ultra11y 5.15.0 → 5.16.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.15.0",
+      "version": "5.16.0",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.15.0",
+  "version": "5.16.0",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.15.0",
+  "version": "5.16.0",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.15.0";
+const ULTRA11Y_PLUGIN_VERSION = "5.16.0";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/README.md

@@ -442,7 +442,7 @@ node scripts/ultra11y.mjs scan http://localhost:3000 --runtime local --cwd . --m
 node scripts/ultra11y.mjs report --in audits/audit-latest.json --out audits
 ```
 
-Only the Docker runtime needs Docker; `--runtime local` needs a project with `@playwright/test` + `@axe-core/playwright`. The rest of the skill is zero-dependency. The Docker runner + Dockerfile are embedded in the engine and mirrored under `docker/` (with a `docker-compose.yml`). See `skills/ultra11y/references/dynamic.md`.
+Only the Docker runtime needs Docker. `--runtime local` needs a Chromium binary (`npx playwright install chromium`) and nothing else: `@playwright/test` and `@axe-core/playwright` are dependencies of the package, and the audited project's own copies take precedence when it has them. The engine bundle itself stays dependency-free. The Docker runner + Dockerfile are embedded in the engine and mirrored under `docker/` (with a `docker-compose.yml`). See `skills/ultra11y/references/dynamic.md`.
 
 Typical audit flow:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.15.0",
+  "version": "5.16.0",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",
@@ -77,14 +77,14 @@
     "url": "https://github.com/maxgfr/ultra11y"
   },
   "dependencies": {
+    "@axe-core/playwright": "^4.13.0",
     "@babel/parser": "^8.0.0",
+    "@playwright/test": "^1.62.1",
     "domhandler": "^6.0.1",
     "htmlparser2": "^12.0.0"
   },
   "devDependencies": {
-    "@axe-core/playwright": "^4.13.0",
     "@biomejs/biome": "^2.5.1",
-    "@playwright/test": "^1.62.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^10.0.1",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.15.0";
+var VERSION = "5.16.0";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -2290,7 +2290,7 @@ var wcag_universe_default = {
   wcagVersion: "2.2",
   source: "https://www.w3.org/TR/WCAG22/",
   criteriaSource: "https://github.com/w3c/wcag",
-  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-19 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
+  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-20 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
   criteria: [
     {
       id: "1.1.1",
@@ -58678,6 +58678,9 @@ function readLedger(path) {
     return void 0;
   }
 }
+function unreadableCaptures(audit2, cwd = ".") {
+  return (audit2.scope.pagesAudited ?? []).filter((id) => !existsSync21(join36(cwd, PAGES_DIR, id, "dom.html")));
+}
 function writeLedger(path, ledger) {
   mkdirSync10(dirname10(path), { recursive: true });
   const sorted = { ...ledger, entries: [...ledger.entries].sort((a, b) => a.criteriaId.localeCompare(b.criteriaId, "en", { numeric: true })) };
@@ -59891,17 +59894,38 @@ function localTestedScs(interact) {
 }
 var PW_SPEC = "@playwright/test";
 var AXE_SPEC = "@axe-core/playwright";
-function localTierStatus(cwd) {
-  const req = createRequire(resolve12(cwd, "package.json"));
-  for (const spec of [PW_SPEC, AXE_SPEC]) {
+function resolveAnchors(cwd) {
+  return [resolve12(cwd, "package.json"), import.meta.url];
+}
+function requireRuntime(cwd, spec) {
+  let last;
+  for (const from of resolveAnchors(cwd)) {
     try {
-      req.resolve(spec);
+      return createRequire(from)(spec);
+    } catch (e) {
+      last = e;
+    }
+  }
+  throw last instanceof Error ? last : new Error(String(last));
+}
+function resolvesRuntime(cwd, spec) {
+  return resolveAnchors(cwd).some((from) => {
+    try {
+      createRequire(from).resolve(spec);
+      return true;
     } catch {
-      return { ok: false, reason: `${spec} does not resolve from ${cwd}` };
+      return false;
+    }
+  });
+}
+function localTierStatus(cwd) {
+  for (const spec of [PW_SPEC, AXE_SPEC]) {
+    if (!resolvesRuntime(cwd, spec)) {
+      return { ok: false, reason: `${spec} resolves neither from ${cwd} nor from ultra11y itself` };
     }
   }
   try {
-    const pw = req(PW_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
     const bin = pw.chromium?.executablePath?.();
     if (typeof bin === "string" && bin.length > 0 && !existsSync24(bin)) {
       return { ok: false, reason: `no browser binary at ${bin} \u2014 run \`npx playwright install chromium\`` };
@@ -59918,15 +59942,14 @@ function resolveLocalDeps(cwd) {
   let chromium;
   let AxeBuilder;
   try {
-    const req = createRequire(resolve12(cwd, "package.json"));
-    const pw = req(PW_SPEC);
-    const axeMod = req(AXE_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
+    const axeMod = requireRuntime(cwd, AXE_SPEC);
     chromium = pw.chromium;
     AxeBuilder = axeMod.default ?? axeMod;
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     throw new Error(
-      `Playwright not resolvable from "${cwd}". Pass --cwd <dir> at a project with @playwright/test + @axe-core/playwright installed (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
+      `Playwright resolves neither from "${cwd}" nor from ultra11y itself. Both are dependencies of this package, so the usual cause is the standalone engine bundle running with no node_modules beside it: pass --cwd <dir> at a project that has @playwright/test + @axe-core/playwright (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
     );
   }
   if (!chromium || typeof AxeBuilder !== "function") {
@@ -68713,6 +68736,11 @@ function applyAdjudicationFile(p, adj, lang) {
   writeFileSync20(auditPath, JSON.stringify(r.audit, null, 2) + "\n");
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);
@@ -68845,6 +68873,11 @@ async function cmdJudge(p) {
 `);
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);

package/scripts/vendor/wcag-2.2-fr.json

@@ -1,6 +1,6 @@
 {
   "source": "https://www.w3.org/Translations/WCAG22-fr/",
-  "fetchedAt": "2026-08-19",
+  "fetchedAt": "2026-08-20",
   "principles": {
     "1": "Perceptible",
     "2": "Utilisable",

package/scripts/vendor/wcag-2.2-sc-universe.json

@@ -2,7 +2,7 @@
   "wcagVersion": "2.2",
   "source": "https://www.w3.org/TR/WCAG22/",
   "criteriaSource": "https://github.com/w3c/wcag",
-  "provenance": "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-19 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
+  "provenance": "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-20 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
   "principles": [
     {
       "number": 1,

package/scripts/vendor/wcag-2.2-techniques.json

@@ -2,7 +2,7 @@
   "source": "https://github.com/w3c/wcag",
   "understanding": "https://www.w3.org/WAI/WCAG22/Understanding/",
   "license": "W3C Document License (code samples: W3C Software License)",
-  "fetchedAt": "2026-08-19",
+  "fetchedAt": "2026-08-20",
   "criteria": {
     "1.1.1": {
       "slug": "non-text-content",

package/scripts/vendor/wcag-2.2-text.json

@@ -1,7 +1,7 @@
 {
   "source": "https://github.com/w3c/wcag",
   "license": "W3C Document License",
-  "fetchedAt": "2026-08-19",
+  "fetchedAt": "2026-08-20",
   "criteria": {
     "1.1.1": "All non-text content that is presented to the user has a text alternative that serves the equivalent purpose, except for the situations listed below.\nControls, Input:\nIf non-text content is a control or accepts user input, then it has a name that describes its purpose. (Refer to Success Criterion 4.1.2 Name, Role, Value for additional requirements for controls and content that accepts user input.)\nTime-Based Media:\nIf non-text content is time-based media, then text alternatives at least provide descriptive identification of the non-text content. (Refer to Guideline 1.2 for additional requirements for media.)\nTest:\nIf non-text content is a test or exercise that would be invalid if presented in text, then text alternatives at least provide descriptive identification of the non-text content.\nSensory:\nIf non-text content is primarily intended to create a specific sensory experience, then text alternatives at least provide descriptive identification of the non-text content.\nCAPTCHA:\nIf the purpose of non-text content is to confirm that content is being accessed by a person rather than a computer, then text alternatives that identify and describe the purpose of the non-text content are provided, and alternative forms of CAPTCHA using output modes for different types of sensory perception are provided to accommodate different disabilities.\nDecoration, Formatting, Invisible:\nIf non-text content is pure decoration, is used only for visual formatting, or is not presented to users, then it is implemented in a way that it can be ignored by assistive technology.",
     "1.2.1": "For prerecorded audio-only and prerecorded video-only media, the following are true, except when the audio or video is a media alternative for text and is clearly labeled as such:\nPrerecorded Audio-only:\nAn alternative for time-based media is provided that presents equivalent information for prerecorded audio-only content.\nPrerecorded Video-only:\nEither an alternative for time-based media or an audio track is provided that presents equivalent information for prerecorded video-only content.",

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.15.0
+  version: 5.16.0
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.15.0";
+var VERSION = "5.16.0";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -2290,7 +2290,7 @@ var wcag_universe_default = {
   wcagVersion: "2.2",
   source: "https://www.w3.org/TR/WCAG22/",
   criteriaSource: "https://github.com/w3c/wcag",
-  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-19 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
+  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-20 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
   criteria: [
     {
       id: "1.1.1",
@@ -58678,6 +58678,9 @@ function readLedger(path) {
     return void 0;
   }
 }
+function unreadableCaptures(audit2, cwd = ".") {
+  return (audit2.scope.pagesAudited ?? []).filter((id) => !existsSync21(join36(cwd, PAGES_DIR, id, "dom.html")));
+}
 function writeLedger(path, ledger) {
   mkdirSync10(dirname10(path), { recursive: true });
   const sorted = { ...ledger, entries: [...ledger.entries].sort((a, b) => a.criteriaId.localeCompare(b.criteriaId, "en", { numeric: true })) };
@@ -59891,17 +59894,38 @@ function localTestedScs(interact) {
 }
 var PW_SPEC = "@playwright/test";
 var AXE_SPEC = "@axe-core/playwright";
-function localTierStatus(cwd) {
-  const req = createRequire(resolve12(cwd, "package.json"));
-  for (const spec of [PW_SPEC, AXE_SPEC]) {
+function resolveAnchors(cwd) {
+  return [resolve12(cwd, "package.json"), import.meta.url];
+}
+function requireRuntime(cwd, spec) {
+  let last;
+  for (const from of resolveAnchors(cwd)) {
     try {
-      req.resolve(spec);
+      return createRequire(from)(spec);
+    } catch (e) {
+      last = e;
+    }
+  }
+  throw last instanceof Error ? last : new Error(String(last));
+}
+function resolvesRuntime(cwd, spec) {
+  return resolveAnchors(cwd).some((from) => {
+    try {
+      createRequire(from).resolve(spec);
+      return true;
     } catch {
-      return { ok: false, reason: `${spec} does not resolve from ${cwd}` };
+      return false;
+    }
+  });
+}
+function localTierStatus(cwd) {
+  for (const spec of [PW_SPEC, AXE_SPEC]) {
+    if (!resolvesRuntime(cwd, spec)) {
+      return { ok: false, reason: `${spec} resolves neither from ${cwd} nor from ultra11y itself` };
     }
   }
   try {
-    const pw = req(PW_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
     const bin = pw.chromium?.executablePath?.();
     if (typeof bin === "string" && bin.length > 0 && !existsSync24(bin)) {
       return { ok: false, reason: `no browser binary at ${bin} \u2014 run \`npx playwright install chromium\`` };
@@ -59918,15 +59942,14 @@ function resolveLocalDeps(cwd) {
   let chromium;
   let AxeBuilder;
   try {
-    const req = createRequire(resolve12(cwd, "package.json"));
-    const pw = req(PW_SPEC);
-    const axeMod = req(AXE_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
+    const axeMod = requireRuntime(cwd, AXE_SPEC);
     chromium = pw.chromium;
     AxeBuilder = axeMod.default ?? axeMod;
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     throw new Error(
-      `Playwright not resolvable from "${cwd}". Pass --cwd <dir> at a project with @playwright/test + @axe-core/playwright installed (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
+      `Playwright resolves neither from "${cwd}" nor from ultra11y itself. Both are dependencies of this package, so the usual cause is the standalone engine bundle running with no node_modules beside it: pass --cwd <dir> at a project that has @playwright/test + @axe-core/playwright (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
     );
   }
   if (!chromium || typeof AxeBuilder !== "function") {
@@ -68713,6 +68736,11 @@ function applyAdjudicationFile(p, adj, lang) {
   writeFileSync20(auditPath, JSON.stringify(r.audit, null, 2) + "\n");
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);
@@ -68845,6 +68873,11 @@ async function cmdJudge(p) {
 `);
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.15.0
+  version: 5.16.0
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/references/dynamic.md

@@ -5,18 +5,23 @@ contrast (1.4.3), focus visible (2.4.7), reflow/zoom (1.4.4/1.4.10), text spacin
 content on hover (1.4.13), target size (2.5.8). The dynamic tier decides them by running
 **axe-core in a real headless browser** (Playwright). Two runtimes, same finding shape:
 
-- **`--runtime local`** (recommended): resolves a host/target Playwright + `@axe-core/playwright`
-  **at runtime** from `--cwd` (no Docker, no global install). Most projects with Playwright
-  e2e tests already have both deps. Adds the residual-criteria **probes** (below).
+- **`--runtime local`** (recommended): resolves Playwright + `@axe-core/playwright`
+  **at runtime**, from `--cwd` first and from ultra11y's own install second (no Docker, no
+  global install). Both are dependencies of this package, so a project that installed ultra11y
+  alone still gets the tier; a project that pins its own Playwright keeps it, because `--cwd`
+  is tried first. Adds the residual-criteria **probes** (below).
 - **`--runtime docker`**: runs axe-core in a Docker image auto-built on first use (runner +
   Dockerfile embedded in the bundle). No host deps beyond Docker. Axe + 320px reflow only.
-- **`--runtime auto`** (default): local if Playwright resolves from `--cwd`, else Docker, else
-  an actionable error.
+- **`--runtime auto`** (default): local if Playwright resolves **and** a browser binary is on
+  disk, else Docker, else an actionable error. Since the packages ship with ultra11y, what
+  decides `auto` in practice is the browser, not the modules.
 
 ## Prerequisites
 
-- **local**: a project reachable from `--cwd` with `@playwright/test` + `@axe-core/playwright`
-  installed, and a Chromium browser (`npx playwright install chromium`).
+- **local**: a Chromium browser — `npx playwright install chromium`. The two npm packages
+  (`@playwright/test`, `@axe-core/playwright`) come with ultra11y and need no separate install;
+  installing them in the audited project is still supported and takes precedence, which is what
+  a repository with its own pinned Playwright wants.
 - **docker**: Docker running.
 
 The rest of the skill (static audit) needs neither.

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.15.0";
+var VERSION = "5.16.0";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -2290,7 +2290,7 @@ var wcag_universe_default = {
   wcagVersion: "2.2",
   source: "https://www.w3.org/TR/WCAG22/",
   criteriaSource: "https://github.com/w3c/wcag",
-  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-19 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
+  provenance: "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-20 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
   criteria: [
     {
       id: "1.1.1",
@@ -58678,6 +58678,9 @@ function readLedger(path) {
     return void 0;
   }
 }
+function unreadableCaptures(audit2, cwd = ".") {
+  return (audit2.scope.pagesAudited ?? []).filter((id) => !existsSync21(join36(cwd, PAGES_DIR, id, "dom.html")));
+}
 function writeLedger(path, ledger) {
   mkdirSync10(dirname10(path), { recursive: true });
   const sorted = { ...ledger, entries: [...ledger.entries].sort((a, b) => a.criteriaId.localeCompare(b.criteriaId, "en", { numeric: true })) };
@@ -59891,17 +59894,38 @@ function localTestedScs(interact) {
 }
 var PW_SPEC = "@playwright/test";
 var AXE_SPEC = "@axe-core/playwright";
-function localTierStatus(cwd) {
-  const req = createRequire(resolve12(cwd, "package.json"));
-  for (const spec of [PW_SPEC, AXE_SPEC]) {
+function resolveAnchors(cwd) {
+  return [resolve12(cwd, "package.json"), import.meta.url];
+}
+function requireRuntime(cwd, spec) {
+  let last;
+  for (const from of resolveAnchors(cwd)) {
     try {
-      req.resolve(spec);
+      return createRequire(from)(spec);
+    } catch (e) {
+      last = e;
+    }
+  }
+  throw last instanceof Error ? last : new Error(String(last));
+}
+function resolvesRuntime(cwd, spec) {
+  return resolveAnchors(cwd).some((from) => {
+    try {
+      createRequire(from).resolve(spec);
+      return true;
     } catch {
-      return { ok: false, reason: `${spec} does not resolve from ${cwd}` };
+      return false;
+    }
+  });
+}
+function localTierStatus(cwd) {
+  for (const spec of [PW_SPEC, AXE_SPEC]) {
+    if (!resolvesRuntime(cwd, spec)) {
+      return { ok: false, reason: `${spec} resolves neither from ${cwd} nor from ultra11y itself` };
     }
   }
   try {
-    const pw = req(PW_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
     const bin = pw.chromium?.executablePath?.();
     if (typeof bin === "string" && bin.length > 0 && !existsSync24(bin)) {
       return { ok: false, reason: `no browser binary at ${bin} \u2014 run \`npx playwright install chromium\`` };
@@ -59918,15 +59942,14 @@ function resolveLocalDeps(cwd) {
   let chromium;
   let AxeBuilder;
   try {
-    const req = createRequire(resolve12(cwd, "package.json"));
-    const pw = req(PW_SPEC);
-    const axeMod = req(AXE_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
+    const axeMod = requireRuntime(cwd, AXE_SPEC);
     chromium = pw.chromium;
     AxeBuilder = axeMod.default ?? axeMod;
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     throw new Error(
-      `Playwright not resolvable from "${cwd}". Pass --cwd <dir> at a project with @playwright/test + @axe-core/playwright installed (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
+      `Playwright resolves neither from "${cwd}" nor from ultra11y itself. Both are dependencies of this package, so the usual cause is the standalone engine bundle running with no node_modules beside it: pass --cwd <dir> at a project that has @playwright/test + @axe-core/playwright (e.g. --cwd packages/app), or use --runtime docker. (${msg})`
     );
   }
   if (!chromium || typeof AxeBuilder !== "function") {
@@ -68713,6 +68736,11 @@ function applyAdjudicationFile(p, adj, lang) {
   writeFileSync20(auditPath, JSON.stringify(r.audit, null, 2) + "\n");
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);
@@ -68845,6 +68873,11 @@ async function cmdJudge(p) {
 `);
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr" ? `\u26A0 Registre \xE9crit sans les instantan\xE9s de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). L'\xE9vidence moissonn\xE9e ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront d\xE9clar\xE9s P\xC9RIM\xC9S au rejeu. Adjugez l\xE0 o\xF9 \`.ultra11y/pages/\` existe.` : `\u26A0 Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "\u2026" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);

package/src/cli.ts

@@ -50,7 +50,7 @@ import {
   hydrateAdjudication,
   type AdjudicationFile,
 } from "./adjudicate.js";
-import { entriesFrom, isLedger, ledgerPath, mergeLedger, readLedger, replayLedger, type VerdictLedger, writeLedger } from "./ledger.js";
+import { entriesFrom, isLedger, ledgerPath, mergeLedger, readLedger, replayLedger, unreadableCaptures, type VerdictLedger, writeLedger } from "./ledger.js";
 import { BATCH_SIZE, apiKeyFromEnv, applyRawVerdicts, judgeAll, modelFromEnv } from "./llm.js";
 import { runScan, runScanMany, runCrawlScan, runSampleScan, mergeDynamic, mergeSnapshotAudit, cleanDynamic, dockerAvailable } from "./scan.js";
 import { runScanLocal, runScanManyLocal, runCrawlScanLocal, runSampleScanLocal, localAvailable, localTierStatus } from "./scan-local.js";
@@ -2940,6 +2940,25 @@ function applyAdjudicationFile(p: ParsedArgs, adj: AdjudicationFile, lang: Lang)
   // next replay, which is the whole thing the gate exists to prevent.
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    // A LEDGER WRITTEN WITHOUT THE CAPTURES IS STALE ON ARRIVAL.
+    //
+    // The fingerprint is over the evidence the harvest READ FROM DISK, so recording a verdict
+    // where the audit's page captures are absent fingerprints a strictly smaller set than the
+    // one CI rebuilds — and the replay drops it as stale, every run, silently. Measured on a
+    // real repository: RGAA 12.3 recorded over 13 evidence items where the run harvests 22.
+    // The entry looked well-formed, the fold accepted it, it was committed and reviewed, and
+    // it never once replayed.
+    //
+    // A warning, not a refusal: the verdict itself is sound and still lands on THIS audit, and
+    // a caller who genuinely has no captures (a source-only repository) has nothing to fix.
+    // What must not happen is writing it and saying nothing.
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr"
+          ? `⚠ Registre écrit sans les instantanés de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "…" : ""}). L'évidence moissonnée ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront déclarés PÉRIMÉS au rejeu. Adjugez là où \`.ultra11y/pages/\` existe.`
+          : `⚠ Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "…" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`,
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);
@@ -3129,6 +3148,25 @@ async function cmdJudge(p: ParsedArgs): Promise<number> {
   // run can replay it for free.
   const ledgerOut = ledgerTarget(p, adj.standard);
   if (ledgerOut) {
+    // A LEDGER WRITTEN WITHOUT THE CAPTURES IS STALE ON ARRIVAL.
+    //
+    // The fingerprint is over the evidence the harvest READ FROM DISK, so recording a verdict
+    // where the audit's page captures are absent fingerprints a strictly smaller set than the
+    // one CI rebuilds — and the replay drops it as stale, every run, silently. Measured on a
+    // real repository: RGAA 12.3 recorded over 13 evidence items where the run harvests 22.
+    // The entry looked well-formed, the fold accepted it, it was committed and reviewed, and
+    // it never once replayed.
+    //
+    // A warning, not a refusal: the verdict itself is sound and still lands on THIS audit, and
+    // a caller who genuinely has no captures (a source-only repository) has nothing to fix.
+    // What must not happen is writing it and saying nothing.
+    const blind = unreadableCaptures(r.audit);
+    if (blind.length)
+      console.error(
+        lang === "fr"
+          ? `⚠ Registre écrit sans les instantanés de ${blind.length} page(s) que cet audit dit avoir lues (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "…" : ""}). L'évidence moissonnée ici est plus petite que celle qu'un run reconstruira, donc ces verdicts seront déclarés PÉRIMÉS au rejeu. Adjugez là où \`.ultra11y/pages/\` existe.`
+          : `⚠ Ledger written without the snapshots of ${blind.length} page(s) this audit says it read (${blind.slice(0, 5).join(", ")}${blind.length > 5 ? "…" : ""}). The evidence harvested here is smaller than the one a run will rebuild, so these verdicts will be dropped as STALE on replay. Adjudicate where \`.ultra11y/pages/\` exists.`,
+      );
     const refused = new Set(r.rejectedCriteria);
     const accepted = new Set(adj.items.map((it) => it.criteriaId).filter((id) => !refused.has(id)));
     const fresh = entriesFrom(adj, accepted, r.audit.date);

package/src/data/wcag-universe.json

@@ -2,7 +2,7 @@
   "wcagVersion": "2.2",
   "source": "https://www.w3.org/TR/WCAG22/",
   "criteriaSource": "https://github.com/w3c/wcag",
-  "provenance": "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-19 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
+  "provenance": "Full WCAG 2.x SC universe (all levels incl. AAA, and the removed 4.1.1 Parsing) fetched from raw.githubusercontent.com/w3c/wcag@main on 2026-08-20 via `node scripts/build-standards.mjs --refresh-universe`. Classification: core-AA = ships in src/data/wcag.json (the shipped WCAG 2.2 AA core); out-of-core = WCAG AAA; removed = obsolete (4.1.1).",
   "criteria": [
     {
       "id": "1.1.1",

package/src/ledger.ts

@@ -31,6 +31,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 
 import { type AdjudicationFile, type AdjudicationItem, type AgentFinding, buildAdjudicationWorklist, type Evidence, readCitation } from "./adjudicate.js";
+import { PAGES_DIR } from "./snapshot.js";
 import { CORE, type StandardId } from "./standards/index.js";
 import type { AuditResult } from "./types.js";
 import { SCHEMA_VERSION } from "./types.js";
@@ -127,6 +128,25 @@ export function readLedger(path: string): VerdictLedger | undefined {
   }
 }
 
+/** Would a ledger written from THIS harvest be replayable? Names what is missing when not.
+ *
+ *  A ledger entry is keyed on a fingerprint of the evidence the verdict was ruled against, and
+ *  the harvest RE-READS the audited files from disk. So a verdict recorded where the audit's
+ *  page captures are absent is fingerprinted over a strictly smaller evidence set than the one
+ *  CI will rebuild — and it is stale on arrival, every time, silently.
+ *
+ *  Measured while adjudicating a real repository from a checkout with no `.ultra11y/pages/`:
+ *  RGAA 12.3 was recorded over 13 evidence items where the run harvests 22. The entry looked
+ *  perfectly well-formed, the fold accepted it, the file was committed and reviewed — and the
+ *  replay dropped it as stale on every subsequent run, with nothing anywhere saying why.
+ *
+ *  Returns the page ids the audit says it read and whose capture is not on disk. Empty when
+ *  there is nothing to warn about — including on a source-only audit, which legitimately has
+ *  no captures to miss. */
+export function unreadableCaptures(audit: AuditResult, cwd = "."): string[] {
+  return (audit.scope.pagesAudited ?? []).filter((id) => !existsSync(join(cwd, PAGES_DIR, id, "dom.html")));
+}
+
 export function writeLedger(path: string, ledger: VerdictLedger): void {
   mkdirSync(dirname(path), { recursive: true });
   // Entries id-sorted so the committed file has a stable diff — a ledger that reshuffles on

package/src/scan-local.ts

@@ -1,6 +1,7 @@
-// `scan --runtime local` — the dynamic tier WITHOUT Docker. Resolves a host/target
-// Playwright + @axe-core/playwright AT RUNTIME (createRequire, a node: builtin) from
-// `--cwd`, so the zero-dep static engine bundle never gains a static browser import.
+// `scan --runtime local` — the dynamic tier WITHOUT Docker. Resolves Playwright +
+// @axe-core/playwright AT RUNTIME (createRequire, a node: builtin) from `--cwd` first and
+// from this package second, so the zero-dep static engine bundle never gains a static
+// browser import while a project that installed ultra11y alone still gets the tier.
 // It runs the SAME axe-core pass as the Docker RUNNER, then the residual-criteria
 // probes axe cannot decide (focus visibility, 200% zoom, text spacing, content on
 // hover, target size). The Docker RUNNER / docker/* files are untouched (docker-sync).
@@ -59,6 +60,46 @@ interface LocalDeps {
 const PW_SPEC = "@playwright/test";
 const AXE_SPEC = "@axe-core/playwright";
 
+/** Where a runtime dependency may live, in the order that must be tried.
+ *
+ *  THE TARGET PROJECT FIRST, then this package — the same order `src/integrations/playwright.ts`
+ *  uses, and for the same two reasons. A repository that pins its own Playwright must keep it:
+ *  two copies in one process hand out `Page` objects the other one's fixtures do not recognise.
+ *  And a repository that has none must still get the tier, now that `@playwright/test` and
+ *  `@axe-core/playwright` are dependencies of ultra11y instead of something every caller had to
+ *  duplicate into its own manifest. Anchoring on `cwd` ALONE was the older contract, and it made
+ *  `--runtime local` unavailable to exactly the projects that had not read the prerequisites. */
+function resolveAnchors(cwd: string): string[] {
+  return [resolve(cwd, "package.json"), import.meta.url];
+}
+
+/** Load `spec` from the target project, else from this package. Rethrows the LAST failure, so
+ *  the message names the spec the caller asked for rather than the first anchor that missed. */
+function requireRuntime(cwd: string, spec: string): Any {
+  let last: unknown;
+  for (const from of resolveAnchors(cwd)) {
+    try {
+      return createRequire(from)(spec);
+    } catch (e) {
+      last = e;
+    }
+  }
+  throw last instanceof Error ? last : new Error(String(last));
+}
+
+/** Can `spec` be resolved from either anchor? Resolution only — never loads the module, so
+ *  probing the tier stays as cheap as it was when it only looked at `cwd`. */
+function resolvesRuntime(cwd: string, spec: string): boolean {
+  return resolveAnchors(cwd).some((from) => {
+    try {
+      createRequire(from).resolve(spec);
+      return true;
+    } catch {
+      return false;
+    }
+  });
+}
+
 /** Why the LOCAL tier is (un)usable from `cwd` — the one line a reader of a
  *  `runtime: auto` log gets before the Docker fallback takes over. A silent degrade is
  *  indistinguishable from a working fallback, so the reason must NAME what to install. */
@@ -68,16 +109,13 @@ export type LocalTierStatus = { ok: true } | { ok: false; reason: string };
  *  boolean. Drives the `runtime: auto` decision AND the message printed when it degrades
  *  to Docker. */
 export function localTierStatus(cwd: string): LocalTierStatus {
-  const req = createRequire(resolve(cwd, "package.json"));
   for (const spec of [PW_SPEC, AXE_SPEC]) {
-    try {
-      req.resolve(spec);
-    } catch {
-      return { ok: false, reason: `${spec} does not resolve from ${cwd}` };
+    if (!resolvesRuntime(cwd, spec)) {
+      return { ok: false, reason: `${spec} resolves neither from ${cwd} nor from ultra11y itself` };
     }
   }
   try {
-    const pw = req(PW_SPEC) as { chromium?: { executablePath?: () => string } };
+    const pw = requireRuntime(cwd, PW_SPEC) as { chromium?: { executablePath?: () => string } };
     const bin = pw.chromium?.executablePath?.();
     // No path at all ⇒ a Playwright that cannot tell us; treat as available and let the
     // launch report its own failure, rather than refusing a tier that might work.
@@ -112,15 +150,14 @@ export function resolveLocalDeps(cwd: string): LocalDeps {
   let chromium: Any;
   let AxeBuilder: Any;
   try {
-    const req = createRequire(resolve(cwd, "package.json"));
-    const pw = req(PW_SPEC);
-    const axeMod = req(AXE_SPEC);
+    const pw = requireRuntime(cwd, PW_SPEC);
+    const axeMod = requireRuntime(cwd, AXE_SPEC);
     chromium = pw.chromium;
     AxeBuilder = axeMod.default ?? axeMod;
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     throw new Error(
-      `Playwright not resolvable from "${cwd}". Pass --cwd <dir> at a project with @playwright/test + @axe-core/playwright installed (e.g. --cwd packages/app), or use --runtime docker. (${msg})`,
+      `Playwright resolves neither from "${cwd}" nor from ultra11y itself. Both are dependencies of this package, so the usual cause is the standalone engine bundle running with no node_modules beside it: pass --cwd <dir> at a project that has @playwright/test + @axe-core/playwright (e.g. --cwd packages/app), or use --runtime docker. (${msg})`,
     );
   }
   if (!chromium || typeof AxeBuilder !== "function") {

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.15.0";
+export const VERSION = "5.16.0";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,