@riddledc/riddle-proof 0.7.119 → 0.7.120

package/README.md

@@ -202,7 +202,7 @@ The package includes generic starter profiles:
 
 - `examples/profiles/page-content-basic.json` for route/content/layout smoke profiles.
 - `examples/profiles/route-inventory-basic.json` for source-link and direct-route audits.
-- `examples/profiles/handled-recovery-list-load.json` for malformed list-load recovery profiles.
+- `examples/profiles/handled-recovery-list-load.json` for failed or malformed list-load recovery profiles.
 - `examples/profiles/handled-recovery-action-malformed-success.json` for action recovery profiles where the request succeeds at HTTP level but returns an unusable body.
 
 Copy one of those shapes into a repository profile directory and replace the
@@ -210,13 +210,19 @@ routes, selectors, mock URLs, and text checks with app-specific invariants.
 
 For handled recovery profiles, prefer proving the whole boundary instead of
 only checking that an error message appears. Mock one dependent endpoint into a
-malformed or failed response, keep independent endpoints healthy, and assert
-that the page still renders the independent evidence. Capture a setup
+failed HTTP response, transport failure, or malformed body, keep independent
+endpoints healthy, and assert that the page still renders the independent
+evidence. For idempotent GET mocks, use `required_hit_count` to prove the mock
+was exercised, but avoid `max_hit_count` unless exact request count is itself
+the product contract; multi-viewport runs, React Strict Mode, retries, and
+client refreshes can legitimately call the same GET more than once. Capture a setup
 screenshot immediately after the recovery state appears, before high-risk
 absence assertions, so failing runs keep durable visual evidence. Then reject
-raw parser text such as `SyntaxError`, `Expected property name`, and
-`[object Object]`; reject contradictory empty-state copy such as `No items yet`
-when the list failed to load; and keep `no_fatal_console_errors` plus
+raw backend text and error codes as well as parser text such as `SyntaxError`,
+`Expected property name`, and `[object Object]`; reject contradictory empty-state
+copy such as `No items yet` when the list failed to load; require the failed
+list's explicit unavailable message and error element count; and keep
+`no_fatal_console_errors` plus
 `no_console_warnings` in the final checks. This pattern catches both visible
 recovery-quality bugs and hidden browser-health debt without requiring a
 separate CI or wrapper-specific path.

package/examples/profiles/handled-recovery-list-load.json

@@ -40,13 +40,15 @@
         }
       },
       {
-        "label": "saved-items-malformed-load",
+        "label": "saved-items-unavailable-load",
         "url": "**/api/saved-items",
         "method": "GET",
-        "status": 200,
+        "status": 503,
         "content_type": "application/json",
         "required_hit_count": 3,
-        "body": "{not valid saved items json"
+        "json": {
+          "error": "Synthetic saved items unavailable"
+        }
       }
     ],
     "setup_actions": [
@@ -57,6 +59,8 @@
       { "type": "wait_for_text", "selector": "body", "text": "Failed to load saved items", "timeout_ms": 30000 },
       { "type": "screenshot", "label": "saved-items-malformed-load-visible-recovery" },
       { "type": "assert_text_absent", "selector": "body", "text": "No saved items yet", "timeout_ms": 1000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "Synthetic saved items unavailable", "timeout_ms": 1000 },
+      { "type": "assert_text_absent", "selector": "body", "text": "saved_items_temporarily_unavailable", "timeout_ms": 1000 },
       { "type": "assert_text_absent", "selector": "body", "text": "Expected property name", "timeout_ms": 1000 },
       { "type": "assert_text_absent", "selector": "body", "text": "SyntaxError", "timeout_ms": 1000 },
       { "type": "assert_text_absent", "selector": "body", "text": "[object Object]", "timeout_ms": 1000 }
@@ -71,6 +75,8 @@
     { "type": "text_visible", "text": "job_recovery_template_survives" },
     { "type": "text_visible", "text": "Failed to load saved items" },
     { "type": "text_absent", "text": "No saved items yet" },
+    { "type": "text_absent", "text": "Synthetic saved items unavailable" },
+    { "type": "text_absent", "text": "saved_items_temporarily_unavailable" },
     { "type": "text_absent", "text": "Expected property name" },
     { "type": "text_absent", "text": "SyntaxError" },
     { "type": "text_absent", "text": "[object Object]" },
@@ -90,6 +96,6 @@
     "product_regression": "fail"
   },
   "metadata": {
-    "purpose": "Template for handled malformed list-load recovery: prove independent page data still renders, the failed list shows one recovery message, contradictory empty-state copy and raw parser text stay absent, and browser console evidence remains clean."
+    "purpose": "Template for handled list-load recovery: prove independent page data still renders, the failed list shows one recovery message, contradictory empty-state copy, raw backend text, parser text, and object leakage stay absent, and browser console evidence remains clean. Do not add max_hit_count to idempotent GET mocks unless exact call count is the product contract."
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.119",
+  "version": "0.7.120",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",