@riddledc/riddle-proof 0.5.32 → 0.5.34

package/dist/{chunk-R4BPJNAM.js → chunk-4YCWZVBN.js}

@@ -63,6 +63,11 @@ function ensureAction(action) {
 function workflowFile(riddleProofDir, action) {
   return path.join(riddleProofDir, "pipelines", `riddle-proof-${action}.lobster`);
 }
+function asJsonString(value) {
+  if (value === void 0 || value === null || value === "") return "";
+  if (typeof value === "string") return value;
+  return JSON.stringify(value);
+}
 function buildSetupArgs(params, config) {
   if (!params.repo) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
@@ -78,8 +83,13 @@ function buildSetupArgs(params, config) {
     prod_url: params.prod_url || "",
     capture_script: captureScript,
     success_criteria: params.success_criteria || "",
-    assertions_json: params.assertions_json || "",
+    assertions_json: params.assertions_json || asJsonString(params.assertions),
     verification_mode: params.verification_mode || "proof",
+    resume_session: params.resume_session || "",
+    target_image_url: params.target_image_url || "",
+    target_image_hash: params.target_image_hash || "",
+    viewport_matrix_json: params.viewport_matrix_json || asJsonString(params.viewport_matrix),
+    deterministic_setup_json: params.deterministic_setup_json || asJsonString(params.deterministic_setup),
     reference: requestedReference,
     base_branch: params.base_branch || "main",
     before_ref: params.before_ref || "",
@@ -322,6 +332,54 @@ function normalizedProofAssessment(state = {}) {
     source: source || null
   };
 }
+var VISUAL_FIRST_MODES = /* @__PURE__ */ new Set([
+  "visual",
+  "render",
+  "interaction",
+  "ui",
+  "layout",
+  "screenshot",
+  "canvas",
+  "animation"
+]);
+function objectValue(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function normalizedVerificationMode(state = {}) {
+  const bundle = objectValue(state?.evidence_bundle);
+  const bundleMode = String(bundle.verification_mode || "").trim().toLowerCase();
+  if (bundleMode) return bundleMode;
+  return String(state?.verification_mode || "proof").trim().toLowerCase() || "proof";
+}
+function visualDeltaRequiredForState(state = {}) {
+  const bundle = objectValue(state?.evidence_bundle);
+  const contract = objectValue(bundle.artifact_contract);
+  const required = objectValue(contract.required);
+  return required.visual_delta === true || VISUAL_FIRST_MODES.has(normalizedVerificationMode(state));
+}
+function visualDeltaForState(state = {}) {
+  const bundle = objectValue(state?.evidence_bundle);
+  const after = objectValue(bundle.after);
+  const afterDelta = objectValue(after.visual_delta);
+  if (Object.keys(afterDelta).length) return afterDelta;
+  const request = objectValue(state?.proof_assessment_request);
+  return objectValue(request.visual_delta);
+}
+function visualDeltaShipGateReason(state = {}) {
+  if (!visualDeltaRequiredForState(state)) return null;
+  const visualDelta = visualDeltaForState(state);
+  if (visualDelta.status === "measured" && visualDelta.passed === true) return null;
+  const status = String(visualDelta.status || "missing");
+  if (status === "unmeasured") {
+    return "visual_delta.status=unmeasured blocks ready_to_ship for visual/UI proof";
+  }
+  if (status === "measured" && visualDelta.passed === false) {
+    return "visual_delta.status=measured but visual_delta.passed=false blocks ready_to_ship for visual/UI proof";
+  }
+  const reason = String(visualDelta.reason || "").trim();
+  if (reason) return `visual_delta.status=${status} blocks ready_to_ship for visual/UI proof: ${reason}`;
+  return `visual_delta.status=${status} blocks ready_to_ship for visual/UI proof`;
+}
 function requiredBaselineLabelsForState(state = {}) {
   const reference = normalizedReference(state);
   const labels = [];
@@ -337,6 +395,10 @@ function validateShipGate(state = {}) {
   const afterCdn = String(state?.after_cdn || "").trim();
   const verifyStatus = String(state?.verify_status || "").trim();
   const proofAssessment = normalizedProofAssessment(state);
+  const verificationMode = normalizedVerificationMode(state);
+  const visualDelta = visualDeltaForState(state);
+  const visualDeltaRequired = visualDeltaRequiredForState(state);
+  const visualDeltaBlocker = visualDeltaShipGateReason(state);
   const reasons = [];
   if (!["before", "prod", "both"].includes(reference)) {
     reasons.push(`reference must be before, prod, or both; got ${reference}`);
@@ -365,19 +427,26 @@ function validateShipGate(state = {}) {
   if (proofAssessment.decision !== "ready_to_ship") {
     reasons.push("proof_assessment.decision must be ready_to_ship before ship");
   }
+  if (visualDeltaBlocker) {
+    reasons.push(visualDeltaBlocker);
+  }
   return {
     ok: reasons.length === 0,
     reasons,
     required_baselines: requiredBaselines,
     evidence: {
       reference,
+      verification_mode: verificationMode || null,
       prod_url: prodUrl || null,
       before_cdn: beforeCdn || null,
       prod_cdn: prodCdn || null,
       after_cdn: afterCdn || null,
       verify_status: verifyStatus || null,
       proof_assessment_decision: proofAssessment.decision,
-      proof_assessment_source: proofAssessment.source
+      proof_assessment_source: proofAssessment.source,
+      visual_delta_required: visualDeltaRequired,
+      visual_delta_status: typeof visualDelta.status === "string" ? visualDelta.status : null,
+      visual_delta_passed: typeof visualDelta.passed === "boolean" ? visualDelta.passed : null
     }
   };
 }
@@ -590,6 +659,11 @@ function mergeStateFromParams(statePath, params) {
     "success_criteria",
     "assertions_json",
     "verification_mode",
+    "resume_session",
+    "target_image_url",
+    "target_image_hash",
+    "viewport_matrix_json",
+    "deterministic_setup_json",
     "base_branch",
     "before_ref",
     "context",
@@ -691,23 +765,36 @@ function mergeStateFromParams(statePath, params) {
       state.proof_assessment_source = null;
     } else {
       const parsed = JSON.parse(raw);
-      state.proof_assessment = {
+      const assessment = {
         ...parsed,
         source: (parsed?.source || "supervising_agent").toString()
       };
+      const readyBlocker = assessment?.decision === "ready_to_ship" ? visualDeltaShipGateReason({ ...state, proof_assessment: assessment, proof_assessment_source: assessment.source }) : null;
+      if (readyBlocker) {
+        assessment.blocked_decision = assessment.decision;
+        assessment.decision = "needs_richer_proof";
+        if (assessment.recommended_stage === "ship") assessment.recommended_stage = "verify";
+        if (assessment.continue_with_stage === "ship") assessment.continue_with_stage = "verify";
+        const blockers = Array.isArray(assessment.blockers) ? assessment.blockers : [];
+        assessment.blockers = [...blockers, readyBlocker];
+      }
+      state.proof_assessment = assessment;
       state.proof_assessment_source = state.proof_assessment.source;
-      if (typeof parsed?.decision === "string") {
-        state.proof_decision = parsed.decision;
+      if (typeof state.proof_assessment?.decision === "string") {
+        state.proof_decision = state.proof_assessment.decision;
       }
       if (typeof parsed?.summary === "string") {
         state.proof_assessment_summary = normalizeOptionalString(parsed.summary) || null;
       }
-      if (parsed?.decision === "ready_to_ship") {
+      if (state.proof_assessment?.decision === "ready_to_ship") {
         state.merge_recommendation = "ready-to-ship";
-      } else if (typeof parsed?.decision === "string" && parsed.decision.trim()) {
+      } else if (typeof state.proof_assessment?.decision === "string" && state.proof_assessment.decision.trim()) {
         state.merge_recommendation = "do-not-merge";
       }
       appendProofSummaryLine(state, `Supervising proof assessment: ${state.proof_assessment.decision || "unknown"}`);
+      if (readyBlocker) {
+        appendProofSummaryLine(state, `Ready-to-ship assessment blocked: ${readyBlocker}`);
+      }
       if (state.proof_assessment_summary) {
         appendProofSummaryLine(state, `Assessment summary: ${state.proof_assessment_summary}`);
       }
@@ -808,7 +895,10 @@ function summarizeState(state) {
     explicit_stage_gate: Boolean(state.explicit_stage_gate),
     last_requested_advance_stage: state.last_requested_advance_stage || null,
     recon_results: state.recon_results || null,
-    verify_results: state.verify_results || null
+    verify_results: state.verify_results || null,
+    proof_session: state.proof_session || null,
+    parent_proof_session: state.parent_proof_session || null,
+    proof_session_artifact_url: state.proof_session_artifact_url || null
   };
   const parts = [
     state.workspace_ready ? "workspace ready" : "workspace not ready",
@@ -848,6 +938,9 @@ export {
   setStageDecisionRequest,
   checkpointContinueStage,
   invalidateVerifyEvidence,
+  visualDeltaRequiredForState,
+  visualDeltaForState,
+  visualDeltaShipGateReason,
   requiredBaselineLabelsForState,
   validateShipGate,
   buildCheckpointContract,

package/dist/{chunk-LIDYNU7Q.js → chunk-7R6ZQE3X.js}

@@ -5,7 +5,10 @@ import {
   createRunStatusSnapshot,
   normalizeRunParams,
   setRunStatus
-} from "./chunk-7ZJAUEUN.js";
+} from "./chunk-OASB3CYU.js";
+import {
+  visualDeltaShipGateReason
+} from "./chunk-4YCWZVBN.js";
 import {
   applyTerminalMetadata,
   compactRecord,
@@ -13,7 +16,7 @@ import {
   nonEmptyString,
   normalizeTerminalMetadata,
   recordValue
-} from "./chunk-TMMKRKY5.js";
+} from "./chunk-J2MERROF.js";
 
 // src/engine-harness.ts
 import { execFileSync } from "child_process";
@@ -291,6 +294,26 @@ function proofAssessmentContinuation(result, payload) {
   const proof_assessment_json = jsonParam(payload);
   return { ...baseContinuation(result), proof_assessment_json };
 }
+function proofAssessmentVisualBlocker(state, payload) {
+  if (!proofAssessmentRequestsShip(payload)) return null;
+  const source = nonEmptyString(payload.source) || "supervising_agent";
+  return visualDeltaShipGateReason({
+    ...state || {},
+    proof_assessment: { ...payload, source },
+    proof_assessment_source: source
+  });
+}
+function blockedProofAssessmentPayload(payload, blocker) {
+  const blockers = Array.isArray(payload.blockers) ? payload.blockers.filter((item) => typeof item === "string") : [];
+  return {
+    ...payload,
+    blocked_decision: payload.decision || "ready_to_ship",
+    decision: "needs_richer_proof",
+    recommended_stage: payload.recommended_stage === "ship" ? "verify" : payload.recommended_stage || "verify",
+    continue_with_stage: payload.continue_with_stage === "ship" ? "verify" : payload.continue_with_stage || "verify",
+    blockers: [...blockers, blocker]
+  };
+}
 function contextFor(request, state, result) {
   return {
     request,
@@ -660,6 +683,20 @@ async function routeCheckpoint(request, state, result, agent, input) {
       summary: assessment.summary,
       details: { payload }
     });
+    const visualBlocker = proofAssessmentVisualBlocker({
+      ...context.fullRiddleState || {},
+      verification_mode: context.fullRiddleState?.verification_mode || request.verification_mode
+    }, payload);
+    if (visualBlocker) {
+      recordEvent(state, {
+        kind: "agent.proof_assessment.blocked",
+        checkpoint,
+        stage: "verify",
+        summary: visualBlocker,
+        details: { payload }
+      });
+      return { next: proofAssessmentContinuation(result, blockedProofAssessmentPayload(payload, visualBlocker)) };
+    }
     if (effectiveShipMode(request, input.config) !== "ship" && proofAssessmentRequestsShip(payload)) {
       return {
         terminal: terminalResult(

package/dist/{chunk-TMMKRKY5.js → chunk-J2MERROF.js}

@@ -202,6 +202,7 @@ function createRunResult(input) {
     merge_recommendation: state.merge_recommendation,
     finalized: state.finalized,
     blocker: state.blocker,
+    proof_session: state.proof_session,
     evidence_bundle: input.evidence_bundle,
     raw: input.raw
   });

package/dist/{chunk-F6VFKS7K.js → chunk-MQ2BHHLX.js}

@@ -3,10 +3,10 @@ import {
   appendStageHeartbeat,
   createRunState,
   setRunStatus
-} from "./chunk-7ZJAUEUN.js";
+} from "./chunk-OASB3CYU.js";
 import {
   createRunResult
-} from "./chunk-TMMKRKY5.js";
+} from "./chunk-J2MERROF.js";
 
 // src/runner.ts
 function errorDetails(error) {

package/dist/{chunk-7ZJAUEUN.js → chunk-OASB3CYU.js}

@@ -3,7 +3,7 @@ import {
   isTerminalStatus,
   nonEmptyString,
   recordValue
-} from "./chunk-TMMKRKY5.js";
+} from "./chunk-J2MERROF.js";
 
 // src/state.ts
 var RIDDLE_PROOF_RUN_STATE_VERSION = "riddle-proof.run-state.v1";
@@ -77,6 +77,11 @@ function normalizeRunParams(input) {
     success_criteria: input.success_criteria,
     assertions: input.assertions,
     verification_mode: input.verification_mode,
+    resume_session: input.resume_session,
+    target_image_url: input.target_image_url,
+    target_image_hash: input.target_image_hash,
+    viewport_matrix: input.viewport_matrix,
+    deterministic_setup: input.deterministic_setup,
     reference: input.reference,
     base_branch: input.base_branch,
     before_ref: input.before_ref,

package/dist/chunk-ODORKNSO.js

@@ -0,0 +1,121 @@
+// src/proof-session.ts
+import { createHash, randomUUID } from "crypto";
+var RIDDLE_PROOF_VISUAL_SESSION_VERSION = "riddle-proof.visual-session.v1";
+var RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION = "riddle-proof.visual-session.fingerprint.v1";
+function trim(value) {
+  const text = String(value ?? "").trim();
+  return text || void 0;
+}
+function hashString(value) {
+  const text = trim(value);
+  if (!text) return void 0;
+  return createHash("sha256").update(text).digest("hex");
+}
+function stableJson(value) {
+  if (value === void 0) return "null";
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map((item) => stableJson(item)).join(",")}]`;
+  const record = value;
+  return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(",")}}`;
+}
+function withoutUndefined(record) {
+  for (const key of Object.keys(record)) {
+    if (record[key] === void 0) delete record[key];
+  }
+  return record;
+}
+function visualSessionFingerprintBasis(input) {
+  return withoutUndefined({
+    version: RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION,
+    repo: trim(input.repo),
+    route: trim(input.route),
+    wait_for_selector: trim(input.wait_for_selector),
+    reference: trim(input.reference),
+    verification_mode: trim(input.verification_mode)?.toLowerCase(),
+    target_image_url: trim(input.target_image_url),
+    target_image_hash: trim(input.target_image_hash),
+    viewport_matrix: input.viewport_matrix,
+    deterministic_setup: input.deterministic_setup,
+    assertions: input.assertions,
+    capture_script_hash: hashString(input.capture_script)
+  });
+}
+function visualSessionFingerprint(input) {
+  const basis = input.version === RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION ? input : visualSessionFingerprintBasis(input);
+  return createHash("sha256").update(stableJson(basis)).digest("hex");
+}
+function buildVisualProofSession(input) {
+  const basis = visualSessionFingerprintBasis(input);
+  const fingerprint = visualSessionFingerprint(basis);
+  const session = {
+    version: RIDDLE_PROOF_VISUAL_SESSION_VERSION,
+    session_id: `rps_${(/* @__PURE__ */ new Date()).toISOString().replace(/[-:.TZ]/g, "").slice(0, 14)}_${randomUUID().slice(0, 8)}`,
+    run_id: trim(input.run_id),
+    parent_session_id: input.parent?.session_id || null,
+    parent_fingerprint: input.parent?.fingerprint || null,
+    created_at: (/* @__PURE__ */ new Date()).toISOString(),
+    fingerprint,
+    fingerprint_basis: basis,
+    repo: trim(input.repo),
+    branch: trim(input.branch),
+    route: withoutUndefined({
+      path: trim(input.route),
+      observed_after_path: trim(input.observed_after_path)
+    }),
+    reference: trim(input.reference),
+    verification_mode: trim(input.verification_mode),
+    target_image: withoutUndefined({
+      url: trim(input.target_image_url),
+      hash: trim(input.target_image_hash)
+    }),
+    viewport_matrix: input.viewport_matrix,
+    deterministic_setup: input.deterministic_setup,
+    capture: withoutUndefined({
+      proof_plan: trim(input.proof_plan),
+      capture_script: trim(input.capture_script),
+      wait_for_selector: trim(input.wait_for_selector)
+    }),
+    assertions: input.assertions,
+    artifacts: input.artifacts,
+    evidence: input.evidence,
+    status: trim(input.status)
+  };
+  return JSON.parse(JSON.stringify(session));
+}
+function parseVisualProofSession(value) {
+  const parsed = typeof value === "string" ? JSON.parse(value) : value;
+  if (!parsed || typeof parsed !== "object") throw new Error("proof session must be a JSON object");
+  const session = parsed;
+  if (session.version !== RIDDLE_PROOF_VISUAL_SESSION_VERSION) {
+    throw new Error(`unsupported proof session version: ${String(session.version || "")}`);
+  }
+  if (!session.session_id) throw new Error("proof session missing session_id");
+  if (!session.fingerprint) throw new Error("proof session missing fingerprint");
+  return session;
+}
+function compareVisualProofSessionFingerprint(parent, input) {
+  const actual = visualSessionFingerprintBasis(input);
+  const expected = parent.fingerprint_basis || {};
+  const keys = /* @__PURE__ */ new Set([...Object.keys(expected), ...Object.keys(actual)]);
+  const expectedRecord = expected;
+  const actualRecord = actual;
+  const mismatches = [];
+  for (const key of keys) {
+    const expectedValue = expectedRecord[key];
+    const actualValue = actualRecord[key];
+    if (stableJson(expectedValue) !== stableJson(actualValue)) {
+      mismatches.push({ key, expected: expectedValue, actual: actualValue });
+    }
+  }
+  return mismatches;
+}
+
+export {
+  RIDDLE_PROOF_VISUAL_SESSION_VERSION,
+  RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION,
+  visualSessionFingerprintBasis,
+  visualSessionFingerprint,
+  buildVisualProofSession,
+  parseVisualProofSession,
+  compareVisualProofSessionFingerprint
+};