@riddledc/riddle-proof 0.7.111 → 0.7.113

package/dist/{chunk-KKH76HIA.js → chunk-3CND75DM.js}

@@ -654,6 +654,48 @@ function normalizeNetworkMocks(value) {
   if (!Array.isArray(value)) throw new Error("target.network_mocks must be an array.");
   return value.map(normalizeNetworkMock);
 }
+function profileStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function responseHasRequestBodyContract(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 || profileStringList(response.request_body_patterns).length > 0 || profileStringList(response.request_body_not_contains).length > 0 || profileStringList(response.request_body_not_patterns).length > 0;
+}
+function responseHasOnlyPositiveTextSelector(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 && profileStringList(response.request_body_patterns).length === 0 && profileStringList(response.request_body_not_contains).length === 0 && profileStringList(response.request_body_not_patterns).length === 0;
+}
+function responseMayShadowLaterRequestBodyMatch(earlier, later) {
+  if (!responseHasOnlyPositiveTextSelector(earlier) || !responseHasRequestBodyContract(later)) return false;
+  const earlierContains = profileStringList(earlier.request_body_contains);
+  const laterContains = profileStringList(later.request_body_contains);
+  if (!laterContains.length) return false;
+  return earlierContains.every((fragment) => laterContains.includes(fragment));
+}
+function responseLabel(response, index) {
+  return response.label ? `"${response.label}"` : `responses[${index}]`;
+}
+function collectRiddleProofProfileWarnings(profile) {
+  const warnings = [];
+  for (const [mockIndex, mock] of (profile.target.network_mocks || []).entries()) {
+    const responses = Array.isArray(mock.responses) ? mock.responses : [];
+    if (responses.length < 2) continue;
+    for (let laterIndex = 1; laterIndex < responses.length; laterIndex += 1) {
+      const later = responses[laterIndex];
+      if (!responseHasRequestBodyContract(later)) continue;
+      for (let earlierIndex = 0; earlierIndex < laterIndex; earlierIndex += 1) {
+        const earlier = responses[earlierIndex];
+        if (!responseMayShadowLaterRequestBodyMatch(earlier, later)) continue;
+        const mockLabel = mock.label ? ` (${mock.label})` : "";
+        warnings.push(
+          `target.network_mocks[${mockIndex}]${mockLabel} ${responseLabel(earlier, earlierIndex)} can shadow ${responseLabel(later, laterIndex)} because the earlier request_body_contains fragments are a subset of the later response and have no negative or pattern disambiguator. First matching request-body response wins.`
+        );
+        break;
+      }
+    }
+  }
+  return warnings;
+}
 function normalizeRouteInventoryPath(value, label) {
   const path = stringValue(value);
   if (!path) throw new Error(`${label} requires path.`);
@@ -1012,6 +1054,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = value?.split(";")[0]?.trim().toLowerCase();
   return normalized || void 0;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = /* @__PURE__ */ new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   const expected = check.allowed_content_types;
   if (!expected?.length) return true;
@@ -1020,8 +1069,7 @@ function linkStatusContentTypeOk(result, check) {
   return expected.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -2042,11 +2090,11 @@ function networkMockResponseHitsByLabel(events) {
   for (const event of events) {
     if (!event || event.ok === false) continue;
     const label = typeof event.label === "string" ? event.label : "";
-    const responseLabel = typeof event.response_label === "string" ? event.response_label : "";
-    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel && responseLabel !== label);
-    if (!label || !responseLabel || !hasSequenceResponse) continue;
+    const responseLabel2 = typeof event.response_label === "string" ? event.response_label : "";
+    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel2 && responseLabel2 !== label);
+    if (!label || !responseLabel2 || !hasSequenceResponse) continue;
     responseHits[label] || (responseHits[label] = {});
-    responseHits[label][responseLabel] = (responseHits[label][responseLabel] || 0) + 1;
+    responseHits[label][responseLabel2] = (responseHits[label][responseLabel2] || 0) + 1;
   }
   return responseHits;
 }
@@ -2069,6 +2117,7 @@ function profileStatusFromEvidence(profile, evidence, checks) {
 }
 function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
   const capturedAt = evidence?.captured_at || (/* @__PURE__ */ new Date()).toISOString();
+  const warnings = collectRiddleProofProfileWarnings(profile);
   const checks = evidence ? [
     assessNetworkMocksFromEvidence(profile, evidence),
     assessSetupActionsFromEvidence(profile, evidence),
@@ -2094,6 +2143,7 @@ function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
     checks,
     summary: summarizeRiddleProofProfileResult({ profile_name: profile.name, status, checks, viewports: evidence?.viewports || [] }),
     captured_at: capturedAt,
+    warnings: warnings.length ? warnings : void 0,
     evidence,
     riddle: options.riddle
   };
@@ -2142,6 +2192,7 @@ function createRiddleProofProfileConfigurationError(name, error, runner = "riddl
 function createRiddleProofProfileEnvironmentBlockedResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "Riddle runner did not complete successfully.";
   const environmentBlocker = extractRiddleRunnerBlocker(message);
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -2153,6 +2204,7 @@ function createRiddleProofProfileEnvironmentBlockedResult(input) {
     checks: [],
     summary: summarizeEnvironmentBlockedRunner(input.profile.name, environmentBlocker),
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     environment_blocker: environmentBlocker,
     error: message
@@ -2211,6 +2263,7 @@ function summarizeEnvironmentBlockedRunner(profileName, blocker) {
 }
 function createRiddleProofProfileInsufficientResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "No proof.json profile result artifact was found.";
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -2222,6 +2275,7 @@ function createRiddleProofProfileInsufficientResult(input) {
     checks: [],
     summary: `${input.profile.name} did not produce enough evidence for a profile judgment.`,
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     error: message
   };
@@ -2426,6 +2480,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkStatusContentType(result.content_type);
@@ -2433,8 +2494,7 @@ function linkStatusContentTypeOk(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -3528,6 +3588,7 @@ function assessProfile(profile, evidence) {
     checks,
     summary,
     captured_at: evidence.captured_at,
+    warnings: profileWarnings.length ? profileWarnings : undefined,
     evidence,
   };
 }
@@ -3536,11 +3597,14 @@ function assessProfile(profile, evidence) {
 function buildRiddleProofProfileScript(profile) {
   const targetUrl = resolveRiddleProofProfileTargetUrl(profile);
   const slug = slugifyRiddleProofProfileName(profile.name);
+  const profileWarnings = collectRiddleProofProfileWarnings(profile);
   const serializableProfile = JSON.stringify(profile);
+  const serializableProfileWarnings = JSON.stringify(profileWarnings);
   const serializableTargetUrl = JSON.stringify(targetUrl);
   const serializableSlug = JSON.stringify(slug);
   return String.raw`
 const profile = ${serializableProfile};
+const profileWarnings = ${serializableProfileWarnings};
 const targetUrl = ${serializableTargetUrl};
 const profileSlug = ${serializableSlug};
 const capturedAt = new Date().toISOString();
@@ -4566,6 +4630,13 @@ function normalizeLinkProbeContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkProbeContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkProbeContentTypeAllowed(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkProbeContentType(result.content_type);
@@ -4573,8 +4644,7 @@ function linkProbeContentTypeAllowed(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkProbeContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkProbeContentTypesMatch(actual, normalized);
   });
 }
 function linkProbeResponseFields(response, method) {
@@ -5668,6 +5738,7 @@ export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES,
   slugifyRiddleProofProfileName,
+  collectRiddleProofProfileWarnings,
   normalizeRiddleProofProfile,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec,

package/dist/cli.cjs

@@ -7547,6 +7547,48 @@ function normalizeNetworkMocks(value) {
   if (!Array.isArray(value)) throw new Error("target.network_mocks must be an array.");
   return value.map(normalizeNetworkMock);
 }
+function profileStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function responseHasRequestBodyContract(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 || profileStringList(response.request_body_patterns).length > 0 || profileStringList(response.request_body_not_contains).length > 0 || profileStringList(response.request_body_not_patterns).length > 0;
+}
+function responseHasOnlyPositiveTextSelector(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 && profileStringList(response.request_body_patterns).length === 0 && profileStringList(response.request_body_not_contains).length === 0 && profileStringList(response.request_body_not_patterns).length === 0;
+}
+function responseMayShadowLaterRequestBodyMatch(earlier, later) {
+  if (!responseHasOnlyPositiveTextSelector(earlier) || !responseHasRequestBodyContract(later)) return false;
+  const earlierContains = profileStringList(earlier.request_body_contains);
+  const laterContains = profileStringList(later.request_body_contains);
+  if (!laterContains.length) return false;
+  return earlierContains.every((fragment) => laterContains.includes(fragment));
+}
+function responseLabel(response, index) {
+  return response.label ? `"${response.label}"` : `responses[${index}]`;
+}
+function collectRiddleProofProfileWarnings(profile) {
+  const warnings = [];
+  for (const [mockIndex, mock] of (profile.target.network_mocks || []).entries()) {
+    const responses = Array.isArray(mock.responses) ? mock.responses : [];
+    if (responses.length < 2) continue;
+    for (let laterIndex = 1; laterIndex < responses.length; laterIndex += 1) {
+      const later = responses[laterIndex];
+      if (!responseHasRequestBodyContract(later)) continue;
+      for (let earlierIndex = 0; earlierIndex < laterIndex; earlierIndex += 1) {
+        const earlier = responses[earlierIndex];
+        if (!responseMayShadowLaterRequestBodyMatch(earlier, later)) continue;
+        const mockLabel = mock.label ? ` (${mock.label})` : "";
+        warnings.push(
+          `target.network_mocks[${mockIndex}]${mockLabel} ${responseLabel(earlier, earlierIndex)} can shadow ${responseLabel(later, laterIndex)} because the earlier request_body_contains fragments are a subset of the later response and have no negative or pattern disambiguator. First matching request-body response wins.`
+        );
+        break;
+      }
+    }
+  }
+  return warnings;
+}
 function normalizeRouteInventoryPath(value, label) {
   const path7 = stringValue2(value);
   if (!path7) throw new Error(`${label} requires path.`);
@@ -7905,6 +7947,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = value?.split(";")[0]?.trim().toLowerCase();
   return normalized || void 0;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = /* @__PURE__ */ new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   const expected = check.allowed_content_types;
   if (!expected?.length) return true;
@@ -7913,8 +7962,7 @@ function linkStatusContentTypeOk(result, check) {
   return expected.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -8935,11 +8983,11 @@ function networkMockResponseHitsByLabel(events) {
   for (const event of events) {
     if (!event || event.ok === false) continue;
     const label = typeof event.label === "string" ? event.label : "";
-    const responseLabel = typeof event.response_label === "string" ? event.response_label : "";
-    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel && responseLabel !== label);
-    if (!label || !responseLabel || !hasSequenceResponse) continue;
+    const responseLabel2 = typeof event.response_label === "string" ? event.response_label : "";
+    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel2 && responseLabel2 !== label);
+    if (!label || !responseLabel2 || !hasSequenceResponse) continue;
     responseHits[label] || (responseHits[label] = {});
-    responseHits[label][responseLabel] = (responseHits[label][responseLabel] || 0) + 1;
+    responseHits[label][responseLabel2] = (responseHits[label][responseLabel2] || 0) + 1;
   }
   return responseHits;
 }
@@ -8962,6 +9010,7 @@ function profileStatusFromEvidence(profile, evidence, checks) {
 }
 function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
   const capturedAt = evidence?.captured_at || (/* @__PURE__ */ new Date()).toISOString();
+  const warnings = collectRiddleProofProfileWarnings(profile);
   const checks = evidence ? [
     assessNetworkMocksFromEvidence(profile, evidence),
     assessSetupActionsFromEvidence(profile, evidence),
@@ -8987,6 +9036,7 @@ function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
     checks,
     summary: summarizeRiddleProofProfileResult({ profile_name: profile.name, status, checks, viewports: evidence?.viewports || [] }),
     captured_at: capturedAt,
+    warnings: warnings.length ? warnings : void 0,
     evidence,
     riddle: options.riddle
   };
@@ -9019,6 +9069,7 @@ function profileStatusExitCode(profile, status) {
 function createRiddleProofProfileEnvironmentBlockedResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "Riddle runner did not complete successfully.";
   const environmentBlocker = extractRiddleRunnerBlocker(message);
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -9030,6 +9081,7 @@ function createRiddleProofProfileEnvironmentBlockedResult(input) {
     checks: [],
     summary: summarizeEnvironmentBlockedRunner(input.profile.name, environmentBlocker),
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     environment_blocker: environmentBlocker,
     error: message
@@ -9088,6 +9140,7 @@ function summarizeEnvironmentBlockedRunner(profileName, blocker) {
 }
 function createRiddleProofProfileInsufficientResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "No proof.json profile result artifact was found.";
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -9099,6 +9152,7 @@ function createRiddleProofProfileInsufficientResult(input) {
     checks: [],
     summary: `${input.profile.name} did not produce enough evidence for a profile judgment.`,
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     error: message
   };
@@ -9303,6 +9357,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkStatusContentType(result.content_type);
@@ -9310,8 +9371,7 @@ function linkStatusContentTypeOk(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -10405,6 +10465,7 @@ function assessProfile(profile, evidence) {
     checks,
     summary,
     captured_at: evidence.captured_at,
+    warnings: profileWarnings.length ? profileWarnings : undefined,
     evidence,
   };
 }
@@ -10413,11 +10474,14 @@ function assessProfile(profile, evidence) {
 function buildRiddleProofProfileScript(profile) {
   const targetUrl = resolveRiddleProofProfileTargetUrl(profile);
   const slug = slugifyRiddleProofProfileName(profile.name);
+  const profileWarnings = collectRiddleProofProfileWarnings(profile);
   const serializableProfile = JSON.stringify(profile);
+  const serializableProfileWarnings = JSON.stringify(profileWarnings);
   const serializableTargetUrl = JSON.stringify(targetUrl);
   const serializableSlug = JSON.stringify(slug);
   return String.raw`
 const profile = ${serializableProfile};
+const profileWarnings = ${serializableProfileWarnings};
 const targetUrl = ${serializableTargetUrl};
 const profileSlug = ${serializableSlug};
 const capturedAt = new Date().toISOString();
@@ -11443,6 +11507,13 @@ function normalizeLinkProbeContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkProbeContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkProbeContentTypeAllowed(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkProbeContentType(result.content_type);
@@ -11450,8 +11521,7 @@ function linkProbeContentTypeAllowed(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkProbeContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkProbeContentTypesMatch(actual, normalized);
   });
 }
 function linkProbeResponseFields(response, method) {
@@ -12824,10 +12894,17 @@ function profileResultMarkdown(result) {
     `Captured: ${result.captured_at}`,
     "",
     result.summary,
-    "",
-    "## Checks",
     ""
   ];
+  if (Array.isArray(result.warnings) && result.warnings.length) {
+    lines.push("## Profile Warnings", "");
+    for (const warning of result.warnings.slice(0, 12)) {
+      lines.push(`- ${warning}`);
+    }
+    if (result.warnings.length > 12) lines.push(`- ${result.warnings.length - 12} additional warning(s) omitted.`);
+    lines.push("");
+  }
+  lines.push("## Checks", "");
   for (const check of result.checks) {
     lines.push(`- ${check.status}: ${profileCheckMarkdownLabel(check)}`);
     if (check.message) lines.push(`  ${check.message}`);
@@ -13102,7 +13179,7 @@ function profileNetworkMockSummaryMarkdown(result) {
     const responseHits = cliRecord(responseHitsByLabel[label]);
     const responseLabels = responseHits ? Object.keys(responseHits).sort() : [];
     if (responseHits && responseLabels.length) {
-      const responseParts = responseLabels.slice(0, 8).map((responseLabel) => `${responseLabel} ${cliRecordNumber(responseHits, responseLabel) ?? 0}`);
+      const responseParts = responseLabels.slice(0, 8).map((responseLabel2) => `${responseLabel2} ${cliRecordNumber(responseHits, responseLabel2) ?? 0}`);
       const omitted = responseLabels.length > 8 ? `; ${responseLabels.length - 8} additional response label(s) omitted` : "";
       lines.push(`- ${label} responses: ${responseParts.join("; ")}${omitted}`);
     }

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-KKH76HIA.js";
+} from "./chunk-3CND75DM.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -322,10 +322,17 @@ function profileResultMarkdown(result) {
     `Captured: ${result.captured_at}`,
     "",
     result.summary,
-    "",
-    "## Checks",
     ""
   ];
+  if (Array.isArray(result.warnings) && result.warnings.length) {
+    lines.push("## Profile Warnings", "");
+    for (const warning of result.warnings.slice(0, 12)) {
+      lines.push(`- ${warning}`);
+    }
+    if (result.warnings.length > 12) lines.push(`- ${result.warnings.length - 12} additional warning(s) omitted.`);
+    lines.push("");
+  }
+  lines.push("## Checks", "");
   for (const check of result.checks) {
     lines.push(`- ${check.status}: ${profileCheckMarkdownLabel(check)}`);
     if (check.message) lines.push(`  ${check.message}`);

package/dist/index.cjs

@@ -2948,6 +2948,7 @@ __export(index_exports, {
   checkpointResponseIdentity: () => checkpointResponseIdentity,
   checkpointSummaryFromState: () => checkpointSummaryFromState,
   collectRiddleProfileArtifactRefs: () => collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings: () => collectRiddleProofProfileWarnings,
   compactBasicGameplayText: () => compactBasicGameplayText,
   compactRecord: () => compactRecord,
   compareVisualProofSessionFingerprint: () => compareVisualProofSessionFingerprint,
@@ -9383,6 +9384,48 @@ function normalizeNetworkMocks(value) {
   if (!Array.isArray(value)) throw new Error("target.network_mocks must be an array.");
   return value.map(normalizeNetworkMock);
 }
+function profileStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function responseHasRequestBodyContract(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 || profileStringList(response.request_body_patterns).length > 0 || profileStringList(response.request_body_not_contains).length > 0 || profileStringList(response.request_body_not_patterns).length > 0;
+}
+function responseHasOnlyPositiveTextSelector(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 && profileStringList(response.request_body_patterns).length === 0 && profileStringList(response.request_body_not_contains).length === 0 && profileStringList(response.request_body_not_patterns).length === 0;
+}
+function responseMayShadowLaterRequestBodyMatch(earlier, later) {
+  if (!responseHasOnlyPositiveTextSelector(earlier) || !responseHasRequestBodyContract(later)) return false;
+  const earlierContains = profileStringList(earlier.request_body_contains);
+  const laterContains = profileStringList(later.request_body_contains);
+  if (!laterContains.length) return false;
+  return earlierContains.every((fragment) => laterContains.includes(fragment));
+}
+function responseLabel(response, index) {
+  return response.label ? `"${response.label}"` : `responses[${index}]`;
+}
+function collectRiddleProofProfileWarnings(profile) {
+  const warnings = [];
+  for (const [mockIndex, mock] of (profile.target.network_mocks || []).entries()) {
+    const responses = Array.isArray(mock.responses) ? mock.responses : [];
+    if (responses.length < 2) continue;
+    for (let laterIndex = 1; laterIndex < responses.length; laterIndex += 1) {
+      const later = responses[laterIndex];
+      if (!responseHasRequestBodyContract(later)) continue;
+      for (let earlierIndex = 0; earlierIndex < laterIndex; earlierIndex += 1) {
+        const earlier = responses[earlierIndex];
+        if (!responseMayShadowLaterRequestBodyMatch(earlier, later)) continue;
+        const mockLabel = mock.label ? ` (${mock.label})` : "";
+        warnings.push(
+          `target.network_mocks[${mockIndex}]${mockLabel} ${responseLabel(earlier, earlierIndex)} can shadow ${responseLabel(later, laterIndex)} because the earlier request_body_contains fragments are a subset of the later response and have no negative or pattern disambiguator. First matching request-body response wins.`
+        );
+        break;
+      }
+    }
+  }
+  return warnings;
+}
 function normalizeRouteInventoryPath(value, label) {
   const path6 = stringValue5(value);
   if (!path6) throw new Error(`${label} requires path.`);
@@ -9741,6 +9784,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = value?.split(";")[0]?.trim().toLowerCase();
   return normalized || void 0;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = /* @__PURE__ */ new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   const expected = check.allowed_content_types;
   if (!expected?.length) return true;
@@ -9749,8 +9799,7 @@ function linkStatusContentTypeOk(result, check) {
   return expected.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -10771,11 +10820,11 @@ function networkMockResponseHitsByLabel(events) {
   for (const event of events) {
     if (!event || event.ok === false) continue;
     const label = typeof event.label === "string" ? event.label : "";
-    const responseLabel = typeof event.response_label === "string" ? event.response_label : "";
-    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel && responseLabel !== label);
-    if (!label || !responseLabel || !hasSequenceResponse) continue;
+    const responseLabel2 = typeof event.response_label === "string" ? event.response_label : "";
+    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel2 && responseLabel2 !== label);
+    if (!label || !responseLabel2 || !hasSequenceResponse) continue;
     responseHits[label] || (responseHits[label] = {});
-    responseHits[label][responseLabel] = (responseHits[label][responseLabel] || 0) + 1;
+    responseHits[label][responseLabel2] = (responseHits[label][responseLabel2] || 0) + 1;
   }
   return responseHits;
 }
@@ -10798,6 +10847,7 @@ function profileStatusFromEvidence(profile, evidence, checks) {
 }
 function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
   const capturedAt = evidence?.captured_at || (/* @__PURE__ */ new Date()).toISOString();
+  const warnings = collectRiddleProofProfileWarnings(profile);
   const checks = evidence ? [
     assessNetworkMocksFromEvidence(profile, evidence),
     assessSetupActionsFromEvidence(profile, evidence),
@@ -10823,6 +10873,7 @@ function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
     checks,
     summary: summarizeRiddleProofProfileResult({ profile_name: profile.name, status, checks, viewports: evidence?.viewports || [] }),
     captured_at: capturedAt,
+    warnings: warnings.length ? warnings : void 0,
     evidence,
     riddle: options.riddle
   };
@@ -10871,6 +10922,7 @@ function createRiddleProofProfileConfigurationError(name, error, runner = "riddl
 function createRiddleProofProfileEnvironmentBlockedResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "Riddle runner did not complete successfully.";
   const environmentBlocker = extractRiddleRunnerBlocker(message);
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -10882,6 +10934,7 @@ function createRiddleProofProfileEnvironmentBlockedResult(input) {
     checks: [],
     summary: summarizeEnvironmentBlockedRunner(input.profile.name, environmentBlocker),
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     environment_blocker: environmentBlocker,
     error: message
@@ -10940,6 +10993,7 @@ function summarizeEnvironmentBlockedRunner(profileName, blocker) {
 }
 function createRiddleProofProfileInsufficientResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "No proof.json profile result artifact was found.";
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -10951,6 +11005,7 @@ function createRiddleProofProfileInsufficientResult(input) {
     checks: [],
     summary: `${input.profile.name} did not produce enough evidence for a profile judgment.`,
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     error: message
   };
@@ -11155,6 +11210,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkStatusContentType(result.content_type);
@@ -11162,8 +11224,7 @@ function linkStatusContentTypeOk(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -12257,6 +12318,7 @@ function assessProfile(profile, evidence) {
     checks,
     summary,
     captured_at: evidence.captured_at,
+    warnings: profileWarnings.length ? profileWarnings : undefined,
     evidence,
   };
 }
@@ -12265,11 +12327,14 @@ function assessProfile(profile, evidence) {
 function buildRiddleProofProfileScript(profile) {
   const targetUrl = resolveRiddleProofProfileTargetUrl(profile);
   const slug2 = slugifyRiddleProofProfileName(profile.name);
+  const profileWarnings = collectRiddleProofProfileWarnings(profile);
   const serializableProfile = JSON.stringify(profile);
+  const serializableProfileWarnings = JSON.stringify(profileWarnings);
   const serializableTargetUrl = JSON.stringify(targetUrl);
   const serializableSlug = JSON.stringify(slug2);
   return String.raw`
 const profile = ${serializableProfile};
+const profileWarnings = ${serializableProfileWarnings};
 const targetUrl = ${serializableTargetUrl};
 const profileSlug = ${serializableSlug};
 const capturedAt = new Date().toISOString();
@@ -13295,6 +13360,13 @@ function normalizeLinkProbeContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkProbeContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkProbeContentTypeAllowed(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkProbeContentType(result.content_type);
@@ -13302,8 +13374,7 @@ function linkProbeContentTypeAllowed(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkProbeContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkProbeContentTypesMatch(actual, normalized);
   });
 }
 function linkProbeResponseFields(response, method) {
@@ -14772,6 +14843,7 @@ function createRiddleApiClient(config = {}) {
   checkpointResponseIdentity,
   checkpointSummaryFromState,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   compactBasicGameplayText,
   compactRecord,
   compareVisualProofSessionFingerprint,

package/dist/index.d.cts

@@ -10,5 +10,5 @@ export { CreateCaptureDiagnosticInput, DEFAULT_DIAGNOSTIC_ARRAY_LIMIT, DEFAULT_D
 export { BuildVisualProofSessionInput, RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION, RIDDLE_PROOF_VISUAL_SESSION_VERSION, VisualProofSessionMismatch, buildVisualProofSession, compareVisualProofSessionFingerprint, parseVisualProofSession, visualSessionFingerprint, visualSessionFingerprintBasis } from './proof-session.cjs';
 export { AssessPlayabilityOptions, RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION, RIDDLE_PROOF_PLAYABILITY_VERSION, RiddleProofPlayabilityAssessment, RiddleProofPlayabilityEvidence, assessPlayabilityEvidence, extractPlayabilityEvidence, isRiddleProofPlayabilityMode } from './playability.cjs';
 export { AssessBasicGameplayOptions, AttachBasicGameplayArtifactOptions, BASIC_GAMEPLAY_ACTION_TYPES, BASIC_GAMEPLAY_PROGRESS_CHECK_TYPES, BasicGameplayActionResult, BasicGameplayActionType, BasicGameplayArtifactResolution, BasicGameplayAssessmentSummary, BasicGameplayBoundsOffender, BasicGameplayCanvasState, BasicGameplayCatchRecord, BasicGameplayChangeSummary, BasicGameplayFailureCode, BasicGameplayFixReference, BasicGameplayMetric, BasicGameplayMobileEvidence, BasicGameplayProgressCheckType, BasicGameplayProgressionCheck, BasicGameplayProofArtifact, BasicGameplayResponsiveViewportEvidence, BasicGameplayRouteReference, BasicGameplaySnapshot, BasicGameplaySuiteFailure, BasicGameplayWarningCode, CreateBasicGameplayCatchSummaryInput, RIDDLE_PROOF_BASIC_GAMEPLAY_ASSESSMENT_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_CATCH_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_VERSION, RiddleProofBasicGameplayAssessment, RiddleProofBasicGameplayCatchSummary, RiddleProofBasicGameplayEvidence, RiddleProofBasicGameplayRouteAssessment, RiddleProofBasicGameplayRouteEvidence, assessBasicGameplayEvidence, assessBasicGameplayProgressionCheck, assessBasicGameplayProgressionChecks, assessBasicGameplayRoute, attachBasicGameplayArtifactScreenshotHashes, augmentBasicGameplayAssessmentWithProgressionChecks, compactBasicGameplayText, createBasicGameplayCatchRecords, createBasicGameplayCatchSummary, extractBasicGameplayEvidence, resolveBasicGameplayProgressionCheckWithArtifactScreenshots, sanitizeBasicGameplayJsonString } from './basic-gameplay.cjs';
-export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.cjs';
+export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.cjs';
 export { DEFAULT_RIDDLE_API_BASE_URL, DEFAULT_RIDDLE_API_KEY_FILE, RiddleApiError, RiddleClientConfig, RiddleFetch, RiddlePollJobOptions, RiddlePollJobResult, RiddlePollProgressSnapshot, RiddlePollSummary, RiddlePreviewDeployResult, RiddlePreviewFramework, RiddleRunScriptInput, RiddleServerPreviewInput, RiddleServerPreviewResult, createRiddleApiClient, deployRiddlePreview, deployRiddleStaticPreview, isTerminalRiddleJobStatus, parseRiddleViewport, pollRiddleJob, resolveRiddleApiKey, riddleRequestJson, runRiddleScript, runRiddleServerPreview } from './riddle-client.cjs';

package/dist/index.d.ts

@@ -10,5 +10,5 @@ export { CreateCaptureDiagnosticInput, DEFAULT_DIAGNOSTIC_ARRAY_LIMIT, DEFAULT_D
 export { BuildVisualProofSessionInput, RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION, RIDDLE_PROOF_VISUAL_SESSION_VERSION, VisualProofSessionMismatch, buildVisualProofSession, compareVisualProofSessionFingerprint, parseVisualProofSession, visualSessionFingerprint, visualSessionFingerprintBasis } from './proof-session.js';
 export { AssessPlayabilityOptions, RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION, RIDDLE_PROOF_PLAYABILITY_VERSION, RiddleProofPlayabilityAssessment, RiddleProofPlayabilityEvidence, assessPlayabilityEvidence, extractPlayabilityEvidence, isRiddleProofPlayabilityMode } from './playability.js';
 export { AssessBasicGameplayOptions, AttachBasicGameplayArtifactOptions, BASIC_GAMEPLAY_ACTION_TYPES, BASIC_GAMEPLAY_PROGRESS_CHECK_TYPES, BasicGameplayActionResult, BasicGameplayActionType, BasicGameplayArtifactResolution, BasicGameplayAssessmentSummary, BasicGameplayBoundsOffender, BasicGameplayCanvasState, BasicGameplayCatchRecord, BasicGameplayChangeSummary, BasicGameplayFailureCode, BasicGameplayFixReference, BasicGameplayMetric, BasicGameplayMobileEvidence, BasicGameplayProgressCheckType, BasicGameplayProgressionCheck, BasicGameplayProofArtifact, BasicGameplayResponsiveViewportEvidence, BasicGameplayRouteReference, BasicGameplaySnapshot, BasicGameplaySuiteFailure, BasicGameplayWarningCode, CreateBasicGameplayCatchSummaryInput, RIDDLE_PROOF_BASIC_GAMEPLAY_ASSESSMENT_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_CATCH_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_VERSION, RiddleProofBasicGameplayAssessment, RiddleProofBasicGameplayCatchSummary, RiddleProofBasicGameplayEvidence, RiddleProofBasicGameplayRouteAssessment, RiddleProofBasicGameplayRouteEvidence, assessBasicGameplayEvidence, assessBasicGameplayProgressionCheck, assessBasicGameplayProgressionChecks, assessBasicGameplayRoute, attachBasicGameplayArtifactScreenshotHashes, augmentBasicGameplayAssessmentWithProgressionChecks, compactBasicGameplayText, createBasicGameplayCatchRecords, createBasicGameplayCatchSummary, extractBasicGameplayEvidence, resolveBasicGameplayProgressionCheckWithArtifactScreenshots, sanitizeBasicGameplayJsonString } from './basic-gameplay.js';
-export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.js';
+export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.js';
 export { DEFAULT_RIDDLE_API_BASE_URL, DEFAULT_RIDDLE_API_KEY_FILE, RiddleApiError, RiddleClientConfig, RiddleFetch, RiddlePollJobOptions, RiddlePollJobResult, RiddlePollProgressSnapshot, RiddlePollSummary, RiddlePreviewDeployResult, RiddlePreviewFramework, RiddleRunScriptInput, RiddleServerPreviewInput, RiddleServerPreviewResult, createRiddleApiClient, deployRiddlePreview, deployRiddleStaticPreview, isTerminalRiddleJobStatus, parseRiddleViewport, pollRiddleJob, resolveRiddleApiKey, riddleRequestJson, runRiddleScript, runRiddleServerPreview } from './riddle-client.js';

package/dist/index.js

@@ -47,6 +47,7 @@ import {
   assessRiddleProofProfileEvidence,
   buildRiddleProofProfileScript,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
@@ -58,7 +59,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-KKH76HIA.js";
+} from "./chunk-3CND75DM.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,
@@ -188,6 +189,7 @@ export {
   checkpointResponseIdentity,
   checkpointSummaryFromState,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   compactBasicGameplayText,
   compactRecord,
   compareVisualProofSessionFingerprint,

package/dist/profile.cjs

@@ -29,6 +29,7 @@ __export(profile_exports, {
   assessRiddleProofProfileEvidence: () => assessRiddleProofProfileEvidence,
   buildRiddleProofProfileScript: () => buildRiddleProofProfileScript,
   collectRiddleProfileArtifactRefs: () => collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings: () => collectRiddleProofProfileWarnings,
   createRiddleProofProfileConfigurationError: () => createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult: () => createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult: () => createRiddleProofProfileInsufficientResult,
@@ -697,6 +698,48 @@ function normalizeNetworkMocks(value) {
   if (!Array.isArray(value)) throw new Error("target.network_mocks must be an array.");
   return value.map(normalizeNetworkMock);
 }
+function profileStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function responseHasRequestBodyContract(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 || profileStringList(response.request_body_patterns).length > 0 || profileStringList(response.request_body_not_contains).length > 0 || profileStringList(response.request_body_not_patterns).length > 0;
+}
+function responseHasOnlyPositiveTextSelector(response) {
+  if (!response) return false;
+  return profileStringList(response.request_body_contains).length > 0 && profileStringList(response.request_body_patterns).length === 0 && profileStringList(response.request_body_not_contains).length === 0 && profileStringList(response.request_body_not_patterns).length === 0;
+}
+function responseMayShadowLaterRequestBodyMatch(earlier, later) {
+  if (!responseHasOnlyPositiveTextSelector(earlier) || !responseHasRequestBodyContract(later)) return false;
+  const earlierContains = profileStringList(earlier.request_body_contains);
+  const laterContains = profileStringList(later.request_body_contains);
+  if (!laterContains.length) return false;
+  return earlierContains.every((fragment) => laterContains.includes(fragment));
+}
+function responseLabel(response, index) {
+  return response.label ? `"${response.label}"` : `responses[${index}]`;
+}
+function collectRiddleProofProfileWarnings(profile) {
+  const warnings = [];
+  for (const [mockIndex, mock] of (profile.target.network_mocks || []).entries()) {
+    const responses = Array.isArray(mock.responses) ? mock.responses : [];
+    if (responses.length < 2) continue;
+    for (let laterIndex = 1; laterIndex < responses.length; laterIndex += 1) {
+      const later = responses[laterIndex];
+      if (!responseHasRequestBodyContract(later)) continue;
+      for (let earlierIndex = 0; earlierIndex < laterIndex; earlierIndex += 1) {
+        const earlier = responses[earlierIndex];
+        if (!responseMayShadowLaterRequestBodyMatch(earlier, later)) continue;
+        const mockLabel = mock.label ? ` (${mock.label})` : "";
+        warnings.push(
+          `target.network_mocks[${mockIndex}]${mockLabel} ${responseLabel(earlier, earlierIndex)} can shadow ${responseLabel(later, laterIndex)} because the earlier request_body_contains fragments are a subset of the later response and have no negative or pattern disambiguator. First matching request-body response wins.`
+        );
+        break;
+      }
+    }
+  }
+  return warnings;
+}
 function normalizeRouteInventoryPath(value, label) {
   const path = stringValue(value);
   if (!path) throw new Error(`${label} requires path.`);
@@ -1055,6 +1098,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = value?.split(";")[0]?.trim().toLowerCase();
   return normalized || void 0;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = /* @__PURE__ */ new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   const expected = check.allowed_content_types;
   if (!expected?.length) return true;
@@ -1063,8 +1113,7 @@ function linkStatusContentTypeOk(result, check) {
   return expected.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -2085,11 +2134,11 @@ function networkMockResponseHitsByLabel(events) {
   for (const event of events) {
     if (!event || event.ok === false) continue;
     const label = typeof event.label === "string" ? event.label : "";
-    const responseLabel = typeof event.response_label === "string" ? event.response_label : "";
-    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel && responseLabel !== label);
-    if (!label || !responseLabel || !hasSequenceResponse) continue;
+    const responseLabel2 = typeof event.response_label === "string" ? event.response_label : "";
+    const hasSequenceResponse = typeof event.response_index === "number" || event.sequence_cycle === true || Boolean(responseLabel2 && responseLabel2 !== label);
+    if (!label || !responseLabel2 || !hasSequenceResponse) continue;
     responseHits[label] || (responseHits[label] = {});
-    responseHits[label][responseLabel] = (responseHits[label][responseLabel] || 0) + 1;
+    responseHits[label][responseLabel2] = (responseHits[label][responseLabel2] || 0) + 1;
   }
   return responseHits;
 }
@@ -2112,6 +2161,7 @@ function profileStatusFromEvidence(profile, evidence, checks) {
 }
 function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
   const capturedAt = evidence?.captured_at || (/* @__PURE__ */ new Date()).toISOString();
+  const warnings = collectRiddleProofProfileWarnings(profile);
   const checks = evidence ? [
     assessNetworkMocksFromEvidence(profile, evidence),
     assessSetupActionsFromEvidence(profile, evidence),
@@ -2137,6 +2187,7 @@ function assessRiddleProofProfileEvidence(profile, evidence, options = {}) {
     checks,
     summary: summarizeRiddleProofProfileResult({ profile_name: profile.name, status, checks, viewports: evidence?.viewports || [] }),
     captured_at: capturedAt,
+    warnings: warnings.length ? warnings : void 0,
     evidence,
     riddle: options.riddle
   };
@@ -2185,6 +2236,7 @@ function createRiddleProofProfileConfigurationError(name, error, runner = "riddl
 function createRiddleProofProfileEnvironmentBlockedResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "Riddle runner did not complete successfully.";
   const environmentBlocker = extractRiddleRunnerBlocker(message);
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -2196,6 +2248,7 @@ function createRiddleProofProfileEnvironmentBlockedResult(input) {
     checks: [],
     summary: summarizeEnvironmentBlockedRunner(input.profile.name, environmentBlocker),
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     environment_blocker: environmentBlocker,
     error: message
@@ -2254,6 +2307,7 @@ function summarizeEnvironmentBlockedRunner(profileName, blocker) {
 }
 function createRiddleProofProfileInsufficientResult(input) {
   const message = input.error instanceof Error ? input.error.message : input.error ? String(input.error) : "No proof.json profile result artifact was found.";
+  const warnings = collectRiddleProofProfileWarnings(input.profile);
   return {
     version: RIDDLE_PROOF_PROFILE_RESULT_VERSION,
     profile_name: input.profile.name,
@@ -2265,6 +2319,7 @@ function createRiddleProofProfileInsufficientResult(input) {
     checks: [],
     summary: `${input.profile.name} did not produce enough evidence for a profile judgment.`,
     captured_at: (/* @__PURE__ */ new Date()).toISOString(),
+    warnings: warnings.length ? warnings : void 0,
     riddle: input.riddle,
     error: message
   };
@@ -2469,6 +2524,13 @@ function normalizeLinkStatusContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkStatusContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkStatusContentTypeOk(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkStatusContentType(result.content_type);
@@ -2476,8 +2538,7 @@ function linkStatusContentTypeOk(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkStatusContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkStatusContentTypesMatch(actual, normalized);
   });
 }
 function httpStatusBodyContainsFailures(result, check) {
@@ -3571,6 +3632,7 @@ function assessProfile(profile, evidence) {
     checks,
     summary,
     captured_at: evidence.captured_at,
+    warnings: profileWarnings.length ? profileWarnings : undefined,
     evidence,
   };
 }
@@ -3579,11 +3641,14 @@ function assessProfile(profile, evidence) {
 function buildRiddleProofProfileScript(profile) {
   const targetUrl = resolveRiddleProofProfileTargetUrl(profile);
   const slug = slugifyRiddleProofProfileName(profile.name);
+  const profileWarnings = collectRiddleProofProfileWarnings(profile);
   const serializableProfile = JSON.stringify(profile);
+  const serializableProfileWarnings = JSON.stringify(profileWarnings);
   const serializableTargetUrl = JSON.stringify(targetUrl);
   const serializableSlug = JSON.stringify(slug);
   return String.raw`
 const profile = ${serializableProfile};
+const profileWarnings = ${serializableProfileWarnings};
 const targetUrl = ${serializableTargetUrl};
 const profileSlug = ${serializableSlug};
 const capturedAt = new Date().toISOString();
@@ -4609,6 +4674,13 @@ function normalizeLinkProbeContentType(value) {
   const normalized = (value.split(";")[0] || "").trim().toLowerCase();
   return normalized || undefined;
 }
+function linkProbeContentTypesMatch(actual, expected) {
+  if (!actual || !expected) return false;
+  if (expected.endsWith("/*")) return actual.startsWith(expected.slice(0, -1));
+  if (actual === expected) return true;
+  const yamlTypes = new Set(["application/yaml", "application/x-yaml", "text/yaml", "text/x-yaml"]);
+  return yamlTypes.has(actual) && yamlTypes.has(expected);
+}
 function linkProbeContentTypeAllowed(result, check) {
   if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
   const actual = normalizeLinkProbeContentType(result.content_type);
@@ -4616,8 +4688,7 @@ function linkProbeContentTypeAllowed(result, check) {
   return check.allowed_content_types.some((contentType) => {
     const normalized = normalizeLinkProbeContentType(contentType);
     if (!normalized) return false;
-    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
-    return actual === normalized;
+    return linkProbeContentTypesMatch(actual, normalized);
   });
 }
 function linkProbeResponseFields(response, method) {
@@ -5713,6 +5784,7 @@ function extractRiddleProofProfileResult(input) {
   assessRiddleProofProfileEvidence,
   buildRiddleProofProfileScript,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,

package/dist/profile.d.cts

@@ -266,6 +266,7 @@ interface RiddleProofProfileResult {
     checks: RiddleProofProfileCheckResult[];
     summary: string;
     captured_at: string;
+    warnings?: string[];
     evidence?: RiddleProofProfileEvidence;
     riddle?: {
         job_id?: string;
@@ -289,6 +290,7 @@ interface NormalizeRiddleProofProfileOptions {
     viewports?: RiddleProofProfileViewport[];
 }
 declare function slugifyRiddleProofProfileName(value: string): string;
+declare function collectRiddleProofProfileWarnings(profile: RiddleProofProfile): string[];
 declare function normalizeRiddleProofProfile(input: unknown, options?: NormalizeRiddleProofProfileOptions): RiddleProofProfile;
 declare function resolveRiddleProofProfileTargetUrl(profile: RiddleProofProfile): string;
 declare function resolveRiddleProofProfileTimeoutSec(profile: RiddleProofProfile, requestedTimeoutSec?: number): number | undefined;
@@ -324,4 +326,4 @@ declare function buildRiddleProofProfileScript(profile: RiddleProofProfile): str
 declare function collectRiddleProfileArtifactRefs(input: unknown): RiddleProofProfileArtifactRef[];
 declare function extractRiddleProofProfileResult(input: unknown): RiddleProofProfileResult | undefined;
 
-export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };
+export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };

package/dist/profile.d.ts

@@ -266,6 +266,7 @@ interface RiddleProofProfileResult {
     checks: RiddleProofProfileCheckResult[];
     summary: string;
     captured_at: string;
+    warnings?: string[];
     evidence?: RiddleProofProfileEvidence;
     riddle?: {
         job_id?: string;
@@ -289,6 +290,7 @@ interface NormalizeRiddleProofProfileOptions {
     viewports?: RiddleProofProfileViewport[];
 }
 declare function slugifyRiddleProofProfileName(value: string): string;
+declare function collectRiddleProofProfileWarnings(profile: RiddleProofProfile): string[];
 declare function normalizeRiddleProofProfile(input: unknown, options?: NormalizeRiddleProofProfileOptions): RiddleProofProfile;
 declare function resolveRiddleProofProfileTargetUrl(profile: RiddleProofProfile): string;
 declare function resolveRiddleProofProfileTimeoutSec(profile: RiddleProofProfile, requestedTimeoutSec?: number): number | undefined;
@@ -324,4 +326,4 @@ declare function buildRiddleProofProfileScript(profile: RiddleProofProfile): str
 declare function collectRiddleProfileArtifactRefs(input: unknown): RiddleProofProfileArtifactRef[];
 declare function extractRiddleProofProfileResult(input: unknown): RiddleProofProfileResult | undefined;
 
-export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };
+export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };

package/dist/profile.js

@@ -8,6 +8,7 @@ import {
   assessRiddleProofProfileEvidence,
   buildRiddleProofProfileScript,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
@@ -19,7 +20,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-KKH76HIA.js";
+} from "./chunk-3CND75DM.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,
@@ -30,6 +31,7 @@ export {
   assessRiddleProofProfileEvidence,
   buildRiddleProofProfileScript,
   collectRiddleProfileArtifactRefs,
+  collectRiddleProofProfileWarnings,
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,

package/dist/proof-run-engine.d.cts

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;

package/dist/proof-run-engine.d.ts

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.111",
+  "version": "0.7.113",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",