From 08449cfda918362d7dc75bfce236f9d67368604b Mon Sep 17 00:00:00 2001
From: umer
Date: Fri, 30 Oct 2026 07:54:43 +0400
Subject: [PATCH 1/3] feat: animated options keep their script, play, and are
judged on motion (0.7.0)
A brief that asked for a terminal animation or a pulse was told to write
no script, and the drawn page dropped every script, so the motion was
lost and agents hand-rolled it in the product instead.
- Export keeps inline script and handlers under a CSP that adds only
script-src 'unsafe-inline'; a script with a src is still refused or
drawn once and dropped. Draft and engine contracts ask for real motion.
- render-check captures a 4-frame series at 390 and 1280 around the first
moving element; make and judge write it to
diff --git a/docs/wrapper-allowlist.json b/docs/wrapper-allowlist.json
index 6f84345..690811c 100644
--- a/docs/wrapper-allowlist.json
+++ b/docs/wrapper-allowlist.json
@@ -218,22 +218,31 @@
"reason": "An owner decision about honesty, not a design restriction (2026-10-24). It replaced the engine rule that labelled all sample content, which produced \"Placeholder quote\" and \"concept design\" copy (bake-off cause 2)."
},
{
- "id": "script-drawn-once",
+ "id": "script-kept-inline",
"source": "contract",
"kind": "delivery",
- "what": "Script may run once; the host keeps what the first render shows, without the script.",
- "sha256": "17b216e97598b4f5",
+ "what": "Inline script and CSS animation are kept and play; a script loaded from a URL runs once and the host keeps what that first render shows, without any script.",
+ "sha256": "09292f0980fef96e",
"verdict": "accepted",
- "reason": "Where Chrome is installed the host draws the page once into a static document; the sentence says what survives."
+ "reason": "Where Chrome is installed the exported page keeps its inline script under a policy that loads and sends nothing; a script from a URL cannot run there, so that page is drawn once into a static document. The sentence says what survives. It replaced script-drawn-once (2026-10-30), which dropped every script and with it the motion a brief asked for."
},
{
- "id": "no-script",
+ "id": "script-inline-only",
"source": "contract",
"kind": "delivery",
- "what": "Write no script: the page is shown as a static document.",
- "sha256": "63d1c2d956a51103",
+ "what": "Script is inline only: a script with a src or a javascript: URL is refused; inline script and CSS animation play.",
+ "sha256": "4ca6767afc035144",
"verdict": "accepted",
- "reason": "Without Chrome the page cannot be drawn, so script would not run in the exported document."
+ "reason": "Without Chrome the page cannot be drawn, so a script from a URL would not run in the exported document; inline script runs under the page's own policy, which loads and sends nothing. It replaced no-script (2026-10-30)."
+ },
+ {
+ "id": "motion-for-real",
+ "source": "contract",
+ "kind": "policy",
+ "what": "Motion the brief asks for is written for real (CSS animation or inline script), not as a still, honouring prefers-reduced-motion.",
+ "sha256": "a8b9700872e8c2bc",
+ "verdict": "accepted",
+ "reason": "An owner decision (2026-10-30): a brief that asks for a terminal animation, a pulse or a marquee gets that motion in the option. Under no-script the model was told to remove exactly what was asked for, and the animation was hand-rolled in the product instead. It restricts nothing the plain call would do."
},
{
"id": "critic-flow-check",
diff --git a/journeys/motion.mjs b/journeys/motion.mjs
new file mode 100644
index 0000000..37f3ce1
--- /dev/null
+++ b/journeys/motion.mjs
@@ -0,0 +1,103 @@
+// Nonpaid real-CLI proof that an animated option keeps its motion: a brief that asks for a typing terminal -> make keeps the option's inline
+// script -> the frame series at 390 and 1280 sits beside it -> the independent judge is asked about motion and returns a verdict -> the view
+// plays the option in its sandboxed frame and lists the frames -> a still page gets no motion score -> one polish round with owner feedback
+// still moves. Local stand-ins answer the model and the judge, so scores are synthetic, never design quality.
+import '../test/fixtures/provider-hooks.mjs';
+import assert from 'node:assert/strict';
+import { execFile, spawn } from 'node:child_process';
+import { copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { promisify } from 'node:util';
+import { renderCheck } from '../src/render-check.mjs';
+import { PLAIN, standIn } from '../test/fixtures/critic-model.mjs';
+import { installJudge } from '../test/fixtures/judge-cli.mjs';
+const root = new URL('..', import.meta.url).pathname, out = process.env.DONE_DONE_EVIDENCE_ROOT ?? process.argv[2];
+if (!out) throw Error('Give an evidence folder');
+mkdirSync(out, { recursive: true });
+const BRIEF = 'A home screen for a developer tool, with a terminal that types out the install command (a typing animation)';
+// What the stand-in model writes: a terminal that types its lines in an inline script, with a cursor that blinks three times.
+const terminal = (title) => `+