@riddledc/riddle-proof 0.7.140 → 0.7.141

package/README.md

@@ -401,7 +401,7 @@ transport control, or other bounded interaction. Supported setup actions are
 `assert_text_absent`, `assert_selector_count`, `assert_window_value`,
 `assert_window_number`, `local_storage`, `session_storage`, `clear_storage`,
 `clear_console`, `screenshot`, `wait`, `wait_for_selector`, `wait_for_text`,
-`window_call`, and `window_call_until`;
+`window_eval`, `window_call`, and `window_call_until`;
 a failed setup action is recorded as a failed `setup_actions_succeeded` check so
 the profile cannot pass without reaching the intended state. Text-matched `click` actions prefer
 visible matching elements, which keeps responsive layouts from selecting hidden
@@ -447,6 +447,12 @@ errors, but keeps network mock hit evidence intact. Any setup action can include
 with `repeat_index` and `repeat_count`, and `after_ms` runs after each
 repetition. Use it for bounded game proof helpers, retry controls, or other
 workflows where one declarative action needs to advance the app several times.
+Use `window_eval` for async browser-side helper code that is easier to express
+as a short script body than as a preexisting `window` function. It accepts
+`script` plus optional JSON `args`, can compare `expect_return`, can store the
+JSON-safe return value with `store_return_to`, and honors `capture_return:
+false` for compact receipts. The script runs as an async function body with
+`args` available in scope, so `return { ok: true }` records a structured return.
 Use `window_call_until` when a proof helper needs to advance randomized or
 progressive state until a window-state receipt is true. It accepts `path` plus
 optional `args`, `until_path`, `until_expected_value`, `max_calls` from 1 to

package/dist/{chunk-6VXZ6V5M.js → chunk-F46O7DP2.js}

@@ -61,6 +61,7 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "wait",
   "wait_for_selector",
   "wait_for_text",
+  "window_eval",
   "window_call",
   "window_call_until"
 ];
@@ -480,6 +481,21 @@ function profileSetupWindowCallReceipts(results) {
     return receipt;
   });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return results.filter((result) => profileSetupResultAction(result) === "window_eval").map((result) => {
+    const receipt = {
+      ordinal: result.ordinal ?? null,
+      ok: result.ok !== false,
+      script_length: result.script_length ?? null,
+      return_captured: result.return_captured ?? null,
+      return_stored_to: result.return_stored_to ?? null,
+      reason: result.reason ?? result.error ?? result.store_reason ?? null
+    };
+    if (result.returned !== void 0) receipt.returned = result.returned;
+    if (result.expected_return !== void 0) receipt.expected_return = result.expected_return;
+    return receipt;
+  });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if (items.length <= limit) return items;
   const firstCount = Math.floor(limit / 2);
@@ -518,6 +534,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results.filter((result) => profileSetupResultAction(result) === "click" && result.ok !== false).map((result) => {
         const clickCount = typeof result.click_count === "number" && Number.isFinite(result.click_count) && result.click_count > 1 ? result.click_count : void 0;
         return {
@@ -561,6 +581,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples,
         failed: failed.map((result) => ({
@@ -613,7 +638,7 @@ function isSupportedCheckType(value) {
 }
 function normalizeSetupActionType(value, index) {
   const normalizedInput = String(value || "").trim().replace(/-/g, "_");
-  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput;
+  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput === "window_evaluate" || normalizedInput === "browser_eval" || normalizedInput === "browser_evaluate" || normalizedInput === "evaluate_script" || normalizedInput === "profile_script" ? "window_eval" : normalizedInput;
   if (RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES.includes(normalized)) {
     return normalized;
   }
@@ -631,7 +656,7 @@ function normalizeSetupActionArgs(input, index) {
   const argsInput = valueFromOwn(input, "args", "arguments", "args_json", "argsJson");
   if (argsInput === void 0) return void 0;
   if (!Array.isArray(argsInput)) {
-    throw new Error(`target.setup_actions[${index}] window_call args must be an array.`);
+    throw new Error(`target.setup_actions[${index}] window_call/window_eval args must be an array.`);
   }
   return argsInput.map(toJsonValue);
 }
@@ -775,7 +800,11 @@ function normalizeSetupAction(input, index) {
   if ((type === "window_call" || type === "window_call_until" || type === "assert_window_value" || type === "assert_window_number") && !path) {
     throw new Error(`target.setup_actions[${index}] ${type} requires path.`);
   }
-  const args = type === "window_call" || type === "window_call_until" ? normalizeSetupActionArgs(input, index) : void 0;
+  const script = stringFromOwn(input, "script", "code", "source", "body");
+  if (type === "window_eval" && !script) {
+    throw new Error(`target.setup_actions[${index}] window_eval requires script.`);
+  }
+  const args = type === "window_call" || type === "window_call_until" || type === "window_eval" ? normalizeSetupActionArgs(input, index) : void 0;
   const hasExpectedValue = hasOwn(input, "expected_value") || hasOwn(input, "expectedValue") || hasOwn(input, "expected") || hasOwn(input, "expect_value") || hasOwn(input, "expectValue") || hasOwn(input, "expect");
   if (type === "assert_window_value" && !hasExpectedValue) {
     throw new Error(`target.setup_actions[${index}] ${type} requires expected_value.`);
@@ -846,6 +875,7 @@ function normalizeSetupAction(input, index) {
     value,
     value_json: hasJsonValue ? toJsonValue(input.value_json ?? input.valueJson ?? input.json) : void 0,
     label: stringFromOwn(input, "label", "name", "screenshot_label", "screenshotLabel"),
+    script,
     path,
     args,
     expect_return: hasExpectedReturn ? toJsonValue(valueFromOwn(input, "expect_return", "expectReturn", "expected_return", "expectedReturn")) : void 0,
@@ -3797,6 +3827,23 @@ function profileSetupWindowCallReceipts(results) {
       return receipt;
     });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return (results || [])
+    .filter((result) => result && profileSetupResultAction(result) === "window_eval")
+    .map((result) => {
+      const receipt = {
+        ordinal: result.ordinal ?? null,
+        ok: result.ok !== false,
+        script_length: result.script_length ?? null,
+        return_captured: result.return_captured ?? null,
+        return_stored_to: result.return_stored_to ?? null,
+        reason: result.reason || result.error || result.store_reason || null,
+      };
+      if (result.returned !== undefined) receipt.returned = result.returned;
+      if (result.expected_return !== undefined) receipt.expected_return = result.expected_return;
+      return receipt;
+    });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if ((items || []).length <= limit) return items || [];
   const firstCount = Math.floor(limit / 2);
@@ -3849,6 +3896,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results
         .filter((result) => result && profileSetupResultAction(result) === "click" && result.ok !== false)
         .map((result) => {
@@ -3902,6 +3953,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples: textSamples,
         failed: failed.map((result) => ({
@@ -4882,6 +4938,49 @@ async function setupCallWindowFunction(context, path, args, storeReturnTo, captu
     }
   }, { path, args, storeReturnTo, captureReturn });
 }
+async function setupEvaluateWindowScript(context, script, args, storeReturnTo, captureReturn) {
+  return await context.evaluate(async ({ script, args, storeReturnTo, captureReturn }) => {
+    const toJsonValue = (value) => {
+      if (value === null || value === undefined) return null;
+      if (typeof value === "string" || typeof value === "boolean") return value;
+      if (typeof value === "number") return Number.isFinite(value) ? value : null;
+      if (Array.isArray(value)) return value.map(toJsonValue);
+      if (typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, toJsonValue(child)]));
+      }
+      return String(value);
+    };
+    const storeWindowReturn = (storePath, value) => {
+      const pathParts = String(storePath || "").split(".").map((part) => part.trim()).filter(Boolean);
+      if (pathParts[0] === "window") pathParts.shift();
+      if (!pathParts.length) return { ok: false, reason: "missing_store_path" };
+      let target = window;
+      for (let index = 0; index < pathParts.length - 1; index += 1) {
+        const part = pathParts[index];
+        if (target[part] === null || typeof target[part] !== "object") target[part] = {};
+        target = target[part];
+      }
+      target[pathParts[pathParts.length - 1]] = value;
+      return { ok: true, path: pathParts.join(".") };
+    };
+    const body = String(script || "");
+    if (!body.trim()) return { ok: false, reason: "missing_script" };
+    try {
+      const run = new Function("args", "\"use strict\"; return (async () => {\\n" + body + "\\n})();");
+      const returned = await run(Array.isArray(args) ? args : []);
+      const jsonReturned = toJsonValue(returned);
+      const returnedForResult = captureReturn === false ? undefined : jsonReturned;
+      if (storeReturnTo) {
+        const stored = storeWindowReturn(storeReturnTo, jsonReturned);
+        if (!stored.ok) return { ok: false, reason: "return_store_failed", store_reason: stored.reason, returned: returnedForResult };
+        return { ok: true, returned: returnedForResult, return_stored_to: stored.path };
+      }
+      return { ok: true, returned: returnedForResult };
+    } catch (error) {
+      return { ok: false, reason: "script_threw", error: String(error && error.message ? error.message : error).slice(0, 1000) };
+    }
+  }, { script, args, storeReturnTo, captureReturn });
+}
 function setupFrameSelector(action) {
   return String(action?.frame_selector || action?.frameSelector || action?.iframe_selector || action?.iframeSelector || "").trim();
 }
@@ -5395,6 +5494,44 @@ async function executeSetupAction(action, ordinal, viewport) {
       }
       return { ...base, ...setupScopeEvidence(scope), ok: true, storage, reload: action.reload === true };
     }
+    if (type === "window_eval") {
+      const script = String(action.script || action.code || action.source || action.body || "");
+      const args = Array.isArray(action.args) ? action.args : [];
+      const storeReturnTo = String(action.store_return_to || action.storeReturnTo || action.save_return_to || action.saveReturnTo || action.assign_return_to || action.assignReturnTo || action.return_state_path || action.returnStatePath || "").trim();
+      if (!script.trim()) return { ...base, reason: "missing_script" };
+      const scope = await setupActionScope(action, timeout);
+      if (!scope.ok) return setupScopeFailure(base, scope);
+      const hasExpectation = setupHasOwn(action, "expect_return")
+        || setupHasOwn(action, "expectReturn")
+        || setupHasOwn(action, "expected_return")
+        || setupHasOwn(action, "expectedReturn");
+      const expected = setupHasOwn(action, "expect_return")
+        ? action.expect_return
+        : setupHasOwn(action, "expectReturn")
+          ? action.expectReturn
+        : setupHasOwn(action, "expected_return")
+          ? action.expected_return
+          : action.expectedReturn;
+      const captureReturn = action.capture_return === false || action.captureReturn === false || action.include_return === false || action.includeReturn === false || action.omit_return === true || action.omitReturn === true
+        ? hasExpectation
+        : true;
+      const result = await setupEvaluateWindowScript(scope.context, script, args, storeReturnTo, captureReturn);
+      const expectationMet = !hasExpectation || setupValuesEqual(result.returned, expected);
+      return {
+        ...base,
+        ...setupScopeEvidence(scope),
+        ok: Boolean(result.ok && expectationMet),
+        script_length: script.length,
+        arg_count: args.length,
+        returned: captureReturn ? setupJsonValue(result.returned) : undefined,
+        return_captured: captureReturn,
+        expected_return: hasExpectation ? setupJsonValue(expected) : undefined,
+        return_stored_to: result.return_stored_to || storeReturnTo || undefined,
+        reason: result.ok ? (expectationMet ? undefined : "unexpected_return_value") : result.reason,
+        store_reason: result.store_reason || undefined,
+        error: result.error || undefined,
+      };
+    }
     if (type === "window_call") {
       const path = String(action.path || action.function_path || action.functionPath || "");
       const args = Array.isArray(action.args) ? action.args : [];

package/dist/cli.cjs

@@ -6998,6 +6998,7 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "wait",
   "wait_for_selector",
   "wait_for_text",
+  "window_eval",
   "window_call",
   "window_call_until"
 ];
@@ -7417,6 +7418,21 @@ function profileSetupWindowCallReceipts(results) {
     return receipt;
   });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return results.filter((result) => profileSetupResultAction(result) === "window_eval").map((result) => {
+    const receipt = {
+      ordinal: result.ordinal ?? null,
+      ok: result.ok !== false,
+      script_length: result.script_length ?? null,
+      return_captured: result.return_captured ?? null,
+      return_stored_to: result.return_stored_to ?? null,
+      reason: result.reason ?? result.error ?? result.store_reason ?? null
+    };
+    if (result.returned !== void 0) receipt.returned = result.returned;
+    if (result.expected_return !== void 0) receipt.expected_return = result.expected_return;
+    return receipt;
+  });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if (items.length <= limit) return items;
   const firstCount = Math.floor(limit / 2);
@@ -7455,6 +7471,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results.filter((result) => profileSetupResultAction(result) === "click" && result.ok !== false).map((result) => {
         const clickCount = typeof result.click_count === "number" && Number.isFinite(result.click_count) && result.click_count > 1 ? result.click_count : void 0;
         return {
@@ -7498,6 +7518,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples,
         failed: failed.map((result) => ({
@@ -7550,7 +7575,7 @@ function isSupportedCheckType(value) {
 }
 function normalizeSetupActionType(value, index) {
   const normalizedInput = String(value || "").trim().replace(/-/g, "_");
-  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput;
+  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput === "window_evaluate" || normalizedInput === "browser_eval" || normalizedInput === "browser_evaluate" || normalizedInput === "evaluate_script" || normalizedInput === "profile_script" ? "window_eval" : normalizedInput;
   if (RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES.includes(normalized)) {
     return normalized;
   }
@@ -7568,7 +7593,7 @@ function normalizeSetupActionArgs(input, index) {
   const argsInput = valueFromOwn(input, "args", "arguments", "args_json", "argsJson");
   if (argsInput === void 0) return void 0;
   if (!Array.isArray(argsInput)) {
-    throw new Error(`target.setup_actions[${index}] window_call args must be an array.`);
+    throw new Error(`target.setup_actions[${index}] window_call/window_eval args must be an array.`);
   }
   return argsInput.map(toJsonValue);
 }
@@ -7712,7 +7737,11 @@ function normalizeSetupAction(input, index) {
   if ((type === "window_call" || type === "window_call_until" || type === "assert_window_value" || type === "assert_window_number") && !path7) {
     throw new Error(`target.setup_actions[${index}] ${type} requires path.`);
   }
-  const args = type === "window_call" || type === "window_call_until" ? normalizeSetupActionArgs(input, index) : void 0;
+  const script = stringFromOwn(input, "script", "code", "source", "body");
+  if (type === "window_eval" && !script) {
+    throw new Error(`target.setup_actions[${index}] window_eval requires script.`);
+  }
+  const args = type === "window_call" || type === "window_call_until" || type === "window_eval" ? normalizeSetupActionArgs(input, index) : void 0;
   const hasExpectedValue = hasOwn(input, "expected_value") || hasOwn(input, "expectedValue") || hasOwn(input, "expected") || hasOwn(input, "expect_value") || hasOwn(input, "expectValue") || hasOwn(input, "expect");
   if (type === "assert_window_value" && !hasExpectedValue) {
     throw new Error(`target.setup_actions[${index}] ${type} requires expected_value.`);
@@ -7783,6 +7812,7 @@ function normalizeSetupAction(input, index) {
     value,
     value_json: hasJsonValue ? toJsonValue(input.value_json ?? input.valueJson ?? input.json) : void 0,
     label: stringFromOwn(input, "label", "name", "screenshot_label", "screenshotLabel"),
+    script,
     path: path7,
     args,
     expect_return: hasExpectedReturn ? toJsonValue(valueFromOwn(input, "expect_return", "expectReturn", "expected_return", "expectedReturn")) : void 0,
@@ -10718,6 +10748,23 @@ function profileSetupWindowCallReceipts(results) {
       return receipt;
     });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return (results || [])
+    .filter((result) => result && profileSetupResultAction(result) === "window_eval")
+    .map((result) => {
+      const receipt = {
+        ordinal: result.ordinal ?? null,
+        ok: result.ok !== false,
+        script_length: result.script_length ?? null,
+        return_captured: result.return_captured ?? null,
+        return_stored_to: result.return_stored_to ?? null,
+        reason: result.reason || result.error || result.store_reason || null,
+      };
+      if (result.returned !== undefined) receipt.returned = result.returned;
+      if (result.expected_return !== undefined) receipt.expected_return = result.expected_return;
+      return receipt;
+    });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if ((items || []).length <= limit) return items || [];
   const firstCount = Math.floor(limit / 2);
@@ -10770,6 +10817,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results
         .filter((result) => result && profileSetupResultAction(result) === "click" && result.ok !== false)
         .map((result) => {
@@ -10823,6 +10874,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples: textSamples,
         failed: failed.map((result) => ({
@@ -11803,6 +11859,49 @@ async function setupCallWindowFunction(context, path, args, storeReturnTo, captu
     }
   }, { path, args, storeReturnTo, captureReturn });
 }
+async function setupEvaluateWindowScript(context, script, args, storeReturnTo, captureReturn) {
+  return await context.evaluate(async ({ script, args, storeReturnTo, captureReturn }) => {
+    const toJsonValue = (value) => {
+      if (value === null || value === undefined) return null;
+      if (typeof value === "string" || typeof value === "boolean") return value;
+      if (typeof value === "number") return Number.isFinite(value) ? value : null;
+      if (Array.isArray(value)) return value.map(toJsonValue);
+      if (typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, toJsonValue(child)]));
+      }
+      return String(value);
+    };
+    const storeWindowReturn = (storePath, value) => {
+      const pathParts = String(storePath || "").split(".").map((part) => part.trim()).filter(Boolean);
+      if (pathParts[0] === "window") pathParts.shift();
+      if (!pathParts.length) return { ok: false, reason: "missing_store_path" };
+      let target = window;
+      for (let index = 0; index < pathParts.length - 1; index += 1) {
+        const part = pathParts[index];
+        if (target[part] === null || typeof target[part] !== "object") target[part] = {};
+        target = target[part];
+      }
+      target[pathParts[pathParts.length - 1]] = value;
+      return { ok: true, path: pathParts.join(".") };
+    };
+    const body = String(script || "");
+    if (!body.trim()) return { ok: false, reason: "missing_script" };
+    try {
+      const run = new Function("args", "\"use strict\"; return (async () => {\\n" + body + "\\n})();");
+      const returned = await run(Array.isArray(args) ? args : []);
+      const jsonReturned = toJsonValue(returned);
+      const returnedForResult = captureReturn === false ? undefined : jsonReturned;
+      if (storeReturnTo) {
+        const stored = storeWindowReturn(storeReturnTo, jsonReturned);
+        if (!stored.ok) return { ok: false, reason: "return_store_failed", store_reason: stored.reason, returned: returnedForResult };
+        return { ok: true, returned: returnedForResult, return_stored_to: stored.path };
+      }
+      return { ok: true, returned: returnedForResult };
+    } catch (error) {
+      return { ok: false, reason: "script_threw", error: String(error && error.message ? error.message : error).slice(0, 1000) };
+    }
+  }, { script, args, storeReturnTo, captureReturn });
+}
 function setupFrameSelector(action) {
   return String(action?.frame_selector || action?.frameSelector || action?.iframe_selector || action?.iframeSelector || "").trim();
 }
@@ -12316,6 +12415,44 @@ async function executeSetupAction(action, ordinal, viewport) {
       }
       return { ...base, ...setupScopeEvidence(scope), ok: true, storage, reload: action.reload === true };
     }
+    if (type === "window_eval") {
+      const script = String(action.script || action.code || action.source || action.body || "");
+      const args = Array.isArray(action.args) ? action.args : [];
+      const storeReturnTo = String(action.store_return_to || action.storeReturnTo || action.save_return_to || action.saveReturnTo || action.assign_return_to || action.assignReturnTo || action.return_state_path || action.returnStatePath || "").trim();
+      if (!script.trim()) return { ...base, reason: "missing_script" };
+      const scope = await setupActionScope(action, timeout);
+      if (!scope.ok) return setupScopeFailure(base, scope);
+      const hasExpectation = setupHasOwn(action, "expect_return")
+        || setupHasOwn(action, "expectReturn")
+        || setupHasOwn(action, "expected_return")
+        || setupHasOwn(action, "expectedReturn");
+      const expected = setupHasOwn(action, "expect_return")
+        ? action.expect_return
+        : setupHasOwn(action, "expectReturn")
+          ? action.expectReturn
+        : setupHasOwn(action, "expected_return")
+          ? action.expected_return
+          : action.expectedReturn;
+      const captureReturn = action.capture_return === false || action.captureReturn === false || action.include_return === false || action.includeReturn === false || action.omit_return === true || action.omitReturn === true
+        ? hasExpectation
+        : true;
+      const result = await setupEvaluateWindowScript(scope.context, script, args, storeReturnTo, captureReturn);
+      const expectationMet = !hasExpectation || setupValuesEqual(result.returned, expected);
+      return {
+        ...base,
+        ...setupScopeEvidence(scope),
+        ok: Boolean(result.ok && expectationMet),
+        script_length: script.length,
+        arg_count: args.length,
+        returned: captureReturn ? setupJsonValue(result.returned) : undefined,
+        return_captured: captureReturn,
+        expected_return: hasExpectation ? setupJsonValue(expected) : undefined,
+        return_stored_to: result.return_stored_to || storeReturnTo || undefined,
+        reason: result.ok ? (expectationMet ? undefined : "unexpected_return_value") : result.reason,
+        store_reason: result.store_reason || undefined,
+        error: result.error || undefined,
+      };
+    }
     if (type === "window_call") {
       const path = String(action.path || action.function_path || action.functionPath || "");
       const args = Array.isArray(action.args) ? action.args : [];
@@ -14714,6 +14851,9 @@ function profileSetupSummaryMarkdown(result) {
   const windowCallTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_total) || 0), 0);
   const windowCallStoredTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_stored_total) || 0), 0);
   const windowCallCapturedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_captured_total) || 0), 0);
+  const windowEvalTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_total) || 0), 0);
+  const windowEvalStoredTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_stored_total) || 0), 0);
+  const windowEvalCapturedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_captured_total) || 0), 0);
   const windowCallUntilTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_until_total) || 0), 0);
   const windowCallUntilCallTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_until_call_total) || 0), 0);
   const failedTotal = viewports.reduce((sum, viewport) => sum + (Array.isArray(viewport.failed) ? viewport.failed.length : 0), 0);
@@ -14729,6 +14869,9 @@ function profileSetupSummaryMarkdown(result) {
   if (windowCallTotal) {
     lines.push(`- window_call: ${windowCallTotal} action(s), stored returns ${windowCallStoredTotal}, captured returns ${windowCallCapturedTotal}`);
   }
+  if (windowEvalTotal) {
+    lines.push(`- window_eval: ${windowEvalTotal} action(s), stored returns ${windowEvalStoredTotal}, captured returns ${windowEvalCapturedTotal}`);
+  }
   if (windowCallUntilTotal) {
     lines.push(`- window_call_until: ${windowCallUntilTotal} action(s), call_count total ${windowCallUntilCallTotal}`);
   }
@@ -14742,10 +14885,13 @@ function profileSetupSummaryMarkdown(result) {
     const windowCallActions = cliFiniteNumber(viewport.window_call_total) || 0;
     const windowCallStored = cliFiniteNumber(viewport.window_call_stored_total) || 0;
     const windowCallCaptured = cliFiniteNumber(viewport.window_call_captured_total) || 0;
+    const windowEvalActions = cliFiniteNumber(viewport.window_eval_total) || 0;
+    const windowEvalStored = cliFiniteNumber(viewport.window_eval_stored_total) || 0;
+    const windowEvalCaptured = cliFiniteNumber(viewport.window_eval_captured_total) || 0;
     const windowCallUntilActions = cliFiniteNumber(viewport.window_call_until_total) || 0;
     const windowCallUntilCalls = cliFiniteNumber(viewport.window_call_until_call_total) || 0;
     const observedPath = cliString(viewport.observed_path);
-    lines.push(`- ${name}: ${ok}, ${resultCount} result(s), ${screenshotCount} setup screenshot(s), ${clicked} click(s)${clickCountActions ? `, ${clickCountActions} click_count action(s)` : ""}${windowCallActions ? `, ${windowCallActions} window_call action(s), ${windowCallStored} stored return(s), ${windowCallCaptured} captured return(s)` : ""}${windowCallUntilActions ? `, ${windowCallUntilActions} window_call_until action(s), ${windowCallUntilCalls} call(s)` : ""}${observedPath ? `, path ${observedPath}` : ""}`);
+    lines.push(`- ${name}: ${ok}, ${resultCount} result(s), ${screenshotCount} setup screenshot(s), ${clicked} click(s)${clickCountActions ? `, ${clickCountActions} click_count action(s)` : ""}${windowCallActions ? `, ${windowCallActions} window_call action(s), ${windowCallStored} stored return(s), ${windowCallCaptured} captured return(s)` : ""}${windowEvalActions ? `, ${windowEvalActions} window_eval action(s), ${windowEvalStored} stored return(s), ${windowEvalCaptured} captured return(s)` : ""}${windowCallUntilActions ? `, ${windowCallUntilActions} window_call_until action(s), ${windowCallUntilCalls} call(s)` : ""}${observedPath ? `, path ${observedPath}` : ""}`);
   }
   const windowCallDetails = viewports.flatMap((viewport) => {
     const name = cliString(viewport.name) || "viewport";
@@ -14763,6 +14909,22 @@ function profileSetupSummaryMarkdown(result) {
     lines.push(`- ${name} window_call: ${ok}, ${markdownInlineCode(path7)}${storedTo ? `, stored ${markdownInlineCode(storedTo)}` : ""}, return ${captured}${expected === void 0 ? "" : `, expected ${markdownInlineCode(expected, 80)}`}${returned === void 0 ? "" : `, returned ${markdownInlineCode(returned, 80)}`}${reason ? `, reason ${markdownInlineCode(reason, 100)}` : ""}`);
   }
   if (windowCallDetails.length > 12) lines.push(`- ${windowCallDetails.length - 12} additional window_call receipt(s) omitted.`);
+  const windowEvalDetails = viewports.flatMap((viewport) => {
+    const name = cliString(viewport.name) || "viewport";
+    const receipts = Array.isArray(viewport.window_eval) ? viewport.window_eval.map(cliRecord).filter((item) => Boolean(item)) : [];
+    return receipts.map((receipt) => ({ name, receipt }));
+  });
+  for (const { name, receipt } of windowEvalDetails.slice(0, 12)) {
+    const scriptLength = cliFiniteNumber(receipt.script_length);
+    const storedTo = cliString(receipt.return_stored_to);
+    const returned = cliValueLabel(receipt.returned);
+    const expected = cliValueLabel(receipt.expected_return);
+    const captured = receipt.return_captured === true ? "captured" : receipt.return_captured === false ? "not captured" : "capture unknown";
+    const ok = receipt.ok === false ? "failed" : "ok";
+    const reason = cliString(receipt.reason);
+    lines.push(`- ${name} window_eval: ${ok}${scriptLength === void 0 ? "" : `, script ${scriptLength} chars`}${storedTo ? `, stored ${markdownInlineCode(storedTo)}` : ""}, return ${captured}${expected === void 0 ? "" : `, expected ${markdownInlineCode(expected, 80)}`}${returned === void 0 ? "" : `, returned ${markdownInlineCode(returned, 80)}`}${reason ? `, reason ${markdownInlineCode(reason, 100)}` : ""}`);
+  }
+  if (windowEvalDetails.length > 12) lines.push(`- ${windowEvalDetails.length - 12} additional window_eval receipt(s) omitted.`);
   const windowCallUntilDetails = viewports.flatMap((viewport) => {
     const name = cliString(viewport.name) || "viewport";
     const receipts = Array.isArray(viewport.window_call_until) ? viewport.window_call_until.map(cliRecord).filter((item) => Boolean(item)) : [];

package/dist/cli.js

@@ -12,7 +12,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-6VXZ6V5M.js";
+} from "./chunk-F46O7DP2.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -601,6 +601,9 @@ function profileSetupSummaryMarkdown(result) {
   const windowCallTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_total) || 0), 0);
   const windowCallStoredTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_stored_total) || 0), 0);
   const windowCallCapturedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_captured_total) || 0), 0);
+  const windowEvalTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_total) || 0), 0);
+  const windowEvalStoredTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_stored_total) || 0), 0);
+  const windowEvalCapturedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_eval_captured_total) || 0), 0);
   const windowCallUntilTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_until_total) || 0), 0);
   const windowCallUntilCallTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.window_call_until_call_total) || 0), 0);
   const failedTotal = viewports.reduce((sum, viewport) => sum + (Array.isArray(viewport.failed) ? viewport.failed.length : 0), 0);
@@ -616,6 +619,9 @@ function profileSetupSummaryMarkdown(result) {
   if (windowCallTotal) {
     lines.push(`- window_call: ${windowCallTotal} action(s), stored returns ${windowCallStoredTotal}, captured returns ${windowCallCapturedTotal}`);
   }
+  if (windowEvalTotal) {
+    lines.push(`- window_eval: ${windowEvalTotal} action(s), stored returns ${windowEvalStoredTotal}, captured returns ${windowEvalCapturedTotal}`);
+  }
   if (windowCallUntilTotal) {
     lines.push(`- window_call_until: ${windowCallUntilTotal} action(s), call_count total ${windowCallUntilCallTotal}`);
   }
@@ -629,10 +635,13 @@ function profileSetupSummaryMarkdown(result) {
     const windowCallActions = cliFiniteNumber(viewport.window_call_total) || 0;
     const windowCallStored = cliFiniteNumber(viewport.window_call_stored_total) || 0;
     const windowCallCaptured = cliFiniteNumber(viewport.window_call_captured_total) || 0;
+    const windowEvalActions = cliFiniteNumber(viewport.window_eval_total) || 0;
+    const windowEvalStored = cliFiniteNumber(viewport.window_eval_stored_total) || 0;
+    const windowEvalCaptured = cliFiniteNumber(viewport.window_eval_captured_total) || 0;
     const windowCallUntilActions = cliFiniteNumber(viewport.window_call_until_total) || 0;
     const windowCallUntilCalls = cliFiniteNumber(viewport.window_call_until_call_total) || 0;
     const observedPath = cliString(viewport.observed_path);
-    lines.push(`- ${name}: ${ok}, ${resultCount} result(s), ${screenshotCount} setup screenshot(s), ${clicked} click(s)${clickCountActions ? `, ${clickCountActions} click_count action(s)` : ""}${windowCallActions ? `, ${windowCallActions} window_call action(s), ${windowCallStored} stored return(s), ${windowCallCaptured} captured return(s)` : ""}${windowCallUntilActions ? `, ${windowCallUntilActions} window_call_until action(s), ${windowCallUntilCalls} call(s)` : ""}${observedPath ? `, path ${observedPath}` : ""}`);
+    lines.push(`- ${name}: ${ok}, ${resultCount} result(s), ${screenshotCount} setup screenshot(s), ${clicked} click(s)${clickCountActions ? `, ${clickCountActions} click_count action(s)` : ""}${windowCallActions ? `, ${windowCallActions} window_call action(s), ${windowCallStored} stored return(s), ${windowCallCaptured} captured return(s)` : ""}${windowEvalActions ? `, ${windowEvalActions} window_eval action(s), ${windowEvalStored} stored return(s), ${windowEvalCaptured} captured return(s)` : ""}${windowCallUntilActions ? `, ${windowCallUntilActions} window_call_until action(s), ${windowCallUntilCalls} call(s)` : ""}${observedPath ? `, path ${observedPath}` : ""}`);
   }
   const windowCallDetails = viewports.flatMap((viewport) => {
     const name = cliString(viewport.name) || "viewport";
@@ -650,6 +659,22 @@ function profileSetupSummaryMarkdown(result) {
     lines.push(`- ${name} window_call: ${ok}, ${markdownInlineCode(path2)}${storedTo ? `, stored ${markdownInlineCode(storedTo)}` : ""}, return ${captured}${expected === void 0 ? "" : `, expected ${markdownInlineCode(expected, 80)}`}${returned === void 0 ? "" : `, returned ${markdownInlineCode(returned, 80)}`}${reason ? `, reason ${markdownInlineCode(reason, 100)}` : ""}`);
   }
   if (windowCallDetails.length > 12) lines.push(`- ${windowCallDetails.length - 12} additional window_call receipt(s) omitted.`);
+  const windowEvalDetails = viewports.flatMap((viewport) => {
+    const name = cliString(viewport.name) || "viewport";
+    const receipts = Array.isArray(viewport.window_eval) ? viewport.window_eval.map(cliRecord).filter((item) => Boolean(item)) : [];
+    return receipts.map((receipt) => ({ name, receipt }));
+  });
+  for (const { name, receipt } of windowEvalDetails.slice(0, 12)) {
+    const scriptLength = cliFiniteNumber(receipt.script_length);
+    const storedTo = cliString(receipt.return_stored_to);
+    const returned = cliValueLabel(receipt.returned);
+    const expected = cliValueLabel(receipt.expected_return);
+    const captured = receipt.return_captured === true ? "captured" : receipt.return_captured === false ? "not captured" : "capture unknown";
+    const ok = receipt.ok === false ? "failed" : "ok";
+    const reason = cliString(receipt.reason);
+    lines.push(`- ${name} window_eval: ${ok}${scriptLength === void 0 ? "" : `, script ${scriptLength} chars`}${storedTo ? `, stored ${markdownInlineCode(storedTo)}` : ""}, return ${captured}${expected === void 0 ? "" : `, expected ${markdownInlineCode(expected, 80)}`}${returned === void 0 ? "" : `, returned ${markdownInlineCode(returned, 80)}`}${reason ? `, reason ${markdownInlineCode(reason, 100)}` : ""}`);
+  }
+  if (windowEvalDetails.length > 12) lines.push(`- ${windowEvalDetails.length - 12} additional window_eval receipt(s) omitted.`);
   const windowCallUntilDetails = viewports.flatMap((viewport) => {
     const name = cliString(viewport.name) || "viewport";
     const receipts = Array.isArray(viewport.window_call_until) ? viewport.window_call_until.map(cliRecord).filter((item) => Boolean(item)) : [];

package/dist/index.cjs

@@ -8794,6 +8794,7 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "wait",
   "wait_for_selector",
   "wait_for_text",
+  "window_eval",
   "window_call",
   "window_call_until"
 ];
@@ -9213,6 +9214,21 @@ function profileSetupWindowCallReceipts(results) {
     return receipt;
   });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return results.filter((result) => profileSetupResultAction(result) === "window_eval").map((result) => {
+    const receipt = {
+      ordinal: result.ordinal ?? null,
+      ok: result.ok !== false,
+      script_length: result.script_length ?? null,
+      return_captured: result.return_captured ?? null,
+      return_stored_to: result.return_stored_to ?? null,
+      reason: result.reason ?? result.error ?? result.store_reason ?? null
+    };
+    if (result.returned !== void 0) receipt.returned = result.returned;
+    if (result.expected_return !== void 0) receipt.expected_return = result.expected_return;
+    return receipt;
+  });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if (items.length <= limit) return items;
   const firstCount = Math.floor(limit / 2);
@@ -9251,6 +9267,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results.filter((result) => profileSetupResultAction(result) === "click" && result.ok !== false).map((result) => {
         const clickCount = typeof result.click_count === "number" && Number.isFinite(result.click_count) && result.click_count > 1 ? result.click_count : void 0;
         return {
@@ -9294,6 +9314,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples,
         failed: failed.map((result) => ({
@@ -9346,7 +9371,7 @@ function isSupportedCheckType(value) {
 }
 function normalizeSetupActionType(value, index) {
   const normalizedInput = String(value || "").trim().replace(/-/g, "_");
-  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput;
+  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput === "window_evaluate" || normalizedInput === "browser_eval" || normalizedInput === "browser_evaluate" || normalizedInput === "evaluate_script" || normalizedInput === "profile_script" ? "window_eval" : normalizedInput;
   if (RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES.includes(normalized)) {
     return normalized;
   }
@@ -9364,7 +9389,7 @@ function normalizeSetupActionArgs(input, index) {
   const argsInput = valueFromOwn(input, "args", "arguments", "args_json", "argsJson");
   if (argsInput === void 0) return void 0;
   if (!Array.isArray(argsInput)) {
-    throw new Error(`target.setup_actions[${index}] window_call args must be an array.`);
+    throw new Error(`target.setup_actions[${index}] window_call/window_eval args must be an array.`);
   }
   return argsInput.map(toJsonValue);
 }
@@ -9508,7 +9533,11 @@ function normalizeSetupAction(input, index) {
   if ((type === "window_call" || type === "window_call_until" || type === "assert_window_value" || type === "assert_window_number") && !path6) {
     throw new Error(`target.setup_actions[${index}] ${type} requires path.`);
   }
-  const args = type === "window_call" || type === "window_call_until" ? normalizeSetupActionArgs(input, index) : void 0;
+  const script = stringFromOwn(input, "script", "code", "source", "body");
+  if (type === "window_eval" && !script) {
+    throw new Error(`target.setup_actions[${index}] window_eval requires script.`);
+  }
+  const args = type === "window_call" || type === "window_call_until" || type === "window_eval" ? normalizeSetupActionArgs(input, index) : void 0;
   const hasExpectedValue = hasOwn(input, "expected_value") || hasOwn(input, "expectedValue") || hasOwn(input, "expected") || hasOwn(input, "expect_value") || hasOwn(input, "expectValue") || hasOwn(input, "expect");
   if (type === "assert_window_value" && !hasExpectedValue) {
     throw new Error(`target.setup_actions[${index}] ${type} requires expected_value.`);
@@ -9579,6 +9608,7 @@ function normalizeSetupAction(input, index) {
     value,
     value_json: hasJsonValue ? toJsonValue(input.value_json ?? input.valueJson ?? input.json) : void 0,
     label: stringFromOwn(input, "label", "name", "screenshot_label", "screenshotLabel"),
+    script,
     path: path6,
     args,
     expect_return: hasExpectedReturn ? toJsonValue(valueFromOwn(input, "expect_return", "expectReturn", "expected_return", "expectedReturn")) : void 0,
@@ -12530,6 +12560,23 @@ function profileSetupWindowCallReceipts(results) {
       return receipt;
     });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return (results || [])
+    .filter((result) => result && profileSetupResultAction(result) === "window_eval")
+    .map((result) => {
+      const receipt = {
+        ordinal: result.ordinal ?? null,
+        ok: result.ok !== false,
+        script_length: result.script_length ?? null,
+        return_captured: result.return_captured ?? null,
+        return_stored_to: result.return_stored_to ?? null,
+        reason: result.reason || result.error || result.store_reason || null,
+      };
+      if (result.returned !== undefined) receipt.returned = result.returned;
+      if (result.expected_return !== undefined) receipt.expected_return = result.expected_return;
+      return receipt;
+    });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if ((items || []).length <= limit) return items || [];
   const firstCount = Math.floor(limit / 2);
@@ -12582,6 +12629,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results
         .filter((result) => result && profileSetupResultAction(result) === "click" && result.ok !== false)
         .map((result) => {
@@ -12635,6 +12686,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples: textSamples,
         failed: failed.map((result) => ({
@@ -13615,6 +13671,49 @@ async function setupCallWindowFunction(context, path, args, storeReturnTo, captu
     }
   }, { path, args, storeReturnTo, captureReturn });
 }
+async function setupEvaluateWindowScript(context, script, args, storeReturnTo, captureReturn) {
+  return await context.evaluate(async ({ script, args, storeReturnTo, captureReturn }) => {
+    const toJsonValue = (value) => {
+      if (value === null || value === undefined) return null;
+      if (typeof value === "string" || typeof value === "boolean") return value;
+      if (typeof value === "number") return Number.isFinite(value) ? value : null;
+      if (Array.isArray(value)) return value.map(toJsonValue);
+      if (typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, toJsonValue(child)]));
+      }
+      return String(value);
+    };
+    const storeWindowReturn = (storePath, value) => {
+      const pathParts = String(storePath || "").split(".").map((part) => part.trim()).filter(Boolean);
+      if (pathParts[0] === "window") pathParts.shift();
+      if (!pathParts.length) return { ok: false, reason: "missing_store_path" };
+      let target = window;
+      for (let index = 0; index < pathParts.length - 1; index += 1) {
+        const part = pathParts[index];
+        if (target[part] === null || typeof target[part] !== "object") target[part] = {};
+        target = target[part];
+      }
+      target[pathParts[pathParts.length - 1]] = value;
+      return { ok: true, path: pathParts.join(".") };
+    };
+    const body = String(script || "");
+    if (!body.trim()) return { ok: false, reason: "missing_script" };
+    try {
+      const run = new Function("args", "\"use strict\"; return (async () => {\\n" + body + "\\n})();");
+      const returned = await run(Array.isArray(args) ? args : []);
+      const jsonReturned = toJsonValue(returned);
+      const returnedForResult = captureReturn === false ? undefined : jsonReturned;
+      if (storeReturnTo) {
+        const stored = storeWindowReturn(storeReturnTo, jsonReturned);
+        if (!stored.ok) return { ok: false, reason: "return_store_failed", store_reason: stored.reason, returned: returnedForResult };
+        return { ok: true, returned: returnedForResult, return_stored_to: stored.path };
+      }
+      return { ok: true, returned: returnedForResult };
+    } catch (error) {
+      return { ok: false, reason: "script_threw", error: String(error && error.message ? error.message : error).slice(0, 1000) };
+    }
+  }, { script, args, storeReturnTo, captureReturn });
+}
 function setupFrameSelector(action) {
   return String(action?.frame_selector || action?.frameSelector || action?.iframe_selector || action?.iframeSelector || "").trim();
 }
@@ -14128,6 +14227,44 @@ async function executeSetupAction(action, ordinal, viewport) {
       }
       return { ...base, ...setupScopeEvidence(scope), ok: true, storage, reload: action.reload === true };
     }
+    if (type === "window_eval") {
+      const script = String(action.script || action.code || action.source || action.body || "");
+      const args = Array.isArray(action.args) ? action.args : [];
+      const storeReturnTo = String(action.store_return_to || action.storeReturnTo || action.save_return_to || action.saveReturnTo || action.assign_return_to || action.assignReturnTo || action.return_state_path || action.returnStatePath || "").trim();
+      if (!script.trim()) return { ...base, reason: "missing_script" };
+      const scope = await setupActionScope(action, timeout);
+      if (!scope.ok) return setupScopeFailure(base, scope);
+      const hasExpectation = setupHasOwn(action, "expect_return")
+        || setupHasOwn(action, "expectReturn")
+        || setupHasOwn(action, "expected_return")
+        || setupHasOwn(action, "expectedReturn");
+      const expected = setupHasOwn(action, "expect_return")
+        ? action.expect_return
+        : setupHasOwn(action, "expectReturn")
+          ? action.expectReturn
+        : setupHasOwn(action, "expected_return")
+          ? action.expected_return
+          : action.expectedReturn;
+      const captureReturn = action.capture_return === false || action.captureReturn === false || action.include_return === false || action.includeReturn === false || action.omit_return === true || action.omitReturn === true
+        ? hasExpectation
+        : true;
+      const result = await setupEvaluateWindowScript(scope.context, script, args, storeReturnTo, captureReturn);
+      const expectationMet = !hasExpectation || setupValuesEqual(result.returned, expected);
+      return {
+        ...base,
+        ...setupScopeEvidence(scope),
+        ok: Boolean(result.ok && expectationMet),
+        script_length: script.length,
+        arg_count: args.length,
+        returned: captureReturn ? setupJsonValue(result.returned) : undefined,
+        return_captured: captureReturn,
+        expected_return: hasExpectation ? setupJsonValue(expected) : undefined,
+        return_stored_to: result.return_stored_to || storeReturnTo || undefined,
+        reason: result.ok ? (expectationMet ? undefined : "unexpected_return_value") : result.reason,
+        store_reason: result.store_reason || undefined,
+        error: result.error || undefined,
+      };
+    }
     if (type === "window_call") {
       const path = String(action.path || action.function_path || action.functionPath || "");
       const args = Array.isArray(action.args) ? action.args : [];

package/dist/index.js

@@ -62,7 +62,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-6VXZ6V5M.js";
+} from "./chunk-F46O7DP2.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -108,6 +108,7 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "wait",
   "wait_for_selector",
   "wait_for_text",
+  "window_eval",
   "window_call",
   "window_call_until"
 ];
@@ -527,6 +528,21 @@ function profileSetupWindowCallReceipts(results) {
     return receipt;
   });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return results.filter((result) => profileSetupResultAction(result) === "window_eval").map((result) => {
+    const receipt = {
+      ordinal: result.ordinal ?? null,
+      ok: result.ok !== false,
+      script_length: result.script_length ?? null,
+      return_captured: result.return_captured ?? null,
+      return_stored_to: result.return_stored_to ?? null,
+      reason: result.reason ?? result.error ?? result.store_reason ?? null
+    };
+    if (result.returned !== void 0) receipt.returned = result.returned;
+    if (result.expected_return !== void 0) receipt.expected_return = result.expected_return;
+    return receipt;
+  });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if (items.length <= limit) return items;
   const firstCount = Math.floor(limit / 2);
@@ -565,6 +581,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results.filter((result) => profileSetupResultAction(result) === "click" && result.ok !== false).map((result) => {
         const clickCount = typeof result.click_count === "number" && Number.isFinite(result.click_count) && result.click_count > 1 ? result.click_count : void 0;
         return {
@@ -608,6 +628,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountByViewpo
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples,
         failed: failed.map((result) => ({
@@ -660,7 +685,7 @@ function isSupportedCheckType(value) {
 }
 function normalizeSetupActionType(value, index) {
   const normalizedInput = String(value || "").trim().replace(/-/g, "_");
-  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput;
+  const normalized = normalizedInput === "clear_browser_storage" ? "clear_storage" : normalizedInput === "reset_console" || normalizedInput === "clear_browser_console" || normalizedInput === "reset_browser_console" ? "clear_console" : normalizedInput === "pointer_drag" || normalizedInput === "mouse_drag" || normalizedInput === "drag_to" ? "drag" : normalizedInput === "keyboard_press" || normalizedInput === "key_press" ? "press" : normalizedInput === "capture_screenshot" || normalizedInput === "save_screenshot" || normalizedInput === "setup_screenshot" ? "screenshot" : normalizedInput === "accept_dialog" || normalizedInput === "accept_dialogs" || normalizedInput === "confirm_dialog" || normalizedInput === "set_dialog_response" ? "dialog_response" : normalizedInput === "dismiss_dialog" || normalizedInput === "dismiss_dialogs" || normalizedInput === "cancel_dialog" ? "dialog_response" : normalizedInput === "window_call_until" || normalizedInput === "call_until" || normalizedInput === "window_call_repeat_until" || normalizedInput === "repeat_window_call_until" ? "window_call_until" : normalizedInput === "window_evaluate" || normalizedInput === "browser_eval" || normalizedInput === "browser_evaluate" || normalizedInput === "evaluate_script" || normalizedInput === "profile_script" ? "window_eval" : normalizedInput;
   if (RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES.includes(normalized)) {
     return normalized;
   }
@@ -678,7 +703,7 @@ function normalizeSetupActionArgs(input, index) {
   const argsInput = valueFromOwn(input, "args", "arguments", "args_json", "argsJson");
   if (argsInput === void 0) return void 0;
   if (!Array.isArray(argsInput)) {
-    throw new Error(`target.setup_actions[${index}] window_call args must be an array.`);
+    throw new Error(`target.setup_actions[${index}] window_call/window_eval args must be an array.`);
   }
   return argsInput.map(toJsonValue);
 }
@@ -822,7 +847,11 @@ function normalizeSetupAction(input, index) {
   if ((type === "window_call" || type === "window_call_until" || type === "assert_window_value" || type === "assert_window_number") && !path) {
     throw new Error(`target.setup_actions[${index}] ${type} requires path.`);
   }
-  const args = type === "window_call" || type === "window_call_until" ? normalizeSetupActionArgs(input, index) : void 0;
+  const script = stringFromOwn(input, "script", "code", "source", "body");
+  if (type === "window_eval" && !script) {
+    throw new Error(`target.setup_actions[${index}] window_eval requires script.`);
+  }
+  const args = type === "window_call" || type === "window_call_until" || type === "window_eval" ? normalizeSetupActionArgs(input, index) : void 0;
   const hasExpectedValue = hasOwn(input, "expected_value") || hasOwn(input, "expectedValue") || hasOwn(input, "expected") || hasOwn(input, "expect_value") || hasOwn(input, "expectValue") || hasOwn(input, "expect");
   if (type === "assert_window_value" && !hasExpectedValue) {
     throw new Error(`target.setup_actions[${index}] ${type} requires expected_value.`);
@@ -893,6 +922,7 @@ function normalizeSetupAction(input, index) {
     value,
     value_json: hasJsonValue ? toJsonValue(input.value_json ?? input.valueJson ?? input.json) : void 0,
     label: stringFromOwn(input, "label", "name", "screenshot_label", "screenshotLabel"),
+    script,
     path,
     args,
     expect_return: hasExpectedReturn ? toJsonValue(valueFromOwn(input, "expect_return", "expectReturn", "expected_return", "expectedReturn")) : void 0,
@@ -3844,6 +3874,23 @@ function profileSetupWindowCallReceipts(results) {
       return receipt;
     });
 }
+function profileSetupWindowEvalReceipts(results) {
+  return (results || [])
+    .filter((result) => result && profileSetupResultAction(result) === "window_eval")
+    .map((result) => {
+      const receipt = {
+        ordinal: result.ordinal ?? null,
+        ok: result.ok !== false,
+        script_length: result.script_length ?? null,
+        return_captured: result.return_captured ?? null,
+        return_stored_to: result.return_stored_to ?? null,
+        reason: result.reason || result.error || result.store_reason || null,
+      };
+      if (result.returned !== undefined) receipt.returned = result.returned;
+      if (result.expected_return !== undefined) receipt.expected_return = result.expected_return;
+      return receipt;
+    });
+}
 function sampleProfileSetupSummaryItems(items, limit) {
   if ((items || []).length <= limit) return items || [];
   const firstCount = Math.floor(limit / 2);
@@ -3896,6 +3943,10 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
       const windowCallStoredTotal = windowCallReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
       const windowCallCapturedTotal = windowCallReceipts.filter((result) => result.return_captured === true).length;
       const sampledWindowCallReceipts = sampleProfileSetupSummaryItems(windowCallReceipts, 8);
+      const windowEvalReceipts = profileSetupWindowEvalReceipts(results);
+      const windowEvalStoredTotal = windowEvalReceipts.filter((result) => typeof result.return_stored_to === "string" && result.return_stored_to.trim()).length;
+      const windowEvalCapturedTotal = windowEvalReceipts.filter((result) => result.return_captured === true).length;
+      const sampledWindowEvalReceipts = sampleProfileSetupSummaryItems(windowEvalReceipts, 8);
       const clickedItems = results
         .filter((result) => result && profileSetupResultAction(result) === "click" && result.ok !== false)
         .map((result) => {
@@ -3949,6 +4000,11 @@ function profileSetupSummary(viewports, actionCount, expectedActionCountsByViewp
         window_call_captured_total: windowCallCapturedTotal,
         window_call_truncated: windowCallReceipts.length > sampledWindowCallReceipts.length,
         window_call: sampledWindowCallReceipts,
+        window_eval_total: windowEvalReceipts.length,
+        window_eval_stored_total: windowEvalStoredTotal,
+        window_eval_captured_total: windowEvalCapturedTotal,
+        window_eval_truncated: windowEvalReceipts.length > sampledWindowEvalReceipts.length,
+        window_eval: sampledWindowEvalReceipts,
         clicked,
         text_samples: textSamples,
         failed: failed.map((result) => ({
@@ -4929,6 +4985,49 @@ async function setupCallWindowFunction(context, path, args, storeReturnTo, captu
     }
   }, { path, args, storeReturnTo, captureReturn });
 }
+async function setupEvaluateWindowScript(context, script, args, storeReturnTo, captureReturn) {
+  return await context.evaluate(async ({ script, args, storeReturnTo, captureReturn }) => {
+    const toJsonValue = (value) => {
+      if (value === null || value === undefined) return null;
+      if (typeof value === "string" || typeof value === "boolean") return value;
+      if (typeof value === "number") return Number.isFinite(value) ? value : null;
+      if (Array.isArray(value)) return value.map(toJsonValue);
+      if (typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, toJsonValue(child)]));
+      }
+      return String(value);
+    };
+    const storeWindowReturn = (storePath, value) => {
+      const pathParts = String(storePath || "").split(".").map((part) => part.trim()).filter(Boolean);
+      if (pathParts[0] === "window") pathParts.shift();
+      if (!pathParts.length) return { ok: false, reason: "missing_store_path" };
+      let target = window;
+      for (let index = 0; index < pathParts.length - 1; index += 1) {
+        const part = pathParts[index];
+        if (target[part] === null || typeof target[part] !== "object") target[part] = {};
+        target = target[part];
+      }
+      target[pathParts[pathParts.length - 1]] = value;
+      return { ok: true, path: pathParts.join(".") };
+    };
+    const body = String(script || "");
+    if (!body.trim()) return { ok: false, reason: "missing_script" };
+    try {
+      const run = new Function("args", "\"use strict\"; return (async () => {\\n" + body + "\\n})();");
+      const returned = await run(Array.isArray(args) ? args : []);
+      const jsonReturned = toJsonValue(returned);
+      const returnedForResult = captureReturn === false ? undefined : jsonReturned;
+      if (storeReturnTo) {
+        const stored = storeWindowReturn(storeReturnTo, jsonReturned);
+        if (!stored.ok) return { ok: false, reason: "return_store_failed", store_reason: stored.reason, returned: returnedForResult };
+        return { ok: true, returned: returnedForResult, return_stored_to: stored.path };
+      }
+      return { ok: true, returned: returnedForResult };
+    } catch (error) {
+      return { ok: false, reason: "script_threw", error: String(error && error.message ? error.message : error).slice(0, 1000) };
+    }
+  }, { script, args, storeReturnTo, captureReturn });
+}
 function setupFrameSelector(action) {
   return String(action?.frame_selector || action?.frameSelector || action?.iframe_selector || action?.iframeSelector || "").trim();
 }
@@ -5442,6 +5541,44 @@ async function executeSetupAction(action, ordinal, viewport) {
       }
       return { ...base, ...setupScopeEvidence(scope), ok: true, storage, reload: action.reload === true };
     }
+    if (type === "window_eval") {
+      const script = String(action.script || action.code || action.source || action.body || "");
+      const args = Array.isArray(action.args) ? action.args : [];
+      const storeReturnTo = String(action.store_return_to || action.storeReturnTo || action.save_return_to || action.saveReturnTo || action.assign_return_to || action.assignReturnTo || action.return_state_path || action.returnStatePath || "").trim();
+      if (!script.trim()) return { ...base, reason: "missing_script" };
+      const scope = await setupActionScope(action, timeout);
+      if (!scope.ok) return setupScopeFailure(base, scope);
+      const hasExpectation = setupHasOwn(action, "expect_return")
+        || setupHasOwn(action, "expectReturn")
+        || setupHasOwn(action, "expected_return")
+        || setupHasOwn(action, "expectedReturn");
+      const expected = setupHasOwn(action, "expect_return")
+        ? action.expect_return
+        : setupHasOwn(action, "expectReturn")
+          ? action.expectReturn
+        : setupHasOwn(action, "expected_return")
+          ? action.expected_return
+          : action.expectedReturn;
+      const captureReturn = action.capture_return === false || action.captureReturn === false || action.include_return === false || action.includeReturn === false || action.omit_return === true || action.omitReturn === true
+        ? hasExpectation
+        : true;
+      const result = await setupEvaluateWindowScript(scope.context, script, args, storeReturnTo, captureReturn);
+      const expectationMet = !hasExpectation || setupValuesEqual(result.returned, expected);
+      return {
+        ...base,
+        ...setupScopeEvidence(scope),
+        ok: Boolean(result.ok && expectationMet),
+        script_length: script.length,
+        arg_count: args.length,
+        returned: captureReturn ? setupJsonValue(result.returned) : undefined,
+        return_captured: captureReturn,
+        expected_return: hasExpectation ? setupJsonValue(expected) : undefined,
+        return_stored_to: result.return_stored_to || storeReturnTo || undefined,
+        reason: result.ok ? (expectationMet ? undefined : "unexpected_return_value") : result.reason,
+        store_reason: result.store_reason || undefined,
+        error: result.error || undefined,
+      };
+    }
     if (type === "window_call") {
       const path = String(action.path || action.function_path || action.functionPath || "");
       const args = Array.isArray(action.args) ? action.args : [];

package/dist/profile.d.cts

@@ -5,7 +5,7 @@ declare const RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION: "riddle-proof.profile-evide
 declare const RIDDLE_PROOF_PROFILE_RESULT_VERSION: "riddle-proof.profile-result.v1";
 declare const RIDDLE_PROOF_PROFILE_STATUSES: readonly ["passed", "product_regression", "proof_insufficient", "environment_blocked", "configuration_error", "needs_human_review"];
 declare const RIDDLE_PROOF_PROFILE_CHECK_TYPES: readonly ["route_loaded", "url_search_param_equals", "url_search_param_absent", "selector_visible", "selector_absent", "selector_count_at_least", "selector_count_equals", "selector_count_equal", "selector_count_eq", "dialog_count_equals", "dialog_accept_count_equals", "dialog_dismiss_count_equals", "selector_text_visible", "selector_text_absent", "selector_text_order", "frame_text_visible", "frame_url_equals", "frame_url_matches", "frame_no_horizontal_overflow", "text_visible", "text_absent", "http_status", "link_status", "artifact_link_status", "route_inventory", "no_horizontal_overflow", "no_mobile_horizontal_overflow", "no_fatal_console_errors", "no_console_warnings"];
-declare const RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES: readonly ["click", "drag", "press", "fill", "set_input_value", "assert_text_visible", "assert_text_absent", "assert_selector_count", "assert_window_value", "assert_window_number", "local_storage", "session_storage", "clear_storage", "clear_console", "dialog_response", "screenshot", "wait", "wait_for_selector", "wait_for_text", "window_call", "window_call_until"];
+declare const RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES: readonly ["click", "drag", "press", "fill", "set_input_value", "assert_text_visible", "assert_text_absent", "assert_selector_count", "assert_window_value", "assert_window_number", "local_storage", "session_storage", "clear_storage", "clear_console", "dialog_response", "screenshot", "wait", "wait_for_selector", "wait_for_text", "window_eval", "window_call", "window_call_until"];
 type RiddleProofProfileStatus = typeof RIDDLE_PROOF_PROFILE_STATUSES[number];
 type RiddleProofProfileCheckType = typeof RIDDLE_PROOF_PROFILE_CHECK_TYPES[number];
 type RiddleProofProfileSetupActionType = typeof RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES[number];
@@ -127,6 +127,7 @@ interface RiddleProofProfileSetupAction {
     value?: string;
     value_json?: JsonValue;
     label?: string;
+    script?: string;
     path?: string;
     args?: JsonValue[];
     expect_return?: JsonValue;

package/dist/profile.d.ts

@@ -5,7 +5,7 @@ declare const RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION: "riddle-proof.profile-evide
 declare const RIDDLE_PROOF_PROFILE_RESULT_VERSION: "riddle-proof.profile-result.v1";
 declare const RIDDLE_PROOF_PROFILE_STATUSES: readonly ["passed", "product_regression", "proof_insufficient", "environment_blocked", "configuration_error", "needs_human_review"];
 declare const RIDDLE_PROOF_PROFILE_CHECK_TYPES: readonly ["route_loaded", "url_search_param_equals", "url_search_param_absent", "selector_visible", "selector_absent", "selector_count_at_least", "selector_count_equals", "selector_count_equal", "selector_count_eq", "dialog_count_equals", "dialog_accept_count_equals", "dialog_dismiss_count_equals", "selector_text_visible", "selector_text_absent", "selector_text_order", "frame_text_visible", "frame_url_equals", "frame_url_matches", "frame_no_horizontal_overflow", "text_visible", "text_absent", "http_status", "link_status", "artifact_link_status", "route_inventory", "no_horizontal_overflow", "no_mobile_horizontal_overflow", "no_fatal_console_errors", "no_console_warnings"];
-declare const RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES: readonly ["click", "drag", "press", "fill", "set_input_value", "assert_text_visible", "assert_text_absent", "assert_selector_count", "assert_window_value", "assert_window_number", "local_storage", "session_storage", "clear_storage", "clear_console", "dialog_response", "screenshot", "wait", "wait_for_selector", "wait_for_text", "window_call", "window_call_until"];
+declare const RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES: readonly ["click", "drag", "press", "fill", "set_input_value", "assert_text_visible", "assert_text_absent", "assert_selector_count", "assert_window_value", "assert_window_number", "local_storage", "session_storage", "clear_storage", "clear_console", "dialog_response", "screenshot", "wait", "wait_for_selector", "wait_for_text", "window_eval", "window_call", "window_call_until"];
 type RiddleProofProfileStatus = typeof RIDDLE_PROOF_PROFILE_STATUSES[number];
 type RiddleProofProfileCheckType = typeof RIDDLE_PROOF_PROFILE_CHECK_TYPES[number];
 type RiddleProofProfileSetupActionType = typeof RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES[number];
@@ -127,6 +127,7 @@ interface RiddleProofProfileSetupAction {
     value?: string;
     value_json?: JsonValue;
     label?: string;
+    script?: string;
     path?: string;
     args?: JsonValue[];
     expect_return?: JsonValue;

package/dist/profile.js

@@ -23,7 +23,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-6VXZ6V5M.js";
+} from "./chunk-F46O7DP2.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.140",
+  "version": "0.7.141",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",