@miller-tech/uap 1.170.1 → 1.172.1

package/dist/delivery/interaction/web-driver.js

@@ -0,0 +1,306 @@
+/**
+ * Web driver — drives a real headless browser with real pointer and key input.
+ *
+ * Deliberately uses coordinate-level mouse control rather than selector clicks:
+ * inside a <canvas> there are no elements to target, so aiming and firing only
+ * exist as pointer positions. A gate that can only click selectors cannot play a
+ * game, and "cannot play it" is indistinguishable from "it works".
+ */
+import { join } from 'node:path';
+import { startStaticServer } from '../execution-gate.js';
+import { buildWatchdogInitScript, watchdogSampleScript } from './watchdog.js';
+import { delay } from './driver.js';
+async function loadRealBrowser() {
+    const mod = await import('../../browser/web-browser.js');
+    return new mod.WebBrowser();
+}
+export class WebInteractionDriver {
+    browser = null;
+    server = null;
+    opts;
+    /** Last pointer position, so `down`/`up` act where the pointer actually is. */
+    pointer = { x: 0, y: 0 };
+    launched = false;
+    /** Per-run instrumentation global — see buildWatchdogInitScript. */
+    watchGlobal = `__uapWatch_${Math.random().toString(36).slice(2, 10)}`;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    async start() {
+        const entry = this.opts.entry ?? 'index.html';
+        const root = this.opts.webRoot ?? this.opts.projectRoot;
+        const startServer = this.opts.serverFactory ?? startStaticServer;
+        this.server = await startServer(root, entry);
+        this.browser = this.opts.browserFactory
+            ? await this.opts.browserFactory()
+            : await loadRealBrowser();
+        await this.browser.launch({ headless: true });
+        // MUST precede goto: the watchdog wraps requestAnimationFrame before the
+        // page's own scripts capture a reference to it.
+        await this.browser.addInitScript(buildWatchdogInitScript(this.watchGlobal));
+        // Everything above is INFRASTRUCTURE — if it fails the gate has no opinion
+        // about the artifact. Everything below is the ARTIFACT failing to load,
+        // which is a real defect and must not be laundered into "no browser
+        // available, skipping".
+        this.launched = true;
+        await this.browser.goto(this.server.url);
+        await this.browser.waitForLoadState('load');
+        const size = await this.browser.viewportSize();
+        this.pointer = { x: Math.round(size.width / 2), y: Math.round(size.height / 2) };
+    }
+    /**
+     * Reload the entry page. Init scripts are registered on the CONTEXT, so the
+     * watchdog re-installs automatically on the fresh document.
+     */
+    async reset() {
+        const b = this.browser;
+        if (!b || !this.server)
+            throw new Error('cannot reset: driver not started');
+        // Release a button a previous probe left held: Playwright's mouse state is
+        // browser-level and survives navigation, so a probe ending on `down`
+        // otherwise keeps firing into the next one.
+        try {
+            await b.mouseUp();
+        }
+        catch {
+            /* nothing was held */
+        }
+        await b.goto(this.server.url);
+        await b.waitForLoadState('load');
+        // Persisted storage survives a reload, so a save-state or "seen the
+        // tutorial" flag would carry the previous probe's writes across — exactly
+        // the leak the reload is meant to close.
+        try {
+            await b.evaluate('(function(){try{localStorage.clear();sessionStorage.clear();}catch(e){}return true;})');
+        }
+        catch {
+            /* storage may be unavailable (file://, blocked) */
+        }
+        const size = await b.viewportSize();
+        const cx = Math.round(size.width / 2);
+        const cy = Math.round(size.height / 2);
+        this.pointer = { x: cx, y: cy };
+        // Move the REAL cursor too — otherwise the driver believes the pointer is
+        // centred while it sits wherever the last probe left it, and coordinate-free
+        // `down`/`up` fire at the wrong place.
+        await b.mouseMove(cx, cy);
+    }
+    /** True once the browser is up — distinguishes infra failure from load failure. */
+    didLaunch() {
+        return this.launched;
+    }
+    /** A probe may only navigate within the artifact's own served origin. */
+    sameOrigin(url) {
+        if (!this.server)
+            return false;
+        try {
+            return new URL(url, this.server.url).origin === new URL(this.server.url).origin;
+        }
+        catch {
+            return false;
+        }
+    }
+    async runStep(step) {
+        const b = this.browser;
+        if (!b)
+            throw new Error('web driver not started');
+        switch (step.do) {
+            case 'goto':
+                if (step.url) {
+                    // SAME-ORIGIN ONLY. The manifest is model-authored, and an unrestricted
+                    // goto lets it navigate to `file:///…/.uap/proxy.env` or an attacker
+                    // host — after which every `read` expression executes in THAT origin
+                    // and its values flow out through the verdict feedback.
+                    if (!this.sameOrigin(step.url)) {
+                        throw new Error(`probe tried to navigate off-origin (${step.url}); interaction probes may only drive the artifact under test`);
+                    }
+                    await b.goto(step.url);
+                    await b.waitForLoadState('load');
+                }
+                return;
+            case 'wait':
+                await delay(step.ms);
+                return;
+            case 'move':
+                this.pointer = { x: step.x, y: step.y };
+                await b.mouseMove(step.x, step.y);
+                return;
+            case 'down':
+                await b.mouseDown();
+                return;
+            case 'up':
+                await b.mouseUp();
+                return;
+            case 'click':
+                if (typeof step.x === 'number' && typeof step.y === 'number') {
+                    this.pointer = { x: step.x, y: step.y };
+                    await b.mouseClick(step.x, step.y);
+                }
+                else if (step.selector) {
+                    // Selector clicks stay available for DOM UIs (menus, forms).
+                    await b.evaluate(`(function(){var el=document.querySelector(${JSON.stringify(step.selector)});if(el)el.click();return true;})`);
+                }
+                else {
+                    await b.mouseClick(this.pointer.x, this.pointer.y);
+                }
+                return;
+            case 'aimAt': {
+                // Read-only: the same evaluation path as any observation, so the
+                // mutation guard covers it.
+                const at = await this.read(step.expr);
+                let x;
+                let y;
+                if (typeof at === 'number')
+                    x = at;
+                else if (at && typeof at === 'object') {
+                    const o = at;
+                    if (typeof o.x === 'number')
+                        x = o.x;
+                    if (typeof o.y === 'number')
+                        y = o.y;
+                }
+                // An expression that resolves to nothing (no target on screen) leaves
+                // the pointer where it is rather than throwing — "nothing to aim at"
+                // is a normal moment in play, not a probe failure.
+                if (typeof x !== 'number' || !Number.isFinite(x))
+                    return;
+                const ty = typeof step.y === 'number' ? step.y : (y ?? this.pointer.y);
+                this.pointer = { x, y: ty };
+                await b.mouseMove(x, ty);
+                return;
+            }
+            case 'key':
+                await b.press(step.key);
+                return;
+            case 'eval':
+                await this.read(step.expr);
+                return;
+            case 'inject':
+                await this.inject(step.expr);
+                return;
+            case 'repeat': {
+                // The RUNNER expands repeat blocks so every adapter gets them; this is a
+                // fallback for callers driving the driver directly (e.g. the operator).
+                const times = Math.max(0, Math.min(step.times, 10_000));
+                for (let i = 0; i < times; i++) {
+                    for (const inner of step.steps)
+                        await this.runStep(inner);
+                }
+                return;
+            }
+            default:
+                // Unknown step kinds are ignored rather than thrown: a manifest mined by
+                // a newer version must not hard-fail an older gate.
+                return;
+        }
+    }
+    /**
+     * Evaluate an observation. Wrapped in a function so `const`/`let` declared at
+     * the top level of a classic script — which live in the global LEXICAL scope
+     * and are NOT properties of `window` — are still readable. Reading these
+     * through `window.X` returns undefined, which silently turns every assertion
+     * into "undefined", so the wrapper matters.
+     */
+    async read(expr) {
+        return (await this.readDetailed(expr)).value;
+    }
+    /**
+     * `ok: false` means the expression THREW or named something undefined — a
+     * broken probe, reported as such rather than as a behavioural failure.
+     * `undefined` reached by a resolving expression stays `ok: true`.
+     */
+    async readDetailed(expr) {
+        const b = this.browser;
+        if (!b)
+            throw new Error('web driver not started');
+        const script = `(function(){try{var v=(${expr});return JSON.stringify({ok:true,v:v===undefined?null:v,u:v===undefined});}catch(e){return JSON.stringify({ok:false,e:String(e)});}})`;
+        const raw = await b.evaluate(script);
+        try {
+            const parsed = JSON.parse(typeof raw === 'string' ? raw : JSON.stringify(raw));
+            if (!parsed.ok)
+                return { ok: false, error: parsed.e ?? 'expression threw' };
+            // An expression that resolves to `undefined` is almost always a probe
+            // naming a member the artifact does not expose (`Particles.particles`
+            // against a module that only exports functions), not a real observation.
+            if (parsed.u)
+                return { ok: false, error: `${expr} is undefined — the artifact does not expose it` };
+            return { ok: true, value: parsed.v };
+        }
+        catch {
+            return { ok: false, error: 'observation could not be serialised' };
+        }
+    }
+    async inject(expr) {
+        const b = this.browser;
+        if (!b)
+            throw new Error('web driver not started');
+        await b.evaluate(`(function(){try{${expr};}catch(e){}return true;})`);
+    }
+    /**
+     * GATING errors only: uncaught page exceptions.
+     *
+     * `console.error` output and failed sub-resource requests are common in
+     * working apps — a missing decorative asset or a handled-and-logged warning
+     * would otherwise hard-fail the behavioural gate. Both sibling gates already
+     * refuse to gate on them (execution-gate treats them as advisory;
+     * visual-gate filters to `pageerror`), and a gate that false-fails working
+     * builds gets switched off.
+     */
+    errors() {
+        try {
+            return (this.browser?.getErrors() ?? [])
+                .filter((e) => e.kind === 'pageerror')
+                .map((e) => `${e.kind}: ${e.message}`);
+        }
+        catch {
+            return [];
+        }
+    }
+    /** Sample the watchdog under this run's private global name. */
+    async watchdogSample(watchExprs) {
+        return this.read(`(${watchdogSampleScript(watchExprs, this.watchGlobal)})()`);
+    }
+    /** Non-gating observations, surfaced in the report as context. */
+    advisoryErrors() {
+        try {
+            return (this.browser?.getErrors() ?? [])
+                .filter((e) => e.kind !== 'pageerror')
+                .map((e) => `${e.kind}: ${e.message}`);
+        }
+        catch {
+            return [];
+        }
+    }
+    async capture(path) {
+        try {
+            await this.browser?.screenshot(path);
+        }
+        catch {
+            /* evidence capture is best-effort */
+        }
+    }
+    async stop() {
+        // Each teardown independently guarded: a browser left alive leaks a Chromium
+        // process per gate pass, which has previously held SIGTERM'd deliver runs
+        // open for hours.
+        try {
+            await this.browser?.close();
+        }
+        catch {
+            /* ignore */
+        }
+        try {
+            this.server?.close();
+        }
+        catch {
+            /* ignore */
+        }
+        this.browser = null;
+        this.server = null;
+    }
+}
+/** Where probe evidence (screenshots) is written. */
+export function evidenceDir(projectRoot) {
+    return join(projectRoot, '.uap', 'interaction', 'evidence');
+}
+//# sourceMappingURL=web-driver.js.map

package/dist/delivery/interaction/web-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-driver.js","sourceRoot":"","sources":["../../../src/delivery/interaction/web-driver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,KAAK,EAA2C,MAAM,aAAa,CAAC;AA+B7E,KAAK,UAAU,eAAe;IAC5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACzD,OAAO,IAAI,GAAG,CAAC,UAAU,EAA+B,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,oBAAoB;IACvB,OAAO,GAA0B,IAAI,CAAC;IACtC,MAAM,GAA8C,IAAI,CAAC;IAChD,IAAI,CAAmB;IACxC,+EAA+E;IACvE,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACzB,QAAQ,GAAG,KAAK,CAAC;IACzB,oEAAoE;IACnD,WAAW,GAAG,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAEvF,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc;YACrC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAClC,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,2EAA2E;QAC3E,wEAAwE;QACxE,oEAAoE;QACpE,wBAAwB;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5E,2EAA2E;QAC3E,qEAAqE;QACrE,4CAA4C;QAC5C,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjC,oEAAoE;QACpE,0EAA0E;QAC1E,yCAAyC;QACzC,IAAI,CAAC;YACH,MAAM,CAAC,CAAC,QAAQ,CACd,uFAAuF,CACxF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAChC,0EAA0E;QAC1E,6EAA6E;QAC7E,uCAAuC;QACvC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,mFAAmF;IACnF,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,yEAAyE;IACjE,UAAU,CAAC,GAAW;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAU;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClD,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAChB,KAAK,MAAM;gBACT,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,wEAAwE;oBACxE,qEAAqE;oBACrE,qEAAqE;oBACrE,wDAAwD;oBACxD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,GAAG,8DAA8D,CAC9G,CAAC;oBACJ,CAAC;oBACD,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACvB,MAAM,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO;YACT,KAAK,MAAM;gBACT,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrB,OAAO;YACT,KAAK,MAAM;gBACT,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClC,OAAO;YACT,KAAK,MAAM;gBACT,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO;YACT,KAAK,IAAI;gBACP,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO;YACT,KAAK,OAAO;gBACV,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC7D,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrC,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzB,6DAA6D;oBAC7D,MAAM,CAAC,CAAC,QAAQ,CACd,6CAA6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAC9G,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO;YACT,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,iEAAiE;gBACjE,4BAA4B;gBAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAqB,CAAC;gBAC1B,IAAI,CAAqB,CAAC;gBAC1B,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,CAAC,GAAG,EAAE,CAAC;qBAC9B,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,EAAkC,CAAC;oBAC7C,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;wBAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACrC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;wBAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;gBACD,sEAAsE;gBACtE,qEAAqE;gBACrE,mDAAmD;gBACnD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,OAAO;gBACzD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;gBAC5B,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,KAAK,KAAK;gBACR,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO;YACT,KAAK,MAAM;gBACT,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,OAAO;YACT,KAAK,QAAQ;gBACX,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,yEAAyE;gBACzE,wEAAwE;gBACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;gBACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO;YACT,CAAC;YACD;gBACE,yEAAyE;gBACzE,oDAAoD;gBACpD,OAAO;QACX,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,0BAA0B,IAAI,uIAAuI,CAAC;QACrL,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAS,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAK5E,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC;YAC5E,sEAAsE;YACtE,sEAAsE;YACtE,yEAAyE;YACzE,IAAI,MAAM,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,iDAAiD,EAAE,CAAC;YACpG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,QAAQ,CAAC,mBAAmB,IAAI,4BAA4B,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM;QACJ,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;iBACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,cAAc,CAAC,UAAoB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC;IAED,kEAAkE;IAClE,cAAc;QACZ,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;iBACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,6EAA6E;QAC7E,0EAA0E;QAC1E,kBAAkB;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AAC9D,CAAC"}

package/dist/delivery/interaction-gate.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Interaction gate — runs the artifact's own promises against real input.
+ *
+ * Sits between the execution smoke gate and the visual gate:
+ *
+ *   build → execution smoke (does it load) → INTERACTION (does it do what it
+ *   promised) → visual (does it look right) → acceptance (is anything missing)
+ *
+ * Before vision, for two reasons. A vision judge grades a FRAME, and a frozen
+ * frame is indistinguishable from a working one — so a broken build can collect
+ * a passing aesthetic score, and the fix loop then chases palette notes instead
+ * of the defect. And the vision pass costs a headless render plus a model call,
+ * which is waste on a build that cannot be played.
+ *
+ * SECURITY NOTE: manifest expression strings are interpolated into script that
+ * runs in the driving browser, so the manifest is a code-bearing input. It is
+ * kept under `.uap/interaction/` — which the self-protect enforcer denies to the
+ * agent — and every expression is checked for mutation before use. Both are load
+ * bearing: the write-protection is a security control, not just an integrity one.
+ */
+import type { InteractionDriver } from './interaction/driver.js';
+import type { InteractionManifest, InteractionVerdict, ProbeMode } from './interaction/types.js';
+export interface InteractionGateOptions {
+    /** Supply the manifest directly (tests, or a caller that just mined one). */
+    manifest?: InteractionManifest;
+    /** Which probe modes to run. Default: core only. */
+    modes?: ProbeMode[];
+    /** Max fidelity: uncovered requirements block. */
+    strictCoverage?: boolean;
+    /** Injected driver (tests). Default: the real web driver. */
+    driverFactory?: (manifest: InteractionManifest) => InteractionDriver;
+    /** Overall budget; probes still running when it expires are reported skipped. */
+    budgetMs?: number;
+    /** Per-probe wall-clock bound. */
+    probeTimeoutMs?: number;
+    /** Requirements text, so a manifest mined from older requirements is flagged. */
+    specText?: string;
+}
+export declare const DEFAULT_BUDGET_MS = 300000;
+/** Evidence path that cannot escape the evidence directory. */
+export declare function evidencePathFor(dir: string, probeId: string): string | null;
+export declare function runInteractionGate(projectRoot: string, options?: InteractionGateOptions): Promise<InteractionVerdict>;
+/** One-line summary for the verify report. */
+export declare function interactionSummary(v: InteractionVerdict): string;
+//# sourceMappingURL=interaction-gate.d.ts.map

package/dist/delivery/interaction-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-gate.d.ts","sourceRoot":"","sources":["../../src/delivery/interaction-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAeH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,SAAS,EAEV,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,oDAAoD;IACpD,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,mBAAmB,KAAK,iBAAiB,CAAC;IACrE,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAC;AAiBzC,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI3E;AA8MD,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,kBAAkB,CAAC,CAS7B;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAKhE"}

package/dist/delivery/interaction-gate.js

@@ -0,0 +1,255 @@
+/**
+ * Interaction gate — runs the artifact's own promises against real input.
+ *
+ * Sits between the execution smoke gate and the visual gate:
+ *
+ *   build → execution smoke (does it load) → INTERACTION (does it do what it
+ *   promised) → visual (does it look right) → acceptance (is anything missing)
+ *
+ * Before vision, for two reasons. A vision judge grades a FRAME, and a frozen
+ * frame is indistinguishable from a working one — so a broken build can collect
+ * a passing aesthetic score, and the fix loop then chases palette notes instead
+ * of the defect. And the vision pass costs a headless render plus a model call,
+ * which is waste on a build that cannot be played.
+ *
+ * SECURITY NOTE: manifest expression strings are interpolated into script that
+ * runs in the driving browser, so the manifest is a code-bearing input. It is
+ * kept under `.uap/interaction/` — which the self-protect enforcer denies to the
+ * agent — and every expression is checked for mutation before use. Both are load
+ * bearing: the write-protection is a security control, not just an integrity one.
+ */
+import { mkdirSync, rmSync } from 'node:fs';
+import { resolve, sep } from 'node:path';
+import { detectArtifactType, findWebEntryDir } from './execution-gate.js';
+import { coverageOf, loadManifestDetailed, manifestIsStale } from './interaction/manifest.js';
+import { runProbe } from './interaction/runner.js';
+import { judgeInteraction, skippedVerdict } from './interaction/verdict.js';
+import { judgeWatchdog, parseWatchdogSample, watchdogSampleScript, } from './interaction/watchdog.js';
+import { WebInteractionDriver, evidenceDir } from './interaction/web-driver.js';
+import { delay } from './interaction/driver.js';
+export const DEFAULT_BUDGET_MS = 300_000;
+/** Sample the watchdog without letting a failure there break the run. */
+async function sampleWatchdog(driver, watchExprs) {
+    try {
+        const raw = driver.watchdogSample
+            ? await driver.watchdogSample(watchExprs)
+            : await driver.read(`(${watchdogSampleScript(watchExprs)})()`);
+        return parseWatchdogSample(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/** Evidence path that cannot escape the evidence directory. */
+export function evidencePathFor(dir, probeId) {
+    const candidate = resolve(dir, `${probeId}.png`);
+    const root = resolve(dir);
+    return candidate === root || candidate.startsWith(root + sep) ? candidate : null;
+}
+async function runGate(projectRoot, options) {
+    let manifest = options.manifest;
+    if (!manifest) {
+        const loaded = loadManifestDetailed(projectRoot);
+        if (loaded.status === 'absent') {
+            return skippedVerdict('no interaction manifest — run `uap interaction mine` to derive probes from the requirements');
+        }
+        if (loaded.status === 'invalid') {
+            // NOT a skip. An invalid manifest is a tampered or broken acceptance
+            // criterion; reporting it as "no manifest" would tell the operator to
+            // re-mine and launder the problem away.
+            return {
+                passed: false,
+                skipped: false,
+                results: [],
+                coverage: { total: 0, covered: 0, uncovered: [] },
+                feedback: `interaction gate: the manifest at .uap/interaction/manifest.json is INVALID and was not run:\n` +
+                    loaded.problems.map((p) => `  · ${p}`).join('\n'),
+            };
+        }
+        manifest = loaded.manifest;
+    }
+    const modes = options.modes ?? ['core'];
+    const probes = manifest.probes.filter((p) => modes.includes(p.mode));
+    // Coverage over the probes that will RUN, not the whole manifest.
+    const coverage = coverageOf(manifest, probes);
+    if (probes.length === 0) {
+        return skippedVerdict(`manifest has no probes for mode(s) ${modes.join(', ')}`, coverage);
+    }
+    // Only the web adapter exists. Silently handing a `cli`/`http` manifest to the
+    // web driver would spin up a static server and a browser for an artifact that
+    // is neither, and report the resulting mess as an artifact defect.
+    if (manifest.kind !== 'web') {
+        return skippedVerdict(`no driver for artifact kind '${manifest.kind}' yet — only 'web' is implemented`, coverage);
+    }
+    const webRoot = findWebEntryDir(projectRoot);
+    if (!webRoot && detectArtifactType(projectRoot) !== 'web') {
+        return skippedVerdict('manifest declares a web artifact but no web entry point was found', coverage);
+    }
+    const evidence = evidenceDir(projectRoot);
+    try {
+        // Clear stale evidence so screenshots always describe THIS run — leftovers
+        // from probes that no longer exist read as current evidence.
+        rmSync(evidence, { recursive: true, force: true });
+        mkdirSync(evidence, { recursive: true });
+    }
+    catch {
+        /* evidence is best-effort */
+    }
+    const driver = options.driverFactory?.(manifest) ??
+        new WebInteractionDriver({
+            projectRoot,
+            entry: manifest.entry,
+            ...(webRoot ? { webRoot } : {}),
+        });
+    const budgetMs = options.budgetMs ?? DEFAULT_BUDGET_MS;
+    const startedAt = Date.now();
+    const results = [];
+    const samples = [];
+    const watchExprs = manifest.watch ?? [];
+    let ranAny = false;
+    let segment = 0;
+    const resetProblems = [];
+    try {
+        try {
+            await driver.start();
+        }
+        catch (e) {
+            const probe = driver;
+            const launched = typeof probe.didLaunch === 'function' && probe.didLaunch();
+            if (!launched) {
+                // Infrastructure: no browser, no server. The gate has no opinion.
+                return skippedVerdict(`driver unavailable (${String(e).slice(0, 160)})`, coverage);
+            }
+            // The browser came up and the ARTIFACT failed to load. That is a defect.
+            return {
+                passed: false,
+                skipped: false,
+                results: [],
+                coverage,
+                feedback: `interaction gate: the artifact failed to load in a real browser — ` +
+                    `${String(e).slice(0, 200)}\n` +
+                    `Nothing could be driven, so no behaviour was verified. Check the entry ` +
+                    `path (${manifest.entry}) resolves and the page reaches 'load'.`,
+            };
+        }
+        const first = await sampleWatchdog(driver, watchExprs);
+        if (first)
+            samples.push({ ...first, segment });
+        for (const probe of probes) {
+            if (Date.now() - startedAt > budgetMs) {
+                results.push({
+                    probeId: probe.id,
+                    description: probe.description,
+                    mode: probe.mode,
+                    requirementIds: probe.requirementIds ?? [],
+                    passed: false,
+                    skipped: true,
+                    skipReason: `interaction budget of ${budgetMs}ms exhausted before this probe ran`,
+                    assertions: [],
+                    errors: [],
+                    durationMs: 0,
+                });
+                continue;
+            }
+            // Fresh page per probe: shared state makes results order-dependent and
+            // reports one probe's damage as the next probe's defect.
+            if (ranAny) {
+                if (driver.reset) {
+                    try {
+                        await driver.reset();
+                        segment++;
+                    }
+                    catch (e) {
+                        // Silence here would read exactly like a properly isolated run,
+                        // while every later probe inherits the previous probe's state.
+                        resetProblems.push(`before ${probe.id}: ${String(e).slice(0, 120)}`);
+                    }
+                }
+                else {
+                    resetProblems.push(`before ${probe.id}: this driver cannot reset between probes`);
+                }
+            }
+            ranAny = true;
+            const evPath = evidencePathFor(evidence, probe.id);
+            results.push(await runProbe(driver, probe, {
+                ...(evPath ? { evidencePath: evPath } : {}),
+                // Leave room inside the overall budget so a single probe cannot eat it.
+                ...(options.probeTimeoutMs ? { timeoutMs: options.probeTimeoutMs } : {}),
+            }));
+            const s = await sampleWatchdog(driver, watchExprs);
+            if (s)
+                samples.push({ ...s, segment });
+        }
+        // A final short window so "is the loop still ticking NOW" is answered by
+        // fresh frames rather than a cumulative count from earlier in the run.
+        await delay(600);
+        const last = await sampleWatchdog(driver, watchExprs);
+        if (last)
+            samples.push({ ...last, segment });
+        let driverErrors = [];
+        try {
+            driverErrors = driver.errors();
+        }
+        catch {
+            /* an unreadable error channel must not abort the verdict */
+        }
+        const watchdog = samples.length > 0 ? judgeWatchdog(samples, driverErrors) : undefined;
+        // Coverage from the probes that actually RAN — a probe skipped for budget
+        // exhaustion must not mark its requirement covered.
+        const ranIds = new Set(results.filter((r) => !r.skipped).map((r) => r.probeId));
+        const ranCoverage = coverageOf(manifest, probes.filter((p) => ranIds.has(p.id)));
+        // Say WHICH artifact was driven. `findWebEntry` prefers the shallowest
+        // entry point, so a stray index.html left at the project root silently
+        // shadows the real deliverable in a subdirectory — the gate then reports
+        // confident failures about a page the author never meant to ship. Observed
+        // live: a runaway agent wrote a second copy of a game at the project root
+        // and every probe failed against it while the real build was fine.
+        const verdict = judgeInteraction(manifest, results, ranCoverage, watchdog, {
+            ...(options.strictCoverage ? { strictCoverage: true } : {}),
+        });
+        verdict.feedback += `\nserved: ${webRoot ?? projectRoot}/${manifest.entry}`;
+        if (resetProblems.length > 0) {
+            verdict.feedback +=
+                `\n⚠ ${resetProblems.length} probe(s) ran WITHOUT a clean reset, so they inherited the ` +
+                    `previous probe's state and their results may be order-dependent:\n  ` +
+                    resetProblems.slice(0, 5).join('\n  ');
+        }
+        if (options.specText && manifestIsStale(manifest, options.specText)) {
+            verdict.feedback +=
+                `\n⚠ these probes were mined from DIFFERENT requirements than the current ones — ` +
+                    `re-run \`uap interaction mine\`. A pass here is evidence about the old requirements.`;
+        }
+        return verdict;
+    }
+    finally {
+        // Guarded: a rejecting stop() in a bare `finally` REPLACES the computed
+        // verdict with a throw, which would escape runVerify and destroy its
+        // documented exit-code contract.
+        try {
+            await driver.stop();
+        }
+        catch {
+            /* teardown failure must not lose the verdict */
+        }
+    }
+}
+export async function runInteractionGate(projectRoot, options = {}) {
+    try {
+        return await runGate(projectRoot, options);
+    }
+    catch (e) {
+        // Never let this gate crash `uap verify`. The visual gate degrades the same
+        // way; an exception here would bypass the 0/1/3 exit contract the Stop hook
+        // depends on and abort the session with a stack trace.
+        return skippedVerdict(`interaction gate error: ${String(e).slice(0, 200)}`);
+    }
+}
+/** One-line summary for the verify report. */
+export function interactionSummary(v) {
+    if (v.skipped)
+        return `interaction gate: SKIPPED (${v.skipReason ?? 'no reason'})`;
+    const ran = v.results.filter((r) => !r.skipped).length;
+    const ok = v.results.filter((r) => !r.skipped && r.passed).length;
+    return `interaction gate: ${v.passed ? 'PASS' : 'FAIL'} — ${ok}/${ran} probe(s), requirements covered ${v.coverage.covered}/${v.coverage.total}`;
+}
+//# sourceMappingURL=interaction-gate.js.map

package/dist/delivery/interaction-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-gate.js","sourceRoot":"","sources":["../../src/delivery/interaction-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAyBhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC,yEAAyE;AACzE,KAAK,UAAU,cAAc,CAC3B,MAAyB,EACzB,UAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc;YAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC;YACzC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,OAAe;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,WAAmB,EACnB,OAA+B;IAE/B,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,cAAc,CACnB,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,qEAAqE;YACrE,sEAAsE;YACtE,wCAAwC;YACxC,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;gBACjD,QAAQ,EACN,gGAAgG;oBAChG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aACpD,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAK,CAAC,MAAM,CAAiB,CAAC;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,kEAAkE;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,sCAAsC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5F,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5B,OAAO,cAAc,CACnB,gCAAgC,QAAQ,CAAC,IAAI,mCAAmC,EAChF,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;QAC1D,OAAO,cAAc,CAAC,mEAAmE,EAAE,QAAQ,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,2EAA2E;QAC3E,6DAA6D;QAC7D,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC;QACjC,IAAI,oBAAoB,CAAC;YACvB,WAAW;YACX,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAkD,CAAC;YACjE,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,kEAAkE;gBAClE,OAAO,cAAc,CAAC,uBAAuB,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACrF,CAAC;YACD,yEAAyE;YACzE,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ;gBACR,QAAQ,EACN,oEAAoE;oBACpE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI;oBAC9B,yEAAyE;oBACzE,SAAS,QAAQ,CAAC,KAAK,yCAAyC;aACnE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC;oBACX,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;oBAC1C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,yBAAyB,QAAQ,oCAAoC;oBACjF,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,UAAU,EAAE,CAAC;iBACd,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,uEAAuE;YACvE,yDAAyD;YACzD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;wBACrB,OAAO,EAAE,CAAC;oBACZ,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,gEAAgE;wBAChE,+DAA+D;wBAC/D,aAAa,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,aAAa,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,EAAE,2CAA2C,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YACD,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CACV,MAAM,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE;gBAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,wEAAwE;gBACxE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,CAAC,CACH,CAAC;YACF,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7C,IAAI,YAAY,GAAa,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,0EAA0E;QAC1E,oDAAoD;QACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,UAAU,CAC5B,QAAQ,EACR,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACvC,CAAC;QACF,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE;YACzE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,IAAI,aAAa,OAAO,IAAI,WAAW,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,QAAQ;gBACd,OAAO,aAAa,CAAC,MAAM,6DAA6D;oBACxF,sEAAsE;oBACtE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,QAAQ;gBACd,kFAAkF;oBAClF,sFAAsF,CAAC;QAC3F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,qEAAqE;QACrE,iCAAiC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,UAAkC,EAAE;IAEpC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,4EAA4E;QAC5E,4EAA4E;QAC5E,uDAAuD;QACvD,OAAO,cAAc,CAAC,2BAA2B,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,kBAAkB,CAAC,CAAqB;IACtD,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,8BAA8B,CAAC,CAAC,UAAU,IAAI,WAAW,GAAG,CAAC;IACnF,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,IAAI,GAAG,mCAAmC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnJ,CAAC"}

package/dist/delivery/mission-acceptance.d.ts

@@ -20,6 +20,7 @@ import type { AcceptanceGate, LoopExecutor } from './convergence-loop.js';
 import { runAcceptanceGate, type AcceptanceResult } from './acceptance-judge.js';
 import { runExecutionGate } from './execution-gate.js';
 import { runVisualGate } from './visual-gate.js';
+import { runInteractionGate } from './interaction-gate.js';
 import { buildUserPathsNote } from './user-validation.js';
 import type { SpecRegistry } from './spec-registry.js';
 /**
@@ -53,6 +54,7 @@ export interface MissionAcceptanceDeps {
     /** Test seams — default to the real gates. */
     executionGate?: typeof runExecutionGate;
     visualGate?: typeof runVisualGate;
+    interactionGate?: typeof runInteractionGate;
     visionReview?: typeof visionAcceptanceFeedback;
     judge?: typeof runAcceptanceGate;
     userPathsNote?: typeof buildUserPathsNote;