ultra11y 5.18.0 → 5.18.1

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.18.0",
+      "version": "5.18.1",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.18.0",
+  "version": "5.18.1",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.18.0",
+  "version": "5.18.1",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.18.0";
+const ULTRA11Y_PLUGIN_VERSION = "5.18.1";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.18.0",
+  "version": "5.18.1",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -60370,6 +60370,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60380,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60405,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.18.0
+  version: 5.18.1
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -60370,6 +60370,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60380,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60405,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.18.0
+  version: 5.18.1
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.1";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -60370,6 +60370,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60380,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60405,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/src/scan-local.ts

@@ -32,7 +32,7 @@ import {
   TEXT_SPACING_PROBE,
 } from "./probes.js";
 import { sampleScope } from "./sample.js";
-import { COLLECT_SNAPSHOT, type CollectedPage } from "./snapshot.js";
+import { COLLECT_SNAPSHOT, type CollectedPage, slugifyPageId } from "./snapshot.js";
 import { today } from "./util.js";
 
 export const LOCAL_ENGINE = "axe-core@playwright (local)";
@@ -784,6 +784,7 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
   const browser = await launchChromium(chromium);
   const findings: DynamicFinding[] = [];
   const snapshots: string[] = [];
+  const redirected: ScanRedirect[] = [];
   try {
     for (const url of urls) {
       const out = await runOnPage(browser, AxeBuilder, url, false, {
@@ -793,6 +794,29 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
         lang,
         snapshot: Boolean(opts.snapshotRoot),
       });
+      // A CRAWLED URL THAT ANSWERED AN ERROR IS NOT A PAGE OF THE SITE.
+      //
+      // The sample scan has refused these since it existed, for the reason its own comment
+      // gives: a page filed under a name nobody looked at is a false conformance claim. The
+      // URL path never applied the same rule, so a crawl that followed a broken link audited
+      // the SERVER'S ERROR PAGE and scored it. Measured on a three-page test site with one
+      // dead link: the deliverable carried a fourth page called « Error response » at 97 %
+      // RGAA, and its criteria counted towards the run.
+      //
+      // Refused rather than merely skipped: `renderRedirected` states the drop — which URL,
+      // what it answered — because a report that is simply SHORTER reads exactly like a
+      // complete one, and a dead link is a fixable bug in the site rather than in the audit.
+      if (out.httpStatus !== undefined && out.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out.landedUrl ?? out.url,
+          reason: "http-status",
+          status: out.httpStatus,
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out, url) : undefined;
       if (id) snapshots.push(id);
@@ -808,6 +832,7 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
     findings,
     testedScs: localTestedScs(interact),
     ...(snapshots.length ? { snapshots } : {}),
+    ...(redirected.length ? { redirected } : {}),
   };
 }
 

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.18.0";
+export const VERSION = "5.18.1";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,