ultra11y 5.34.2 → 5.35.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.34.2",
+      "version": "5.35.0",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.34.2",
+  "version": "5.35.0",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.34.2",
+  "version": "5.35.0",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.34.2";
+const ULTRA11Y_PLUGIN_VERSION = "5.35.0";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/README.md

@@ -153,7 +153,7 @@ ultra11y pages    --in <audit.json> --format report [--split page] [--out <dir>]
 ultra11y pages    discover --sitemap <url> | --crawl <url> [--depth <n>] [--max <n>] [--write]   # build the page sample
 ultra11y dev      [--port <n>] [--standard <pack>]   |   dev --next                        # live overlay while you build + dashboard
 ultra11y criteria [<sc>] [--list] [--standard <pack> [--theme <N>]] [--generate] [--json] [--lang auto|en|fr]
-ultra11y judge    --in <audit.json> [--standard <pack>] [--max <n>] [--model <id>] [--apply]   # adjudicate with a model (ANTHROPIC_API_KEY)
+ultra11y judge    --in <audit.json> [--standard <pack>] [--runner api|claude|codex] [--model <id>] [--apply]   # API or local subscription CLI
 ultra11y check    --report <md> [--standard <pack>] [--quiet] [--json]
 ultra11y verify   --report <md> [--standard <pack>] [--semantic] [--apply <verdicts.json>] [--max-verify <n>] [--json]
 ultra11y verify   --report <md> [--conformities <ledger|adjudication.json> | --no-conformities]   # also put the claimed CONFORMITIES on trial
@@ -431,8 +431,22 @@ prompt are `verify --manual`'s own, and the verdicts pass through the **same fai
 an agent's do. An unjustified `C`, an `NC` citing a line that does not resolve, a verdict for a
 criterion nobody asked about, or an incomplete run are all refused — and a rejected
 adjudication leaves the audit untouched. All-`manual` with reasons is accepted, because that is
-a correct answer. It is the **only** part of the tool that takes an API key; without one the
-command explains itself and exits, and nothing else changes.
+a correct answer. Choose the transport explicitly:
+
+```sh
+# Anthropic Messages API
+ANTHROPIC_API_KEY=… ultra11y judge --in audits/audit-latest.json --runner api --apply
+
+# Local CLI subscriptions; each reuses that CLI's existing login
+ultra11y judge --in audits/audit-latest.json --runner claude --apply
+ultra11y judge --in audits/audit-latest.json --runner codex --apply
+```
+
+`--runner cli` remains an alias of `claude` for existing scripts. The Codex runner invokes
+`codex exec` ephemerally, read-only, offline, without repository rules, hooks or user config;
+it uses the model attached to the ChatGPT account unless `--model` is given. Its subscription
+has no per-run dollar-budget flag, so `--max-budget-usd` is rejected for Codex rather than
+pretending to enforce a ceiling. Use `--timeout` and `--max` to bound the local run.
 
 The GitHub Action wires this as `adjudicate: api`, and offers `adjudicate: agent` as the other
 half — the same worklist handed to a `claude-code-action` run, which can **open the cited files**
@@ -442,6 +456,8 @@ never from an input, and **skip themselves when it is absent** — which is exac
 pull request looks like, so the job stays green and the criteria stay « à évaluer ». See
 `references/ci.md` for the cost per run and for `gate-adjudicated`, which lets a model-ruled
 non-conformity fail the build at the price of a red/green that no longer reproduces.
+ChatGPT-subscription authentication stays local: public CI does not receive or manufacture a
+Codex subscription secret.
 
 ### Optional dynamic tier (axe-core)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.34.2",
+  "version": "5.35.0",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",