ultra11y 5.43.2 → 5.43.4

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review before commit, push and pull request, plus detailed evidenced Markdown, HTML and per-page WCAG 2.2 AA / RGAA reports in Claude Code.",
-      "version": "5.43.2",
+      "version": "5.43.4",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/SocialGouv/ultra11y",
       "repository": "https://github.com/SocialGouv/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): automatic review before commit, push and pull request, plus detailed evidenced Markdown, HTML and per-page conformance reports in interactive agent sessions.",
-  "version": "5.43.2",
+  "version": "5.43.4",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/SocialGouv/ultra11y",
   "repository": "https://github.com/SocialGouv/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): automatic review before commit, push and pull request, plus detailed evidenced Markdown, HTML and per-page conformance reports in interactive agent sessions.",
-  "version": "5.43.2",
+  "version": "5.43.4",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/SocialGouv/ultra11y",
   "repository": "https://github.com/SocialGouv/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.43.2";
+const ULTRA11Y_PLUGIN_VERSION = "5.43.4";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.43.2",
+  "version": "5.43.4",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join52, relative as relative6, resolve as resolve17, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.43.2";
+var VERSION = "5.43.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64455,7 +64455,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
   }
   for (const it of adj.items) {
     if (!open.has(it.criteriaId)) {
-      blame(it.criteriaId, `criterion ${it.criteriaId}: not open for adjudication \u2014 the engine already decided it, or it is not part of ${adj.standard}`);
+      blame(
+        it.criteriaId,
+        `criterion ${it.criteriaId}: not open for adjudication \u2014 already decided (by the engine or a previous fold), or not part of ${adj.standard}`
+      );
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
@@ -64487,6 +64490,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
     else groundInputs.set(criteriaId, [entry]);
   };
   for (const it of adj.items) {
+    if (!open.has(it.criteriaId)) continue;
     const v = it.verdict;
     if (v === null) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
@@ -64506,10 +64510,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0 && v === "C") {
+      } else if (cites.length === 0 && (v === "C" || v === "NA")) {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          v === "C" ? `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])` : `criterion ${it.criteriaId}: a NA verdict on a criterion with evidence must cite it`
         );
       } else if (cites.length > 0) {
         const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);

package/skills/review-a11y/SKILL.md

@@ -3,7 +3,7 @@ name: review-a11y
 description: "Use to REVIEW changed frontend code for accessibility: staged files, a working diff, branch, or PR; prompts such as 'review a11y', 'is this accessible?', or 'anything to fix before merge?'; and hook or CI findings on a change. Run the bundled install-free engine with cross-file JSX/TSX analysis, then adjudicate candidates and return a severity-ranked WCAG 2.2 AA review with file:line fixes, residual rendering risks, and a verdict. Use `ultra11y` instead for whole-repo audits, dated conformance reports, country standards, PRD backlogs, or authoring accessible markup."
 license: MIT
 metadata:
-  version: 5.43.2
+  version: 5.43.4
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join52, relative as relative6, resolve as resolve17, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.43.2";
+var VERSION = "5.43.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64455,7 +64455,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
   }
   for (const it of adj.items) {
     if (!open.has(it.criteriaId)) {
-      blame(it.criteriaId, `criterion ${it.criteriaId}: not open for adjudication \u2014 the engine already decided it, or it is not part of ${adj.standard}`);
+      blame(
+        it.criteriaId,
+        `criterion ${it.criteriaId}: not open for adjudication \u2014 already decided (by the engine or a previous fold), or not part of ${adj.standard}`
+      );
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
@@ -64487,6 +64490,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
     else groundInputs.set(criteriaId, [entry]);
   };
   for (const it of adj.items) {
+    if (!open.has(it.criteriaId)) continue;
     const v = it.verdict;
     if (v === null) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
@@ -64506,10 +64510,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0 && v === "C") {
+      } else if (cites.length === 0 && (v === "C" || v === "NA")) {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          v === "C" ? `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])` : `criterion ${it.criteriaId}: a NA verdict on a criterion with evidence must cite it`
         );
       } else if (cites.length > 0) {
         const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);

package/skills/ultra11y/SKILL.md

@@ -3,7 +3,7 @@ name: ultra11y
 description: "Use to AUDIT a repository, site, or page against WCAG 2.2 AA or a country standard such as RGAA; produce a dated conformance report, criterion grid, PRD backlog, or tickets; AUTHOR accessible markup; fix accessibility; or wire a repo gate and rendered-DOM capture pipeline. The bundled install-free engine runs 93 static checks tied to success criteria, while the agent adjudicates judgment criteria and routes rendering criteria to browser scans; check/verify reject invented non-conformities. Use `review-a11y` instead for a review scoped only to a diff, branch, or PR."
 license: MIT
 metadata:
-  version: 5.43.2
+  version: 5.43.4
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/references/orchestrators.md

@@ -59,7 +59,9 @@ $ENGINE verify --manual --in "$RUN/audit-latest.json" --out "$RUN" --json
 
 # 4. FOLD — partial by default: every verdict the gate accepts lands, every refusal is named
 #    in `rejectedCriteria[]` / `issues[]`, and a criterion absent from the file is refused as a
-#    coverage gap. Exit 1 only when nothing landed. `--strict` makes it all-or-nothing (exit 1
+#    coverage gap. A verdict for a criterion a previous fold already decided is refused too
+#    (« not open for adjudication »), so re-applying a file on the written-back audit is safe.
+#    Exit 1 only when nothing landed. `--strict` makes it all-or-nothing (exit 1
 #    on any refusal, audit left untouched).
 $ENGINE verify --apply "$RUN/ADJUDICATE.verdicts.json" --in "$RUN/audit-latest.json" --out "$RUN" --json
 

package/skills/ultra11y/references/verify.md

@@ -87,7 +87,10 @@ Fold the verdicts back FAIL-CLOSED:
 node scripts/ultra11y.mjs verify --apply ADJUDICATE.todo.json --in audit.json --out .
 ```
 It rejects a null verdict, a `C`/`NA` without a `justification`, an `NC` without a groundable
-finding, a `manual` without a `reason`, or any uncovered residual criterion. Agent `NC`s become
+finding, a `manual` without a `reason`, or any uncovered residual criterion. A verdict for a
+criterion that is no longer open — one a previous fold already decided — is likewise refused by
+name (« not open for adjudication »), never re-applied: re-folding the same file on the
+written-back audit answers `ok: false` with that criterion in `rejectedCriteria[]`. Agent `NC`s become
 real `agent:<sc>` findings that re-render in the report's §2 and re-enter the verify worklist;
 `report`/`prd` re-render with the adjudicated statuses; §5 shrinks to only still-`manual` items.
 

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join52, relative as relative6, resolve as resolve17, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.43.2";
+var VERSION = "5.43.4";
 var SCHEMA_VERSION = 2;
 var INAPPLICABLE_STATUS = "C";
 
@@ -64455,7 +64455,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
   }
   for (const it of adj.items) {
     if (!open.has(it.criteriaId)) {
-      blame(it.criteriaId, `criterion ${it.criteriaId}: not open for adjudication \u2014 the engine already decided it, or it is not part of ${adj.standard}`);
+      blame(
+        it.criteriaId,
+        `criterion ${it.criteriaId}: not open for adjudication \u2014 already decided (by the engine or a previous fold), or not part of ${adj.standard}`
+      );
     }
   }
   const groundInputs = /* @__PURE__ */ new Map();
@@ -64487,6 +64490,7 @@ function applyAdjudication(audit2, adj, opts = {}) {
     else groundInputs.set(criteriaId, [entry]);
   };
   for (const it of adj.items) {
+    if (!open.has(it.criteriaId)) continue;
     const v = it.verdict;
     if (v === null) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
@@ -64506,10 +64510,10 @@ function applyAdjudication(audit2, adj, opts = {}) {
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion \u2014 record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`
           );
         }
-      } else if (cites.length === 0 && v === "C") {
+      } else if (cites.length === 0 && (v === "C" || v === "NA")) {
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])`
+          v === "C" ? `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, \u2026}])` : `criterion ${it.criteriaId}: a NA verdict on a criterion with evidence must cite it`
         );
       } else if (cites.length > 0) {
         const anchors = it.evidence.flatMap((e) => [`${e.file}:${e.line}`, ...e.alsoAt ?? []]);

package/skills/ultra11y/templates/gitlab-ci.yml

@@ -27,7 +27,7 @@ variables:
   ULTRA11Y_LANG: en
   # Exact by default: a CI report must say which engine produced it. The release script keeps
   # this pin aligned with the package version; override only for a deliberate upgrade test.
-  ULTRA11Y_VERSION: '5.43.2'
+  ULTRA11Y_VERSION: '5.43.4'
   # Batches of 8 amortise the prompt; each accepted verdict is checkpointed before the next
   # batch, and later passes receive only the residue.
   ULTRA11Y_GRAIN: batch

package/src/adjudicate.ts

@@ -1016,7 +1016,10 @@ export function applyAdjudication(
   // citation, no normativeRef. Adjudication may only ever decide what the engine left open.
   for (const it of adj.items) {
     if (!open.has(it.criteriaId)) {
-      blame(it.criteriaId, `criterion ${it.criteriaId}: not open for adjudication — the engine already decided it, or it is not part of ${adj.standard}`);
+      blame(
+        it.criteriaId,
+        `criterion ${it.criteriaId}: not open for adjudication — already decided (by the engine or a previous fold), or not part of ${adj.standard}`,
+      );
     }
   }
 
@@ -1064,6 +1067,12 @@ export function applyAdjudication(
     else groundInputs.set(criteriaId, [entry]);
   };
   for (const it of adj.items) {
+    // A surplus verdict is already blamed above (« not open for adjudication ») and the fold
+    // below records nothing for it. Gating it further would read `it.evidence` — which
+    // `hydrateAdjudication` deliberately did not restore, the criterion being decided is WHY the
+    // item is surplus — so the gate crashed on `undefined.length` instead of refusing. The blame
+    // above IS the refusal; there is nothing left to validate.
+    if (!open.has(it.criteriaId)) continue;
     const v = it.verdict;
     if (v === null) {
       blame(it.criteriaId, `criterion ${it.criteriaId}: unadjudicated (verdict is null)`);
@@ -1094,19 +1103,21 @@ export function applyAdjudication(
             `criterion ${it.criteriaId}: a C verdict needs evidence to cite, and none was harvested for this criterion — record "manual" (reason "undecidable"), or "NA" if nothing in scope is concerned`,
           );
         }
-      } else if (cites.length === 0 && v === "C") {
-        // Only a `C` must cite. A `C` says "everything here conforms", so it has to name what
-        // it cleared; an `NA` says "none of this is what the criterion is about", and there is
-        // nothing to clear — asking it to cite the very elements it just ruled out of scope is
-        // a contradiction, and one the engine does not hold ITSELF to: an engine-proved NA
-        // (src/audit.ts subjectMatterReason) carries a justification naming what was searched
-        // for, and no citations at all. Measured on a real run, six criteria were refused for
-        // this alone, each of them an honest NA.
+      } else if (cites.length === 0 && (v === "C" || v === "NA")) {
+        // Either clearing verdict must cite. A `C` says "everything here conforms" and a `NA`
+        // says "none of this is what the criterion is about" — both rule on the harvested
+        // evidence, and the contract the filler was given (adjudicationContract, echoed by the
+        // judge schema and the brief) already requires citations[] whenever evidence was
+        // presented: "to say which of those items fall outside the criterion's scope". The
+        // fold used to enforce only the `C` half, so a bare NA cleared shown evidence without
+        // naming it — an agent could wave what it had been shown out of scope with a sentence.
         //
         // The justification is what keeps an NA falsifiable, and it is still required above.
         blame(
           it.criteriaId,
-          `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, …}])`,
+          v === "C"
+            ? `criterion ${it.criteriaId}: a C verdict must cite at least one of the ${it.evidence.length} evidence item(s) it was shown (citations: [{file, line, …}])`
+            : `criterion ${it.criteriaId}: a NA verdict on a criterion with evidence must cite it`,
         );
       } else if (cites.length > 0) {
         // Each citation must name evidence THIS item carried. Grounding alone would only

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.43.2";
+export const VERSION = "5.43.4";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,