ultra11y 5.35.2 → 5.35.4

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.35.2",
+      "version": "5.35.4",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.35.2",
+  "version": "5.35.4",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.35.2",
+  "version": "5.35.4",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.35.2";
+const ULTRA11Y_PLUGIN_VERSION = "5.35.4";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.35.2",
+  "version": "5.35.4",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join53, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.35.2";
+var VERSION = "5.35.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64642,7 +64642,6 @@ function stepSummary(result, opts = {}) {
   const all = findingsForStandard(result, standard);
   if (!all.length) {
     out2.push(s.none, "");
-    out2.push(perPageTable(result, standard, lang));
     return out2.join("\n");
   }
   const grouped = groupFindings(all, standard, lang, baseDir);
@@ -64653,7 +64652,6 @@ function stepSummary(result, opts = {}) {
   out2.push("");
   const unanchored = all.filter((f) => isUrl2(f.file)).length;
   if (unanchored) out2.push(`> ${s.unanchored(unanchored)}`, "");
-  out2.push(perPageTable(result, standard, lang));
   return out2.join("\n");
 }
 function reportSectionsBody(result, standard, lang, budget, prefer) {
@@ -64721,43 +64719,6 @@ function prComment(result, opts = {}) {
   while (rows > 0 && sizeOf(assemble(rows)) > COMMENT_LIMIT) rows--;
   return assemble(rows);
 }
-function perPageTable(result, standard = CORE2, lang = "en") {
-  const s = S[lang];
-  const scope = pagesOf(result);
-  if (!scope.length) return "";
-  attributePages(result, scope);
-  const derived = derivePages(result, scope);
-  return [
-    `### ${s.perPage}`,
-    "",
-    ...scoreboardTable(result, derived, standard, s, lang),
-    "",
-    ...basisCaveats(result, derived, standard, s, lang),
-    ...fullGridBlock(result, derived, standard, s, lang),
-    "",
-    ...derived.flatMap((pg) => [...namedCriteriaBlock(result, pg, standard, s, lang), ""])
-  ].join("\n");
-}
-function namedCriteriaBlock(result, page, standard, s, lang) {
-  const rows = pageCriterionRows(result, page, standard, lang);
-  if (!rows.length) return [];
-  const ids = (status) => rows.filter((r) => r.status === status).map((r) => `\`${r.id}\``);
-  const line = (label, list) => list.length ? [`- **${label}** (${list.length}) : ${list.join(" \xB7 ")}`] : [];
-  return [
-    "<details>",
-    `<summary>${s.pageCriteriaTitle(page.name)}${page.auth ? " \u{1F512}" : ""}</summary>`,
-    // GFM only renders Markdown inside <details> after a blank line; without it the list
-    // ships to the reader as one run-on paragraph.
-    "",
-    // Failures first — that is the work — then what stands, then what nobody has ruled on.
-    ...line(s.nonConformingList, ids("NC")),
-    ...line(s.conformingList, ids("C")),
-    ...line(s.toAssessList, ids("manual")),
-    ...line(s.naList, ids("NA")),
-    "",
-    "</details>"
-  ];
-}
 function scoreboardTable(result, derived, standard, s, lang) {
   const out2 = [
     `| ${s.page} | ${s.basis} | ${s.conformingCol} | ${s.nonConformingCol} | \u{1F534} | \u{1F7E0} | \u{1F7E1} |`,

package/skills/review-a11y/SKILL.md

@@ -3,7 +3,7 @@ name: review-a11y
 description: "Use to REVIEW changed frontend code for accessibility: staged files, a working diff, branch, or PR; prompts such as 'review a11y', 'is this accessible?', or 'anything to fix before merge?'; and hook or CI findings on a change. Run the bundled install-free engine with cross-file JSX/TSX analysis, then adjudicate candidates and return a severity-ranked WCAG 2.2 AA review with file:line fixes, residual rendering risks, and a verdict. Use `ultra11y` instead for whole-repo audits, dated conformance reports, country standards, PRD backlogs, or authoring accessible markup."
 license: MIT
 metadata:
-  version: 5.35.2
+  version: 5.35.4
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join53, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.35.2";
+var VERSION = "5.35.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64642,7 +64642,6 @@ function stepSummary(result, opts = {}) {
   const all = findingsForStandard(result, standard);
   if (!all.length) {
     out2.push(s.none, "");
-    out2.push(perPageTable(result, standard, lang));
     return out2.join("\n");
   }
   const grouped = groupFindings(all, standard, lang, baseDir);
@@ -64653,7 +64652,6 @@ function stepSummary(result, opts = {}) {
   out2.push("");
   const unanchored = all.filter((f) => isUrl2(f.file)).length;
   if (unanchored) out2.push(`> ${s.unanchored(unanchored)}`, "");
-  out2.push(perPageTable(result, standard, lang));
   return out2.join("\n");
 }
 function reportSectionsBody(result, standard, lang, budget, prefer) {
@@ -64721,43 +64719,6 @@ function prComment(result, opts = {}) {
   while (rows > 0 && sizeOf(assemble(rows)) > COMMENT_LIMIT) rows--;
   return assemble(rows);
 }
-function perPageTable(result, standard = CORE2, lang = "en") {
-  const s = S[lang];
-  const scope = pagesOf(result);
-  if (!scope.length) return "";
-  attributePages(result, scope);
-  const derived = derivePages(result, scope);
-  return [
-    `### ${s.perPage}`,
-    "",
-    ...scoreboardTable(result, derived, standard, s, lang),
-    "",
-    ...basisCaveats(result, derived, standard, s, lang),
-    ...fullGridBlock(result, derived, standard, s, lang),
-    "",
-    ...derived.flatMap((pg) => [...namedCriteriaBlock(result, pg, standard, s, lang), ""])
-  ].join("\n");
-}
-function namedCriteriaBlock(result, page, standard, s, lang) {
-  const rows = pageCriterionRows(result, page, standard, lang);
-  if (!rows.length) return [];
-  const ids = (status) => rows.filter((r) => r.status === status).map((r) => `\`${r.id}\``);
-  const line = (label, list) => list.length ? [`- **${label}** (${list.length}) : ${list.join(" \xB7 ")}`] : [];
-  return [
-    "<details>",
-    `<summary>${s.pageCriteriaTitle(page.name)}${page.auth ? " \u{1F512}" : ""}</summary>`,
-    // GFM only renders Markdown inside <details> after a blank line; without it the list
-    // ships to the reader as one run-on paragraph.
-    "",
-    // Failures first — that is the work — then what stands, then what nobody has ruled on.
-    ...line(s.nonConformingList, ids("NC")),
-    ...line(s.conformingList, ids("C")),
-    ...line(s.toAssessList, ids("manual")),
-    ...line(s.naList, ids("NA")),
-    "",
-    "</details>"
-  ];
-}
 function scoreboardTable(result, derived, standard, s, lang) {
   const out2 = [
     `| ${s.page} | ${s.basis} | ${s.conformingCol} | ${s.nonConformingCol} | \u{1F534} | \u{1F7E0} | \u{1F7E1} |`,

package/skills/ultra11y/SKILL.md

@@ -3,7 +3,7 @@ name: ultra11y
 description: "Use to AUDIT a repository, site, or page against WCAG 2.2 AA or a country standard such as RGAA; produce a dated conformance report, criterion grid, PRD backlog, or tickets; AUTHOR accessible markup; fix accessibility; or wire a repo gate and rendered-DOM capture pipeline. The bundled install-free engine runs 81 static checks tied to success criteria, while the agent adjudicates judgment criteria and routes rendering criteria to browser scans; check/verify reject invented non-conformities. Use `review-a11y` instead for a review scoped only to a diff, branch, or PR."
 license: MIT
 metadata:
-  version: 5.35.2
+  version: 5.35.4
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup
@@ -249,8 +249,9 @@ Domain knowledge first, then the tooling. Read the one that matches the question
   A client-rendered SPA exposes no routes in its served HTML — use a sitemap there; read
   **`references/dynamic.md`**.
 - **"Audit these URLs page by page, in CI"** → the shipped Action takes `urls`, `sitemap`,
-  `crawl` or `sample`, snapshots every page it visits, writes the per-page dossiers into its
-  artifact and adds a per-page scoreboard to the job summary and the PR comment; read
+  `crawl` or `sample`, snapshots every page it visits and writes the per-page dossiers into its
+  artifact. The ordinary job summary stays run-level; request a `pages`/`full` PR comment when
+  a page scoreboard is wanted; read
   **`references/ci.md`**.
 - **"Nobody is here to rule on the judgment criteria"** → `judge --in audits/audit-latest.json
   --standard rgaa [--apply]` adjudicates them with a model, for a run with no coding agent in

package/skills/ultra11y/references/ci.md

@@ -334,9 +334,8 @@ What the projection guarantees:
 
 Advanced Security is not available on every plan. This mode writes
 `::error file=…,line=…,col=…,title=…::` workflow commands to **stdout**, which every GitHub
-plan renders inline on the diff, and appends a Markdown job summary to
-`$GITHUB_STEP_SUMMARY` (severity table, and the per-page synthesis once a page sample has
-been scanned and merged). With no `$GITHUB_STEP_SUMMARY` set, the summary goes to stderr so a
+plan renders inline on the diff, and appends a compact Markdown job summary to
+`$GITHUB_STEP_SUMMARY`. With no `$GITHUB_STEP_SUMMARY` set, the summary goes to stderr so a
 local run still shows it.
 
 The GitHub summary deliberately prints **coverage, never a percentage**:
@@ -347,7 +346,10 @@ and the occurrence count is derived from the same projection; a WCAG finding tha
 RGAA criterion non-conformant therefore appears in neither the heading nor an empty table.
 
 URL-keyed findings are **skipped** for annotations — there is no repo line to point at — and
-counted in the summary instead, so they are never silently dropped.
+counted in the summary instead, so they are never silently dropped. The summary deliberately
+stops at the run-level result and distinct non-conformities: the page scoreboard and its
+traffic-light columns live in the explicit `pages`/`full` PR comment and the artifact, not in
+every job summary.
 
 ## Which command to run it from
 
@@ -492,13 +494,16 @@ grid is almost empty and the job reports far less than it measured.
 
 Four surfaces come out of it:
 
-- **The scoreboard**, in the job summary and the sticky PR comment: one row per page with its
-  rate and its blocking/major/minor counts, plus a `basis` column. That column is not
+- **The scoreboard**, in the explicit `pages`/`full` sticky PR comment and the artifact: one
+  row per page with its rate and its blocking/major/minor counts, plus a `basis` column. It is
+  omitted from the ordinary job summary so the run-level result is not buried under a second
+  dashboard. The `basis` column is not
   decoration — a page marked *source* has no snapshot, so its silence is not conformity.
   It appears on a clean run too, which is exactly when a reviewer wants to see *which* pages
   passed.
-- **The criteria, NAMED, under each page** — in the job summary, folded: what conforms, what
-  does not, what nobody has ruled on, by id. Counts are the right shape for a scoreboard and
+- **The criteria, NAMED, under each page** — in the explicit page comment and per-page
+  dossiers: what conforms, what does not, what nobody has ruled on, by id. Counts are the
+  right shape for a scoreboard and
   the wrong one for acting: « 65 / 6 » says nothing about *which* six, and until now the ids
   lived only in an artifact nobody downloads. Every status comes from the same
   `pageCriterionRows` the dossiers render, so the summary and the deliverable cannot disagree.

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join53, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.35.2";
+var VERSION = "5.35.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64642,7 +64642,6 @@ function stepSummary(result, opts = {}) {
   const all = findingsForStandard(result, standard);
   if (!all.length) {
     out2.push(s.none, "");
-    out2.push(perPageTable(result, standard, lang));
     return out2.join("\n");
   }
   const grouped = groupFindings(all, standard, lang, baseDir);
@@ -64653,7 +64652,6 @@ function stepSummary(result, opts = {}) {
   out2.push("");
   const unanchored = all.filter((f) => isUrl2(f.file)).length;
   if (unanchored) out2.push(`> ${s.unanchored(unanchored)}`, "");
-  out2.push(perPageTable(result, standard, lang));
   return out2.join("\n");
 }
 function reportSectionsBody(result, standard, lang, budget, prefer) {
@@ -64721,43 +64719,6 @@ function prComment(result, opts = {}) {
   while (rows > 0 && sizeOf(assemble(rows)) > COMMENT_LIMIT) rows--;
   return assemble(rows);
 }
-function perPageTable(result, standard = CORE2, lang = "en") {
-  const s = S[lang];
-  const scope = pagesOf(result);
-  if (!scope.length) return "";
-  attributePages(result, scope);
-  const derived = derivePages(result, scope);
-  return [
-    `### ${s.perPage}`,
-    "",
-    ...scoreboardTable(result, derived, standard, s, lang),
-    "",
-    ...basisCaveats(result, derived, standard, s, lang),
-    ...fullGridBlock(result, derived, standard, s, lang),
-    "",
-    ...derived.flatMap((pg) => [...namedCriteriaBlock(result, pg, standard, s, lang), ""])
-  ].join("\n");
-}
-function namedCriteriaBlock(result, page, standard, s, lang) {
-  const rows = pageCriterionRows(result, page, standard, lang);
-  if (!rows.length) return [];
-  const ids = (status) => rows.filter((r) => r.status === status).map((r) => `\`${r.id}\``);
-  const line = (label, list) => list.length ? [`- **${label}** (${list.length}) : ${list.join(" \xB7 ")}`] : [];
-  return [
-    "<details>",
-    `<summary>${s.pageCriteriaTitle(page.name)}${page.auth ? " \u{1F512}" : ""}</summary>`,
-    // GFM only renders Markdown inside <details> after a blank line; without it the list
-    // ships to the reader as one run-on paragraph.
-    "",
-    // Failures first — that is the work — then what stands, then what nobody has ruled on.
-    ...line(s.nonConformingList, ids("NC")),
-    ...line(s.conformingList, ids("C")),
-    ...line(s.toAssessList, ids("manual")),
-    ...line(s.naList, ids("NA")),
-    "",
-    "</details>"
-  ];
-}
 function scoreboardTable(result, derived, standard, s, lang) {
   const out2 = [
     `| ${s.page} | ${s.basis} | ${s.conformingCol} | ${s.nonConformingCol} | \u{1F534} | \u{1F7E0} | \u{1F7E1} |`,

package/src/annotate.ts

@@ -3,10 +3,9 @@
 //  • `annotations()` — workflow commands (`::error file=…,line=…::`). Every GitHub plan
 //    renders these inline on the diff, so this is the fallback when SARIF upload is
 //    unavailable (a private repo without Advanced Security).
-//  • `stepSummary()` — the Markdown written to `$GITHUB_STEP_SUMMARY`: the run's headline,
-//    a grouped severity table, and — once the audit carries a page sample — the per-page
-//    synthesis. Long and complete; the step summary has a 1 MiB budget and no reader who
-//    reached it arrived by accident.
+//  • `stepSummary()` — the Markdown written to `$GITHUB_STEP_SUMMARY`: the run's headline
+//    and grouped severity table. The page-by-page scoreboard is deliberately absent: its
+//    traffic-light columns duplicated the artifact and buried the run-level result.
 //  • `prComment()` — the DIGEST posted on the pull request. A different document, not a
 //    truncation of the one above: a reviewer scanning a PR needs the verdict, the coverage
 //    and the handful of distinct defects, then a link. Posting the full summary there is how
@@ -493,9 +492,6 @@ export function stepSummary(result: AuditResult, opts: AnnotateOptions = {}): st
 
   if (!all.length) {
     out.push(s.none, "");
-    // Still show the scoreboard: a clean run over five pages is exactly when a reviewer
-    // wants to see WHICH five, and how much of each was actually decided.
-    out.push(perPageTable(result, standard, lang));
     return out.join("\n");
   }
 
@@ -509,7 +505,6 @@ export function stepSummary(result: AuditResult, opts: AnnotateOptions = {}): st
   const unanchored = all.filter((f) => isUrl(f.file)).length;
   if (unanchored) out.push(`> ${s.unanchored(unanchored)}`, "");
 
-  out.push(perPageTable(result, standard, lang));
   return out.join("\n");
 }
 

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.35.2";
+export const VERSION = "5.35.4";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,