ultra11y 5.9.1 → 5.9.2

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "ultra11y",
       "source": "./",
       "description": "Automatic accessibility review of the code under change before every commit, push and pull request, plus full WCAG 2.2 AA / RGAA audits and conformance deliverables on demand.",
-      "version": "5.9.1",
+      "version": "5.9.2",
       "author": { "name": "maxgfr" },
       "homepage": "https://github.com/maxgfr/ultra11y",
       "repository": "https://github.com/maxgfr/ultra11y",

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.9.1",
+  "version": "5.9.2",
   "author": { "name": "maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultra11y",
   "description": "Accessibility for WCAG 2.2 AA and country standards (RGAA…): an automatic review of the code under change before every commit, push and pull request, plus full audits and conformance deliverables on demand.",
-  "version": "5.9.1",
+  "version": "5.9.2",
   "author": { "name": "maxgfr", "url": "https://github.com/maxgfr" },
   "homepage": "https://github.com/maxgfr/ultra11y",
   "repository": "https://github.com/maxgfr/ultra11y",

package/.opencode/plugins/ultra11y.js

@@ -27,7 +27,7 @@ import { fileURLToPath } from "node:url";
 // Ownership marker: `ultra11y install --opencode` refuses to overwrite a plugin file that
 // does not carry it, so a user's own ultra11y.js is never clobbered.
 const ULTRA11Y_OPENCODE_PLUGIN = "ULTRA11Y_OPENCODE_PLUGIN";
-const ULTRA11Y_PLUGIN_VERSION = "5.9.1";
+const ULTRA11Y_PLUGIN_VERSION = "5.9.2";
 
 const here = dirname(fileURLToPath(import.meta.url));
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra11y",
-  "version": "5.9.1",
+  "version": "5.9.2",
   "description": "Audit HTML/CSS/JSX against WCAG 2.2 AA and produce a dated compliance report, or author/review accessible markup (native-HTML-first). A skills.sh agent skill: an install-free static engine (bundled, no npm install) plus the agent's judgment, with check/verify gates against hallucinated non-conformities, and pluggable in-repo standards packs (RGAA France first; Section 508 & EN 301 549 next).",
   "type": "module",
   "packageManager": "pnpm@10.33.0",

package/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.9.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {

package/skills/review-a11y/SKILL.md

@@ -5,7 +5,7 @@ when_to_use: "Invoke WITHOUT being asked whenever changed front-end code should
 allowed-tools: Bash(node ${CLAUDE_SKILL_DIR}/scripts/ultra11y.mjs *), Read, Grep, Glob
 license: MIT
 metadata:
-  version: 5.9.1
+  version: 5.9.2
 ---
 
 # review-a11y — accessibility review of changed code

package/skills/review-a11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.9.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {

package/skills/ultra11y/SKILL.md

@@ -4,7 +4,7 @@ description: "Use to AUDIT existing HTML/CSS/JSX against WCAG 2.2 AA accessibili
 when_to_use: "Invoke when the user asks for an accessibility AUDIT or a formal deliverable: audit a repo, site or page against WCAG 2.2 AA or a country standard (RGAA, Section 508, EN 301 549); produce a dated conformance report, a criterion grid, a PRD backlog, or tickets (GitHub/GitLab/Jira); author accessible markup from scratch; wire the repo gate (init --hook/--ci) or a rendered-DOM capture pipeline. For a review of the code UNDER CHANGE (diff, branch, PR), use the `review-a11y` skill instead."
 license: MIT
 metadata:
-  version: 5.9.1
+  version: 5.9.2
 ---
 
 # ultra11y — audit WCAG 2.2 AA and write accessible markup

package/skills/ultra11y/scripts/ultra11y.mjs

@@ -6,7 +6,7 @@ import { join as join51, relative as relative5, resolve as resolve16, sep as sep
 import { fileURLToPath as fileURLToPath5, pathToFileURL as pathToFileURL3 } from "url";
 
 // src/types.ts
-var VERSION = "5.9.1";
+var VERSION = "5.9.2";
 var SCHEMA_VERSION = 2;
 
 // src/audit.ts
@@ -39652,6 +39652,21 @@ var SUBJECTS = {
       (e) => h(d, e, `<html lang="${attr(e, "lang") ?? ""}"> \u2014 is it present, valid, and the language of the content?`, `doclang|${attr(e, "lang") ?? ""}`)
     )
   ),
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) => docs.flatMap(
+    (d) => elementsByTag(d, "iframe", "frame").map(
+      (e) => h(
+        d,
+        e,
+        `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" \u2014 un titre de cadre est-il pr\xE9sent, et d\xE9crit-il le contenu du cadre ?`,
+        `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`
+      )
+    )
+  ),
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) => docs.flatMap(
     (d) => elementsByTag(d, "title").map((e) => h(d, e, `page="${pageOfDoc(d.file) ?? "source"}" <title>${t(e, 80)}</title>`, `doctitle|${t(e, 80)}`))
@@ -39880,6 +39895,9 @@ var PACK_SUBJECTS = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -39960,7 +39978,7 @@ var PACK_SUBJECTS = {
     "13.11": ["pointerHandlers"]
   }
 };
-var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+var EXISTENCE_SUBJECTS = /* @__PURE__ */ new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 var subjectsForSc = (sc) => SC_SUBJECTS[sc] ?? [];
 function subjectsForPackCriterion(standard, id, scs) {
   const own = PACK_SUBJECTS[standard]?.[id];
@@ -58189,10 +58207,12 @@ function writeAdjudication(items, outDir, opts) {
   }
   return { todoPath, mdPath, verdictsPath, itemsDir, count: items.length };
 }
+var PREFILLED_CITATIONS = 3;
 function slimAdjudicationItems(items) {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    return { ...rest, evidence: [] };
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...citations.length ? { citations } : {} };
   });
 }
 function hydrateAdjudication(adj, audit2, opts = {}) {

package/src/adjudicate-subjects.ts

@@ -496,6 +496,23 @@ export const SUBJECTS: Record<string, Subject> = {
       ),
     ),
 
+  // Frames, and the title each one carries. RGAA theme 2 is about nothing else: 2.1 asks
+  // whether every frame HAS a title, 2.2 whether that title is pertinent. Both used to inherit
+  // `aria` from WCAG 4.1.2 and be handed every ARIA attribute in the application — measured on
+  // a real run, the adjudicator answered `undecidable` on both, correctly, because nothing it
+  // had been shown could settle a question about `<iframe title>`.
+  frames: (docs) =>
+    docs.flatMap((d) =>
+      elementsByTag(d, "iframe", "frame").map((e) =>
+        h(
+          d,
+          e,
+          `<${e.tag}> title="${attr(e, "title") ?? ""}" name="${attr(e, "name") ?? ""}" src="${(attr(e, "src") ?? "").slice(0, 60)}" — un titre de cadre est-il présent, et décrit-il le contenu du cadre ?`,
+          `frame|${attr(e, "title") ?? ""}|${attr(e, "src") ?? ""}`,
+        ),
+      ),
+    ),
+
   // The document's title, with the page it belongs to, so "is it pertinent?" is answerable.
   docTitle: (docs) =>
     docs.flatMap((d) =>
@@ -790,6 +807,9 @@ export const PACK_SUBJECTS: Record<string, Record<string, string[]>> = {
     // Theme 6 — links.
     "6.1": ["links"],
     "6.2": ["links"],
+    // Theme 2 — frames. Both criteria are about the frame and its title, and nothing else.
+    "2.1": ["frames"],
+    "2.2": ["frames"],
     // Theme 8 — the document itself. 8.1 maps onto no WCAG 2.2 criterion at all, so the pack
     // is the ONLY place its subject can be named.
     "8.1": ["doctype"],
@@ -907,7 +927,7 @@ export const PACK_SUBJECTS: Record<string, Record<string, string[]>> = {
 // hand-written applicability predicates in src/audit.ts, which are more careful than any
 // subject here and which win outright where they exist. The pack criteria that map onto them
 // inherit the NA through the derivation, so nothing is lost by leaving them out.
-export const EXISTENCE_SUBJECTS: ReadonlySet<string> = new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors"]);
+export const EXISTENCE_SUBJECTS: ReadonlySet<string> = new Set(["images", "tables", "lists", "links", "controls", "autocomplete", "errors", "frames"]);
 
 /** The subjects that decide a success criterion. Empty ⇒ the criterion has none declared,
  *  which `tests/harvest-coverage.test.ts` refuses for any criterion the engine hands over. */

package/src/adjudicate.ts

@@ -1446,12 +1446,33 @@ export function writeAdjudication(
  *  bulk it only has to READ. Every field the fold requires — verdict, justification, reason,
  *  findings, citations, recommendations — is kept, so a filled slim file carries a complete
  *  decision. The evidence comes back at fold time via `hydrateAdjudication`. */
+/** Representatives pre-cited in the skeleton. Three is enough to show the shape and to stand
+ *  for the population; the whole set is in the brief, and `occurrences` travels with each. */
+const PREFILLED_CITATIONS = 3;
+
 export function slimAdjudicationItems(items: AdjudicationItem[]): AdjudicationItem[] {
   return items.map((it) => {
     const { evidence: _evidence, evidenceTruncated: _truncated, ...rest } = it;
-    // `population` and `evidenceComplete` are kept: they are two numbers, not bulk, and they
-    // tell the adjudicator how much of the subject it is actually looking at.
-    return { ...rest, evidence: [] } as AdjudicationItem;
+    // THE CITATIONS ARRIVE FILLED IN.
+    //
+    // This file is the only one a CI adjudicator writes, and it used to arrive with no evidence
+    // and no citations: clearing a criterion meant authoring
+    // `citations: [{file, line, selector, snippet}]` from scratch, by hand, cross-referencing a
+    // separate brief, once per criterion. Measured on a real run: thirty criteria came back `C`
+    // with a considered justification and no citations at all, and the fold refused every one
+    // — « a C verdict must cite at least one of the N evidence item(s) it was shown ». The
+    // agent had read the evidence. It had simply not copied an anchor into a second file.
+    //
+    // Pre-filling decides nothing. The verdict and the justification are still the agent's, and
+    // a `C` still has to survive grounding, the coverage check and the complete-evidence rule.
+    // What it removes is a transcription step that was costing correct verdicts — the same
+    // failure, one level up, as an adjudicator retyping a snippet instead of copying it.
+    //
+    // `population` and `evidenceComplete` are kept for the same reason they always were: they
+    // are two numbers, not bulk, and they tell the adjudicator how much of the subject it is
+    // actually looking at.
+    const citations = it.evidence.slice(0, PREFILLED_CITATIONS).map((e) => ({ ...e }));
+    return { ...rest, evidence: [], ...(citations.length ? { citations } : {}) } as AdjudicationItem;
   });
 }
 

package/src/types.ts

@@ -1,6 +1,6 @@
 // Single source of truth for shared types + the embedded version. sync-version.mjs
 // rewrites VERSION at release time (kept in lockstep with package.json + SKILL.md).
-export const VERSION = "5.9.1";
+export const VERSION = "5.9.2";
 export const SCHEMA_VERSION = 2;
 
 // Lang = the UI FRAME's language — the `L` localization tables each module (report,