@riddledc/riddle-proof 0.8.24 → 0.8.26

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   runRiddleProof
-} from "./chunk-P2RN2NYR.js";
+} from "./chunk-DZYH67J2.js";
 import "./chunk-6F4PWJZI.js";
 import {
   RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION,
@@ -95,7 +95,7 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-2DW2LBUD.js";
+} from "./chunk-EMVMXVJV.js";
 import {
   RIDDLE_PROOF_RUN_STATE_VERSION,
   appendRunEvent,
@@ -112,7 +112,7 @@ import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
 } from "./chunk-FMOYUYH2.js";
-import "./chunk-FU73I4V3.js";
+import "./chunk-RF72NWHM.js";
 import {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
   RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,

package/dist/proof-run-core.cjs

@@ -289,6 +289,36 @@ function normalizeCaptureScript(value) {
   const script = normalizeOptionalString(value) || "";
   return script ? guardProofEvidenceGlobalAssignments(script) : "";
 }
+function compactCaptureScriptForHeuristics(script) {
+  return script.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:])\/\/.*$/gm, "$1 ").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function interactionCaptureScriptLooksPassive(script) {
+  const text = compactCaptureScriptForHeuristics(script);
+  if (!text) return true;
+  const actionPatterns = [
+    /\bpage\.(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?|goto|reload)\s*\(/,
+    /\blocator\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?)\s*\(/,
+    /\b(getby(role|text|label|testid|placeholder|title)|getbyalttext)\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption)\s*\(/,
+    /\bkeyboard\s*\.\s*(press|type|inserttext)\s*\(/,
+    /\bmouse\s*\.\s*(click|dblclick|down|up|move)\s*\(/,
+    /\btouchscreen\s*\.\s*tap\s*\(/
+  ];
+  if (actionPatterns.some((pattern) => pattern.test(text))) return false;
+  const evidencePatterns = [
+    /\breturn\s+[{[]/,
+    /\breturn\s+\w+/,
+    /__riddleproofevidence/,
+    /\bproof_evidence\b/,
+    /\brouteexpectationsource\b/,
+    /\bexpectedurl\b/,
+    /\bassertions?\b/
+  ];
+  return !evidencePatterns.some((pattern) => pattern.test(text));
+}
+function setStructuredInteractionCaptureFailure(state, summary) {
+  const existing = typeof state.structured_interaction_capture_failure_summary === "string" ? state.structured_interaction_capture_failure_summary.trim() : "";
+  if (!existing) state.structured_interaction_capture_failure_summary = summary;
+}
 function appendProofSummaryLine(state, line) {
   const text = String(line || "").trim();
   if (!text) return;
@@ -538,6 +568,9 @@ function proofAssessmentHardBlockersForState(state = {}) {
   }
   add(state?.structured_interaction_capture_failure_summary);
   add(state?.structured_interaction_failure_summary);
+  if (isInteractionVerificationMode(normalizedVerificationMode(state)) && !stateHasProofEvidence(state)) {
+    add("interaction proof evidence is required before ready_to_ship; proof_evidence_present=false");
+  }
   const mergeRecommendation = String(state?.merge_recommendation || "").trim();
   if (mergeRecommendation === "do-not-merge" && blockers.length) {
     add("merge_recommendation=do-not-merge because the proof bundle contains hard blockers.");
@@ -573,7 +606,22 @@ function stateHasAfterEvidence(state = {}) {
   const observation = objectValue(after.observation);
   const supporting = objectValue(after.supporting_artifacts);
   return Boolean(
-    observation.valid === true && (supporting.has_structured_payload === true || supporting.proof_evidence_present === true || observation.telemetry_ready === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0)
+    observation.valid === true && (supporting.has_structured_payload === true || stateHasProofEvidence(state) || observation.telemetry_ready === true)
+  );
+}
+function stateHasProofEvidence(state = {}) {
+  if (state?.proof_evidence_present === true) return true;
+  if (state?.proof_evidence !== void 0 && state?.proof_evidence !== null) {
+    if (typeof state.proof_evidence !== "object") return true;
+    if (Object.keys(objectValue(state.proof_evidence)).length > 0) return true;
+  }
+  const bundle = objectValue(state?.evidence_bundle);
+  const after = objectValue(bundle.after);
+  const supporting = objectValue(after.supporting_artifacts);
+  const request = objectValue(state?.proof_assessment_request);
+  const structuredEvidence = objectValue(request.structured_evidence);
+  return Boolean(
+    supporting.proof_evidence_present === true || structuredEvidence.proof_evidence_present === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0
   );
 }
 function validateShipGate(state = {}) {
@@ -951,6 +999,11 @@ function mergeStateFromParams(statePath, params) {
       state.supervisor_author_packet = parsed;
       if (typeof parsed?.proof_plan === "string") state.proof_plan = normalizeOptionalString(parsed.proof_plan) || "";
       if (typeof parsed?.capture_script === "string") state.capture_script = normalizeCaptureScript(parsed.capture_script);
+      if (isInteractionVerificationMode(state.verification_mode) && interactionCaptureScriptLooksPassive(state.capture_script || "")) {
+        const warning = "Interaction proof capture script appears passive: it does not perform a browser interaction or return structured proof evidence.";
+        appendStateWarning(state, "author_warnings", warning);
+        setStructuredInteractionCaptureFailure(state, warning);
+      }
       if (parsed?.baseline_understanding_used && typeof parsed.baseline_understanding_used === "object") {
         state.author_baseline_understanding_used = parsed.baseline_understanding_used;
       }

package/dist/proof-run-core.js

@@ -27,7 +27,7 @@ import {
   visualDeltaShipGateReason,
   workflowFile,
   writeState
-} from "./chunk-FU73I4V3.js";
+} from "./chunk-RF72NWHM.js";
 import "./chunk-MLKGABMK.js";
 export {
   BUNDLED_RIDDLE_PROOF_DIR,

package/dist/{proof-run-engine-Vh9uESqh.d.ts → proof-run-engine-By7oLsF-.d.ts}

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup";
     state_path: string;
     stage: any;
     summary: string;

package/dist/{proof-run-engine-DI1qBmMf.d.cts → proof-run-engine-D80hVFMf.d.cts}

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup";
     state_path: string;
     stage: any;
     summary: string;

package/dist/proof-run-engine.cjs

@@ -268,6 +268,36 @@ function normalizeCaptureScript(value) {
   const script = normalizeOptionalString(value) || "";
   return script ? guardProofEvidenceGlobalAssignments(script) : "";
 }
+function compactCaptureScriptForHeuristics(script) {
+  return script.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:])\/\/.*$/gm, "$1 ").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function interactionCaptureScriptLooksPassive(script) {
+  const text = compactCaptureScriptForHeuristics(script);
+  if (!text) return true;
+  const actionPatterns = [
+    /\bpage\.(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?|goto|reload)\s*\(/,
+    /\blocator\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?)\s*\(/,
+    /\b(getby(role|text|label|testid|placeholder|title)|getbyalttext)\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption)\s*\(/,
+    /\bkeyboard\s*\.\s*(press|type|inserttext)\s*\(/,
+    /\bmouse\s*\.\s*(click|dblclick|down|up|move)\s*\(/,
+    /\btouchscreen\s*\.\s*tap\s*\(/
+  ];
+  if (actionPatterns.some((pattern) => pattern.test(text))) return false;
+  const evidencePatterns = [
+    /\breturn\s+[{[]/,
+    /\breturn\s+\w+/,
+    /__riddleproofevidence/,
+    /\bproof_evidence\b/,
+    /\brouteexpectationsource\b/,
+    /\bexpectedurl\b/,
+    /\bassertions?\b/
+  ];
+  return !evidencePatterns.some((pattern) => pattern.test(text));
+}
+function setStructuredInteractionCaptureFailure(state, summary) {
+  const existing = typeof state.structured_interaction_capture_failure_summary === "string" ? state.structured_interaction_capture_failure_summary.trim() : "";
+  if (!existing) state.structured_interaction_capture_failure_summary = summary;
+}
 function appendProofSummaryLine(state, line) {
   const text = String(line || "").trim();
   if (!text) return;
@@ -517,6 +547,9 @@ function proofAssessmentHardBlockersForState(state = {}) {
   }
   add(state?.structured_interaction_capture_failure_summary);
   add(state?.structured_interaction_failure_summary);
+  if (isInteractionVerificationMode(normalizedVerificationMode(state)) && !stateHasProofEvidence(state)) {
+    add("interaction proof evidence is required before ready_to_ship; proof_evidence_present=false");
+  }
   const mergeRecommendation = String(state?.merge_recommendation || "").trim();
   if (mergeRecommendation === "do-not-merge" && blockers.length) {
     add("merge_recommendation=do-not-merge because the proof bundle contains hard blockers.");
@@ -552,7 +585,22 @@ function stateHasAfterEvidence(state = {}) {
   const observation = objectValue(after.observation);
   const supporting = objectValue(after.supporting_artifacts);
   return Boolean(
-    observation.valid === true && (supporting.has_structured_payload === true || supporting.proof_evidence_present === true || observation.telemetry_ready === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0)
+    observation.valid === true && (supporting.has_structured_payload === true || stateHasProofEvidence(state) || observation.telemetry_ready === true)
+  );
+}
+function stateHasProofEvidence(state = {}) {
+  if (state?.proof_evidence_present === true) return true;
+  if (state?.proof_evidence !== void 0 && state?.proof_evidence !== null) {
+    if (typeof state.proof_evidence !== "object") return true;
+    if (Object.keys(objectValue(state.proof_evidence)).length > 0) return true;
+  }
+  const bundle = objectValue(state?.evidence_bundle);
+  const after = objectValue(bundle.after);
+  const supporting = objectValue(after.supporting_artifacts);
+  const request = objectValue(state?.proof_assessment_request);
+  const structuredEvidence = objectValue(request.structured_evidence);
+  return Boolean(
+    supporting.proof_evidence_present === true || structuredEvidence.proof_evidence_present === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0
   );
 }
 function validateShipGate(state = {}) {
@@ -930,6 +978,11 @@ function mergeStateFromParams(statePath, params) {
       state.supervisor_author_packet = parsed;
       if (typeof parsed?.proof_plan === "string") state.proof_plan = normalizeOptionalString(parsed.proof_plan) || "";
       if (typeof parsed?.capture_script === "string") state.capture_script = normalizeCaptureScript(parsed.capture_script);
+      if (isInteractionVerificationMode(state.verification_mode) && interactionCaptureScriptLooksPassive(state.capture_script || "")) {
+        const warning = "Interaction proof capture script appears passive: it does not perform a browser interaction or return structured proof evidence.";
+        appendStateWarning(state, "author_warnings", warning);
+        setStructuredInteractionCaptureFailure(state, warning);
+      }
       if (parsed?.baseline_understanding_used && typeof parsed.baseline_understanding_used === "object") {
         state.author_baseline_understanding_used = parsed.baseline_understanding_used;
       }

package/dist/proof-run-engine.d.cts

@@ -1,2 +1,2 @@
 import './proof-run-core-C8FDUhle.cjs';
-export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-DI1qBmMf.cjs';
+export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-D80hVFMf.cjs';

package/dist/proof-run-engine.d.ts

@@ -1,2 +1,2 @@
 import './proof-run-core-C8FDUhle.js';
-export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-Vh9uESqh.js';
+export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-By7oLsF-.js';

package/dist/proof-run-engine.js

@@ -1,8 +1,8 @@
 import {
   createRiddleProofEngine,
   executeWorkflow
-} from "./chunk-KS3N5APP.js";
-import "./chunk-FU73I4V3.js";
+} from "./chunk-EGOVHMBQ.js";
+import "./chunk-RF72NWHM.js";
 import "./chunk-MLKGABMK.js";
 export {
   createRiddleProofEngine,

package/dist/runner.js

@@ -1,9 +1,9 @@
 import {
   runRiddleProof
-} from "./chunk-P2RN2NYR.js";
+} from "./chunk-DZYH67J2.js";
 import "./chunk-YZUVEJ5B.js";
 import "./chunk-FMOYUYH2.js";
-import "./chunk-FU73I4V3.js";
+import "./chunk-RF72NWHM.js";
 import "./chunk-4FOHZ7JG.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.8.24",
+  "version": "0.8.26",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",