eaa-kit 0.2.1 → 0.4.0

package/dist/jsdom-DCpGSLfW.js

@@ -0,0 +1,81 @@
+import { c as runOptions, i as failedPage, l as shapeResults, o as pageUrl, r as blindRulesInScope, t as DEFAULT_TAGS } from "./result-DoamKFsp.js";
+import axe from "axe-core";
+import { Script } from "node:vm";
+import { JSDOM, VirtualConsole } from "jsdom";
+//#region src/audit/runners/jsdom.ts
+/** Per-page ceiling; one pathological document must not stall a CI run. */
+const DEFAULT_TIMEOUT_MS = 3e4;
+/**
+* Audit collected pages with axe-core inside jsdom.
+*
+* Pages are processed sequentially: jsdom parsing and axe-core are both
+* CPU-bound on the main thread, so concurrency buys nothing here. A page that
+* throws or times out is recorded with an `error` and the run continues.
+*/
+async function runJsdomAudit(pages, options = {}) {
+	const audits = [];
+	for (const page of pages) audits.push(await auditPage(page, options));
+	return audits;
+}
+async function auditPage(page, options = {}) {
+	const tags = options.tags ?? DEFAULT_TAGS;
+	const url = pageUrl(page, options.baseUrl);
+	const startedAt = Date.now();
+	const identity = {
+		relativePath: page.relativePath,
+		absolutePath: page.absolutePath,
+		url,
+		engine: "jsdom"
+	};
+	let dom;
+	try {
+		dom = createDom(page.html, url);
+		injectAxe(dom);
+		const { axe: pageAxe } = dom.window;
+		const results = await withTimeout(pageAxe.run(dom.window.document, runOptions(tags)), options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+		return shapeResults(results, {
+			...identity,
+			durationMs: Date.now() - startedAt,
+			blind: blindRulesInScope(tags)
+		});
+	} catch (cause) {
+		return failedPage({
+			...identity,
+			durationMs: Date.now() - startedAt
+		}, cause instanceof Error ? cause.message : String(cause));
+	} finally {
+		dom?.window.close();
+	}
+}
+function createDom(html, url) {
+	const virtualConsole = new VirtualConsole();
+	virtualConsole.on("jsdomError", () => {});
+	return new JSDOM(html, {
+		url,
+		virtualConsole,
+		runScripts: "outside-only",
+		pretendToBeVisual: true
+	});
+}
+/**
+* axe-core is 1.3 MB of source. Compiling it once and re-running the compiled
+* script in each window's context avoids re-parsing it for every page.
+*/
+let axeScript;
+function injectAxe(dom) {
+	axeScript ??= new Script(axe.source, { filename: "axe-core.js" });
+	axeScript.runInContext(dom.getInternalVMContext());
+}
+async function withTimeout(promise, ms) {
+	promise.catch(() => {});
+	let timer;
+	try {
+		return await Promise.race([promise, new Promise((_resolve, reject) => {
+			timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`axe-core timed out after ${ms}ms`)), ms);
+		})]);
+	} finally {
+		clearTimeout(timer);
+	}
+}
+//#endregion
+export { runJsdomAudit as n, auditPage as t };

package/dist/{json-C9xS1PNC.js → json-DjEvy1nX.js}

@@ -1,5 +1,8 @@
-import { i as isImpactLevel, r as countAtOrAbove } from "./impact-DvgBjupx.js";
+import { i as impactLabel, o as isImpactLevel, r as countAtOrAbove } from "./impact-DZt2oBCP.js";
 import { t as TOOL_VERSION } from "./version-B3v4rNoG.js";
+import { t as elementFingerprint } from "./fingerprint-DRoneAjj.js";
+import { s as ruleOutcomes } from "./result-DoamKFsp.js";
+import { t as buildCoverage } from "./coverage-B4IBKMO8.js";
 import axe from "axe-core";
 /**
 * Build the machine-readable report.
@@ -29,6 +32,8 @@ function buildJsonReport(audits, options) {
 			baseUrl: options.baseUrl ?? null
 		},
 		summary: buildSummary(audits, options.failOn),
+		completeness: options.completeness,
+		coverage: buildCoverage(audits),
 		rules: buildRuleIndex(audits),
 		pages: audits.map(toJsonPage)
 	};
@@ -36,23 +41,14 @@ function buildJsonReport(audits, options) {
 /** Every rule mentioned by any page, keyed by id and sorted for stable diffs. */
 function buildRuleIndex(audits) {
 	const index = /* @__PURE__ */ new Map();
-	for (const audit of audits) {
-		const outcomes = [
-			...audit.violations,
-			...audit.accepted ?? [],
-			...audit.incomplete,
-			...audit.passes,
-			...audit.inapplicable
-		];
-		for (const outcome of outcomes) {
-			if (index.has(outcome.ruleId)) continue;
-			index.set(outcome.ruleId, {
-				help: outcome.help,
-				helpUrl: outcome.helpUrl,
-				successCriteria: outcome.successCriteria,
-				en301549: outcome.enClauses
-			});
-		}
+	for (const audit of audits) for (const outcome of ruleOutcomes(audit)) {
+		if (index.has(outcome.ruleId)) continue;
+		index.set(outcome.ruleId, {
+			help: outcome.help,
+			helpUrl: outcome.helpUrl,
+			successCriteria: outcome.successCriteria,
+			en301549: outcome.enClauses
+		});
 	}
 	return Object.fromEntries([...index].sort(([a], [b]) => a.localeCompare(b)));
 }
@@ -60,6 +56,7 @@ function buildRuleIndex(audits) {
 function serialiseJsonReport(report) {
 	return `${JSON.stringify(report, null, 2)}\n`;
 }
+/** The run's tally, exported so the HTML report reads the same numbers. */
 function buildSummary(audits, failOn) {
 	const byImpact = {
 		critical: 0,
@@ -80,8 +77,7 @@ function buildSummary(audits, failOn) {
 		for (const finding of audit.violations) {
 			violations += 1;
 			violatingElements += finding.nodes.length;
-			const impact = finding.impact;
-			byImpact[impact && isImpactLevel(impact) ? impact : "unclassified"] += 1;
+			byImpact[impactLabel(finding.impact)] += 1;
 		}
 		for (const finding of audit.incomplete) if (finding.reason === "engine-limitation") notEvaluated += 1;
 		else needsReview += 1;
@@ -123,7 +119,8 @@ function toJsonFinding(finding) {
 		nodes: finding.nodes.map((node) => ({
 			html: node.html,
 			target: node.target,
-			failureSummary: node.failureSummary ?? null
+			failureSummary: node.failureSummary ?? null,
+			fingerprint: elementFingerprint(finding.ruleId, node.target.join(" "), node.html)
 		}))
 	};
 }
@@ -138,4 +135,4 @@ function byRuleId(a, b) {
 	return a.ruleId.localeCompare(b.ruleId);
 }
 //#endregion
-export { buildJsonReport, serialiseJsonReport };
+export { buildSummary as n, serialiseJsonReport as r, buildJsonReport as t };

package/dist/json-QQuFIw1W.js

@@ -0,0 +1,2 @@
+import { r as serialiseJsonReport, t as buildJsonReport } from "./json-DjEvy1nX.js";
+export { buildJsonReport, serialiseJsonReport };

package/dist/{load-sCkKsvGQ.js → load-5wRGLvub.js}

@@ -1,5 +1,6 @@
-import { _ as withDefault, c as object, f as safeParse, g as url, h as union, i as isoDate, l as optional, m as transform, n as email, p as string, r as enumeration, t as array, u as pipe } from "./schema-CMZ8ItGk.js";
-import { readFile, stat } from "node:fs/promises";
+import { _ as url, a as isoDate, d as pipe, g as union, h as transform, i as enumeration, l as object, m as string, p as safeParse, r as email, t as array, u as optional, v as withDefault } from "./schema-is6CGX2D.js";
+import { r as isFile } from "./fs-BmPtmFke.js";
+import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 //#region src/config/define.ts
@@ -181,12 +182,5 @@ async function importModule(file) {
 	if (module.default === void 0) throw new ConfigError(`${path.basename(file)} has no default export`, ["Expected: export default defineConfig({ … })"]);
 	return module.default;
 }
-async function isFile(candidate) {
-	try {
-		return (await stat(candidate)).isFile();
-	} catch {
-		return false;
-	}
-}
 //#endregion
 export { COMPLIANCE_STATUSES as a, ISSUE_REASONS as c, defineConfig as d, parseConfig as f, ASSESSMENT_METHODS as i, STATEMENT_LOCALES as l, findConfigFile as n, COUNTRIES as o, loadConfig as r, ConfigError as s, CONFIG_FILENAMES as t, configSchema as u };

package/dist/nuxt/index.d.ts

@@ -0,0 +1,35 @@
+import { n as IntegrationOptions, t as BuildAuditError } from "../run-BMASMmwO.js";
+//#region src/nuxt/index.d.ts
+/** The part of the Nitro instance this reads, handed over by `nitro:init`. */
+interface NitroLike {
+  options: {
+    output?: {
+      publicDir?: string;
+    };
+    /** True for `nuxt generate`; absent for a server build. */
+    static?: boolean;
+  };
+}
+interface NuxtOptionsLike {
+  rootDir?: string;
+}
+interface NuxtLike {
+  options: NuxtOptionsLike;
+  hook(name: 'nitro:init', handler: (nitro: NitroLike) => void): void;
+  hook(name: 'close', handler: () => Promise<void>): void;
+}
+interface EaaKitNuxtOptions extends IntegrationOptions {
+  /** Directory to audit. Defaults to the one Nitro says it wrote. */
+  directory?: string;
+  /**
+   * Let a server build pass without auditing anything.
+   *
+   * Off by default: `nuxt build` writes no browsable HTML, and a silent pass
+   * over a directory with no pages in it is indistinguishable from a clean
+   * site.
+   */
+  allowServerBuild?: boolean;
+}
+declare function eaaKitModule(options?: EaaKitNuxtOptions, nuxt?: NuxtLike): void;
+//#endregion
+export { BuildAuditError, EaaKitNuxtOptions, NitroLike, NuxtLike, NuxtOptionsLike, eaaKitModule as default };

package/dist/nuxt/index.js

@@ -0,0 +1,23 @@
+import { n as auditBuild, r as stderrLogger, t as BuildAuditError } from "../run-DB34BSOZ.js";
+import path from "node:path";
+//#region src/nuxt/index.ts
+function eaaKitModule(options = {}, nuxt) {
+	if (nuxt === void 0) return;
+	let publicDir;
+	let prerendered = false;
+	nuxt.hook("nitro:init", (nitro) => {
+		publicDir = nitro.options.output?.publicDir;
+		prerendered = nitro.options.static === true;
+	});
+	nuxt.hook("close", async () => {
+		const directory = options.directory ?? publicDir;
+		if (options.directory === void 0 && !prerendered) {
+			if (options.allowServerBuild === true) return;
+			throw new BuildAuditError("eaa-kit: this was a server build, so no pages were written to disk and there was nothing to audit. Run `nuxt generate` to prerender them, audit the running site with `eaa-kit audit --url`, or set allowServerBuild to skip this.");
+		}
+		if (directory === void 0) throw new BuildAuditError("eaa-kit: Nitro reported no public directory, so there is no path to audit. Pass `directory` to the module to name one.");
+		await auditBuild(path.resolve(nuxt.options.rootDir ?? process.cwd(), directory), options, stderrLogger());
+	});
+}
+//#endregion
+export { BuildAuditError, eaaKitModule as default };

package/dist/{playwright-DSRnXmcd.js → playwright-BWniOain.js}

@@ -1,4 +1,5 @@
-import { i as shapeResults, n as failedPage, r as runOptions, t as DEFAULT_TAGS } from "./result-2aZPfM8w.js";
+import { r as isFile } from "./fs-BmPtmFke.js";
+import { c as runOptions, i as failedPage, l as shapeResults, o as pageUrl, t as DEFAULT_TAGS } from "./result-DoamKFsp.js";
 import { createRequire } from "node:module";
 import { stat } from "node:fs/promises";
 import path from "node:path";
@@ -74,7 +75,7 @@ async function handle(root, requestUrl, response) {
 	}
 	try {
 		const target = (await stat(file)).isDirectory() ? path.join(file, "index.html") : file;
-		if (!await isReadableFile(target)) {
+		if (!await isFile(target)) {
 			response.writeHead(404).end();
 			return;
 		}
@@ -88,13 +89,6 @@ async function handle(root, requestUrl, response) {
 		response.writeHead(404).end();
 	}
 }
-async function isReadableFile(candidate) {
-	try {
-		return (await stat(candidate)).isFile();
-	} catch {
-		return false;
-	}
-}
 /** Resolves a request path inside the root, or nothing if it escapes it. */
 function resolveFile(root, requestUrl) {
 	const { pathname } = new URL(requestUrl, "http://127.0.0.1");
@@ -151,7 +145,7 @@ async function runBrowserAudit(directory, pages, options = {}) {
 		browser = await chromium.launch({ headless: true });
 	} catch (cause) {
 		await server?.close();
-		throw cause;
+		throw launchFailure(cause);
 	}
 	try {
 		const context = await browser.newContext({
@@ -176,7 +170,7 @@ async function auditOne(context, origin, page, options) {
 	const identity = {
 		relativePath: page.relativePath,
 		absolutePath: page.absolutePath,
-		url: reportedUrl(page, options.baseUrl),
+		url: pageUrl(page, options.baseUrl),
 		engine: "browser"
 	};
 	const tab = await context.newPage();
@@ -218,9 +212,27 @@ async function auditOne(context, origin, page, options) {
 function servedUrl(origin, relativePath) {
 	return `${origin}/${relativePath.split("/").map(encodeURIComponent).join("/")}`;
 }
-function reportedUrl(page, baseUrl) {
-	if (!baseUrl) return pathToFileURL(page.absolutePath).href;
-	return new URL(page.relativePath, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`).href;
+/**
+* A launch that failed because the browser was never downloaded, told as setup.
+*
+* The third setup failure, and the only one that used to arrive as a crash.
+* `npm i -D playwright` does not fetch Chromium, so somebody who followed the
+* install line exactly still lands here — and what they saw was Playwright's
+* message boxed in ASCII, wrapped in a stack trace through this package's
+* bundled internals. That reads as eaa-kit falling over, not as a step left to
+* run, and the two want very different things from the reader.
+*
+* Anything else is passed through untouched: a launch can fail for reasons
+* that really are bugs, and dressing those up as setup advice would send
+* somebody off installing a browser they already have.
+*/
+function launchFailure(cause) {
+	if (!(cause instanceof Error)) return cause;
+	const missing = /Executable doesn't exist at (.+)/.exec(cause.message);
+	if (missing === null) return cause;
+	return new BrowserUnavailableError(`Playwright is installed, but the Chromium it drives is not.
+  Download it with:  npx playwright install chromium
+  It was looked for at: ${missing[1]?.trim() ?? "an unreported path"}`);
 }
 /**
 * Playwright is an optional peer dependency: the browserless path must never
@@ -229,18 +241,53 @@ function reportedUrl(page, baseUrl) {
 * problems with different fixes.
 */
 async function loadChromium(cwd = process.cwd()) {
-	let module;
+	const tried = [];
+	const specifiers = ["playwright", "@playwright/test"];
+	const roots = [cwd, void 0];
+	for (const root of roots) for (const specifier of specifiers) {
+		const loaded = await tryLoad(specifier, root);
+		if (loaded === void 0) continue;
+		tried.push(`${specifier}${root === void 0 ? " (from eaa-kit)" : ""}`);
+		const chromium = launcherIn(loaded);
+		if (chromium !== void 0) return chromium;
+	}
+	if (tried.length === 0) throw new BrowserUnavailableError("Browser mode needs Playwright, which is an optional peer dependency.\n  Install it with:  npm i -D playwright\n  Then the browser: npx playwright install chromium");
+	throw new BrowserUnavailableError(`Found ${tried.join(" and ")}, but no chromium launcher on it.\n  This usually means an incomplete or mismatched install. Try:
+    npm i -D playwright@latest
+    npx playwright install chromium --force`);
+}
+/** Import a specifier, resolved from `root` when given. Undefined if absent. */
+async function tryLoad(specifier, root) {
 	try {
-		const resolved = createRequire(pathToFileURL(path.join(cwd, "package.json")).href).resolve("playwright");
-		module = await import(pathToFileURL(resolved).href);
-	} catch {}
-	if (module === void 0) try {
-		module = await import("playwright");
+		if (root === void 0) return await import(specifier);
+		const require = createRequire(pathToFileURL(path.join(root, "package.json")).href);
+		return await import(pathToFileURL(require.resolve(specifier)).href);
 	} catch {
-		throw new BrowserUnavailableError("Browser mode needs Playwright, which is an optional peer dependency.\n  Install it with:  npm i -D playwright\n  Then the browser: npx playwright install chromium");
+		return;
+	}
+}
+/**
+* The chromium launcher, whichever shape the module came back in.
+*
+* Playwright is CommonJS. Whether `await import()` of it exposes named exports
+* depends on Node's static analysis of the file succeeding, which is not
+* guaranteed and differs between versions; when it does not, everything is on
+* `default` instead. Reading only the named export produced "installed but
+* exports no chromium launcher" against a perfectly good install.
+*
+* Exported for its own tests. Driving this through a real import under vitest
+* proves nothing: vitest hands CommonJS back through an interop proxy that
+* answers `.chromium` whether or not Node hoisted it, so both shapes look
+* identical from in there and the test passes with this function broken. The
+* shapes are checked here directly, and the real interop is exercised against
+* real Node by scripts/test-packaged.mjs.
+*/
+function launcherIn(module) {
+	const candidates = [module, module?.default];
+	for (const candidate of candidates) {
+		const chromium = candidate?.chromium;
+		if (chromium !== void 0 && typeof chromium.launch === "function") return chromium;
 	}
-	if (!module.chromium) throw new BrowserUnavailableError("Playwright is installed but exports no chromium launcher");
-	return module.chromium;
 }
 //#endregion
 export { BrowserUnavailableError, runBrowserAudit };

package/dist/{pool-DixLeu8L.js → pool-BMevaLWD.js}

@@ -1,6 +1,5 @@
-import { n as failedPage } from "./result-2aZPfM8w.js";
-import { stat } from "node:fs/promises";
-import { pathToFileURL } from "node:url";
+import { r as isFile } from "./fs-BmPtmFke.js";
+import { i as failedPage, o as pageUrl } from "./result-DoamKFsp.js";
 import { Worker } from "node:worker_threads";
 import { availableParallelism } from "node:os";
 //#region src/audit/runners/pool.ts
@@ -97,7 +96,7 @@ async function runPooledAudit(pages, options = {}) {
 	return runWorkers(pages, runnerOptions, Math.min(workers, pages.length), entry);
 }
 async function auditHere(pages, options) {
-	const { runJsdomAudit } = await import("./jsdom-C6dIyaxN.js");
+	const { runJsdomAudit } = await import("./jsdom-4IMzv0eE.js");
 	return runJsdomAudit(pages, options);
 }
 async function runWorkers(pages, options, count, entry) {
@@ -159,11 +158,6 @@ function identity(page, options) {
 		durationMs: 0
 	};
 }
-/** Kept in step with the sequential runner's own URL derivation. */
-function pageUrl(page, baseUrl) {
-	if (!baseUrl) return pathToFileURL(page.absolutePath).href;
-	return new URL(page.relativePath, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`).href;
-}
 /**
 * Locate the worker entry point.
 *
@@ -180,9 +174,7 @@ async function findWorkerEntry() {
 		new URL("../audit/runners/worker.js", import.meta.url),
 		new URL("./worker.js", import.meta.url)
 	];
-	for (const candidate of candidates) try {
-		if ((await stat(candidate)).isFile()) return candidate;
-	} catch {}
+	for (const candidate of candidates) if (await isFile(candidate)) return candidate;
 }
 //#endregion
 export { plannedWorkers, runPooledAudit };

package/dist/{project-CufCqIE2.js → project-CzOnkLH6.js}

@@ -1,4 +1,6 @@
-import { readFile, stat } from "node:fs/promises";
+import { n as isDirectory, t as exists } from "./fs-BmPtmFke.js";
+import { r as candidateOutputs } from "./frameworks-B4ClIJgE.js";
+import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { glob } from "tinyglobby";
 import { spawn } from "node:child_process";
@@ -17,15 +19,6 @@ import { spawn } from "node:child_process";
 * project's server if the build produces nothing browsable. Naming a directory
 * or passing --url skips all of it.
 */
-/** Build output directories, in the order worth trying them. */
-const BUILD_DIRECTORIES = [
-	"dist",
-	"out",
-	"build",
-	"_site",
-	".output/public",
-	"public"
-];
 /** Ports the common dev and preview servers use, tried if nothing is announced. */
 const KNOWN_PORTS = [
 	3e3,
@@ -55,10 +48,7 @@ async function detectPackageManager(cwd) {
 		["pnpm-lock.yaml", "pnpm"],
 		["yarn.lock", "yarn"],
 		["bun.lockb", "bun"]
-	]) try {
-		await stat(path.join(cwd, file));
-		return manager;
-	} catch {}
+	]) if (await exists(path.join(cwd, file))) return manager;
 	return "npm";
 }
 /**
@@ -69,13 +59,10 @@ async function detectPackageManager(cwd) {
 * assets. What makes a directory the build output is that there is HTML in it.
 */
 async function findBuildOutput(cwd) {
-	for (const candidate of BUILD_DIRECTORIES) {
+	const candidates = await candidateOutputs(cwd, await readPackageJson(cwd));
+	for (const candidate of candidates) {
 		const directory = path.join(cwd, candidate);
-		try {
-			if (!(await stat(directory)).isDirectory()) continue;
-		} catch {
-			continue;
-		}
+		if (!await isDirectory(directory)) continue;
 		if ((await glob(["**/*.html", "**/*.htm"], {
 			cwd: directory,
 			ignore: ["**/node_modules/**"],
@@ -239,6 +226,12 @@ async function autoDetectSource(cwd, options = {}) {
 		};
 	}
 	const pkg = await readPackageJson(cwd);
+	const { detectFramework } = await import("./frameworks-etFg_O8K.js");
+	const detected = await detectFramework(cwd, pkg);
+	if (detected !== void 0 && detected.framework.outputs.length === 0) {
+		step(`${detected.framework.name} renders on a server and writes no HTML to disk`);
+		return { steps };
+	}
 	if (pkg === void 0) return void 0;
 	const scripts = pkg.scripts ?? {};
 	if (options.noBuild) return void 0;
@@ -278,4 +271,4 @@ async function autoDetectSource(cwd, options = {}) {
 	};
 }
 //#endregion
-export { autoDetectSource };
+export { runScript as a, readPackageJson as i, detectPackageManager as n, startServer as o, findBuildOutput as r, autoDetectSource as t };

package/dist/project-MFrXcw1M.js

@@ -0,0 +1,2 @@
+import { i as readPackageJson, t as autoDetectSource } from "./project-CzOnkLH6.js";
+export { autoDetectSource, readPackageJson };