create-claude-cabinet 0.29.4 → 0.29.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-claude-cabinet",
-  "version": "0.29.4",
+  "version": "0.29.6",
   "description": "Claude Cabinet — opinionated process scaffolding for Claude Code projects",
   "bin": {
     "create-claude-cabinet": "bin/create-claude-cabinet.js"

package/templates/site-audit-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-cabinet/site-audit",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Comprehensive deployed-site quality audit engine for Claude Cabinet. Runs checks across performance, accessibility, security, SEO, content, DNS, and privacy against a deployed URL; single-site and comparison modes; standalone HTML report.",
   "type": "module",
   "bin": {

package/templates/site-audit-runtime/src/checks/axe-core.mjs

@@ -2,12 +2,12 @@ export const checkId = 'axe-core';
 export const tool = 'axe-core (WCAG AA)';
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['@axe-core/cli', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('axe', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
-  return executor.spawn('npx', ['@axe-core/cli', url, '--exit'], { timeoutMs: 60_000 });
+  return executor.spawn('axe', [url, '--exit'], { timeoutMs: 60_000 });
 }
 
 const IMPACT_TO_SEVERITY = { critical: 'critical', serious: 'serious', moderate: 'moderate', minor: 'info' };

package/templates/site-audit-runtime/src/checks/blacklight.mjs

@@ -7,12 +7,12 @@ export const tool = 'Blacklight (tracker detection)';
 export const defaultTimeoutMs = 120_000;
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['@themarkup/blacklight-collector', '--help'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('blacklight-collector', ['--help'], { timeoutMs: 15_000 });
   return r.code === 0 || r.stdout.includes('blacklight');
 }
 
 export async function run(url, executor) {
-  return executor.spawn('npx', ['@themarkup/blacklight-collector', url, '--json'], { timeoutMs: 120_000 });
+  return executor.spawn('blacklight-collector', [url, '--json'], { timeoutMs: 120_000 });
 }
 
 const TRACKER_SEVERITY = {

package/templates/site-audit-runtime/src/checks/lighthouse.mjs

@@ -3,13 +3,13 @@ export const tool = 'Lighthouse';
 export const defaultTimeoutMs = 120_000;
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['lighthouse', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('lighthouse', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
-  const r = await executor.spawn('npx', [
-    'lighthouse', url,
+  const r = await executor.spawn('lighthouse', [
+    url,
     '--output=json',
     '--chrome-flags=--headless=new --no-sandbox',
     '--only-categories=performance,accessibility,best-practices,seo',

package/templates/site-audit-runtime/src/checks/linkinator.mjs

@@ -2,12 +2,12 @@ export const checkId = 'linkinator';
 export const tool = 'Linkinator (broken links)';
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['linkinator', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('linkinator', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
-  return executor.spawn('npx', ['linkinator', url, '--format', 'json', '--timeout', '10000'], { timeoutMs: 60_000 });
+  return executor.spawn('linkinator', [url, '--format', 'json', '--timeout', '10000'], { timeoutMs: 60_000 });
 }
 
 export function normalize(raw, durationMs) {

package/templates/site-audit-runtime/src/checks/observatory.mjs

@@ -2,13 +2,13 @@ export const checkId = 'observatory';
 export const tool = 'MDN HTTP Observatory';
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['@mdn/mdn-http-observatory', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('mdn-http-observatory', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
   const hostname = new URL(url).hostname;
-  return executor.spawn('npx', ['@mdn/mdn-http-observatory', hostname], { timeoutMs: 60_000 });
+  return executor.spawn('mdn-http-observatory', [hostname], { timeoutMs: 60_000 });
 }
 
 const GRADE_SCORES = { 'A+': 100, 'A': 95, 'A-': 90, 'B+': 85, 'B': 80, 'B-': 75, 'C+': 70, 'C': 65, 'C-': 60, 'D+': 55, 'D': 50, 'D-': 45, 'F': 20 };

package/templates/site-audit-runtime/src/checks/pa11y.mjs

@@ -2,12 +2,12 @@ export const checkId = 'pa11y';
 export const tool = 'Pa11y (WCAG AAA)';
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['pa11y', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('pa11y', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
-  return executor.spawn('npx', ['pa11y', url, '--reporter', 'json', '--standard', 'WCAG2AAA'], { timeoutMs: 60_000 });
+  return executor.spawn('pa11y', [url, '--reporter', 'json', '--standard', 'WCAG2AAA'], { timeoutMs: 60_000 });
 }
 
 const TYPE_TO_SEVERITY = { error: 'serious', warning: 'moderate', notice: 'info' };

package/templates/site-audit-runtime/src/checks/unlighthouse.mjs

@@ -7,13 +7,13 @@ export const tool = 'Unlighthouse (full-site crawl)';
 export const defaultTimeoutMs = 300_000;
 
 export async function detect(executor) {
-  const r = await executor.spawn('npx', ['unlighthouse', '--version'], { timeoutMs: 15_000 });
+  const r = await executor.spawn('unlighthouse', ['--version'], { timeoutMs: 15_000 });
   return r.code === 0;
 }
 
 export async function run(url, executor) {
-  return executor.spawn('npx', [
-    'unlighthouse', '--site', url, '--ci', '--reporter', 'json',
+  return executor.spawn('unlighthouse', [
+    '--site', url, '--ci', '--reporter', 'json',
   ], { timeoutMs: 300_000 });
 }
 

package/templates/site-audit-runtime/src/cli.mjs

@@ -85,7 +85,7 @@ export function validateOptions(opts) {
 function writeReport(html, report, outDir, suffix = '') {
   const dir = outDir || 'reports';
   mkdirSync(dir, { recursive: true });
-  const host = sanitizeHostname(report.url);
+  const host = sanitizeHostname(report.url || report.urlA || 'unknown');
   const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
   let base = `site-audit-${host}-${ts}${suffix ? '-' + suffix : ''}`;
   let path = join(dir, `${base}.html`);

package/templates/site-audit-runtime/src/orchestrator.mjs

@@ -180,13 +180,16 @@ export async function auditSite(url, checks, opts = {}) {
 
     const start = Date.now();
     let available;
+    let detectError = '';
     try {
       available = await check.detect(executor);
-    } catch {
+    } catch (err) {
       available = false;
+      detectError = err instanceof Error ? err.message : String(err);
     }
 
     if (!available) {
+      const hint = detectError ? ` (${detectError})` : ' (binary not found in PATH)';
       return {
         checkId: check.checkId,
         tool: check.tool,
@@ -196,7 +199,7 @@ export async function auditSite(url, checks, opts = {}) {
         severity: null,
         findings: [],
         durationMs: Date.now() - start,
-        reason: `${check.tool} not available`,
+        reason: `${check.tool} not available${hint}`,
       };
     }
 

package/templates/site-audit-runtime/src/report.mjs

@@ -137,10 +137,12 @@ export function generateSummary(delta) {
   const biggest = sorted[0];
 
   let summary = '';
+  const sA = hostnameLabel(delta.urlA);
+  const sB = hostnameLabel(delta.urlB);
   if (bWins > aWins) {
-    summary += `Site B outperforms Site A on ${bWins} of ${scored.length} scored dimension${scored.length > 1 ? 's' : ''}`;
+    summary += `${esc(sB)} outperforms ${esc(sA)} on ${bWins} of ${scored.length} scored dimension${scored.length > 1 ? 's' : ''}`;
   } else if (aWins > bWins) {
-    summary += `Site A outperforms Site B on ${aWins} of ${scored.length} scored dimension${scored.length > 1 ? 's' : ''}`;
+    summary += `${esc(sA)} outperforms ${esc(sB)} on ${aWins} of ${scored.length} scored dimension${scored.length > 1 ? 's' : ''}`;
   } else {
     summary += `Sites are evenly matched across ${scored.length} scored dimension${scored.length > 1 ? 's' : ''}`;
   }
@@ -236,7 +238,13 @@ function classifyFindings(a, b) {
  * @param {import('./diff.mjs').DeltaReport} delta
  * @returns {string}
  */
+function hostnameLabel(url) {
+  try { return new URL(url).hostname; } catch { return url; }
+}
+
 export function renderComparison(delta) {
+  const labelA = hostnameLabel(delta.urlA);
+  const labelB = hostnameLabel(delta.urlB);
   const title = `Site Comparison — ${delta.urlA} vs ${delta.urlB}`;
 
   let html = head(title);
@@ -248,14 +256,14 @@ export function renderComparison(delta) {
   const { aOnly, bOnly } = delta.summary;
   if (aOnly > 0 || bOnly > 0) {
     html += `<div class="asymmetric-warning">Asymmetric availability: `;
-    if (aOnly > 0) html += `${aOnly} check${aOnly > 1 ? 's' : ''} ran only for Site A. `;
-    if (bOnly > 0) html += `${bOnly} check${bOnly > 1 ? 's' : ''} ran only for Site B. `;
+    if (aOnly > 0) html += `${aOnly} check${aOnly > 1 ? 's' : ''} ran only for ${esc(labelA)}. `;
+    if (bOnly > 0) html += `${bOnly} check${bOnly > 1 ? 's' : ''} ran only for ${esc(labelB)}. `;
     html += `Deltas for one-sided checks show N/A.</div>`;
   }
 
   // ── Comparison grid with drill-down links ──
   html += '<div style="background:#fff;border-radius:10px;box-shadow:0 1px 4px rgba(0,0,0,.05);overflow:hidden;margin-bottom:2rem">';
-  html += `<div class="compare-row"><span>Check</span><span>Site A</span><span>Site B</span><span>Delta</span></div>`;
+  html += `<div class="compare-row"><span>Check</span><span>${esc(labelA)}</span><span>${esc(labelB)}</span><span>Delta</span></div>`;
 
   for (const d of delta.deltas) {
     const aDisplay = d.a && d.a.status !== 'skip'
@@ -308,8 +316,8 @@ export function renderComparison(delta) {
     if (d.availability === 'both') {
       const { shared, aOnly: aOnlyF, bOnly: bOnlyF } = classifyFindings(d.a, d.b);
       html += '<div class="side-by-side">';
-      html += `<div class="site-column"><h4>Site A</h4>${compareCardFindings('Site A only', aOnlyF, d.a)}</div>`;
-      html += `<div class="site-column"><h4>Site B</h4>${compareCardFindings('Site B only', bOnlyF, d.b)}</div>`;
+      html += `<div class="site-column"><h4>${esc(labelA)}</h4>${compareCardFindings(esc(labelA) + ' only', aOnlyF, d.a)}</div>`;
+      html += `<div class="site-column"><h4>${esc(labelB)}</h4>${compareCardFindings(esc(labelB) + ' only', bOnlyF, d.b)}</div>`;
       html += '</div>';
       if (shared.length) {
         html += `<div class="finding-group-label" style="margin-top:1rem">Shared issues (both sites)</div>${renderFindings(shared)}`;