Level 11.1: Passive mode guard

- Prevented authoritative mutations in passive mode
- No API changes

Author: DavidQ

docs/dev/CODEX_COMMANDS.md

@@ -2,39 +2,21 @@ MODEL: GPT-5.3-codex
 REASONING: high
 
 COMMAND:
-Implement BUILD_PR_LEVEL_11_1_HANDOFF_VALIDATION_TIGHTEN.
+Implement BUILD_PR_LEVEL_11_1_PASSIVE_MODE_GUARD.
 
 Modify ONLY:
 src/advanced/state/transitions.js
 
-Apply EXACT replacements:
-
-1. validateApplyScoreDelta:
-- Introduce normalizedDelta = Number(payload.delta)
-- Enforce Number.isFinite(normalizedDelta)
-- Update reason to: applyScoreDelta requires finite numeric payload.delta.
-
-2. validateAdvanceWave:
-- Keep validation logic
-- Update reason to: advanceWave requires finite amount > 0.
-
-3. validateUpdateObjectiveProgress:
-- Replace inline Number(...) checks with:
-  normalizedCurrent
-  normalizedTarget
-- Enforce Number.isFinite on both
-- Update reasons to finite numeric wording
+Change:
+- Add guard to prevent authoritativeApply execution when in passive mode
 
 Do NOT:
 - change APIs
-- modify apply functions
-- refactor unrelated code
-- scan unrelated files
+- refactor unrelated logic
 
 Validation:
-- All existing tests pass
-- Handoff test rejects invalid numeric values
+- Passive mode does not mutate state
+- Existing tests pass
 
 Output:
-Return exactly one repo-structured ZIP at:
-<project folder>/tmp/BUILD_PR_LEVEL_11_1_HANDOFF_VALIDATION_TIGHTEN.zip
+<project folder>/tmp/BUILD_PR_LEVEL_11_1_PASSIVE_MODE_GUARD.zip

docs/dev/COMMIT_COMMENT.txt

@@ -1,7 +1,4 @@
-Level 11.1: tighten numeric validation at transition boundary
+Level 11.1: Passive mode guard
 
-- enforce finite numeric validation using Number() normalization
-- prevent NaN / Infinity drift
-- improve validation clarity
-
-Scope: validation only
+- Prevented authoritative mutations in passive mode
+- No API changes

docs/dev/reports/change_summary.txt

@@ -1,8 +1 @@
-Updated transition validation to enforce finite numeric inputs.
-
-Targets:
-- applyScoreDelta: normalized + finite check
-- advanceWave: clarified finite requirement
-- updateObjectiveProgress: explicit normalized finite checks
-
-No API or structural changes.
+Added passive mode guard to prevent state mutation during non-authoritative execution.

docs/dev/reports/validation_checklist.txt

@@ -1,8 +1,5 @@
-[ ] Only src/advanced/state/transitions.js modified
+[ ] transitions.js modified only
+[ ] Passive mode does not mutate
+[ ] Authoritative mode unchanged
 [ ] No API changes
-[ ] No apply function changes
-[ ] Number() normalization added
-[ ] Number.isFinite enforced
-[ ] NaN rejected
-[ ] Infinity rejected
-[ ] Existing tests pass
+[ ] Tests pass

docs/pr/BUILD_PR_LEVEL_11_1_PASSIVE_MODE_GUARD.md

@@ -0,0 +1,18 @@
+# BUILD PR — Level 11.1 Passive Mode Guard
+
+## Purpose
+Prevent passive mode from mutating authoritative state.
+
+## Scope
+- Validation guard only
+- No API changes
+
+## File
+- src/advanced/state/transitions.js
+
+## Change
+- Ensure authoritativeApply is NOT executed in passive mode
+
+## Validation
+- Passive mode produces no mutations
+- Authoritative mode unchanged

src/advanced/state/transitions.js

@@ -9,6 +9,13 @@ import { WORLD_GAME_STATE_EVENT_TYPES } from './constants.js';
 import { isPlainObject } from '../../shared/utils/objectUtils.js';
 import { toFiniteNumber } from '../../shared/math/numberNormalization.js';
 
+function isPassiveModeContext(context) {
+  if (!isPlainObject(context)) return false;
+  if (context.passiveMode === true) return true;
+  if (typeof context.mode === 'string' && context.mode.trim().toLowerCase() === 'passive') return true;
+  return false;
+}
+
 function recalcObjectiveSummary(objectivesById) {
   const objectiveIds = Object.keys(objectivesById);
   let completed = 0;
@@ -60,7 +67,10 @@ function validateApplyScoreDelta(payload) {
   return { ok: true };
 }
 
-function applyAuthoritativeScoreDelta(snapshot, payload) {
+function applyAuthoritativeScoreDelta(snapshot, payload, context = {}) {
+  if (isPassiveModeContext(context)) {
+    return { changes: [] };
+  }
   if (!snapshot.worldState || !isPlainObject(snapshot.worldState)) {
     snapshot.worldState = {};
   }
@@ -112,6 +122,9 @@ function validateUpdateObjectiveProgress(payload) {
 }
 
 function applyAuthoritativeObjectiveProgress(snapshot, payload, context = {}) {
+  if (isPassiveModeContext(context)) {
+    return { changes: [] };
+  }
   const now = typeof context.now === 'function' ? context.now : () => Date.now();
   const objectiveId = String(payload.objectiveId || '').trim();
   const objectives = snapshot.worldState && snapshot.worldState.objectives