novahiz 0.1.0

package/package.json

@@ -0,0 +1,76 @@
+{
+  "name": "novahiz",
+  "version": "0.1.0",
+  "description": "Deterministic agentic layer for coding harnesses: skill catalog, prompt classifier, and a pre-edit enforcement gate.",
+  "type": "module",
+  "license": "Apache-2.0",
+  "author": "Novahiz",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/novahiz/novahiz.git"
+  },
+  "homepage": "https://github.com/novahiz/novahiz#readme",
+  "bugs": {
+    "url": "https://github.com/novahiz/novahiz/issues"
+  },
+  "keywords": [
+    "ai-agents",
+    "agentic",
+    "deterministic",
+    "opencode",
+    "skills",
+    "mcp",
+    "enforcement",
+    "gate"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "novahiz": "./bin/novahiz.mjs",
+    "novahiz-bootstrap": "./install/bootstrap.mjs",
+    "novahiz-install": "./install/install.mjs",
+    "novahiz-uninstall": "./install/uninstall.mjs",
+    "novahiz-mcp": "./mcp/novahiz-tools/index.mjs"
+  },
+  "engines": {
+    "node": ">=22.18.0"
+  },
+  "scripts": {
+    "check": "node src/cli.ts check",
+    "sync": "node src/cli.ts sync",
+    "classify": "node src/cli.ts classify",
+    "catalog": "node src/cli.ts catalog",
+    "report": "node src/cli.ts report",
+    "setup": "node install/install.mjs",
+    "setup:dry": "node install/install.mjs --dry-run",
+    "bootstrap": "node install/bootstrap.mjs",
+    "bootstrap:dry": "node install/bootstrap.mjs --dry-run",
+    "test": "node --test",
+    "typecheck": "tsc --noEmit"
+  },
+  "files": [
+    "src",
+    "catalog",
+    "adapters",
+    "bin",
+    "install",
+    "mcp",
+    "skills",
+    "bundled-skills",
+    "docs",
+    "README.md",
+    "NOTICE.md",
+    "novahiz.config.example.json",
+    "tsconfig.json",
+    "LICENSE"
+  ],
+  "devDependencies": {
+    "@opencode-ai/plugin": "1.18.30",
+    "@types/node": "24.13.4",
+    "typescript": "7.0.2"
+  },
+  "allowScripts": {
+    "msgpackr-extract@3.0.4": true
+  }
+}

package/skills/a11y-audit/SKILL.md

@@ -0,0 +1,211 @@
+---
+name: "a11y-audit"
+description: "Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases. Use when auditing accessibility, fixing a11y violations, checking color contrast, generating compliance reports, or integrating accessibility checks into CI/CD pipelines."
+---
+
+# Accessibility Audit
+
+WCAG 2.2 Accessibility Audit and Remediation Skill
+
+## Description
+
+The a11y-audit skill provides a complete accessibility audit pipeline for modern web applications. It implements a three-phase workflow -- Scan, Fix, Verify -- that identifies WCAG 2.2 Level A and AA violations, generates exact fix code per framework, and produces stakeholder-ready compliance reports.
+
+For every violation it finds, it provides the precise before/after code fix tailored to your framework (React, Next.js, Vue, Angular, Svelte, or plain HTML).
+
+**What this skill does:**
+
+1. **Scans** your codebase for every WCAG 2.2 Level A and AA violation, categorized by severity (Critical, Major, Minor)
+2. **Fixes** each violation with framework-specific before/after code patterns
+3. **Verifies** that fixes resolve the original violations and introduces no regressions
+4. **Reports** findings in a structured format suitable for developers, PMs, and compliance stakeholders
+5. **Integrates** into CI/CD pipelines to prevent accessibility regressions
+
+## Features
+
+| Feature | Description |
+|---------|-------------|
+| **Full WCAG 2.2 Scan** | Checks all Level A and AA success criteria across your codebase |
+| **Framework Detection** | Auto-detects React, Next.js, Vue, Angular, Svelte, or plain HTML |
+| **Severity Classification** | Categorizes each violation as Critical, Major, or Minor |
+| **Fix Code Generation** | Produces before/after code diffs for every issue |
+| **Color Contrast Checker** | Validates foreground/background pairs against AA and AAA ratios |
+| **Compliance Reporting** | Generates stakeholder reports with pass/fail summaries |
+| **CI/CD Integration** | GitHub Actions, GitLab CI, Azure DevOps pipeline configs |
+| **Keyboard Navigation Audit** | Detects missing focus management and tab order issues |
+| **ARIA Validation** | Checks for incorrect, redundant, or missing ARIA attributes |
+
+### Severity Definitions
+
+| Severity | Definition | Example | SLA |
+|----------|-----------|---------|-----|
+| **Critical** | Blocks access for entire user groups | Missing alt text, no keyboard access to navigation | Fix before release |
+| **Major** | Significant barrier that degrades experience | Insufficient color contrast, missing form labels | Fix within current sprint |
+| **Minor** | Usability issue that causes friction | Redundant ARIA roles, suboptimal heading hierarchy | Fix within next 2 sprints |
+
+## Usage
+
+### Quick Start
+
+```bash
+# Scan entire project
+python scripts/a11y_scanner.py /path/to/project
+
+# Scan with JSON output for tooling
+python scripts/a11y_scanner.py /path/to/project --json
+
+# Check color contrast for specific values
+python scripts/contrast_checker.py --fg "#777777" --bg "#ffffff"
+
+# Check contrast across a CSS/Tailwind file
+python scripts/contrast_checker.py --file /path/to/styles.css
+```
+
+### Slash Command
+
+```
+/a11y-audit                    # Audit current project
+/a11y-audit --scope src/       # Audit specific directory
+/a11y-audit --fix              # Audit and auto-apply fixes
+/a11y-audit --report           # Generate stakeholder report
+/a11y-audit --ci               # Output CI-compatible results
+```
+
+### Three-Phase Workflow
+
+**Phase 1: Scan** -- Walk the source tree, detect framework, apply rule set.
+
+```bash
+python scripts/a11y_scanner.py /path/to/project --format table
+```
+
+**Phase 2: Fix** -- Apply framework-specific fixes for each violation.
+
+> See [references/framework-a11y-patterns.md](references/framework-a11y-patterns.md) for the complete fix patterns catalog.
+
+**Phase 3: Verify** -- Re-run the scanner to confirm fixes and check for regressions.
+
+```bash
+python scripts/a11y_scanner.py /path/to/project --baseline audit-baseline.json
+```
+
+## Example: React Component Audit
+
+```tsx
+// BEFORE: src/components/ProductCard.tsx
+function ProductCard({ product }) {
+  return (
+    <div onClick={() => navigate(`/product/${product.id}`)}>
+      <img src={product.image} />
+      <div style={{ color: '#aaa', fontSize: '12px' }}>{product.name}</div>
+      <span style={{ color: '#999' }}>${product.price}</span>
+    </div>
+  );
+}
+```
+
+| # | WCAG | Severity | Issue |
+|---|------|----------|-------|
+| 1 | 1.1.1 | Critical | `<img>` missing `alt` attribute |
+| 2 | 2.1.1 | Critical | `<div onClick>` not keyboard accessible |
+| 3 | 1.4.3 | Major | Color `#aaa` on white fails contrast (2.32:1, needs 4.5:1) |
+| 4 | 1.4.3 | Major | Color `#999` on white fails contrast (2.85:1, needs 4.5:1) |
+| 5 | 4.1.2 | Major | Interactive element missing role and accessible name |
+
+```tsx
+// AFTER: src/components/ProductCard.tsx
+function ProductCard({ product }) {
+  return (
+    <a href={`/product/${product.id}`} className="product-card"
+       aria-label={`View ${product.name} - $${product.price}`}>
+      <img src={product.image} alt={product.imageAlt || product.name} />
+      <div style={{ color: '#595959', fontSize: '12px' }}>{product.name}</div>
+      <span style={{ color: '#767676' }}>${product.price}</span>
+    </a>
+  );
+}
+```
+
+> See [references/examples-by-framework.md](references/examples-by-framework.md) for Vue, Angular, Next.js, and Svelte examples.
+
+## Tools Reference
+
+### a11y_scanner.py
+
+```
+Usage: python scripts/a11y_scanner.py <path> [options]
+
+Options:
+  --json                  Output results as JSON
+  --format {table,csv}    Output format (default: table)
+  --severity {critical,major,minor}  Filter by minimum severity
+  --framework {react,vue,angular,svelte,html,auto}  Force framework (default: auto)
+  --baseline FILE         Compare against previous scan results
+  --report                Generate stakeholder report
+  --output FILE           Write results to file
+  --quiet                 Suppress output, exit code only
+  --ci                    CI mode: non-zero exit on critical issues
+```
+
+### contrast_checker.py
+
+```
+Usage: python scripts/contrast_checker.py [options]
+
+Options:
+  --fg COLOR              Foreground color (hex)
+  --bg COLOR              Background color (hex)
+  --file FILE             Scan CSS file for color pairs
+  --tailwind DIR          Scan directory for Tailwind color classes
+  --json                  Output results as JSON
+  --suggest               Suggest accessible alternatives for failures
+  --level {aa,aaa}        Target conformance level (default: aa)
+```
+
+## Common Pitfalls
+
+| Pitfall | Correct Approach |
+|---------|------------------|
+| `role="button"` on a `<div>` | Use native `<button>` -- includes keyboard handling for free |
+| `tabindex="0"` on everything | Only interactive elements need focus; use native elements |
+| `aria-label` on non-interactive elements | Use `aria-labelledby` pointing to visible text |
+| `display: none` for screen reader hiding | Use `.sr-only` class instead |
+| Color alone to convey meaning | Add icons, text labels, or patterns alongside color |
+| Placeholder as only label | Always provide a visible `<label>` |
+| `outline: none` without replacement | Always provide a visible focus indicator via `focus-visible` |
+| Empty `alt=""` on informational images | Informational images need descriptive alt text |
+| Skipping heading levels (h1 -> h3) | Heading levels must be sequential |
+| `onClick` without `onKeyDown` | Add keyboard support or prefer native elements |
+| Ignoring `prefers-reduced-motion` | Wrap animations in `@media (prefers-reduced-motion: no-preference)` |
+
+## Related Skills
+
+| Skill | Relationship |
+|-------|-------------|
+| **senior-frontend** | Frontend patterns used in a11y fixes |
+| **code-reviewer** | Include a11y checks in code review workflows |
+| **senior-qa** | Integration of a11y testing into QA processes |
+| **playwright-pro** | Automated browser testing with accessibility assertions |
+| **epic-design** | WCAG 2.1 AA compliant animations and scroll storytelling |
+| **tdd-guide** | Test-driven development patterns for a11y test cases |
+
+## Reference Documentation
+
+| Reference | Description |
+|-----------|-------------|
+| [wcag-quick-ref.md](references/wcag-quick-ref.md) | WCAG 2.2 Level A & AA criteria quick reference |
+| [wcag-22-new-criteria.md](references/wcag-22-new-criteria.md) | New WCAG 2.2 success criteria (Focus Appearance, Target Size, etc.) |
+| [aria-patterns.md](references/aria-patterns.md) | ARIA patterns, keyboard interaction, and live regions |
+| [framework-a11y-patterns.md](references/framework-a11y-patterns.md) | Framework-specific fix patterns (React, Vue, Angular, Svelte, HTML) |
+| [color-contrast-guide.md](references/color-contrast-guide.md) | Color contrast checker details, Tailwind palette mapping, sr-only class |
+| [ci-cd-integration.md](references/ci-cd-integration.md) | GitHub Actions, GitLab CI, Azure DevOps, pre-commit hook configs |
+| [audit-report-template.md](references/audit-report-template.md) | Stakeholder-ready audit report template |
+| [testing-checklist.md](references/testing-checklist.md) | Manual testing checklist (keyboard, screen reader, visual, forms) |
+| [examples-by-framework.md](references/examples-by-framework.md) | Full audit examples for Vue, Angular, Next.js, and Svelte |
+
+## Resources
+
+- [WCAG 2.2 Specification](https://www.w3.org/TR/WCAG22/)
+- [WAI-ARIA Authoring Practices 1.2](https://www.w3.org/WAI/ARIA/apg/)
+- [Deque axe-core Rules](https://github.com/dequelabs/axe-core/blob/develop/doc/rule-descriptions.md)
+- [eslint-plugin-jsx-a11y](https://github.com/jsx-eslint/eslint-plugin-jsx-a11y)

package/skills/a11y-audit/assets/sample-component.tsx

@@ -0,0 +1,51 @@
+// Sample React component with intentional a11y issues for testing
+import React from 'react';
+
+export function UserCard({ user, onEdit, onDelete }) {
+  return (
+    <div className="card" onClick={() => onEdit(user.id)}>
+      <img src={user.avatar} />
+      <div className="name">{user.name}</div>
+      <div className="email">{user.email}</div>
+      <div className="actions">
+        <div onClick={() => onDelete(user.id)} style={{ color: '#aaa', cursor: 'pointer' }}>
+          Delete
+        </div>
+        <a href="#">Edit</a>
+      </div>
+      <input placeholder="Add note" />
+    </div>
+  );
+}
+
+export function SearchBar() {
+  return (
+    <div>
+      <input type="text" placeholder="Search..." />
+      <div onClick={() => alert('searching')} tabIndex={5}>
+        🔍
+      </div>
+    </div>
+  );
+}
+
+export function DataTable({ rows }) {
+  return (
+    <table>
+      <tr>
+        <td><b>Name</b></td>
+        <td><b>Email</b></td>
+        <td><b>Status</b></td>
+      </tr>
+      {rows.map((row) => (
+        <tr key={row.id}>
+          <td>{row.name}</td>
+          <td>{row.email}</td>
+          <td style={{ color: row.active ? 'green' : 'red' }}>
+            {row.active ? '●' : '●'}
+          </td>
+        </tr>
+      ))}
+    </table>
+  );
+}

package/skills/a11y-audit/expected_outputs/sample-contrast-output.txt

@@ -0,0 +1,39 @@
+Contrast Check: #777777 on #ffffff
+
+  Foreground: #777777 (r=119, g=119, b=119)
+  Background: #ffffff (r=255, g=255, b=255)
+  Contrast Ratio: 4.48:1
+
+  Normal text (4.5:1 required):
+    AA:  FAIL (4.48 < 4.5)
+    AAA: FAIL (4.48 < 7.0)
+
+  Large text (3.0:1 required):
+    AA:  PASS (4.48 >= 3.0)
+    AAA: FAIL (4.48 < 4.5)
+
+  UI components (3.0:1 required):
+    AA:  PASS (4.48 >= 3.0)
+
+  Verdict: FAIL — does not meet AA for normal text
+
+---
+
+Contrast Check: #1a1a2e on #ffffff
+
+  Foreground: #1a1a2e (r=26, g=26, b=46)
+  Background: #ffffff (r=255, g=255, b=255)
+  Contrast Ratio: 17.06:1
+
+  Normal text (4.5:1 required):
+    AA:  PASS
+    AAA: PASS
+
+  Large text (3.0:1 required):
+    AA:  PASS
+    AAA: PASS
+
+  UI components (3.0:1 required):
+    AA:  PASS
+
+  Verdict: PASS — meets AAA for all categories

package/skills/a11y-audit/expected_outputs/sample-scan-output.json

@@ -0,0 +1,34 @@
+{
+  "summary": {
+    "files_scanned": 1,
+    "files_with_issues": 1,
+    "total_issues": 9,
+    "critical": 3,
+    "serious": 4,
+    "moderate": 2,
+    "minor": 0,
+    "verdict": "FAIL"
+  },
+  "findings": [
+    {
+      "severity": "critical",
+      "category": "IMG-ALT",
+      "file": "sample-component.tsx",
+      "line": 7,
+      "code": "<img src={user.avatar} />",
+      "wcag": "1.1.1",
+      "message": "Image missing alt attribute",
+      "fix": "Add alt text: alt=\"description of image\""
+    },
+    {
+      "severity": "critical",
+      "category": "KB-CLICK",
+      "file": "sample-component.tsx",
+      "line": 5,
+      "code": "<div className=\"card\" onClick={() => onEdit(user.id)}>",
+      "wcag": "2.1.1",
+      "message": "Click handler on non-interactive element without keyboard support",
+      "fix": "Use <button> or add role=\"button\", tabIndex={0}, onKeyDown"
+    }
+  ]
+}

package/skills/a11y-audit/expected_outputs/sample-scan-report.md

@@ -0,0 +1,63 @@
+# A11y Audit Report — sample-component.tsx
+
+**Scanned:** 1 file | **Issues:** 9 | **Status:** FAIL
+
+## Critical (3)
+
+### 1. Missing alt text on image
+- **File:** sample-component.tsx:7
+- **Code:** `<img src={user.avatar} />`
+- **WCAG:** 1.1.1 Non-text Content (Level A)
+- **Fix:** Add descriptive alt text: `<img src={user.avatar} alt={`${user.name}'s avatar`} />`
+
+### 2. Click handler without keyboard support
+- **File:** sample-component.tsx:5
+- **Code:** `<div className="card" onClick={() => onEdit(user.id)}>`
+- **WCAG:** 2.1.1 Keyboard (Level A)
+- **Fix:** Use `<button>` or add `role="button"`, `tabIndex={0}`, and `onKeyDown`
+
+### 3. Click handler without keyboard support
+- **File:** sample-component.tsx:11
+- **Code:** `<div onClick={() => onDelete(user.id)} ...>`
+- **WCAG:** 2.1.1 Keyboard (Level A)
+- **Fix:** Replace `<div>` with `<button>`
+
+## Serious (4)
+
+### 4. Missing form label
+- **File:** sample-component.tsx:15
+- **Code:** `<input placeholder="Add note" />`
+- **WCAG:** 3.3.2 Labels or Instructions (Level A)
+- **Fix:** Add `<label>` or `aria-label="Add note"`
+
+### 5. Empty link
+- **File:** sample-component.tsx:14
+- **Code:** `<a href="#">Edit</a>`
+- **WCAG:** 2.4.4 Link Purpose (Level A)
+- **Fix:** Use a real href or replace with `<button>`
+
+### 6. tabindex greater than 0
+- **File:** sample-component.tsx:24
+- **Code:** `tabIndex={5}`
+- **WCAG:** 2.4.3 Focus Order (Level A)
+- **Fix:** Use `tabIndex={0}` — positive values disrupt natural tab order
+
+### 7. Missing table headers
+- **File:** sample-component.tsx:30
+- **Code:** `<td><b>Name</b></td>` (using td+b instead of th)
+- **WCAG:** 1.3.1 Info and Relationships (Level A)
+- **Fix:** Use `<th scope="col">Name</th>`
+
+## Moderate (2)
+
+### 8. Missing form label
+- **File:** sample-component.tsx:22
+- **Code:** `<input type="text" placeholder="Search..." />`
+- **WCAG:** 3.3.2 Labels or Instructions (Level A)
+- **Fix:** Add `aria-label="Search"` or visible label
+
+### 9. Color as sole indicator
+- **File:** sample-component.tsx:38
+- **Code:** `style={{ color: row.active ? 'green' : 'red' }}`
+- **WCAG:** 1.4.1 Use of Color (Level A)
+- **Fix:** Add text or icon alongside color: `{row.active ? '✓ Active' : '✗ Inactive'}`