ultra11y 5.22.0 → 5.23.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.22.0",
+      "version": "5.23.0",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.22.0",
+  "version": "5.23.0",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.22.0",
+  "version": "5.23.0",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.22.0";
+const ULTRA11Y_PLUGIN_VERSION = "5.23.0";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/dist/playwright.mjs

@@ -310,7 +310,7 @@ var FOCUS_WHERE_PROBE = `(() => { ${PRELUDE}
   const e = document.activeElement;
   if (!e || e === document.body || e === document.documentElement) return null;
   const key = e.getAttribute && e.getAttribute('data-u11y-f');
-  return { key: key || __sel(e), selector: __sel(e), html: __html(e) };
+  return { key: key || __sel(e), tagged: !!key, selector: __sel(e), html: __html(e) };
 })()`;
 async function probeKeyboardTrap(page, limits = PROBE_DEFAULTS, deadline) {
   const count = await page.evaluate(focusSetupExpr("", limits.maxFocusables));
@@ -325,13 +325,13 @@ async function probeKeyboardTrap(page, limits = PROBE_DEFAULTS, deadline) {
     await page.keyboard.press("Tab");
     const now = await page.evaluate(FOCUS_WHERE_PROBE);
     if (!now) break;
-    if (prev && now.key === prev.key) {
+    if (prev?.tagged && now.tagged && now.key === prev.key) {
       let stuck = true;
       for (let k = 0; k < confirmPresses && stuck; k++) {
         if (deadline?.out()) break;
         await page.keyboard.press("Tab");
         const again = await page.evaluate(FOCUS_WHERE_PROBE);
-        stuck = again !== null && again.key === now.key;
+        stuck = again !== null && again.tagged === true && again.key === now.key;
       }
       if (stuck) {
         hits.push({
@@ -345,7 +345,6 @@ async function probeKeyboardTrap(page, limits = PROBE_DEFAULTS, deadline) {
     if (seen.has(now.key)) break;
     seen.add(now.key);
     prev = now;
-    if (hits.length >= 4) break;
   }
   return hits;
 }
@@ -432,8 +431,7 @@ async function runLiveProbes(page, opts = {}) {
     }
   };
   if (!canResize) skip("1.4.10", "the page object cannot resize its viewport");
-  if (!canType) skip("2.4.7", "the page object exposes no keyboard");
-  if (!canType) skip("2.1.2", "the page object exposes no keyboard");
+  if (!canType) for (const sc of ["2.4.7", "2.1.2"]) skip(sc, "the page object exposes no keyboard");
   if (!canHover) skip("1.4.13", "the page object cannot hover");
   if (!canStyle) skip("1.4.12", "the page object cannot inject a stylesheet");
   if (want("1.4.4")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.22.0",
+  "version": "5.23.0",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/build-pack-rgaa.mjs

@@ -377,6 +377,42 @@ async function main() {
         fr: 'Utilisez dir="rtl" ou dir="ltr" (ou dir="auto"), en accord avec le sens de lecture du texte porté.',
       },
     },
+    // RGAA 8.1 — « chaque page web est-elle définie par un type de document ? » THE criterion
+    // no engine could reach: it maps only onto WCAG 4.1.1, which WCAG 2.2 REMOVED, so
+    // `derivePackResults` classed it out of scope and left it « à évaluer » on every page of
+    // every run — the one criterion of the 106 that no measurement could ever close and only a
+    // model could. Measured on a real RGAA deliverable: a grid that sat at 105/106.
+    //
+    // Its subject is not an element, which is why no element rule could express it: the
+    // doctype is not part of `documentElement.outerHTML`. The collector records it beside the
+    // DOM (SnapshotMeta.doctype), and this DOCUMENT-level rule reads it there.
+    //
+    // WHAT IT DECIDES, AND WHAT IT DOES NOT. Test 8.1.1 (is a doctype present?) is the whole
+    // of it. 8.1.2 (is it valid?) and 8.1.3 (is it before <html>?) are not tested separately
+    // and deliberately so: a doctype the browser PARSED — which is the only kind that reaches
+    // `document.doctype` — is by construction well-formed and positioned ahead of the root
+    // element; one written after <html>, or malformed, is ignored by the parser and arrives
+    // here as the recorded empty string, i.e. as the absence this rule reports. Inventing a
+    // separate "invalid" verdict would mean guessing at legacy but legitimate declarations,
+    // and manufacturing a non-conformity is the one thing this tier must not do.
+    //
+    // NORMATIVE, and signal-gated: it fires only where a capture recorded the field, so a
+    // source file and a pre-field capture are both silence rather than a failure.
+    {
+      id: "doctype-missing",
+      criterion: "8.1",
+      wcag: ["4.1.1"],
+      severity: "majeur",
+      doc: { signal: "doctype", op: "absent" },
+      message: {
+        en: "The captured page declares no document type — the browser parsed no <!DOCTYPE> ahead of <html> (RGAA test 8.1.1).",
+        fr: "La page capturée ne déclare aucun type de document — le navigateur n’a analysé aucun <!DOCTYPE> avant <html> (test RGAA 8.1.1).",
+      },
+      remediation: {
+        en: "Emit <!DOCTYPE html> as the first line of the document, before <html>. A doctype placed after <html>, or malformed, is ignored by the parser and counts as absent.",
+        fr: "Émettez <!DOCTYPE html> en première ligne du document, avant <html>. Un doctype placé après <html>, ou malformé, est ignoré par l’analyseur et compte comme absent.",
+      },
+    },
   ];
   // Wire each rule's namespaced id (`pack:rgaa:<id>`) into the criterion it reports under,
   // so derivePackResults routes its finding onto that criterion through the same