# v0.6.0 Release Notes

`a11y-shiftleft-cli` v0.6.0 focuses on developer workflow, portable evidence
artifacts, and easier open-source contribution.

## Highlights

- Added `watch` for local development feedback. It watches common source
  folders, reruns the existing check pipeline, refreshes reports, and prints
  fixed/new/remaining finding counts.
- Added `explore --pdf` to generate `reports/exploration.pdf` from the visual
  HTML exploration report.
- Added `dashboard --pdf` to generate a portable PDF copy of the historical
  dashboard.
- Added `ticket export` to create dry-run Jira, Linear, or generic ticket
  drafts from `a11y-report.json` without connecting to external tracker APIs.
- Added dedicated ticket export documentation with Markdown, JSON, Jira, and
  Linear examples.
- Added `explore --wait-ms` and `explore --wait-for-selector` so dynamic pages
  can finish rendering before screenshots and axe scans run.
- Added bounded auto-scroll before dynamic and visual scans so lazy-loaded
  below-the-fold content can appear before axe runs. Use `--no-scroll` for
  unusual pages where scrolling itself triggers unwanted behavior.
- Added automatic full-page screenshot evidence for states with findings, so
  below-the-fold violations appear in the report without an extra CLI flag.
  `--screenshot-full-page` now forces full-page evidence for clean states too.
- Hardened `explore` safe mode with built-in high-risk action blocking for
  account/session actions, payments, cookie consent, camera/photo, microphone,
  location, notifications, uploads, and sharing controls.
- Added cookie isolation between explored states so one replayed action does
  not silently change later exploration states.
- Added exact screenshot deduplication. Pixel-identical state images are stored
  once and duplicate report cards link to shared visual evidence.
- Expanded cookie safety from button-label matching to consent-banner context,
  preventing short controls such as `Accept` or `OK` from changing consent.
- Improved `exploration.html` with larger screenshots, compact exploration
  details, and an annotated screenshot view that keeps issue frames visible
  while inspecting a larger screenshot.
- Replaced stacked gray screenshot overlays with severity-colored card accents
  and annotations: red for critical, orange for warning, blue for info, and
  green for states with no automated findings.
- Fixed annotation drift in the expanded screenshot view by stabilizing fonts
  and motion, measuring elements immediately before capture, and anchoring
  overlays to the rendered image instead of the outer lightbox container.
- Added structured `color-contrast` evidence with measured and required ratios,
  foreground/background swatches, font metadata, and deterministic suggestions
  for minimum, recommended, and enhanced text contrast while preserving the
  current background.
- Improved contributor onboarding with issue templates, a pull request
  template, clearer `CONTRIBUTING.md`, and a seed script for five
  beginner-friendly `good first issue` tasks.
- Updated framework, CI, ADA Title II, and Section 508 recipes with clearer
  dev server URL guidance.
- Made PR report comments optional when GitHub blocks comment permissions for
  forked pull requests; the report artifact still uploads.

## Install

```bash
npm install --save-dev a11y-shiftleft-cli
npx playwright install chromium
npx a11y-shiftleft init --framework auto --gitignore
```

## Watch Mode

Run checks repeatedly while coding:

```bash
npx a11y-shiftleft watch --url http://localhost:5173 --out reports/watch
```

Use `--static` for faster lint-style feedback:

```bash
npx a11y-shiftleft watch --static --out reports/watch
```

## PDF Reports

Export the visual exploration report as PDF:

```bash
npx a11y-shiftleft explore --url http://localhost:5173 --depth 2 --pdf --out reports
```

Export the historical dashboard as PDF:

```bash
npx a11y-shiftleft dashboard --reports reports --pdf
```

PDF files are portable evidence artifacts for reviews, tickets, and internal
follow-up. They do not certify WCAG, ADA, or Section 508 compliance.

## Safer Visual Exploration

Wait for async UI before taking screenshots:

```bash
npx a11y-shiftleft explore \
  --url http://localhost:5173 \
  --wait-for-selector "[data-page-ready]" \
  --wait-ms 1000 \
  --out reports
```

Use safe mode defaults for CI and pull requests. `explore` now blocks
high-risk actions across common languages and isolates cookies between replayed
states by default.

## Ticket Drafts

Create reviewable remediation ticket drafts:

```bash
npx a11y-shiftleft ticket export \
  --report reports/a11y-report.json \
  --tracker linear \
  --out reports/a11y-tickets.md
```

The first version is intentionally dry-run only. It groups findings by severity,
rule, page, and target, then writes Markdown or JSON for team review.

## Notes

- Generated PDFs and ticket drafts should usually stay out of git.
- `ticket export` does not require Jira or Linear tokens.
- The default local Node on some machines may still be old. Use Node.js 22 for
  contributor workflows:

```bash
nvm use 22
```