@riddledc/riddle-proof 0.7.120 → 0.7.121

package/README.md

@@ -198,6 +198,24 @@ generic inline-script warning threshold. Use `--strict=true` when you
 deliberately want Riddle's non-critical script-safety warnings to block the run.
 Critical script-safety violations remain blocked by Riddle either way.
 
+When promoting proof artifacts into a durable public profile, avoid guessing
+which backend or runner tokens are preserved inside `proof.json`. Derive the
+`body_contains` fragments from the artifact body first:
+
+```sh
+riddle-proof-loop profile-body-assertions \
+  --artifact artifacts/job_abc123/proof.json.json \
+  --candidates-json '["product_regression","completed_timeout","Timed Out","partial results available"]' \
+  --required-json '["product_regression"]' \
+  --format body-contains
+```
+
+The command prints only snippets that are actually present in the artifact.
+Missing optional candidates are reported in JSON mode as warnings, while missing
+required snippets make the command exit non-zero. This keeps Good Catch and
+audit-profile promotions tied to real artifacts instead of hand-authored token
+guesses.
+
 The package includes generic starter profiles:
 
 - `examples/profiles/page-content-basic.json` for route/content/layout smoke profiles.

package/dist/{chunk-DVMBXDIF.js → chunk-TBEVHMU3.js}

@@ -79,6 +79,36 @@ var RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES = [
   "timedout",
   "failed"
 ];
+function uniqueNonEmptyStrings(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values ?? []) {
+    const normalized = typeof value === "string" ? value.trim() : "";
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+  }
+  return result;
+}
+function deriveRiddleProofArtifactBodyAssertions(input) {
+  const artifactText = typeof input.artifact_text === "string" ? input.artifact_text : "";
+  const candidates = uniqueNonEmptyStrings(input.candidates);
+  const required = uniqueNonEmptyStrings(input.required);
+  const mergedCandidates = uniqueNonEmptyStrings([...required, ...candidates]);
+  const presentCandidates = mergedCandidates.filter((snippet) => artifactText.includes(snippet));
+  const missingCandidates = mergedCandidates.filter((snippet) => !artifactText.includes(snippet));
+  const missingRequired = required.filter((snippet) => !artifactText.includes(snippet));
+  const warnings = missingCandidates.map((snippet) => `candidate snippet is not present in artifact body: ${snippet}`);
+  return {
+    version: "riddle-proof.artifact-body-assertions.v1",
+    ok: missingRequired.length === 0,
+    body_contains: presentCandidates,
+    present_candidates: presentCandidates,
+    missing_candidates: missingCandidates,
+    missing_required: missingRequired,
+    warnings
+  };
+}
 var DEFAULT_VIEWPORTS = [
   { name: "desktop", width: 1280, height: 800 }
 ];
@@ -5884,6 +5914,7 @@ export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES,
   RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES,
+  deriveRiddleProofArtifactBodyAssertions,
   slugifyRiddleProofProfileName,
   collectRiddleProofProfileWarnings,
   normalizeRiddleProofProfile,

package/dist/cli.cjs

@@ -7016,6 +7016,36 @@ var RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES = [
   "timedout",
   "failed"
 ];
+function uniqueNonEmptyStrings(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values ?? []) {
+    const normalized = typeof value === "string" ? value.trim() : "";
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+  }
+  return result;
+}
+function deriveRiddleProofArtifactBodyAssertions(input) {
+  const artifactText = typeof input.artifact_text === "string" ? input.artifact_text : "";
+  const candidates = uniqueNonEmptyStrings(input.candidates);
+  const required = uniqueNonEmptyStrings(input.required);
+  const mergedCandidates = uniqueNonEmptyStrings([...required, ...candidates]);
+  const presentCandidates = mergedCandidates.filter((snippet) => artifactText.includes(snippet));
+  const missingCandidates = mergedCandidates.filter((snippet) => !artifactText.includes(snippet));
+  const missingRequired = required.filter((snippet) => !artifactText.includes(snippet));
+  const warnings = missingCandidates.map((snippet) => `candidate snippet is not present in artifact body: ${snippet}`);
+  return {
+    version: "riddle-proof.artifact-body-assertions.v1",
+    ok: missingRequired.length === 0,
+    body_contains: presentCandidates,
+    present_candidates: presentCandidates,
+    missing_candidates: missingCandidates,
+    missing_required: missingRequired,
+    warnings
+  };
+}
 var DEFAULT_VIEWPORTS = [
   { name: "desktop", width: 1280, height: 800 }
 ];
@@ -12807,6 +12837,7 @@ function usage() {
     "  riddle-proof-loop respond --state-path <path> --decision <decision> --summary <text> [--payload-json <file|json|->]",
     "  riddle-proof-loop status --state-path <path>",
     "  riddle-proof-loop run-profile --profile <file|json|-> --url <base-url> [--runner riddle] [--strict true|false; default false] [--poll-attempts n] [--output <dir>|--output-dir <dir>] [--quiet]",
+    "  riddle-proof-loop profile-body-assertions --artifact <file|url|-> --candidates-json <file|json|-> [--required-json <file|json|->] [--format json|body-contains]",
     "  riddle-proof-loop riddle-preview-deploy <build-dir> <label> [--framework spa|static]",
     "  riddle-proof-loop riddle-server-preview <directory> --script-file <file> [--path /route] [--wait-for-selector selector]",
     "  riddle-proof-loop riddle-run-script --url <url> --script-file <file> [--viewport 1280x720] [--strict true|false]",
@@ -12879,6 +12910,18 @@ function previewFrameworkOption(options) {
 function readStdin() {
   return (0, import_node_fs6.readFileSync)(0, "utf-8");
 }
+async function readTextValue(value, label) {
+  if (!value) throw new Error(`${label} is required.`);
+  if (value === "-") return readStdin();
+  if (/^https?:\/\//i.test(value)) {
+    const response = await fetch(value);
+    const text = await response.text();
+    if (!response.ok) throw new Error(`${label} URL failed HTTP ${response.status}: ${text.slice(0, 500)}`);
+    return text;
+  }
+  if ((0, import_node_fs6.existsSync)(value)) return (0, import_node_fs6.readFileSync)(value, "utf-8");
+  throw new Error(`${label} must be a readable file path, URL, or -.`);
+}
 function formatPollDuration(ms) {
   if (typeof ms !== "number" || !Number.isFinite(ms)) return "n/a";
   const seconds = Math.max(0, Math.round(ms / 1e3));
@@ -13648,6 +13691,31 @@ async function main() {
     process.exitCode = profileStatusExitCode(profile, result.status);
     return;
   }
+  if (command === "profile-body-assertions") {
+    const artifactText = await readTextValue(optionString(options, "artifact") ?? optionString(options, "input"), "--artifact");
+    const candidates = readOptionalJsonStringArray(optionString(options, "candidatesJson") ?? optionString(options, "candidateJson"), "--candidates-json") ?? [];
+    const required = readOptionalJsonStringArray(optionString(options, "requiredJson"), "--required-json");
+    if (!candidates.length && !required?.length) {
+      throw new Error("--candidates-json or --required-json must provide at least one snippet.");
+    }
+    const result = deriveRiddleProofArtifactBodyAssertions({
+      artifact_text: artifactText,
+      candidates,
+      required
+    });
+    const format = optionString(options, "format") || "json";
+    if (format === "body-contains") {
+      process.stdout.write(`${JSON.stringify(result.body_contains, null, 2)}
+`);
+    } else if (format === "json") {
+      process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+    } else {
+      throw new Error("--format must be json or body-contains.");
+    }
+    process.exitCode = result.ok ? 0 : 1;
+    return;
+  }
   if (command === "riddle-preview-deploy") {
     const buildDir = positional[1];
     const label = positional[2];

package/dist/cli.js

@@ -5,12 +5,13 @@ import {
   collectRiddleProfileArtifactRefs,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult,
   normalizeRiddleProofProfile,
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-DVMBXDIF.js";
+} from "./chunk-TBEVHMU3.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -45,6 +46,7 @@ function usage() {
     "  riddle-proof-loop respond --state-path <path> --decision <decision> --summary <text> [--payload-json <file|json|->]",
     "  riddle-proof-loop status --state-path <path>",
     "  riddle-proof-loop run-profile --profile <file|json|-> --url <base-url> [--runner riddle] [--strict true|false; default false] [--poll-attempts n] [--output <dir>|--output-dir <dir>] [--quiet]",
+    "  riddle-proof-loop profile-body-assertions --artifact <file|url|-> --candidates-json <file|json|-> [--required-json <file|json|->] [--format json|body-contains]",
     "  riddle-proof-loop riddle-preview-deploy <build-dir> <label> [--framework spa|static]",
     "  riddle-proof-loop riddle-server-preview <directory> --script-file <file> [--path /route] [--wait-for-selector selector]",
     "  riddle-proof-loop riddle-run-script --url <url> --script-file <file> [--viewport 1280x720] [--strict true|false]",
@@ -117,6 +119,18 @@ function previewFrameworkOption(options) {
 function readStdin() {
   return readFileSync(0, "utf-8");
 }
+async function readTextValue(value, label) {
+  if (!value) throw new Error(`${label} is required.`);
+  if (value === "-") return readStdin();
+  if (/^https?:\/\//i.test(value)) {
+    const response = await fetch(value);
+    const text = await response.text();
+    if (!response.ok) throw new Error(`${label} URL failed HTTP ${response.status}: ${text.slice(0, 500)}`);
+    return text;
+  }
+  if (existsSync(value)) return readFileSync(value, "utf-8");
+  throw new Error(`${label} must be a readable file path, URL, or -.`);
+}
 function formatPollDuration(ms) {
   if (typeof ms !== "number" || !Number.isFinite(ms)) return "n/a";
   const seconds = Math.max(0, Math.round(ms / 1e3));
@@ -886,6 +900,31 @@ async function main() {
     process.exitCode = profileStatusExitCode(profile, result.status);
     return;
   }
+  if (command === "profile-body-assertions") {
+    const artifactText = await readTextValue(optionString(options, "artifact") ?? optionString(options, "input"), "--artifact");
+    const candidates = readOptionalJsonStringArray(optionString(options, "candidatesJson") ?? optionString(options, "candidateJson"), "--candidates-json") ?? [];
+    const required = readOptionalJsonStringArray(optionString(options, "requiredJson"), "--required-json");
+    if (!candidates.length && !required?.length) {
+      throw new Error("--candidates-json or --required-json must provide at least one snippet.");
+    }
+    const result = deriveRiddleProofArtifactBodyAssertions({
+      artifact_text: artifactText,
+      candidates,
+      required
+    });
+    const format = optionString(options, "format") || "json";
+    if (format === "body-contains") {
+      process.stdout.write(`${JSON.stringify(result.body_contains, null, 2)}
+`);
+    } else if (format === "json") {
+      process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+    } else {
+      throw new Error("--format must be json or body-contains.");
+    }
+    process.exitCode = result.ok ? 0 : 1;
+    return;
+  }
   if (command === "riddle-preview-deploy") {
     const buildDir = positional[1];
     const label = positional[2];

package/dist/index.cjs

@@ -2972,6 +2972,7 @@ __export(index_exports, {
   createRunStatusSnapshot: () => createRunStatusSnapshot,
   deployRiddlePreview: () => deployRiddlePreview,
   deployRiddleStaticPreview: () => deployRiddleStaticPreview,
+  deriveRiddleProofArtifactBodyAssertions: () => deriveRiddleProofArtifactBodyAssertions,
   extractBasicGameplayEvidence: () => extractBasicGameplayEvidence,
   extractPlayabilityEvidence: () => extractPlayabilityEvidence,
   extractRiddleProofProfileResult: () => extractRiddleProofProfileResult,
@@ -8810,6 +8811,36 @@ var RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES = [
   "timedout",
   "failed"
 ];
+function uniqueNonEmptyStrings(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values ?? []) {
+    const normalized = typeof value === "string" ? value.trim() : "";
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+  }
+  return result;
+}
+function deriveRiddleProofArtifactBodyAssertions(input) {
+  const artifactText = typeof input.artifact_text === "string" ? input.artifact_text : "";
+  const candidates = uniqueNonEmptyStrings(input.candidates);
+  const required = uniqueNonEmptyStrings(input.required);
+  const mergedCandidates = uniqueNonEmptyStrings([...required, ...candidates]);
+  const presentCandidates = mergedCandidates.filter((snippet) => artifactText.includes(snippet));
+  const missingCandidates = mergedCandidates.filter((snippet) => !artifactText.includes(snippet));
+  const missingRequired = required.filter((snippet) => !artifactText.includes(snippet));
+  const warnings = missingCandidates.map((snippet) => `candidate snippet is not present in artifact body: ${snippet}`);
+  return {
+    version: "riddle-proof.artifact-body-assertions.v1",
+    ok: missingRequired.length === 0,
+    body_contains: presentCandidates,
+    present_candidates: presentCandidates,
+    missing_candidates: missingCandidates,
+    missing_required: missingRequired,
+    warnings
+  };
+}
 var DEFAULT_VIEWPORTS = [
   { name: "desktop", width: 1280, height: 800 }
 ];
@@ -15058,6 +15089,7 @@ function createRiddleApiClient(config = {}) {
   createRunStatusSnapshot,
   deployRiddlePreview,
   deployRiddleStaticPreview,
+  deriveRiddleProofArtifactBodyAssertions,
   extractBasicGameplayEvidence,
   extractPlayabilityEvidence,
   extractRiddleProofProfileResult,

package/dist/index.d.cts

@@ -10,5 +10,5 @@ export { CreateCaptureDiagnosticInput, DEFAULT_DIAGNOSTIC_ARRAY_LIMIT, DEFAULT_D
 export { BuildVisualProofSessionInput, RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION, RIDDLE_PROOF_VISUAL_SESSION_VERSION, VisualProofSessionMismatch, buildVisualProofSession, compareVisualProofSessionFingerprint, parseVisualProofSession, visualSessionFingerprint, visualSessionFingerprintBasis } from './proof-session.cjs';
 export { AssessPlayabilityOptions, RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION, RIDDLE_PROOF_PLAYABILITY_VERSION, RiddleProofPlayabilityAssessment, RiddleProofPlayabilityEvidence, assessPlayabilityEvidence, extractPlayabilityEvidence, isRiddleProofPlayabilityMode } from './playability.cjs';
 export { AssessBasicGameplayOptions, AttachBasicGameplayArtifactOptions, BASIC_GAMEPLAY_ACTION_TYPES, BASIC_GAMEPLAY_PROGRESS_CHECK_TYPES, BasicGameplayActionResult, BasicGameplayActionType, BasicGameplayArtifactResolution, BasicGameplayAssessmentSummary, BasicGameplayBoundsOffender, BasicGameplayCanvasState, BasicGameplayCatchRecord, BasicGameplayChangeSummary, BasicGameplayFailureCode, BasicGameplayFixReference, BasicGameplayMetric, BasicGameplayMobileEvidence, BasicGameplayProgressCheckType, BasicGameplayProgressionCheck, BasicGameplayProofArtifact, BasicGameplayResponsiveViewportEvidence, BasicGameplayRouteReference, BasicGameplaySnapshot, BasicGameplaySuiteFailure, BasicGameplayWarningCode, CreateBasicGameplayCatchSummaryInput, RIDDLE_PROOF_BASIC_GAMEPLAY_ASSESSMENT_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_CATCH_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_VERSION, RiddleProofBasicGameplayAssessment, RiddleProofBasicGameplayCatchSummary, RiddleProofBasicGameplayEvidence, RiddleProofBasicGameplayRouteAssessment, RiddleProofBasicGameplayRouteEvidence, assessBasicGameplayEvidence, assessBasicGameplayProgressionCheck, assessBasicGameplayProgressionChecks, assessBasicGameplayRoute, attachBasicGameplayArtifactScreenshotHashes, augmentBasicGameplayAssessmentWithProgressionChecks, compactBasicGameplayText, createBasicGameplayCatchRecords, createBasicGameplayCatchSummary, extractBasicGameplayEvidence, resolveBasicGameplayProgressionCheckWithArtifactScreenshots, sanitizeBasicGameplayJsonString } from './basic-gameplay.cjs';
-export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkAbortErrorCode, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.cjs';
+export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofArtifactBodyAssertionInput, RiddleProofArtifactBodyAssertionResult, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkAbortErrorCode, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, deriveRiddleProofArtifactBodyAssertions, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.cjs';
 export { DEFAULT_RIDDLE_API_BASE_URL, DEFAULT_RIDDLE_API_KEY_FILE, RiddleApiError, RiddleClientConfig, RiddleFetch, RiddlePollJobOptions, RiddlePollJobResult, RiddlePollProgressSnapshot, RiddlePollSummary, RiddlePreviewDeployResult, RiddlePreviewFramework, RiddleRunScriptInput, RiddleServerPreviewInput, RiddleServerPreviewResult, createRiddleApiClient, deployRiddlePreview, deployRiddleStaticPreview, isTerminalRiddleJobStatus, parseRiddleViewport, pollRiddleJob, resolveRiddleApiKey, riddleRequestJson, runRiddleScript, runRiddleServerPreview } from './riddle-client.cjs';

package/dist/index.d.ts

@@ -10,5 +10,5 @@ export { CreateCaptureDiagnosticInput, DEFAULT_DIAGNOSTIC_ARRAY_LIMIT, DEFAULT_D
 export { BuildVisualProofSessionInput, RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION, RIDDLE_PROOF_VISUAL_SESSION_VERSION, VisualProofSessionMismatch, buildVisualProofSession, compareVisualProofSessionFingerprint, parseVisualProofSession, visualSessionFingerprint, visualSessionFingerprintBasis } from './proof-session.js';
 export { AssessPlayabilityOptions, RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION, RIDDLE_PROOF_PLAYABILITY_VERSION, RiddleProofPlayabilityAssessment, RiddleProofPlayabilityEvidence, assessPlayabilityEvidence, extractPlayabilityEvidence, isRiddleProofPlayabilityMode } from './playability.js';
 export { AssessBasicGameplayOptions, AttachBasicGameplayArtifactOptions, BASIC_GAMEPLAY_ACTION_TYPES, BASIC_GAMEPLAY_PROGRESS_CHECK_TYPES, BasicGameplayActionResult, BasicGameplayActionType, BasicGameplayArtifactResolution, BasicGameplayAssessmentSummary, BasicGameplayBoundsOffender, BasicGameplayCanvasState, BasicGameplayCatchRecord, BasicGameplayChangeSummary, BasicGameplayFailureCode, BasicGameplayFixReference, BasicGameplayMetric, BasicGameplayMobileEvidence, BasicGameplayProgressCheckType, BasicGameplayProgressionCheck, BasicGameplayProofArtifact, BasicGameplayResponsiveViewportEvidence, BasicGameplayRouteReference, BasicGameplaySnapshot, BasicGameplaySuiteFailure, BasicGameplayWarningCode, CreateBasicGameplayCatchSummaryInput, RIDDLE_PROOF_BASIC_GAMEPLAY_ASSESSMENT_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_CATCH_VERSION, RIDDLE_PROOF_BASIC_GAMEPLAY_VERSION, RiddleProofBasicGameplayAssessment, RiddleProofBasicGameplayCatchSummary, RiddleProofBasicGameplayEvidence, RiddleProofBasicGameplayRouteAssessment, RiddleProofBasicGameplayRouteEvidence, assessBasicGameplayEvidence, assessBasicGameplayProgressionCheck, assessBasicGameplayProgressionChecks, assessBasicGameplayRoute, attachBasicGameplayArtifactScreenshotHashes, augmentBasicGameplayAssessmentWithProgressionChecks, compactBasicGameplayText, createBasicGameplayCatchRecords, createBasicGameplayCatchSummary, extractBasicGameplayEvidence, resolveBasicGameplayProgressionCheckWithArtifactScreenshots, sanitizeBasicGameplayJsonString } from './basic-gameplay.js';
-export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkAbortErrorCode, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.js';
+export { NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, RiddleProofArtifactBodyAssertionInput, RiddleProofArtifactBodyAssertionResult, RiddleProofProfile, RiddleProofProfileArtifactRef, RiddleProofProfileBaselinePolicy, RiddleProofProfileBoundsOffender, RiddleProofProfileCheck, RiddleProofProfileCheckResult, RiddleProofProfileCheckType, RiddleProofProfileEvidence, RiddleProofProfileFailureAction, RiddleProofProfileNetworkAbortErrorCode, RiddleProofProfileNetworkMock, RiddleProofProfileNetworkMockResponse, RiddleProofProfileResult, RiddleProofProfileRouteEvidence, RiddleProofProfileRouteInventoryRoute, RiddleProofProfileRunner, RiddleProofProfileSetupAction, RiddleProofProfileSetupActionType, RiddleProofProfileStatus, RiddleProofProfileTarget, RiddleProofProfileViewport, RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, deriveRiddleProofArtifactBodyAssertions, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult } from './profile.js';
 export { DEFAULT_RIDDLE_API_BASE_URL, DEFAULT_RIDDLE_API_KEY_FILE, RiddleApiError, RiddleClientConfig, RiddleFetch, RiddlePollJobOptions, RiddlePollJobResult, RiddlePollProgressSnapshot, RiddlePollSummary, RiddlePreviewDeployResult, RiddlePreviewFramework, RiddleRunScriptInput, RiddleServerPreviewInput, RiddleServerPreviewResult, createRiddleApiClient, deployRiddlePreview, deployRiddleStaticPreview, isTerminalRiddleJobStatus, parseRiddleViewport, pollRiddleJob, resolveRiddleApiKey, riddleRequestJson, runRiddleScript, runRiddleServerPreview } from './riddle-client.js';

package/dist/index.js

@@ -52,6 +52,7 @@ import {
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult,
   normalizeRiddleProofProfile,
   profileStatusExitCode,
@@ -60,7 +61,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-DVMBXDIF.js";
+} from "./chunk-TBEVHMU3.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,
@@ -214,6 +215,7 @@ export {
   createRunStatusSnapshot,
   deployRiddlePreview,
   deployRiddleStaticPreview,
+  deriveRiddleProofArtifactBodyAssertions,
   extractBasicGameplayEvidence,
   extractPlayabilityEvidence,
   extractRiddleProofProfileResult,

package/dist/profile.cjs

@@ -34,6 +34,7 @@ __export(profile_exports, {
   createRiddleProofProfileConfigurationError: () => createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult: () => createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult: () => createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions: () => deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult: () => extractRiddleProofProfileResult,
   normalizeRiddleProofProfile: () => normalizeRiddleProofProfile,
   profileStatusExitCode: () => profileStatusExitCode,
@@ -124,6 +125,36 @@ var RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES = [
   "timedout",
   "failed"
 ];
+function uniqueNonEmptyStrings(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const value of values ?? []) {
+    const normalized = typeof value === "string" ? value.trim() : "";
+    if (!normalized || seen.has(normalized)) continue;
+    seen.add(normalized);
+    result.push(normalized);
+  }
+  return result;
+}
+function deriveRiddleProofArtifactBodyAssertions(input) {
+  const artifactText = typeof input.artifact_text === "string" ? input.artifact_text : "";
+  const candidates = uniqueNonEmptyStrings(input.candidates);
+  const required = uniqueNonEmptyStrings(input.required);
+  const mergedCandidates = uniqueNonEmptyStrings([...required, ...candidates]);
+  const presentCandidates = mergedCandidates.filter((snippet) => artifactText.includes(snippet));
+  const missingCandidates = mergedCandidates.filter((snippet) => !artifactText.includes(snippet));
+  const missingRequired = required.filter((snippet) => !artifactText.includes(snippet));
+  const warnings = missingCandidates.map((snippet) => `candidate snippet is not present in artifact body: ${snippet}`);
+  return {
+    version: "riddle-proof.artifact-body-assertions.v1",
+    ok: missingRequired.length === 0,
+    body_contains: presentCandidates,
+    present_candidates: presentCandidates,
+    missing_candidates: missingCandidates,
+    missing_required: missingRequired,
+    warnings
+  };
+}
 var DEFAULT_VIEWPORTS = [
   { name: "desktop", width: 1280, height: 800 }
 ];
@@ -5936,6 +5967,7 @@ function extractRiddleProofProfileResult(input) {
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult,
   normalizeRiddleProofProfile,
   profileStatusExitCode,

package/dist/profile.d.cts

@@ -14,6 +14,21 @@ type RiddleProofProfileNetworkAbortErrorCode = typeof RIDDLE_PROOF_PROFILE_NETWO
 type RiddleProofProfileRunner = "riddle" | "local-playwright" | "browserless" | "github-actions" | (string & {});
 type RiddleProofProfileFailureAction = "fail" | "neutral" | "review";
 type RiddleProofProfileBaselinePolicy = "invariant_only" | "production_comparison" | "last_accepted_artifact" | "golden_reference_artifact" | (string & {});
+interface RiddleProofArtifactBodyAssertionInput {
+    artifact_text: string;
+    candidates: string[];
+    required?: string[];
+}
+interface RiddleProofArtifactBodyAssertionResult {
+    version: "riddle-proof.artifact-body-assertions.v1";
+    ok: boolean;
+    body_contains: string[];
+    present_candidates: string[];
+    missing_candidates: string[];
+    missing_required: string[];
+    warnings: string[];
+}
+declare function deriveRiddleProofArtifactBodyAssertions(input: RiddleProofArtifactBodyAssertionInput): RiddleProofArtifactBodyAssertionResult;
 interface RiddleProofProfileViewport {
     name: string;
     width: number;
@@ -330,4 +345,4 @@ declare function buildRiddleProofProfileScript(profile: RiddleProofProfile): str
 declare function collectRiddleProfileArtifactRefs(input: unknown): RiddleProofProfileArtifactRef[];
 declare function extractRiddleProofProfileResult(input: unknown): RiddleProofProfileResult | undefined;
 
-export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkAbortErrorCode, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };
+export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofArtifactBodyAssertionInput, type RiddleProofArtifactBodyAssertionResult, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkAbortErrorCode, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, deriveRiddleProofArtifactBodyAssertions, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };

package/dist/profile.d.ts

@@ -14,6 +14,21 @@ type RiddleProofProfileNetworkAbortErrorCode = typeof RIDDLE_PROOF_PROFILE_NETWO
 type RiddleProofProfileRunner = "riddle" | "local-playwright" | "browserless" | "github-actions" | (string & {});
 type RiddleProofProfileFailureAction = "fail" | "neutral" | "review";
 type RiddleProofProfileBaselinePolicy = "invariant_only" | "production_comparison" | "last_accepted_artifact" | "golden_reference_artifact" | (string & {});
+interface RiddleProofArtifactBodyAssertionInput {
+    artifact_text: string;
+    candidates: string[];
+    required?: string[];
+}
+interface RiddleProofArtifactBodyAssertionResult {
+    version: "riddle-proof.artifact-body-assertions.v1";
+    ok: boolean;
+    body_contains: string[];
+    present_candidates: string[];
+    missing_candidates: string[];
+    missing_required: string[];
+    warnings: string[];
+}
+declare function deriveRiddleProofArtifactBodyAssertions(input: RiddleProofArtifactBodyAssertionInput): RiddleProofArtifactBodyAssertionResult;
 interface RiddleProofProfileViewport {
     name: string;
     width: number;
@@ -330,4 +345,4 @@ declare function buildRiddleProofProfileScript(profile: RiddleProofProfile): str
 declare function collectRiddleProfileArtifactRefs(input: unknown): RiddleProofProfileArtifactRef[];
 declare function extractRiddleProofProfileResult(input: unknown): RiddleProofProfileResult | undefined;
 
-export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkAbortErrorCode, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };
+export { type NormalizeRiddleProofProfileOptions, RIDDLE_PROOF_PROFILE_CHECK_TYPES, RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION, RIDDLE_PROOF_PROFILE_NETWORK_ABORT_ERROR_CODES, RIDDLE_PROOF_PROFILE_RESULT_VERSION, RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES, RIDDLE_PROOF_PROFILE_STATUSES, RIDDLE_PROOF_PROFILE_VERSION, type RiddleProofArtifactBodyAssertionInput, type RiddleProofArtifactBodyAssertionResult, type RiddleProofProfile, type RiddleProofProfileArtifactRef, type RiddleProofProfileBaselinePolicy, type RiddleProofProfileBoundsOffender, type RiddleProofProfileCheck, type RiddleProofProfileCheckResult, type RiddleProofProfileCheckType, type RiddleProofProfileEvidence, type RiddleProofProfileFailureAction, type RiddleProofProfileNetworkAbortErrorCode, type RiddleProofProfileNetworkMock, type RiddleProofProfileNetworkMockResponse, type RiddleProofProfileResult, type RiddleProofProfileRouteEvidence, type RiddleProofProfileRouteInventoryRoute, type RiddleProofProfileRunner, type RiddleProofProfileSetupAction, type RiddleProofProfileSetupActionType, type RiddleProofProfileStatus, type RiddleProofProfileTarget, type RiddleProofProfileViewport, type RiddleProofProfileViewportEvidence, assessRiddleProofProfileEvidence, buildRiddleProofProfileScript, collectRiddleProfileArtifactRefs, collectRiddleProofProfileWarnings, createRiddleProofProfileConfigurationError, createRiddleProofProfileEnvironmentBlockedResult, createRiddleProofProfileInsufficientResult, deriveRiddleProofArtifactBodyAssertions, extractRiddleProofProfileResult, normalizeRiddleProofProfile, profileStatusExitCode, resolveRiddleProofProfileRouteUrl, resolveRiddleProofProfileTargetUrl, resolveRiddleProofProfileTimeoutSec, slugifyRiddleProofProfileName, summarizeRiddleProofProfileResult };

package/dist/profile.js

@@ -13,6 +13,7 @@ import {
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult,
   normalizeRiddleProofProfile,
   profileStatusExitCode,
@@ -21,7 +22,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-DVMBXDIF.js";
+} from "./chunk-TBEVHMU3.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,
@@ -37,6 +38,7 @@ export {
   createRiddleProofProfileConfigurationError,
   createRiddleProofProfileEnvironmentBlockedResult,
   createRiddleProofProfileInsufficientResult,
+  deriveRiddleProofArtifactBodyAssertions,
   extractRiddleProofProfileResult,
   normalizeRiddleProofProfile,
   profileStatusExitCode,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.120",
+  "version": "0.7.121",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",