ultra11y 4.0.0 → 4.0.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "4.0.0",
+      "version": "4.0.1",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "4.0.0";
+const ULTRA11Y_PLUGIN_VERSION = "4.0.1";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.0.0";
+var VERSION = "4.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -56453,13 +56453,15 @@ function auditCollected(root, payload) {
   const v = validateSnapshotMeta(payload.meta);
   if (!v.ok || !v.meta) return { ok: false, error: v.issues.map((i2) => `${i2.path}: ${i2.message}`).join("; ") };
   if (typeof payload.dom !== "string" || !payload.dom.trim()) return { ok: false, error: "dom is required" };
+  const shot = typeof payload.screenshot === "string" && payload.screenshot.trim() ? payload.screenshot : void 0;
   const dir = writeSnapshot(root, {
     meta: v.meta,
     dom: payload.dom,
     ...payload.styles ? { styles: payload.styles } : {},
     ...payload.boxes ? { boxes: payload.boxes } : {},
     ...payload.axtree ? { axtree: payload.axtree } : {},
-    ...payload.css ? { css: payload.css } : {}
+    ...payload.css ? { css: payload.css } : {},
+    ...shot ? { screenshotBase64: shot } : {}
   });
   return { ok: true, result: runAudit({ inputs: [join40(dir, "dom.html")] }) };
 }

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 4.0.0
+  version: 4.0.1
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.0.0";
+var VERSION = "4.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -56453,13 +56453,15 @@ function auditCollected(root, payload) {
   const v = validateSnapshotMeta(payload.meta);
   if (!v.ok || !v.meta) return { ok: false, error: v.issues.map((i2) => `${i2.path}: ${i2.message}`).join("; ") };
   if (typeof payload.dom !== "string" || !payload.dom.trim()) return { ok: false, error: "dom is required" };
+  const shot = typeof payload.screenshot === "string" && payload.screenshot.trim() ? payload.screenshot : void 0;
   const dir = writeSnapshot(root, {
     meta: v.meta,
     dom: payload.dom,
     ...payload.styles ? { styles: payload.styles } : {},
     ...payload.boxes ? { boxes: payload.boxes } : {},
     ...payload.axtree ? { axtree: payload.axtree } : {},
-    ...payload.css ? { css: payload.css } : {}
+    ...payload.css ? { css: payload.css } : {},
+    ...shot ? { screenshotBase64: shot } : {}
   });
   return { ok: true, result: runAudit({ inputs: [join40(dir, "dom.html")] }) };
 }

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 4.0.0
+  version: 4.0.1
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join45, relative as relative5, sep as sep7, dirname as dirname1
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "4.0.0";
+var VERSION = "4.0.1";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -56453,13 +56453,15 @@ function auditCollected(root, payload) {
   const v = validateSnapshotMeta(payload.meta);
   if (!v.ok || !v.meta) return { ok: false, error: v.issues.map((i2) => `${i2.path}: ${i2.message}`).join("; ") };
   if (typeof payload.dom !== "string" || !payload.dom.trim()) return { ok: false, error: "dom is required" };
+  const shot = typeof payload.screenshot === "string" && payload.screenshot.trim() ? payload.screenshot : void 0;
   const dir = writeSnapshot(root, {
     meta: v.meta,
     dom: payload.dom,
     ...payload.styles ? { styles: payload.styles } : {},
     ...payload.boxes ? { boxes: payload.boxes } : {},
     ...payload.axtree ? { axtree: payload.axtree } : {},
-    ...payload.css ? { css: payload.css } : {}
+    ...payload.css ? { css: payload.css } : {},
+    ...shot ? { screenshotBase64: shot } : {}
   });
   return { ok: true, result: runAudit({ inputs: [join40(dir, "dom.html")] }) };
 }

package/src/dev.ts

@@ -336,11 +336,18 @@ async function readBody(req: IncomingMessage, limit = 64 * 1024 * 1024): Promise
 /** Audit one collected page: persist it as a snapshot, then run the engine over its DOM. */
 export function auditCollected(
   root: string,
-  payload: { meta?: unknown; dom?: unknown; styles?: StyleDigest; boxes?: BoxDigest; axtree?: AxNode; css?: CssDigest },
+  payload: { meta?: unknown; dom?: unknown; styles?: StyleDigest; boxes?: BoxDigest; axtree?: AxNode; css?: CssDigest; screenshot?: unknown },
 ): { ok: true; result: AuditResult } | { ok: false; error: string } {
   const v = validateSnapshotMeta(payload.meta);
   if (!v.ok || !v.meta) return { ok: false, error: v.issues.map((i) => `${i.path}: ${i.message}`).join("; ") };
   if (typeof payload.dom !== "string" || !payload.dom.trim()) return { ok: false, error: "dom is required" };
+  // The browser extension DOES capture a viewport screenshot and posts it here
+  // (extension/background.js). It used to be dropped on the floor: this signature had no
+  // `screenshot`, so `screen.png` was never written for an extension-collected page and the
+  // pixel tier — the only tier that can answer contrast over a gradient or an image — silently
+  // declined on every one of them. Typed `unknown` and checked, because a producer is
+  // untrusted input like any other field here.
+  const shot = typeof payload.screenshot === "string" && payload.screenshot.trim() ? payload.screenshot : undefined;
   const dir = writeSnapshot(root, {
     meta: v.meta,
     dom: payload.dom,
@@ -348,6 +355,7 @@ export function auditCollected(
     ...(payload.boxes ? { boxes: payload.boxes } : {}),
     ...(payload.axtree ? { axtree: payload.axtree } : {}),
     ...(payload.css ? { css: payload.css } : {}),
+    ...(shot ? { screenshotBase64: shot } : {}),
   });
   return { ok: true, result: runAudit({ inputs: [join(dir, "dom.html")] }) };
 }

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "4.0.0";
+export const VERSION = "4.0.1";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,