eaa-kit 0.4.0 → 0.5.0

package/README.md

@@ -3,15 +3,17 @@
 [![CI](https://github.com/likeBloodMoon/eaa-kit/actions/workflows/ci.yml/badge.svg)](https://github.com/likeBloodMoon/eaa-kit/actions/workflows/ci.yml)
 
 Build-time WCAG 2.2 AA auditor and EU accessibility statement generator for static sites,
-aimed at freelancers and small agencies in the DACH region who have to comply with the
-European Accessibility Act (in force since 28 June 2025), the BFSG in Germany and the BaFG
-in Austria.
+built for the freelancers and small agencies who have to comply with the European
+Accessibility Act (in force since 28 June 2025) without an accessibility budget. It started
+in the DACH region — the BFSG in Germany, the BaFG in Austria — and the statement now names
+the statute and supervisory body of **seven countries**: Austria, Germany, Switzerland,
+Spain, France, Italy and the Netherlands, each in its own language as well as English.
 
 ```bash
 npx eaa-kit audit                 # WCAG 2.2 AA report; finds your build itself
 npx eaa-kit diff a.json b.json    # what a change made worse, and what it fixed
 npx eaa-kit init                  # write an eaa.config.json
-npx eaa-kit statement             # Barrierefreiheitserklärung from that config
+npx eaa-kit statement             # accessibility statement, in one of seven countries
 ```
 
 > **Not legal advice.** eaa-kit reports what an automated engine can and cannot determine
@@ -33,7 +35,9 @@ supported here either.
 **Audits your build.** Globs the HTML out of `./dist`, parses it with jsdom and runs
 axe-core against it. No Chromium download, fast enough for CI, and it never fetches
 anything or executes your site's JavaScript. `--browser` swaps in real Chromium for the
-rules that need layout and CSS.
+rules that need layout and CSS; `--fast` goes the other way and skips the rules the
+browserless engine cannot decide anyway, rather than running them and discarding the
+answer.
 
 ```bash
 eaa-kit audit ./dist --fail-on serious
@@ -46,14 +50,21 @@ export, Nuxt, SvelteKit, anything behind a CMS — are audited running instead:
 eaa-kit audit --url http://localhost:3000
 ```
 
-**Writes the statement.** A Barrierefreiheitserklärung from one config file, in German or
-English, as Markdown or HTML, naming the statute and supervisory body of Austria,
-Switzerland or Germany — and optionally listing the barriers a real audit found.
+**Writes the statement.** A Barrierefreiheitserklärung, a déclaration d'accessibilité, a
+dichiarazione di accessibilità — whatever the country calls it — from one config file, as
+Markdown or HTML, naming that country's statute and supervisory body, and optionally
+listing the barriers a real audit found.
 
 ```bash
 eaa-kit statement --output src/content/a11y.md
+eaa-kit statement --country FR --lang fr    # or ES, IT, NL, AT, DE, CH
 ```
 
+Each country's statement is a document under its own law rather than a translation of
+another's, so where a national regime asks for more than this — France's RGAA declaration,
+Italy's filing with AgID — the text says so instead of letting a generated file look like
+it settles the matter.
+
 **Fails only on what is new.** The first run on a site that already exists finds
 everything at once. A baseline records what is already wrong so the build fails on
 regressions instead, without ever letting an accepted barrier look like a passing one.
@@ -96,6 +107,16 @@ fetch forty URLs, no longer produces a report that looks like a complete one.
 SARIF for GitHub code scanning, and a self-contained HTML page for the client whose site
 it is.
 
+**Says it once.** The flags a project runs on every build belong in the project, not in the
+build script that repeats them. `eaa.config` — the same file the statement reads — takes an
+[`audit` block](docs/audit.md#defaults-from-eaaconfig) of defaults, and `baseline` reads the
+keys that mean the same thing to it. A flag you type still wins, so a one-off `--browser`
+check needs no edit to a committed file.
+
+```jsonc
+{ "audit": { "dir": "build", "failOn": "critical", "browser": true } }
+```
+
 **Runs in your build**: a [Vite plugin](docs/integrations.md#vite-plugin) covering SvelteKit
 and Remix too, and integrations for
 [Astro](docs/integrations.md#astro-integration),
@@ -117,7 +138,8 @@ eaa-kit audit --url http://localhost:8000 --sitemap /sitemap_index.xml
 | | |
 | --- | --- |
 | [Auditing a build](docs/audit.md) | The `audit` command, both engines, exit codes, and what an automated run can and cannot tell you |
-| [The statement command](docs/statement.md) | The config file, the three countries, and filling a statement from audit results |
+| [Defaults from eaa.config](docs/audit.md#defaults-from-eaaconfig) | Writing the flags down once, and what still overrides them |
+| [The statement command](docs/statement.md) | The config file, the seven countries, and filling a statement from audit results |
 | [Baselines](docs/baseline.md) | Adopting the tool on a site that already has violations |
 | [Comparing two runs](docs/reports.md#comparing-two-runs) | The `diff` command, and what it refuses to call fixed |
 | [Coverage of WCAG](docs/audit.md#how-much-of-wcag-a-run-reaches) | What an automated engine can reach at all, and what it cannot |

package/dist/astro/index.d.ts

@@ -1,4 +1,4 @@
-import { n as IntegrationOptions } from "../run-BMASMmwO.js";
+import { n as IntegrationOptions } from "../run-CtcEUhbe.js";
 //#region src/astro/index.d.ts
 /**
  * An Astro integration that audits the build Astro just produced.

package/dist/astro/index.js

@@ -1,4 +1,4 @@
-import { n as auditBuild, t as BuildAuditError } from "../run-DB34BSOZ.js";
+import { n as auditBuild, t as BuildAuditError } from "../run-C2nKFcb-.js";
 import { fileURLToPath } from "node:url";
 //#region src/astro/index.ts
 var AstroAuditError = class extends Error {

package/dist/audit/runners/worker.js

@@ -1,4 +1,5 @@
-import { t as auditPage } from "../../jsdom-DCpGSLfW.js";
+import { t as auditPage } from "../../jsdom-B--cEH-G.js";
+import { enableCompileCache } from "node:module";
 import { parentPort, workerData } from "node:worker_threads";
 //#region src/audit/runners/worker.ts
 /**
@@ -17,6 +18,9 @@ import { parentPort, workerData } from "node:worker_threads";
 * something catastrophic — the thread running out of memory — reaches the
 * pool's error handler instead.
 */
+try {
+	enableCompileCache();
+} catch {}
 const port = parentPort;
 if (!port) throw new Error("eaa-kit audit worker was started outside a worker thread");
 const options = workerData ?? {};

package/dist/{audit-CPoZMXGM.js → audit-B282A3EA.js}

@@ -1,10 +1,10 @@
 import { a as impactRank, i as impactLabel, r as countAtOrAbove } from "./impact-DZt2oBCP.js";
 import { a as plural, n as count, t as collapse } from "./text-CKKpzkYM.js";
-import { a as isShared, c as runCompleteness, i as groupIssues, n as blindRules, r as coverageParts, t as remediationFor } from "./remediation-Dtowi2EC.js";
+import { a as isShared, c as runCompleteness, i as groupIssues, n as blindRules, r as coverageParts, t as remediationFor } from "./remediation-CMBIrnpN.js";
 import { r as componentPath } from "./component-C3GL1Mnu.js";
-import { i as understandingUrl, n as coverageSummary, r as manualCheckFor, t as buildCoverage } from "./coverage-B4IBKMO8.js";
-import { a as runEngine, i as note, n as emitDocument, o as warn, r as fail, t as advise } from "./command-D8l_oYbV.js";
-import { n as collectPages, r as emptyDirectoryHint, t as BuildDirectoryError } from "./collect-CFM8gEVv.js";
+import { i as understandingUrl, n as coverageSummary, r as manualCheckFor, t as buildCoverage } from "./coverage-B_Y6l-Ra.js";
+import { a as emitDocument, c as runEngine, l as warn, o as fail, s as note, t as advise } from "./command-C3D7JWn6.js";
+import { i as holdsHtml, n as collectPages, r as emptyDirectoryHint, t as BuildDirectoryError } from "./collect-Cu1q9NTB.js";
 import path from "node:path";
 import pc from "picocolors";
 //#region src/audit/report/console.ts
@@ -187,13 +187,15 @@ function summary(audits, ctx) {
 	const elementCount = audits.reduce((total, audit) => total + audit.violations.reduce((sum, finding) => sum + finding.nodes.length, 0), 0);
 	const reviewCount = countRules(audits, "needs-review");
 	const pages = count(audits.length, "page");
+	const audited = audits.length - errored.length;
 	const lines = [line(ctx, "Summary", ctx.c.bold), ...completenessLines(ctx)];
-	if (ruleCount === 0) {
-		const clean = ctx.completeness && !ctx.completeness.complete ? `  No violations across the ${pages} that were audited.` : `  No violations across ${pages}.`;
+	if (ruleCount === 0 && audited === 0 && errored.length > 0) lines.push(line(ctx, "  Nothing was audited: no page could be read.", ctx.c.red));
+	else if (ruleCount === 0) {
+		const clean = errored.length > 0 || ctx.completeness && !ctx.completeness.complete ? `  No violations across the ${count(audited, "page")} that were audited.` : `  No violations across ${pages}.`;
 		lines.push(line(ctx, clean, ctx.c.green));
 	} else {
 		lines.push(render(ctx, [{
-			text: `  ${count(ruleCount, "violation")} on ${withViolations.length} of ${pages}`,
+			text: `  ${count(ruleCount, "violation")} on ${withViolations.length} of ${count(audited, "page")}`,
 			paint: ctx.c.red
 		}, {
 			text: ` (${count(elementCount, "element")})`,
@@ -272,7 +274,8 @@ function completenessLines(ctx) {
 	const lines = [];
 	if (completeness.unreachable.length > 0) {
 		const noun = plural(completeness.unreachable.length, "page");
-		lines.push(line(ctx, `  ${completeness.unreachable.length} ${noun} could not be reached, and were not audited`, ctx.c.yellow));
+		const verb = completeness.unreachable.length === 1 ? "was" : "were";
+		lines.push(line(ctx, `  ${completeness.unreachable.length} ${noun} could not be reached, and ${verb} not audited`, ctx.c.yellow));
 	}
 	if (completeness.truncated) lines.push(line(ctx, "  The run stopped at its page limit; the site has more", ctx.c.yellow));
 	if (lines.length > 0) lines.push(line(ctx, "  This report describes what was audited, not the whole site.", ctx.c.dim));
@@ -484,6 +487,13 @@ async function resolvePages(directory, options = {}) {
 		return;
 	}
 	if (pages.length === 0) {
+		if ((options.include !== void 0 || options.exclude !== void 0) && await holdsHtml(directory)) {
+			warn(`No page in ${shown} matched the filters, so nothing was audited.`);
+			if (options.include !== void 0) note(`  --include ${options.include.join(" ")}`);
+			if (options.exclude !== void 0) note(`  --exclude ${options.exclude.join(" ")}`);
+			note("  Patterns are relative to the audited directory, with POSIX separators.");
+			return;
+		}
 		warn(await emptyDirectoryHint(shown, cwd));
 		return;
 	}
@@ -495,6 +505,7 @@ async function resolvePages(directory, options = {}) {
 	}
 	return {
 		pages,
+		directory,
 		label: shown,
 		completeness: {
 			discovery: "directory",
@@ -511,7 +522,7 @@ async function resolvePages(directory, options = {}) {
 * exit 2 — a run that reached no verdict, not a clean one.
 */
 async function crawlPages(url, options) {
-	const { crawlSite, CrawlError, parseEntryUrl } = await import("./crawl-BiI1Lau_.js");
+	const { crawlSite, CrawlError, parseEntryUrl } = await import("./crawl-BUWPgaGW.js");
 	let entry;
 	try {
 		entry = parseEntryUrl(url, options.allowRemote ?? false);
@@ -609,12 +620,13 @@ const OUTPUT_FORMATS = [
 * piped somewhere without the chatter coming along.
 */
 async function runAuditCommand(dir, options = {}) {
+	if (options.fast && options.browser) warn("--fast has no effect with --browser: a real browser can decide those rules.");
 	const resolved = await resolvePages(dir, options);
 	if (!resolved) return {
 		audits: [],
 		exitCode: 2
 	};
-	const { pages, origin, label, cleanup, completeness: collection } = resolved;
+	const { pages, origin, label, cleanup, directory, completeness: collection } = resolved;
 	try {
 		note(`Auditing ${count(pages.length, "page")} in ${label}${await describeEngine(pages, options)}…`);
 		const baseUrl = options.baseUrl ?? origin;
@@ -623,8 +635,9 @@ async function runAuditCommand(dir, options = {}) {
 			...baseUrl === void 0 ? {} : { baseUrl },
 			...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
 			...options.browser ? { browser: true } : {},
+			...options.fast && !options.browser ? { fast: true } : {},
 			...options.concurrency === void 0 ? {} : { concurrency: options.concurrency },
-			...options.url === void 0 && dir !== void 0 ? { directory: dir } : {}
+			...directory === void 0 ? {} : { directory }
 		});
 		if (!audits) return {
 			audits: [],
@@ -666,7 +679,7 @@ async function runAuditCommand(dir, options = {}) {
 * would be as wrong as silently passing.
 */
 async function acceptBaseline(audits, options) {
-	const { applyBaseline, BaselineError, readBaseline } = await import("./baseline-22Y1NWxM.js");
+	const { applyBaseline, BaselineError, readBaseline } = await import("./baseline-0u4df12v.js");
 	try {
 		const outcome = applyBaseline(audits, await readBaseline(options.baseline, options.cwd ?? process.cwd()));
 		if (outcome.accepted > 0) note(`Baseline accepted ${outcome.accepted} violating elements`);
@@ -693,9 +706,10 @@ async function acceptBaseline(audits, options) {
 */
 async function describeEngine(pages, options) {
 	if (options.browser) return " with Chromium";
-	const { plannedWorkers } = await import("./pool-BMevaLWD.js");
+	const { plannedWorkers } = await import("./pool-BO25OIez.js");
 	const workers = options.concurrency ?? plannedWorkers(pages);
-	return workers > 1 ? ` across ${workers} threads` : "";
+	const threads = workers > 1 ? ` across ${workers} threads` : "";
+	return options.fast ? `${threads}, skipping what this engine cannot decide` : threads;
 }
 /**
 * Emit the chosen format, to a file when --output is given and to stdout
@@ -710,7 +724,7 @@ async function emit(audits, dir, failOn, completeness, options) {
 async function renderReport(audits, dir, failOn, completeness, format, toFile, options) {
 	switch (format) {
 		case "json": {
-			const { buildJsonReport, serialiseJsonReport } = await import("./json-QQuFIw1W.js");
+			const { buildJsonReport, serialiseJsonReport } = await import("./json-D_Mnnft5.js");
 			return serialiseJsonReport(buildJsonReport(audits, {
 				directory: dir,
 				...options.url === void 0 ? {} : { sourceKind: "url" },
@@ -720,17 +734,17 @@ async function renderReport(audits, dir, failOn, completeness, format, toFile, o
 			}));
 		}
 		case "sarif": {
-			const { buildSarifReport, serialiseSarifReport } = await import("./sarif-SR3_lLYd.js");
+			const { buildSarifReport, serialiseSarifReport } = await import("./sarif-B-UBcVu8.js");
 			return serialiseSarifReport(buildSarifReport(audits, {
 				directory: dir,
 				completeness
 			}));
 		}
 		case "html": {
-			const { buildHtmlReport } = await import("./html-BGTO3ypW.js");
+			const { buildHtmlReport } = await import("./html-C4vktg0A.js");
 			const framework = await detectedFramework(options.cwd ?? process.cwd());
 			return buildHtmlReport(audits, {
-				...await sourceLookups(options.cwd ?? process.cwd()),
+				...await sourceLookups(options.cwd ?? process.cwd(), audits),
 				directory: dir,
 				failOn,
 				completeness,
@@ -741,7 +755,7 @@ async function renderReport(audits, dir, failOn, completeness, format, toFile, o
 		case "console": {
 			const framework = await detectedFramework(options.cwd ?? process.cwd());
 			return `${formatConsoleReport(audits, {
-				...await sourceLookups(options.cwd ?? process.cwd()),
+				...await sourceLookups(options.cwd ?? process.cwd(), audits),
 				dir,
 				failOn,
 				completeness,
@@ -765,15 +779,23 @@ async function detectedFramework(cwd) {
 	const { readPackageJson } = await import("./project-MFrXcw1M.js");
 	return (await detectFramework(cwd, await readPackageJson(cwd)))?.framework.id;
 }
-async function sourceLookups(cwd) {
+async function sourceLookups(cwd, audits) {
 	const { buildRouteMap, sourceFor } = await import("./routes-CmdRUuOs.js");
-	const { buildComponentIndex, componentFor } = await import("./component-DKd3EHOg.js");
 	const routes = await buildRouteMap(cwd);
+	if (!hasElementsToAttribute(audits)) return {
+		sourceFor: (page) => sourceFor(routes, page),
+		componentFor: () => void 0
+	};
+	const { buildComponentIndex, componentFor } = await import("./component-DKd3EHOg.js");
 	const components = await buildComponentIndex(cwd);
 	return {
 		sourceFor: (page) => sourceFor(routes, page),
 		componentFor: (html) => componentFor(components, html)
 	};
 }
+/** Whether any element will be listed, and so looked up against the source. */
+function hasElementsToAttribute(audits) {
+	return audits.some((audit) => audit.violations.length > 0 || (audit.accepted?.length ?? 0) > 0);
+}
 //#endregion
 export { runAuditCommand as n, resolvePages as r, OUTPUT_FORMATS as t };

package/dist/audit-DyHPmGeD.js

@@ -0,0 +1,2 @@
+import { n as runAuditCommand } from "./audit-B282A3EA.js";
+export { runAuditCommand };

package/dist/{baseline-22Y1NWxM.js → baseline-0u4df12v.js}

@@ -1,2 +1,2 @@
-import { a as readBaseline, r as applyBaseline, t as BaselineError } from "./baseline-DB9CZGnV.js";
+import { a as readBaseline, r as applyBaseline, t as BaselineError } from "./baseline-CuAS2lMk.js";
 export { BaselineError, applyBaseline, readBaseline };

package/dist/{baseline-DB9CZGnV.js → baseline-CuAS2lMk.js}

@@ -1,6 +1,6 @@
-import { a as isoDate$1, c as number, l as object, m as string, p as safeParse, s as nullable, t as array, u as optional, v as withDefault } from "./schema-is6CGX2D.js";
-import { t as elementFingerprint } from "./fingerprint-DRoneAjj.js";
-import { a as findingElements } from "./result-DoamKFsp.js";
+import { c as nullable, d as optional, h as string, l as number, m as safeParse, o as isoDate$1, t as array, u as object, y as withDefault } from "./schema-DJSF4K05.js";
+import { t as elementFingerprint } from "./fingerprint-BjYV_0F7.js";
+import { o as findingElements } from "./result-BWcYXeRs.js";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 /** Default filename, used by the CLI when no path is given. */
@@ -109,7 +109,7 @@ function buildBaseline(audits, options = {}) {
 		...options.note ? { note: options.note } : {}
 	});
 	return {
-		schemaVersion: 1,
+		schemaVersion: 2,
 		createdOn: acceptedOn,
 		entries: entries.sort(byEntry)
 	};
@@ -137,7 +137,8 @@ async function readBaseline(file, cwd = process.cwd()) {
 		const issues = result.error.issues.map((issue) => `${issue.path.join(".") || "document"}: ${issue.message}`).slice(0, 5);
 		throw new BaselineError(`${path.basename(target)} is not an eaa-kit baseline (${issues.join("; ")})`);
 	}
-	if (result.data.schemaVersion !== 1) throw new BaselineError(`${path.basename(target)} has schemaVersion ${result.data.schemaVersion}; this version of eaa-kit reads 1`);
+	if (result.data.schemaVersion !== 2) throw new BaselineError(`${path.basename(target)} has schemaVersion ${result.data.schemaVersion}; this version of eaa-kit reads 2.\n  Record it again on the current build: eaa-kit baseline\n  Read the new file before committing it: it lists what this run found, which is
+  not necessarily what the old one accepted.`);
 	return result.data;
 }
 async function writeBaseline(file, baseline, cwd = process.cwd()) {

package/dist/cli/index.js

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
-import { c as number, f as record, l as object, m as string, n as boolean, p as safeParse, s as nullable, t as array, u as optional, v as withDefault } from "../schema-is6CGX2D.js";
-import { l as STATEMENT_LOCALES, o as COUNTRIES, r as loadConfig, s as ConfigError } from "../load-5wRGLvub.js";
-import { i as readAuditReport, o as StatementError, t as renderStatement } from "../render-DrvXRCEn.js";
 import { a as impactRank, n as IMPACT_LEVELS, o as isImpactLevel, s as meetsThreshold, t as DEFAULT_FAIL_ON } from "../impact-DZt2oBCP.js";
+import { c as nullable, d as optional, h as string, l as number, m as safeParse, n as boolean, p as record, t as array, u as object, y as withDefault } from "../schema-DJSF4K05.js";
+import { c as ConfigError, i as loadConfig, s as COUNTRIES, u as STATEMENT_LOCALES } from "../load-yAR4wzez.js";
+import { i as readAuditReport, o as StatementError, t as renderStatement } from "../render-DbGOVmhx.js";
 import { n as count, t as collapse } from "../text-CKKpzkYM.js";
 import { t as TOOL_VERSION } from "../version-B3v4rNoG.js";
-import { t as elementFingerprint } from "../fingerprint-DRoneAjj.js";
-import { i as buildBaseline, n as DEFAULT_BASELINE_FILE, s as writeBaseline, t as BaselineError } from "../baseline-DB9CZGnV.js";
-import { n as runAuditCommand, r as resolvePages, t as OUTPUT_FORMATS } from "../audit-CPoZMXGM.js";
-import { a as runEngine, i as note, n as emitDocument, o as warn, r as fail, t as advise } from "../command-D8l_oYbV.js";
+import { t as elementFingerprint } from "../fingerprint-BjYV_0F7.js";
+import { i as buildBaseline, n as DEFAULT_BASELINE_FILE, s as writeBaseline, t as BaselineError } from "../baseline-CuAS2lMk.js";
+import { n as runAuditCommand, r as resolvePages, t as OUTPUT_FORMATS } from "../audit-B282A3EA.js";
+import { a as emitDocument, c as runEngine, i as baselineInvocation, l as warn, n as auditDefaults, o as fail, r as auditInvocation, s as note, t as advise } from "../command-C3D7JWn6.js";
+import { enableCompileCache } from "node:module";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { Command, InvalidArgumentError } from "commander";
@@ -36,7 +37,7 @@ async function runBaselineCommand(dir, options = {}) {
 		entries: 0,
 		exitCode: 2
 	};
-	const { pages, origin, label } = resolved;
+	const { pages, origin, label, directory } = resolved;
 	note(`Auditing ${count(pages.length, "page")} in ${label}…`);
 	const baseUrl = options.baseUrl ?? origin;
 	const audits = await runEngine(pages, {
@@ -45,7 +46,7 @@ async function runBaselineCommand(dir, options = {}) {
 		...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs },
 		...options.browser ? { browser: true } : {},
 		...options.concurrency === void 0 ? {} : { concurrency: options.concurrency },
-		...options.url === void 0 ? { directory: path.resolve(cwd, dir) } : {}
+		...directory === void 0 ? {} : { directory }
 	});
 	if (!audits) return {
 		entries: 0,
@@ -222,7 +223,7 @@ async function readReport(file, cwd = process.cwd()) {
 		const first = result.error.issues[0];
 		throw new DiffError(`${file} is not an eaa-kit JSON report${first === void 0 || first.path.length === 0 ? "" : ` at ${first.path.join(".")}`}: ${first?.message ?? "unrecognised shape"}`);
 	}
-	if (result.data.schemaVersion !== 1) throw new DiffError(`${file} is schemaVersion ${result.data.schemaVersion}; this version of eaa-kit reads 1`);
+	if (result.data.schemaVersion !== 2) throw new DiffError(`${file} is schemaVersion ${result.data.schemaVersion}; this version of eaa-kit reads 2.\n  Write both reports with the same version of eaa-kit before comparing them.`);
 	return result.data;
 }
 //#endregion
@@ -396,6 +397,30 @@ function formatFor(output) {
 //#endregion
 //#region src/cli/index.ts
 /**
+* Reuse the compiled form of this tool and its dependencies between runs.
+*
+* Most of what a short audit costs is not the audit. jsdom alone is ~700 ms to
+* import on a warm page cache, and V8 pays to parse and compile it from source
+* on every single run — of a CLI somebody invokes from a build script, over and
+* over, against code that has not changed since the last time. Node can cache
+* the compiled bytecode instead, which is exactly the shape of this problem.
+*
+* Measured over ten pages: 2350 ms without, 2075 ms with. The saving is a fixed
+* cost, so it counts for most on the small sites where fixed cost is most of
+* the run.
+*
+* Best-effort by design. It is a cache: a read-only filesystem, a sandbox that
+* forbids the directory, or a Node built without the feature all mean the run
+* is a little slower, and none of them is a reason to fail an audit. Node's own
+* NODE_DISABLE_COMPILE_CACHE is honoured by the call itself.
+*/
+function useCompileCache() {
+	try {
+		enableCompileCache();
+	} catch {}
+}
+useCompileCache();
+/**
 * A parser for a fixed set of words, listing them when the answer is not one.
 *
 * `normalise` is for `--country de`, where the accepted spelling differs from
@@ -431,16 +456,16 @@ const parseConcurrency = wholeNumber(1);
 const program = new Command();
 program.exitOverride();
 program.name("eaa-kit").description("WCAG 2.2 AA auditor and EU accessibility statement generator for static sites.\nNot legal advice.").version(TOOL_VERSION, "-v, --version");
-program.command("audit").description("Audit built HTML against WCAG 2.2 AA").argument("[dir]", "directory holding the built site (default: found automatically)").option("--include <globs...>", "glob patterns to audit, relative to dir").option("--exclude <globs...>", "glob patterns to skip").option("--base-url <url>", "audit pages under their real site URL").option("--url <url>", "audit a running site instead of a build directory").option("--no-build", "never run the project build or start its server").option("--per-page", "also list every page and its result").option("--manual", "what to check by hand for the rules this engine cannot evaluate").option("--coverage", "list every WCAG 2.2 A/AA criterion and what this run reached on it").option("--allow-remote", "allow --url to crawl a host that is not localhost").option("--ignore-robots", "crawl paths robots.txt disallows").option("--sitemap <path>", "where the site lists its pages, if not /sitemap.xml").option("--max-pages <n>", "stop the crawl after this many pages", parsePositive).option("--max-depth <n>", "how far from the entry URL to follow links", parseDepth).option("--fail-on <impact>", `exit 1 on violations at or above this impact (${IMPACT_LEVELS.join("|")})`, parseImpact, DEFAULT_FAIL_ON).option("--format <format>", `output format (${OUTPUT_FORMATS.join("|")})`, parseFormat, "console").option("--output <path>", "write the report to a file instead of stdout").option("--browser", "audit in real Chromium, covering the rules jsdom cannot evaluate").option("--concurrency <n>", "worker threads to audit with, or 1 for none (default: from the page and core count)", parseConcurrency).option("--baseline <path>", "accept the violations recorded in this file; fail only on new ones").action(async (dir, flags) => {
-	const { build, ...options } = flags;
-	const { exitCode } = await runAuditCommand(dir, {
-		...options,
-		...build === false ? { noBuild: true } : {}
-	});
+program.command("audit").description("Audit built HTML against WCAG 2.2 AA").argument("[dir]", "directory holding the built site (default: found automatically)").option("--include <globs...>", "glob patterns to audit, relative to dir").option("--exclude <globs...>", "glob patterns to skip").option("--base-url <url>", "audit pages under their real site URL").option("--url <url>", "audit a running site instead of a build directory").option("--no-build", "never run the project build or start its server").option("--per-page", "also list every page and its result").option("--manual", "what to check by hand for the rules this engine cannot evaluate").option("--coverage", "list every WCAG 2.2 A/AA criterion and what this run reached on it").option("--allow-remote", "allow --url to crawl a host that is not localhost").option("--ignore-robots", "crawl paths robots.txt disallows").option("--sitemap <path>", "where the site lists its pages, if not /sitemap.xml").option("--max-pages <n>", "stop the crawl after this many pages", parsePositive).option("--max-depth <n>", "how far from the entry URL to follow links", parseDepth).option("--fail-on <impact>", `exit 1 on violations at or above this impact (${IMPACT_LEVELS.join("|")}; default: ${DEFAULT_FAIL_ON})`, parseImpact).option("--format <format>", `output format (${OUTPUT_FORMATS.join("|")}; default: console)`, parseFormat).option("--output <path>", "write the report to a file instead of stdout").option("--browser", "audit in real Chromium, covering the rules jsdom cannot evaluate").option("--fast", "skip the rules the browserless engine cannot decide anyway, losing their element lists").option("--concurrency <n>", "pages to audit at once, or 1 for none (default: from the page and core count)", parseConcurrency).option("--baseline <path>", "accept the violations recorded in this file; fail only on new ones").option("--config <path>", "take defaults from this config file, otherwise it is searched for").action(async (dir, flags) => {
+	const defaults = await auditDefaults({ ...flags.config ? { config: flags.config } : {} });
+	const invocation = auditInvocation(dir, defaults, flags);
+	const { exitCode } = await runAuditCommand(invocation.dir, invocation.options);
 	process.exitCode = exitCode;
 });
-program.command("baseline").description("Record the violations a build already has, so later runs fail only on new ones").argument("[dir]", "directory holding the built site", "./dist").option("--include <globs...>", "glob patterns to audit, relative to dir").option("--exclude <globs...>", "glob patterns to skip").option("--base-url <url>", "audit pages under their real site URL").option("--url <url>", "record a baseline from a running site instead of a directory").option("--allow-remote", "allow --url to crawl a host that is not localhost").option("--ignore-robots", "crawl paths robots.txt disallows").option("--sitemap <path>", "where the site lists its pages, if not /sitemap.xml").option("--max-pages <n>", "stop the crawl after this many pages", parsePositive).option("--max-depth <n>", "how far from the entry URL to follow links", parseDepth).option("--output <path>", `where to write it (default: ${DEFAULT_BASELINE_FILE})`).option("--note <text>", "recorded on every entry, for whoever reads the file").option("--expires-on <date>", "ISO date after which the entries stop suppressing", parseDate).option("--browser", "audit in real Chromium instead of jsdom").option("--concurrency <n>", "worker threads to audit with, or 1 for none", parseConcurrency).action(async (dir, flags) => {
-	const { exitCode } = await runBaselineCommand(dir, flags);
+program.command("baseline").description("Record the violations a build already has, so later runs fail only on new ones").argument("[dir]", "directory holding the built site (default: ./dist)").option("--include <globs...>", "glob patterns to audit, relative to dir").option("--exclude <globs...>", "glob patterns to skip").option("--base-url <url>", "audit pages under their real site URL").option("--url <url>", "record a baseline from a running site instead of a directory").option("--allow-remote", "allow --url to crawl a host that is not localhost").option("--ignore-robots", "crawl paths robots.txt disallows").option("--sitemap <path>", "where the site lists its pages, if not /sitemap.xml").option("--max-pages <n>", "stop the crawl after this many pages", parsePositive).option("--max-depth <n>", "how far from the entry URL to follow links", parseDepth).option("--output <path>", `where to write it (default: ${DEFAULT_BASELINE_FILE})`).option("--note <text>", "recorded on every entry, for whoever reads the file").option("--expires-on <date>", "ISO date after which the entries stop suppressing", parseDate).option("--browser", "audit in real Chromium instead of jsdom").option("--concurrency <n>", "pages to audit at once, or 1 for none", parseConcurrency).option("--config <path>", "take defaults from this config file, otherwise it is searched for").action(async (dir, flags) => {
+	const defaults = await auditDefaults({ ...flags.config ? { config: flags.config } : {} });
+	const invocation = baselineInvocation(dir, defaults, flags);
+	const { exitCode } = await runBaselineCommand(invocation.dir, invocation.options);
 	process.exitCode = exitCode;
 });
 program.command("diff").description("Compare two JSON reports: what a change made worse, and what it fixed").argument("<before>", "JSON report from before the change").argument("<after>", "JSON report from after it").option("--format <format>", `output format (${DIFF_FORMATS.join("|")})`, oneOf(DIFF_FORMATS)).option("--output <path>", "write the diff here instead of stdout").option("--fail-on <impact>", `exit 1 on NEW violations at or above this impact (${IMPACT_LEVELS.join("|")})`, parseImpact, DEFAULT_FAIL_ON).action(async (before, after, flags) => {
@@ -448,7 +473,7 @@ program.command("diff").description("Compare two JSON reports: what a change mad
 	process.exitCode = exitCode;
 });
 program.command("init").description("Write an eaa.config.json to generate statements from").option("--output <path>", "write here instead of eaa.config.json").option("--force", "overwrite a config that is already there").option("-y, --yes", "take every default without asking").action(async (flags) => {
-	const { runInitCommand } = await import("../init-DIWDE35F.js");
+	const { runInitCommand } = await import("../init-CW7LfGT5.js");
 	const { exitCode } = await runInitCommand(flags);
 	process.exitCode = exitCode;
 });
@@ -463,6 +488,12 @@ program.command("statement").description("Generate an EU accessibility statement
 try {
 	await program.parseAsync(process.argv);
 } catch (cause) {
+	if (cause instanceof ConfigError) {
+		fail(cause.message);
+		for (const issue of cause.issues) note(`  ${issue}`);
+		process.exitCode = 2;
+		process.exit(2);
+	}
 	const error = cause;
 	if (typeof error.exitCode === "number") process.exitCode = error.exitCode === 0 ? 0 : 2;
 	else {

package/dist/{collect-CFM8gEVv.js → collect-Cu1q9NTB.js}

@@ -46,11 +46,32 @@ async function collectPages(dir, options = {}) {
 	const pages = [];
 	for (let i = 0; i < relativePaths.length; i += READ_CONCURRENCY) {
 		const batch = relativePaths.slice(i, i + READ_CONCURRENCY);
-		const read = await Promise.all(batch.map((relativePath) => readPage(root, relativePath, options.onUnreadable)));
+		const read = await Promise.all(batch.map((relativePath) => readPage(root, relativePath, options.onUnreadable, options.maxBytes ?? 33554432)));
 		for (const page of read) if (page !== void 0) pages.push(page);
 	}
 	return pages;
 }
+/**
+* Whether the directory holds any HTML at all, ignoring include and exclude.
+*
+* Asked when a run collected nothing, to tell two different mistakes apart: a
+* build directory with no pages in it, and a directory full of pages that the
+* caller's own filters excluded. The advice for the first is wrong for the
+* second — it names another directory to audit — so the question has to be
+* answered before it is given.
+*
+* Globs rather than collecting: this only needs to know whether one file
+* exists, and reading every page of a large build to answer that on a path that
+* is about to print a warning and stop would be work for nothing.
+*/
+async function holdsHtml(dir) {
+	return (await glob([...DEFAULT_INCLUDE], {
+		cwd: path.resolve(dir),
+		ignore: [...DEFAULT_EXCLUDE],
+		onlyFiles: true,
+		dot: false
+	})).length > 0;
+}
 async function assertDirectory(root, original) {
 	let stats;
 	try {
@@ -61,9 +82,15 @@ async function assertDirectory(root, original) {
 	}
 	if (!stats.isDirectory()) throw new BuildDirectoryError(`Build path is not a directory: ${original}`, root);
 }
-async function readPage(root, relativePath, onUnreadable) {
+async function readPage(root, relativePath, onUnreadable, maxBytes) {
 	const absolutePath = path.join(root, relativePath);
 	try {
+		const { size } = await stat(absolutePath);
+		if (size > maxBytes) {
+			if (onUnreadable === void 0) throw new Error(`${relativePath} is ${size} bytes, over the ${maxBytes} byte limit`);
+			onUnreadable(relativePath, `${megabytes(size)} MB, over the ${megabytes(maxBytes)} MB limit for one page`);
+			return;
+		}
 		return {
 			absolutePath,
 			relativePath,
@@ -130,5 +157,9 @@ function generic(head) {
 function article(name) {
 	return /^[aeiou]/i.test(name) ? "an" : "a";
 }
+/** Sizes in the megabytes a person reads, not the bytes a computer counts. */
+function megabytes(bytes) {
+	return (bytes / 1048576).toFixed(1).replace(/\.0$/, "");
+}
 //#endregion
-export { stripBom as i, collectPages as n, emptyDirectoryHint as r, BuildDirectoryError as t };
+export { stripBom as a, holdsHtml as i, collectPages as n, emptyDirectoryHint as r, BuildDirectoryError as t };