pour-engine 1.29.0 → 1.31.0

package/engine/rules/wcag/1.3.1-p-as-heading.js

@@ -1,6 +1,7 @@
 // WCAG SC 1.3.1 Info and Relationships (Level A)
 export default {
   id: 'p-as-heading',
+  name: 'Styled text as heading',
   impact: 'serious',
   tags: ['wcag2a', 'wcag131'],
   help: 'Bold paragraphs should not stand in for headings',

package/engine/rules/wcag/1.3.1-table-headers.js

@@ -9,6 +9,7 @@
 // better than false positives on real pages.
 export default {
   id: 'table-headers',
+  name: 'Table header associations',
   impact: 'serious',
   tags: ['wcag2a', 'wcag131'],
   help: 'Data tables must have properly associated header cells',

package/engine/rules/wcag/1.3.4-orientation.js

@@ -46,6 +46,7 @@ function scanRules(rules, insideOrientation, findings) {
 
 export default {
   id: 'orientation-lock',
+  name: 'Orientation lock',
   impact: 'serious',
   tags: ['wcag21aa', 'wcag134'],
   help: 'Content must work in both portrait and landscape',

package/engine/rules/wcag/1.3.5-autocomplete-valid.js

@@ -16,6 +16,7 @@ const TOKENS = new Set([
 
 export default {
   id: 'autocomplete-valid',
+  name: 'Autocomplete tokens',
   impact: 'serious',
   tags: ['wcag21aa', 'wcag135'],
   help: 'autocomplete attributes must use valid tokens',

package/engine/rules/wcag/1.4.1-link-in-text-block.js

@@ -3,6 +3,7 @@ import { parseColor, contrastRatio } from '../../lib/contrast.js';
 
 export default {
   id: 'link-in-text-block',
+  name: 'Link distinction in text',
   impact: 'serious',
   tags: ['wcag2a', 'wcag141'],
   help: 'Links inside text must be distinguishable by more than colour',

package/engine/rules/wcag/1.4.10-reflow.js

@@ -6,6 +6,7 @@
 // and images are exempt content the geometry can't distinguish.
 export default {
   id: 'reflow',
+  name: 'Content reflow',
   impact: 'moderate',
   tags: ['wcag21aa', 'wcag1410'],
   help: 'Content should reflow to one-dimensional scrolling',

package/engine/rules/wcag/1.4.11-non-text-contrast.js

@@ -10,6 +10,7 @@ import { parseColor, contrastRatio, composite, effectiveBackground, showRatio }
 
 export default {
   id: 'non-text-contrast',
+  name: 'Control & icon contrast',
   impact: 'serious',
   tags: ['wcag21aa', 'wcag1411'],
   help: 'Form fields and icons need a 3:1 visible boundary',

package/engine/rules/wcag/1.4.12-text-spacing.js

@@ -16,6 +16,7 @@ const clipped = (element) =>
 
 export default {
   id: 'text-spacing',
+  name: 'Text spacing overrides',
   impact: 'serious',
   tags: ['wcag21aa', 'wcag1412'],
   help: 'Text must survive user spacing overrides without being cut off',

package/engine/rules/wcag/1.4.2-audio-control.js

@@ -1,6 +1,7 @@
 // WCAG SC 1.4.2 Audio Control (Level A)
 export default {
   id: 'audio-control',
+  name: 'Auto-playing audio control',
   impact: 'critical',
   tags: ['wcag2a', 'wcag142'],
   help: 'Auto-playing audio must be stoppable or muted',

package/engine/rules/wcag/1.4.3-color-contrast.js

@@ -916,6 +916,7 @@ export function createContrastRule({ id, tags, help, helpUrl, thresholds }) {
 
 export default createContrastRule({
   id: 'color-contrast',
+  name: 'Text contrast',
   tags: ['wcag2aa', 'wcag143'],
   help: 'Text must have sufficient contrast against its background',
   helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/contrast-minimum.html',

package/engine/rules/wcag/1.4.3-control-contrast.js

@@ -9,6 +9,7 @@ import {
 
 export default {
   id: 'control-contrast',
+  name: 'Form control contrast',
   impact: 'serious',
   tags: ['wcag2aa', 'wcag143'],
   help: 'Text inside form controls must have sufficient contrast',

package/engine/rules/wcag/1.4.4-meta-viewport.js

@@ -3,6 +3,7 @@ import { isEmbeddedDocument } from '../../lib/dom.js';
 
 export default {
   id: 'meta-viewport',
+  name: 'Viewport zoom lock',
   impact: 'critical',
   tags: ['wcag2aa', 'wcag144'],
   help: 'The viewport must let users zoom to at least 200%',

package/engine/rules/wcag/1.4.6-contrast-enhanced.js

@@ -4,6 +4,7 @@ import { createContrastRule } from './1.4.3-color-contrast.js';
 
 export default createContrastRule({
   id: 'color-contrast-enhanced',
+  name: 'Enhanced text contrast',
   tags: ['wcag2aaa', 'wcag146'],
   help: 'Text must have enhanced contrast against its background (AAA)',
   helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/contrast-enhanced.html',

package/engine/rules/wcag/2.1.1-scrollable-region-focusable.js

@@ -43,6 +43,7 @@ function hasTabbableContent(node) {
 
 export default {
   id: 'scrollable-region-focusable',
+  name: 'Keyboard-reachable scroll areas',
   impact: 'serious',
   tags: ['wcag2a', 'wcag211', 'wcag213'], // 2.1.3 is 2.1.1's AAA twin — same check satisfies both
   help: 'Scrollable regions must be reachable by keyboard',

package/engine/rules/wcag/2.2.1-meta-refresh.js

@@ -1,6 +1,7 @@
 // WCAG SC 2.2.1 Timing Adjustable (Level A)
 export default {
   id: 'meta-refresh',
+  name: 'Timed page refresh',
   impact: 'critical',
   tags: ['wcag2a', 'wcag221'],
   help: 'The page must not use a timed refresh',

package/engine/rules/wcag/2.2.2-pause-stop-hide.js

@@ -79,6 +79,7 @@ function endlesslyMoving(doc) {
 
 export default {
   id: 'pause-stop-hide',
+  name: 'Pausable moving content',
   impact: 'serious',
   tags: ['wcag2a', 'wcag222'],
   help: 'Moving content must be pausable',

package/engine/rules/wcag/2.2.2-video-loop-motion.js

@@ -15,6 +15,7 @@
 // abstaining, not clearing.
 export default {
   id: 'video-loop-motion',
+  name: 'Looping video control',
   impact: 'serious',
   tags: ['wcag2a', 'wcag222'],
   help: 'Looping autoplay video must be pausable',

package/engine/rules/wcag/2.4.1-bypass-blocks.js

@@ -3,6 +3,7 @@ import { collectRoots, isEmbeddedDocument } from '../../lib/dom.js';
 
 export default {
   id: 'bypass-blocks',
+  name: 'Skip to content',
   impact: 'serious',
   tags: ['wcag2a', 'wcag241'],
   help: 'The page must offer a way to skip repeated blocks',

package/engine/rules/wcag/2.4.11-focus-not-obscured.js

@@ -31,6 +31,7 @@ function edgeReserved(doc, edge, needed) {
 
 export default {
   id: 'focus-not-obscured',
+  name: 'Unobscured focus',
   impact: 'serious',
   tags: ['wcag22aa', 'wcag2411'],
   help: 'Focused elements must not be fully hidden behind overlays',

package/engine/rules/wcag/2.4.2-document-title.js

@@ -32,6 +32,7 @@ const UNDESCRIPTIVE = new Set([
 
 export default {
   id: 'document-title',
+  name: 'Page title',
   impact: 'serious',
   tags: ['wcag2a', 'wcag242'],
   help: 'The page must have a title that describes its topic or purpose',

package/engine/rules/wcag/2.4.3-visual-order-divergence.js

@@ -48,6 +48,7 @@ function visualSequence(entries, rightToLeft) {
 
 export default {
   id: 'visual-order-divergence',
+  name: 'Focus order vs visual order',
   impact: 'moderate',
   tags: ['wcag2a', 'wcag243'],
   help: 'CSS reordering should not make Tab jump against the visual order',

package/engine/rules/wcag/2.4.4-link-name.js

@@ -1,6 +1,7 @@
 // WCAG SC 2.4.4 Link Purpose (In Context) (Level A) · SC 4.1.2 Name, Role, Value (Level A)
 export default {
   id: 'link-name',
+  name: 'Link names',
   impact: 'serious',
   tags: ['wcag2a', 'wcag244', 'wcag412'],
   help: 'Links must have an accessible name',

package/engine/rules/wcag/2.4.4-link-text-generic.js

@@ -78,6 +78,7 @@ export function createLinkPurposeRule({ id, impact, tags, help, helpUrl, verdict
 
 export default createLinkPurposeRule({
   id: 'link-text-generic',
+  name: 'Generic link text',
   impact: 'moderate',
   tags: ['wcag2a', 'wcag244'],
   help: 'Link text should describe where the link goes',

package/engine/rules/wcag/2.4.7-focus-visible.js

@@ -52,6 +52,7 @@ function focusSuppressors(doc) {
 
 export default {
   id: 'focus-visible',
+  name: 'Visible focus',
   impact: 'serious',
   tags: ['wcag2aa', 'wcag247'],
   help: 'Keyboard focus must remain visible',

package/engine/rules/wcag/2.4.9-link-text-generic-only.js

@@ -14,6 +14,7 @@ import { createLinkPurposeRule } from './2.4.4-link-text-generic.js';
 
 export default createLinkPurposeRule({
   id: 'link-text-generic-only',
+  name: 'Self-sufficient link text',
   impact: 'moderate',
   tags: ['wcag2aaa', 'wcag249'],
   help: 'Link text alone must identify where the link goes (AAA)',

package/engine/rules/wcag/2.5.3-label-in-name.js

@@ -71,6 +71,7 @@ function visibleText(nodes) {
 
 export default {
   id: 'label-in-name',
+  name: 'Label in accessible name',
   impact: 'serious',
   tags: ['wcag21a', 'wcag253'],
   help: 'The visible label must be part of the accessible name',

package/engine/rules/wcag/2.5.5-target-size-enhanced.js

@@ -6,6 +6,7 @@ import { createTargetSizeRule } from './2.5.8-target-size.js';
 
 export default createTargetSizeRule({
   id: 'target-size-enhanced',
+  name: 'Enhanced target size',
   tags: ['wcag2aaa', 'wcag255'],
   help: 'Interactive targets must be at least 44×44 pixels (AAA)',
   helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/target-size-enhanced.html',

package/engine/rules/wcag/2.5.8-target-size.js

@@ -467,6 +467,7 @@ export function createTargetSizeRule({ id, tags, help, helpUrl, min, spacingExce
 
 export default createTargetSizeRule({
   id: 'target-size',
+  name: 'Target size',
   tags: ['wcag22aa', 'wcag258'],
   help: 'Interactive targets must be at least 24×24 pixels',
   helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/target-size-minimum.html',

package/engine/rules/wcag/3.1.1-html-lang.js

@@ -12,6 +12,7 @@ const LANG_PATTERN = /^([a-zA-Z]{2,3}(-[a-zA-Z0-9]{1,8})*|[xXiI](-[a-zA-Z0-9]{1,
 
 export default {
   id: 'html-lang',
+  name: 'Page language',
   impact: 'serious',
   tags: ['wcag2a', 'wcag311'],
   help: 'The <html> element must declare a valid language',

package/engine/rules/wcag/3.1.2-valid-lang-parts.js

@@ -6,6 +6,7 @@ const LANG_PATTERN = /^([a-zA-Z]{2,3}(-[a-zA-Z0-9]{1,8})*|[xXiI](-[a-zA-Z0-9]{1,
 
 export default {
   id: 'valid-lang-parts',
+  name: 'Part language tags',
   impact: 'serious',
   tags: ['wcag2aa', 'wcag312'],
   help: 'lang attributes on page parts must be valid',

package/engine/rules/wcag/3.2.2-on-input-navigation.js

@@ -20,6 +20,7 @@ const NAVIGATES = /\blocation\s*(=|\.\s*(href|assign|replace|reload))|\.(submit|
 
 export default {
   id: 'on-input-navigation',
+  name: 'Unexpected context change',
   impact: 'serious',
   tags: ['wcag2a', 'wcag322', 'wcag321'],
   help: 'Changing or focusing a control must not unexpectedly change context',

package/engine/rules/wcag/3.3.1-error-message-linkage.js

@@ -25,6 +25,7 @@
 // value except false/undefined — "spelling" and "grammar" count.
 export default {
   id: 'error-message-linkage',
+  name: 'Error message linkage',
   impact: 'serious',
   tags: ['wcag2a', 'wcag331'],
   help: 'Fields marked invalid need their error described in text',

package/engine/rules/wcag/3.3.8-auth-field-obstruction.js

@@ -13,6 +13,7 @@
 // case worth asserting.
 export default {
   id: 'auth-field-obstruction',
+  name: 'Accessible login fields',
   impact: 'serious',
   tags: ['wcag22aa', 'wcag338'],
   help: 'Login fields must not block paste or password managers',

package/engine/rules/wcag/4.1.2-aria-allowed-attr.js

@@ -39,6 +39,7 @@ const HANDLED_ELSEWHERE = new Set(['label', 'labelledby']);
 
 export default {
   id: 'aria-allowed-attr',
+  name: 'Allowed ARIA attributes',
   impact: 'moderate',
   tags: ['wcag2a', 'wcag412'],
   help: 'ARIA attributes must be supported by the element’s role',

package/engine/rules/wcag/4.1.2-aria-attr-valid.js

@@ -24,6 +24,7 @@ const ENUMS = {
 
 export default {
   id: 'aria-attr-valid',
+  name: 'Valid ARIA values',
   impact: 'critical',
   tags: ['wcag2a', 'wcag412'],
   help: 'aria attributes must exist and have valid values',

package/engine/rules/wcag/4.1.2-aria-field-name.js

@@ -23,6 +23,7 @@ function authorName(element) {
 
 export default {
   id: 'aria-field-name',
+  name: 'ARIA field names',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'ARIA fields and value widgets must have an accessible name',

package/engine/rules/wcag/4.1.2-aria-hidden-focus.js

@@ -6,6 +6,7 @@ const FOCUSABLE = 'a[href], area[href], button, input, select, textarea, summary
 
 export default {
   id: 'aria-hidden-focus',
+  name: 'Focusable hidden content',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Nothing focusable may sit inside aria-hidden="true"',

package/engine/rules/wcag/4.1.2-aria-label-misuse.js

@@ -42,11 +42,16 @@ const NAME_FROM_CONTENT = 'a[href], button, summary, h1, h2, h3, h4, h5, h6, th,
 
 export default {
   id: 'aria-label-misuse',
+  name: 'aria-label placement',
   impact: 'moderate',
   tags: ['wcag2a', 'wcag412'],
-  help: 'aria-label on a plain container is prohibited by ARIA, so its announcement is not guaranteed',
+  help: 'aria-label or aria-labelledby on a plain container is prohibited by ARIA, so its announcement is not guaranteed',
   helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/name-role-value.html',
-  selector: 'div[aria-label]:not([role]):not([tabindex]), span[aria-label]:not([role]):not([tabindex]), p[aria-label]:not([role]):not([tabindex])',
+  // §5.2.8.6 prohibits BOTH naming attributes on generic — aria-labelledby
+  // pointing at perfectly real text is the same authoring error as an inline
+  // aria-label, and the more tempting one (a card labelled by its own title).
+  selector: 'div[aria-label]:not([role]):not([tabindex]), span[aria-label]:not([role]):not([tabindex]), p[aria-label]:not([role]):not([tabindex]),'
+    + ' div[aria-labelledby]:not([role]):not([tabindex]), span[aria-labelledby]:not([role]):not([tabindex]), p[aria-labelledby]:not([role]):not([tabindex])',
   evaluate(element) {
     // Inside a name-from-content ancestor the label is NOT ignored: accname
     // applies the whole algorithm to each descendant while building the
@@ -54,9 +59,20 @@ export default {
     // Chromium reports exactly that. Claiming it does nothing is false, and
     // the advised fix would delete the control's only name.
     if (element.closest(NAME_FROM_CONTENT)) return { status: 'pass' };
+    const label = element.getAttribute('aria-label');
+    const attempt = label !== null
+      ? `aria-label="${label}"`
+      : (() => {
+          const text = (element.getAttribute('aria-labelledby') ?? '').trim().split(/\s+/)
+            .map((id) => element.ownerDocument.getElementById(id)?.textContent?.trim())
+            .filter(Boolean).join(' ');
+          return text
+            ? `aria-labelledby (naming it "${text.slice(0, 80)}")`
+            : 'aria-labelledby (whose references resolve to no text)';
+        })();
     return {
       status: 'incomplete',
-      message: `aria-label="${element.getAttribute('aria-label')}" on a plain <${element.tagName.toLowerCase()}> is prohibited by ARIA: this element's role does not support naming, so although many browser and screen reader pairings announce the label today, that support is not guaranteed anywhere and can differ between assistive technologies. Where it is announced it replaces the element's visible text; where it is not, users get the visible text alone. Check both presentations read correctly, and that nothing here relies on the label being heard.`,
+      message: `${attempt} on a plain <${element.tagName.toLowerCase()}> is prohibited by ARIA: this element's role does not support naming, so although many browser and screen reader pairings announce the label today, that support is not guaranteed anywhere and can differ between assistive technologies. Where it is announced it replaces the element's visible text; where it is not, users get the visible text alone. Check both presentations read correctly, and that nothing here relies on the label being heard.`,
       fix: 'If this element must reliably announce something of its own, give it the role it is playing (a landmark, group, or widget role) so the name is legal and exposure is guaranteed — or move the spoken text into visible or visually-hidden real text. If the label is stray, remove it. Do not add a role solely to legalise the label.',
     };
   },

package/engine/rules/wcag/4.1.2-aria-valid-refs.js

@@ -107,6 +107,7 @@ function outcome({ missing, ambiguous }, probed, element, accessibleName) {
 
 export default {
   id: 'aria-valid-refs',
+  name: 'ARIA id references',
   // Moderate, not critical: with 4.1.1 Parsing retired in WCAG 2.2 these
   // are 4.1.2 name/state defects, and aria-controls in particular has weak
   // assistive-technology support — real, but rarely blocking.

package/engine/rules/wcag/4.1.2-button-name.js

@@ -1,6 +1,7 @@
 // WCAG SC 4.1.2 Name, Role, Value (Level A)
 export default {
   id: 'button-name',
+  name: 'Button names',
   impact: 'critical',
   tags: ['wcag2a', 'wcag412'],
   help: 'Buttons must have an accessible name',

package/engine/rules/wcag/4.1.2-composite-widget-name.js

@@ -10,6 +10,7 @@
 // where the binary, assertable failure lives.
 export default {
   id: 'composite-widget-name',
+  name: 'Widget item names',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Tabs, menu items, options and tree items need an accessible name',

package/engine/rules/wcag/4.1.2-dialog-name.js

@@ -8,6 +8,7 @@ import { labelledByName } from '../../lib/accessible-name.js';
 
 export default {
   id: 'dialog-name',
+  name: 'Dialog names',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Dialogs must have an accessible name',

package/engine/rules/wcag/4.1.2-frame-title.js

@@ -1,6 +1,7 @@
 // WCAG SC 4.1.2 Name, Role, Value (Level A)
 export default {
   id: 'frame-title',
+  name: 'Frame titles',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Frames must have a title describing their content',

package/engine/rules/wcag/4.1.2-label-for-valid.js

@@ -3,6 +3,7 @@ const LABELABLE = 'input, select, textarea, button, meter, output, progress';
 
 export default {
   id: 'label-for-valid',
+  name: 'Label target references',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'label[for] must reference a form control that exists',

package/engine/rules/wcag/4.1.2-nested-interactive.js

@@ -8,6 +8,7 @@ const INTERACTIVE =
 
 export default {
   id: 'nested-interactive',
+  name: 'Nested controls',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'A control must not contain another control',

package/engine/rules/wcag/4.1.2-role-required-aria.js

@@ -11,6 +11,7 @@ const REQUIRED = {
 
 export default {
   id: 'role-required-aria',
+  name: 'Required role states',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Some roles require a state attribute to work',

package/engine/rules/wcag/4.1.2-summary-name.js

@@ -11,6 +11,7 @@
 // label ("Details").
 export default {
   id: 'summary-name',
+  name: 'Disclosure names',
   impact: 'serious',
   tags: ['wcag2a', 'wcag412'],
   help: 'Disclosure controls (<summary>) need an accessible name',

package/engine/rules/wcag/4.1.2-valid-role.js

@@ -24,6 +24,7 @@ const VALID_ROLES = new Set([
 
 export default {
   id: 'valid-role',
+  name: 'Valid roles',
   impact: 'critical',
   tags: ['wcag2a', 'wcag412'],
   help: 'role attributes must use valid ARIA roles',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pour-engine",
-  "version": "1.29.0",
+  "version": "1.31.0",
   "description": "Accessibility (WCAG 2.2) audit engine written from the W3C specifications — runs entirely in the browser, no dependencies.",
   "type": "module",
   "main": "engine/index.js",