bfsg-scanner 0.1.0

package/dist/report/build.js

@@ -0,0 +1,100 @@
+import { SCHEMA_VERSION } from '../index.js';
+import { toolInfo } from '../shared/index.js';
+import { clausesFor, compareDotted } from './clauses.js';
+import { countAtOrAbove } from './verdict.js';
+/**
+ * Assembles a versioned, self-describing report from a scan result. Pure
+ * apart from the default clock and the one-time package.json read, both of
+ * which can be overridden via options.
+ */
+export function buildReport(scanResult, target, options = {}) {
+    const { generatedAt = new Date(), tool = toolInfo() } = options;
+    const pages = scanResult.pages.map(enrichPage);
+    const summary = summarise(pages);
+    return {
+        schemaVersion: SCHEMA_VERSION,
+        generatedAt: generatedAt.toISOString(),
+        tool,
+        target,
+        summary,
+        verdict: judge(summary, target.failOn),
+        pages,
+    };
+}
+/** Attaches the breached WCAG / EN 301 549 clauses to every finding on a scanned page. */
+function enrichPage(page) {
+    if (page.status === 'error') {
+        return page;
+    }
+    return {
+        status: 'ok',
+        url: page.url,
+        violations: page.violations.map(withClauses),
+        incomplete: page.incomplete.map(withClauses),
+    };
+}
+function withClauses(finding) {
+    return { ...finding, clauses: clausesFor(finding.tags) };
+}
+function judge(summary, failOn) {
+    const violationsAtOrAboveThreshold = countAtOrAbove(summary.violationsByImpact, failOn);
+    return {
+        violationsAtOrAboveThreshold,
+        unrankedViolations: summary.violationsByImpact.unknown,
+        passed: violationsAtOrAboveThreshold === 0,
+    };
+}
+function summarise(pages) {
+    const byImpact = {
+        critical: 0,
+        serious: 0,
+        moderate: 0,
+        minor: 0,
+        unknown: 0,
+    };
+    const breachedSuccessCriteria = new Set();
+    const breachedEn301549Clauses = new Set();
+    let pagesFailed = 0;
+    let pagesWithViolations = 0;
+    let totalViolations = 0;
+    for (const page of pages) {
+        if (page.status === 'error') {
+            pagesFailed += 1;
+            continue;
+        }
+        if (page.violations.length > 0) {
+            pagesWithViolations += 1;
+        }
+        totalViolations += page.violations.length;
+        for (const finding of page.violations) {
+            byImpact[impactBucket(finding.impact)] += 1;
+            for (const sc of finding.clauses.wcagSc) {
+                breachedSuccessCriteria.add(sc);
+            }
+            for (const clause of finding.clauses.en301549) {
+                breachedEn301549Clauses.add(clause);
+            }
+        }
+    }
+    return {
+        pagesScanned: pages.length,
+        pagesFailed,
+        pagesWithViolations,
+        totalViolations,
+        violationsByImpact: byImpact,
+        breachedSuccessCriteria: [...breachedSuccessCriteria].sort(compareDotted),
+        breachedEn301549Clauses: [...breachedEn301549Clauses].sort(compareDotted),
+    };
+}
+function impactBucket(impact) {
+    switch (impact) {
+        case 'critical':
+        case 'serious':
+        case 'moderate':
+        case 'minor':
+            return impact;
+        default:
+            return 'unknown';
+    }
+}
+//# sourceMappingURL=build.js.map

package/dist/report/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/report/build.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAWzD,OAAO,EAAE,cAAc,EAAwB,MAAM,cAAc,CAAC;AASpE;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,UAAsB,EACtB,MAAoB,EACpB,UAA8B,EAAE;IAEhC,MAAM,EAAE,WAAW,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,GAAG,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjC,OAAO;QACL,aAAa,EAAE,cAAc;QAC7B,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QACtC,IAAI;QACJ,MAAM;QACN,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACtC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,UAAU,CAAC,IAAiC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAoB;IACvC,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,KAAK,CAAC,OAAsB,EAAE,MAAuB;IAC5D,MAAM,4BAA4B,GAAG,cAAc,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACxF,OAAO;QACL,4BAA4B;QAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,CAAC,OAAO;QACtD,MAAM,EAAE,4BAA4B,KAAK,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAA4B;IAC7C,MAAM,QAAQ,GAA6C;QACzD,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;KACX,CAAC;IACF,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAElD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,WAAW,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,mBAAmB,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,eAAe,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACtC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5C,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACxC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC9C,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,WAAW;QACX,mBAAmB;QACnB,eAAe;QACf,kBAAkB,EAAE,QAAQ;QAC5B,uBAAuB,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QACzE,uBAAuB,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/report/clauses.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The standards clauses an axe-core finding breaches, read from the rule's
+ * own tags.
+ *
+ * axe-core already carries the mapping: every rule's `tags` array names the
+ * WCAG success criteria it checks (`wcag143` -> SC 1.4.3) and the matching
+ * EN 301 549 clauses (`EN-9.1.4.3`). The scanner reads that mapping rather
+ * than maintaining a hand-authored table (see ADR 0004). The German BFSG
+ * adds no per-rule detail of its own: SS 4 BFSG presumes conformity for
+ * content that meets the relevant harmonised standard, which for the web
+ * is EN 301 549 (Chapter 9 references WCAG 2.1 level A/AA). So the EN
+ * 301 549 clauses below are the corresponding citations. Not legal advice.
+ */
+export interface Clauses {
+    /** WCAG success criteria, dotted (`1.4.3`), numerically sorted, deduped. */
+    readonly wcagSc: readonly string[];
+    /** EN 301 549 clauses, dotted (`9.1.4.3`), numerically sorted, deduped. */
+    readonly en301549: readonly string[];
+}
+/**
+ * Derives the WCAG and EN 301 549 clauses a finding breaches from its axe
+ * rule tags. Pure. Unrecognised tags — `cat.*`, `ACT`, `TTv5`, `section508*`,
+ * `RGAA*`, `best-practice`, `experimental`, the bare `EN-301-549` marker —
+ * are ignored.
+ */
+export declare function clausesFor(tags: readonly string[]): Clauses;
+/**
+ * Orders dotted-number strings segment by segment, numerically, so `1.4.10`
+ * sorts after `1.4.3` rather than before it as a plain string compare would.
+ * Exported for the report layer's clause rollup, which sorts the same shape.
+ */
+export declare function compareDotted(a: string, b: string): number;

package/dist/report/clauses.js

@@ -0,0 +1,57 @@
+/**
+ * A WCAG SC tag: `wcag` followed by the digits of the criterion number with
+ * the dots removed — `wcag143` is SC 1.4.3, `wcag1410` is SC 1.4.10. The
+ * first two digits are always the principle and guideline; whatever follows
+ * is the criterion. Level tags (`wcag2a`, `wcag2aa`, `wcag21aa`) carry
+ * letters after `wcag` and so never match.
+ */
+const WCAG_SC_TAG = /^wcag(\d)(\d)(\d+)$/;
+/**
+ * An EN 301 549 clause tag: `EN-` followed by a dotted clause number
+ * (`EN-9.1.4.3`). The bare `EN-301-549` marker uses hyphens, not dots, so
+ * it is skipped — it says only that the rule maps to the standard somehow,
+ * not to which clause.
+ */
+const EN_301_549_TAG = /^EN-(\d+(?:\.\d+)+)$/;
+/**
+ * Derives the WCAG and EN 301 549 clauses a finding breaches from its axe
+ * rule tags. Pure. Unrecognised tags — `cat.*`, `ACT`, `TTv5`, `section508*`,
+ * `RGAA*`, `best-practice`, `experimental`, the bare `EN-301-549` marker —
+ * are ignored.
+ */
+export function clausesFor(tags) {
+    const wcagSc = new Set();
+    const en301549 = new Set();
+    for (const tag of tags) {
+        const wcag = WCAG_SC_TAG.exec(tag);
+        if (wcag !== null) {
+            wcagSc.add(`${wcag[1]}.${wcag[2]}.${wcag[3]}`);
+            continue;
+        }
+        const enClause = EN_301_549_TAG.exec(tag)?.[1];
+        if (enClause !== undefined) {
+            en301549.add(enClause);
+        }
+    }
+    return {
+        wcagSc: [...wcagSc].sort(compareDotted),
+        en301549: [...en301549].sort(compareDotted),
+    };
+}
+/**
+ * Orders dotted-number strings segment by segment, numerically, so `1.4.10`
+ * sorts after `1.4.3` rather than before it as a plain string compare would.
+ * Exported for the report layer's clause rollup, which sorts the same shape.
+ */
+export function compareDotted(a, b) {
+    const as = a.split('.');
+    const bs = b.split('.');
+    for (let i = 0; i < Math.max(as.length, bs.length); i += 1) {
+        const diff = Number(as[i] ?? 0) - Number(bs[i] ?? 0);
+        if (diff !== 0) {
+            return diff;
+        }
+    }
+    return 0;
+}
+//# sourceMappingURL=clauses.js.map

package/dist/report/clauses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clauses.js","sourceRoot":"","sources":["../../src/report/clauses.ts"],"names":[],"mappings":"AAoBA;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAuB;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QACvC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/report/i18n.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Localised strings for the human-facing HTML report. Two locales, a flat
+ * table, no i18n library: the set is small, there is no runtime locale
+ * negotiation, and every label is phrased to avoid grammatical agreement
+ * (`Affected elements: 3`, not `3 elements`) so no plural rules are needed.
+ * See ADR 0005.
+ *
+ * The JSON report stays language-neutral; a locale is chosen only when
+ * rendering HTML.
+ */
+export type Locale = 'de' | 'en';
+export interface Messages {
+    /** `<title>` and the page's `<h1>`. */
+    readonly reportTitle: string;
+    readonly generatedAt: string;
+    readonly tool: string;
+    readonly target: string;
+    readonly wcagTags: string;
+    readonly threshold: string;
+    readonly verdictPassed: string;
+    readonly verdictFailed: string;
+    /** Precedes the count of violations at or above the threshold. */
+    readonly verdictFailedDetail: string;
+    readonly unrankedNote: string;
+    readonly summaryHeading: string;
+    readonly pagesScanned: string;
+    readonly pagesFailed: string;
+    readonly pagesWithViolations: string;
+    readonly totalViolations: string;
+    readonly byImpact: string;
+    readonly impactCritical: string;
+    readonly impactSerious: string;
+    readonly impactModerate: string;
+    readonly impactMinor: string;
+    readonly impactUnknown: string;
+    readonly clausesHeading: string;
+    readonly breachedSuccessCriteria: string;
+    readonly breachedEn301549: string;
+    readonly noClausesBreached: string;
+    readonly clausesLegalNote: string;
+    readonly findingsHeading: string;
+    readonly pageScanFailed: string;
+    readonly noViolations: string;
+    readonly rule: string;
+    readonly impact: string;
+    readonly successCriteria: string;
+    readonly en301549Clauses: string;
+    readonly help: string;
+    readonly affectedElements: string;
+    readonly incompleteHeading: string;
+    readonly incompleteNote: string;
+    readonly none: string;
+}
+export declare function messagesFor(locale: Locale): Messages;

package/dist/report/i18n.js

@@ -0,0 +1,95 @@
+/**
+ * Localised strings for the human-facing HTML report. Two locales, a flat
+ * table, no i18n library: the set is small, there is no runtime locale
+ * negotiation, and every label is phrased to avoid grammatical agreement
+ * (`Affected elements: 3`, not `3 elements`) so no plural rules are needed.
+ * See ADR 0005.
+ *
+ * The JSON report stays language-neutral; a locale is chosen only when
+ * rendering HTML.
+ */
+const EN = {
+    reportTitle: 'Accessibility scan report',
+    generatedAt: 'Generated at',
+    tool: 'Tool',
+    target: 'Target',
+    wcagTags: 'Rule sets',
+    threshold: 'Failure threshold',
+    verdictPassed: 'Passed — no violations at or above the failure threshold.',
+    verdictFailed: 'Failed',
+    verdictFailedDetail: 'violation(s) at or above the failure threshold',
+    unrankedNote: 'violation(s) carry no impact rating from axe and were excluded from the threshold. Review them below.',
+    summaryHeading: 'Summary',
+    pagesScanned: 'Pages scanned',
+    pagesFailed: 'Pages that failed to load',
+    pagesWithViolations: 'Pages with violations',
+    totalViolations: 'Violated rules (total)',
+    byImpact: 'By impact',
+    impactCritical: 'Critical',
+    impactSerious: 'Serious',
+    impactModerate: 'Moderate',
+    impactMinor: 'Minor',
+    impactUnknown: 'Unrated',
+    clausesHeading: 'Breached clauses',
+    breachedSuccessCriteria: 'WCAG 2.1 success criteria',
+    breachedEn301549: 'EN 301 549 clauses',
+    noClausesBreached: 'No WCAG or EN 301 549 clauses were breached by a confirmed violation.',
+    clausesLegalNote: '§ 4 BFSG presumes conformity for content that meets the relevant harmonised standard — for the web, EN 301 549, whose Chapter 9 references WCAG 2.1 level A/AA. The clauses above are the corresponding citations. This is not legal advice.',
+    findingsHeading: 'Findings by page',
+    pageScanFailed: 'This page could not be scanned',
+    noViolations: 'No violations.',
+    rule: 'Rule',
+    impact: 'Impact',
+    successCriteria: 'WCAG SC',
+    en301549Clauses: 'EN 301 549',
+    help: 'How to fix',
+    affectedElements: 'Affected elements',
+    incompleteHeading: 'Needs review',
+    incompleteNote: 'axe could not decide these automatically. They are not counted as violations.',
+    none: 'none',
+};
+const DE = {
+    reportTitle: 'Bericht zur Barrierefreiheitsprüfung',
+    generatedAt: 'Erstellt am',
+    tool: 'Werkzeug',
+    target: 'Ziel',
+    wcagTags: 'Regelsätze',
+    threshold: 'Schwellenwert für Fehlschlag',
+    verdictPassed: 'Bestanden — keine Verstöße auf oder über dem Schwellenwert.',
+    verdictFailed: 'Nicht bestanden',
+    verdictFailedDetail: 'Verstoß/Verstöße auf oder über dem Schwellenwert',
+    unrankedNote: 'Verstoß/Verstöße ohne Schweregrad von axe wurden vom Schwellenwert ausgenommen. Bitte unten prüfen.',
+    summaryHeading: 'Zusammenfassung',
+    pagesScanned: 'Geprüfte Seiten',
+    pagesFailed: 'Nicht ladbare Seiten',
+    pagesWithViolations: 'Seiten mit Verstößen',
+    totalViolations: 'Verletzte Regeln (gesamt)',
+    byImpact: 'Nach Schweregrad',
+    impactCritical: 'Kritisch',
+    impactSerious: 'Schwerwiegend',
+    impactModerate: 'Mittel',
+    impactMinor: 'Gering',
+    impactUnknown: 'Ohne Bewertung',
+    clausesHeading: 'Verletzte Anforderungen',
+    breachedSuccessCriteria: 'WCAG-2.1-Erfolgskriterien',
+    breachedEn301549: 'EN-301-549-Anforderungen',
+    noClausesBreached: 'Kein WCAG- oder EN-301-549-Kriterium wurde durch einen bestätigten Verstoß verletzt.',
+    clausesLegalNote: '§ 4 BFSG begründet eine Konformitätsvermutung für Angebote, die die einschlägige harmonisierte Norm erfüllen — für das Web ist das EN 301 549, deren Kapitel 9 auf WCAG 2.1 (Stufen A/AA) verweist. Die oben genannten Anforderungen sind die entsprechenden Fundstellen. Dies ist keine Rechtsberatung.',
+    findingsHeading: 'Ergebnisse nach Seite',
+    pageScanFailed: 'Diese Seite konnte nicht geprüft werden',
+    noViolations: 'Keine Verstöße.',
+    rule: 'Regel',
+    impact: 'Schweregrad',
+    successCriteria: 'WCAG SC',
+    en301549Clauses: 'EN 301 549',
+    help: 'Behebung',
+    affectedElements: 'Betroffene Elemente',
+    incompleteHeading: 'Manuelle Prüfung nötig',
+    incompleteNote: 'axe konnte dies nicht automatisch entscheiden. Es wird nicht als Verstoß gezählt.',
+    none: 'keine',
+};
+const MESSAGES = { de: DE, en: EN };
+export function messagesFor(locale) {
+    return MESSAGES[locale];
+}
+//# sourceMappingURL=i18n.js.map

package/dist/report/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../../src/report/i18n.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmDH,MAAM,EAAE,GAAa;IACnB,WAAW,EAAE,2BAA2B;IACxC,WAAW,EAAE,cAAc;IAC3B,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,mBAAmB;IAE9B,aAAa,EAAE,2DAA2D;IAC1E,aAAa,EAAE,QAAQ;IACvB,mBAAmB,EAAE,gDAAgD;IACrE,YAAY,EACV,uGAAuG;IAEzG,cAAc,EAAE,SAAS;IACzB,YAAY,EAAE,eAAe;IAC7B,WAAW,EAAE,2BAA2B;IACxC,mBAAmB,EAAE,uBAAuB;IAC5C,eAAe,EAAE,wBAAwB;IACzC,QAAQ,EAAE,WAAW;IACrB,cAAc,EAAE,UAAU;IAC1B,aAAa,EAAE,SAAS;IACxB,cAAc,EAAE,UAAU;IAC1B,WAAW,EAAE,OAAO;IACpB,aAAa,EAAE,SAAS;IAExB,cAAc,EAAE,kBAAkB;IAClC,uBAAuB,EAAE,2BAA2B;IACpD,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,uEAAuE;IAC1F,gBAAgB,EACd,8OAA8O;IAEhP,eAAe,EAAE,kBAAkB;IACnC,cAAc,EAAE,gCAAgC;IAChD,YAAY,EAAE,gBAAgB;IAC9B,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,SAAS;IAC1B,eAAe,EAAE,YAAY;IAC7B,IAAI,EAAE,YAAY;IAClB,gBAAgB,EAAE,mBAAmB;IACrC,iBAAiB,EAAE,cAAc;IACjC,cAAc,EAAE,+EAA+E;IAC/F,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,MAAM,EAAE,GAAa;IACnB,WAAW,EAAE,sCAAsC;IACnD,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,8BAA8B;IAEzC,aAAa,EAAE,6DAA6D;IAC5E,aAAa,EAAE,iBAAiB;IAChC,mBAAmB,EAAE,kDAAkD;IACvE,YAAY,EACV,qGAAqG;IAEvG,cAAc,EAAE,iBAAiB;IACjC,YAAY,EAAE,iBAAiB;IAC/B,WAAW,EAAE,sBAAsB;IACnC,mBAAmB,EAAE,sBAAsB;IAC3C,eAAe,EAAE,2BAA2B;IAC5C,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,UAAU;IAC1B,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,gBAAgB;IAE/B,cAAc,EAAE,yBAAyB;IACzC,uBAAuB,EAAE,2BAA2B;IACpD,gBAAgB,EAAE,0BAA0B;IAC5C,iBAAiB,EACf,sFAAsF;IACxF,gBAAgB,EACd,0SAA0S;IAE5S,eAAe,EAAE,uBAAuB;IACxC,cAAc,EAAE,yCAAyC;IACzD,YAAY,EAAE,iBAAiB;IAC/B,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,aAAa;IACrB,eAAe,EAAE,SAAS;IAC1B,eAAe,EAAE,YAAY;IAC7B,IAAI,EAAE,UAAU;IAChB,gBAAgB,EAAE,qBAAqB;IACvC,iBAAiB,EAAE,wBAAwB;IAC3C,cAAc,EACZ,mFAAmF;IACrF,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,QAAQ,GAAuC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;AAExE,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC"}

package/dist/report/index.d.ts

@@ -0,0 +1,12 @@
+export type { BuildReportOptions } from './build.js';
+export { buildReport } from './build.js';
+export type { Clauses } from './clauses.js';
+export { clausesFor } from './clauses.js';
+export type { Locale, Messages } from './i18n.js';
+export { messagesFor } from './i18n.js';
+export { renderPdfReport } from './pdf.js';
+export { renderHtmlReport } from './render.js';
+export type { Report, ReportFinding, ReportImpactCounts, ReportPage, ReportPageSuccess, ReportSummary, ReportTarget, ReportToolInfo, ReportVerdict, } from './types.js';
+export type { ImpactThreshold } from './verdict.js';
+export { countAtOrAbove, IMPACT_RANK, meetsThreshold } from './verdict.js';
+export { HTML_REPORT_FILENAME, PDF_REPORT_FILENAME, REPORT_FILENAME, writeHtmlReport, writePdfReport, writeReport, } from './write.js';

package/dist/report/index.js

@@ -0,0 +1,8 @@
+export { buildReport } from './build.js';
+export { clausesFor } from './clauses.js';
+export { messagesFor } from './i18n.js';
+export { renderPdfReport } from './pdf.js';
+export { renderHtmlReport } from './render.js';
+export { countAtOrAbove, IMPACT_RANK, meetsThreshold } from './verdict.js';
+export { HTML_REPORT_FILENAME, PDF_REPORT_FILENAME, REPORT_FILENAME, writeHtmlReport, writePdfReport, writeReport, } from './write.js';
+//# sourceMappingURL=index.js.map

package/dist/report/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/report/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/report/pdf.d.ts

@@ -0,0 +1,12 @@
+import type { Browser } from 'playwright';
+/**
+ * Renders the self-contained HTML report (see `render.ts`) to PDF bytes by
+ * printing it in headless Chromium.
+ *
+ * Takes an already-launched browser and never closes it: the caller owns
+ * the lifecycle, exactly as `scan` does. Chromium is the only engine
+ * Playwright can print with; that is acceptable because it is already the
+ * scanner's engine (ADR 0006). The HTML carries its own inline CSS and no
+ * external assets, so `setContent` needs no network and no static server.
+ */
+export declare function renderPdfReport(html: string, browser: Browser): Promise<Buffer>;

package/dist/report/pdf.js

@@ -0,0 +1,25 @@
+/**
+ * Renders the self-contained HTML report (see `render.ts`) to PDF bytes by
+ * printing it in headless Chromium.
+ *
+ * Takes an already-launched browser and never closes it: the caller owns
+ * the lifecycle, exactly as `scan` does. Chromium is the only engine
+ * Playwright can print with; that is acceptable because it is already the
+ * scanner's engine (ADR 0006). The HTML carries its own inline CSS and no
+ * external assets, so `setContent` needs no network and no static server.
+ */
+export async function renderPdfReport(html, browser) {
+    const page = await browser.newPage();
+    try {
+        await page.setContent(html, { waitUntil: 'load' });
+        return await page.pdf({
+            format: 'A4',
+            printBackground: true,
+            margin: { top: '16mm', bottom: '16mm', left: '14mm', right: '14mm' },
+        });
+    }
+    finally {
+        await page.close();
+    }
+}
+//# sourceMappingURL=pdf.js.map

package/dist/report/pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.js","sourceRoot":"","sources":["../../src/report/pdf.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,OAAgB;IAClE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC;YACpB,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/report/render.d.ts

@@ -0,0 +1,8 @@
+import { type Locale } from './i18n.js';
+import type { Report } from './types.js';
+/**
+ * Renders a `Report` as a single self-contained HTML document: inline CSS,
+ * no JavaScript, no external assets. It is meant to be archived by CI,
+ * opened offline, and printed to PDF (a later change). See ADR 0005.
+ */
+export declare function renderHtmlReport(report: Report, locale: Locale): string;

package/dist/report/render.js

@@ -0,0 +1,204 @@
+import { messagesFor } from './i18n.js';
+/**
+ * Renders a `Report` as a single self-contained HTML document: inline CSS,
+ * no JavaScript, no external assets. It is meant to be archived by CI,
+ * opened offline, and printed to PDF (a later change). See ADR 0005.
+ */
+export function renderHtmlReport(report, locale) {
+    const m = messagesFor(locale);
+    const body = [
+        header(report, m),
+        verdictBanner(report, m),
+        summarySection(report, m),
+        clausesSection(report, m),
+        findingsSection(report, m),
+    ].join('\n');
+    return [
+        '<!doctype html>',
+        `<html lang="${locale}">`,
+        '<head>',
+        '<meta charset="utf-8">',
+        '<meta name="viewport" content="width=device-width, initial-scale=1">',
+        `<title>${esc(m.reportTitle)} — ${esc(report.target.baseUrl)}</title>`,
+        `<style>${STYLE}</style>`,
+        '</head>',
+        '<body>',
+        body,
+        '</body>',
+        '</html>',
+        '',
+    ].join('\n');
+}
+function header(report, m) {
+    const { target, tool, generatedAt } = report;
+    return section(`
+    <h1>${esc(m.reportTitle)}</h1>
+    <dl class="meta">
+      ${row(m.target, link(target.baseUrl))}
+      ${row(m.generatedAt, esc(generatedAt))}
+      ${row(m.tool, esc(`${tool.name} ${tool.version}`))}
+      ${row(m.wcagTags, esc(target.wcagTags.join(', ')))}
+      ${row(m.threshold, esc(target.failOn))}
+    </dl>`);
+}
+function verdictBanner(report, m) {
+    const { verdict } = report;
+    const status = verdict.passed ? 'pass' : 'fail';
+    const headline = verdict.passed
+        ? esc(m.verdictPassed)
+        : `<strong>${esc(m.verdictFailed)}</strong> — ${verdict.violationsAtOrAboveThreshold} ${esc(m.verdictFailedDetail)}`;
+    const unranked = verdict.unrankedViolations > 0
+        ? `<p class="unranked">${verdict.unrankedViolations} ${esc(m.unrankedNote)}</p>`
+        : '';
+    return `<div class="banner ${status}"><p>${headline}</p>${unranked}</div>`;
+}
+function summarySection(report, m) {
+    const s = report.summary;
+    const impacts = [
+        ['critical', m.impactCritical],
+        ['serious', m.impactSerious],
+        ['moderate', m.impactModerate],
+        ['minor', m.impactMinor],
+        ['unknown', m.impactUnknown],
+    ];
+    return section(`
+    <h2>${esc(m.summaryHeading)}</h2>
+    <dl class="meta">
+      ${row(m.pagesScanned, String(s.pagesScanned))}
+      ${row(m.pagesFailed, String(s.pagesFailed))}
+      ${row(m.pagesWithViolations, String(s.pagesWithViolations))}
+      ${row(m.totalViolations, String(s.totalViolations))}
+    </dl>
+    <h3>${esc(m.byImpact)}</h3>
+    <ul class="impacts">
+      ${impacts
+        .map(([key, label]) => `<li><span>${esc(label)}</span><b>${s.violationsByImpact[key]}</b></li>`)
+        .join('\n      ')}
+    </ul>`);
+}
+function clausesSection(report, m) {
+    const { breachedSuccessCriteria, breachedEn301549Clauses } = report.summary;
+    if (breachedSuccessCriteria.length === 0 && breachedEn301549Clauses.length === 0) {
+        return section(`
+      <h2>${esc(m.clausesHeading)}</h2>
+      <p>${esc(m.noClausesBreached)}</p>`);
+    }
+    return section(`
+    <h2>${esc(m.clausesHeading)}</h2>
+    <p class="clause-group"><span>${esc(m.breachedSuccessCriteria)}</span>${chips(breachedSuccessCriteria)}</p>
+    <p class="clause-group"><span>${esc(m.breachedEn301549)}</span>${chips(breachedEn301549Clauses)}</p>
+    <p class="legal">${esc(m.clausesLegalNote)}</p>`);
+}
+function findingsSection(report, m) {
+    const pages = report.pages.map((page) => pageBlock(page, m)).join('\n');
+    return section(`
+    <h2>${esc(m.findingsHeading)}</h2>
+    ${pages}`);
+}
+function pageBlock(page, m) {
+    if (page.status === 'error') {
+        return `<article class="page failed">
+      <h3>${link(page.url)}</h3>
+      <p class="scan-failed">${esc(m.pageScanFailed)}: <code>${esc(page.error)}</code></p>
+    </article>`;
+    }
+    const parts = [`<h3>${link(page.url)}</h3>`];
+    if (page.violations.length === 0 && page.incomplete.length === 0) {
+        parts.push(`<p class="ok">${esc(m.noViolations)}</p>`);
+    }
+    parts.push(...page.violations.map((f) => findingBlock(f, m)));
+    if (page.incomplete.length > 0) {
+        parts.push(`<h4>${esc(m.incompleteHeading)}</h4>`);
+        parts.push(`<p class="note">${esc(m.incompleteNote)}</p>`);
+        parts.push(...page.incomplete.map((f) => findingBlock(f, m)));
+    }
+    return `<article class="page">${parts.join('\n')}</article>`;
+}
+function findingBlock(f, m) {
+    return `<div class="finding impact-${esc(impactClass(f.impact))}">
+    <p class="finding-head">
+      <code>${esc(f.ruleId)}</code>
+      <span class="badge">${esc(m.impact)}: ${esc(f.impact ?? m.impactUnknown)}</span>
+    </p>
+    <p class="finding-desc">${esc(f.help)}</p>
+    <dl class="meta">
+      ${row(m.successCriteria, f.clauses.wcagSc.length > 0 ? esc(f.clauses.wcagSc.join(', ')) : esc(m.none))}
+      ${row(m.en301549Clauses, f.clauses.en301549.length > 0 ? esc(f.clauses.en301549.join(', ')) : esc(m.none))}
+      ${row(m.help, `<a href="${esc(f.helpUrl)}">${esc(f.helpUrl)}</a>`)}
+      ${row(m.affectedElements, String(f.nodes.length))}
+    </dl>
+    ${f.nodes
+        .map((n) => `<pre class="node"><code>${esc(n.html)}</code></pre>${n.failureSummary ? `<p class="node-summary">${esc(n.failureSummary)}</p>` : ''}`)
+        .join('\n')}
+  </div>`;
+}
+function impactClass(impact) {
+    return impact ?? 'unknown';
+}
+function section(inner) {
+    return `<section>${inner}\n</section>`;
+}
+function row(label, valueHtml) {
+    return `<div><dt>${esc(label)}</dt><dd>${valueHtml}</dd></div>`;
+}
+function chips(values) {
+    return values.map((v) => `<code class="chip">${esc(v)}</code>`).join(' ');
+}
+function link(url) {
+    return `<a href="${esc(url)}">${esc(url)}</a>`;
+}
+/** HTML-escapes text for use in element content and double-quoted attributes. */
+function esc(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+const STYLE = `
+  :root { color-scheme: light dark; }
+  * { box-sizing: border-box; }
+  body { margin: 0 auto; max-width: 60rem; padding: 2rem 1.25rem;
+    font: 16px/1.55 system-ui, -apple-system, Segoe UI, Roboto, sans-serif; }
+  h1 { font-size: 1.6rem; margin: 0 0 1rem; }
+  h2 { font-size: 1.25rem; margin: 2rem 0 0.75rem; border-bottom: 1px solid; padding-bottom: 0.25rem; }
+  h3 { font-size: 1.05rem; margin: 1.5rem 0 0.5rem; word-break: break-all; }
+  h4 { font-size: 0.95rem; margin: 1rem 0 0.35rem; }
+  a { color: inherit; }
+  code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 0.9em; }
+  dl.meta { display: grid; grid-template-columns: max-content 1fr; gap: 0.15rem 1rem; margin: 0.5rem 0; }
+  dl.meta > div { display: contents; }
+  dl.meta dt { font-weight: 600; }
+  dl.meta dd { margin: 0; word-break: break-word; }
+  /* Tints, not solid fills, so the banner reads on a light or a dark ground;
+     the saturated border and the bold headline carry the pass/fail signal. */
+  .banner { margin: 1rem 0; padding: 0.75rem 1rem; border-radius: 6px; border: 1px solid; }
+  .banner.pass { background: rgba(30, 126, 52, 0.14); border-color: #1e7e34; }
+  .banner.fail { background: rgba(176, 42, 55, 0.16); border-color: #b02a37; }
+  .banner p { margin: 0.15rem 0; }
+  .banner .unranked { font-size: 0.9rem; }
+  ul.impacts { list-style: none; padding: 0; margin: 0.35rem 0; display: flex; flex-wrap: wrap; gap: 0.5rem; }
+  ul.impacts li { border: 1px solid; border-radius: 4px; padding: 0.2rem 0.55rem; }
+  ul.impacts li span { margin-right: 0.4rem; }
+  .clause-group span { font-weight: 600; margin-right: 0.5rem; }
+  code.chip { border: 1px solid; border-radius: 4px; padding: 0.1rem 0.4rem; display: inline-block; margin: 0.1rem 0; }
+  .legal { font-size: 0.9rem; opacity: 0.85; }
+  article.page { margin: 0.5rem 0 1.5rem; }
+  .finding { border-left: 4px solid #b02a37; padding: 0.5rem 0.9rem; margin: 0.75rem 0; background: rgba(127,127,127,0.06); }
+  .finding.impact-moderate, .finding.impact-minor { border-left-color: #b8860b; }
+  .finding.impact-unknown { border-left-color: #6c757d; }
+  .finding-head { margin: 0 0 0.35rem; display: flex; gap: 0.6rem; align-items: baseline; flex-wrap: wrap; }
+  .badge { font-size: 0.8rem; border: 1px solid; border-radius: 4px; padding: 0.05rem 0.4rem; }
+  .finding-desc { margin: 0.25rem 0; }
+  pre.node { overflow-x: auto; padding: 0.5rem 0.7rem; background: rgba(127,127,127,0.12); border-radius: 4px; }
+  .node-summary { white-space: pre-wrap; font-size: 0.9rem; margin: 0.15rem 0 0.6rem; }
+  .scan-failed code { color: #b02a37; }
+  @media print {
+    body { max-width: none; }
+    .finding { break-inside: avoid; }
+    /* No horizontal scroll on paper: wrap the evidence markup instead of clipping it. */
+    pre.node { white-space: pre-wrap; overflow-wrap: anywhere; }
+  }
+`;
+//# sourceMappingURL=render.js.map