ultra11y 5.18.0 → 5.18.2

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.18.0",
+      "version": "5.18.2",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.18.0",
+  "version": "5.18.2",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.18.0",
+  "version": "5.18.2",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.18.0";
+const ULTRA11Y_PLUGIN_VERSION = "5.18.2";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.18.0",
+  "version": "5.18.2",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.2";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -54612,7 +54612,7 @@ function pageGridModel(result, derived, standard, lang) {
 function renderRedirected(redirected, lang = "en") {
   const fr = lang === "fr";
   const out2 = [
-    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
     "",
     fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
     "| --- | --- | --- | --- |"
@@ -59019,12 +59019,23 @@ function nameFromUrl(url) {
   if (!words) return "Accueil";
   return words.charAt(0).toUpperCase() + words.slice(1);
 }
+function canonicalUrl(url) {
+  try {
+    const u = new URL(url);
+    u.hash = "";
+    u.pathname = u.pathname.replace(/(^|\/)index\.x?html?$/i, "$1");
+    return u.href;
+  } catch {
+    return url;
+  }
+}
 async function crawlUrls(start2, opts) {
   const depth = opts.depth ?? 1;
   const max = opts.max ?? 50;
   const order = [];
-  const seen = /* @__PURE__ */ new Set([start2]);
-  const queue = [{ url: start2, d: 0 }];
+  const first = canonicalUrl(start2);
+  const seen = /* @__PURE__ */ new Set([first]);
+  const queue = [{ url: first, d: 0 }];
   while (queue.length > 0 && order.length < max) {
     const { url, d } = queue.shift();
     order.push(url);
@@ -59036,9 +59047,10 @@ async function crawlUrls(start2, opts) {
       continue;
     }
     for (const link of extractLinks(html, url)) {
-      if (seen.has(link)) continue;
-      seen.add(link);
-      queue.push({ url: link, d: d + 1 });
+      const canon = canonicalUrl(link);
+      if (seen.has(canon)) continue;
+      seen.add(canon);
+      queue.push({ url: canon, d: d + 1 });
     }
   }
   return order;
@@ -60370,6 +60382,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60392,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60417,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.18.0
+  version: 5.18.2
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.2";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -54612,7 +54612,7 @@ function pageGridModel(result, derived, standard, lang) {
 function renderRedirected(redirected, lang = "en") {
   const fr = lang === "fr";
   const out2 = [
-    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
     "",
     fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
     "| --- | --- | --- | --- |"
@@ -59019,12 +59019,23 @@ function nameFromUrl(url) {
   if (!words) return "Accueil";
   return words.charAt(0).toUpperCase() + words.slice(1);
 }
+function canonicalUrl(url) {
+  try {
+    const u = new URL(url);
+    u.hash = "";
+    u.pathname = u.pathname.replace(/(^|\/)index\.x?html?$/i, "$1");
+    return u.href;
+  } catch {
+    return url;
+  }
+}
 async function crawlUrls(start2, opts) {
   const depth = opts.depth ?? 1;
   const max = opts.max ?? 50;
   const order = [];
-  const seen = /* @__PURE__ */ new Set([start2]);
-  const queue = [{ url: start2, d: 0 }];
+  const first = canonicalUrl(start2);
+  const seen = /* @__PURE__ */ new Set([first]);
+  const queue = [{ url: first, d: 0 }];
   while (queue.length > 0 && order.length < max) {
     const { url, d } = queue.shift();
     order.push(url);
@@ -59036,9 +59047,10 @@ async function crawlUrls(start2, opts) {
       continue;
     }
     for (const link of extractLinks(html, url)) {
-      if (seen.has(link)) continue;
-      seen.add(link);
-      queue.push({ url: link, d: d + 1 });
+      const canon = canonicalUrl(link);
+      if (seen.has(canon)) continue;
+      seen.add(canon);
+      queue.push({ url: canon, d: d + 1 });
     }
   }
   return order;
@@ -60370,6 +60382,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60392,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60417,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.18.0
+  version: 5.18.2
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.18.0";
+var VERSION = "5.18.2";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -54612,7 +54612,7 @@ function pageGridModel(result, derived, standard, lang) {
 function renderRedirected(redirected, lang = "en") {
   const fr = lang === "fr";
   const out2 = [
-    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) de l'\xE9chantillon n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} sample page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+    fr ? `> \u26A0\uFE0F **${redirected.length} page(s) n'ont pas \xE9t\xE9 enregistr\xE9es** \u2014 le navigateur n'est pas rest\xE9 sur l'adresse demand\xE9e. Les enregistrer aurait d\xE9crit un autre \xE9cran sous le nom demand\xE9. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.` : `> \u26A0\uFE0F **${redirected.length} page(s) were not recorded** \u2014 the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
     "",
     fr ? "| Page | Demand\xE9 | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
     "| --- | --- | --- | --- |"
@@ -59019,12 +59019,23 @@ function nameFromUrl(url) {
   if (!words) return "Accueil";
   return words.charAt(0).toUpperCase() + words.slice(1);
 }
+function canonicalUrl(url) {
+  try {
+    const u = new URL(url);
+    u.hash = "";
+    u.pathname = u.pathname.replace(/(^|\/)index\.x?html?$/i, "$1");
+    return u.href;
+  } catch {
+    return url;
+  }
+}
 async function crawlUrls(start2, opts) {
   const depth = opts.depth ?? 1;
   const max = opts.max ?? 50;
   const order = [];
-  const seen = /* @__PURE__ */ new Set([start2]);
-  const queue = [{ url: start2, d: 0 }];
+  const first = canonicalUrl(start2);
+  const seen = /* @__PURE__ */ new Set([first]);
+  const queue = [{ url: first, d: 0 }];
   while (queue.length > 0 && order.length < max) {
     const { url, d } = queue.shift();
     order.push(url);
@@ -59036,9 +59047,10 @@ async function crawlUrls(start2, opts) {
       continue;
     }
     for (const link of extractLinks(html, url)) {
-      if (seen.has(link)) continue;
-      seen.add(link);
-      queue.push({ url: link, d: d + 1 });
+      const canon = canonicalUrl(link);
+      if (seen.has(canon)) continue;
+      seen.add(canon);
+      queue.push({ url: canon, d: d + 1 });
     }
   }
   return order;
@@ -60370,6 +60382,7 @@ async function runScanManyLocal(urls, opts) {
   const browser = await launchChromium(chromium);
   const findings = [];
   const snapshots = [];
+  const redirected = [];
   try {
     for (const url of urls) {
       const out2 = await runOnPage(browser, AxeBuilder, url, false, {
@@ -60379,6 +60392,17 @@ async function runScanManyLocal(urls, opts) {
         lang,
         snapshot: Boolean(opts.snapshotRoot)
       });
+      if (out2.httpStatus !== void 0 && out2.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out2.landedUrl ?? out2.url,
+          reason: "http-status",
+          status: out2.httpStatus
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out2, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out2, url) : void 0;
       if (id) snapshots.push(id);
@@ -60393,7 +60417,8 @@ async function runScanManyLocal(urls, opts) {
     date: today(),
     findings,
     testedScs: localTestedScs(interact),
-    ...snapshots.length ? { snapshots } : {}
+    ...snapshots.length ? { snapshots } : {},
+    ...redirected.length ? { redirected } : {}
   };
 }
 async function runSampleScanLocal(pages, opts) {

package/src/crawl.ts

@@ -83,6 +83,28 @@ export function nameFromUrl(url: string): string {
   return words.charAt(0).toUpperCase() + words.slice(1);
 }
 
+/** `/index.html` and `/` are the same document on every conventional server, and a crawl
+ *  reaches both: the entry point is `/` while the site's own nav links to `/index.html`.
+ *  Left distinct they become two pages in the deliverable — the same screen audited twice,
+ *  two identical columns in the grid, and its criteria weighted double in every per-page
+ *  aggregate. Measured on a three-page test site: four pages reported, two of them the home
+ *  page.
+ *
+ *  Only the DIRECTORY-INDEX filenames, and only as a whole path segment. Whatever else a
+ *  server may alias is its own business: guessing there would merge two pages that really
+ *  are different, and a page merged away is a page nobody audits — the worse error of the
+ *  two, and a silent one. */
+export function canonicalUrl(url: string): string {
+  try {
+    const u = new URL(url);
+    u.hash = "";
+    u.pathname = u.pathname.replace(/(^|\/)index\.x?html?$/i, "$1");
+    return u.href;
+  } catch {
+    return url; // not a URL — the caller's own string is the best identity available
+  }
+}
+
 export interface CrawlOpts {
   fetchHtml: (url: string) => Promise<string>;
   depth?: number;
@@ -95,8 +117,9 @@ export async function crawlUrls(start: string, opts: CrawlOpts): Promise<string[
   const depth = opts.depth ?? 1;
   const max = opts.max ?? 50;
   const order: string[] = [];
-  const seen = new Set<string>([start]);
-  const queue: { url: string; d: number }[] = [{ url: start, d: 0 }];
+  const first = canonicalUrl(start);
+  const seen = new Set<string>([first]);
+  const queue: { url: string; d: number }[] = [{ url: first, d: 0 }];
 
   while (queue.length > 0 && order.length < max) {
     const { url, d } = queue.shift()!;
@@ -109,9 +132,10 @@ export async function crawlUrls(start: string, opts: CrawlOpts): Promise<string[
       continue;
     }
     for (const link of extractLinks(html, url)) {
-      if (seen.has(link)) continue;
-      seen.add(link);
-      queue.push({ url: link, d: d + 1 });
+      const canon = canonicalUrl(link);
+      if (seen.has(canon)) continue;
+      seen.add(canon);
+      queue.push({ url: canon, d: d + 1 });
     }
   }
   return order;

package/src/pages.ts

@@ -464,13 +464,18 @@ export function pageGridModel(result: AuditResult, derived: PageResult[], standa
  *  there is re-added to the grid with the same basis as one really visited. Removing it is
  *  correct and insufficient: the report would then just be shorter than the sample the
  *  project declares, and a silently shorter report reads as a complete one. So the drop is
- *  stated — which page, where it went, and why — because that is what makes it fixable. */
+ *  stated — which page, where it went, and why — because that is what makes it fixable.
+ *
+ *  The notice says "page(s)", not "sample page(s)": a crawl refuses pages too — a followed
+ *  link that answers 404 — and there is no sample behind those. Naming one in an auditor's
+ *  document that never declared a sample is a small false statement in a document whose
+ *  whole value is that it makes none. */
 export function renderRedirected(redirected: ScanRedirect[], lang: Lang = "en"): string[] {
   const fr = lang === "fr";
   const out: string[] = [
     fr
-      ? `> ⚠️ **${redirected.length} page(s) de l'échantillon n'ont pas été enregistrées** — le navigateur n'est pas resté sur l'adresse demandée. Les enregistrer aurait décrit un autre écran sous le nom demandé. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.`
-      : `> ⚠️ **${redirected.length} sample page(s) were not recorded** — the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
+      ? `> ⚠️ **${redirected.length} page(s) n'ont pas été enregistrées** — le navigateur n'est pas resté sur l'adresse demandée. Les enregistrer aurait décrit un autre écran sous le nom demandé. Elles ne comptent donc ni comme conformes ni comme non conformes : elles manquent.`
+      : `> ⚠️ **${redirected.length} page(s) were not recorded** — the browser did not stay on the address asked for. Recording them would have described another screen under the requested name. They count as neither conforming nor non-conforming: they are missing.`,
     "",
     fr ? "| Page | Demandé | Atteint | Motif |" : "| Page | Requested | Landed | Reason |",
     "| --- | --- | --- | --- |",

package/src/scan-local.ts

@@ -32,7 +32,7 @@ import {
   TEXT_SPACING_PROBE,
 } from "./probes.js";
 import { sampleScope } from "./sample.js";
-import { COLLECT_SNAPSHOT, type CollectedPage } from "./snapshot.js";
+import { COLLECT_SNAPSHOT, type CollectedPage, slugifyPageId } from "./snapshot.js";
 import { today } from "./util.js";
 
 export const LOCAL_ENGINE = "axe-core@playwright (local)";
@@ -784,6 +784,7 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
   const browser = await launchChromium(chromium);
   const findings: DynamicFinding[] = [];
   const snapshots: string[] = [];
+  const redirected: ScanRedirect[] = [];
   try {
     for (const url of urls) {
       const out = await runOnPage(browser, AxeBuilder, url, false, {
@@ -793,6 +794,29 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
         lang,
         snapshot: Boolean(opts.snapshotRoot),
       });
+      // A CRAWLED URL THAT ANSWERED AN ERROR IS NOT A PAGE OF THE SITE.
+      //
+      // The sample scan has refused these since it existed, for the reason its own comment
+      // gives: a page filed under a name nobody looked at is a false conformance claim. The
+      // URL path never applied the same rule, so a crawl that followed a broken link audited
+      // the SERVER'S ERROR PAGE and scored it. Measured on a three-page test site with one
+      // dead link: the deliverable carried a fourth page called « Error response » at 97 %
+      // RGAA, and its criteria counted towards the run.
+      //
+      // Refused rather than merely skipped: `renderRedirected` states the drop — which URL,
+      // what it answered — because a report that is simply SHORTER reads exactly like a
+      // complete one, and a dead link is a fixable bug in the site rather than in the audit.
+      if (out.httpStatus !== undefined && out.httpStatus >= 400) {
+        redirected.push({
+          id: slugifyPageId(url),
+          name: url,
+          requested: url,
+          landed: out.landedUrl ?? out.url,
+          reason: "http-status",
+          status: out.httpStatus,
+        });
+        continue;
+      }
       findings.push(...toDynamicResult(out, url, lang, LOCAL_ENGINE).findings);
       const id = opts.snapshotRoot ? writeRunnerSnapshot(opts.snapshotRoot, out, url) : undefined;
       if (id) snapshots.push(id);
@@ -808,6 +832,7 @@ export async function runScanManyLocal(urls: string[], opts: LocalManyOpts): Pro
     findings,
     testedScs: localTestedScs(interact),
     ...(snapshots.length ? { snapshots } : {}),
+    ...(redirected.length ? { redirected } : {}),
   };
 }
 

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.18.0";
+export const VERSION = "5.18.2";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,