testaro 78.0.6 → 78.4.0

package/tests/pour.js

@@ -0,0 +1,242 @@
+"use strict";
+/*
+  © 2026 Jeff Witt.
+
+  Licensed under the MIT License. See LICENSE file at the project root or
+  https://opensource.org/license/mit/ for details.
+
+  SPDX-License-Identifier: MIT
+*/
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reporter = void 0;
+// IMPORTS
+const fs = __importStar(require("fs/promises"));
+const xPath_1 = require("../procs/xPath");
+const standard_1 = require("../procs/standard");
+/*
+  pour
+  Implements the Pour Engine (https://github.com/pourdev/pour-engine) WCAG 2.2 ruleset.
+  Compiled to pour.js by tsc (issue #73); edit this file, not the emitted one.
+
+  Pour ships as ES modules with no dist build, so a vendored IIFE bundle is expected at
+  ../pour/pour.min.js, exposing a `pourEngine` global with {run, name, version}. See
+  ../pour/README.md for the build command and the pinned upstream commit.
+
+  Instance policy (engine-candidacy-pipeline.md, Stage 1): `violations` become instances with
+  outcome `failed` at ordinalSeverity 2-3; `incomplete` become instances with outcome `cantTell`
+  at 0-1; `passes`, `inapplicable`, and `manualReview` are tallied in `data` only and never
+  become instances.
+*/
+// CONSTANTS
+// Severity weights within a certainty band, mirroring tests/axe.ts.
+const severityWeights = {
+    minor: 0,
+    moderate: 0,
+    serious: 1,
+    critical: 1
+};
+// FUNCTIONS
+// Performs and reports the Pour Engine tests.
+const reporter = async (page, report, actIndex) => {
+    // Get the nonce, if any.
+    const act = report.acts[actIndex];
+    const { jobData } = report;
+    const scriptNonce = (jobData && jobData.lastScriptNonce);
+    // Initialize the act report.
+    let data = {};
+    const result = {
+        nativeResult: {},
+        standardResult: {}
+    };
+    const standard = report.standard !== 'no';
+    // If standard results are to be reported:
+    if (standard) {
+        // Initialize the standard result.
+        result.standardResult = (0, standard_1.getStandardResult)();
+    }
+    // Get the vendored tool bundle.
+    let script;
+    try {
+        script = await fs.readFile(`${__dirname}/../pour/pour.min.js`, 'utf8');
+    }
+    catch (error) {
+        data.prevented = true;
+        data.error = 'ERROR: pour bundle missing (see pour/README.md for vendoring instructions)';
+        return { data, result };
+    }
+    // Perform the tests and populate the native result.
+    result.nativeResult = await page.evaluate(args => new Promise(async (resolve) => {
+        const { scriptNonce, script } = args;
+        // Detect page-CSP blocking of the injection (the violation event is
+        // dispatched as a task, so the check below waits a tick).
+        let cspBlocked = false;
+        document.addEventListener('securitypolicyviolation', event => {
+            if ((event.violatedDirective || '').startsWith('script-src')) {
+                cspBlocked = true;
+            }
+        });
+        // Add the tool script to the page.
+        const toolScript = document.createElement('script');
+        if (scriptNonce) {
+            toolScript.nonce = scriptNonce;
+            console.log(`Added nonce ${scriptNonce} to tool script`);
+        }
+        toolScript.textContent = script;
+        document.body.insertAdjacentElement('beforeend', toolScript);
+        // If the bundle failed to define its global:
+        if (typeof pourEngine === 'undefined' || typeof pourEngine.run !== 'function') {
+            // Let a pending securitypolicyviolation event fire before diagnosing.
+            await new Promise(tick => setTimeout(tick, 0));
+            // A CSP block is a per-page condition, not a browser fault — report it
+            // distinctly (wedge canaries must not match this message).
+            resolve({
+                prevented: true,
+                error: cspBlocked
+                    ? 'pour injection blocked by page CSP (script-src)'
+                    : `pourEngine global not defined (contentType ${document.contentType}, `
+                        + `scriptChars ${script.length}, readyState ${document.readyState})`
+            });
+            return;
+        }
+        try {
+            // Run the engine on the top document. An empty tag selection runs every
+            // rule (all WCAG levels incl. AAA, plus pour's best-practice extras) —
+            // matching the axe adapter's kitchen-sink default; testilo's taxonomy
+            // decides per rule what counts downstream.
+            const pourReport = await pourEngine.run(document, {});
+            // Normalizes one certainty bucket (axe-style rule entries) to flat per-element findings.
+            const flatten = (bucket) => (bucket || [])
+                .flatMap(entry => {
+                // Criterion tag (e.g. wcag143) → dotted criterion (1.4.3).
+                const criterionTag = (entry.tags || []).find(tag => /^wcag\d{3,4}$/.test(tag));
+                const digits = criterionTag ? criterionTag.slice(4) : '';
+                const wcag = digits ? `${digits[0]}.${digits[1]}.${digits.slice(2)}` : '';
+                return (entry.nodes || []).map(node => {
+                    const cssPath = Array.isArray(node.target) ? node.target[0] : '';
+                    let xPath = '';
+                    try {
+                        const element = cssPath && document.querySelector(cssPath);
+                        if (element && typeof window.getXPath === 'function') {
+                            xPath = window.getXPath(element) ?? '';
+                        }
+                    }
+                    catch (error) {
+                        // Unresolvable path: instance falls back to excerpt only.
+                    }
+                    return {
+                        ruleID: entry.id || '',
+                        what: (entry.help || '').replace(/\s+/g, ' ').trim(),
+                        wcag,
+                        severity: (entry.impact || 'moderate').toLowerCase(),
+                        html: (node.html || '').slice(0, 500),
+                        cssPath,
+                        xPath
+                    };
+                });
+            });
+            resolve({
+                engineVersion: pourReport.testEngine && pourReport.testEngine.version || '',
+                violations: flatten(pourReport.violations),
+                incomplete: flatten(pourReport.incomplete),
+                // Tallied only; never instances. Passes serialize no nodes upstream;
+                // nodeCount carries the per-rule passing-element total.
+                passRuleCount: (pourReport.passes || []).length,
+                passElementCount: (pourReport.passes || [])
+                    .reduce((total, entry) => total + (entry.nodeCount || 0), 0),
+                inapplicableRuleCount: (pourReport.inapplicable || []).length,
+                manualReviewCriterionCount: (pourReport.manualReview || []).length
+            });
+        }
+        catch (error) {
+            resolve({
+                prevented: true,
+                error: error.message
+            });
+        }
+        ;
+    }), {
+        scriptNonce,
+        script
+    });
+    const { nativeResult } = result;
+    // If the tool ran and rules were selected:
+    if (!nativeResult.prevented && act.rules) {
+        // Remove results of other rules.
+        const { rules } = act;
+        nativeResult.violations = (nativeResult.violations || [])
+            .filter(finding => rules.includes(finding.ruleID));
+        nativeResult.incomplete = (nativeResult.incomplete || [])
+            .filter(finding => rules.includes(finding.ruleID));
+    }
+    // If the tool was prevented from running:
+    if (nativeResult.prevented) {
+        data.prevented = true;
+        data.error = nativeResult.error;
+    }
+    // Otherwise, if a standard result is to be reported:
+    else if (standard) {
+        const { standardResult } = result;
+        // Record the tallied-only bucket sizes.
+        data.passRuleCount = nativeResult.passRuleCount;
+        data.passElementCount = nativeResult.passElementCount;
+        data.inapplicableRuleCount = nativeResult.inapplicableRuleCount;
+        data.manualReviewCriterionCount = nativeResult.manualReviewCriterionCount;
+        // For each certainty band:
+        const bands = [
+            [nativeResult.incomplete || [], 0, 'cantTell'],
+            [nativeResult.violations || [], 2, 'failed']
+        ];
+        bands.forEach(([findings, baseSeverity, outcome]) => {
+            // For each native-result finding:
+            findings.forEach(finding => {
+                // Add a standard-result instance.
+                const { ruleID, what, severity, xPath } = finding;
+                (0, standard_1.addInstance)(standardResult, {
+                    ruleID,
+                    what,
+                    ordinalSeverity: baseSeverity + (severityWeights[severity] ?? 0),
+                    outcome,
+                    catalogIndex: (0, xPath_1.getXPathCatalogIndex)(report, xPath)
+                });
+            });
+        });
+    }
+    return {
+        data,
+        result
+    };
+};
+exports.reporter = reporter;

package/tests/pour.ts

@@ -0,0 +1,273 @@
+/*
+  © 2026 Jeff Witt.
+
+  Licensed under the MIT License. See LICENSE file at the project root or
+  https://opensource.org/license/mit/ for details.
+
+  SPDX-License-Identifier: MIT
+*/
+
+// IMPORTS
+
+import * as fs from 'fs/promises';
+import type {Page} from 'playwright';
+import {getXPathCatalogIndex} from '../procs/xPath';
+import {getStandardResult, addInstance} from '../procs/standard';
+import type {Act, Outcome, Report, StandardResult} from '../types';
+
+// TYPES
+
+// The pour-act properties this reporter consumes.
+interface PourAct extends Act {
+  rules?: string[];
+}
+// A pour severity (axe-style impact).
+type PourSeverity = 'minor' | 'moderate' | 'serious' | 'critical';
+// One element finding, flattened from the engine's per-rule results.
+interface PourFinding {
+  ruleID: string;
+  what: string;
+  wcag: string;
+  severity: PourSeverity;
+  html: string;
+  cssPath: string;
+  xPath: string;
+}
+// The native result: flattened findings and tallies, or a prevention report.
+interface PourNativeResult {
+  engineVersion?: string;
+  violations?: PourFinding[];
+  incomplete?: PourFinding[];
+  passRuleCount?: number;
+  passElementCount?: number;
+  inapplicableRuleCount?: number;
+  manualReviewCriterionCount?: number;
+  prevented?: boolean;
+  error?: string;
+}
+// One per-rule entry of a pour result bucket (verified against pour-engine 1.37.0).
+interface PourRuleEntry {
+  id?: string;
+  help?: string;
+  impact?: string;
+  tags?: string[];
+  nodeCount?: number;
+  nodes?: {target?: string[]; html?: string}[];
+}
+// The pour report.
+interface PourReport {
+  testEngine?: {version?: string};
+  violations?: PourRuleEntry[];
+  incomplete?: PourRuleEntry[];
+  passes?: PourRuleEntry[];
+  inapplicable?: PourRuleEntry[];
+  manualReview?: unknown[];
+}
+
+/*
+  The pourEngine global that the vendored bundle defines in the page. Declared without a
+  value, so this declaration is erased at emit and the references inside the page.evaluate
+  callback remain bare page-global references.
+*/
+declare const pourEngine: {
+  run: (context: Document, options: Record<string, unknown>) => Promise<PourReport>;
+};
+
+/*
+  pour
+  Implements the Pour Engine (https://github.com/pourdev/pour-engine) WCAG 2.2 ruleset.
+  Compiled to pour.js by tsc (issue #73); edit this file, not the emitted one.
+
+  Pour ships as ES modules with no dist build, so a vendored IIFE bundle is expected at
+  ../pour/pour.min.js, exposing a `pourEngine` global with {run, name, version}. See
+  ../pour/README.md for the build command and the pinned upstream commit.
+
+  Instance policy (engine-candidacy-pipeline.md, Stage 1): `violations` become instances with
+  outcome `failed` at ordinalSeverity 2-3; `incomplete` become instances with outcome `cantTell`
+  at 0-1; `passes`, `inapplicable`, and `manualReview` are tallied in `data` only and never
+  become instances.
+*/
+
+// CONSTANTS
+
+// Severity weights within a certainty band, mirroring tests/axe.ts.
+const severityWeights: Record<PourSeverity, number> = {
+  minor: 0,
+  moderate: 0,
+  serious: 1,
+  critical: 1
+};
+
+// FUNCTIONS
+
+// Performs and reports the Pour Engine tests.
+export const reporter = async (page: Page, report: Report, actIndex: number) => {
+  // Get the nonce, if any.
+  const act = report.acts[actIndex] as PourAct;
+  const {jobData} = report;
+  const scriptNonce = (jobData && jobData.lastScriptNonce) as string | undefined;
+  // Initialize the act report.
+  let data: Record<string, unknown> = {};
+  const result: {nativeResult: PourNativeResult; standardResult: StandardResult} = {
+    nativeResult: {},
+    standardResult: {}
+  };
+  const standard = report.standard !== 'no';
+  // If standard results are to be reported:
+  if (standard) {
+    // Initialize the standard result.
+    result.standardResult = getStandardResult();
+  }
+  // Get the vendored tool bundle.
+  let script: string;
+  try {
+    script = await fs.readFile(`${__dirname}/../pour/pour.min.js`, 'utf8');
+  }
+  catch(error) {
+    data.prevented = true;
+    data.error = 'ERROR: pour bundle missing (see pour/README.md for vendoring instructions)';
+    return {data, result};
+  }
+  // Perform the tests and populate the native result.
+  result.nativeResult = await page.evaluate(args => new Promise<PourNativeResult>(
+    async resolve => {
+      const {scriptNonce, script} = args;
+      // Detect page-CSP blocking of the injection (the violation event is
+      // dispatched as a task, so the check below waits a tick).
+      let cspBlocked = false;
+      document.addEventListener('securitypolicyviolation', event => {
+        if ((event.violatedDirective || '').startsWith('script-src')) {
+          cspBlocked = true;
+        }
+      });
+      // Add the tool script to the page.
+      const toolScript = document.createElement('script');
+      if (scriptNonce) {
+        toolScript.nonce = scriptNonce;
+        console.log(`Added nonce ${scriptNonce} to tool script`);
+      }
+      toolScript.textContent = script;
+      document.body.insertAdjacentElement('beforeend', toolScript);
+      // If the bundle failed to define its global:
+      if (typeof pourEngine === 'undefined' || typeof pourEngine.run !== 'function') {
+        // Let a pending securitypolicyviolation event fire before diagnosing.
+        await new Promise(tick => setTimeout(tick, 0));
+        // A CSP block is a per-page condition, not a browser fault — report it
+        // distinctly (wedge canaries must not match this message).
+        resolve({
+          prevented: true,
+          error: cspBlocked
+            ? 'pour injection blocked by page CSP (script-src)'
+            : `pourEngine global not defined (contentType ${document.contentType}, `
+            + `scriptChars ${script.length}, readyState ${document.readyState})`
+        });
+        return;
+      }
+      try {
+        // Run the engine on the top document. An empty tag selection runs every
+        // rule (all WCAG levels incl. AAA, plus pour's best-practice extras) —
+        // matching the axe adapter's kitchen-sink default; testilo's taxonomy
+        // decides per rule what counts downstream.
+        const pourReport = await pourEngine.run(document, {});
+        // Normalizes one certainty bucket (axe-style rule entries) to flat per-element findings.
+        const flatten = (bucket: PourRuleEntry[] | undefined): PourFinding[] => (bucket || [])
+        .flatMap(entry => {
+          // Criterion tag (e.g. wcag143) → dotted criterion (1.4.3).
+          const criterionTag = (entry.tags || []).find(tag => /^wcag\d{3,4}$/.test(tag));
+          const digits = criterionTag ? criterionTag.slice(4) : '';
+          const wcag = digits ? `${digits[0]}.${digits[1]}.${digits.slice(2)}` : '';
+          return (entry.nodes || []).map(node => {
+            const cssPath = Array.isArray(node.target) ? node.target[0] : '';
+            let xPath = '';
+            try {
+              const element = cssPath && document.querySelector(cssPath);
+              if (element && typeof window.getXPath === 'function') {
+                xPath = window.getXPath(element) ?? '';
+              }
+            }
+            catch(error) {
+              // Unresolvable path: instance falls back to excerpt only.
+            }
+            return {
+              ruleID: entry.id || '',
+              what: (entry.help || '').replace(/\s+/g, ' ').trim(),
+              wcag,
+              severity: (entry.impact || 'moderate').toLowerCase() as PourSeverity,
+              html: (node.html || '').slice(0, 500),
+              cssPath,
+              xPath
+            };
+          });
+        });
+        resolve({
+          engineVersion: pourReport.testEngine && pourReport.testEngine.version || '',
+          violations: flatten(pourReport.violations),
+          incomplete: flatten(pourReport.incomplete),
+          // Tallied only; never instances. Passes serialize no nodes upstream;
+          // nodeCount carries the per-rule passing-element total.
+          passRuleCount: (pourReport.passes || []).length,
+          passElementCount: (pourReport.passes || [])
+          .reduce((total, entry) => total + (entry.nodeCount || 0), 0),
+          inapplicableRuleCount: (pourReport.inapplicable || []).length,
+          manualReviewCriterionCount: (pourReport.manualReview || []).length
+        });
+      }
+      catch(error) {
+        resolve({
+          prevented: true,
+          error: (error as Error).message
+        });
+      };
+    }
+  ), {
+    scriptNonce,
+    script
+  });
+  const {nativeResult} = result;
+  // If the tool ran and rules were selected:
+  if (! nativeResult.prevented && act.rules) {
+    // Remove results of other rules.
+    const {rules} = act;
+    nativeResult.violations = (nativeResult.violations || [])
+    .filter(finding => rules.includes(finding.ruleID));
+    nativeResult.incomplete = (nativeResult.incomplete || [])
+    .filter(finding => rules.includes(finding.ruleID));
+  }
+  // If the tool was prevented from running:
+  if (nativeResult.prevented) {
+    data.prevented = true;
+    data.error = nativeResult.error;
+  }
+  // Otherwise, if a standard result is to be reported:
+  else if (standard) {
+    const {standardResult} = result;
+    // Record the tallied-only bucket sizes.
+    data.passRuleCount = nativeResult.passRuleCount;
+    data.passElementCount = nativeResult.passElementCount;
+    data.inapplicableRuleCount = nativeResult.inapplicableRuleCount;
+    data.manualReviewCriterionCount = nativeResult.manualReviewCriterionCount;
+    // For each certainty band:
+    const bands: [PourFinding[], number, Outcome][] = [
+      [nativeResult.incomplete || [], 0, 'cantTell'],
+      [nativeResult.violations || [], 2, 'failed']
+    ];
+    bands.forEach(([findings, baseSeverity, outcome]) => {
+      // For each native-result finding:
+      findings.forEach(finding => {
+        // Add a standard-result instance.
+        const {ruleID, what, severity, xPath} = finding;
+        addInstance(standardResult, {
+          ruleID,
+          what,
+          ordinalSeverity: baseSeverity + (severityWeights[severity] ?? 0),
+          outcome,
+          catalogIndex: getXPathCatalogIndex(report, xPath)
+        });
+      });
+    });
+  }
+  return {
+    data,
+    result
+  };
+};

package/tests/qualWeb.d.ts

@@ -0,0 +1,39 @@
+import type { Page } from 'playwright';
+import type { Report, StandardResult } from '../types';
+interface QwElement {
+    htmlCode?: string;
+}
+interface QwRaResult {
+    verdict: string;
+    description?: string;
+    elements?: QwElement[];
+}
+interface QwRuleAssertions {
+    metadata?: {
+        warning?: number;
+        failed?: number;
+    };
+    results: QwRaResult[];
+}
+interface QwModuleReport {
+    assertions?: Record<string, QwRuleAssertions>;
+}
+interface QwNativeResult {
+    system?: {
+        page?: {
+            dom?: unknown;
+        };
+    };
+    modules?: Record<string, QwModuleReport>;
+}
+export declare const reporter: (page: Page, report: Report, actIndex: number, timeLimit: number) => Promise<{
+    data: {
+        prevented?: boolean;
+        error?: string;
+    };
+    result: {
+        nativeResult: QwNativeResult;
+        standardResult: StandardResult;
+    };
+}>;
+export {};