cbrowser 19.2.2 → 19.3.0

package/dist/mcp-tools/base/artifact-tools.js

@@ -14,8 +14,22 @@ import { z } from "zod";
 import { readFileSync, existsSync, statSync } from "node:fs";
 import { join, basename, extname } from "node:path";
 import { artifactDir } from "../../artifact-store.js";
+import { fitImageForInline } from "../inline-image.js";
+import { MAX_RESPONSE_SIZE } from "../screenshot-utils.js";
 /** Largest artifact returned inline. Base64 adds a third on top of this. */
 const MAX_BYTES = 3_500_000;
+/**
+ * Base64 budget for an image this tool returns by default.
+ *
+ * The comment above says it: hosts truncate a tool result near 150k chars. That
+ * holds for a view's callServerTool too. A 1280x800 attention heatmap PNG is
+ * ~666k chars of base64, so the attention view asked for it, the host cut it,
+ * and the panel showed no image -- while the tool result it rendered from
+ * carried a perfectly good inline preview it never reads (Alexa, 2026-10-09:
+ * "the attention analysis image doesn't load inline again"). Images over this
+ * are fitted (JPEG quality ladder, then downscale) unless `full: true`.
+ */
+const VIEW_IMAGE_BUDGET = MAX_RESPONSE_SIZE - 10_000;
 const MIME = {
     ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg",
     ".gif": "image/gif", ".webp": "image/webp",
@@ -26,6 +40,7 @@ export function registerArtifactTools(server) {
         description: "Fetch a generated image artifact (heatmap, diff, capture frame) as inline image data. Called by interactive views to display images the widget sandbox cannot load by URL; not usually needed directly.",
         inputSchema: {
             file: z.string().describe("Artifact filename as returned by the producing tool, e.g. 'heatmap-abc123.png'"),
+            full: z.boolean().optional().describe("Return the original bytes even when they exceed the host's ~150k-char result cap (a host may then truncate the result). Default false: a larger still image comes back as a JPEG fitted under the cap."),
         },
         annotations: {
             title: "Fetch Artifact",
@@ -37,7 +52,7 @@ export function registerArtifactTools(server) {
         // Hidden from the model's tool list: it exists for views to call, and an
         // agent reaching for it directly would be fetching bytes it cannot use.
         _meta: { ui: { visibility: ["app"] } },
-    }, async ({ file }) => {
+    }, async ({ file, full }) => {
         // basename strips any directory component, so a traversal attempt
         // resolves to a plain name inside the artifact dir rather than escaping it.
         // The name is then re-validated, because basename alone would happily
@@ -66,10 +81,22 @@ export function registerArtifactTools(server) {
                 isError: true,
             };
         }
+        const bytes = readFileSync(path);
+        const base64 = bytes.toString("base64");
+        // Animated GIFs are never re-encoded: a JPEG would keep one frame.
+        if (full !== true && ext !== ".gif" && base64.length > VIEW_IMAGE_BUDGET) {
+            const fitted = await fitImageForInline(bytes, VIEW_IMAGE_BUDGET).catch(() => null);
+            if (fitted) {
+                return {
+                    content: [{ type: "image", data: fitted.data, mimeType: fitted.mimeType }],
+                    _meta: { fitted: { width: fitted.width, height: fitted.height, sourceWidth: fitted.sourceWidth, sourceHeight: fitted.sourceHeight, quality: fitted.quality, originalBase64Chars: base64.length } },
+                };
+            }
+        }
         return {
             content: [{
                     type: "image",
-                    data: readFileSync(path).toString("base64"),
+                    data: base64,
                     mimeType: MIME[ext],
                 }],
         };

package/dist/mcp-tools/base/artifact-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-tools.js","sourceRoot":"","sources":["../../../src/mcp-tools/base/artifact-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,4EAA4E;AAC5E,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B,MAAM,IAAI,GAA2B;IACnC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY;CAC3C,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,yMAAyM;QACtN,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;SAC5G;QACD,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;QACD,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;KACvC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QAClB,kEAAkE;QAClE,4EAA4E;QAC5E,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBACtF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACjC,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BAC7C,KAAK,EAAE,eAAe,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;yBAC5G,CAAC,EAAE,CAAC;gBACL,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,OAAgB;oBACtB,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC3C,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAW;iBAC9B,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"artifact-tools.js","sourceRoot":"","sources":["../../../src/mcp-tools/base/artifact-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAG3D,4EAA4E;AAC5E,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAErD,MAAM,IAAI,GAA2B;IACnC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IAChE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY;CAC3C,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,yMAAyM;QACtN,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;YAC3G,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wMAAwM,CAAC;SAChP;QACD,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACrB;QACD,yEAAyE;QACzE,wEAAwE;QACxE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;KACvC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACxB,kEAAkE;QAClE,4EAA4E;QAC5E,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EAAE,CAAC;gBACtF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qBAAqB,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzF,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACjC,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BAC7C,KAAK,EAAE,eAAe,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;yBAC5G,CAAC,EAAE,CAAC;gBACL,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,mEAAmE;QACnE,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACnF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACnF,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE;iBACnM,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC;oBACR,IAAI,EAAE,OAAgB;oBACtB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAW;iBAC9B,CAAC;SACH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/mcp-tools/base/audit-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-tools.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/base/audit-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAuDtE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CA2lC7F;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAogBhE"}
+{"version":3,"file":"audit-tools.d.ts","sourceRoot":"","sources":["../../../src/mcp-tools/base/audit-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AA0DtE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAqkC7F;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA+kBhE"}

package/dist/mcp-tools/base/audit-tools.js

@@ -10,8 +10,9 @@ import { randomBytes } from "crypto";
 import { writeArtifact } from "../../artifact-store.js";
 import { buildContentWithPreviews } from "../inline-image.js";
 import { bridgeCapacityTraits } from "../../visual/cognitive-models.js";
-import { runAgentReadyAudit, runCompetitiveBenchmark, runEmpathyAudit, runWebMCPReadyAudit, } from "../../analysis/index.js";
+import { runAgentReadyAudit, pageAgentReadyFindings, runCompetitiveBenchmark, runEmpathyAudit, runWebMCPReadyAudit, } from "../../analysis/index.js";
 import { listAccessibilityPersonas } from "../../personas.js";
+import { barrierElementCount, countAffectedElements } from "../../analysis/accessibility-empathy.js";
 import { getDefaultConfig } from "../../config.js";
 import { writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
@@ -69,6 +70,8 @@ export function registerAuditTools(server, context) {
         inputSchema: {
             url: z.string().url().describe("URL to audit"),
             device: z.string().optional().describe("Device emulation: 'mobile', 'tablet', 'desktop', or specific device like 'iPhone 15'. Tests mobile AI-friendliness (responsive selectors, touch targets, viewport-specific layouts)."),
+            limit: z.number().optional().default(5).describe("How many issues (worst first) and recommendations (priority order) to return. Totals and severity counts always cover ALL findings."),
+            offset: z.number().optional().default(0).describe("Skip this many issues and recommendations before returning, for paging through a large result."),
         },
         annotations: {
             title: "Agent-Ready Audit",
@@ -77,43 +80,18 @@ export function registerAuditTools(server, context) {
             idempotentHint: false,
             openWorldHint: true,
         },
-    }, async ({ url, device }) => {
+    }, async ({ url, device, limit, offset }) => {
         const result = await runAgentReadyAudit(url, { headless: true, ...(device ? { device } : {}) });
         const responseData = {
             url: result.url,
             score: result.score,
             grade: result.grade,
             summary: result.summary,
-            // Worst-first, and the cut is reported.
-            //
-            // This was a plain slice(0,5) over the issues in detection order, so
-            // severity had no bearing on what survived: a critical finding placed
-            // sixth by the order detectors happen to run was dropped in favour of
-            // five low ones, with nothing saying anything had been dropped. Found
-            // when a new critical detector fired in the audit and was invisible in
-            // the tool that wraps it. (2026-08-01)
-            ...(() => {
-                const rank = (sev) => ({ critical: 0, high: 1, medium: 2, low: 3, info: 4 }[String(sev).toLowerCase()] ?? 5);
-                const sorted = [...result.issues].sort((a, b) => rank(a.severity) - rank(b.severity));
-                const shown = sorted.slice(0, 5);
-                const omitted = sorted.length - shown.length;
-                return {
-                    topIssues: shown,
-                    issuesFound: result.issues.length,
-                    ...(omitted > 0
-                        ? {
-                            issuesOmitted: omitted,
-                            issuesNote: `Showing the 5 most severe of ${result.issues.length}. Severity counts across ALL findings: ` +
-                                Object.entries(result.issues.reduce((m, i) => {
-                                    const k = String(i.severity);
-                                    m[k] = (m[k] ?? 0) + 1;
-                                    return m;
-                                }, {})).map(([k, v]) => `${k} ${v}`).join(", ") + ".",
-                        }
-                        : {}),
-                };
-            })(),
-            topRecommendations: result.recommendations.slice(0, 5),
+            // Worst-first, paged, and the cut is reported (pageAgentReadyFindings).
+            // Worst-first since 2026-08-01, when a critical placed sixth in
+            // detection order was dropped for five lows; paged since 2026-10-09,
+            // when everything past the fifth finding was unreachable.
+            ...pageAgentReadyFindings(result, { limit, offset }),
             duration: result.duration,
         };
         // Auto-save handled by tier-gate wrapper
@@ -1246,8 +1224,8 @@ export function registerEmpathyAuditTool(server) {
                 // the numbers on the map read 1,2,3 down the list instead of
                 // whatever order the analyzer happened to emit.
                 const rank = (b) => {
-                    const { weight } = barrierWeightFor(testedPersona, String(b.type ?? ""), b.wcagCriteria);
-                    const { severity } = weightedSeverity(String(b.severity ?? "minor"), weight);
+                    const { weight } = barrierWeightFor(testedPersona, String(b.type ?? ""), b.wcagCriteria, b.weightKey);
+                    const { severity } = weightedSeverity(String(b.severity ?? "minor"), weight, { aboveAuditLevel: b.aboveAuditLevel });
                     const order = {
                         critical: 0, blocker: 0, high: 1, major: 1, serious: 1,
                         medium: 2, moderate: 2, low: 3, minor: 3, info: 4, notice: 4
@@ -1258,7 +1236,7 @@ export function registerEmpathyAuditTool(server) {
             })();
             // Group keys in list order; a rect's key looked up here gives its
             // finding number.
-            const findingKeys = chosenBarriers.map((b) => `${b.type}|${weightKeyFor(String(b.type ?? ""), b.wcagCriteria) ?? ""}`);
+            const findingKeys = chosenBarriers.map((b) => `${b.type}|${weightKeyFor(String(b.type ?? ""), b.wcagCriteria, b.weightKey) ?? ""}`);
             // The name that was measured, when it differs from the one asked for.
             // "motor-tremor" measured motor-impairment-tremor while testedPersona
             // echoed "motor-tremor" and only resultsSummary showed the substitution.
@@ -1286,7 +1264,7 @@ export function registerEmpathyAuditTool(server) {
                 ...(result.outOfViewportBarriersDropped
                     ? {
                         outOfViewportBarriersDropped: result.outOfViewportBarriersDropped,
-                        scopeFilterNote: `${result.outOfViewportBarriersDropped} barrier(s) outside the viewport were excluded from scoring. Use scope='full_page' to include them.`,
+                        scopeFilterNote: `${result.outOfViewportBarriersDropped} barrier(s) outside the viewport or hidden (zero size, e.g. display:none) were excluded from scoring. Use scope='full_page' to include them.`,
                     }
                     : {}),
                 resultsSummary: result.results.map((r) => {
@@ -1329,8 +1307,17 @@ export function registerEmpathyAuditTool(server) {
                         } : undefined,
                         barrierTypeCount: uniqueTypes.size,
                         barrierTypes: Array.from(uniqueTypes),
-                        affectedElements: r.barriers.length,
+                        // Barrier RECORDS and affected ELEMENTS are different numbers and
+                        // both ship. affectedElements was barriers.length, so it could not
+                        // be reconciled with topBarriers' per-entry counts. It is now the
+                        // same sum topBarriers is built from: for a one-persona audit,
+                        // sum(topBarriers[].affectedElementCount) +
+                        // (topBarriersOmitted?.affectedElements ?? 0). (B7, 2026-10-09)
+                        barrierCount: r.barriers.length,
+                        affectedElements: countAffectedElements(r.barriers),
                         wcagViolationCount: r.wcagViolations.length,
+                        // Above-level findings, listed in `advisories` and never scored.
+                        ...(r.advisories?.length ? { advisoryCount: r.advisories.length } : {}),
                         // v18.26.0: Perceptual transport metrics (Wasserstein-based)
                         perceptualTransport: r.perceptualTransport || undefined,
                         empathyScoreBarrierOnly: r.empathyScoreBarrierOnly || undefined,
@@ -1386,8 +1373,8 @@ export function registerEmpathyAuditTool(server) {
                     // more or less violated depending on who reads it -- so both ship
                     // and the weight that separates them ships with them.
                     return chosen.map((b, i) => {
-                        const { weight, key, defaulted } = barrierWeightFor(testedPersona, String(b.type ?? ""), b.wcagCriteria);
-                        const { severity, shifted } = weightedSeverity(String(b.severity ?? "minor"), weight);
+                        const { weight, key, defaulted } = barrierWeightFor(testedPersona, String(b.type ?? ""), b.wcagCriteria, b.weightKey);
+                        const { severity, shifted } = weightedSeverity(String(b.severity ?? "minor"), weight, { aboveAuditLevel: b.aboveAuditLevel });
                         return {
                             ...b,
                             // Same number the overlay draws on the matching boxes.
@@ -1404,6 +1391,35 @@ export function registerEmpathyAuditTool(server) {
                         };
                     });
                 })(),
+                // Findings above the audited WCAG level. Advisory by policy (Alexa,
+                // 2026-10-09): reported here so nothing is hidden, never scored,
+                // never escalated by persona weight, never "critical". (B6)
+                ...(result.advisories?.length
+                    ? {
+                        advisories: result.advisories.map((a) => {
+                            const { weight, key } = barrierWeightFor(testedPersona, String(a.type ?? ""), a.wcagCriteria, a.weightKey);
+                            return {
+                                ...a,
+                                severityForPersona: weightedSeverity(String(a.severity ?? "minor"), weight, { aboveAuditLevel: true }).severity,
+                                personaWeightKey: key,
+                            };
+                        }),
+                        advisoriesNote: `Findings whose WCAG level is above the audited level (${wcagLevel}). Advisory: reported for information, not scored, not counted in affectedElements, never escalated by persona weight. Re-run with wcagLevel set to their level to score them.`,
+                    }
+                    : {}),
+                // Groups not shown in topBarriers, so the shown entries plus this
+                // add up to resultsSummary.affectedElements. Dropped groups used to
+                // vanish from the sum without a trace. (B7)
+                ...(() => {
+                    const shown = new Set(chosenBarriers);
+                    const omitted = result.topBarriers.filter((b) => !shown.has(b));
+                    return omitted.length > 0
+                        ? { topBarriersOmitted: {
+                                groups: omitted.length,
+                                affectedElements: omitted.reduce((n, b) => n + (b.affectedElementCount ?? 0), 0),
+                            } }
+                        : {};
+                })(),
                 topBarriersNote: "Ordered worst-first by severityForPersona — the persona-weighted grade — so an entry can sit above a higher WCAG severity when this persona is more susceptible to it. Any entries after the fifth are included because they carry a WCAG criterion the top five do not.",
                 // Asserting full coverage was itself a defect: the claim held only
                 // when a barrier existed for every criterion, and said nothing when
@@ -1466,23 +1482,63 @@ export function registerEmpathyAuditTool(server) {
                     // is stated. Reported rather than papered over, the same way
                     // cognitiveLoadReadings reports its disagreement.
                     barrierRectCoverage: (() => {
-                        // Counted the same way barrierRects is built below, from
-                        // barriers that resolved to a rect. Reading r.barrierRects gave
-                        // 0 every time: that field is this payload's OUTPUT name, not an
-                        // input, so the coverage line reported drawn:0 beside ten
-                        // populated rects.
-                        // Zero-area rects draw nothing. They were counted as drawn, so
-                        // coverage read 19 while only 16 boxes were visible -- an
-                        // element that resolved to {0,0,0,0} (display:none, a collapsed
-                        // menu item) is undrawn in every sense that matters.
-                        const rects = (r.barriers ?? []).filter((b) => b.rect && b.rect.width > 0 && b.rect.height > 0).length;
-                        const affected = (r.barriers ?? []).reduce((n, b) => n + (b.affectedElementCount ?? 1), 0);
+                        // Per BARRIER, with the reason each undrawn one has no box.
+                        //
+                        // This subtracted drawn rects from affected elements and gave
+                        // one hardcoded reason, "typically below the fold, hidden, or an
+                        // unresolvable selector". In a viewport audit that reason is
+                        // wrong by construction: located barriers below the fold were
+                        // already dropped (outOfViewportBarriersDropped), so every
+                        // undrawn one was a barrier that never had a rect at all. And
+                        // elements minus boxes is not a count of anything a reader can
+                        // list. (B7, 2026-10-09)
+                        //
+                        // Zero-area rects draw nothing and are undrawn: an element that
+                        // resolved to {0,0,0,0} (display:none, a collapsed menu item)
+                        // is undrawn in every sense that matters.
+                        const origin = scope === "full_page"
+                            ? { x: 0, y: 0 }
+                            : (r.captureScroll ?? { x: 0, y: 0 });
+                        const size = r.screenshotSize
+                            ?? { width: r.viewportSize?.width ?? Infinity,
+                                height: scope === "full_page" ? (r.documentHeight ?? Infinity) : (r.viewportSize?.height ?? Infinity) };
+                        const undrawnBarriers = [];
+                        let drawn = 0;
+                        for (const b of (r.barriers ?? [])) {
+                            let reason = null;
+                            if (!b.rect)
+                                reason = b.pageLevel ? "pageLevel" : "notLocated";
+                            else if (!(b.rect.width > 0 && b.rect.height > 0))
+                                reason = "zeroArea";
+                            else {
+                                const ix = b.rect.x - origin.x;
+                                const iy = b.rect.y - origin.y;
+                                if (iy + b.rect.height < 0 || ix + b.rect.width < 0 || iy > size.height || ix > size.width) {
+                                    reason = "outsideCapture";
+                                }
+                            }
+                            if (reason === null) {
+                                drawn++;
+                                continue;
+                            }
+                            undrawnBarriers.push({ type: b.type, element: b.element, reason,
+                                affectedElementCount: barrierElementCount(b) });
+                        }
+                        const legend = {
+                            pageLevel: "A finding about the page as a whole, or a page-wide aggregate (its elements are in members), with no single location to outline.",
+                            zeroArea: "The element resolved to a zero-size box at capture time (display:none, collapsed), so there is nothing to outline.",
+                            outsideCapture: "The element's box lies outside the captured screenshot.",
+                            notLocated: "The detector recorded no location for this barrier. A defect in the detector, not a property of the page.",
+                        };
+                        const present = Array.from(new Set(undrawnBarriers.map((u) => u.reason)));
                         return {
-                            drawn: rects,
-                            affectedElements: affected,
-                            ...(affected > rects
-                                ? { undrawn: affected - rects,
-                                    undrawnReason: "Barriers whose element did not resolve to a bounding box at capture time — typically below the fold, hidden, or an unresolvable selector. They are counted in the score and listed in barriers, but the overlay cannot outline them." }
+                            barriers: (r.barriers ?? []).length,
+                            drawn,
+                            affectedElements: countAffectedElements(r.barriers ?? []),
+                            ...(undrawnBarriers.length > 0
+                                ? { undrawn: undrawnBarriers.length,
+                                    undrawnBarriers,
+                                    undrawnReasons: Object.fromEntries(present.map((p) => [p, legend[p]])) }
                                 : {}),
                         };
                     })(),
@@ -1552,13 +1608,13 @@ export function registerEmpathyAuditTool(server) {
                         // weighted audit one barrier was orange on the map and red in
                         // the list -- two scales, no label saying which was which.
                         // (2026-07-31)
-                        const { weight } = barrierWeightFor(r.persona, String(b.type ?? ""), b.wcagCriteria);
-                        const { severity: weighted } = weightedSeverity(String(b.severity ?? "minor"), weight);
+                        const { weight } = barrierWeightFor(r.persona, String(b.type ?? ""), b.wcagCriteria, b.weightKey);
+                        const { severity: weighted } = weightedSeverity(String(b.severity ?? "minor"), weight, { aboveAuditLevel: b.aboveAuditLevel });
                         // Which findings-list entry this box belongs to. Boxes are
                         // per-element and findings are grouped by type+criterion, so
                         // ten boxes can map to five findings; without the link there is
                         // no way to tell which box the list is talking about.
-                        const gk = `${b.type}|${weightKeyFor(String(b.type ?? ""), b.wcagCriteria) ?? ""}`;
+                        const gk = `${b.type}|${weightKeyFor(String(b.type ?? ""), b.wcagCriteria, b.weightKey) ?? ""}`;
                         const findingIndex = findingKeys.indexOf(gk);
                         return {
                             type: b.type, severity: b.severity, element: b.element,