ultra11y 5.13.1 → 5.14.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.13.1",
+      "version": "5.14.1",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.13.1",
+  "version": "5.14.1",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.13.1",
+  "version": "5.14.1",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.13.1";
+const ULTRA11Y_PLUGIN_VERSION = "5.14.1";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/dist/playwright.mjs

@@ -595,14 +595,20 @@ async function runAxe(page, mode) {
   if (mode === false) return void 0;
   const demanded = mode === true;
   let AxeBuilder;
-  try {
-    const req = createRequire2(join(process.cwd(), "package.json"));
-    const mod = req("@axe-core/playwright");
-    AxeBuilder = mod.default ?? mod;
-  } catch (e) {
+  let lastError;
+  for (const from of [join(process.cwd(), "package.json"), import.meta.url]) {
+    try {
+      const mod = createRequire2(from)("@axe-core/playwright");
+      AxeBuilder = mod.default ?? mod;
+      break;
+    } catch (e) {
+      lastError = e;
+    }
+  }
+  if (!AxeBuilder) {
     if (demanded) {
       console.warn(
-        `ultra11y: axe was requested but @axe-core/playwright could not be resolved from ${process.cwd()} \u2014 ${e instanceof Error ? e.message : String(e)}. Install it, or set \`axe: false\`. The criteria axe decides stay to assess.`
+        `ultra11y: axe was requested but @axe-core/playwright could not be resolved from ${process.cwd()} nor from this package \u2014 ${lastError instanceof Error ? lastError.message : String(lastError)}. Install it, or set \`axe: false\`. The criteria axe decides stay to assess.`
       );
     }
     return void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.13.1",
+  "version": "5.14.1",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",
@@ -48,6 +48,7 @@
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:perf": "vitest run --config vitest.perf.config.ts",
+    "test:browser": "vitest run --config vitest.browser.config.ts",
     "bench": "node scripts/bench.mjs",
     "typecheck": "tsc --noEmit",
     "lint": "biome ci .",
@@ -81,7 +82,9 @@
     "htmlparser2": "^12.0.0"
   },
   "devDependencies": {
+    "@axe-core/playwright": "^4.13.0",
     "@biomejs/biome": "^2.5.1",
+    "@playwright/test": "^1.62.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.13.1";
+var VERSION = "5.14.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -56439,7 +56439,7 @@ function renderCriteriaReference() {
 }
 
 // src/check.ts
-import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync18, readdirSync as readdirSync5 } from "fs";
 import { dirname as dirname9, join as join34 } from "path";
 
 // src/verify.ts
@@ -56860,6 +56860,33 @@ function sectionBody(md, n) {
   const next = /^##\s+/m.exec(md.slice(from));
   return next ? md.slice(from, from + next.index) : md.slice(from);
 }
+function checkSampleCaptured(root = ".", lang = "en") {
+  const fr = lang === "fr";
+  let declared = [];
+  try {
+    const cfg = JSON.parse(readFileSync18(join34(root, ".ultra11yrc.json"), "utf8"));
+    declared = cfg.sample?.pages ?? [];
+  } catch {
+    return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  }
+  if (!declared.length) return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  let captured = /* @__PURE__ */ new Set();
+  try {
+    captured = new Set(
+      readdirSync5(join34(root, PAGES_DIR), { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).filter((id) => existsSync20(join34(root, PAGES_DIR, id, "dom.html")))
+    );
+  } catch {
+  }
+  const missing = declared.filter((p) => !captured.has(p.id)).map((p) => ({ id: p.id, name: p.name ?? p.id, url: p.url ?? "" }));
+  const issues = [];
+  if (missing.length) {
+    const kept = declared.length - missing.length;
+    issues.push(
+      fr ? `${kept}/${declared.length} page(s) d\xE9clar\xE9e(s) ont \xE9t\xE9 captur\xE9es. Aucune capture pour : ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. Une page d\xE9clar\xE9e sans capture n'est pas une page conforme, c'est une page que personne n'a regard\xE9e.` : `${kept}/${declared.length} declared page(s) were captured. No capture for: ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. A declared page with no capture is not a page that passed \u2014 it is a page nobody looked at.`
+    );
+  }
+  return { ok: issues.length === 0, issues, missing, declared: declared.length, captured: captured.size };
+}
 function byCriterionId(a, b) {
   const pa = a.split(".").map(Number);
   const pb = b.split(".").map(Number);
@@ -58740,7 +58767,7 @@ function applyRawVerdicts(items, verdicts) {
 
 // src/scan.ts
 import { execFileSync as execFileSync6 } from "child_process";
-import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync5, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
+import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync6, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join37, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -59064,7 +59091,7 @@ function buildImage(tag = IMAGE_TAG) {
 function cleanTempContexts() {
   let removed = 0;
   const dir = tmpdir2();
-  for (const name2 of readdirSync5(dir)) {
+  for (const name2 of readdirSync6(dir)) {
     if (!name2.startsWith(CTX_PREFIX)) continue;
     rmSync3(join37(dir, name2), { recursive: true, force: true });
     removed++;
@@ -59667,7 +59694,9 @@ function localAvailable(cwd) {
     const req = createRequire(resolve12(cwd, "package.json"));
     req.resolve(PW_SPEC);
     req.resolve(AXE_SPEC);
-    return true;
+    const pw = req(PW_SPEC);
+    const bin = pw.chromium?.executablePath?.();
+    return typeof bin !== "string" || bin.length === 0 ? true : existsSync24(bin);
   } catch {
     return false;
   }
@@ -65563,7 +65592,7 @@ function str3(v) {
 var DECLARED = new Set([...TOOLS2, ...WRITE_TOOLS].map((t3) => t3.name));
 
 // src/mcp/resources.ts
-import { existsSync as existsSync34, readdirSync as readdirSync6, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync7, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
 import { basename as basename3, dirname as dirname14, join as join50, resolve as resolve15, sep as sep6 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var SKILL_NAME = "ultra11y";
@@ -65579,7 +65608,7 @@ function listResources(moduleDir) {
   const out2 = [describe(root, "SKILL.md", `${SKILL_NAME}: the skill`)];
   const refDir = join50(root, "references");
   if (!existsSync34(refDir)) return out2;
-  for (const file of readdirSync6(refDir).sort()) {
+  for (const file of readdirSync7(refDir).sort()) {
     if (!file.endsWith(".md")) continue;
     out2.push(describe(root, join50("references", file), `${SKILL_NAME} reference: ${basename3(file, ".md")}`));
   }
@@ -66457,6 +66486,10 @@ Options:
                      dropped as stale and its criterion says so
   --max-verify <n>   verify: cap the worklist size; 0 = no cap           (default: 40)
   --verdicts <file>  check --semantic: the adjudicated verdicts artifact
+  --require-sample   check: fail while a page DECLARED in .ultra11yrc.json has no capture under
+                     .ultra11y/pages/. Coverage, one level below --require-decided: a sweep that
+                     loses pages produces a report that is merely SHORTER, and a shorter
+                     deliverable reads exactly like a complete one.
   --require-decided  check: fail while ANY criterion of the standard is still \xAB to assess \xBB.
                      Needs --in. A green job does not otherwise mean the grid was filled:
                      --fail-on governs non-conformities, and an adjudication that lands
@@ -66683,6 +66716,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "semantic",
   // `check`: fail while any criterion of the standard is still « to assess ».
   "require-decided",
+  "require-sample",
   "manual",
   // `verify --apply` / `judge --apply`: restore the all-or-nothing fold, where one refused
   // verdict discards the whole adjudication. The default is per-verdict.
@@ -68059,9 +68093,10 @@ function cmdCheck(p) {
   const standard = stdOf(p, "check");
   if (standard === null) return 2;
   const requireDecided = p.flags["require-decided"] === true;
+  const requireSample = p.flags["require-sample"] === true;
   const rep = p.flags.report;
   if (typeof rep !== "string" || !rep) {
-    if (!requireDecided) {
+    if (!requireDecided && !requireSample) {
       console.error("ultra11y check: --report <md> is required.");
       return 2;
     }
@@ -68106,6 +68141,7 @@ function cmdCheck(p) {
     }
   }
   const decided = requireDecided && audit2 ? checkDecided(audit2, standard, lang, { allow }) : null;
+  const covered = requireSample ? checkSampleCaptured(".", lang) : null;
   const res = md ? checkReport(md, standard, lang, { audit: audit2 }) : { ok: true, issues: [] };
   const sem = p.flags.semantic === true && typeof rep === "string" && rep ? checkSemantic(md, {
     reportPath: rep,
@@ -68113,9 +68149,9 @@ function cmdCheck(p) {
     standard,
     lang
   }) : null;
-  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok);
+  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok) && (covered === null || covered.ok);
   if (p.flags.json) {
-    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {} }, null, 2));
+    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {}, ...covered ? { covered } : {} }, null, 2));
   } else if (!p.flags.quiet) {
     if (decided) {
       const allowedNote = decided.allowed.length ? lang === "fr" ? ` (${decided.allowed.length} crit\xE8re(s) d\xE9clar\xE9(s) ind\xE9cidable(s) : ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : ` (${decided.allowed.length} criterion(ia) declared undecidable: ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : "";
@@ -68124,11 +68160,16 @@ function cmdCheck(p) {
           lang === "fr" ? `\u2713 Grille compl\xE8te : les ${decided.total} crit\xE8res portent un verdict${allowedNote}.` : `\u2713 Complete grid: all ${decided.total} criteria carry a verdict${allowedNote}.`
         );
     }
+    if (covered?.ok) {
+      console.log(
+        lang === "fr" ? `\u2713 \xC9chantillon couvert : les ${covered.declared} page(s) d\xE9clar\xE9e(s) ont une capture.` : `\u2713 Sample covered: all ${covered.declared} declared page(s) have a capture.`
+      );
+    }
     if (ok)
       console.log(
         sem ? lang === "fr" ? `\u2713 Rapport valide + gate s\xE9mantique engag\xE9e : ${sem.total} verdict(s), ${sem.grounded} ancr\xE9(s) dans la source${sem.moved ? ` (${sem.moved} d\xE9plac\xE9(s))` : ""}.` : `\u2713 Report valid + semantic gate engaged: ${sem.total} verdict(s), ${sem.grounded} grounded in source${sem.moved ? ` (${sem.moved} moved)` : ""}.` : lang === "fr" ? "\u2713 Rapport valide : sections, crit\xE8res cit\xE9s et justifications NA coh\xE9rents." : "\u2713 Report valid: sections, cited criteria and NA justifications are consistent."
       );
-    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? []]) console.error(`\u2717 ${i2}`);
+    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? [], ...covered?.issues ?? []]) console.error(`\u2717 ${i2}`);
   }
   return ok ? 0 : 1;
 }

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.13.1
+  version: 5.14.1
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.13.1";
+var VERSION = "5.14.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -56439,7 +56439,7 @@ function renderCriteriaReference() {
 }
 
 // src/check.ts
-import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync18, readdirSync as readdirSync5 } from "fs";
 import { dirname as dirname9, join as join34 } from "path";
 
 // src/verify.ts
@@ -56860,6 +56860,33 @@ function sectionBody(md, n) {
   const next = /^##\s+/m.exec(md.slice(from));
   return next ? md.slice(from, from + next.index) : md.slice(from);
 }
+function checkSampleCaptured(root = ".", lang = "en") {
+  const fr = lang === "fr";
+  let declared = [];
+  try {
+    const cfg = JSON.parse(readFileSync18(join34(root, ".ultra11yrc.json"), "utf8"));
+    declared = cfg.sample?.pages ?? [];
+  } catch {
+    return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  }
+  if (!declared.length) return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  let captured = /* @__PURE__ */ new Set();
+  try {
+    captured = new Set(
+      readdirSync5(join34(root, PAGES_DIR), { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).filter((id) => existsSync20(join34(root, PAGES_DIR, id, "dom.html")))
+    );
+  } catch {
+  }
+  const missing = declared.filter((p) => !captured.has(p.id)).map((p) => ({ id: p.id, name: p.name ?? p.id, url: p.url ?? "" }));
+  const issues = [];
+  if (missing.length) {
+    const kept = declared.length - missing.length;
+    issues.push(
+      fr ? `${kept}/${declared.length} page(s) d\xE9clar\xE9e(s) ont \xE9t\xE9 captur\xE9es. Aucune capture pour : ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. Une page d\xE9clar\xE9e sans capture n'est pas une page conforme, c'est une page que personne n'a regard\xE9e.` : `${kept}/${declared.length} declared page(s) were captured. No capture for: ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. A declared page with no capture is not a page that passed \u2014 it is a page nobody looked at.`
+    );
+  }
+  return { ok: issues.length === 0, issues, missing, declared: declared.length, captured: captured.size };
+}
 function byCriterionId(a, b) {
   const pa = a.split(".").map(Number);
   const pb = b.split(".").map(Number);
@@ -58740,7 +58767,7 @@ function applyRawVerdicts(items, verdicts) {
 
 // src/scan.ts
 import { execFileSync as execFileSync6 } from "child_process";
-import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync5, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
+import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync6, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join37, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -59064,7 +59091,7 @@ function buildImage(tag = IMAGE_TAG) {
 function cleanTempContexts() {
   let removed = 0;
   const dir = tmpdir2();
-  for (const name2 of readdirSync5(dir)) {
+  for (const name2 of readdirSync6(dir)) {
     if (!name2.startsWith(CTX_PREFIX)) continue;
     rmSync3(join37(dir, name2), { recursive: true, force: true });
     removed++;
@@ -59667,7 +59694,9 @@ function localAvailable(cwd) {
     const req = createRequire(resolve12(cwd, "package.json"));
     req.resolve(PW_SPEC);
     req.resolve(AXE_SPEC);
-    return true;
+    const pw = req(PW_SPEC);
+    const bin = pw.chromium?.executablePath?.();
+    return typeof bin !== "string" || bin.length === 0 ? true : existsSync24(bin);
   } catch {
     return false;
   }
@@ -65563,7 +65592,7 @@ function str3(v) {
 var DECLARED = new Set([...TOOLS2, ...WRITE_TOOLS].map((t3) => t3.name));
 
 // src/mcp/resources.ts
-import { existsSync as existsSync34, readdirSync as readdirSync6, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync7, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
 import { basename as basename3, dirname as dirname14, join as join50, resolve as resolve15, sep as sep6 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var SKILL_NAME = "ultra11y";
@@ -65579,7 +65608,7 @@ function listResources(moduleDir) {
   const out2 = [describe(root, "SKILL.md", `${SKILL_NAME}: the skill`)];
   const refDir = join50(root, "references");
   if (!existsSync34(refDir)) return out2;
-  for (const file of readdirSync6(refDir).sort()) {
+  for (const file of readdirSync7(refDir).sort()) {
     if (!file.endsWith(".md")) continue;
     out2.push(describe(root, join50("references", file), `${SKILL_NAME} reference: ${basename3(file, ".md")}`));
   }
@@ -66457,6 +66486,10 @@ Options:
                      dropped as stale and its criterion says so
   --max-verify <n>   verify: cap the worklist size; 0 = no cap           (default: 40)
   --verdicts <file>  check --semantic: the adjudicated verdicts artifact
+  --require-sample   check: fail while a page DECLARED in .ultra11yrc.json has no capture under
+                     .ultra11y/pages/. Coverage, one level below --require-decided: a sweep that
+                     loses pages produces a report that is merely SHORTER, and a shorter
+                     deliverable reads exactly like a complete one.
   --require-decided  check: fail while ANY criterion of the standard is still \xAB to assess \xBB.
                      Needs --in. A green job does not otherwise mean the grid was filled:
                      --fail-on governs non-conformities, and an adjudication that lands
@@ -66683,6 +66716,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "semantic",
   // `check`: fail while any criterion of the standard is still « to assess ».
   "require-decided",
+  "require-sample",
   "manual",
   // `verify --apply` / `judge --apply`: restore the all-or-nothing fold, where one refused
   // verdict discards the whole adjudication. The default is per-verdict.
@@ -68059,9 +68093,10 @@ function cmdCheck(p) {
   const standard = stdOf(p, "check");
   if (standard === null) return 2;
   const requireDecided = p.flags["require-decided"] === true;
+  const requireSample = p.flags["require-sample"] === true;
   const rep = p.flags.report;
   if (typeof rep !== "string" || !rep) {
-    if (!requireDecided) {
+    if (!requireDecided && !requireSample) {
       console.error("ultra11y check: --report <md> is required.");
       return 2;
     }
@@ -68106,6 +68141,7 @@ function cmdCheck(p) {
     }
   }
   const decided = requireDecided && audit2 ? checkDecided(audit2, standard, lang, { allow }) : null;
+  const covered = requireSample ? checkSampleCaptured(".", lang) : null;
   const res = md ? checkReport(md, standard, lang, { audit: audit2 }) : { ok: true, issues: [] };
   const sem = p.flags.semantic === true && typeof rep === "string" && rep ? checkSemantic(md, {
     reportPath: rep,
@@ -68113,9 +68149,9 @@ function cmdCheck(p) {
     standard,
     lang
   }) : null;
-  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok);
+  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok) && (covered === null || covered.ok);
   if (p.flags.json) {
-    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {} }, null, 2));
+    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {}, ...covered ? { covered } : {} }, null, 2));
   } else if (!p.flags.quiet) {
     if (decided) {
       const allowedNote = decided.allowed.length ? lang === "fr" ? ` (${decided.allowed.length} crit\xE8re(s) d\xE9clar\xE9(s) ind\xE9cidable(s) : ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : ` (${decided.allowed.length} criterion(ia) declared undecidable: ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : "";
@@ -68124,11 +68160,16 @@ function cmdCheck(p) {
           lang === "fr" ? `\u2713 Grille compl\xE8te : les ${decided.total} crit\xE8res portent un verdict${allowedNote}.` : `\u2713 Complete grid: all ${decided.total} criteria carry a verdict${allowedNote}.`
         );
     }
+    if (covered?.ok) {
+      console.log(
+        lang === "fr" ? `\u2713 \xC9chantillon couvert : les ${covered.declared} page(s) d\xE9clar\xE9e(s) ont une capture.` : `\u2713 Sample covered: all ${covered.declared} declared page(s) have a capture.`
+      );
+    }
     if (ok)
       console.log(
         sem ? lang === "fr" ? `\u2713 Rapport valide + gate s\xE9mantique engag\xE9e : ${sem.total} verdict(s), ${sem.grounded} ancr\xE9(s) dans la source${sem.moved ? ` (${sem.moved} d\xE9plac\xE9(s))` : ""}.` : `\u2713 Report valid + semantic gate engaged: ${sem.total} verdict(s), ${sem.grounded} grounded in source${sem.moved ? ` (${sem.moved} moved)` : ""}.` : lang === "fr" ? "\u2713 Rapport valide : sections, crit\xE8res cit\xE9s et justifications NA coh\xE9rents." : "\u2713 Report valid: sections, cited criteria and NA justifications are consistent."
       );
-    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? []]) console.error(`\u2717 ${i2}`);
+    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? [], ...covered?.issues ?? []]) console.error(`\u2717 ${i2}`);
   }
   return ok ? 0 : 1;
 }

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.13.1
+  version: 5.14.1
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.13.1";
+var VERSION = "5.14.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -56439,7 +56439,7 @@ function renderCriteriaReference() {
 }
 
 // src/check.ts
-import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync18, readdirSync as readdirSync5 } from "fs";
 import { dirname as dirname9, join as join34 } from "path";
 
 // src/verify.ts
@@ -56860,6 +56860,33 @@ function sectionBody(md, n) {
   const next = /^##\s+/m.exec(md.slice(from));
   return next ? md.slice(from, from + next.index) : md.slice(from);
 }
+function checkSampleCaptured(root = ".", lang = "en") {
+  const fr = lang === "fr";
+  let declared = [];
+  try {
+    const cfg = JSON.parse(readFileSync18(join34(root, ".ultra11yrc.json"), "utf8"));
+    declared = cfg.sample?.pages ?? [];
+  } catch {
+    return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  }
+  if (!declared.length) return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  let captured = /* @__PURE__ */ new Set();
+  try {
+    captured = new Set(
+      readdirSync5(join34(root, PAGES_DIR), { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).filter((id) => existsSync20(join34(root, PAGES_DIR, id, "dom.html")))
+    );
+  } catch {
+  }
+  const missing = declared.filter((p) => !captured.has(p.id)).map((p) => ({ id: p.id, name: p.name ?? p.id, url: p.url ?? "" }));
+  const issues = [];
+  if (missing.length) {
+    const kept = declared.length - missing.length;
+    issues.push(
+      fr ? `${kept}/${declared.length} page(s) d\xE9clar\xE9e(s) ont \xE9t\xE9 captur\xE9es. Aucune capture pour : ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. Une page d\xE9clar\xE9e sans capture n'est pas une page conforme, c'est une page que personne n'a regard\xE9e.` : `${kept}/${declared.length} declared page(s) were captured. No capture for: ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. A declared page with no capture is not a page that passed \u2014 it is a page nobody looked at.`
+    );
+  }
+  return { ok: issues.length === 0, issues, missing, declared: declared.length, captured: captured.size };
+}
 function byCriterionId(a, b) {
   const pa = a.split(".").map(Number);
   const pb = b.split(".").map(Number);
@@ -58740,7 +58767,7 @@ function applyRawVerdicts(items, verdicts) {
 
 // src/scan.ts
 import { execFileSync as execFileSync6 } from "child_process";
-import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync5, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
+import { mkdtempSync as mkdtempSync2, writeFileSync as writeFileSync12, existsSync as existsSync23, statSync as statSync8, readdirSync as readdirSync6, rmSync as rmSync3, readFileSync as readFileSync20 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join37, resolve as resolve11 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -59064,7 +59091,7 @@ function buildImage(tag = IMAGE_TAG) {
 function cleanTempContexts() {
   let removed = 0;
   const dir = tmpdir2();
-  for (const name2 of readdirSync5(dir)) {
+  for (const name2 of readdirSync6(dir)) {
     if (!name2.startsWith(CTX_PREFIX)) continue;
     rmSync3(join37(dir, name2), { recursive: true, force: true });
     removed++;
@@ -59667,7 +59694,9 @@ function localAvailable(cwd) {
     const req = createRequire(resolve12(cwd, "package.json"));
     req.resolve(PW_SPEC);
     req.resolve(AXE_SPEC);
-    return true;
+    const pw = req(PW_SPEC);
+    const bin = pw.chromium?.executablePath?.();
+    return typeof bin !== "string" || bin.length === 0 ? true : existsSync24(bin);
   } catch {
     return false;
   }
@@ -65563,7 +65592,7 @@ function str3(v) {
 var DECLARED = new Set([...TOOLS2, ...WRITE_TOOLS].map((t3) => t3.name));
 
 // src/mcp/resources.ts
-import { existsSync as existsSync34, readdirSync as readdirSync6, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
+import { existsSync as existsSync34, readdirSync as readdirSync7, readFileSync as readFileSync32, realpathSync as realpathSync5, statSync as statSync13 } from "fs";
 import { basename as basename3, dirname as dirname14, join as join50, resolve as resolve15, sep as sep6 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 var SKILL_NAME = "ultra11y";
@@ -65579,7 +65608,7 @@ function listResources(moduleDir) {
   const out2 = [describe(root, "SKILL.md", `${SKILL_NAME}: the skill`)];
   const refDir = join50(root, "references");
   if (!existsSync34(refDir)) return out2;
-  for (const file of readdirSync6(refDir).sort()) {
+  for (const file of readdirSync7(refDir).sort()) {
     if (!file.endsWith(".md")) continue;
     out2.push(describe(root, join50("references", file), `${SKILL_NAME} reference: ${basename3(file, ".md")}`));
   }
@@ -66457,6 +66486,10 @@ Options:
                      dropped as stale and its criterion says so
   --max-verify <n>   verify: cap the worklist size; 0 = no cap           (default: 40)
   --verdicts <file>  check --semantic: the adjudicated verdicts artifact
+  --require-sample   check: fail while a page DECLARED in .ultra11yrc.json has no capture under
+                     .ultra11y/pages/. Coverage, one level below --require-decided: a sweep that
+                     loses pages produces a report that is merely SHORTER, and a shorter
+                     deliverable reads exactly like a complete one.
   --require-decided  check: fail while ANY criterion of the standard is still \xAB to assess \xBB.
                      Needs --in. A green job does not otherwise mean the grid was filled:
                      --fail-on governs non-conformities, and an adjudication that lands
@@ -66683,6 +66716,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "semantic",
   // `check`: fail while any criterion of the standard is still « to assess ».
   "require-decided",
+  "require-sample",
   "manual",
   // `verify --apply` / `judge --apply`: restore the all-or-nothing fold, where one refused
   // verdict discards the whole adjudication. The default is per-verdict.
@@ -68059,9 +68093,10 @@ function cmdCheck(p) {
   const standard = stdOf(p, "check");
   if (standard === null) return 2;
   const requireDecided = p.flags["require-decided"] === true;
+  const requireSample = p.flags["require-sample"] === true;
   const rep = p.flags.report;
   if (typeof rep !== "string" || !rep) {
-    if (!requireDecided) {
+    if (!requireDecided && !requireSample) {
       console.error("ultra11y check: --report <md> is required.");
       return 2;
     }
@@ -68106,6 +68141,7 @@ function cmdCheck(p) {
     }
   }
   const decided = requireDecided && audit2 ? checkDecided(audit2, standard, lang, { allow }) : null;
+  const covered = requireSample ? checkSampleCaptured(".", lang) : null;
   const res = md ? checkReport(md, standard, lang, { audit: audit2 }) : { ok: true, issues: [] };
   const sem = p.flags.semantic === true && typeof rep === "string" && rep ? checkSemantic(md, {
     reportPath: rep,
@@ -68113,9 +68149,9 @@ function cmdCheck(p) {
     standard,
     lang
   }) : null;
-  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok);
+  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok) && (covered === null || covered.ok);
   if (p.flags.json) {
-    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {} }, null, 2));
+    console.log(JSON.stringify({ ...res, ok, ...sem ? { semantic: sem } : {}, ...decided ? { decided } : {}, ...covered ? { covered } : {} }, null, 2));
   } else if (!p.flags.quiet) {
     if (decided) {
       const allowedNote = decided.allowed.length ? lang === "fr" ? ` (${decided.allowed.length} crit\xE8re(s) d\xE9clar\xE9(s) ind\xE9cidable(s) : ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : ` (${decided.allowed.length} criterion(ia) declared undecidable: ${decided.allowed.map((a) => `${a.criteriaId} \u2014 ${a.reason}`).join(" \xB7 ")})` : "";
@@ -68124,11 +68160,16 @@ function cmdCheck(p) {
           lang === "fr" ? `\u2713 Grille compl\xE8te : les ${decided.total} crit\xE8res portent un verdict${allowedNote}.` : `\u2713 Complete grid: all ${decided.total} criteria carry a verdict${allowedNote}.`
         );
     }
+    if (covered?.ok) {
+      console.log(
+        lang === "fr" ? `\u2713 \xC9chantillon couvert : les ${covered.declared} page(s) d\xE9clar\xE9e(s) ont une capture.` : `\u2713 Sample covered: all ${covered.declared} declared page(s) have a capture.`
+      );
+    }
     if (ok)
       console.log(
         sem ? lang === "fr" ? `\u2713 Rapport valide + gate s\xE9mantique engag\xE9e : ${sem.total} verdict(s), ${sem.grounded} ancr\xE9(s) dans la source${sem.moved ? ` (${sem.moved} d\xE9plac\xE9(s))` : ""}.` : `\u2713 Report valid + semantic gate engaged: ${sem.total} verdict(s), ${sem.grounded} grounded in source${sem.moved ? ` (${sem.moved} moved)` : ""}.` : lang === "fr" ? "\u2713 Rapport valide : sections, crit\xE8res cit\xE9s et justifications NA coh\xE9rents." : "\u2713 Report valid: sections, cited criteria and NA justifications are consistent."
       );
-    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? []]) console.error(`\u2717 ${i2}`);
+    else for (const i2 of [...res.issues, ...sem?.issues ?? [], ...decided?.issues ?? [], ...covered?.issues ?? []]) console.error(`\u2717 ${i2}`);
   }
   return ok ? 0 : 1;
 }

package/src/check.ts

@@ -5,7 +5,7 @@
 // The canonical WCAG report is keyed by 3-segment success criteria (1.4.3); a pack
 // report by the pack's own 2-segment ids (RGAA 8.3) — the id grammar is per-standard
 // so the version token "WCAG 2.2 —" can never be mistaken for a criterion.
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { dirname, join } from "node:path";
 import type { AuditResult, Lang } from "./types.js";
 import { hasSC } from "./wcag.js";
@@ -13,6 +13,7 @@ import { type StandardId, CORE, criterionCoverage, isCore, loadPack, hasId, idCa
 import { buildWorklist, applyVerdicts, type VerifyItem } from "./verify.js";
 import { groundItems } from "./grounding.js";
 import { isPagesReport } from "./pages-report.js";
+import { PAGES_DIR } from "./snapshot.js";
 
 export interface CheckResult {
   ok: boolean;
@@ -325,6 +326,77 @@ function sectionBody(md: string, n: number): string {
 // threshold would hide. An entry states which criterion and why; an entry with no reason
 // fails the gate, because "documented" has to mean something.
 
+// ---- the COVERAGE gate ------------------------------------------------------------------
+//
+// `--require-decided` asks whether every criterion carries a verdict. This asks the question one
+// level below it, and it is the one that went unasked for a long time: a sweep that loses pages
+// produces a report that is simply SHORTER, and a shorter deliverable reads exactly like a
+// complete one. Measured on a real run — a hung probe killed two specs, a serial group took
+// fifteen more with it, and the RGAA report shipped with 20 of the 35 declared pages, green,
+// with nothing anywhere naming the missing fifteen or saying that any were missing.
+//
+// A declared page with no capture is not a page that passed. It is a page nobody looked at.
+
+/** One declared page that produced no capture. */
+export interface UncapturedPage {
+  id: string;
+  name: string;
+  url: string;
+}
+
+export interface SampleCoverage {
+  ok: boolean;
+  issues: string[];
+  /** Declared pages with no snapshot under `.ultra11y/pages/`. */
+  missing: UncapturedPage[];
+  declared: number;
+  captured: number;
+}
+
+/** Hold the sample a repository DECLARES against the snapshots a run actually produced.
+ *
+ *  Reads `.ultra11yrc.json` for the declaration and the pages directory for the captures, so it
+ *  answers for the working tree rather than for an audit JSON that may have been produced
+ *  elsewhere. A repository that declares no sample has nothing to answer — a gate that fails on
+ *  its own absence is a gate that gets turned off. */
+export function checkSampleCaptured(root = ".", lang: Lang = "en"): SampleCoverage {
+  const fr = lang === "fr";
+  let declared: { id: string; name?: string; url?: string }[] = [];
+  try {
+    const cfg = JSON.parse(readFileSync(join(root, ".ultra11yrc.json"), "utf8")) as {
+      sample?: { pages?: { id: string; name?: string; url?: string }[] };
+    };
+    declared = cfg.sample?.pages ?? [];
+  } catch {
+    return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+  }
+  if (!declared.length) return { ok: true, issues: [], missing: [], declared: 0, captured: 0 };
+
+  let captured = new Set<string>();
+  try {
+    captured = new Set(
+      readdirSync(join(root, PAGES_DIR), { withFileTypes: true })
+        .filter((d) => d.isDirectory())
+        .map((d) => d.name)
+        .filter((id) => existsSync(join(root, PAGES_DIR, id, "dom.html"))),
+    );
+  } catch {
+    /* no pages directory at all — every declared page is missing, which is what we report */
+  }
+  const missing = declared.filter((p) => !captured.has(p.id)).map((p) => ({ id: p.id, name: p.name ?? p.id, url: p.url ?? "" }));
+
+  const issues: string[] = [];
+  if (missing.length) {
+    const kept = declared.length - missing.length;
+    issues.push(
+      fr
+        ? `${kept}/${declared.length} page(s) déclarée(s) ont été capturées. Aucune capture pour : ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. Une page déclarée sans capture n'est pas une page conforme, c'est une page que personne n'a regardée.`
+        : `${kept}/${declared.length} declared page(s) were captured. No capture for: ${missing.map((m) => `${m.name} (${m.id})`).join(", ")}. A declared page with no capture is not a page that passed — it is a page nobody looked at.`,
+    );
+  }
+  return { ok: issues.length === 0, issues, missing, declared: declared.length, captured: captured.size };
+}
+
 /** Numeric-segment order, so 2.1 comes before 10.1. */
 function byCriterionId(a: string, b: string): number {
   const pa = a.split(".").map(Number);

package/src/cli.ts

@@ -39,7 +39,7 @@ import { buildGraphStreaming } from "./graph/build.js";
 import { discover } from "./discover.js";
 import { toPosix, GRAPH_ONLY_EXT } from "./glob.js";
 import { runCriteria, renderCriteriaReference } from "./criteria.js";
-import { checkDecided, checkReport, checkSemantic, isUndecidedFile, type UndecidedFile } from "./check.js";
+import { checkSampleCaptured, checkDecided, checkReport, checkSemantic, isUndecidedFile, type UndecidedFile } from "./check.js";
 import { buildWorklist, writeWorklist, applyVerdicts, VERIFY_MAX, type VerifyItem } from "./verify.js";
 import { groundItems } from "./grounding.js";
 import {
@@ -397,6 +397,10 @@ Options:
                      dropped as stale and its criterion says so
   --max-verify <n>   verify: cap the worklist size; 0 = no cap           (default: 40)
   --verdicts <file>  check --semantic: the adjudicated verdicts artifact
+  --require-sample   check: fail while a page DECLARED in .ultra11yrc.json has no capture under
+                     .ultra11y/pages/. Coverage, one level below --require-decided: a sweep that
+                     loses pages produces a report that is merely SHORTER, and a shorter
+                     deliverable reads exactly like a complete one.
   --require-decided  check: fail while ANY criterion of the standard is still « to assess ».
                      Needs --in. A green job does not otherwise mean the grid was filled:
                      --fail-on governs non-conformities, and an adjudication that lands
@@ -640,6 +644,7 @@ const BOOLEAN_FLAGS = new Set([
   "semantic",
   // `check`: fail while any criterion of the standard is still « to assess ».
   "require-decided",
+  "require-sample",
   "manual",
   // `verify --apply` / `judge --apply`: restore the all-or-nothing fold, where one refused
   // verdict discards the whole adjudication. The default is per-verdict.
@@ -2487,9 +2492,12 @@ function cmdCheck(p: ParsedArgs): number {
   // active standard carries a verdict. It therefore needs --in and not --report, and stands on
   // its own — a project can demand a complete grid long before it publishes a deliverable.
   const requireDecided = p.flags["require-decided"] === true;
+  // Same reasoning for coverage: whether the sweep captured every declared page is a fact
+  // about the working tree, answerable long before there is a deliverable to validate.
+  const requireSample = p.flags["require-sample"] === true;
   const rep = p.flags.report;
   if (typeof rep !== "string" || !rep) {
-    if (!requireDecided) {
+    if (!requireDecided && !requireSample) {
       console.error("ultra11y check: --report <md> is required.");
       return 2;
     }
@@ -2539,6 +2547,10 @@ function cmdCheck(p: ParsedArgs): number {
     }
   }
   const decided = requireDecided && audit ? checkDecided(audit, standard, lang, { allow }) : null;
+  // COVERAGE, one level below completeness: did the run capture every page it says it audits?
+  // Needs no audit JSON — it holds the repository's declared sample against the snapshots on
+  // disk, which is what a sweep either produced or did not.
+  const covered = requireSample ? checkSampleCaptured(".", lang) : null;
   const res = md ? checkReport(md, standard, lang, { audit }) : { ok: true, issues: [] };
   // --semantic: the support-level gate ON TOP of the structural check. Fails closed —
   // a green exit must always mean the gate engaged (family P0: never green-but-inactive).
@@ -2552,9 +2564,9 @@ function cmdCheck(p: ParsedArgs): number {
           lang,
         })
       : null;
-  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok);
+  const ok = res.ok && (sem === null || sem.ok) && (decided === null || decided.ok) && (covered === null || covered.ok);
   if (p.flags.json) {
-    console.log(JSON.stringify({ ...res, ok, ...(sem ? { semantic: sem } : {}), ...(decided ? { decided } : {}) }, null, 2));
+    console.log(JSON.stringify({ ...res, ok, ...(sem ? { semantic: sem } : {}), ...(decided ? { decided } : {}), ...(covered ? { covered } : {}) }, null, 2));
   } else if (!p.flags.quiet) {
     if (decided) {
       // Say what the gate engaged on, green or red. A completeness gate that reports only its
@@ -2571,6 +2583,15 @@ function cmdCheck(p: ParsedArgs): number {
             : `✓ Complete grid: all ${decided.total} criteria carry a verdict${allowedNote}.`,
         );
     }
+    if (covered?.ok) {
+      // Green or red, say what it engaged on — a gate that reports only its failures cannot be
+      // told apart from one that never ran.
+      console.log(
+        lang === "fr"
+          ? `✓ Échantillon couvert : les ${covered.declared} page(s) déclarée(s) ont une capture.`
+          : `✓ Sample covered: all ${covered.declared} declared page(s) have a capture.`,
+      );
+    }
     if (ok)
       console.log(
         sem
@@ -2581,7 +2602,7 @@ function cmdCheck(p: ParsedArgs): number {
             ? "✓ Rapport valide : sections, critères cités et justifications NA cohérents."
             : "✓ Report valid: sections, cited criteria and NA justifications are consistent.",
       );
-    else for (const i of [...res.issues, ...(sem?.issues ?? []), ...(decided?.issues ?? [])]) console.error(`✗ ${i}`);
+    else for (const i of [...res.issues, ...(sem?.issues ?? []), ...(decided?.issues ?? []), ...(covered?.issues ?? [])]) console.error(`✗ ${i}`);
   }
   return ok ? 0 : 1;
 }

package/src/integrations/playwright.ts

@@ -90,15 +90,27 @@ async function runAxe(page: PlaywrightPage, mode: boolean | "auto" | undefined):
   const demanded = mode === true;
   // biome-ignore lint/suspicious/noExplicitAny: the builder's shape is axe's, which is not a dependency here
   let AxeBuilder: any;
-  try {
-    const req = createRequire(join(process.cwd(), "package.json"));
-    const mod = req("@axe-core/playwright");
-    AxeBuilder = mod.default ?? mod;
-  } catch (e) {
+  // PROJECT FIRST, then relative to this module — the same order the Playwright fixture above
+  // and `scan --runtime local` use, and for the same reason: module-relative alone works for an
+  // ordinary `node_modules/ultra11y` install but yields nothing whenever the package is linked,
+  // pnpm-hoisted elsewhere, or in a monorepo. Anchoring on the cwd ALONE is just as wrong in the
+  // other direction — a suite that changes directory to write its snapshot then resolves nothing
+  // at all, and the pass evaporates silently because the default is `auto`.
+  let lastError: unknown;
+  for (const from of [join(process.cwd(), "package.json"), import.meta.url]) {
+    try {
+      const mod = createRequire(from)("@axe-core/playwright");
+      AxeBuilder = mod.default ?? mod;
+      break;
+    } catch (e) {
+      lastError = e;
+    }
+  }
+  if (!AxeBuilder) {
     if (demanded) {
       console.warn(
-        `ultra11y: axe was requested but @axe-core/playwright could not be resolved from ${process.cwd()} — ${
-          e instanceof Error ? e.message : String(e)
+        `ultra11y: axe was requested but @axe-core/playwright could not be resolved from ${process.cwd()} nor from this package — ${
+          lastError instanceof Error ? lastError.message : String(lastError)
         }. Install it, or set \`axe: false\`. The criteria axe decides stay to assess.`,
       );
     }

package/src/scan-local.ts

@@ -59,14 +59,29 @@ interface LocalDeps {
 const PW_SPEC = "@playwright/test";
 const AXE_SPEC = "@axe-core/playwright";
 
-/** Resolvable WITHOUT loading (cheap auto-detection): @playwright/test + @axe-core/playwright
- *  both resolve from `--cwd`. */
+/** Is the LOCAL tier actually usable from `cwd`? Drives `runtime: auto`.
+ *
+ *  Both packages must resolve — and the browser BINARY must be on disk. The second half is not
+ *  belt-and-braces: `npm i @playwright/test` installs the package, `npx playwright install`
+ *  installs the browsers, and the two are separate steps that CI images routinely do only one
+ *  of. Resolution alone therefore says "local is available" on a machine that cannot launch
+ *  anything, and `auto` — whose whole contract is to degrade to Docker when the local tier is
+ *  not there — instead picks it and dies on the launch.
+ *
+ *  Measured on this repository the day Playwright became a devDependency: three `--runtime
+ *  local` tests and the action's own crawl job switched themselves on in jobs that install no
+ *  browser, and failed rather than degrading. `executablePath()` is a pure path computation, so
+ *  this stays cheap: no launch, no download, one `stat`. */
 export function localAvailable(cwd: string): boolean {
   try {
     const req = createRequire(resolve(cwd, "package.json"));
     req.resolve(PW_SPEC);
     req.resolve(AXE_SPEC);
-    return true;
+    const pw = req(PW_SPEC) as { chromium?: { executablePath?: () => string } };
+    const bin = pw.chromium?.executablePath?.();
+    // No path at all ⇒ a Playwright that cannot tell us; treat as available and let the launch
+    // report its own failure, rather than refusing a tier that might work.
+    return typeof bin !== "string" || bin.length === 0 ? true : existsSync(bin);
   } catch {
     return false;
   }

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.13.1";
+export const VERSION = "5.14.1";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,