@vellora/lint 0.1.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Diego Malta
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,26 @@
+# @vellora/lint
+
+Dev-time HTML diagnose + fix for the [vellora](https://github.com/diomalta/vellora)
+HTML/CSS subset (parse5 + resvg). Keeps your templates inside the supported subset
+at authoring/CI time — like a linter, never silently at render time.
+
+> **Pre-release (alpha)** — the `diagnose` / `fix` API is under active
+> development.
+
+## Install
+
+```bash
+npm install @vellora/lint
+```
+
+## Usage
+
+```ts
+import { diagnose, fix } from "@vellora/lint";
+
+const report = diagnose(html);
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/compat.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Stable rule → compatibility-table link map. `@vellora/lint` does not own the compatibility table
+ * (that lives elsewhere, per the design's non-goals); it only links into it. Every rule has exactly
+ * one non-empty, stable anchor so two findings with the same rule always carry the same `compatLink`.
+ */
+import type { RuleId } from "./types.js";
+export declare const COMPAT_LINKS: Record<RuleId, string>;
+export declare function compatLink(rule: RuleId): string;

package/dist/compat.js

@@ -0,0 +1,13 @@
+const COMPAT_BASE = "https://vellora.dev/compat";
+export const COMPAT_LINKS = {
+    "inline-svg": `${COMPAT_BASE}#inline-svg`,
+    "flex-grid-in-td": `${COMPAT_BASE}#flex-grid-in-td`,
+    "img-dimension-attrs": `${COMPAT_BASE}#img-dimension-attrs`,
+    "invalid-markup": `${COMPAT_BASE}#invalid-markup`,
+    "script-element": `${COMPAT_BASE}#script-element`,
+    "css-animation": `${COMPAT_BASE}#css-animation`,
+};
+export function compatLink(rule) {
+    return COMPAT_LINKS[rule];
+}
+//# sourceMappingURL=compat.js.map

package/dist/compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat.js","sourceRoot":"","sources":["../src/compat.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,YAAY,EAAE,GAAG,WAAW,aAAa;IACzC,iBAAiB,EAAE,GAAG,WAAW,kBAAkB;IACnD,qBAAqB,EAAE,GAAG,WAAW,sBAAsB;IAC3D,gBAAgB,EAAE,GAAG,WAAW,iBAAiB;IACjD,gBAAgB,EAAE,GAAG,WAAW,iBAAiB;IACjD,eAAe,EAAE,GAAG,WAAW,gBAAgB;CAChD,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/diagnose.d.ts

@@ -0,0 +1,2 @@
+import type { Report } from "./types.js";
+export declare function diagnose(html: string): Report;

package/dist/diagnose.js

@@ -0,0 +1,20 @@
+/**
+ * `diagnose(html)` — parse with parse5, run every rule's read-only `detect`, and return a structured
+ * report ordered by `(line, col, rule)`. Read-only by contract: it never mutates or re-serializes the
+ * input, never touches the network or filesystem, and must not run on the render hot path.
+ */
+import { exceedsMaxDepth, parseHtml } from "./dom.js";
+import { orderFindings, toFinding, tooDeeplyNestedFinding } from "./engine.js";
+import { RULES } from "./rules/index.js";
+export function diagnose(html) {
+    const doc = parseHtml(html);
+    // A pathologically deep document surfaces a structured finding rather than risking a stack
+    // overflow in any recursive downstream step.
+    if (exceedsMaxDepth(doc.document)) {
+        return { conformant: false, findings: [tooDeeplyNestedFinding()] };
+    }
+    const findings = RULES.flatMap((rule) => rule.detect(doc).map((detection) => toFinding(rule, detection, doc.source)));
+    const ordered = orderFindings(findings);
+    return { conformant: ordered.length === 0, findings: ordered };
+}
+//# sourceMappingURL=diagnose.js.map

package/dist/diagnose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,2FAA2F;IAC3F,6CAA6C;IAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACjE,CAAC"}

package/dist/dom.d.ts

@@ -0,0 +1,61 @@
+/**
+ * parse5 helpers shared by every rule: parsing with source-location info, a depth-first element
+ * walk, attribute and inline-`style` accessors, and source-snippet extraction. Kept dependency-light
+ * and side-effect-free so importing `@vellora/lint` never touches the network or filesystem.
+ */
+import { type DefaultTreeAdapterTypes, type ParserError } from "parse5";
+export type Element = DefaultTreeAdapterTypes.Element;
+export type Node = DefaultTreeAdapterTypes.Node;
+export type ChildNode = DefaultTreeAdapterTypes.ChildNode;
+export type Document = DefaultTreeAdapterTypes.Document;
+export interface ParsedDocument {
+    document: Document;
+    /** Parse errors reported by parse5 (`onParseError`), in source order. */
+    parseErrors: ParserError[];
+    /** The original input, used for source-snippet extraction. */
+    source: string;
+}
+/** Parse HTML with source-location info and a collected parse-error list. Never mutates input. */
+export declare function parseHtml(html: string): ParsedDocument;
+/** Serialize a document back to HTML (includes the DOCTYPE). This is a parse→serialize fixed point. */
+export declare function serializeDocument(document: Document): string;
+/** Serialize a single element (including its own tag) — used to feed an `<svg>` subtree to resvg. */
+export declare function serializeElement(element: Element): string;
+/** Is this a parse5 text node (`#text`)? */
+export declare function isTextNode(node: ChildNode): boolean;
+/** Is this a parse5 comment node (`#comment`)? */
+export declare function isCommentNode(node: ChildNode): boolean;
+/** Raw character data of a text node (empty string for non-text nodes). */
+export declare function textValue(node: ChildNode): string;
+/**
+ * Depth-first walk over every element, calling `visit(element, parent)` in document order.
+ *
+ * Iterative (explicit worklist) rather than recursive so a pathologically deep document — parse5
+ * imposes no nesting cap — cannot overflow the JS call stack and surface an uncaught `RangeError`.
+ * Children are pushed in reverse so they pop in document order; each frame carries its effective
+ * parent (the nearest ancestor element).
+ */
+export declare function walkElements(document: Document, visit: (element: Element, parent: Element | null) => void): void;
+/**
+ * Maximum element-nesting depth `diagnose`/`fix` will process. Beyond this, parse5's own recursive
+ * serializer (and any future deep recursion) would overflow the JS call stack; the entry points cap
+ * here and surface a structured finding instead of letting a raw `RangeError` escape. Untrusted HTML
+ * this deep is pathological — well past anything a real document needs.
+ */
+export declare const MAX_NESTING_DEPTH = 5000;
+/**
+ * Does the document nest elements deeper than `MAX_NESTING_DEPTH`? Iterative (explicit worklist) so
+ * the depth check itself cannot overflow the stack on the very input it guards against.
+ */
+export declare function exceedsMaxDepth(document: Document, max?: number): boolean;
+export declare function tagName(element: Element): string;
+export declare function getAttr(element: Element, name: string): string | null;
+export declare function setAttr(element: Element, name: string, value: string): void;
+export declare function removeAttr(element: Element, name: string): void;
+/** 1-based start `{ line, col }` of an element from its source-location info (falls back to 1:1). */
+export declare function startLocation(element: Element): {
+    line: number;
+    col: number;
+};
+/** Extract the offending source fragment for an element from the original source. */
+export declare function snippetFor(element: Element, source: string): string;

package/dist/dom.js

@@ -0,0 +1,130 @@
+/**
+ * parse5 helpers shared by every rule: parsing with source-location info, a depth-first element
+ * walk, attribute and inline-`style` accessors, and source-snippet extraction. Kept dependency-light
+ * and side-effect-free so importing `@vellora/lint` never touches the network or filesystem.
+ */
+import { parse, serialize, serializeOuter, } from "parse5";
+/** Parse HTML with source-location info and a collected parse-error list. Never mutates input. */
+export function parseHtml(html) {
+    const parseErrors = [];
+    const document = parse(html, {
+        sourceCodeLocationInfo: true,
+        onParseError: (error) => parseErrors.push(error),
+    });
+    return { document, parseErrors, source: html };
+}
+/** Serialize a document back to HTML (includes the DOCTYPE). This is a parse→serialize fixed point. */
+export function serializeDocument(document) {
+    return serialize(document);
+}
+/** Serialize a single element (including its own tag) — used to feed an `<svg>` subtree to resvg. */
+export function serializeElement(element) {
+    return serializeOuter(element);
+}
+function isElement(node) {
+    return typeof node.tagName === "string";
+}
+/** Is this a parse5 text node (`#text`)? */
+export function isTextNode(node) {
+    return node.nodeName === "#text";
+}
+/** Is this a parse5 comment node (`#comment`)? */
+export function isCommentNode(node) {
+    return node.nodeName === "#comment";
+}
+/** Raw character data of a text node (empty string for non-text nodes). */
+export function textValue(node) {
+    return isTextNode(node) ? node.value : "";
+}
+/**
+ * Depth-first walk over every element, calling `visit(element, parent)` in document order.
+ *
+ * Iterative (explicit worklist) rather than recursive so a pathologically deep document — parse5
+ * imposes no nesting cap — cannot overflow the JS call stack and surface an uncaught `RangeError`.
+ * Children are pushed in reverse so they pop in document order; each frame carries its effective
+ * parent (the nearest ancestor element).
+ */
+export function walkElements(document, visit) {
+    const stack = [{ node: document, parent: null }];
+    for (let frame = stack.pop(); frame !== undefined; frame = stack.pop()) {
+        const { node, parent } = frame;
+        const element = isElement(node) ? node : null;
+        if (element) {
+            visit(element, parent);
+        }
+        const children = node.childNodes ?? [];
+        const effectiveParent = element ?? parent;
+        for (let i = children.length - 1; i >= 0; i--) {
+            const child = children[i];
+            if (child !== undefined) {
+                stack.push({ node: child, parent: effectiveParent });
+            }
+        }
+    }
+}
+/**
+ * Maximum element-nesting depth `diagnose`/`fix` will process. Beyond this, parse5's own recursive
+ * serializer (and any future deep recursion) would overflow the JS call stack; the entry points cap
+ * here and surface a structured finding instead of letting a raw `RangeError` escape. Untrusted HTML
+ * this deep is pathological — well past anything a real document needs.
+ */
+export const MAX_NESTING_DEPTH = 5000;
+/**
+ * Does the document nest elements deeper than `MAX_NESTING_DEPTH`? Iterative (explicit worklist) so
+ * the depth check itself cannot overflow the stack on the very input it guards against.
+ */
+export function exceedsMaxDepth(document, max = MAX_NESTING_DEPTH) {
+    const stack = [{ node: document, depth: 0 }];
+    for (let frame = stack.pop(); frame !== undefined; frame = stack.pop()) {
+        const { node, depth } = frame;
+        if (depth > max) {
+            return true;
+        }
+        const children = node.childNodes ?? [];
+        const childDepth = isElement(node) ? depth + 1 : depth;
+        for (const child of children) {
+            stack.push({ node: child, depth: childDepth });
+        }
+    }
+    return false;
+}
+export function tagName(element) {
+    return element.tagName.toLowerCase();
+}
+export function getAttr(element, name) {
+    const attr = element.attrs.find((a) => a.name === name);
+    return attr ? attr.value : null;
+}
+export function setAttr(element, name, value) {
+    const attr = element.attrs.find((a) => a.name === name);
+    if (attr) {
+        attr.value = value;
+    }
+    else {
+        element.attrs.push({ name, value });
+    }
+}
+export function removeAttr(element, name) {
+    const index = element.attrs.findIndex((a) => a.name === name);
+    if (index !== -1) {
+        element.attrs.splice(index, 1);
+    }
+}
+/** 1-based start `{ line, col }` of an element from its source-location info (falls back to 1:1). */
+export function startLocation(element) {
+    const loc = element.sourceCodeLocation;
+    if (loc) {
+        return { line: loc.startLine, col: loc.startCol };
+    }
+    return { line: 1, col: 1 };
+}
+/** Extract the offending source fragment for an element from the original source. */
+export function snippetFor(element, source) {
+    const loc = element.sourceCodeLocation;
+    if (!loc) {
+        return `<${tagName(element)}>`;
+    }
+    const fragment = source.slice(loc.startOffset, loc.endOffset);
+    return fragment.length > 0 ? fragment : `<${tagName(element)}>`;
+}
+//# sourceMappingURL=dom.js.map

package/dist/dom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.js","sourceRoot":"","sources":["../src/dom.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,EACL,SAAS,EACT,cAAc,GACf,MAAM,QAAQ,CAAC;AAehB,kGAAkG;AAClG,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,WAAW,GAAkB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE;QAC3B,sBAAsB,EAAE,IAAI;QAC5B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;KACjD,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,IAAsB;IACvC,OAAO,OAAQ,IAAgB,CAAC,OAAO,KAAK,QAAQ,CAAC;AACvD,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,UAAU,CAAC,IAAe;IACxC,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;AACnC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC;AACtC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAkB,EAClB,KAAyD;IAEzD,MAAM,KAAK,GAA6C,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,KAAK,SAAS,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACvE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,QAAQ,GAAI,IAAqC,CAAC,UAAU,IAAI,EAAE,CAAC;QACzE,MAAM,eAAe,GAAG,OAAO,IAAI,MAAM,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAkB,EAAE,GAAG,GAAG,iBAAiB;IACzE,MAAM,KAAK,GAAoC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,KAAK,SAAS,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACvE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QAC9B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAI,IAAqC,CAAC,UAAU,IAAI,EAAE,CAAC;QACzE,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAgB;IACtC,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAgB,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAgB,EAAE,IAAY,EAAE,KAAa;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAY;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,OAAgB,EAAE,MAAc;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;IACjC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;AAClE,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,34 @@
+import type { Element, ParsedDocument } from "./dom.js";
+import type { Finding, RuleId, Severity } from "./types.js";
+/** A detection hit: the offending element plus the human/agent-facing suggestion. */
+export interface Detection {
+    element: Element;
+    suggestedFix: string;
+    /** Override the element's source location (used by `invalid-markup` parse-error locations). */
+    location?: {
+        line: number;
+        col: number;
+    };
+    /** Override the snippet (used when the faithful fragment is not the element's serialization). */
+    snippet?: string;
+}
+export interface Rule {
+    id: RuleId;
+    severity: Severity;
+    autoFixable: boolean;
+    /** Read-only: return every offending element in this document (no mutation). */
+    detect(doc: ParsedDocument): Detection[];
+    /** Mutate the tree to repair one detected element. Only present on auto-fixable rules. */
+    apply?(element: Element): void;
+}
+/** Build a `Finding` from a rule and one of its detections. */
+export declare function toFinding(rule: Rule, detection: Detection, source: string): Finding;
+/**
+ * A structured finding for a document nested past `MAX_NESTING_DEPTH`. Surfaced by `diagnose`/`fix`
+ * instead of recursing into parse5's serializer and overflowing the stack with a raw `RangeError`.
+ * Reuses the `invalid-markup` rule id (a depth-pathological document is structurally invalid) to
+ * avoid reshaping the stable public `RuleId` set.
+ */
+export declare function tooDeeplyNestedFinding(): Finding;
+/** Deterministic ordering: by line, then column, then `rule` id as a stable tie-break. */
+export declare function orderFindings(findings: Finding[]): Finding[];

package/dist/engine.js

@@ -0,0 +1,60 @@
+/**
+ * The shared rule-engine interface. Every rule exposes `detect` (read-only, used by both `diagnose`
+ * and `fix`) and, for auto-fixable rules, `apply` (mutates the parse5 tree in place). Sharing one
+ * detection path guarantees `diagnose` and `fix` never drift on what counts as a violation.
+ */
+import { compatLink } from "./compat.js";
+import { snippetFor, startLocation } from "./dom.js";
+/** Build a `Finding` from a rule and one of its detections. */
+export function toFinding(rule, detection, source) {
+    const location = detection.location ?? startLocation(detection.element);
+    const snippet = detection.snippet ?? snippetFor(detection.element, source);
+    return {
+        rule: rule.id,
+        severity: rule.severity,
+        autoFixable: rule.autoFixable,
+        location,
+        suggestedFix: detection.suggestedFix,
+        snippet,
+        compatLink: compatLink(rule.id),
+    };
+}
+/**
+ * A structured finding for a document nested past `MAX_NESTING_DEPTH`. Surfaced by `diagnose`/`fix`
+ * instead of recursing into parse5's serializer and overflowing the stack with a raw `RangeError`.
+ * Reuses the `invalid-markup` rule id (a depth-pathological document is structurally invalid) to
+ * avoid reshaping the stable public `RuleId` set.
+ */
+export function tooDeeplyNestedFinding() {
+    return {
+        rule: "invalid-markup",
+        severity: "warning",
+        autoFixable: false,
+        location: { line: 1, col: 1 },
+        suggestedFix: "The document nests elements too deeply to process safely. Flatten the markup so nesting stays well below the supported limit.",
+        snippet: "",
+        compatLink: compatLink("invalid-markup"),
+    };
+}
+/** Deterministic ordering: by line, then column, then `rule` id as a stable tie-break. */
+export function orderFindings(findings) {
+    return [...findings].sort((a, b) => {
+        if (a.location.line !== b.location.line) {
+            return a.location.line - b.location.line;
+        }
+        if (a.location.col !== b.location.col) {
+            return a.location.col - b.location.col;
+        }
+        return compareRuleId(a.rule, b.rule);
+    });
+}
+function compareRuleId(a, b) {
+    if (a < b) {
+        return -1;
+    }
+    if (a > b) {
+        return 1;
+    }
+    return 0;
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAuBrD,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,IAAU,EAAE,SAAoB,EAAE,MAAc;IACxE,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,IAAI,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,EAAE;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ;QACR,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,OAAO;QACP,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;QAC7B,YAAY,EACV,+HAA+H;QACjI,OAAO,EAAE,EAAE;QACX,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,QAAmB;IAC/C,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QACzC,CAAC;QACD,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/fix.d.ts

@@ -0,0 +1,5 @@
+import type { Report } from "./types.js";
+export declare function fix(html: string): {
+    html: string;
+    report: Report;
+};

package/dist/fix.js

@@ -0,0 +1,49 @@
+/**
+ * `fix(html)` — parse with parse5, apply the deterministic codemods, re-serialize, and return the
+ * rewritten HTML plus a report. The report lists every applied fix (located in the *original* source)
+ * and every remaining, non-auto-fixable finding (located in the *fixed* output). Dev-time/CI only;
+ * never runs on the render hot path.
+ *
+ * Determinism + idempotence: every codemod is a no-op on its own output, and the final step always
+ * re-serializes through parse5 — a parse→serialize fixed point — so `fix(fix(x).html).html` is
+ * byte-identical to `fix(x).html` and that second report lists no applied fixes.
+ */
+import { exceedsMaxDepth, parseHtml, serializeDocument } from "./dom.js";
+import { orderFindings, toFinding, tooDeeplyNestedFinding } from "./engine.js";
+import { RULES } from "./rules/index.js";
+function isAutoFixable(rule) {
+    return rule.autoFixable;
+}
+export function fix(html) {
+    const doc = parseHtml(html);
+    // A pathologically deep document is left unchanged with a structured finding: parse5's recursive
+    // serializer would otherwise overflow the stack. The input is returned verbatim (no mutation).
+    if (exceedsMaxDepth(doc.document)) {
+        return { html, report: { conformant: false, findings: [tooDeeplyNestedFinding()] } };
+    }
+    // 1. Detect + apply every auto-fixable rule on the original tree. Findings are recorded with their
+    //    original-source locations and marked `applied`. `invalid-markup` has no `apply` — its repair
+    //    is the re-serialization below — but it is still recorded as applied.
+    const applied = [];
+    for (const rule of RULES) {
+        if (!isAutoFixable(rule)) {
+            continue;
+        }
+        for (const detection of rule.detect(doc)) {
+            applied.push({ ...toFinding(rule, detection, doc.source), applied: true });
+            rule.apply?.(detection.element);
+        }
+    }
+    // 2. Re-serialize the normalized, codemod'd tree. This also repairs mis-nested markup.
+    const fixedHtml = serializeDocument(doc.document);
+    // 3. Re-detect on the fixed output to collect remaining non-auto-fixable findings (located in the
+    //    fixed source). Auto-fixable rules no longer match their own output, so only diagnostics remain.
+    const fixedDoc = parseHtml(fixedHtml);
+    const remaining = RULES.filter((rule) => !isAutoFixable(rule)).flatMap((rule) => rule.detect(fixedDoc).map((detection) => toFinding(rule, detection, fixedDoc.source)));
+    const findings = orderFindings([...applied, ...remaining]);
+    return {
+        html: fixedHtml,
+        report: { conformant: findings.length === 0, findings },
+    };
+}
+//# sourceMappingURL=fix.js.map

package/dist/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../src/fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,EAAa,aAAa,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,SAAS,aAAa,CAAC,IAAU;IAC/B,OAAO,IAAI,CAAC,WAAW,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE5B,iGAAiG;IACjG,+FAA+F;IAC/F,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IAED,mGAAmG;IACnG,kGAAkG;IAClG,0EAA0E;IAC1E,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAElD,kGAAkG;IAClG,qGAAqG;IACrG,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,SAAS,GAAc,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CACtF,CAAC;IAEF,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE;KACxD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @vellora/lint — dev-time diagnose + fix for the vellora HTML/CSS subset.
+ *
+ * `diagnose(html)` returns a structured, AI-agent-ready report of subset violations (read-only).
+ * `fix(html)` applies four deterministic, idempotent codemods (inline-svg→PNG, flex/grid-in-<td>→
+ * table, img dims→CSS, sanitize invalid markup) and returns `{ html, report }`.
+ *
+ * This is dev-time/CI tooling and NEVER runs at render time. Importing this module is side-effect
+ * free: no network, no filesystem, no work happens until `diagnose`/`fix` is called.
+ */
+export { diagnose } from "./diagnose.js";
+export { fix } from "./fix.js";
+export { COMPAT_LINKS } from "./compat.js";
+export type { Finding, Report, RuleId, Severity, SourceLocation } from "./types.js";
+/** Package name, retained for the scaffold smoke test. */
+export declare const name = "@vellora/lint";

package/dist/index.js

@@ -0,0 +1,16 @@
+/**
+ * @vellora/lint — dev-time diagnose + fix for the vellora HTML/CSS subset.
+ *
+ * `diagnose(html)` returns a structured, AI-agent-ready report of subset violations (read-only).
+ * `fix(html)` applies four deterministic, idempotent codemods (inline-svg→PNG, flex/grid-in-<td>→
+ * table, img dims→CSS, sanitize invalid markup) and returns `{ html, report }`.
+ *
+ * This is dev-time/CI tooling and NEVER runs at render time. Importing this module is side-effect
+ * free: no network, no filesystem, no work happens until `diagnose`/`fix` is called.
+ */
+export { diagnose } from "./diagnose.js";
+export { fix } from "./fix.js";
+export { COMPAT_LINKS } from "./compat.js";
+/** Package name, retained for the scaffold smoke test. */
+export const name = "@vellora/lint";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,0DAA0D;AAC1D,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAC"}

package/dist/rules/css-animation.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const cssAnimationRule: Rule;

package/dist/rules/css-animation.js

@@ -0,0 +1,44 @@
+/**
+ * `css-animation` diagnostic: `@keyframes` and the `animation` property are dynamic CSS outside the
+ * static PDF subset (nothing animates in a print document). There is no deterministic codemod — we
+ * cannot guess the intended static appearance — so this is reported with `autoFixable: false` and
+ * never rewritten. The finding is anchored to the offending `<style>` element for a stable location.
+ */
+import { startLocation, tagName, textValue, walkElements } from "../dom.js";
+/** `@keyframes ...` or an `animation`/`animation-*` declaration anywhere in the stylesheet text. */
+const ANIMATION_PATTERN = /@keyframes\b|(^|[;{\s])animation(-[a-z-]+)?\s*:/m;
+/** Drop HTML-comment spans so a `@keyframes` mentioned in a comment is not flagged as real CSS. */
+function stripComments(css) {
+    return css.replace(/<!--[\s\S]*?-->/g, "");
+}
+function styleText(element) {
+    let text = "";
+    for (const child of element.childNodes) {
+        text += textValue(child);
+    }
+    return text;
+}
+const SUGGESTED_FIX = "Remove @keyframes and the animation property. Animation has no meaning in a static PDF; use a static style for the printed state. There is no automatic fix.";
+export const cssAnimationRule = {
+    id: "css-animation",
+    severity: "error",
+    autoFixable: false,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element) => {
+            if (tagName(element) !== "style") {
+                return;
+            }
+            if (ANIMATION_PATTERN.test(stripComments(styleText(element)))) {
+                detections.push({
+                    element,
+                    location: startLocation(element),
+                    snippet: "@keyframes / animation",
+                    suggestedFix: SUGGESTED_FIX,
+                });
+            }
+        });
+        return detections;
+    },
+};
+//# sourceMappingURL=css-animation.js.map

package/dist/rules/css-animation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-animation.js","sourceRoot":"","sources":["../../src/rules/css-animation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAgB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAG1F,oGAAoG;AACpG,MAAM,iBAAiB,GAAG,kDAAkD,CAAC;AAE7E,mGAAmG;AACnG,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GACjB,8JAA8J,CAAC;AAEjK,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,eAAe;IACnB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,KAAK;IAClB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,UAAU,CAAC,IAAI,CAAC;oBACd,OAAO;oBACP,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC;oBAChC,OAAO,EAAE,wBAAwB;oBACjC,YAAY,EAAE,aAAa;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC"}

package/dist/rules/flex-grid-in-td.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const flexGridInTdRule: Rule;

package/dist/rules/flex-grid-in-td.js

@@ -0,0 +1,92 @@
+/**
+ * `flex-grid-in-td` codemod: a `<td>` whose inline `style` uses `display:flex` or `display:grid` is
+ * rewritten into an equivalent single-row nested `<table>`. Each child block becomes a cell of that
+ * row, preserving order and content; the `display` declaration is removed from the outer `<td>`.
+ *
+ * Scope (documented trade-off): this captures the common document pattern — a single row of inline
+ * blocks inside a cell. Wrapping, alignment, and gaps are not reproduced; cases beyond this pattern
+ * are still *diagnosed*, never silently mis-fixed. Idempotent — once `display` is gone the cell no
+ * longer matches, and the produced nested `<td>`s carry no `display:flex/grid`.
+ */
+import { getAttr, isCommentNode, isTextNode, removeAttr, setAttr, tagName, textValue, walkElements, } from "../dom.js";
+import { parseStyle, serializeStyle } from "../style.js";
+function isFlexGridDisplay(d) {
+    return d.property === "display" && (d.value === "flex" || d.value === "grid");
+}
+function flexOrGridDisplay(style) {
+    return parseStyle(style).some(isFlexGridDisplay);
+}
+function isFlexGridTd(element) {
+    if (tagName(element) !== "td") {
+        return false;
+    }
+    const style = getAttr(element, "style");
+    return style !== null && flexOrGridDisplay(style);
+}
+const SUGGESTED_FIX = "Replace display:flex/grid on this <td> with a nested <table> laying the children out in a single row. Flexbox and grid are outside the static PDF layout subset.";
+export const flexGridInTdRule = {
+    id: "flex-grid-in-td",
+    severity: "warning",
+    autoFixable: true,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element) => {
+            if (isFlexGridTd(element)) {
+                detections.push({ element, suggestedFix: SUGGESTED_FIX });
+            }
+        });
+        return detections;
+    },
+    apply(td) {
+        removeDisplayDeclaration(td);
+        const cells = td.childNodes.filter(isMeaningfulChild);
+        if (cells.length === 0) {
+            return;
+        }
+        const innerCells = cells.map((child) => makeCell(td, child));
+        const row = makeElement("tr", td, innerCells);
+        const tbody = makeElement("tbody", td, [row]);
+        const table = makeElement("table", td, [tbody]);
+        td.childNodes = [table];
+    },
+};
+/** Drop only the `display:flex`/`display:grid` declaration, keeping any other inline styles. */
+function removeDisplayDeclaration(td) {
+    const declarations = parseStyle(getAttr(td, "style") ?? "").filter((d) => !isFlexGridDisplay(d));
+    if (declarations.length > 0) {
+        setAttr(td, "style", serializeStyle(declarations));
+    }
+    else {
+        removeAttr(td, "style");
+    }
+}
+/** Whitespace-only text between flex items is layout gap, not content — it does not become a cell. */
+function isMeaningfulChild(node) {
+    if (isTextNode(node)) {
+        return textValue(node).trim() !== "";
+    }
+    if (isCommentNode(node)) {
+        return false;
+    }
+    return true;
+}
+function makeCell(parent, child) {
+    const cell = makeElement("td", parent, [child]);
+    child.parentNode = cell;
+    return cell;
+}
+function makeElement(name, parentNode, childNodes) {
+    const element = {
+        nodeName: name,
+        tagName: name,
+        attrs: [],
+        namespaceURI: parentNode.namespaceURI,
+        childNodes,
+        parentNode,
+    };
+    for (const child of childNodes) {
+        child.parentNode = element;
+    }
+    return element;
+}
+//# sourceMappingURL=flex-grid-in-td.js.map

package/dist/rules/flex-grid-in-td.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flex-grid-in-td.js","sourceRoot":"","sources":["../../src/rules/flex-grid-in-td.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAGL,OAAO,EACP,aAAa,EACb,UAAU,EACV,UAAU,EACV,OAAO,EACP,OAAO,EACP,SAAS,EACT,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAoB,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3E,SAAS,iBAAiB,CAAC,CAAc;IACvC,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,aAAa,GACjB,kKAAkK,CAAC;AAErK,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,iBAAiB;IACrB,QAAQ,EAAE,SAAS;IACnB,WAAW,EAAE,IAAI;IACjB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,EAAE;QACN,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF,CAAC;AAEF,gGAAgG;AAChG,SAAS,wBAAwB,CAAC,EAAW;IAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,iBAAiB,CAAC,IAAe;IACxC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,MAAe,EAAE,KAAgB;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,UAAmB,EAAE,UAAuB;IAC7E,MAAM,OAAO,GAAY;QACvB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,EAAE;QACT,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU;QACV,UAAU;KACX,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/rules/img-dimension-attrs.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const imgDimensionAttrsRule: Rule;

package/dist/rules/img-dimension-attrs.js

@@ -0,0 +1,49 @@
+/**
+ * `img-dimension-attrs` codemod: move presentational `width`/`height` HTML attributes on `<img>`
+ * into equivalent CSS, preserving any existing inline `style`, and remove the original attributes.
+ * Unitless numeric values are treated as pixels. Idempotent — `detect` matches only the *attributes*,
+ * and the produced CSS is never re-matched.
+ */
+import { getAttr, removeAttr, setAttr, tagName, walkElements } from "../dom.js";
+import { parseStyle, serializeStyle, toCssLength } from "../style.js";
+const DIMENSION_ATTRS = ["width", "height"];
+const SUGGESTED_FIX = 'Move the width/height HTML attributes into CSS (e.g. style="width:120px;height:80px"). Presentational image dimensions belong in the stylesheet, not as attributes.';
+function hasDimensionAttr(img) {
+    return DIMENSION_ATTRS.some((name) => getAttr(img, name) !== null);
+}
+export const imgDimensionAttrsRule = {
+    id: "img-dimension-attrs",
+    severity: "warning",
+    autoFixable: true,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element) => {
+            if (tagName(element) === "img" && hasDimensionAttr(element)) {
+                detections.push({ element, suggestedFix: SUGGESTED_FIX });
+            }
+        });
+        return detections;
+    },
+    apply(img) {
+        const declarations = parseStyle(getAttr(img, "style") ?? "");
+        for (const name of DIMENSION_ATTRS) {
+            const value = getAttr(img, name);
+            if (value === null) {
+                continue;
+            }
+            removeAttr(img, name);
+            const cssValue = toCssLength(value);
+            const existing = declarations.find((d) => d.property === name);
+            if (existing) {
+                existing.value = cssValue;
+            }
+            else {
+                declarations.push({ property: name, value: cssValue });
+            }
+        }
+        if (declarations.length > 0) {
+            setAttr(img, "style", serializeStyle(declarations));
+        }
+    },
+};
+//# sourceMappingURL=img-dimension-attrs.js.map

package/dist/rules/img-dimension-attrs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"img-dimension-attrs.js","sourceRoot":"","sources":["../../src/rules/img-dimension-attrs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAgB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9F,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAErD,MAAM,aAAa,GACjB,qKAAqK,CAAC;AAExK,SAAS,gBAAgB,CAAC,GAAY;IACpC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,SAAS;IACnB,WAAW,EAAE,IAAI;IACjB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,GAAG;QACP,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;YAC/D,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The ordered rule registry. `diagnose` and `fix` both iterate this single list so the two surfaces
+ * agree on what is a violation. Order here only affects fix application order; report findings are
+ * re-sorted by `(line, col, rule)` afterward.
+ */
+import type { Rule } from "../engine.js";
+export declare const RULES: Rule[];

package/dist/rules/index.js

@@ -0,0 +1,15 @@
+import { cssAnimationRule } from "./css-animation.js";
+import { flexGridInTdRule } from "./flex-grid-in-td.js";
+import { imgDimensionAttrsRule } from "./img-dimension-attrs.js";
+import { inlineSvgRule } from "./inline-svg.js";
+import { invalidMarkupRule } from "./invalid-markup.js";
+import { scriptElementRule } from "./script-element.js";
+export const RULES = [
+    inlineSvgRule,
+    flexGridInTdRule,
+    imgDimensionAttrsRule,
+    invalidMarkupRule,
+    scriptElementRule,
+    cssAnimationRule,
+];
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,CAAC,MAAM,KAAK,GAAW;IAC3B,aAAa;IACb,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;CACjB,CAAC"}

package/dist/rules/inline-svg.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const inlineSvgRule: Rule;

package/dist/rules/inline-svg.js

@@ -0,0 +1,92 @@
+/**
+ * `inline-svg` codemod: rasterize each inline `<svg>` to a PNG in-process via `@resvg/resvg-js` and
+ * replace the `<svg>` element with an `<img>` carrying a `data:image/png;base64` URI. Idempotent by
+ * construction — `detect` only matches `<svg>`, and the produced `<img>` is never re-matched.
+ *
+ * Determinism: resvg is pinned to `loadSystemFonts: false` and `fitTo: original`, with no time- or
+ * locale-dependent inputs, so the PNG bytes are byte-stable across runs and platforms.
+ */
+import { Resvg } from "@resvg/resvg-js";
+import { html } from "parse5";
+import { getAttr, serializeElement, tagName, walkElements } from "../dom.js";
+import { serializeStyle, toCssLength } from "../style.js";
+const RESVG_OPTIONS = {
+    font: { loadSystemFonts: false },
+    fitTo: { mode: "original" },
+};
+const SVG_NS = 'xmlns="http://www.w3.org/2000/svg"';
+const SUGGESTED_FIX = "Rasterize the inline <svg> to a PNG and reference it via an <img> with a data: URI, or provide the asset as a bundled raster image. SVG is outside the static PDF subset.";
+/** resvg requires a namespaced root; parse5 may serialize an inline `<svg>` without `xmlns`. */
+function ensureSvgNamespace(svgMarkup) {
+    if (svgMarkup.includes("xmlns=")) {
+        return svgMarkup;
+    }
+    return svgMarkup.replace(/^<svg/, `<svg ${SVG_NS}`);
+}
+/**
+ * Rasterize an inline `<svg>` to a PNG data URI. Returns `null` (not throws) when resvg cannot
+ * render the SVG (malformed XML, an unsupported feature, or text needing a font while
+ * `loadSystemFonts: false` is pinned), so one bad SVG leaves itself unconverted rather than crashing
+ * the whole document — the strict re-detect then reports it as a located diagnostic.
+ */
+function rasterizeToDataUri(svgMarkup) {
+    try {
+        const png = new Resvg(ensureSvgNamespace(svgMarkup), RESVG_OPTIONS).render().asPng();
+        return `data:image/png;base64,${png.toString("base64")}`;
+    }
+    catch {
+        return null;
+    }
+}
+export const inlineSvgRule = {
+    id: "inline-svg",
+    severity: "error",
+    autoFixable: true,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element) => {
+            if (tagName(element) === "svg") {
+                detections.push({ element, suggestedFix: SUGGESTED_FIX });
+            }
+        });
+        return detections;
+    },
+    apply(svg) {
+        const svgMarkup = serializeElement(svg);
+        const dataUri = rasterizeToDataUri(svgMarkup);
+        if (dataUri === null) {
+            // resvg could not render this SVG; leave it unconverted so the re-detect surfaces a located
+            // diagnostic instead of the whole render crashing on one bad element.
+            return;
+        }
+        convertSvgToImg(svg, dataUri);
+    },
+};
+/**
+ * Rewrite an `<svg>` element in place into an `<img>` carrying the PNG data URI. The SVG's `width`
+ * and `height` are emitted as CSS (not attributes) so the produced `<img>` is already conformant and
+ * is never re-matched by the `img-dimension-attrs` rule — preserving the fixed-point guarantee.
+ */
+function convertSvgToImg(svg, dataUri) {
+    const width = getAttr(svg, "width");
+    const height = getAttr(svg, "height");
+    const declarations = [];
+    if (width !== null) {
+        declarations.push({ property: "width", value: toCssLength(width) });
+    }
+    if (height !== null) {
+        declarations.push({ property: "height", value: toCssLength(height) });
+    }
+    // Mutate in place so parentNode links stay valid: become an <img>, drop SVG children/attrs. The
+    // namespace must move from SVG to HTML so parse5 serializes a void <img> (no closing tag) — this
+    // is what makes the codemod a re-serialization fixed point.
+    svg.tagName = "img";
+    svg.nodeName = "img";
+    svg.namespaceURI = html.NS.HTML;
+    svg.childNodes = [];
+    svg.attrs = [{ name: "src", value: dataUri }];
+    if (declarations.length > 0) {
+        svg.attrs.push({ name: "style", value: serializeStyle(declarations) });
+    }
+}
+//# sourceMappingURL=inline-svg.js.map

package/dist/rules/inline-svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-svg.js","sourceRoot":"","sources":["../../src/rules/inline-svg.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAgB,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE3F,OAAO,EAAoB,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;IAChC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE;CACrC,CAAC;AAEF,MAAM,MAAM,GAAG,oCAAoC,CAAC;AAEpD,MAAM,aAAa,GACjB,2KAA2K,CAAC;AAE9K,gGAAgG;AAChG,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACrF,OAAO,yBAAyB,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAS;IACjC,EAAE,EAAE,YAAY;IAChB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,IAAI;IACjB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,GAAG;QACP,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,4FAA4F;YAC5F,sEAAsE;YACtE,OAAO;QACT,CAAC;QACD,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAY,EAAE,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,gGAAgG;IAChG,iGAAiG;IACjG,4DAA4D;IAC5D,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC;IACpB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IACrB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;IAChC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;IACpB,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/rules/invalid-markup.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const invalidMarkupRule: Rule;

package/dist/rules/invalid-markup.js

@@ -0,0 +1,89 @@
+/**
+ * `invalid-markup` rule: detect and repair mis-nested tags and malformed `style=` attributes.
+ *
+ * Mis-nesting is repaired implicitly — `fix()` re-serializes parse5's normalized tree, which the
+ * HTML5 tree-construction (adoption-agency) algorithm has already re-nested correctly. Malformed
+ * `style=` is repaired explicitly in `apply` by re-parsing the attribute (which drops the invalid
+ * declarations) and re-serializing the surviving ones. Both paths are idempotent: a well-formed tree
+ * re-serializes unchanged, and a cleaned `style` re-parses to itself.
+ *
+ * Mis-nesting note: parse5 v8 silently repairs the adoption-agency case (`<b><i>x</b></i>`) WITHOUT
+ * an `onParseError` callback, so we detect it structurally: a formatting element that sits in the
+ * source (has a start-tag location) but lost its end-tag location because an enclosing formatting
+ * element was closed first. Malformed `style=` is detected on the parsed attribute.
+ */
+import { getAttr, removeAttr, setAttr, tagName, walkElements } from "../dom.js";
+import { hasMalformedStyle, parseStyle, serializeStyle } from "../style.js";
+/** Inline formatting elements subject to the HTML5 adoption-agency algorithm. */
+const FORMATTING_ELEMENTS = new Set([
+    "a",
+    "b",
+    "big",
+    "code",
+    "em",
+    "font",
+    "i",
+    "nobr",
+    "s",
+    "small",
+    "strike",
+    "strong",
+    "tt",
+    "u",
+]);
+/**
+ * A mis-nested formatting element: present in source (`startTag` location) but missing its own
+ * `endTag` location while nested directly inside another source-present formatting element. This is
+ * exactly the footprint adoption-agency repair leaves on `<b><i>x</b></i>`.
+ */
+function isMisNested(element, parent) {
+    if (!FORMATTING_ELEMENTS.has(tagName(element))) {
+        return false;
+    }
+    const loc = element.sourceCodeLocation;
+    if (!loc || !loc.startTag || loc.endTag) {
+        return false;
+    }
+    if (!parent || !FORMATTING_ELEMENTS.has(tagName(parent))) {
+        return false;
+    }
+    const parentLoc = parent.sourceCodeLocation;
+    return Boolean(parentLoc?.startTag);
+}
+const MISNEST_FIX = "Close inline tags in the order they were opened. The HTML5 parser normalizes mis-nested tags; the fix re-serializes the well-formed tree.";
+const STYLE_FIX = "Repair the malformed style attribute: every declaration needs a property:value pair. Invalid declarations are dropped.";
+export const invalidMarkupRule = {
+    id: "invalid-markup",
+    severity: "warning",
+    autoFixable: true,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element, parent) => {
+            if (isMisNested(element, parent)) {
+                detections.push({ element, suggestedFix: MISNEST_FIX });
+                return;
+            }
+            const style = getAttr(element, "style");
+            if (style !== null && hasMalformedStyle(style)) {
+                detections.push({ element, suggestedFix: STYLE_FIX });
+            }
+        });
+        return detections;
+    },
+    apply(element) {
+        // Only the malformed-`style` case needs an explicit rewrite; mis-nesting is repaired by parse5
+        // re-serialization. Re-parsing the style drops invalid declarations and keeps the valid ones.
+        const style = getAttr(element, "style");
+        if (style === null || !hasMalformedStyle(style)) {
+            return;
+        }
+        const declarations = parseStyle(style);
+        if (declarations.length > 0) {
+            setAttr(element, "style", serializeStyle(declarations));
+        }
+        else {
+            removeAttr(element, "style");
+        }
+    },
+};
+//# sourceMappingURL=invalid-markup.js.map

package/dist/rules/invalid-markup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-markup.js","sourceRoot":"","sources":["../../src/rules/invalid-markup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAgB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9F,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5E,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,GAAG;IACH,GAAG;IACH,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,GAAG;IACH,MAAM;IACN,GAAG;IACH,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,GAAG;CACJ,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAgB,EAAE,MAAsB;IAC3D,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAC5C,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,WAAW,GACf,2IAA2I,CAAC;AAE9I,MAAM,SAAS,GACb,wHAAwH,CAAC;AAE3H,MAAM,CAAC,MAAM,iBAAiB,GAAS;IACrC,EAAE,EAAE,gBAAgB;IACpB,QAAQ,EAAE,SAAS;IACnB,WAAW,EAAE,IAAI;IACjB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBACjC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,OAAO;QACX,+FAA+F;QAC/F,8FAA8F;QAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/rules/script-element.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../engine.js";
+export declare const scriptElementRule: Rule;

package/dist/rules/script-element.js

@@ -0,0 +1,22 @@
+/**
+ * `script-element` diagnostic: an inline `<script>` has no meaning in a static PDF and is rejected by
+ * the strict gate. There is no deterministic codemod (we cannot infer the author's intent), so this
+ * is reported with `autoFixable: false` and never rewritten.
+ */
+import { tagName, walkElements } from "../dom.js";
+const SUGGESTED_FIX = "Remove the <script> element. JavaScript does not execute in a static PDF; the strict render gate rejects it. There is no automatic fix.";
+export const scriptElementRule = {
+    id: "script-element",
+    severity: "error",
+    autoFixable: false,
+    detect(doc) {
+        const detections = [];
+        walkElements(doc.document, (element) => {
+            if (tagName(element) === "script") {
+                detections.push({ element, suggestedFix: SUGGESTED_FIX });
+            }
+        });
+        return detections;
+    },
+};
+//# sourceMappingURL=script-element.js.map

package/dist/rules/script-element.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-element.js","sourceRoot":"","sources":["../../src/rules/script-element.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGlD,MAAM,aAAa,GACjB,yIAAyI,CAAC;AAE5I,MAAM,CAAC,MAAM,iBAAiB,GAAS;IACrC,EAAE,EAAE,gBAAgB;IACpB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,KAAK;IAClB,MAAM,CAAC,GAAG;QACR,MAAM,UAAU,GAAgB,EAAE,CAAC;QACnC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;CACF,CAAC"}

package/dist/style.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A tiny, deterministic inline-`style` parser/serializer. Order-preserving so codemod output is
+ * byte-stable: declarations keep source order, and appended declarations land at the end. Property
+ * names are lower-cased for matching; values are trimmed. This is not a full CSS parser — it only
+ * needs to read/edit the `display`, `width`, and `height` declarations the codemods touch.
+ */
+export interface Declaration {
+    property: string;
+    value: string;
+}
+/** Parse an inline `style` value into ordered declarations, dropping empty/malformed segments. */
+export declare function parseStyle(style: string): Declaration[];
+/** Serialize declarations back into a canonical `prop:value;prop:value` string (no trailing space). */
+export declare function serializeStyle(declarations: Declaration[]): string;
+/** Treat a unitless numeric dimension as pixels; pass through values that already carry a unit. */
+export declare function toCssLength(value: string): string;
+/**
+ * A `style` value is malformed when it contains a non-empty segment that has no `:` separator (a
+ * bare token like `display flex`) — a declaration that the browser/engine would silently drop. Empty
+ * segments (trailing `;`) are tolerated, not malformed.
+ */
+export declare function hasMalformedStyle(style: string): boolean;

package/dist/style.js

@@ -0,0 +1,60 @@
+/**
+ * A tiny, deterministic inline-`style` parser/serializer. Order-preserving so codemod output is
+ * byte-stable: declarations keep source order, and appended declarations land at the end. Property
+ * names are lower-cased for matching; values are trimmed. This is not a full CSS parser — it only
+ * needs to read/edit the `display`, `width`, and `height` declarations the codemods touch.
+ */
+/** Parse an inline `style` value into ordered declarations, dropping empty/malformed segments. */
+export function parseStyle(style) {
+    const declarations = [];
+    for (const segment of style.split(";")) {
+        const trimmed = segment.trim();
+        if (trimmed === "") {
+            continue;
+        }
+        const colon = trimmed.indexOf(":");
+        if (colon === -1) {
+            continue;
+        }
+        const property = trimmed.slice(0, colon).trim().toLowerCase();
+        const value = trimmed.slice(colon + 1).trim();
+        if (property === "" || value === "") {
+            continue;
+        }
+        declarations.push({ property, value });
+    }
+    return declarations;
+}
+/** Serialize declarations back into a canonical `prop:value;prop:value` string (no trailing space). */
+export function serializeStyle(declarations) {
+    return declarations.map((d) => `${d.property}:${d.value}`).join(";");
+}
+/** Treat a unitless numeric dimension as pixels; pass through values that already carry a unit. */
+export function toCssLength(value) {
+    const trimmed = value.trim();
+    return /^\d+(\.\d+)?$/.test(trimmed) ? `${trimmed}px` : trimmed;
+}
+/**
+ * A `style` value is malformed when it contains a non-empty segment that has no `:` separator (a
+ * bare token like `display flex`) — a declaration that the browser/engine would silently drop. Empty
+ * segments (trailing `;`) are tolerated, not malformed.
+ */
+export function hasMalformedStyle(style) {
+    for (const segment of style.split(";")) {
+        const trimmed = segment.trim();
+        if (trimmed === "") {
+            continue;
+        }
+        const colon = trimmed.indexOf(":");
+        if (colon === -1) {
+            return true;
+        }
+        const property = trimmed.slice(0, colon).trim();
+        const value = trimmed.slice(colon + 1).trim();
+        if (property === "" || value === "") {
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=style.js.map

package/dist/style.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"style.js","sourceRoot":"","sources":["../src/style.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,YAAY,GAAkB,EAAE,CAAC;IACvC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,YAA2B;IACxD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,QAAQ,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Stable public contract for `@vellora/lint`. These shapes are consumed programmatically by AI
+ * agents and by the public API's best-effort mode, so the field set is fixed and the `rule`
+ * ids are stable kebab-case. Do not reshape without a versioned change.
+ */
+/** Stable kebab-case rule ids. The first four are auto-fixable codemods; the rest are diagnostics. */
+export type RuleId = "inline-svg" | "flex-grid-in-td" | "img-dimension-attrs" | "invalid-markup" | "script-element" | "css-animation";
+export type Severity = "error" | "warning";
+/** 1-based source position pointing at the offending node. */
+export interface SourceLocation {
+    line: number;
+    col: number;
+}
+/**
+ * A single detected subset violation. The field set is exactly this — humans read `suggestedFix`
+ * and `snippet`; agents key off `rule`, `severity`, `autoFixable`, and `compatLink`.
+ */
+export interface Finding {
+    /** Stable kebab-case rule id. */
+    rule: RuleId;
+    severity: Severity;
+    /** True iff one of the four deterministic codemods can repair this finding. */
+    autoFixable: boolean;
+    /** 1-based `{ line, col }` of the offending node. */
+    location: SourceLocation;
+    /** Human- and agent-readable description of the recommended change. */
+    suggestedFix: string;
+    /** The offending source fragment for the node. */
+    snippet: string;
+    /** Stable URL/anchor into the compatibility table for this rule. */
+    compatLink: string;
+    /** True on a `fix()` report when this finding was repaired by a codemod. */
+    applied?: boolean;
+}
+/** The structured report returned by `diagnose` and carried by `fix`. */
+export interface Report {
+    /** True when no findings were detected (input is within the subset). */
+    conformant: boolean;
+    /** Findings ordered deterministically by `(line, col, rule)`. */
+    findings: Finding[];
+}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Stable public contract for `@vellora/lint`. These shapes are consumed programmatically by AI
+ * agents and by the public API's best-effort mode, so the field set is fixed and the `rule`
+ * ids are stable kebab-case. Do not reshape without a versioned change.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@vellora/lint",
+  "version": "0.1.0-alpha.0",
+  "description": "Dev-time HTML diagnose + fix for the vellora HTML/CSS subset (parse5 + resvg).",
+  "keywords": [
+    "html-to-pdf",
+    "pdf",
+    "pdf-generation",
+    "invoice",
+    "boleto",
+    "receipt",
+    "pdfa",
+    "pdfua",
+    "tagged-pdf",
+    "no-puppeteer",
+    "no-chromium",
+    "serverless",
+    "wkhtmltopdf-alternative",
+    "napi-rs",
+    "nodejs"
+  ],
+  "homepage": "https://github.com/diomalta/vellora#readme",
+  "bugs": "https://github.com/diomalta/vellora/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/diomalta/vellora.git",
+    "directory": "packages/lint"
+  },
+  "license": "MIT",
+  "author": "Diego Malta <diohmalta@gmail.com>",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "sideEffects": false,
+  "engines": {
+    "node": ">=20"
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsc"
+  },
+  "dependencies": {
+    "@resvg/resvg-js": "2.6.2",
+    "parse5": "8.0.1"
+  },
+  "devDependencies": {
+    "@vellora/test-harness": "*"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}