@surea11y/pack-en301549 1.0.1 → 1.1.0

package/README.md

@@ -4,9 +4,9 @@ EN 301 549, the European accessibility standard, as a pack for [`@surea11y/core`
 
 Core has had EN 301 549 built in, deprecates it in 1.13 and removes it in 2.0.0. It moves here, so core keeps WCAG alone and a scan names EN 301 549 only when it is given the pack. The pack gives every result the WCAG and EN 301 549 entries core 1.12.1 gave it, in the same order (`tests/core-1.12.test.js`).
 
-It automates what can be checked in the page, not an EN 301 549 audit: chapter 9 restates WCAG, so the pack judges each clause by core's rules for its criterion, and a scan gives results for the clauses one of those rules checks (27 of V4.1.1's 55 and 26 of V3.2.1's 50, with core 1.12's rules). Many rules ask (`cantTell`) where only a person can judge, and a conformance claim still needs a person to check every clause. Chapters 10 (non-web documents) and 11 (software) are out of scope.
+It automates what can be checked in the page, not an EN 301 549 audit: chapter 9 restates WCAG, so the pack judges each clause by core's rules for its criterion, and a scan gives results for the clauses one of those rules checks (30 of V4.1.1's 55 and 29 of V3.2.1's 50, with core 1.14's rules). Many rules ask (`cantTell`) where only a person can judge, and a conformance claim still needs a person to check every clause. With core 1.14, no clause passes: core's rules check only part of what each criterion asks, so where they all pass the clause is `cantTell` (`composite.rollup.cantTell.partialCheck`), as its WCAG criterion is. Chapters 10 (non-web documents) and 11 (software) are out of scope.
 
-It needs `@surea11y/core` 1.13.0 or later. From 1.13, a scan given the pack uses the pack's EN 301 549 in place of core's deprecated built-in, with no deprecation notice. Core 1.12 and earlier register the `en301549` key themselves, so a scan there skips the pack.
+It needs `@surea11y/core` 1.13.0 or later. From 1.13, a scan given the pack uses the pack's EN 301 549 in place of core's deprecated built-in, with no deprecation notice. Core 1.12 and earlier register the `en301549` key themselves, so a scan there skips the pack. With core 1.14.0 or later, a clause is judged as core judges the criterion it restates, and V3.2.1 keeps 4.1.1 Parsing; with 1.13, the pack behaves as its 1.0 releases do (see the [changelog](./CHANGELOG.md)).
 
 ```sh
 npm install @surea11y/core @surea11y/pack-en301549
@@ -18,7 +18,17 @@ Add the pack to `engineOptions.packs` (in a page, with `packScript()`) and keep
 
 ## Using it
 
-The pack runs wherever core runs: in Node on a jsdom page, in a real browser driven by Playwright or Puppeteer, from the command line, and in core's browser bindings. In each, give the scan the pack, and either choose a profile or ask for the clauses with `mappings`.
+The pack runs wherever core runs. In each place, give the scan the pack, and either choose a profile or ask for the clauses with `mappings`:
+
+| Where | How the scan gets the pack | Rendered page |
+|---|---|---|
+| Node, on a jsdom page (or `runa11yCoreOnHtml` from `@surea11y/core/testing`) | `packs: [en301549]` | no: the HTML as parsed, without layout |
+| A browser driven by Playwright or Puppeteer, yours | `packScript([en301549])` injected after core's browser bundle | yes |
+| Core's bindings (Playwright, Puppeteer, Selenium, WebdriverIO, Cypress) | `.withPacks(en301549)` | yes |
+| Core's CLI, `@surea11y/cli` | `--pack @surea11y/pack-en301549` | no: static HTML, its scripts not run; yes with `--browser` (`@surea11y/cli` 1.4.0) |
+| A page with no driver: a `<script>` tag, a bookmarklet, a browser extension | a script file written once in Node, loaded after core's bundle | yes |
+
+Where the page is rendered, the rules that measure the layout decide (9.2.5.8 Target size (minimum), the geometry of 9.1.4.3 Contrast); on jsdom they answer `notApplicable` or `cantTell`, and `engine.environment.layout` says which kind of scan it was. A clause can so be `cantTell` in Node and fail in a browser, or the reverse. See core's [`LIMITATIONS.md`](https://github.com/SureA11y/core/blob/main/docs/LIMITATIONS.md).
 
 ### A scan against EN 301 549
 
@@ -43,7 +53,7 @@ dom.window.close();
 | Profile | Runs | Judged by | Reports |
 |---|---|---|---|
 | `en301549-v4.1.1` | every core rule mapped to a WCAG 2.2 A or AA criterion | WCAG 2.2 | one result per V4.1.1 clause, `en301549-V4.1.1-9.1.1.1` and so on |
-| `en301549-v3.2.1` | every core rule mapped to a WCAG 2.1 A or AA criterion | WCAG 2.1, so 4.1.1 Parsing counts | one result per V3.2.1 clause, 9.4.1.1 included |
+| `en301549-v3.2.1` | every core rule mapped to a WCAG 2.1 A or AA criterion | WCAG 2.1, with 4.1.1 Parsing, which the 2023 errata count as satisfied and V3.2.1 keeps (`keepsParsing`) | one result per V3.2.1 clause, 9.4.1.1 included |
 
 Under either profile, `rulesResults` holds EN 301 549's clauses and nothing of WCAG. A rule's result in `checksResults` still names its WCAG criterion, followed by its clause, in `meta.normativeMappings`, and the clauses it counts towards in `rollupIds`. A best-practice rule, or one mapped only to AAA criteria, doesn't run: no clause restates its criteria.
 
@@ -62,22 +72,94 @@ runDomRulesInPage(url, null, { packs: [en301549], profile: 'wcag22-aa', mappings
 
 A rule names the clause of each of its criteria; a WCAG rollup names the clause of its own criterion, whichever of its rules decided it. SARIF tags each rule `en301549-9.1.1.1`, JUnit adds an `en301549` property per clause, and the HTML report shows the clause beside each criterion.
 
-### In a browser
+### In a browser you drive
 
-A pack is prepared in Node, so it reaches the page as a script: inject `packScript()` after core's browser bundle, and name the pack in `engineOptions.packs` as `name@version` (see [Packs in a page](https://github.com/SureA11y/core/blob/main/docs/INTEGRATION.md#packs-in-a-page)):
+A pack is prepared in Node, where `@surea11y/core/pack` reads core's rules, so it reaches the page as a script: inject core's browser bundle, then `packScript()`, and name the pack in `engineOptions.packs` as `name@version` (see core's [Packs in a page](https://github.com/SureA11y/core/blob/main/docs/INTEGRATION.md#packs-in-a-page)). In Playwright or Puppeteer:
 
 ```js
-const { runa11yCoreInPage } = require('@surea11y/core');
+const fs = require('node:fs');
 const { packScript } = require('@surea11y/core/pack');
+const { listenerHookScript, addHowToCheck } = require('@surea11y/core');
 const en301549 = require('@surea11y/pack-en301549');
 
 const engineOptions = { packs: [`${en301549.name}@${en301549.version}`], profile: 'en301549-v4.1.1' };
 
+await page.addInitScript({ content: listenerHookScript() }); // Puppeteer: evaluateOnNewDocument
+await page.goto(url);
+await page.evaluate(fs.readFileSync(require.resolve('@surea11y/core/browser'), 'utf8'));
 await page.evaluate(packScript([en301549]));
-const result = await page.evaluate(runa11yCoreInPage, page.url(), null, engineOptions, null);
+const inPage = await page.evaluate(
+  (options) => window.a11ycore.runa11yCoreInPage(location.href, null, options, null),
+  engineOptions
+);
+inPage.skippedPacks; // undefined: the page ran the pack
+const result = addHowToCheck(inPage, { packs: [en301549] });
+```
+
+Inject both into every frame you scan. The scan gives the clauses a scan in Node gives (`tests/browser.test.js`).
+
+The two lines around the scan are optional, and need core 1.14. Core's hooks run before the page's own scripts, so some rules see what those scripts do. With the listener hook, a `role="button"` given a click handler from script that nothing can focus fails 9.2.1.1, where without it the clause asks. `internalsHookScript()` and `liveRegionHookScript()` do the same for `ElementInternals` and status messages (9.4.1.3); see core's [`BINDING_AUTHORS_GUIDE.md`](https://github.com/SureA11y/core/blob/main/docs/BINDING_AUTHORS_GUIDE.md). The engine in the page leaves out the steps to answer each question (`howToCheck`), and `addHowToCheck` adds them in Node, as a scan in Node has them.
+
+### With core's bindings
+
+The bindings register the pack in the page, and in every frame with `.frames(true)`, and those built on core 1.14 install its hooks and add the steps to each question for you:
+
+```js
+const { A11yCoreBuilder } = require('@surea11y/playwright'); // or puppeteer, selenium, webdriverio
+const en301549 = require('@surea11y/pack-en301549');
+
+const results = await new A11yCoreBuilder({ page })
+  .withPacks(en301549)
+  .options({ profile: 'en301549-v4.1.1' })
+  .analyze();
+```
+
+In Cypress, `.withPacks('@surea11y/pack-en301549')` takes the package name, and the binding's plugin prepares the pack in Node. A pack the page didn't run is a `'pack-skipped'` gap in `getScanGaps(results)`.
+
+### From the CLI
+
+```sh
+npx surea11y scan ./dist/index.html --pack @surea11y/pack-en301549 --profile en301549-v4.1.1
 ```
 
-Core's bindings register it with `.withPacks(en301549)`, and the CLI takes `--pack @surea11y/pack-en301549 --profile en301549-v4.1.1`, as for any pack.
+Install the pack in the project beside `@surea11y/cli`. The CLI scans the HTML as it is, without running its scripts. From `@surea11y/cli` 1.4.0, `--browser` scans the page in headless Chromium through Playwright, with its scripts run and core's hooks installed, and the pack runs there too:
+
+```sh
+npx surea11y scan https://example.com/ --browser --pack @surea11y/pack-en301549 --profile en301549-v4.1.1
+```
+
+### In a page of your own: a script tag, an extension
+
+A page with no driver, such as a manual check, a bookmarklet or a browser extension's content script, loads the pack as it loads core: as a file. Build one file in Node, core's browser bundle with the pack registered after it, from the core you will ship:
+
+```sh
+node -e "const fs = require('node:fs'); const { buildBrowserBundle } = require('@surea11y/core/pack'); fs.writeFileSync('surea11y-en301549.js', buildBrowserBundle({ packs: [require('@surea11y/pack-en301549')] }))"
+```
+
+```html
+<script src="surea11y-en301549.js"></script>
+<script>
+  const result = a11ycore.runa11yCoreInPage(location.href, null, {
+    packs: ['@surea11y/pack-en301549@<version>'], // the version the file was built with
+    profile: 'en301549-v4.1.1'
+  }, null);
+</script>
+```
+
+The pack's script runs only with the core it was prepared with, since it carries the catalog core and the pack make together: a page with another core's bundle runs the scan without the pack, and lists it in `skippedPacks` naming the two versions. One file can't fall out of step that way. Build it again when you update core or the pack, and update the `name@version` the page names with it: `require('@surea11y/pack-en301549').version` gives the installed version. For the same reason the pack ships no prebuilt file: it would fit one core release, and the pack supports every one from 1.13.0.
+
+Where core's bundle is already on the page (a tool that loads it for its own scans, a language side file after it), load `packScript([en301549])` from `@surea11y/core/pack` after the bundle instead, written to a file with the same core. Either is plain functions, so it runs where a Content Security Policy forbids `eval`.
+
+### Building a tool on it
+
+An extension, an online validator, a dashboard or a CI step runs the pack in one of the places above. A validator that loads a URL in a headless browser on the server is the browser case; one that checks the HTML it is given, without its scripts, is the jsdom case. For any of them:
+
+- Check `skippedPacks` before treating a scan as complete: a scan that skips the pack still finishes, without the clauses. `engine.packs` names the pack that ran with its installed version, such as `@surea11y/pack-en301549@1.1.0`.
+- Read the clauses from `rulesResults` (`meta.standard === 'EN 301 549'`) under the profiles, or from `meta.normativeMappings` with `mappings`. `result.standards` names EN 301 549, so core's HTML, SARIF and JUnit reporters render a stored result the same wherever they run, with or without the pack installed.
+- Say what the scan was: a result is automated checks on one page in one state, not an audit, and many clauses come back `cantTell` or are not checked at all. The clause table (below) lists the clauses a scan didn't cover.
+- Say which kind of page it scanned (`engine.environment.layout`), since the layout rules decide only in a rendered page.
+
+Core's [`BUILDING_ON_CORE.md`](https://github.com/SureA11y/core/blob/main/docs/BUILDING_ON_CORE.md) covers the rest: which runner, when to scan, presenting results, comparing runs.
 
 ### The clause table
 
@@ -104,7 +186,7 @@ The pack has no rules of its own: chapter 9 asks nothing WCAG doesn't.
 
 ## Tests
 
-Install Chromium once with `npx playwright install chromium`. `npm test` checks the formatting, lints, checks the docs (`surea11y-pack docs --check`, `docs/RULE_CATALOG.md`), then runs `tests/`: the clause table against WCAG's criteria per version, what each profile runs and reports, the mappings option, a scan in Chromium with `packScript`, and every result on core's scenario pages against core 1.12.1's (installed as `core-1.12`; it reads the pages from a core checkout beside this one, `../core`, and is skipped without one). They scan with the pack through `@surea11y/core/testing` (`tests/helpers/run.js`).
+Install Chromium once with `npx playwright install chromium`. `npm test` checks the formatting, lints, checks the docs (`surea11y-pack docs --check`, `docs/RULE_CATALOG.md`), then runs `tests/`: the clause table against WCAG's criteria per version, what each profile runs and reports, the mappings option, a scan in Chromium with `packScript` and with core's listener hook, and every result on core's scenario pages against core 1.12.1's (installed as `core-1.12`; it reads the pages from a core checkout beside this one, `../core`, and is skipped without one). They scan with the pack through `@surea11y/core/testing` (`tests/helpers/run.js`).
 
 ## Licence
 

package/docs/RULE_CATALOG.md

@@ -10,7 +10,7 @@ The tables below are an index; [rule reference](#rule-reference) carries each ru
 
 A rule with a **Margin** line measures a value against a threshold, and its check result's `margin` says how close the closest element came while still meeting it (see [`OUTPUT_SCHEMA.md`](https://github.com/SureA11y/core/blob/main/docs/OUTPUT_SCHEMA.md#a-check-result-checksresultsi)). Unlike the fields below, it is a stable contract.
 
-Under **What a finding reports**, a rule lists the fields its findings carry in `data.details` besides `reasonCode`, and what each one means. They help to read and reproduce a finding, but apart from `reasonCode` they are not a stable contract (see [`OUTPUT_SCHEMA.md`](https://github.com/SureA11y/core/blob/main/docs/OUTPUT_SCHEMA.md#an-occurrence-occurrencesi)): a field may be renamed or dropped in a minor release, so do not build on them.
+Under **What a finding reports**, a rule lists the fields its findings carry in `data.details` besides `reasonCode`, and what each one means. They help to read and reproduce a finding, but apart from `reasonCode` (and the few fields [`API_STABILITY.md`](https://github.com/SureA11y/core/blob/main/docs/API_STABILITY.md) names, such as the contrast size fields) they are not a stable contract (see [`OUTPUT_SCHEMA.md`](https://github.com/SureA11y/core/blob/main/docs/OUTPUT_SCHEMA.md#an-occurrence-occurrencesi)): a field may be renamed or dropped in a minor release, so do not build on them.
 
 See [`OUTPUT_SCHEMA.md`](https://github.com/SureA11y/core/blob/main/docs/OUTPUT_SCHEMA.md) for what `type`/`confidence`/`severity` mean on a scan result, and [`WCAG_CONFORMANCE.md`](https://github.com/SureA11y/core/blob/main/docs/WCAG_CONFORMANCE.md) for how these roll up to an SC-level conformance claim.
 
@@ -33,7 +33,7 @@ What a scan runs under each profile (`engineOptions.profile`): the rules its tag
 | `en301549-v4.1.1` | `en301549` | version V4.1.1 | — | — | — | 2.2 |
 | `en301549-v3.2.1` | `en301549` | version V3.2.1 | — | — | — | 2.1 |
 
-## Rollups (53)
+## Rollups (59)
 
 Each groups rules into one result, as a WCAG rollup does; the standard's own report sections show them.
 
@@ -42,7 +42,7 @@ Each groups rules into one result, as a WCAG rollup does; the standard's own rep
 | `en301549-V3.2.1-9.1.1.1` | Non-text content | `area-alt-present`, `area-alt-quality`, `canvas-text-alternative-present`, `canvas-text-alternative-quality`, `embed-text-alternative-present`, `embed-text-alternative-quality`, `img-alt-decorative`, `img-alt-present`, `img-alt-quality`, `input-image-alt-decorative`, `input-image-alt-present`, `input-image-alt-quality`, `meter-name-present`, `object-text-alternative-present`, `object-text-alternative-quality`, `progressbar-name-present`, `role-img-text-alternative-present`, `svg-image-text-alternative-present`, `svg-text-alternative-present`, `svg-text-alternative-quality`, `video-poster-text-alternative-present` |
 | `en301549-V3.2.1-9.1.2.1` | Audio-only and video-only (pre-recorded) | `media-alternative-transcript-evidence` |
 | `en301549-V3.2.1-9.1.2.2` | Captions (pre-recorded) | `video-caption` |
-| `en301549-V3.2.1-9.1.3.1` | Info and relationships | `aria-hidden-body`, `aria-prohibited-children`, `aria-required-children`, `aria-required-parent`, `aria-roles-valid`, `definition-list-children-valid`, `dlitem-parent-valid`, `form-control-programmatic-label-present`, `list-children-valid`, `listitem-parent-valid`, `p-as-heading`, `table-fake-caption`, `table-headers-attr-valid`, `table-th-has-data-cells`, `td-has-header` |
+| `en301549-V3.2.1-9.1.3.1` | Info and relationships | `aria-hidden-body`, `aria-owns-valid`, `aria-prohibited-children`, `aria-required-children`, `aria-required-parent`, `aria-roles-valid`, `definition-list-children-valid`, `dlitem-parent-valid`, `form-control-programmatic-label-present`, `list-children-valid`, `listitem-parent-valid`, `p-as-heading`, `table-fake-caption`, `table-headers-attr-valid`, `table-th-has-data-cells`, `td-has-header` |
 | `en301549-V3.2.1-9.1.3.4` | Orientation | `css-orientation-lock` |
 | `en301549-V3.2.1-9.1.3.5` | Identify input purpose | `autocomplete-valid` |
 | `en301549-V3.2.1-9.1.4.1` | Use of colour | `link-in-text-block` |
@@ -50,25 +50,28 @@ Each groups rules into one result, as a WCAG rollup does; the standard's own rep
 | `en301549-V3.2.1-9.1.4.2` | Audio control | `no-autoplay-audio` |
 | `en301549-V3.2.1-9.1.4.3` | Contrast (minimum) | `contrast-computable`, `contrast-minimum` |
 | `en301549-V3.2.1-9.1.4.4` | Resize text | `meta-viewport-zoom-enabled` |
-| `en301549-V3.2.1-9.2.1.1` | Keyboard | `iframe-focusable-content`, `manual-review`, `mouse-only-event-handlers`, `scrollable-region-focusable`, `server-side-image-map-absent` |
+| `en301549-V3.2.1-9.1.4.5` | Images of text | `image-of-text` |
+| `en301549-V3.2.1-9.2.1.1` | Keyboard | `click-handler-keyboard-operable`, `focus-not-removed-by-script`, `iframe-focusable-content`, `manual-review`, `mouse-only-event-handlers`, `scrollable-region-focusable`, `server-side-image-map-absent`, `widget-keyboard-focusable` |
 | `en301549-V3.2.1-9.2.2.1` | Timing adjustable | `meta-refresh-timing-absent` |
-| `en301549-V3.2.1-9.2.2.2` | Pause, stop, hide | `deprecated-elements-not-used` |
+| `en301549-V3.2.1-9.2.2.2` | Pause, stop, hide | `deprecated-elements-not-used`, `moving-content-pausable` |
 | `en301549-V3.2.1-9.2.4.1` | Bypass blocks | `bypass-blocks-present` |
 | `en301549-V3.2.1-9.2.4.2` | Page titled | `page-title-patterns`, `page-title-present` |
 | `en301549-V3.2.1-9.2.4.3` | Focus Order | `manual-review` |
 | `en301549-V3.2.1-9.2.4.4` | Link purpose (in context) | `link-name-present`, `link-name-quality` |
 | `en301549-V3.2.1-9.2.4.6` | Headings and labels | `form-control-label-quality`, `heading-quality` |
-| `en301549-V3.2.1-9.2.4.7` | Focus visible | `css-focus-indicator-suppressed`, `css-hidden-focus`, `manual-review` |
+| `en301549-V3.2.1-9.2.4.7` | Focus visible | `css-focus-indicator-suppressed`, `css-hidden-focus`, `focus-not-removed-by-script`, `manual-review` |
 | `en301549-V3.2.1-9.2.5.3` | Label in name | `label-in-name` |
 | `en301549-V3.2.1-9.3.1.1` | Language of page | `html-lang-attr-present`, `html-xml-lang-mismatch` |
 | `en301549-V3.2.1-9.3.1.2` | Language of parts | `valid-lang` |
+| `en301549-V3.2.1-9.3.3.1` | Error identification | `invalid-field-error-message` |
 | `en301549-V3.2.1-9.3.3.2` | Labels or instructions | `form-control-programmatic-label-present`, `form-control-programmatic-label-quality`, `form-control-single-label` |
 | `en301549-V3.2.1-9.4.1.1` | Parsing | `duplicate-id` |
-| `en301549-V3.2.1-9.4.1.2` | Name, role, value | `aria-allowed-attr`, `aria-braille-equivalent`, `aria-checked-state-mismatch`, `aria-conditional-attr`, `aria-deprecated-role`, `aria-hidden-body`, `aria-hidden-focus`, `aria-prohibited-attr`, `aria-required-attr`, `aria-role-name-present`, `aria-roles-valid`, `aria-valid-attr`, `aria-valid-attr-value`, `binary-control-name-present`, `button-name-present`, `combobox-name-present`, `dialog-name-present`, `duplicate-id-aria`, `form-control-programmatic-label-present`, `identical-iframes-same-purpose`, `iframe-name-present`, `iframe-title-unique`, `input-image-alt-present`, `link-name-present`, `listbox-name-present`, `menuitem-name-present`, `nested-interactive-controls-absent`, `option-name-present`, `presentational-children-focusable-absent`, `searchbox-name-present`, `slider-name-present`, `spinbutton-name-present`, `summary-name-present`, `tab-name-present`, `textbox-name-present`, `tooltip-name-present`, `treeitem-name-present` |
+| `en301549-V3.2.1-9.4.1.2` | Name, role, value | `aria-allowed-attr`, `aria-braille-equivalent`, `aria-checked-state-mismatch`, `aria-conditional-attr`, `aria-deprecated-role`, `aria-expanded-state-mismatch`, `aria-hidden-body`, `aria-hidden-focus`, `aria-owns-valid`, `aria-prohibited-attr`, `aria-required-attr`, `aria-role-name-present`, `aria-roles-valid`, `aria-valid-attr`, `aria-valid-attr-value`, `binary-control-name-present`, `button-name-present`, `combobox-name-present`, `dialog-name-present`, `duplicate-id-aria`, `form-control-programmatic-label-present`, `identical-iframes-same-purpose`, `iframe-name-present`, `iframe-title-unique`, `input-image-alt-present`, `link-name-present`, `listbox-name-present`, `menuitem-name-present`, `nested-interactive-controls-absent`, `option-name-present`, `presentational-children-focusable-absent`, `searchbox-name-present`, `slider-name-present`, `spinbutton-name-present`, `summary-name-present`, `tab-name-present`, `textbox-name-present`, `tooltip-name-present`, `treeitem-name-present` |
+| `en301549-V3.2.1-9.4.1.3` | Status messages | `live-region-announcements` |
 | `en301549-V4.1.1-9.1.1.1` | Non-text content | `area-alt-present`, `area-alt-quality`, `canvas-text-alternative-present`, `canvas-text-alternative-quality`, `embed-text-alternative-present`, `embed-text-alternative-quality`, `img-alt-decorative`, `img-alt-present`, `img-alt-quality`, `input-image-alt-decorative`, `input-image-alt-present`, `input-image-alt-quality`, `meter-name-present`, `object-text-alternative-present`, `object-text-alternative-quality`, `progressbar-name-present`, `role-img-text-alternative-present`, `svg-image-text-alternative-present`, `svg-text-alternative-present`, `svg-text-alternative-quality`, `video-poster-text-alternative-present` |
 | `en301549-V4.1.1-9.1.2.1` | Audio-only and video-only (pre-recorded) | `media-alternative-transcript-evidence` |
 | `en301549-V4.1.1-9.1.2.2` | Subtitles (pre-recorded) | `video-caption` |
-| `en301549-V4.1.1-9.1.3.1` | Info and relationships | `aria-hidden-body`, `aria-prohibited-children`, `aria-required-children`, `aria-required-parent`, `aria-roles-valid`, `definition-list-children-valid`, `dlitem-parent-valid`, `form-control-programmatic-label-present`, `list-children-valid`, `listitem-parent-valid`, `p-as-heading`, `table-fake-caption`, `table-headers-attr-valid`, `table-th-has-data-cells`, `td-has-header` |
+| `en301549-V4.1.1-9.1.3.1` | Info and relationships | `aria-hidden-body`, `aria-owns-valid`, `aria-prohibited-children`, `aria-required-children`, `aria-required-parent`, `aria-roles-valid`, `definition-list-children-valid`, `dlitem-parent-valid`, `form-control-programmatic-label-present`, `list-children-valid`, `listitem-parent-valid`, `p-as-heading`, `table-fake-caption`, `table-headers-attr-valid`, `table-th-has-data-cells`, `td-has-header` |
 | `en301549-V4.1.1-9.1.3.4` | Orientation | `css-orientation-lock` |
 | `en301549-V4.1.1-9.1.3.5` | Identify input purpose | `autocomplete-valid` |
 | `en301549-V4.1.1-9.1.4.1` | Use of colour | `link-in-text-block` |
@@ -76,22 +79,25 @@ Each groups rules into one result, as a WCAG rollup does; the standard's own rep
 | `en301549-V4.1.1-9.1.4.2` | Audio control | `no-autoplay-audio` |
 | `en301549-V4.1.1-9.1.4.3` | Contrast (minimum) | `contrast-computable`, `contrast-minimum` |
 | `en301549-V4.1.1-9.1.4.4` | Resize text | `meta-viewport-zoom-enabled` |
-| `en301549-V4.1.1-9.2.1.1` | Keyboard | `iframe-focusable-content`, `manual-review`, `mouse-only-event-handlers`, `scrollable-region-focusable`, `server-side-image-map-absent` |
+| `en301549-V4.1.1-9.1.4.5` | Images of text | `image-of-text` |
+| `en301549-V4.1.1-9.2.1.1` | Keyboard | `click-handler-keyboard-operable`, `focus-not-removed-by-script`, `iframe-focusable-content`, `manual-review`, `mouse-only-event-handlers`, `scrollable-region-focusable`, `server-side-image-map-absent`, `widget-keyboard-focusable` |
 | `en301549-V4.1.1-9.2.2.1` | Timing adjustable | `meta-refresh-timing-absent` |
-| `en301549-V4.1.1-9.2.2.2` | Pause, stop, hide | `deprecated-elements-not-used` |
+| `en301549-V4.1.1-9.2.2.2` | Pause, stop, hide | `deprecated-elements-not-used`, `moving-content-pausable` |
 | `en301549-V4.1.1-9.2.4.1` | Bypass blocks | `bypass-blocks-present` |
 | `en301549-V4.1.1-9.2.4.2` | Page titled | `page-title-patterns`, `page-title-present` |
 | `en301549-V4.1.1-9.2.4.3` | Focus order | `manual-review` |
 | `en301549-V4.1.1-9.2.4.4` | Link purpose (in context) | `link-name-present`, `link-name-quality` |
 | `en301549-V4.1.1-9.2.4.6` | Headings and labels | `form-control-label-quality`, `heading-quality` |
-| `en301549-V4.1.1-9.2.4.7` | Focus visible | `css-focus-indicator-suppressed`, `css-hidden-focus`, `manual-review` |
+| `en301549-V4.1.1-9.2.4.7` | Focus visible | `css-focus-indicator-suppressed`, `css-hidden-focus`, `focus-not-removed-by-script`, `manual-review` |
 | `en301549-V4.1.1-9.2.5.3` | Label in name | `label-in-name` |
 | `en301549-V4.1.1-9.2.5.8` | Target size (minimum) | `target-size-minimum` |
 | `en301549-V4.1.1-9.3.1.1` | Language of page | `html-lang-attr-present`, `html-xml-lang-mismatch` |
 | `en301549-V4.1.1-9.3.1.2` | Language of parts | `valid-lang` |
+| `en301549-V4.1.1-9.3.3.1` | Error identification | `invalid-field-error-message` |
 | `en301549-V4.1.1-9.3.3.2` | Labels or instructions | `form-control-programmatic-label-present`, `form-control-programmatic-label-quality`, `form-control-single-label` |
 | `en301549-V4.1.1-9.3.3.8` | Accessible authentication (minimum) | `password-paste-enabled` |
-| `en301549-V4.1.1-9.4.1.2` | Name, role, value | `aria-allowed-attr`, `aria-braille-equivalent`, `aria-checked-state-mismatch`, `aria-conditional-attr`, `aria-deprecated-role`, `aria-hidden-body`, `aria-hidden-focus`, `aria-prohibited-attr`, `aria-required-attr`, `aria-role-name-present`, `aria-roles-valid`, `aria-valid-attr`, `aria-valid-attr-value`, `binary-control-name-present`, `button-name-present`, `combobox-name-present`, `dialog-name-present`, `duplicate-id-aria`, `form-control-programmatic-label-present`, `identical-iframes-same-purpose`, `iframe-name-present`, `iframe-title-unique`, `input-image-alt-present`, `link-name-present`, `listbox-name-present`, `menuitem-name-present`, `nested-interactive-controls-absent`, `option-name-present`, `presentational-children-focusable-absent`, `searchbox-name-present`, `slider-name-present`, `spinbutton-name-present`, `summary-name-present`, `tab-name-present`, `textbox-name-present`, `tooltip-name-present`, `treeitem-name-present` |
+| `en301549-V4.1.1-9.4.1.2` | Name, role, value | `aria-allowed-attr`, `aria-braille-equivalent`, `aria-checked-state-mismatch`, `aria-conditional-attr`, `aria-deprecated-role`, `aria-expanded-state-mismatch`, `aria-hidden-body`, `aria-hidden-focus`, `aria-owns-valid`, `aria-prohibited-attr`, `aria-required-attr`, `aria-role-name-present`, `aria-roles-valid`, `aria-valid-attr`, `aria-valid-attr-value`, `binary-control-name-present`, `button-name-present`, `combobox-name-present`, `dialog-name-present`, `duplicate-id-aria`, `form-control-programmatic-label-present`, `identical-iframes-same-purpose`, `iframe-name-present`, `iframe-title-unique`, `input-image-alt-present`, `link-name-present`, `listbox-name-present`, `menuitem-name-present`, `nested-interactive-controls-absent`, `option-name-present`, `presentational-children-focusable-absent`, `searchbox-name-present`, `slider-name-present`, `spinbutton-name-present`, `summary-name-present`, `tab-name-present`, `textbox-name-present`, `tooltip-name-present`, `treeitem-name-present` |
+| `en301549-V4.1.1-9.4.1.3` | Status messages | `live-region-announcements` |
 
 ## Rule reference
 

package/index.js

@@ -36,13 +36,16 @@ const STANDARD = 'EN 301 549';
 const wcagVersionOf = (v) => VERSIONS.find((x) => x.version === v).wcagVersion;
 
 // A rollup per clause, grouping the rules that check it, and the checks of
-// the two tables, from core's kit.
+// the two tables, from core's kit. Each clause restates its WCAG criterion,
+// so it is notApplicable only where the criterion's WCAG rollup is (core
+// 1.14.0 and later; an older core ignores the option).
 const { composites, validate } = ruleMappedStandard({
   standard: STANDARD,
   tag: NAMESPACE,
   versions: VERSIONS,
   requirements: REQUIREMENTS,
-  ruleMap: RULE_REQUIREMENTS
+  ruleMap: RULE_REQUIREMENTS,
+  applicability: 'wcag'
 });
 
 // The entries for a rule or a WCAG rollup: the clause that restates each of
@@ -70,12 +73,16 @@ function mappingsFor({ wcagSc }) {
 // (mappedRules), and nothing else, so results hold its clauses and no WCAG
 // criteria. With no WCAG tag to imply it, the profile names the WCAG version
 // the standard's version is built on, so 4.1.1 Parsing counts under V3.2.1
-// and not under V4.1.1.
+// and not under V4.1.1. V3.2.1 keeps 4.1.1's text (clause 9.4.1.1), which
+// the 2023 errata to WCAG 2.1 don't amend, so it says keepsParsing: from core
+// 1.14 a duplicate id under it then still fails, where it would be asked
+// about. Core 1.13 and earlier ignore the key.
 const profile = (v) => ({
   version: v,
   tags: [NAMESPACE],
   mappedRules: true,
-  wcagVersion: wcagVersionOf(v)
+  wcagVersion: wcagVersionOf(v),
+  ...(wcagVersionOf(v) === '2.2' ? {} : { keepsParsing: true })
 });
 
 module.exports = definePack({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@surea11y/pack-en301549",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "EN 301 549, the European accessibility standard, as a pack for @surea11y/core: chapter 9 (Web) in V3.2.1 and V4.1.1, one result per clause, a profile per version and clause mappings on any WCAG scan.",
   "keywords": [
     "accessibility",
@@ -64,7 +64,7 @@
     "@surea11y/core": ">=1.13.0"
   },
   "devDependencies": {
-    "@surea11y/core": "^1.13.0",
+    "@surea11y/core": "^1.14.0",
     "core-1.12": "npm:@surea11y/core@1.12.1",
     "eslint": "^10.12.0",
     "jsdom": "^29.1.1",