v0.0.132

Reports can show what passed, score rings tell the truth about color, and the docs get a glossary.

Added

• squirrel audit and squirrel report take --include-passed, which lists the rules that passed after the issues, in every format: each rule with at least one passing check and no warning or error, with how many pages it passed on, site-wide for a site rule, or pages not recorded for a page rule whose passes name no page. On the HTML report it is one closed line under the findings. JSON gets a passedRules array (ruleId, name, category, scope, pages). A report read with --input lists none. Without the flag every format renders exactly as before. See report.

Changed

• Group score rings read by score, not by group. On the HTML report the SEO, Performance, Security and Agents rings, numbers and grades are colored red to green by score, like the health score, so a 45 F looks like one. The group's own color stays on its card's top border and label. Every score ring on the page uses a darker tone of the same red, amber and green bands, so the numbers pass WCAG AA contrast on the white cards.

Fixed

• Copy-to-agent prompts keep site text fenced. (Security.) The HTML report's fix prompts now strip hidden characters and the internal note placeholder before they defuse quote fences, so text from the audited site can no longer piece a fence marker back together and step outside its untrusted block.

Docs

• A glossary. docs.squirrelscan.com/glossary has an A to Z index and 64 short definitions, from canonical URL to llms.txt, each linked to the rules that check it.
• The team page no longer lists SAML, SCIM or verified-domain auto-join as Enterprise features: squirrelscan does not support them today.
• The CI guide now says --fail-on checks each run against your thresholds, not against an earlier audit, and points at squirrel report --regression-since for comparing two audits.