pour-engine 1.4.0 → 1.5.0

package/config/project.config.js

@@ -6,6 +6,6 @@
 export default {
   engine: {
     name: 'pour engine',
-    version: '1.4.0',
+    version: '1.5.0',
   },
 };

package/engine/COVERAGE.md

@@ -62,12 +62,12 @@ meaning that only a person can settle, even where a rule decides most real pages
 | 2.4.1 | [Bypass Blocks](https://www.w3.org/WAI/WCAG22/Understanding/bypass-blocks.html) | A | Partially automated | bypass-blocks |
 | 2.4.2 | [Page Titled](https://www.w3.org/WAI/WCAG22/Understanding/page-titled.html) | A | Partially automated | document-title |
 | 2.4.3 | [Focus Order](https://www.w3.org/WAI/WCAG22/Understanding/focus-order.html) | A | Manual review | — |
-| 2.4.4 | [Link Purpose (In Context)](https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-in-context.html) | A | Partially automated | area-alt, link-name |
+| 2.4.4 | [Link Purpose (In Context)](https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-in-context.html) | A | Partially automated | area-alt, link-name, link-text-generic |
 | 2.4.5 | [Multiple Ways](https://www.w3.org/WAI/WCAG22/Understanding/multiple-ways.html) | AA | Manual review | — |
 | 2.4.6 | [Headings and Labels](https://www.w3.org/WAI/WCAG22/Understanding/headings-and-labels.html) | AA | Manual review | — |
 | 2.4.7 | [Focus Visible](https://www.w3.org/WAI/WCAG22/Understanding/focus-visible.html) | AA | Partially automated | focus-visible |
 | 2.4.8 | [Location](https://www.w3.org/WAI/WCAG22/Understanding/location.html) | AAA | Manual review | — |
-| 2.4.9 | [Link Purpose (Link Only)](https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-link-only.html) | AAA | Manual review | — |
+| 2.4.9 | [Link Purpose (Link Only)](https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-link-only.html) | AAA | Partially automated | link-text-generic-only |
 | 2.4.10 | [Section Headings](https://www.w3.org/WAI/WCAG22/Understanding/section-headings.html) | AAA | Manual review | — |
 | 2.4.11 | [Focus Not Obscured (Minimum)](https://www.w3.org/WAI/WCAG22/Understanding/focus-not-obscured-minimum.html) | AA | Partially automated | focus-not-obscured |
 | 2.4.12 | [Focus Not Obscured (Enhanced)](https://www.w3.org/WAI/WCAG22/Understanding/focus-not-obscured-enhanced.html) | AAA | Manual review | — |
@@ -114,4 +114,4 @@ meaning that only a person can settle, even where a rule decides most real pages
 | 4.1.2 | [Name, Role, Value](https://www.w3.org/WAI/WCAG22/Understanding/name-role-value.html) | A | Partially automated | input-image-alt, form-label, link-name, aria-allowed-attr, aria-attr-valid, aria-field-name, aria-hidden-focus, aria-valid-refs, button-name, dialog-name, frame-title, label-for-valid, nested-interactive, role-required-aria, valid-role |
 | 4.1.3 | [Status Messages](https://www.w3.org/WAI/WCAG22/Understanding/status-messages.html) | AA | Manual review | — |
 
-**Totals:** 29 partially automated · 57 manual — with 72 rules.
+**Totals:** 30 partially automated · 56 manual — with 74 rules.

package/engine/rules/index.js

@@ -15,6 +15,8 @@ import imageAlt from './wcag/1.1.1-image-alt.js';
 import svgImgAlt from './wcag/1.1.1-svg-img-alt.js';
 import buttonName from './wcag/4.1.2-button-name.js';
 import linkName from './wcag/2.4.4-link-name.js';
+import linkTextGeneric from './wcag/2.4.4-link-text-generic.js';
+import linkTextGenericOnly from './wcag/2.4.9-link-text-generic-only.js';
 // Re-parked by product decision (2026-08-01, David, after a one-day
 // un-parking): 2.5.3 is normative Level A but chiefly serves speech-input
 // users, and the findings volume isn't wanted in results for now. The SC is
@@ -113,6 +115,8 @@ export default [
   svgImgAlt,
   buttonName,
   linkName,
+  linkTextGeneric,
+  linkTextGenericOnly,
   // labelInName, — re-parked 2026-08-01, see note at the import
   formLabel,
   autocompleteValid,

package/engine/rules/wcag/2.4.4-link-text-generic.js

@@ -0,0 +1,80 @@
+// WCAG SC 2.4.4 Link Purpose (In Context) (Level A)
+//     · SC 2.4.9 Link Purpose (Link Only) (Level AAA)
+//
+// A link named "Read more" carries no purpose in its name. Screen reader
+// users routinely pull up a list of every link on a page and navigate from
+// it, and nine identical "Read more" entries in that list are worthless —
+// the technique WCAG names for this is F63, and G91 is the fix.
+//
+// The two criteria differ in exactly one way, and it decides the verdict:
+//
+//   2.4.4 (A)   purpose may come from CONTEXT — the sentence around the
+//               link, its list item, its table cell, the heading of the card
+//               it sits in. A "Read more" under a headline naming the
+//               article is a judgment call about whether that context really
+//               reaches the user, so this REVIEWS. It never asserts.
+//   2.4.9 (AAA) purpose must come from the link text ALONE, with the only
+//               exception being links whose purpose "would be ambiguous to
+//               users in general". A link named nothing but "Read more" is
+//               ambiguous to everyone, which is the exception failing to
+//               apply rather than saving it, so this FAILS.
+//
+// Judged on the ACCESSIBLE NAME, not the text content: a link written as
+// <a href="…" aria-label="Read more about the budget">Read more</a> is
+// already fixed, and must not be flagged. That also means an aria-label
+// which is itself generic is caught, which is the more common mistake.
+//
+// English only, deliberately. A phrase list cannot be quietly extended to
+// other languages without a speaker of each checking it, and a wrong entry
+// would fail correct links. Non-English pages get no findings here rather
+// than bad ones.
+
+const GENERIC = new Set([
+  'read more', 'read more about this', 'more', 'much more', 'learn more',
+  'click here', 'click', 'click this', 'tap here', 'press here',
+  'here', 'this', 'this link', 'link', 'this page', 'go', 'go here',
+  'more info', 'more information', 'further information',
+  'see more', 'view more', 'show more', 'find out more', 'discover more',
+  'continue', 'continue reading', 'keep reading', 'full story', 'full article',
+  'details', 'see details', 'view details', 'more details',
+]);
+
+/** Lowercased, punctuation and arrows dropped, spaces collapsed, so
+ *  "Read more →", "Click here!" and "READ  MORE" all compare equal. */
+export function normalizeName(name) {
+  return name.toLowerCase().replace(/[^\p{L}\p{N}]+/gu, ' ').replace(/\s+/g, ' ').trim();
+}
+
+export function createLinkPurposeRule({ id, impact, tags, help, helpUrl, verdict }) {
+  return {
+    id,
+    impact,
+    tags,
+    help,
+    helpUrl,
+    // role="link" claims the link role explicitly; an <a> without href has no
+    // link role at all and is correctly out of scope. Links with NO name are
+    // link-name's finding, not this one.
+    selector: 'a[href], [role="link"]',
+    evaluate(element, { accessibleName }) {
+      const name = accessibleName(element);
+      if (!name) return { status: 'pass' }; // nameless: link-name reports it
+      const normalized = normalizeName(name);
+      if (!GENERIC.has(normalized)) return { status: 'pass' };
+      return verdict(name);
+    },
+  };
+}
+
+export default createLinkPurposeRule({
+  id: 'link-text-generic',
+  impact: 'moderate',
+  tags: ['wcag2a', 'wcag244'],
+  help: 'Link text should describe where the link goes',
+  helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-in-context.html',
+  verdict: (name) => ({
+    status: 'incomplete',
+    message: `“${name}” does not say where this link goes. 2.4.4 lets the surrounding text supply that, so this passes only if the context a screen reader reaches — the same sentence, list item, table cell, or the heading of the card it sits in — makes the destination obvious. Check it does, and remember that anyone navigating by a list of the page's links sees this name on its own.`,
+    fix: 'Put the destination in the link text itself, e.g. "Read more about the 2026 budget", or extend the name with aria-label while keeping the visible words at the start of it.',
+  }),
+});

package/engine/rules/wcag/2.4.9-link-text-generic-only.js

@@ -0,0 +1,26 @@
+// WCAG SC 2.4.9 Link Purpose (Link Only) (Level AAA)
+//
+// Same phrase list and same name computation as 2.4.4's rule, at the AAA
+// threshold: the link text ALONE has to identify the purpose, and context
+// is not allowed to make up the difference.
+//
+// This one asserts where the AA rule reviews. The criterion's only escape is
+// links "where the purpose of the link would be ambiguous to users in
+// general", and a link named nothing but "Read more" is ambiguous to
+// everyone — which is the exception failing to apply rather than rescuing
+// it. Nothing about the surrounding page can change that reading, so there
+// is nothing here for a human to settle.
+import { createLinkPurposeRule } from './2.4.4-link-text-generic.js';
+
+export default createLinkPurposeRule({
+  id: 'link-text-generic-only',
+  impact: 'moderate',
+  tags: ['wcag2aaa', 'wcag249'],
+  help: 'Link text alone must identify where the link goes (AAA)',
+  helpUrl: 'https://www.w3.org/WAI/WCAG22/Understanding/link-purpose-link-only.html',
+  verdict: (name) => ({
+    status: 'fail',
+    message: `“${name}” gives no purpose on its own. 2.4.9 asks that the link text alone identify where a link goes, without relying on the sentence or heading around it, so anyone reading the page's links as a list can tell them apart.`,
+    fix: 'Name the destination in the link text, e.g. "Read more about the 2026 budget".',
+  }),
+});

package/engine/wcag22.js

@@ -75,7 +75,7 @@ export default [
   sc('2.4.6', 'Headings and Labels', 'AA', 'manual'),
   sc('2.4.7', 'Focus Visible', 'AA', 'partial'), // partial: focus-visible flags outline suppression; the indicator itself needs eyes
   sc('2.4.8', 'Location', 'AAA', 'manual'),
-  sc('2.4.9', 'Link Purpose (Link Only)', 'AAA', 'manual'),
+  sc('2.4.9', 'Link Purpose (Link Only)', 'AAA', 'partial'), // partial: contentless link names are provable; whether a real name describes its destination needs a reader
   sc('2.4.10', 'Section Headings', 'AAA', 'manual'),
   sc('2.4.11', 'Focus Not Obscured (Minimum)', 'AA', 'partial', '2.2'), // partial: focus-not-obscured catches fully-covered targets at rest
   sc('2.4.12', 'Focus Not Obscured (Enhanced)', 'AAA', 'manual', '2.2'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pour-engine",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "Accessibility (WCAG 2.2) audit engine written from the W3C specifications — runs entirely in the browser, no dependencies.",
   "type": "module",
   "main": "engine/index.js",