@miller-tech/uap 1.170.1 → 1.172.0

package/dist/delivery/interaction/driver.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Driver abstraction — the seam that keeps the interaction gate universal.
+ *
+ * A probe says "drive this input, then assert this observable". That sentence is
+ * identical for a canvas game, a CLI and an HTTP API; only the verbs differ. So
+ * the manifest format is shared and each artifact kind supplies a driver:
+ *
+ *   web   → pointer/keys into a real headless browser, `read` evaluates in-page
+ *   cli   → keystrokes into a pty, `read` inspects the transcript/exit state
+ *   http  → requests, `read` inspects the last response
+ *
+ * Keeping `read(expr)` opaque is what makes assertions read the artifact's OWN
+ * runtime state instead of guessing from pixels or stdout scraping.
+ */
+import type { Step } from './types.js';
+/** Outcome of one observation: did the expression resolve, and to what. */
+export interface ReadResult {
+    ok: boolean;
+    value?: unknown;
+    error?: string;
+}
+export interface InteractionDriver {
+    /** Launch and reach the artifact's initial state. */
+    start(): Promise<void>;
+    /**
+     * Return the artifact to its initial state before the next probe.
+     *
+     * Without this every probe inherits the previous probe's state, so results
+     * are order-dependent and a later probe reports failures caused by an
+     * earlier one — e.g. 'colliding costs health' failing because a previous
+     * probe already ended the game. Optional: a driver that cannot reset simply
+     * runs probes in sequence, which is the old behaviour.
+     */
+    reset?(): Promise<void>;
+    /** Execute one input step. Unknown step kinds must be ignored, not thrown. */
+    runStep(step: Step): Promise<void>;
+    /** Evaluate an observation expression in the artifact's own context. */
+    read(expr: string): Promise<unknown>;
+    /**
+     * Evaluate an observation and say whether it RESOLVED. A probe naming
+     * something the artifact does not expose is a broken probe, and reporting it
+     * as a failing behaviour makes the agent "fix" working code.
+     */
+    readDetailed?(expr: string): Promise<ReadResult>;
+    /** Mutate artifact state (accelerated probes only — the runner enforces this). */
+    inject(expr: string): Promise<void>;
+    /** Runtime errors observed so far (uncaught throws, console errors, 404s). */
+    errors(): string[];
+    /**
+     * Read one watchdog sample. Owned by the DRIVER because the instrumentation
+     * global is named per-run — the caller cannot know the name, which is the
+     * point: a page that can guess it can forge its own liveness counters.
+     */
+    watchdogSample?(watchExprs: string[]): Promise<unknown>;
+    /** Best-effort screenshot/transcript capture for the evidence trail. */
+    capture?(path: string): Promise<void>;
+    stop(): Promise<void>;
+}
+export declare function delay(ms: number): Promise<void>;
+//# sourceMappingURL=driver.d.ts.map

package/dist/delivery/interaction/driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../src/delivery/interaction/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB;;;;;;;;OAQG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,8EAA8E;IAC9E,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,wEAAwE;IACxE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,kFAAkF;IAClF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,8EAA8E;IAC9E,MAAM,IAAI,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,wEAAwE;IACxE,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C"}

package/dist/delivery/interaction/driver.js

@@ -0,0 +1,18 @@
+/**
+ * Driver abstraction — the seam that keeps the interaction gate universal.
+ *
+ * A probe says "drive this input, then assert this observable". That sentence is
+ * identical for a canvas game, a CLI and an HTTP API; only the verbs differ. So
+ * the manifest format is shared and each artifact kind supplies a driver:
+ *
+ *   web   → pointer/keys into a real headless browser, `read` evaluates in-page
+ *   cli   → keystrokes into a pty, `read` inspects the transcript/exit state
+ *   http  → requests, `read` inspects the last response
+ *
+ * Keeping `read(expr)` opaque is what makes assertions read the artifact's OWN
+ * runtime state instead of guessing from pixels or stdout scraping.
+ */
+export function delay(ms) {
+    return new Promise((r) => setTimeout(r, Math.max(0, ms)));
+}
+//# sourceMappingURL=driver.js.map

package/dist/delivery/interaction/driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../../src/delivery/interaction/driver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAiDH,MAAM,UAAU,KAAK,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/delivery/interaction/manifest.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Interaction manifest — persistence, validation and the coverage ledger.
+ *
+ * The manifest lives OUTSIDE the deliverable (`.uap/interaction/manifest.json`)
+ * for the same reason a test suite is not shipped inside the thing it tests: an
+ * agent that can edit its own acceptance criteria will eventually edit them
+ * instead of fixing the defect. `.uap/interaction/` is added to the self-protect
+ * enforcer's deny list so a delivering agent cannot rewrite its own probes.
+ */
+import type { CoverageLedger, InteractionManifest, Probe, Step } from './types.js';
+export declare const MANIFEST_DIR: string;
+export declare const MANIFEST_FILE = "manifest.json";
+/** Probe ids become evidence filenames — no separators, no traversal. */
+export declare const PROBE_ID_RE: RegExp;
+/** Hard ceiling on nested `repeat` so validation cannot be blown up by depth. */
+export declare const MAX_STEP_DEPTH = 6;
+/**
+ * Reject observation expressions that can MUTATE the artifact.
+ *
+ * The `inject`-only-in-accelerated rule is worthless on its own, because a JS
+ * *expression* can assign: `{expect:'gte', expr:'(kills = 5)', value:5}` writes
+ * the state it then grades, passes validation as a `core` probe, and proves
+ * exactly nothing. The rule has to cover every string that reaches an
+ * evaluation slot — assertions, `eval` steps and watch expressions alike.
+ *
+ * Honest about its limits: this is syntactic, and no string inspection can
+ * *prove* a JS expression is side-effect-free (a getter or a called function can
+ * mutate). It raises the cost of the obvious bypass; the observation-level
+ * invariant (watched values must not change across a read) is what catches the
+ * rest, and the manifest's write-protection is what makes both meaningful.
+ */
+export declare function expressionMutates(expr: string): string | null;
+/** True when `text` has a comma outside every (), [] and {} and outside strings. */
+export declare function hasTopLevelComma(text: string): boolean;
+export declare function manifestPath(projectRoot: string): string;
+/** Stable short hash of the requirements text a manifest was mined from. */
+export declare function hashSpec(text: string): string;
+/** Walk nested `repeat` blocks so validation cannot be bypassed by nesting. */
+export declare function flattenSteps(steps: Step[], depth?: number): Step[];
+/**
+ * Structural validation + the anti-cheat invariants. Returns the problems found;
+ * empty means valid.
+ *
+ * The load-bearing rule is the `inject` restriction: a probe that writes
+ * `score = 100` and then asserts `score >= 100` proves nothing at all. State
+ * injection is therefore legal ONLY in `accelerated` probes, whose results are
+ * reported separately and never counted as evidence of natural progression.
+ */
+export declare function validateManifest(m: unknown): string[];
+/**
+ * Load result that distinguishes ABSENT from INVALID.
+ *
+ * Collapsing the two is how a tampered manifest reads as a fresh project: the
+ * gate says "no manifest — run `uap interaction mine`", the operator re-mines,
+ * and the tamper is laundered into a clean skip.
+ */
+export type ManifestLoad = {
+    status: 'ok';
+    manifest: InteractionManifest;
+} | {
+    status: 'absent';
+} | {
+    status: 'invalid';
+    problems: string[];
+};
+export declare function loadManifestDetailed(projectRoot: string): ManifestLoad;
+export declare function loadManifest(projectRoot: string): InteractionManifest | null;
+export declare function saveManifest(projectRoot: string, manifest: InteractionManifest): string;
+/**
+ * Which requirements have at least one probe. This is what turns "all
+ * requirements are present and active" from a claim into a check: an unmapped
+ * requirement is a coverage gap, and under max fidelity a gap blocks DONE.
+ */
+export declare function coverageOf(manifest: InteractionManifest, 
+/**
+ * The probes that will ACTUALLY run this invocation. Counting the whole
+ * manifest reports a requirement as covered when its only probe belongs to a
+ * mode that was not run — "covered" would mean "has a probe somewhere",
+ * not "was verified".
+ */
+ranProbes?: Probe[]): CoverageLedger;
+/** True when the manifest was mined from different requirements than the current text. */
+export declare function manifestIsStale(manifest: InteractionManifest, specText: string): boolean;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/delivery/interaction/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/delivery/interaction/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,KAAK,EAEL,IAAI,EACL,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,YAAY,QAA8B,CAAC;AACxD,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,yEAAyE;AACzE,eAAO,MAAM,WAAW,QAA4B,CAAC;AAErD,iFAAiF;AACjF,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAc7D;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBtD;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,SAAI,GAAG,IAAI,EAAE,CAU7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAsErD;AAED;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC/C;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE9C,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAWtE;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAG5E;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAKvF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,mBAAmB;AAC7B;;;;;GAKG;AACH,SAAS,CAAC,EAAE,KAAK,EAAE,GAClB,cAAc,CAgBhB;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAExF"}

package/dist/delivery/interaction/manifest.js

@@ -0,0 +1,241 @@
+/**
+ * Interaction manifest — persistence, validation and the coverage ledger.
+ *
+ * The manifest lives OUTSIDE the deliverable (`.uap/interaction/manifest.json`)
+ * for the same reason a test suite is not shipped inside the thing it tests: an
+ * agent that can edit its own acceptance criteria will eventually edit them
+ * instead of fixing the defect. `.uap/interaction/` is added to the self-protect
+ * enforcer's deny list so a delivering agent cannot rewrite its own probes.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+export const MANIFEST_DIR = join('.uap', 'interaction');
+export const MANIFEST_FILE = 'manifest.json';
+/** Probe ids become evidence filenames — no separators, no traversal. */
+export const PROBE_ID_RE = /^[A-Za-z0-9._-]{1,120}$/;
+/** Hard ceiling on nested `repeat` so validation cannot be blown up by depth. */
+export const MAX_STEP_DEPTH = 6;
+/**
+ * Reject observation expressions that can MUTATE the artifact.
+ *
+ * The `inject`-only-in-accelerated rule is worthless on its own, because a JS
+ * *expression* can assign: `{expect:'gte', expr:'(kills = 5)', value:5}` writes
+ * the state it then grades, passes validation as a `core` probe, and proves
+ * exactly nothing. The rule has to cover every string that reaches an
+ * evaluation slot — assertions, `eval` steps and watch expressions alike.
+ *
+ * Honest about its limits: this is syntactic, and no string inspection can
+ * *prove* a JS expression is side-effect-free (a getter or a called function can
+ * mutate). It raises the cost of the obvious bypass; the observation-level
+ * invariant (watched values must not change across a read) is what catches the
+ * rest, and the manifest's write-protection is what makes both meaningful.
+ */
+export function expressionMutates(expr) {
+    const text = String(expr);
+    // Assignment that is not a comparison: `=` not preceded by = ! < > and not
+    // followed by =. Covers `x = 1`, `x += 1`, `x ||= 1`.
+    if (/(?<![=!<>+\-*/%&|^])(?:[+\-*/%&|^]|\*\*|<<|>>>?|\|\||&&|\?\?)?=(?!=)/.test(text)) {
+        return 'contains an assignment';
+    }
+    if (/\+\+|--/.test(text))
+        return 'contains an increment/decrement';
+    // `delete x.y`, and the comma operator used to sequence a side effect.
+    if (/\bdelete\s/.test(text))
+        return 'contains a delete';
+    // A TOP-LEVEL comma is the sequence operator (`hp = 1, true`). Commas nested
+    // inside a call or literal — `Math.min(a, b)`, `[1, 2].length` — are ordinary.
+    if (hasTopLevelComma(text))
+        return 'contains a comma sequence';
+    return null;
+}
+/** True when `text` has a comma outside every (), [] and {} and outside strings. */
+export function hasTopLevelComma(text) {
+    let depth = 0;
+    let quote = null;
+    for (let i = 0; i < text.length; i++) {
+        const c = text[i];
+        if (quote) {
+            if (c === '\\')
+                i++;
+            else if (c === quote)
+                quote = null;
+            continue;
+        }
+        if (c === '"' || c === "'" || c === '`')
+            quote = c;
+        else if (c === '(' || c === '[' || c === '{')
+            depth++;
+        else if (c === ')' || c === ']' || c === '}')
+            depth--;
+        else if (c === ',' && depth <= 0)
+            return true;
+    }
+    return false;
+}
+export function manifestPath(projectRoot) {
+    return join(projectRoot, MANIFEST_DIR, MANIFEST_FILE);
+}
+/** Stable short hash of the requirements text a manifest was mined from. */
+export function hashSpec(text) {
+    return createHash('sha256').update(text.trim()).digest('hex').slice(0, 16);
+}
+/** Walk nested `repeat` blocks so validation cannot be bypassed by nesting. */
+export function flattenSteps(steps, depth = 0) {
+    const out = [];
+    // Depth-capped: a deeply nested manifest would otherwise blow the stack
+    // inside validation, turning a malformed input into a crash.
+    if (depth > MAX_STEP_DEPTH || !Array.isArray(steps))
+        return out;
+    for (const s of steps) {
+        out.push(s);
+        if (s.do === 'repeat')
+            out.push(...flattenSteps(s.steps, depth + 1));
+    }
+    return out;
+}
+/**
+ * Structural validation + the anti-cheat invariants. Returns the problems found;
+ * empty means valid.
+ *
+ * The load-bearing rule is the `inject` restriction: a probe that writes
+ * `score = 100` and then asserts `score >= 100` proves nothing at all. State
+ * injection is therefore legal ONLY in `accelerated` probes, whose results are
+ * reported separately and never counted as evidence of natural progression.
+ */
+export function validateManifest(m) {
+    const problems = [];
+    const man = m;
+    if (!man || typeof man !== 'object')
+        return ['manifest is not an object'];
+    if (man.version !== 1)
+        problems.push(`unsupported manifest version: ${String(man.version)}`);
+    if (!man.kind || !['web', 'cli', 'http'].includes(man.kind)) {
+        problems.push(`unknown artifact kind: ${String(man.kind)}`);
+    }
+    if (!Array.isArray(man.requirements))
+        problems.push('requirements must be an array');
+    if (!Array.isArray(man.probes))
+        problems.push('probes must be an array');
+    if (problems.length > 0)
+        return problems;
+    const reqIds = new Set(man.requirements.map((r) => r.id));
+    const seenProbeIds = new Set();
+    for (const p of man.probes) {
+        if (!p.id)
+            problems.push('probe with no id');
+        // The probe id becomes a FILENAME (the evidence screenshot), and the
+        // manifest is untrusted by construction — it is kept behind the
+        // self-protect deny list precisely because an agent would otherwise edit
+        // it. An id of `../../../etc/x` would write outside the evidence dir.
+        else if (!PROBE_ID_RE.test(p.id)) {
+            problems.push(`probe ${p.id}: id must be filename-safe (letters, digits, dot, dash, underscore)`);
+        }
+        if (seenProbeIds.has(p.id))
+            problems.push(`duplicate probe id: ${p.id}`);
+        seenProbeIds.add(p.id);
+        if (!Array.isArray(p.steps) || p.steps.length === 0) {
+            problems.push(`probe ${p.id}: no steps`);
+        }
+        if (!Array.isArray(p.asserts) || p.asserts.length === 0) {
+            // A probe with no assertions is theatre: it drives input and claims a pass
+            // no matter what the artifact did.
+            problems.push(`probe ${p.id}: no assertions — a probe that asserts nothing cannot fail`);
+        }
+        for (const rid of p.requirementIds ?? []) {
+            if (!reqIds.has(rid))
+                problems.push(`probe ${p.id}: unknown requirement id ${rid}`);
+        }
+        const steps = flattenSteps(p.steps ?? []);
+        if (p.mode !== 'accelerated') {
+            const injects = steps.filter((s) => s.do === 'inject');
+            if (injects.length > 0) {
+                problems.push(`probe ${p.id}: state injection is only allowed in 'accelerated' probes ` +
+                    `(a probe that injects the state it then asserts proves nothing)`);
+            }
+            // Every OTHER evaluation slot has to obey the same rule, or the rule is
+            // theatre: an assertion of `(kills = 5)` mutates and then grades itself.
+            for (const s of steps) {
+                if (s.do !== 'eval')
+                    continue;
+                const why = expressionMutates(s.expr);
+                if (why)
+                    problems.push(`probe ${p.id}: eval expression ${why} — observations must not mutate`);
+            }
+        }
+        for (const a of p.asserts ?? []) {
+            if (!('expr' in a) || typeof a.expr !== 'string')
+                continue;
+            const why = expressionMutates(a.expr);
+            if (why) {
+                problems.push(`probe ${p.id}: assertion expression ${why} — an assertion that mutates grades its own write`);
+            }
+        }
+    }
+    for (const w of man.watch ?? []) {
+        const why = typeof w === 'string' ? expressionMutates(w) : 'is not a string';
+        if (why)
+            problems.push(`watch expression ${why} — the watchdog must only observe`);
+    }
+    return problems;
+}
+export function loadManifestDetailed(projectRoot) {
+    const path = manifestPath(projectRoot);
+    if (!existsSync(path))
+        return { status: 'absent' };
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (e) {
+        return { status: 'invalid', problems: [`manifest is not valid JSON: ${String(e).slice(0, 160)}`] };
+    }
+    const problems = validateManifest(parsed);
+    return problems.length === 0 ? { status: 'ok', manifest: parsed } : { status: 'invalid', problems };
+}
+export function loadManifest(projectRoot) {
+    const r = loadManifestDetailed(projectRoot);
+    return r.status === 'ok' ? r.manifest : null;
+}
+export function saveManifest(projectRoot, manifest) {
+    const path = manifestPath(projectRoot);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+    return path;
+}
+/**
+ * Which requirements have at least one probe. This is what turns "all
+ * requirements are present and active" from a claim into a check: an unmapped
+ * requirement is a coverage gap, and under max fidelity a gap blocks DONE.
+ */
+export function coverageOf(manifest, 
+/**
+ * The probes that will ACTUALLY run this invocation. Counting the whole
+ * manifest reports a requirement as covered when its only probe belongs to a
+ * mode that was not run — "covered" would mean "has a probe somewhere",
+ * not "was verified".
+ */
+ranProbes) {
+    const covered = new Set();
+    for (const p of ranProbes ?? manifest.probes) {
+        // Accelerated probes reach their path by INJECTING state, so they are not
+        // evidence that a user can get there. Counting them as coverage would let
+        // "every requirement is covered" mean "every requirement has a probe that
+        // wrote its own preconditions".
+        if (p.mode === 'accelerated')
+            continue;
+        for (const rid of p.requirementIds ?? [])
+            covered.add(rid);
+    }
+    const uncovered = manifest.requirements.filter((r) => !covered.has(r.id));
+    return {
+        total: manifest.requirements.length,
+        covered: manifest.requirements.length - uncovered.length,
+        uncovered,
+    };
+}
+/** True when the manifest was mined from different requirements than the current text. */
+export function manifestIsStale(manifest, specText) {
+    return manifest.specHash !== hashSpec(specText);
+}
+//# sourceMappingURL=manifest.js.map

package/dist/delivery/interaction/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/delivery/interaction/manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS1C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAErD,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,iCAAiC,CAAC;IACnE,uEAAuE;IACvE,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACxD,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;iBACf,IAAI,CAAC,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,GAAG,CAAC,CAAC;aAC9C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACjD,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,KAAK,GAAG,CAAC;IACnD,MAAM,GAAG,GAAW,EAAE,CAAC;IACvB,wEAAwE;IACxE,6DAA6D;IAC7D,IAAI,KAAK,GAAG,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAwC,CAAC;IACrD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAE,GAAG,CAAC,YAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7C,qEAAqE;QACrE,gEAAgE;QAChE,yEAAyE;QACzE,sEAAsE;aACjE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CACX,SAAS,CAAC,CAAC,EAAE,qEAAqE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,2EAA2E;YAC3E,mCAAmC;YACnC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,4DAA4D,CAAC,CAAC;QAC3F,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,4BAA4B,GAAG,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CACX,SAAS,CAAC,CAAC,EAAE,4DAA4D;oBACvE,iEAAiE,CACpE,CAAC;YACJ,CAAC;YACD,wEAAwE;YACxE,yEAAyE;YACzE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;oBAAE,SAAS;gBAC9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,GAAG;oBAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,qBAAqB,GAAG,iCAAiC,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC3D,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,GAAG,EAAE,CAAC;gBACR,QAAQ,CAAC,IAAI,CACX,SAAS,CAAC,CAAC,EAAE,0BAA0B,GAAG,mDAAmD,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAK,GAA2B,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC7E,IAAI,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,GAAG,mCAAmC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAcD,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnD,IAAI,MAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,+BAA+B,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,MAAM,CAAC,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,QAA6B;IAC7E,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,QAA6B;AAC7B;;;;;GAKG;AACH,SAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7C,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,gCAAgC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;YAAE,SAAS;QACvC,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM;QACnC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM;QACxD,SAAS;KACV,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,QAA6B,EAAE,QAAgB;IAC7E,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/delivery/interaction/mine.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Manifest mining — turn a requirements document into probes.
+ *
+ * Two halves, deliberately:
+ *
+ *  - a DETERMINISTIC baseline that needs no model and always produces something
+ *    real (it loads the artifact, drives its start interaction, and asserts the
+ *    loop is alive and error-free). Tonight's fatal defect would have been
+ *    caught by the baseline alone.
+ *  - a MODEL pass that reads the requirements and proposes artifact-specific
+ *    probes. Its output is validated and any probe naming an observable the
+ *    artifact does not expose is dropped rather than shipped, because a probe
+ *    that cannot observe anything reports failures the agent then "fixes" in
+ *    working code.
+ *
+ * The model is an accelerator, never a dependency: with no model configured the
+ * gate still runs, still gates, and still says plainly which requirements it
+ * could not cover.
+ */
+import type { LoopExecutor } from '../convergence-loop.js';
+import type { ArtifactKind, InteractionManifest, Probe, Requirement } from './types.js';
+/** Split a requirements document into candidate requirement lines. */
+export declare function extractRequirements(specText: string): Requirement[];
+/**
+ * Probes that apply to any web artifact, with no knowledge of what it does.
+ * This is the floor: it cannot prove features work, but it does prove the thing
+ * loads, responds to a click, and is still running afterwards — which is
+ * precisely the class the visual gate reports as a pass.
+ */
+export declare function baselineWebProbes(requirementIds?: string[]): Probe[];
+export interface MineOptions {
+    projectRoot: string;
+    kind: ArtifactKind;
+    entry: string;
+    /** The requirements text (mission, DESIGN.md, ledger plan). */
+    specText: string;
+    /** Source listing given to the model so it uses REAL identifiers. */
+    sourceDigest?: string;
+    executor?: LoopExecutor;
+}
+interface ModelManifestPart {
+    watch?: string[];
+    probes?: Probe[];
+}
+/** Strip a fence if the model added one despite instructions. */
+export declare function parseMinedJson(raw: string): ModelManifestPart | null;
+/**
+ * Build a manifest. Always returns one: the deterministic baseline is included
+ * even when the model is absent or returns junk, so the gate never silently
+ * degrades into "nothing to check".
+ */
+export declare function mineManifest(opts: MineOptions): Promise<InteractionManifest>;
+export {};
+//# sourceMappingURL=mine.d.ts.map

package/dist/delivery/interaction/mine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mine.d.ts","sourceRoot":"","sources":["../../../src/delivery/interaction/mine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACnB,KAAK,EACL,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAmBnE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,cAAc,GAAE,MAAM,EAAO,GAAG,KAAK,EAAE,CA+BxE;AAmDD,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAED,UAAU,iBAAiB;IACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;CAClB;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAUpE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsElF"}