@riddledc/riddle-proof 0.8.25 → 0.8.27

package/dist/adapters/codex-exec-agent.cjs

@@ -57,7 +57,20 @@ var REFINED_INPUTS_SCHEMA = {
   properties: {
     server_path: { type: ["string", "null"] },
     wait_for_selector: { type: ["string", "null"] },
-    reference: { enum: ["before", "prod", "both", null] }
+    reference: { enum: ["before", "prod", "both", null] },
+    expected_start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] }
+  }
+};
+var INTERACTION_CONTRACT_SCHEMA = {
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] },
+    expected_url: { type: ["string", "null"] },
+    action: { type: ["string", "null"] },
+    assertions: { type: "array", items: { type: "string" } }
   }
 };
 var BASELINE_UNDERSTANDING_SCHEMA = {
@@ -127,6 +140,8 @@ var AUTHOR_SCHEMA = {
     capture_script: { type: "string" },
     baseline_understanding_used: BASELINE_UNDERSTANDING_SCHEMA,
     refined_inputs: REFINED_INPUTS_SCHEMA,
+    expected_terminal_path: { type: ["string", "null"] },
+    interaction_contract: INTERACTION_CONTRACT_SCHEMA,
     rationale: { type: "array", items: { type: "string" } },
     confidence: { type: "string", enum: ["low", "medium", "high"] },
     summary: { type: "string" }
@@ -734,7 +749,10 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "Do not leave this authoring stage pending for external investigation. Keep any repo inspection brief, do not modify files, and return the JSON proof packet from the available state.",
           "Choose the evidence modality from verification_mode and success_criteria: screenshots for visual/UI proof, interactions plus screenshots for interaction proof, structured metrics/logs/JSON/audio analysis for non-visual proof.",
           "For playable/gameplay proof, treat screenshots as supporting artifacts only: start the game, send keyboard or pointer input, measure state before/after, measure non-HUD canvas/playfield pixel deltas across time, and return playability evidence with version riddle-proof.playability.v1.",
-          "For interaction proof, return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text. Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
+          "For interaction proof, author the browser action explicitly in capture_script; a wait-only script is invalid. Return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text.",
+          "For route-changing interaction proof, set refined_inputs.expected_start_path and refined_inputs.expected_terminal_path, and include interaction_contract with start_path, expected_terminal_path, action, and assertions. Keep refined_inputs.server_path on the start route; do not replace it with the terminal route.",
+          "If the original request or success_criteria names an expected terminal URL/path, preserve it exactly in refined_inputs.expected_terminal_path and in interaction_contract.expected_terminal_path, including query and hash.",
+          "Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
           "For structured proof, collect meaningful measurements inside page.evaluate, assign them to an evidence variable, and return that object from capture_script. Screenshots are optional supporting context for data/audio/log/metric/custom modes.",
           "Do not assign globalThis.__riddleProofEvidence, window.__riddleProofEvidence, or self.__riddleProofEvidence in the worker context. Avoid global evidence assignment unless it is inside page.evaluate for compatibility with older packets.",
           "Do not call Playwright page.* APIs inside page.evaluate; page.evaluate runs in the browser page, while page.waitForFunction, page.waitForSelector, page.click, and saveScreenshot belong in the outer capture script.",
@@ -748,7 +766,7 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "For visual/UI proof, include saveScreenshot('after-proof') exactly once.",
           "Avoid generic proof language. The packet should be specific enough that verify can tell whether the requested change actually happened.",
           "Echo the baseline understanding you used in baseline_understanding_used so later stages can detect drift.",
-          "Use refined_inputs for server_path, wait_for_selector, or reference when useful; use null values when no refinement is needed."
+          "Use refined_inputs for server_path, wait_for_selector, reference, expected_start_path, and expected_terminal_path when useful; use null values when no refinement is needed."
         ].join("\n")
       });
       return payloadOrBlocker(raw, context.checkpoint);

package/dist/adapters/codex-exec-agent.js

@@ -3,7 +3,7 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-EEIYUZXE.js";
+} from "../chunk-4PPJKW3Z.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/adapters/codex.cjs

@@ -57,7 +57,20 @@ var REFINED_INPUTS_SCHEMA = {
   properties: {
     server_path: { type: ["string", "null"] },
     wait_for_selector: { type: ["string", "null"] },
-    reference: { enum: ["before", "prod", "both", null] }
+    reference: { enum: ["before", "prod", "both", null] },
+    expected_start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] }
+  }
+};
+var INTERACTION_CONTRACT_SCHEMA = {
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] },
+    expected_url: { type: ["string", "null"] },
+    action: { type: ["string", "null"] },
+    assertions: { type: "array", items: { type: "string" } }
   }
 };
 var BASELINE_UNDERSTANDING_SCHEMA = {
@@ -127,6 +140,8 @@ var AUTHOR_SCHEMA = {
     capture_script: { type: "string" },
     baseline_understanding_used: BASELINE_UNDERSTANDING_SCHEMA,
     refined_inputs: REFINED_INPUTS_SCHEMA,
+    expected_terminal_path: { type: ["string", "null"] },
+    interaction_contract: INTERACTION_CONTRACT_SCHEMA,
     rationale: { type: "array", items: { type: "string" } },
     confidence: { type: "string", enum: ["low", "medium", "high"] },
     summary: { type: "string" }
@@ -734,7 +749,10 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "Do not leave this authoring stage pending for external investigation. Keep any repo inspection brief, do not modify files, and return the JSON proof packet from the available state.",
           "Choose the evidence modality from verification_mode and success_criteria: screenshots for visual/UI proof, interactions plus screenshots for interaction proof, structured metrics/logs/JSON/audio analysis for non-visual proof.",
           "For playable/gameplay proof, treat screenshots as supporting artifacts only: start the game, send keyboard or pointer input, measure state before/after, measure non-HUD canvas/playfield pixel deltas across time, and return playability evidence with version riddle-proof.playability.v1.",
-          "For interaction proof, return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text. Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
+          "For interaction proof, author the browser action explicitly in capture_script; a wait-only script is invalid. Return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text.",
+          "For route-changing interaction proof, set refined_inputs.expected_start_path and refined_inputs.expected_terminal_path, and include interaction_contract with start_path, expected_terminal_path, action, and assertions. Keep refined_inputs.server_path on the start route; do not replace it with the terminal route.",
+          "If the original request or success_criteria names an expected terminal URL/path, preserve it exactly in refined_inputs.expected_terminal_path and in interaction_contract.expected_terminal_path, including query and hash.",
+          "Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
           "For structured proof, collect meaningful measurements inside page.evaluate, assign them to an evidence variable, and return that object from capture_script. Screenshots are optional supporting context for data/audio/log/metric/custom modes.",
           "Do not assign globalThis.__riddleProofEvidence, window.__riddleProofEvidence, or self.__riddleProofEvidence in the worker context. Avoid global evidence assignment unless it is inside page.evaluate for compatibility with older packets.",
           "Do not call Playwright page.* APIs inside page.evaluate; page.evaluate runs in the browser page, while page.waitForFunction, page.waitForSelector, page.click, and saveScreenshot belong in the outer capture script.",
@@ -748,7 +766,7 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "For visual/UI proof, include saveScreenshot('after-proof') exactly once.",
           "Avoid generic proof language. The packet should be specific enough that verify can tell whether the requested change actually happened.",
           "Echo the baseline understanding you used in baseline_understanding_used so later stages can detect drift.",
-          "Use refined_inputs for server_path, wait_for_selector, or reference when useful; use null values when no refinement is needed."
+          "Use refined_inputs for server_path, wait_for_selector, reference, expected_start_path, and expected_terminal_path when useful; use null values when no refinement is needed."
         ].join("\n")
       });
       return payloadOrBlocker(raw, context.checkpoint);

package/dist/adapters/codex.js

@@ -3,7 +3,7 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-EEIYUZXE.js";
+} from "../chunk-4PPJKW3Z.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/adapters/local-agent.cjs

@@ -57,7 +57,20 @@ var REFINED_INPUTS_SCHEMA = {
   properties: {
     server_path: { type: ["string", "null"] },
     wait_for_selector: { type: ["string", "null"] },
-    reference: { enum: ["before", "prod", "both", null] }
+    reference: { enum: ["before", "prod", "both", null] },
+    expected_start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] }
+  }
+};
+var INTERACTION_CONTRACT_SCHEMA = {
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    start_path: { type: ["string", "null"] },
+    expected_terminal_path: { type: ["string", "null"] },
+    expected_url: { type: ["string", "null"] },
+    action: { type: ["string", "null"] },
+    assertions: { type: "array", items: { type: "string" } }
   }
 };
 var BASELINE_UNDERSTANDING_SCHEMA = {
@@ -127,6 +140,8 @@ var AUTHOR_SCHEMA = {
     capture_script: { type: "string" },
     baseline_understanding_used: BASELINE_UNDERSTANDING_SCHEMA,
     refined_inputs: REFINED_INPUTS_SCHEMA,
+    expected_terminal_path: { type: ["string", "null"] },
+    interaction_contract: INTERACTION_CONTRACT_SCHEMA,
     rationale: { type: "array", items: { type: "string" } },
     confidence: { type: "string", enum: ["low", "medium", "high"] },
     summary: { type: "string" }
@@ -734,7 +749,10 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "Do not leave this authoring stage pending for external investigation. Keep any repo inspection brief, do not modify files, and return the JSON proof packet from the available state.",
           "Choose the evidence modality from verification_mode and success_criteria: screenshots for visual/UI proof, interactions plus screenshots for interaction proof, structured metrics/logs/JSON/audio analysis for non-visual proof.",
           "For playable/gameplay proof, treat screenshots as supporting artifacts only: start the game, send keyboard or pointer input, measure state before/after, measure non-HUD canvas/playfield pixel deltas across time, and return playability evidence with version riddle-proof.playability.v1.",
-          "For interaction proof, return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text. Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
+          "For interaction proof, author the browser action explicitly in capture_script; a wait-only script is invalid. Return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text.",
+          "For route-changing interaction proof, set refined_inputs.expected_start_path and refined_inputs.expected_terminal_path, and include interaction_contract with start_path, expected_terminal_path, action, and assertions. Keep refined_inputs.server_path on the start route; do not replace it with the terminal route.",
+          "If the original request or success_criteria names an expected terminal URL/path, preserve it exactly in refined_inputs.expected_terminal_path and in interaction_contract.expected_terminal_path, including query and hash.",
+          "Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",
           "For structured proof, collect meaningful measurements inside page.evaluate, assign them to an evidence variable, and return that object from capture_script. Screenshots are optional supporting context for data/audio/log/metric/custom modes.",
           "Do not assign globalThis.__riddleProofEvidence, window.__riddleProofEvidence, or self.__riddleProofEvidence in the worker context. Avoid global evidence assignment unless it is inside page.evaluate for compatibility with older packets.",
           "Do not call Playwright page.* APIs inside page.evaluate; page.evaluate runs in the browser page, while page.waitForFunction, page.waitForSelector, page.click, and saveScreenshot belong in the outer capture script.",
@@ -748,7 +766,7 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "For visual/UI proof, include saveScreenshot('after-proof') exactly once.",
           "Avoid generic proof language. The packet should be specific enough that verify can tell whether the requested change actually happened.",
           "Echo the baseline understanding you used in baseline_understanding_used so later stages can detect drift.",
-          "Use refined_inputs for server_path, wait_for_selector, or reference when useful; use null values when no refinement is needed."
+          "Use refined_inputs for server_path, wait_for_selector, reference, expected_start_path, and expected_terminal_path when useful; use null values when no refinement is needed."
         ].join("\n")
       });
       return payloadOrBlocker(raw, context.checkpoint);

package/dist/adapters/local-agent.js

@@ -3,7 +3,7 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-EEIYUZXE.js";
+} from "../chunk-4PPJKW3Z.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/adapters/openclaw.js

@@ -3,10 +3,10 @@ import {
   parseOpenClawAssertions,
   parseOpenClawJsonObjectOrArray,
   toRiddleProofRunParams
-} from "../chunk-RBWSCU6V.js";
-import "../chunk-YZUVEJ5B.js";
-import "../chunk-FMOYUYH2.js";
-import "../chunk-4FOHZ7JG.js";
+} from "../chunk-AYMHHRJZ.js";
+import "../chunk-ZQWVXQKJ.js";
+import "../chunk-RDPG554T.js";
+import "../chunk-OILKSY5J.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/engine-harness.cjs

@@ -190,6 +190,30 @@ function normalizeRoutePath(value) {
     return `${pathname}${query}${hash}`;
   }
 }
+function trimRouteCandidate(value) {
+  return value.trim().replace(/[),.;\]}]+$/g, "");
+}
+function expectedTerminalRouteFromText(value) {
+  const text = typeof value === "string" ? value.trim() : "";
+  if (!text) return "";
+  const routePattern = "(https?:\\/\\/[^\\s\"'<>`]+|\\/[^\\s\"'<>`]+)";
+  const patterns = [
+    new RegExp(`\\bexpected\\s+(?:terminal\\s+|final\\s+|after\\s+)?(?:url|route|path)\\s*(?:is|=|:)\\s*${routePattern}`, "i"),
+    new RegExp(`\\b(?:terminal|final|after)\\s+(?:url|route|path)\\s*(?:is|=|:)\\s*${routePattern}`, "i"),
+    new RegExp(`\\b(?:ends|end|ending|lands|land|landing)\\s+(?:at|on)\\s*${routePattern}`, "i")
+  ];
+  for (const pattern of patterns) {
+    const match = text.match(pattern);
+    if (!match) continue;
+    const candidate = trimRouteCandidate(match[1] || "");
+    const normalized = normalizeRoutePath(candidate);
+    if (normalized) return normalized;
+  }
+  return "";
+}
+function requestedExpectedTerminalRouteForState(state) {
+  return expectedTerminalRouteFromText(state.success_criteria) || expectedTerminalRouteFromText(state.change_request) || expectedTerminalRouteFromText(state.context) || expectedTerminalRouteFromText(state.assertions_json);
+}
 function isInteractionVerificationMode(value) {
   return INTERACTION_VERIFICATION_MODES.has(typeof value === "string" ? value.trim().toLowerCase() : "");
 }
@@ -202,6 +226,25 @@ function appendStateWarning(state, key, warning) {
   const existing = Array.isArray(state[key]) ? state[key].filter((item) => typeof item === "string") : [];
   if (!existing.includes(warning)) state[key] = [...existing, warning];
 }
+function applyRequestedInteractionRouteContract(state) {
+  if (!isInteractionVerificationMode(state.verification_mode)) return;
+  const requestedTerminal = requestedExpectedTerminalRouteForState(state);
+  if (!requestedTerminal) return;
+  state.requested_expected_terminal_path = requestedTerminal;
+  if (!stringRecordValue(state, "expected_terminal_path")) {
+    state.expected_terminal_path = requestedTerminal;
+  }
+  const startPath = normalizeRoutePath(state.server_path) || normalizeRoutePath(state.expected_start_path) || "/";
+  if (!stringRecordValue(state, "expected_start_path")) {
+    state.expected_start_path = startPath;
+  }
+  const existingContract = state.interaction_contract && typeof state.interaction_contract === "object" ? state.interaction_contract : {};
+  state.interaction_contract = {
+    ...existingContract,
+    start_path: stringRecordValue(existingContract, "start_path") || startPath,
+    expected_terminal_path: stringRecordValue(existingContract, "expected_terminal_path") || requestedTerminal
+  };
+}
 function interactionStartPathForAuthorPacket(state, parsed, refined) {
   return normalizeRoutePath(
     stringRecordValue(state, "expected_start_path") || stringRecordValue(refined, "expected_start_path") || stringRecordValue(parsed.interaction_contract, "start_path") || stringRecordValue(parsed.proof_contract, "start_path") || stringRecordValue(state, "server_path") || "/"
@@ -244,6 +287,36 @@ function normalizeCaptureScript(value) {
   const script = normalizeOptionalString(value) || "";
   return script ? guardProofEvidenceGlobalAssignments(script) : "";
 }
+function compactCaptureScriptForHeuristics(script) {
+  return script.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:])\/\/.*$/gm, "$1 ").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function interactionCaptureScriptLooksPassive(script) {
+  const text = compactCaptureScriptForHeuristics(script);
+  if (!text) return true;
+  const actionPatterns = [
+    /\bpage\.(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?|goto|reload)\s*\(/,
+    /\blocator\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?)\s*\(/,
+    /\b(getby(role|text|label|testid|placeholder|title)|getbyalttext)\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption)\s*\(/,
+    /\bkeyboard\s*\.\s*(press|type|inserttext)\s*\(/,
+    /\bmouse\s*\.\s*(click|dblclick|down|up|move)\s*\(/,
+    /\btouchscreen\s*\.\s*tap\s*\(/
+  ];
+  if (actionPatterns.some((pattern) => pattern.test(text))) return false;
+  const evidencePatterns = [
+    /\breturn\s+[{[]/,
+    /\breturn\s+\w+/,
+    /__riddleproofevidence/,
+    /\bproof_evidence\b/,
+    /\brouteexpectationsource\b/,
+    /\bexpectedurl\b/,
+    /\bassertions?\b/
+  ];
+  return !evidencePatterns.some((pattern) => pattern.test(text));
+}
+function setStructuredInteractionCaptureFailure(state, summary) {
+  const existing = typeof state.structured_interaction_capture_failure_summary === "string" ? state.structured_interaction_capture_failure_summary.trim() : "";
+  if (!existing) state.structured_interaction_capture_failure_summary = summary;
+}
 function appendProofSummaryLine(state, line) {
   const text = String(line || "").trim();
   if (!text) return;
@@ -484,6 +557,9 @@ function proofAssessmentHardBlockersForState(state = {}) {
   }
   add(state?.structured_interaction_capture_failure_summary);
   add(state?.structured_interaction_failure_summary);
+  if (isInteractionVerificationMode(normalizedVerificationMode(state)) && !stateHasProofEvidence(state)) {
+    add("interaction proof evidence is required before ready_to_ship; proof_evidence_present=false");
+  }
   const mergeRecommendation = String(state?.merge_recommendation || "").trim();
   if (mergeRecommendation === "do-not-merge" && blockers.length) {
     add("merge_recommendation=do-not-merge because the proof bundle contains hard blockers.");
@@ -519,7 +595,22 @@ function stateHasAfterEvidence(state = {}) {
   const observation = objectValue(after.observation);
   const supporting = objectValue(after.supporting_artifacts);
   return Boolean(
-    observation.valid === true && (supporting.has_structured_payload === true || supporting.proof_evidence_present === true || observation.telemetry_ready === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0)
+    observation.valid === true && (supporting.has_structured_payload === true || stateHasProofEvidence(state) || observation.telemetry_ready === true)
+  );
+}
+function stateHasProofEvidence(state = {}) {
+  if (state?.proof_evidence_present === true) return true;
+  if (state?.proof_evidence !== void 0 && state?.proof_evidence !== null) {
+    if (typeof state.proof_evidence !== "object") return true;
+    if (Object.keys(objectValue(state.proof_evidence)).length > 0) return true;
+  }
+  const bundle = objectValue(state?.evidence_bundle);
+  const after = objectValue(bundle.after);
+  const supporting = objectValue(after.supporting_artifacts);
+  const request = objectValue(state?.proof_assessment_request);
+  const structuredEvidence = objectValue(request.structured_evidence);
+  return Boolean(
+    supporting.proof_evidence_present === true || structuredEvidence.proof_evidence_present === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0
   );
 }
 function validateShipGate(state = {}) {
@@ -689,6 +780,7 @@ function mergeStateFromParams(statePath, params) {
   if (params.use_auth !== void 0) state.use_auth = params.use_auth ? "true" : "";
   if (params.leave_draft !== void 0) state.leave_draft = params.leave_draft ? "true" : "";
   if (params.advance_stage !== void 0) state.last_requested_advance_stage = params.advance_stage;
+  applyRequestedInteractionRouteContract(state);
   if (params.recon_assessment_json !== void 0) {
     const raw = normalizeOptionalString(params.recon_assessment_json) || "";
     if (!raw) {
@@ -725,6 +817,11 @@ function mergeStateFromParams(statePath, params) {
       state.supervisor_author_packet = parsed;
       if (typeof parsed?.proof_plan === "string") state.proof_plan = normalizeOptionalString(parsed.proof_plan) || "";
       if (typeof parsed?.capture_script === "string") state.capture_script = normalizeCaptureScript(parsed.capture_script);
+      if (isInteractionVerificationMode(state.verification_mode) && interactionCaptureScriptLooksPassive(state.capture_script || "")) {
+        const warning = "Interaction proof capture script appears passive: it does not perform a browser interaction or return structured proof evidence.";
+        appendStateWarning(state, "author_warnings", warning);
+        setStructuredInteractionCaptureFailure(state, warning);
+      }
       if (parsed?.baseline_understanding_used && typeof parsed.baseline_understanding_used === "object") {
         state.author_baseline_understanding_used = parsed.baseline_understanding_used;
       }
@@ -3447,7 +3544,7 @@ function responseSchemaForAuthorPacket() {
       summary: { type: "string" },
       payload: {
         type: "object",
-        description: "For decision=author_packet, provide the proof packet itself or {author_packet:{...}} with proof_plan, capture_script, and refined_inputs.expected_terminal_path when the proof changes route, query, or hash."
+        description: "For decision=author_packet, provide the proof packet itself or {author_packet:{...}} with proof_plan, capture_script, refined_inputs.expected_terminal_path, and interaction_contract when the proof changes route, query, or hash."
       },
       reasons: { type: "array", items: { type: "string" } },
       continue_with_stage: { type: "string", enum: ["author", "recon"] },
@@ -3758,6 +3855,10 @@ function buildAuthorCheckpointPacket(input) {
       reference: input.request.reference || fullState.reference,
       server_path: fullState.server_path,
       wait_for_selector: fullState.wait_for_selector,
+      expected_start_path: fullState.expected_start_path,
+      expected_terminal_path: fullState.expected_terminal_path,
+      requested_expected_terminal_path: fullState.requested_expected_terminal_path,
+      interaction_contract: jsonCloneRecord(fullState.interaction_contract),
       route_expectation: jsonCloneRecord(fullState.route_expectation),
       author_summary: fullState.author_summary,
       author_request: jsonCloneRecord(authorRequest),

package/dist/advanced/engine-harness.js

@@ -2,11 +2,11 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "../chunk-2DW2LBUD.js";
-import "../chunk-YZUVEJ5B.js";
-import "../chunk-FMOYUYH2.js";
-import "../chunk-FU73I4V3.js";
-import "../chunk-4FOHZ7JG.js";
+} from "../chunk-AM3K5FPW.js";
+import "../chunk-ZQWVXQKJ.js";
+import "../chunk-RDPG554T.js";
+import "../chunk-K6HZUSHH.js";
+import "../chunk-OILKSY5J.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/index.cjs

@@ -221,6 +221,30 @@ function normalizeRoutePath(value) {
     return `${pathname}${query}${hash}`;
   }
 }
+function trimRouteCandidate(value) {
+  return value.trim().replace(/[),.;\]}]+$/g, "");
+}
+function expectedTerminalRouteFromText(value) {
+  const text = typeof value === "string" ? value.trim() : "";
+  if (!text) return "";
+  const routePattern = "(https?:\\/\\/[^\\s\"'<>`]+|\\/[^\\s\"'<>`]+)";
+  const patterns = [
+    new RegExp(`\\bexpected\\s+(?:terminal\\s+|final\\s+|after\\s+)?(?:url|route|path)\\s*(?:is|=|:)\\s*${routePattern}`, "i"),
+    new RegExp(`\\b(?:terminal|final|after)\\s+(?:url|route|path)\\s*(?:is|=|:)\\s*${routePattern}`, "i"),
+    new RegExp(`\\b(?:ends|end|ending|lands|land|landing)\\s+(?:at|on)\\s*${routePattern}`, "i")
+  ];
+  for (const pattern of patterns) {
+    const match = text.match(pattern);
+    if (!match) continue;
+    const candidate = trimRouteCandidate(match[1] || "");
+    const normalized = normalizeRoutePath(candidate);
+    if (normalized) return normalized;
+  }
+  return "";
+}
+function requestedExpectedTerminalRouteForState(state) {
+  return expectedTerminalRouteFromText(state.success_criteria) || expectedTerminalRouteFromText(state.change_request) || expectedTerminalRouteFromText(state.context) || expectedTerminalRouteFromText(state.assertions_json);
+}
 function isInteractionVerificationMode(value) {
   return INTERACTION_VERIFICATION_MODES.has(typeof value === "string" ? value.trim().toLowerCase() : "");
 }
@@ -233,6 +257,25 @@ function appendStateWarning(state, key, warning) {
   const existing = Array.isArray(state[key]) ? state[key].filter((item) => typeof item === "string") : [];
   if (!existing.includes(warning)) state[key] = [...existing, warning];
 }
+function applyRequestedInteractionRouteContract(state) {
+  if (!isInteractionVerificationMode(state.verification_mode)) return;
+  const requestedTerminal = requestedExpectedTerminalRouteForState(state);
+  if (!requestedTerminal) return;
+  state.requested_expected_terminal_path = requestedTerminal;
+  if (!stringRecordValue(state, "expected_terminal_path")) {
+    state.expected_terminal_path = requestedTerminal;
+  }
+  const startPath = normalizeRoutePath(state.server_path) || normalizeRoutePath(state.expected_start_path) || "/";
+  if (!stringRecordValue(state, "expected_start_path")) {
+    state.expected_start_path = startPath;
+  }
+  const existingContract = state.interaction_contract && typeof state.interaction_contract === "object" ? state.interaction_contract : {};
+  state.interaction_contract = {
+    ...existingContract,
+    start_path: stringRecordValue(existingContract, "start_path") || startPath,
+    expected_terminal_path: stringRecordValue(existingContract, "expected_terminal_path") || requestedTerminal
+  };
+}
 function interactionStartPathForAuthorPacket(state, parsed, refined) {
   return normalizeRoutePath(
     stringRecordValue(state, "expected_start_path") || stringRecordValue(refined, "expected_start_path") || stringRecordValue(parsed.interaction_contract, "start_path") || stringRecordValue(parsed.proof_contract, "start_path") || stringRecordValue(state, "server_path") || "/"
@@ -275,6 +318,36 @@ function normalizeCaptureScript(value) {
   const script = normalizeOptionalString(value) || "";
   return script ? guardProofEvidenceGlobalAssignments(script) : "";
 }
+function compactCaptureScriptForHeuristics(script) {
+  return script.replace(/\/\*[\s\S]*?\*\//g, " ").replace(/(^|[^:])\/\/.*$/gm, "$1 ").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function interactionCaptureScriptLooksPassive(script) {
+  const text = compactCaptureScriptForHeuristics(script);
+  if (!text) return true;
+  const actionPatterns = [
+    /\bpage\.(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?|goto|reload)\s*\(/,
+    /\blocator\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption|dispatch(event)?)\s*\(/,
+    /\b(getby(role|text|label|testid|placeholder|title)|getbyalttext)\s*\([^)]*\)\s*\.\s*(click|dblclick|tap|fill|press|type|check|uncheck|selectoption)\s*\(/,
+    /\bkeyboard\s*\.\s*(press|type|inserttext)\s*\(/,
+    /\bmouse\s*\.\s*(click|dblclick|down|up|move)\s*\(/,
+    /\btouchscreen\s*\.\s*tap\s*\(/
+  ];
+  if (actionPatterns.some((pattern) => pattern.test(text))) return false;
+  const evidencePatterns = [
+    /\breturn\s+[{[]/,
+    /\breturn\s+\w+/,
+    /__riddleproofevidence/,
+    /\bproof_evidence\b/,
+    /\brouteexpectationsource\b/,
+    /\bexpectedurl\b/,
+    /\bassertions?\b/
+  ];
+  return !evidencePatterns.some((pattern) => pattern.test(text));
+}
+function setStructuredInteractionCaptureFailure(state, summary) {
+  const existing = typeof state.structured_interaction_capture_failure_summary === "string" ? state.structured_interaction_capture_failure_summary.trim() : "";
+  if (!existing) state.structured_interaction_capture_failure_summary = summary;
+}
 function appendProofSummaryLine(state, line) {
   const text = String(line || "").trim();
   if (!text) return;
@@ -515,6 +588,9 @@ function proofAssessmentHardBlockersForState(state = {}) {
   }
   add(state?.structured_interaction_capture_failure_summary);
   add(state?.structured_interaction_failure_summary);
+  if (isInteractionVerificationMode(normalizedVerificationMode(state)) && !stateHasProofEvidence(state)) {
+    add("interaction proof evidence is required before ready_to_ship; proof_evidence_present=false");
+  }
   const mergeRecommendation = String(state?.merge_recommendation || "").trim();
   if (mergeRecommendation === "do-not-merge" && blockers.length) {
     add("merge_recommendation=do-not-merge because the proof bundle contains hard blockers.");
@@ -550,7 +626,22 @@ function stateHasAfterEvidence(state = {}) {
   const observation = objectValue(after.observation);
   const supporting = objectValue(after.supporting_artifacts);
   return Boolean(
-    observation.valid === true && (supporting.has_structured_payload === true || supporting.proof_evidence_present === true || observation.telemetry_ready === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0)
+    observation.valid === true && (supporting.has_structured_payload === true || stateHasProofEvidence(state) || observation.telemetry_ready === true)
+  );
+}
+function stateHasProofEvidence(state = {}) {
+  if (state?.proof_evidence_present === true) return true;
+  if (state?.proof_evidence !== void 0 && state?.proof_evidence !== null) {
+    if (typeof state.proof_evidence !== "object") return true;
+    if (Object.keys(objectValue(state.proof_evidence)).length > 0) return true;
+  }
+  const bundle = objectValue(state?.evidence_bundle);
+  const after = objectValue(bundle.after);
+  const supporting = objectValue(after.supporting_artifacts);
+  const request = objectValue(state?.proof_assessment_request);
+  const structuredEvidence = objectValue(request.structured_evidence);
+  return Boolean(
+    supporting.proof_evidence_present === true || structuredEvidence.proof_evidence_present === true || Object.keys(objectValue(bundle.proof_evidence)).length > 0 || Object.keys(objectValue(after.proof_evidence)).length > 0
   );
 }
 function validateShipGate(state = {}) {
@@ -720,6 +811,7 @@ function mergeStateFromParams(statePath, params) {
   if (params.use_auth !== void 0) state.use_auth = params.use_auth ? "true" : "";
   if (params.leave_draft !== void 0) state.leave_draft = params.leave_draft ? "true" : "";
   if (params.advance_stage !== void 0) state.last_requested_advance_stage = params.advance_stage;
+  applyRequestedInteractionRouteContract(state);
   if (params.recon_assessment_json !== void 0) {
     const raw = normalizeOptionalString(params.recon_assessment_json) || "";
     if (!raw) {
@@ -756,6 +848,11 @@ function mergeStateFromParams(statePath, params) {
       state.supervisor_author_packet = parsed;
       if (typeof parsed?.proof_plan === "string") state.proof_plan = normalizeOptionalString(parsed.proof_plan) || "";
       if (typeof parsed?.capture_script === "string") state.capture_script = normalizeCaptureScript(parsed.capture_script);
+      if (isInteractionVerificationMode(state.verification_mode) && interactionCaptureScriptLooksPassive(state.capture_script || "")) {
+        const warning = "Interaction proof capture script appears passive: it does not perform a browser interaction or return structured proof evidence.";
+        appendStateWarning(state, "author_warnings", warning);
+        setStructuredInteractionCaptureFailure(state, warning);
+      }
       if (parsed?.baseline_understanding_used && typeof parsed.baseline_understanding_used === "object") {
         state.author_baseline_understanding_used = parsed.baseline_understanding_used;
       }
@@ -3479,7 +3576,7 @@ function responseSchemaForAuthorPacket() {
       summary: { type: "string" },
       payload: {
         type: "object",
-        description: "For decision=author_packet, provide the proof packet itself or {author_packet:{...}} with proof_plan, capture_script, and refined_inputs.expected_terminal_path when the proof changes route, query, or hash."
+        description: "For decision=author_packet, provide the proof packet itself or {author_packet:{...}} with proof_plan, capture_script, refined_inputs.expected_terminal_path, and interaction_contract when the proof changes route, query, or hash."
       },
       reasons: { type: "array", items: { type: "string" } },
       continue_with_stage: { type: "string", enum: ["author", "recon"] },
@@ -3790,6 +3887,10 @@ function buildAuthorCheckpointPacket(input) {
       reference: input.request.reference || fullState.reference,
       server_path: fullState.server_path,
       wait_for_selector: fullState.wait_for_selector,
+      expected_start_path: fullState.expected_start_path,
+      expected_terminal_path: fullState.expected_terminal_path,
+      requested_expected_terminal_path: fullState.requested_expected_terminal_path,
+      interaction_contract: jsonCloneRecord(fullState.interaction_contract),
       route_expectation: jsonCloneRecord(fullState.route_expectation),
       author_summary: fullState.author_summary,
       author_request: jsonCloneRecord(authorRequest),

package/dist/advanced/index.js

@@ -1,18 +1,18 @@
 import {
   proof_run_engine_exports
-} from "../chunk-KS3N5APP.js";
+} from "../chunk-YC77HZVF.js";
 import {
   runner_exports
-} from "../chunk-P2RN2NYR.js";
+} from "../chunk-3OTO7IDH.js";
 import {
   engine_harness_exports
-} from "../chunk-2DW2LBUD.js";
-import "../chunk-YZUVEJ5B.js";
-import "../chunk-FMOYUYH2.js";
+} from "../chunk-AM3K5FPW.js";
+import "../chunk-ZQWVXQKJ.js";
+import "../chunk-RDPG554T.js";
 import {
   proof_run_core_exports
-} from "../chunk-FU73I4V3.js";
-import "../chunk-4FOHZ7JG.js";
+} from "../chunk-K6HZUSHH.js";
+import "../chunk-OILKSY5J.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {