@amityco/social-plus-vise 1.6.0 → 1.8.0

package/CHANGELOG.md

@@ -4,6 +4,50 @@ All notable changes to `@amityco/social-plus-vise` are documented in this file.
 
 The format is loosely based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 1.8.0 — 2026-07-10
+
+### Added
+- **Complete-scan receipts and gates.** Project inspection and platform validators now report bounded scan coverage. A truncated inventory cannot initialize a compliance sidecar, select sensors, or produce a green `vise check`; large monorepos must select the concrete app surface.
+- **Pre-launch release contracts.** Hosted CI now smokes the declared Node 20 minimum, release metadata/docs are regression-tested, and tag publishing uses npm trusted publishing with OIDC, a modern npm CLI, main-ancestry validation, and no long-lived token fallback.
+- **Critical regression coverage.** New tests lock scan truncation, mixed-platform inventory detection, strict sensor selection, bounded command output, descendant cleanup on timeout, block mount proof, and the release workflow contract.
+
+### Changed
+- **CI covers finished work by default.** `vise check --ci` now runs the active gate plus every recorded engagement re-verdict. A previously completed surface that drifted exits `11` even when the active engagement is green; explicit `--all-engagements` remains valid with `--ci`.
+- **Block capabilities require a live mount.** The blocks sidecar is reset to `2026-07-10.vise-blocks-sidecar.v2`. `blocks add --apply` records `pending-mount`; `vise check` counts `providesCapabilities` only while the dependency, touched files, package import, and actual block-symbol usage remain present. `blocks validate` persists `verified` or `invalid` and exits non-zero on failure.
+- **Explicit sensor selection is strict.** A requested `--include` name that does not match a detected sensor returns `invalid-selection` and exits non-zero. Sensor stdout/stderr is bounded, and timeouts terminate the command process group rather than leaving descendants running.
+- **Node.js 20 is the minimum supported runtime.** Package metadata, `vise doctor`, release documentation, and hosted compatibility proof now agree.
+- **The compatibility corpus is reset to the 1.8.0 launch contract.** Experimental pre-launch sidecars are not grandfathered; future published versions must remain backward-readable from this baseline.
+
+### Fixed
+- **Ducati dogfood false positives.** Built-in `{ text }` shorthand payloads no longer look like undeclared custom post types, and comment modules that carry a bare `postId` no longer look like post cards missing their body.
+- **Engagement-aware evidence hygiene.** Matching attestations retained by completed engagement contracts are no longer reported as generic stale files. Off-contract attestations with changed source fingerprints are identified explicitly.
+- **Flutter hosted block dependencies.** Hosted constraints now render as `social_plus_blocks: ^0.1.0`; only local sources render a nested `path:` dependency.
+- **Fixture-symmetry parsing.** The supplementary symmetry gate parses only `failingFixturesByFinding`, so later no-fire maps cannot overwrite the failing fixture associated with a rule.
+
+### Compatibility
+- This is an intentional pre-launch contract hardening release. The stricter scan, sensor, block-mount, Node, CI, and sidecar behaviors differ from the experimental 1.7.0 line, but Vise and Blocks have not launched and have no customer contract to migrate. The release version remains 1.8.0 as requested; the new sidecar schema keeps its independent `.v2` schema identifier.
+
+## 1.7.0 — 2026-07-09
+
+### Added
+- **Day-2 governance: adding features to an app that already uses social.plus is now a first-class, governed flow.**
+  - **Brownfield adoption honesty.** `vise init` on a repo with pre-existing non-green findings surfaces a `brownfield` hint: record `vise baseline .` before writing code, then gate with `vise check --new-only`. A baseline excludes pre-existing *rule findings only* — the requested outcome's completeness checklist and selected capabilities are never baselined, so a baselined repo can't go green without the feature actually built. Baseline files recorded by older versions that carried deliverable entries are ignored and disclosed (`ignored_legacy_deliverable_entries`).
+  - **Engagement ledger.** Initializing a different outcome records the outgoing engagement's final check, contract, and intake to `sp-vise/engagements/<outcome>/` (latest per outcome) and discloses the switch in the init result. `vise status` lists superseded engagements under `previousEngagements`. Replacing a **green** engagement asks for an explicit `--supersede-engagement`.
+  - **Re-verification of finished work.** `vise check --engagement <outcome>` re-verdicts one recorded engagement against the current rules and code (exit `11` on drift, `0` when it holds; `ruleset_upgraded` disclosed). `vise check --all-engagements` runs the normal gate plus re-verdicts of every recorded engagement — active gate non-green keeps its own exit code; active green with a drifted recorded engagement exits `11` (`engagement-drift`). Findings already gating the active engagement are counted once there (`shared_with_active`).
+  - **Attestations are bound to their engagement.** `vise attest` stamps the active outcome; after an outcome switch, a rule-global attestation re-gates (`stale_engagement_attestation`) until re-verified — file-scoped attestations survive the switch because new files re-gate them anyway. Attestations recorded by older versions keep their historical behavior.
+  - **Completed journeys don't dead-end new requests.** After a finished multi-surface journey, `vise init` for a genuinely new outcome now proceeds (recording the completed journey to the ledger) instead of stopping at `workplan-complete`; re-initializing a surface the journey already completed still gets the honest stop.
+  - New skill section — "Adding Features To An App That Already Uses social.plus" — teaches agents both variants (hand-rolled integration and prior governed engagement).
+- **SDK facts: broader capability coverage and deeper model grounding.** `vise sdk-facts` (now listed in the public `vise --help`) gains capability anchors for `community`, `chat`, `livestream` (Room API only), `notification-tray`, and `events` on TypeScript, plus per-platform anchor sets with Flutter coverage for six families (`comments`, `reactions`, `posts`, `users`, `community`, `chat`) — a partially anchored platform's result names its coverage explicitly. Field-level model schemas grew from 6 to 14 TypeScript models (`Amity.Community`, `Amity.Channel`, `Amity.Message`, `Amity.SubChannel`, `Amity.Room`, `Amity.NotificationTrayItem`, `Amity.NotificationTraySeen`, `Amity.Event`), all extraction-grounded with real field names and types.
+- **Development-workspace guard.** Customer-integration commands now recognize the Vise / social.plus blocks development workspace itself: `vise init` refuses with `status: "internal-workspace"` (exit `10`, `--allow-internal-workspace` to override for harness runs), and `inspect`/`plan` attach an advisory warning — so the projectless `vise sdk-facts` persona and the customer persona can't be mixed up silently.
+
+### Fixed
+- **Blocks installer on native projects.** `vise blocks plan`/`add`/`validate` pointed at a project without a package manifest (an iOS or Android app) now return the graceful `needs-review` plan with unsupported-platform stop conditions instead of crashing on a missing `package.json`.
+
+### Compatibility
+- **Additive exit codes.** `10` (`internal-workspace`, init-only) and `11` (`engagement-drift`, only under the new `--engagement`/`--all-engagements` flags). The existing 0–9 exit surface and precedence are unchanged; default `vise check` behavior is unchanged, so pipelines gating on `--ci` or `exitCode === 0` are unaffected.
+- **One intentional init behavior change.** `vise init` replacing a **green** engagement with a different outcome now requires `--supersede-engagement` (exit `7` otherwise); red or in-progress engagements switch as before, and the outgoing engagement's final state is recorded to the ledger either way.
+- **Sidecar additions are additive.** `sp-vise/engagements/` and the new result fields (`brownfield`, `engagement_switch`, `previousEngagements`, `stale_engagement_attestation`) are new; no existing file changes shape. Legacy baselines and attestations continue to parse — with the honesty adjustments disclosed above.
+
 ## 1.6.0 — 2026-07-06
 
 ### Added

package/README.md

@@ -206,7 +206,7 @@ Run `vise <command> --help` for full flags. JSON output is the default for agent
 | `vise plan [path] --request "..." [--summary]` | Grounded implementation plan with intake questions and docs citations; `--summary` prints a compact route/intake view |
 | `vise plan --summary "..."` | Shortcut for quick routing or discovery when the current directory is the repo |
 | `vise plan-harness [path] --request "..."` | Pre-planning step: build the harness around the request |
-| `vise init [path] --request "..." [--answer key=value]` | Write the `sp-vise/` compliance contract once blocking intake is answered; exits 7 (`needs-clarification`) otherwise |
+| `vise init [path] --request "..." [--answer key=value]` | Write the `sp-vise/` compliance contract once blocking intake is answered; exits 7 (`needs-clarification`) otherwise. Refuses to initialize the Vise / social.plus blocks development workspace itself (`status: "internal-workspace"`, exit 10 — use `vise sdk-facts` there, or `--allow-internal-workspace` for an intentional harness run). Replacing a **green** engagement with a different outcome requires `--supersede-engagement` (exit 7 otherwise); the outgoing engagement's final state is recorded to `sp-vise/engagements/` either way |
 | `vise workplan next [path] --request "..."` | For broad social requests: print the next uncompleted surface and its focused commands |
 | `vise workplan status [path] --request "..."` | Show the workplan sequence and completed surfaces; ignores unverifiable or drifted snapshot evidence. If the in-scope surface's live `vise check` is already green, auto-records that one surface (same evidence bar as `workplan complete`) so a working, check-green surface isn't left uncounted |
 | `vise workplan complete [path] --request "..." --surface <id>` | Record a green-checked surface; snapshots evidence plus an integrity manifest under `sp-vise/workplan-snapshots/<surface>/` |
@@ -255,11 +255,13 @@ Everything in this group is local and advisory: no uploads, no `vise check` exit
 | `vise check [path]` | Re-validate against the recorded contract: `green`, `needs-attestation`, `deterministic-failures`, `blocked`, `contract-drift`, `completeness-gap`, `selected-capability-failures`, `no-platform` (no SDK platform detected — reported as a failure, not a vacuous green), or `runtime-proof-waived` |
 | `vise check [path] --ci` | Read-only variant that exits non-zero unless green (for CI) |
 | `vise check [path] --allow-proof-waiver` | Accept an honest `runtime-proof-waived` result (from `vise smoke waive`) as passing (exit 0) instead of blocking; without it a waiver blocks CI by default |
-| `vise check [path] --new-only` | **Brownfield gate.** With a recorded baseline, gate only on findings introduced *since* the baseline (pre-existing ones are reported but excluded). Default `check` always gates on everything |
-| `vise baseline [path]` | Snapshot the current pre-existing findings to `sp-vise/baseline.json` so `check --new-only` can separate legacy debt from new gaps. `vise init --baseline` records it at init time |
+| `vise check [path] --new-only` | **Brownfield gate.** With a recorded baseline, gate only on rule findings introduced *since* the baseline (pre-existing ones are reported but excluded). The outcome's completeness checklist and selected optional capabilities are **never** excluded — they are the engagement's deliverables and gate like a default check. Default `check` always gates on everything |
+| `vise check [path] --engagement <outcome>` | **Re-verdict one recorded engagement** (from `sp-vise/engagements/`) against the current ruleset and code. Exit `11` on drift, `0` when it still holds; never the active engagement's codes. `ruleset_upgraded` discloses when the installed ruleset moved since it was recorded |
+| `vise check [path] --all-engagements` | Run the normal active gate **plus** re-verdicts of every recorded engagement. Active gate non-green → its normal exit code; active green but a recorded engagement drifted → exit `11` (`engagement-drift`). Findings already gating the active engagement are counted once there (`shared_with_active`) |
+| `vise baseline [path]` | Snapshot the current pre-existing rule findings to `sp-vise/baseline.json` so `check --new-only` can separate legacy debt from new gaps. Deliverables (completeness/selected capabilities) are never baselined. Record it right after `vise init`, before writing code — a mid-build baseline would swallow your own findings. `vise init --baseline` records it at init time |
 | `vise validate [path]` | Run the deterministic validators only (no attestation comparison) |
 | `vise sync [path]` | Persist deterministic-pass evidence to `sp-vise/attestations/` |
-| `vise attest [path] --rule <id> --signer host-agent --confidence high --evidence-file evidence.json --rationale "..."` | Record an attestation when a rule passes through architecture the deterministic check can't see |
+| `vise attest [path] --rule <id> --signer host-agent --confidence high --evidence-file evidence.json --rationale "..."` | Record an attestation when a rule passes through architecture the deterministic check can't see. Attestations are bound to the engagement outcome they were reviewed under: after `vise init` switches the sidecar to a different outcome, a rule-global attestation re-gates (`stale_engagement_attestation`) until re-attested — file-scoped attestations survive the switch because new files re-gate them anyway |
 | `vise explain <ruleId>` | Print a rule's rationale, evidence requirements, and remediation |
 | `vise status [path]` | Summarize the current compliance state |
 
@@ -330,6 +332,9 @@ jobs:
 | `4` | Contract drift — recorded rules no longer match the current ruleset |
 | `5` | Baseline capability neither implemented nor opted-out (add it or place `// vise: scope-omit <id> — <reason>`) |
 | `6` | An explicitly selected optional capability failed its source sensors |
+| `8` | No SDK platform detected (`no-platform`) — reported as a failure, never a vacuous green |
+| `9` | Runtime proof waived (`runtime-proof-waived`) — accept explicitly with `--allow-proof-waiver` |
+| `11` | Engagement drift (`--engagement` / `--all-engagements` only): the active gate is green but a recorded engagement re-verdicts non-green — a previously finished surface no longer holds |
 
 ## Compliance Contract
 
@@ -341,6 +346,7 @@ Vise writes local planning, compliance, design, and evidence artifacts under `sp
 | `sp-vise/intake.json` | `vise init` | Request, outcome, intake answers, design-review status |
 | `sp-vise/inspection.json` | `vise init` | Platform, surface, and design signals detected at init |
 | `sp-vise/attestations/*.json` | `vise sync` / `vise attest` | Per-rule evidence: signer, confidence, rationale, source fingerprints for drift detection |
+| `sp-vise/engagements/<outcome>/*.json` | `vise init` (on an outcome switch) | Engagement ledger: the superseded engagement's final check, contract, and intake (latest per outcome) — surfaced by `vise status` as `previousEngagements` |
 | `sp-vise/creative-brief.json` + `creative-brief.md` | `vise creative` | Advisory brief: goals, archetypes, candidate variants (JSON + human-readable) |
 | `sp-vise/candidate-ranking-preview.json` | `vise creative --ranking-preview` | Opt-in local ranking preview for review context; `experience_score: null`, no uploads, no default-order change, no top-1 confidence claim |
 | `sp-vise/creative-selection.json` | `vise creative accept` | Accepted variant and plan/workplan feed-forward context |

package/dist/flow.js

@@ -2,6 +2,12 @@ import { createHash } from "node:crypto";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { sidecarDir } from "./sidecar.js";
+export function completedWorkplanBlocksOutcome(stages, requestedOutcome) {
+    if (!requestedOutcome || requestedOutcome === "unknown") {
+        return true;
+    }
+    return stages.some((stage) => stage.outcome === requestedOutcome);
+}
 export function blueprintDigest(input) {
     const canonical = JSON.stringify({
         path: input.path ?? null,

package/dist/server.js

@@ -5,18 +5,19 @@ import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { sidecarDir as sidecarPath } from "./sidecar.js";
-import { blueprintDigest, readFlowState, readOmittedSurfaces, renderFlowBlueprint, runtimeReadinessForStages, writeFlowBlueprintHtml, writeFlowState, } from "./flow.js";
+import { blueprintDigest, completedWorkplanBlocksOutcome, readFlowState, readOmittedSurfaces, renderFlowBlueprint, runtimeReadinessForStages, writeFlowBlueprintHtml, writeFlowState, } from "./flow.js";
 import { normalizeSolutionPathAnswer } from "./solutionPath.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-import { attestRule, attestRuleTool, checkCompliance, checkComplianceTool, explainRule, explainRuleTool, experienceReportTool, initCompliance, initComplianceTool, recordBaseline, initEngagement, initEngagementTool, listRules, showEngagement, showEngagementTool, statusCompliance, syncCompliance, syncComplianceTool, } from "./tools/compliance.js";
+import { attestRule, attestRuleTool, checkAllEngagements, checkCompliance, checkEngagementReVerdict, checkComplianceTool, explainRule, explainRuleTool, experienceReportTool, initCompliance, initComplianceTool, recordBaseline, initEngagement, initEngagementTool, listRules, showEngagement, showEngagementTool, statusCompliance, syncCompliance, syncComplianceTool, } from "./tools/compliance.js";
 import { designCheckTool, designContrastTool, designExtractTool, designInitTokensTool, designPreviewTool, designReferenceTool } from "./tools/design.js";
 import { getDocPageTool, searchDocsTool } from "./tools/docs.js";
 import { compileExperienceTool } from "./tools/experienceCompiler.js";
 import { experienceSensorsTool } from "./tools/experienceSensors.js";
 import { planHarnessTool } from "./tools/harness.js";
 import { planIntegrationTool } from "./tools/integration.js";
+import { detectInternalWorkspace, internalWorkspaceWarning } from "./tools/internalWorkspace.js";
 import { recordLearningTool, showLearningTool } from "./tools/learning.js";
 import { inspectProjectTool, validateSetupTool } from "./tools/project.js";
 import { resolveRequestTool, suggestPatchTool } from "./tools/resolve.js";
@@ -153,10 +154,17 @@ async function handleCli(args) {
             return "exit";
         }
         if (command === "inspect") {
-            await printToolResult(inspectProjectTool, {
-                repoPath: positionalRepoPath(args.slice(1)),
+            const inspectRepo = positionalRepoPath(args.slice(1));
+            const inspectResult = await inspectProjectTool.call({
+                repoPath: inspectRepo,
                 surfacePath: flagValue(args, "surface") ?? flagValue(args, "surface-path"),
             });
+            const inspectPayload = JSON.parse(inspectResult.content.map((item) => item.text).join("\n"));
+            const inspectWorkspace = await detectInternalWorkspace(inspectRepo);
+            if (inspectWorkspace.isInternalWorkspace) {
+                inspectPayload.internalWorkspaceWarning = internalWorkspaceWarning(inspectWorkspace);
+            }
+            console.log(JSON.stringify(inspectPayload, null, 2));
             return "exit";
         }
         if (command === "creative") {
@@ -300,6 +308,10 @@ async function handleCli(args) {
             const result = await planIntegrationTool.call(input);
             const text = result.content.map((item) => item.text).join("\n");
             const payload = JSON.parse(text);
+            const planWorkspace = await detectInternalWorkspace(positionalRepoPath(args.slice(1)));
+            if (planWorkspace.isInternalWorkspace) {
+                payload.internalWorkspaceWarning = internalWorkspaceWarning(planWorkspace);
+            }
             emitResult("plan", hasFlag(args, "summary") ? planSummary(payload) : payload, args);
             return "exit";
         }
@@ -357,7 +369,7 @@ async function handleCli(args) {
                 surfacePath: flagValue(args, "surface") ?? flagValue(args, "surface-path"),
             });
             const status = toolResultStatus(printed);
-            if (status === "failed" || status === "timed-out") {
+            if (status === "failed" || status === "timed-out" || status === "invalid-selection" || status === "incomplete-analysis") {
                 process.exitCode = 1;
             }
             return "exit";
@@ -449,12 +461,16 @@ async function handleCli(args) {
             if (sub === "validate") {
                 assertOnlyKnownFlags(subArgs, ["block", "surface", "surface-path", "registry", "format"], "blocks validate");
                 assertJsonFormat(subArgs, "blocks validate");
-                console.log(JSON.stringify(await validateBlockInstall({
+                const validation = await validateBlockInstall({
                     repoPath: positionalRepoPath(subArgs),
                     blockId: flagValue(subArgs, "block"),
                     registryPath: requiredFlagValue(subArgs, "registry", "blocks validate requires --registry."),
                     surfacePath: flagValue(subArgs, "surface") ?? flagValue(subArgs, "surface-path"),
-                }), null, 2));
+                });
+                console.log(JSON.stringify(validation, null, 2));
+                if (validation.validationStatus === "failed" || validation.status === "needs-review") {
+                    process.exitCode = 1;
+                }
                 return "exit";
             }
             console.error(`Unknown blocks subcommand: ${sub ?? "(none)"}. Expected "list", "plan", "add", or "validate".`);
@@ -462,9 +478,19 @@ async function handleCli(args) {
             return "exit";
         }
         if (command === "init") {
-            assertOnlyKnownFlags(args, ["request", "surface", "surface-path", "answer", "allow-unresolved-intake", "baseline"], "init");
+            assertOnlyKnownFlags(args, ["request", "surface", "surface-path", "answer", "allow-unresolved-intake", "baseline", "allow-internal-workspace", "supersede-engagement"], "init");
             const initRepo = positionalRepoPath(args.slice(1));
             const initRequest = requiredFlagValue(args, "request", "init requires --request.");
+            const initWorkspace = await detectInternalWorkspace(initRepo);
+            if (initWorkspace.isInternalWorkspace && !hasFlag(args, "allow-internal-workspace")) {
+                console.log(JSON.stringify({
+                    status: "internal-workspace",
+                    ...internalWorkspaceWarning(initWorkspace),
+                    instruction: "Refusing to initialize the compliance sidecar here. If this really is intentional (e.g. a harness run at the workspace root), re-run with --allow-internal-workspace.",
+                }, null, 2));
+                process.exitCode = 10;
+                return "exit";
+            }
             const initWorkplanPlan = await workplanPlan(initRepo, initRequest, args);
             const { sequence: initSequence, omitted: initOmitted, canonicalRequest: initCanonicalRequest } = await activeBlueprint(initRepo, initRequest, initWorkplanPlan);
             if (initSequence.length >= 2 && initWorkplanPlan.platform !== "unknown") {
@@ -474,15 +500,16 @@ async function handleCli(args) {
                     process.exitCode = 7;
                     return "exit";
                 }
-                const workplanInitGate = await requireNextWorkplanSurfaceInit(initRepo, initCanonicalRequest, initSequence, keyValueFlag(args, "answer"), initOmitted, initRequest);
+                const workplanInitGate = await requireNextWorkplanSurfaceInit(initRepo, initCanonicalRequest, initSequence, keyValueFlag(args, "answer"), initOmitted, initRequest, initWorkplanPlan.outcome);
                 if (workplanInitGate) {
                     console.log(JSON.stringify(workplanInitGate, null, 2));
                     process.exitCode = 7;
                     return "exit";
                 }
             }
-            const result = await initCompliance(initRepo, initRequest, flagValue(args, "surface") ?? flagValue(args, "surface-path"), keyValueFlag(args, "answer"), { allowUnresolvedIntake: hasFlag(args, "allow-unresolved-intake") });
-            if (result.status === "needs-clarification" && typeof result.exitCode === "number") {
+            const result = await initCompliance(initRepo, initRequest, flagValue(args, "surface") ?? flagValue(args, "surface-path"), keyValueFlag(args, "answer"), { allowUnresolvedIntake: hasFlag(args, "allow-unresolved-intake"), baselinePlanned: hasFlag(args, "baseline"), supersedeEngagement: hasFlag(args, "supersede-engagement") });
+            if ((result.status === "needs-clarification" || result.status === "needs-engagement-supersede-confirmation") &&
+                typeof result.exitCode === "number") {
                 process.exitCode = result.exitCode;
             }
             if (hasFlag(args, "baseline") && result.status === "initialized") {
@@ -492,9 +519,26 @@ async function handleCli(args) {
             return "exit";
         }
         if (command === "check") {
-            assertOnlyKnownFlags(args, ["ci", "format", "new-only", "allow-proof-waiver"], "check");
+            assertOnlyKnownFlags(args, ["ci", "format", "new-only", "allow-proof-waiver", "engagement", "all-engagements"], "check");
+            const engagementOutcome = flagValue(args, "engagement");
+            if (engagementOutcome) {
+                if (hasFlag(args, "new-only") || hasFlag(args, "ci") || hasFlag(args, "all-engagements")) {
+                    throw new Error("--engagement re-verdicts one recorded engagement and cannot combine with --new-only, --ci, or --all-engagements.");
+                }
+                const reVerdict = await checkEngagementReVerdict(positionalRepoPath(args.slice(1)), engagementOutcome);
+                emitResult("check", reVerdict, args);
+                process.exitCode = typeof reVerdict.exitCode === "number" ? reVerdict.exitCode : 0;
+                return "exit";
+            }
+            const ciMode = hasFlag(args, "ci");
+            if (hasFlag(args, "all-engagements") || ciMode) {
+                const combined = await checkAllEngagements(positionalRepoPath(args.slice(1)), { newOnly: hasFlag(args, "new-only"), allowProofWaiver: hasFlag(args, "allow-proof-waiver") });
+                emitResult("check", ciMode ? ciCheckResult(combined) : combined, args);
+                process.exitCode = typeof combined.exitCode === "number" ? combined.exitCode : 0;
+                return "exit";
+            }
             const result = await checkCompliance(positionalRepoPath(args.slice(1)), { newOnly: hasFlag(args, "new-only"), allowProofWaiver: hasFlag(args, "allow-proof-waiver") });
-            emitResult("check", hasFlag(args, "ci") ? ciCheckResult(result) : result, args);
+            emitResult("check", result, args);
             process.exitCode = result.exitCode;
             return "exit";
         }
@@ -657,7 +701,6 @@ function internalCommandsSection() {
     return `
 
 Internal commands (not part of the public surface — see docs/TOOLS.md):
-  vise sdk-facts --platform <p> [--capability <c>]  Read bundled SDK surface facts. Projectless, read-only.
   vise blocks <list|plan|add> ...                   Install and validate social.plus blocks in customer projects.
   vise resolve --request "..."                      Resolve a request into the closest supported Vise outcome.
   vise skill-path                                   Print the bundled skill source path and install targets.
@@ -943,7 +986,9 @@ Usage:
   vise blocks validate <repoPath> [--block comments] --registry <path> --format json
 
 Safety:
-  Dry-run is the default. Apply mode only edits package manifests, explicit source anchors, and sp-vise/blocks.json.`;
+  Dry-run is the default. Apply mode only edits package manifests, explicit source anchors, and sp-vise/blocks.json.
+  Apply records pending-mount. A block capability counts only after the imported symbol is mounted/used;
+  run blocks validate after mounting it to persist verified evidence.`;
     }
     if (command === "init") {
         return `${packageName} init
@@ -960,6 +1005,7 @@ Usage:
         return `${packageName} check
 
 Check the current source and recorded attestations against the compliance contract. Read-only.
+--ci also re-verdicts every recorded engagement and exits 11 if completed work drifted.
 
 Usage:
   vise check [repoPath] [--ci] [--format human]
@@ -1105,6 +1151,7 @@ Usage:
   vise learning show [repoPath]    Show local learning summary
   vise debug [repoPath] --error ... Debug an SDK-specific runtime error and emit a repair brief
   vise explore "<request>"         Discover what social.plus offers for a request (no project/credentials needed)
+  vise sdk-facts --platform <p>    Read proven SDK surface facts (symbols, capabilities, model schemas). Projectless, read-only
   vise plan [repoPath] --request "..." Create an implementation plan
   vise workplan next [repoPath] --request "..." Get the next broad-social surface to implement
   vise init [repoPath] --request "..." Initialize compliance sidecar (add --baseline on a brownfield app)
@@ -2186,13 +2233,16 @@ function socialWorkplanSequence(plan) {
     }
     return workplan.sequence;
 }
-async function requireNextWorkplanSurfaceInit(repoRoot, request, sequence, answers, omitted = [], requestedAs) {
+async function requireNextWorkplanSurfaceInit(repoRoot, request, sequence, answers, omitted = [], requestedAs, requestedOutcome) {
     const progress = await verifiedWorkplanProgress(repoRoot, request, sequence);
     const completedIds = new Set(progress.completed.map((item) => item.surface));
     const nextSurface = sequence.find((surface) => !completedIds.has(surface.id));
     const selectedSurface = resolveWorkplanSurfaceAnswer(sequence, answers.feature_surface);
     const selectedOmittedSurface = resolveOmittedSurfaceAnswer(omitted, answers.feature_surface);
     if (!nextSurface) {
+        if (!completedWorkplanBlocksOutcome(sequence, requestedOutcome)) {
+            return null;
+        }
         return {
             status: "workplan-complete",
             exitCode: 7,
@@ -2543,8 +2593,11 @@ function ciCheckResult(result) {
                 "needs-attestation",
                 "completeness-gap",
                 "selected-capability-failures",
+                "engagement-drift",
             ],
-            message: result.exitCode === 0 ? "Compliance green for CI." : `Compliance failed for CI with status: ${result.status}.`,
+            message: result.exitCode === 0
+                ? "Active and recorded engagement compliance is green for CI."
+                : `Compliance failed for CI with status: ${result.status}.`,
         },
     };
 }
@@ -2746,7 +2799,7 @@ function doctorResult() {
         packageRoot,
         status: nodeMajor >= 18 ? "ok" : "unsupported-node",
         node: process.versions.node,
-        requiredNodeMajor: ">=18",
+        requiredNodeMajor: ">=20",
         docsSource: process.env.SOCIAL_PLUS_DOCS_ROOT ? "local" : "hosted",
         docsRoot: process.env.SOCIAL_PLUS_DOCS_ROOT,
         docsBaseUrl: process.env.SOCIAL_PLUS_DOCS_BASE_URL ?? "https://learn.social.plus",

package/dist/tools/blocks.js

@@ -5,7 +5,7 @@ import { packageVersion } from "../version.js";
 import { inspectProject } from "./project.js";
 import { detectCommandSensors } from "./harness.js";
 import { readDesignContract } from "./design.js";
-const blocksSidecarSchemaVersion = "2026-06-10.vise-blocks-sidecar.v1";
+const blocksSidecarSchemaVersion = "2026-07-10.vise-blocks-sidecar.v2";
 const registryPlatformByVisePlatform = {
     typescript: "react",
     "react-native": "react-native",
@@ -74,11 +74,21 @@ export async function validateBlockInstall(options) {
         if (installed.length === 0) {
             findings.push({
                 ruleId: "blocks.sidecar.installed",
-                severity: "warning",
+                severity: "error",
                 message: "No installed block sidecar entries exist.",
                 recommendation: "Run `vise blocks add <repoPath> --block <id> --registry <path> --apply` after reviewing the dry-run plan.",
             });
         }
+        for (const entry of installed) {
+            if (!(await installedEntryLocallyValid(repoPath, entry))) {
+                findings.push({
+                    ruleId: "blocks.install.verified",
+                    severity: "error",
+                    message: `Installed block ${entry.blockId} is not currently verified: its dependency, touched files, or live mount evidence is missing.`,
+                    recommendation: `Run \`vise blocks validate <repoPath> --block ${entry.blockId} --registry <path>\` and resolve every reported error.`,
+                });
+            }
+        }
         return {
             status: findings.some((finding) => finding.severity === "error") ? "needs-review" : "ready",
             mode: "validate",
@@ -96,7 +106,7 @@ export async function validateBlockInstall(options) {
     if (installed.length === 0) {
         findings.push({
             ruleId: "blocks.sidecar.installed",
-            severity: "warning",
+            severity: "error",
             message: options.blockId ? `No sidecar entry exists for block ${options.blockId}.` : "No installed block sidecar entries exist.",
             recommendation: "Run `vise blocks add <repoPath> --block <id> --registry <path> --apply` after reviewing the dry-run plan.",
         });
@@ -119,12 +129,30 @@ export async function validateBlockInstall(options) {
             });
         }
     }
+    const mountEvidence = await findBlockMountEvidence(repoPath, {
+        platform: plan.registryPlatform,
+        publicEntrypoint: plan.package.publicEntrypoint,
+        importName: plan.package.importName,
+        mountFiles: plan.targetFiles.map((targetFile) => targetFile.path),
+    });
+    if (!mountEvidence) {
+        findings.push({
+            ruleId: "blocks.mount.present",
+            severity: "error",
+            message: `Block ${plan.block.id} is installed but ${plan.package.importName} is not mounted in the target source.`,
+            recommendation: `Render or invoke ${plan.package.importName} in ${plan.targetFiles.map((targetFile) => targetFile.path).join(", ")}, then re-run block validation. An import alone does not deliver the block capability.`,
+        });
+    }
     const hasError = findings.some((finding) => finding.severity === "error");
+    await updateBlockValidationState(repoPath, plan.block.id, hasError ? "invalid" : "verified", mountEvidence);
+    const updatedSidecar = await readSidecar(repoPath);
+    const updatedInstalled = (updatedSidecar?.installed ?? []).filter((entry) => entry.blockId === options.blockId);
     return {
         ...plan,
         status: hasError ? "needs-review" : plan.status,
         validationStatus: hasError ? "failed" : "passed",
-        sidecarInstalled: installed,
+        mountEvidence,
+        sidecarInstalled: updatedInstalled,
         findings,
     };
 }
@@ -242,7 +270,7 @@ async function packageChangeFor(root, platform, packageInfo, packageSource) {
         };
     }
     const file = "package.json";
-    const packageJson = await readPackageJson(path.join(root, file));
+    const packageJson = await readPackageJson(path.join(root, file)).catch(() => ({}));
     return {
         file,
         dependency: packageInfo.dependencyName,
@@ -319,10 +347,13 @@ async function writeBlocksSidecar(repoPath, plan, packageSource, filesTouched) {
         packageSource,
         dependencyName: plan.package.dependencyName,
         providesCapabilities: plan.providesCapabilities,
+        publicEntrypoint: plan.package.publicEntrypoint,
+        importName: plan.package.importName,
+        mountFiles: plan.targetFiles.map((targetFile) => targetFile.path),
         filesTouched,
         designContractDigest: designContract?.digest,
         sdkFactsVersion: plan.block.version,
-        validationStatus: "installed",
+        validationStatus: "pending-mount",
     };
     sidecar.schemaVersion = blocksSidecarSchemaVersion;
     sidecar.viseVersion = packageVersion;
@@ -376,7 +407,46 @@ async function installedEntryLocallyValid(repoRoot, entry) {
             return false;
         }
     }
-    return true;
+    return Boolean(await findBlockMountEvidence(repoRoot, entry));
+}
+async function findBlockMountEvidence(repoRoot, entry) {
+    if (!entry.publicEntrypoint || !entry.importName || !Array.isArray(entry.mountFiles) || entry.mountFiles.length === 0) {
+        return undefined;
+    }
+    for (const relativeFile of entry.mountFiles) {
+        if (typeof relativeFile !== "string" || relativeFile.trim() === "") {
+            continue;
+        }
+        const source = await readFile(path.join(repoRoot, relativeFile), "utf8").catch(() => "");
+        if (!source.includes(entry.publicEntrypoint) || !blockUsagePresent(source, entry.platform, entry.importName)) {
+            continue;
+        }
+        return { file: relativeFile, kind: "source-usage", importName: entry.importName };
+    }
+    return undefined;
+}
+function blockUsagePresent(source, platform, importName) {
+    const name = escapeRegExp(importName);
+    if (platform === "flutter") {
+        return new RegExp(`\\b${name}\\s*\\(`).test(source);
+    }
+    return [
+        new RegExp(`<\\s*${name}(?:\\s|/|>)`),
+        new RegExp(`(?:React\\.)?createElement\\s*\\(\\s*${name}\\b`),
+        new RegExp(`\\b${name}\\s*\\(`),
+    ].some((pattern) => pattern.test(source));
+}
+async function updateBlockValidationState(repoRoot, blockId, validationStatus, mountEvidence) {
+    const sidecar = await readSidecar(repoRoot);
+    const entry = sidecar?.installed.find((item) => item.blockId === blockId);
+    if (!sidecar || !entry) {
+        return;
+    }
+    entry.validationStatus = validationStatus;
+    entry.mountEvidence = mountEvidence;
+    sidecar.viseVersion = packageVersion;
+    sidecar.generatedAt = new Date().toISOString();
+    await writeFile(path.join(repoRoot, "sp-vise", "blocks.json"), `${JSON.stringify(sidecar, null, 2)}\n`, "utf8");
 }
 async function blockDependencyDeclared(repoRoot, entry) {
     const dependencyName = entry.dependencyName;
@@ -433,12 +503,15 @@ function insertBlockSnippet(source, plan) {
     return source;
 }
 function addPubspecDependency(source, dependencyName, value) {
+    const dependencyLines = value.startsWith("file:")
+        ? [`  ${dependencyName}:`, `    path: ${value.replace(/^file:/, "")}`]
+        : [`  ${dependencyName}: ${value}`];
     if (!source.includes("dependencies:")) {
-        return `${source.trimEnd()}\n\ndependencies:\n  ${dependencyName}:\n    path: ${value.replace(/^file:/, "")}\n`;
+        return `${source.trimEnd()}\n\ndependencies:\n${dependencyLines.join("\n")}\n`;
     }
     const lines = source.split(/\r?\n/);
     const insertIndex = lines.findIndex((line) => line.trim() === "dependencies:") + 1;
-    lines.splice(insertIndex, 0, `  ${dependencyName}:`, `    path: ${value.replace(/^file:/, "")}`);
+    lines.splice(insertIndex, 0, ...dependencyLines);
     return `${lines.join("\n").trimEnd()}\n`;
 }
 async function readPackageJson(filePath) {