirectoryNames, architectureReservedNamePlacement, architectureRouteComponentImport, architectureUnitEntryFile, attrText, attrTextOf, attrValue, attrValueOf, buildHtmlDocument, buildJsonReport, classify, collectComponentFacts, collectKitModuleFacts, collectSourceFiles, collectSuppressions, compileOverrides, computeHealth, computeScore, correctnessAutoplayMuted, correctnessBasePathNavigation, correctnessCheckableBindValue, correctnessEachIndexKey, correctnessEachKey, correctnessEffectAsDerived, correctnessEffectAsOnMount, correctnessInstanceBrowserGlobal, correctnessNonreactiveBuiltinState, correctnessOrphanEffect, correctnessOrphanLifecycle, correctnessPropMutation, correctnessServerBrowserGlobal, correctnessStalePropDerivation, correctnessUnmutatedState, decodeFragmentId, defaultConfig, defaultProject, docsUrlFor, effectiveSeverity, emptyComponentFacts, emptyKitModuleFacts, escapeHtml, explainRule, findAttr, findKitAliasesInSvelteConfig, findKitPathsBaseInSvelteConfig, findKitPathsBaseInViteConfig, findMinifyDisabled, foldOccurrences, formatAgentReport, formatConsoleReport, formatFailedRuleWarning, formatGithubReport, formatHtmlReport, formatJsonReport, formatMarkdownReport, formatSarifReport, hasFailureAtOrAbove, headTagRule, imageRule, intOption, isMentionedAnywhere, isPenalized, isTopFragment, lineOf, linkRule, listOption, mapOption, noColorPalette, overrideMatches, parseComponentFacts, parseKitModuleFacts, parseSvelte, performanceFontPreloadCrossorigin, performanceHeavyImport, performanceIframeLoading, performanceImageDimensions, performanceImageLoadingHint, performanceLcpImage, performanceLoadWaterfall, performanceMinifyDisabled, performanceNamespaceImport, performancePreconnect, performancePreloadMissingAs, performanceRenderBlockingScript, performanceResponsiveImage, performanceSequentialAwaits, performanceStateRaw, renderAppShell, resolveKitAliases, resolveKitPathsBase, resolveRepoLocalPath, resolveRuleOptions, resolveRunesModuleSpecifier, runRules, safeHref, scoreBand, scoreColor, scoresByCategory, securityHandlerStateWrite, securityJavascriptUrl, securityRawHtml, securityServerModuleState, securitySharedStateImport, selectRules, seoCanonicalUrl, seoCharset, seoDescriptionLength, seoDescriptionPresence, seoDuplicateDescription, seoDuplicateTitle, seoHeadingLevelSkip, seoHreflang, seoHtmlLang, seoImageAlt, seoIndexability, seoJsonLd, seoJsonLdDateFormat, seoJsonLdDeprecatedType, seoJsonLdPlaceholder, seoJsonLdRelativeUrl, seoJsonLdRequiredProps, seoJsonLdValidity, seoOgDescription, seoOgImage, seoOgTitle, seoOgUrl, seoRobotsTxt, seoSingleH1, seoSitemapInRobots, seoSitemapXml, seoSsrDisabled, seoTitleLength, seoTitlePresence, seoTwitterCard, seoViewport, settingOptions, settingSeverity, shouldSkipRangeCheck, skippedFileWarnings, splitTokens, stripTextDirective, summarize, terminalSafe, textFromNodes, unknownDirectiveIds, validateRuleOptions, validateRuleSetting, valueFromNodes, withFailedRulesOff, withReadLimit };

package/dist/{json-OdgY5Bpw.d.ts → json-B551DazD.d.ts}

@@ -284,6 +284,10 @@ interface ComponentFacts {
     line: number;
     text: string;
   }[];
+  /** `<video>` with a literal `autoplay` attribute and no `muted` in any form (correctness/autoplay-muted). */
+  videosAutoplayNoMuted?: {
+    line: number;
+  }[];
   /** Set when the file failed to read or parse and these facts are the empty fallback — the file was NOT analyzed. */
   parseFailed?: true;
   /** Set when the file could not be READ — an environment problem (permissions, a descriptor

package/dist/{markdown-CUNuKq3Z.js → markdown-BQwOMe_S.js}

@@ -2559,6 +2559,35 @@ const correctnessCheckableBindValue = componentRule({
 	}))
 });
 //#endregion
+//#region src/rules/correctness/autoplay-muted.ts
+/**
+* correctness/autoplay-muted — Chrome and Safari block autoplay with audio, and a blocked
+* `<video autoplay>` does not error: it silently never starts. The author sees it work in dev
+* (after interacting with the page, autoplay is often allowed for the session) and ships a
+* video that stays frozen for real visitors. `muted` in any form (bare, `muted={expr}`,
+* `bind:muted`, spread) passes — expression values are not evaluated, per issue #580's scope —
+* and only a literal `autoplay` counts.
+*/
+const correctnessAutoplayMuted = componentRule({
+	id: "correctness/autoplay-muted",
+	title: "Autoplay video without muted",
+	category: "correctness",
+	severity: "warning",
+	label: "Muted autoplay videos",
+	recommendation: "Add `muted` to every `<video autoplay>` (and typically `playsinline`, so iOS plays it inline instead of refusing or going fullscreen).",
+	rationale: "Browser autoplay policies block autoplay with audio: Chrome and Safari only honour `autoplay` when the video is muted (or the site has earned an autoplay allowance; a video with no audio track may also be allowed). A blocked autoplay does not throw — the video just never starts, so the page ships with a frozen poster frame for real visitors while working in development, where prior interaction often unlocks autoplay for the session. Adding `muted` is harmless even where autoplay would have been allowed.",
+	fix: {
+		description: "Add the muted attribute (and typically playsinline) to the autoplaying video.",
+		snippet: "<video autoplay muted playsinline src=\"/hero.mp4\"></video>",
+		lang: "svelte"
+	},
+	applies: (c) => (c.videosAutoplayNoMuted ?? []).length > 0,
+	bad: (c) => (c.videosAutoplayNoMuted ?? []).map((f) => ({
+		line: f.line,
+		message: "<video autoplay> without muted — browsers block audible autoplay, so the video silently never starts playing"
+	}))
+});
+//#endregion
 //#region src/rules/correctness/orphan-effect.ts
 const correctnessOrphanEffect = componentRule({
 	id: "correctness/orphan-effect",
@@ -3411,14 +3440,29 @@ function isInteractiveElement(tag, attrs) {
 		return false;
 	}
 	if ((tag === "audio" || tag === "video") && attrs.some((a) => a.name === "controls")) return true;
-	const tabindex = literalOf(attrs, "tabindex")?.trim();
-	if (tabindex) {
-		const n = Number(tabindex);
-		if (Number.isFinite(n) && n >= 0) return true;
-	}
+	const n = literalTabindexValue(literalOf(attrs, "tabindex"));
+	if (n !== void 0 && n >= 0) return true;
 	return hasRoleIn(attrs, INTERACTIVE_ROLES);
 }
 /**
+* Finite numeric value of a literal `tabindex` per `Number()` semantics, or undefined when
+* blank, unparsable, or non-finite. A blank tabindex is invalid HTML and ignored by
+* browsers (`Number('')` would coerce to 0). Deliberately NOT HTML's
+* rules-for-parsing-integers: `Number()` is what the Svelte compiler's
+* a11y_positive_tabindex check uses too, and disagreeing with the user's build would make
+* the rule noise (the cost is edge divergence from browsers, e.g. `"1abc"` — browser
+* tabIndex 1 — parses to undefined here). The finiteness guard is this helper's one
+* departure from the compiler's `!isNaN(v) && +v > 0`: `"Infinity"`/overflowing values make
+* the compiler warn while browsers ignore them, so undefined is the correct answer here.
+* Shared by the interactive-element classification above and a11y/positive-tabindex.
+*/
+function literalTabindexValue(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return void 0;
+	const n = Number(trimmed);
+	return Number.isFinite(n) ? n : void 0;
+}
+/**
 * Whether `tag` opens a new "interactive container" for a11y/interactive-nesting's nesting
 * stack — a narrower set than `isInteractiveElement`: only `a`-with-`href`, `button`, and a
 * literal `CONTAINER_ROLES` role (an `<input>` or `tabindex` div is itself a valid nesting
@@ -4836,6 +4880,36 @@ function collectTimesMissingDatetime(node, source, acc) {
 	for (const key of CHILD_NODE_KEYS) if (key in node) collectTimesMissingDatetime(node[key], source, acc);
 }
 /**
+* `<video>` with a literal `autoplay` attribute and no `muted` in any form
+* (correctness/autoplay-muted). Presence is what autoplays, so any literal value counts
+* (`autoplay="false"` still autoplays); an expression value is unknowable and is skipped.
+* `muted` passes in every form — bare, `bind:muted`, a spread that could supply it, or
+* `muted={expr}`, whose value is deliberately not evaluated (issue #580 scopes the rule to
+* attribute presence). Only `RegularElement` is checked — `<svelte:element this="video">`
+* follows the same RegularElement-only convention as `collectCheckableBindValues`. Namespace
+* is tracked like `collectElements`: a `<video>` inside `<svg>` is an SVG-namespace element,
+* not an HTML video, so it is skipped; `<foreignObject>` children return to HTML.
+*/
+function collectVideosAutoplayNoMuted(node, source, acc, inSvg) {
+	if (Array.isArray(node)) {
+		for (const child of node) collectVideosAutoplayNoMuted(child, source, acc, inSvg);
+		return;
+	}
+	if (!node || typeof node !== "object") return;
+	let next = inSvg;
+	if (node.type === "RegularElement" && typeof node.name === "string") {
+		const tag = node.name.toLowerCase();
+		if (tag === "svg") next = true;
+		else if (tag === "foreignobject") next = false;
+		if (!inSvg && tag === "video" && Array.isArray(node.attributes)) {
+			const literalAutoplay = attrText(node.attributes, "autoplay") !== void 0;
+			const hasMuted = findAttr(node.attributes, "muted") !== void 0 || node.attributes.some((a) => a?.type === "BindDirective" && a.name === "muted" || a?.type === "SpreadAttribute");
+			if (literalAutoplay && !hasMuted) acc.push({ line: lineOf(source, node.start) });
+		}
+	}
+	for (const key of CHILD_NODE_KEYS) if (key in node) collectVideosAutoplayNoMuted(node[key], source, acc, next);
+}
+/**
 * Root-relative `<a href="/…">` literals (correctness/base-path-navigation). Only
 * `RegularElement` anchors with a fully static href are considered, which is what makes the
 * correct forms self-excluding: `href="{base}/x"` and `href={resolve('/x')}` contain an
@@ -5692,6 +5766,8 @@ function parseComponentFacts(source, filename) {
 	collectSelectsMissingPlaceholder(ast.fragment ?? ast, source, selectsMissingPlaceholder);
 	const timesMissingDatetime = [];
 	collectTimesMissingDatetime(ast.fragment ?? ast, source, timesMissingDatetime);
+	const videosAutoplayNoMuted = [];
+	collectVideosAutoplayNoMuted(ast.fragment ?? ast, source, videosAutoplayNoMuted, ast.options?.namespace === "svg");
 	const basePathLinks = [];
 	collectHrefLinks(ast.fragment ?? ast, source, basePathLinks);
 	const gotoPrograms = [ast.module?.content, ast.instance?.content].filter(Boolean);
@@ -5903,7 +5979,8 @@ function parseComponentFacts(source, filename) {
 		unassociatedLabels,
 		bulletTexts,
 		selectsMissingPlaceholder,
-		timesMissingDatetime
+		timesMissingDatetime,
+		videosAutoplayNoMuted
 	};
 }
 //#endregion
@@ -8192,6 +8269,29 @@ const performanceStateRaw = componentRule({
 	}))
 });
 //#endregion
+//#region src/rules/perf/iframe-loading.ts
+/** Any literal `loading` value passes (the author made a choice); an expression value is
+*  unknowable and passes; a spread could supply `loading` and passes. */
+const performanceIframeLoading = componentRule({
+	id: "performance/iframe-loading",
+	title: "Iframe loading attribute",
+	category: "performance",
+	severity: "info",
+	label: "<iframe> loading attribute",
+	recommendation: "If this iframe can be offscreen on load, add loading=\"lazy\"; keep an above-the-fold iframe eager.",
+	rationale: "An iframe without a loading attribute loads eagerly, and an offscreen iframe (embedded video player, map, ad slot) typically loads an entire third-party document — scripts, fonts, media — so its bandwidth and main-thread cost is usually larger than an offscreen image’s. loading=\"lazy\" defers it until the viewport approaches. Static analysis cannot tell whether the iframe is above the fold, so this is advisory.",
+	fix: {
+		description: "Add loading=\"lazy\" to iframes that can be offscreen on load.",
+		snippet: "<iframe src=\"https://example.com/embed\" title=\"…\" loading=\"lazy\"></iframe>",
+		lang: "svelte"
+	},
+	applies: (c) => (c.elements ?? []).some((e) => !e.inSvg && e.tag === "iframe"),
+	bad: (c) => (c.elements ?? []).filter((e) => !e.inSvg && e.tag === "iframe" && !e.hasSpread && !e.attrs.some((a) => a.name === "loading")).map((e) => ({
+		line: e.line,
+		message: "<iframe> without a loading attribute loads eagerly even when offscreen"
+	}))
+});
+//#endregion
 //#region src/rules/a11y/invalid-role.ts
 const a11yInvalidRole = componentRule({
 	id: "a11y/invalid-role",
@@ -8406,6 +8506,38 @@ const a11yRequireDatetime = componentRule({
 	}))
 });
 //#endregion
+//#region src/rules/a11y/positive-tabindex.ts
+/**
+* Literal values only — an expression-valued `tabindex` is unknowable and passes. The
+* Number()-based parse deliberately follows the Svelte compiler's a11y_positive_tabindex
+* check so the scanner and the build agree (the docs page's Overlap section records the two
+* divergences — bare `tabindex` and non-finite values, where this rule sides with the
+* browser and stays silent). SVG elements are judged too, unlike the
+* deprecated-* rules' `!inSvg` filter: SVG2 honours `tabindex` with identical focus-order
+* semantics.
+*/
+const a11yPositiveTabindex = componentRule({
+	id: "a11y/positive-tabindex",
+	title: "Positive tabindex",
+	category: "a11y",
+	severity: "warning",
+	label: "Tabindex values",
+	recommendation: "Use `tabindex=\"0\"` and put elements in DOM order for the natural tab sequence, or `tabindex=\"-1\"` for elements focused programmatically. A positive value is essentially never intentional-and-correct.",
+	rationale: "A tabindex greater than 0 puts the element ahead of every naturally-ordered element on the page — a single tabindex=\"1\" reorders keyboard navigation for the whole document, and the damage compounds with every element added later. The tab order can then diverge from the visual order, which WCAG 2.4.3 (Focus Order) requires to stay meaningful.",
+	fix: { description: "Replace the positive tabindex with tabindex=\"0\" and move the element into DOM order, or tabindex=\"-1\" if it is only focused programmatically." },
+	applies: (c) => (c.elements ?? []).some((e) => e.attrs.some((a) => a.name === "tabindex" && literalTabindexValue(a.value) !== void 0)),
+	bad: (c) => (c.elements ?? []).flatMap((e) => {
+		const raw = e.attrs.find((a) => a.name === "tabindex")?.value;
+		if (raw === void 0) return [];
+		const n = literalTabindexValue(raw);
+		if (n === void 0 || n <= 0) return [];
+		return [{
+			line: e.line,
+			message: `tabindex="${raw.trim()}" on <${e.tag}> hijacks the tab order for the whole page — only 0 and -1 are safe values`
+		}];
+	})
+});
+//#endregion
 //#region src/html-spec/index.ts
 /** The HTML element's spec row; `undefined` for SVG (`svg:*`) and unknown names. */
 function htmlElement(tag) {
@@ -9396,6 +9528,7 @@ const allRules = [
 	correctnessStalePropDerivation,
 	correctnessNonreactiveBuiltinState,
 	correctnessCheckableBindValue,
+	correctnessAutoplayMuted,
 	correctnessOrphanEffect,
 	correctnessOrphanLifecycle,
 	correctnessBasePathNavigation,
@@ -9421,6 +9554,7 @@ const allRules = [
 	performanceLoadWaterfall,
 	performanceSequentialAwaits,
 	performanceStateRaw,
+	performanceIframeLoading,
 	a11yInvalidRole,
 	a11yUnknownAriaAttribute,
 	a11yRequiredAriaProps,
@@ -9431,6 +9565,7 @@ const allRules = [
 	a11yUseList,
 	a11yPlaceholderLabelOption,
 	a11yRequireDatetime,
+	a11yPositiveTabindex,
 	a11yDeprecatedElement,
 	a11yDeprecatedAttr,
 	a11yDisallowedAriaProps,
@@ -9892,4 +10027,4 @@ function formatMarkdownReport(results, config, meta) {
 	return lines.join("\n");
 }
 //#endregion
-export { parseInMemoryExports as $, hasFailureAtOrAbove as $n, seoCharset as $t, a11yPlaceholderLabelOption as A, settingSeverity as An, securityJavascriptUrl as At, performanceSequentialAwaits as B, imageRule as Bn, correctnessPropMutation as Bt, a11yPermittedContents as C, applyOverrides as Cn, textFromNodes as Ct, a11yDeprecatedAttr as D, overrideMatches as Dn, securitySharedStateImport as Dt, a11yDisallowedAriaProps as E, formatFailedRuleWarning as En, architectureComponentSize as Et, a11yInvalidAriaValue as F, performancePreloadMissingAs as Fn, correctnessOrphanLifecycle as Ft, architectureDocLinkTarget as G, seoOgTitle as Gn, correctnessEachKey as Gt, performanceMinifyDisabled as H, seoSitemapXml as Hn, correctnessEffectAsOnMount as Ht, a11yRequiredAriaProps as I, linkRule as In, correctnessOrphanEffect as It, architectureReservedDirectoryNames as J, seoDescriptionPresence as Jn, seoDuplicateDescription as Jt, architectureRouteComponentImport as K, seoOgImage as Kn, seoSsrDisabled as Kt, a11yUnknownAriaAttribute as L, performanceResponsiveImage as Ln, correctnessCheckableBindValue as Lt, a11yLabelHasControl as M, performanceRenderBlockingScript as Mn, correctnessInstanceBrowserGlobal as Mt, a11yAccessibleName as N, performanceLcpImage as Nn, correctnessServerBrowserGlobal as Nt, a11yDeprecatedElement as O, selectRules as On, securityServerModuleState as Ot, a11yInteractiveNesting as P, performanceFontPreloadCrossorigin as Pn, correctnessBasePathNavigation as Pt, collectTopLevelBindings as Q, effectiveSeverity as Qn, seoImageAlt as Qt, a11yInvalidRole as R, performanceImageLoadingHint as Rn, correctnessNonreactiveBuiltinState as Rt, a11yRequiredElement as S, validateRuleSetting as Sn, parseSvelte as St, a11yDeprecatedAria as T, compileOverrides as Tn, architecturePropCount as Tt, performanceNamespaceImport as U, seoRobotsTxt as Un, correctnessEffectAsDerived as Ut, performanceLoadWaterfall as V, seoHtmlLang as Vn, correctnessUnmutatedState as Vt, performanceHeavyImport as W, seoJsonLd as Wn, correctnessEachIndexKey as Wt, architectureUnitEntryFile as X, seoTitlePresence as Xn, seoSingleH1 as Xt, architectureDirectoryNaming as Y, headTagRule as Yn, seoDuplicateTitle as Yt, architecturePrivateScopeImport as Z, classify as Zn, seoHreflang as Zt, a11yNoMissingIdRef as _, listOption as _n, attrTextOf as _t, formatJsonReport as a, seoJsonLdRelativeUrl as an, defaultProject as ar, parseComponentFacts as at, a11yDuplicateLandmark as b, shouldSkipRangeCheck as bn, findAttr as bt, scoresByCategory as c, seoSitemapInRobots as cn, IDREF_ATTRS as ct, messageText as d, seoOgDescription as dn, foldOccurrences as dt, seoDescriptionLength as en, summarize as er, parseKitModuleFacts as et, ruleMetaById as f, seoTwitterCard as fn, isTopFragment as ft, a11yUnverifiedIdRef as g, isMentionedAnywhere as gn, attrText as gt, explainRule as h, intOption as hn, CHILD_NODE_KEYS as ht, buildJsonReport as i, seoJsonLdDateFormat as in, defaultConfig as ir, collectSuppressions as it, a11yUseList as j, withFailedRulesOff as jn, securityRawHtml as jt, a11yRequireDatetime as k, settingOptions as kn, securityHandlerStateWrite as kt, formatGithubReport as l, seoViewport as ln, LANDMARK_ROLES as lt, allRules as m, performancePreconnect as mn, stripTextDirective as mt, mdEscape as n, seoJsonLdRequiredProps as nn, isPenalized as nr, resolveRunesModuleSpecifier as nt, computeHealth as o, seoJsonLdDeprecatedType as on, defineConfig as or, parseModuleProgram as ot, severityToSarifLevel as p, seoIndexability as pn, splitTokens as pt, architectureReservedNamePlacement as q, seoCanonicalUrl as qn, seoHeadingLevelSkip as qt, terminalSafe as r, seoJsonLdPlaceholder as rn, CATEGORIES as rr, collectNamedImportAliases as rt, computeScore as s, seoJsonLdValidity as sn, unwrapTs as st, formatMarkdownReport as t, seoTitleLength as tn, docsUrlFor as tr, resolveRepoLocalPath as tt, SEVERITY_RANK as u, seoOgUrl as un, decodeFragmentId as ut, a11yIdDuplication as v, mapOption as vn, attrValue as vt, a11yDisallowedElement as w, applyRuleSeverities as wn, valueFromNodes as wt, a11yDoctype as x, validateRuleOptions as xn, lineOf as xt, a11yTopLevelLandmark as y, resolveRuleOptions as yn, attrValueOf as yt, performanceStateRaw as z, performanceImageDimensions as zn, correctnessStalePropDerivation as zt };
+export { architecturePrivateScopeImport as $, seoTitlePresence as $n, seoSingleH1 as $t, a11yRequireDatetime as A, overrideMatches as An, securityServerModuleState as At, performanceIframeLoading as B, performanceResponsiveImage as Bn, correctnessCheckableBindValue as Bt, a11yPermittedContents as C, shouldSkipRangeCheck as Cn, lineOf as Ct, a11yDeprecatedAttr as D, applyRuleSeverities as Dn, architecturePropCount as Dt, a11yDisallowedAriaProps as E, applyOverrides as En, valueFromNodes as Et, a11yInteractiveNesting as F, performanceRenderBlockingScript as Fn, correctnessServerBrowserGlobal as Ft, performanceNamespaceImport as G, seoSitemapXml as Gn, correctnessEffectAsOnMount as Gt, performanceSequentialAwaits as H, performanceImageDimensions as Hn, correctnessStalePropDerivation as Ht, a11yInvalidAriaValue as I, performanceLcpImage as In, correctnessBasePathNavigation as It, architectureRouteComponentImport as J, seoOgTitle as Jn, correctnessEachKey as Jt, performanceHeavyImport as K, seoRobotsTxt as Kn, correctnessEffectAsDerived as Kt, a11yRequiredAriaProps as L, performanceFontPreloadCrossorigin as Ln, correctnessOrphanLifecycle as Lt, a11yUseList as M, settingOptions as Mn, securityJavascriptUrl as Mt, a11yLabelHasControl as N, settingSeverity as Nn, securityRawHtml as Nt, a11yDeprecatedElement as O, compileOverrides as On, architectureComponentSize as Ot, a11yAccessibleName as P, withFailedRulesOff as Pn, correctnessInstanceBrowserGlobal as Pt, architectureUnitEntryFile as Q, headTagRule as Qn, seoDuplicateTitle as Qt, a11yUnknownAriaAttribute as R, performancePreloadMissingAs as Rn, correctnessOrphanEffect as Rt, a11yRequiredElement as S, resolveRuleOptions as Sn, findAttr as St, a11yDeprecatedAria as T, validateRuleSetting as Tn, textFromNodes as Tt, performanceLoadWaterfall as U, imageRule as Un, correctnessPropMutation as Ut, performanceStateRaw as V, performanceImageLoadingHint as Vn, correctnessNonreactiveBuiltinState as Vt, performanceMinifyDisabled as W, seoHtmlLang as Wn, correctnessUnmutatedState as Wt, architectureReservedDirectoryNames as X, seoCanonicalUrl as Xn, seoHeadingLevelSkip as Xt, architectureReservedNamePlacement as Y, seoOgImage as Yn, seoSsrDisabled as Yt, architectureDirectoryNaming as Z, seoDescriptionPresence as Zn, seoDuplicateDescription as Zt, a11yNoMissingIdRef as _, performancePreconnect as _n, CHILD_NODE_KEYS as _t, formatJsonReport as a, seoJsonLdRequiredProps as an, isPenalized as ar, collectNamedImportAliases as at, a11yDuplicateLandmark as b, listOption as bn, attrValue as bt, scoresByCategory as c, seoJsonLdRelativeUrl as cn, defaultProject as cr, parseModuleProgram as ct, messageText as d, seoSitemapInRobots as dn, LANDMARK_ROLES as dt, seoHreflang as en, classify as er, collectTopLevelBindings as et, ruleMetaById as f, seoViewport as fn, decodeFragmentId as ft, a11yUnverifiedIdRef as g, seoIndexability as gn, stripTextDirective as gt, explainRule as h, seoTwitterCard as hn, splitTokens as ht, buildJsonReport as i, seoTitleLength as in, docsUrlFor as ir, resolveRunesModuleSpecifier as it, a11yPlaceholderLabelOption as j, selectRules as jn, securityHandlerStateWrite as jt, a11yPositiveTabindex as k, formatFailedRuleWarning as kn, securitySharedStateImport as kt, formatGithubReport as l, seoJsonLdDeprecatedType as ln, defineConfig as lr, unwrapTs as lt, allRules as m, seoOgDescription as mn, isTopFragment as mt, mdEscape as n, seoCharset as nn, hasFailureAtOrAbove as nr, parseKitModuleFacts as nt, computeHealth as o, seoJsonLdPlaceholder as on, CATEGORIES as or, collectSuppressions as ot, severityToSarifLevel as p, seoOgUrl as pn, foldOccurrences as pt, architectureDocLinkTarget as q, seoJsonLd as qn, correctnessEachIndexKey as qt, terminalSafe as r, seoDescriptionLength as rn, summarize as rr, resolveRepoLocalPath as rt, computeScore as s, seoJsonLdDateFormat as sn, defaultConfig as sr, parseComponentFacts as st, formatMarkdownReport as t, seoImageAlt as tn, effectiveSeverity as tr, parseInMemoryExports as tt, SEVERITY_RANK as u, seoJsonLdValidity as un, IDREF_ATTRS as ut, a11yIdDuplication as v, intOption as vn, attrText as vt, a11yDisallowedElement as w, validateRuleOptions as wn, parseSvelte as wt, a11yDoctype as x, mapOption as xn, attrValueOf as xt, a11yTopLevelLandmark as y, isMentionedAnywhere as yn, attrTextOf as yt, a11yInvalidRole as z, linkRule as zn, correctnessAutoplayMuted as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svelte-vitals/core",
-  "version": "0.47.2",
+  "version": "0.48.0",
   "description": "Shared, runtime-agnostic core for svelte-vitals (types, rule engine, scorer, reporter).",
   "type": "module",
   "license": "MIT",