From 1bb093a320732fbbc6d2c4a6806b15f8982db8b4 Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 14:08:38 +0300
Subject: [PATCH 1/8] ci: Add shared Visual proof author and shots actions
 [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 actions/visual-proof-author/README.md     |  43 ++++++
 actions/visual-proof-author/action.yml    |  66 +++++++++
 actions/visual-proof-shots/README.md      |  42 ++++++
 actions/visual-proof-shots/action.yml     |  67 +++++++++
 actions/visual-proof/.gitignore           |   2 +
 actions/visual-proof/README.md            |  12 ++
 actions/visual-proof/act.sh               | 100 +++++++++++++
 actions/visual-proof/author-prompt.md     |  29 ++++
 actions/visual-proof/author.sh            | 134 +++++++++++++++++
 actions/visual-proof/capture.cjs          |  63 ++++++++
 actions/visual-proof/examples.md          |  28 ++++
 actions/visual-proof/package.json         |   8 +
 actions/visual-proof/parse-section.js     | 116 +++++++++++++++
 actions/visual-proof/playground.cjs       | 134 +++++++++++++++++
 actions/visual-proof/post-comment.sh      | 171 ++++++++++++++++++++++
 actions/visual-proof/run.sh               | 171 ++++++++++++++++++++++
 actions/visual-proof/skill.md             |  66 +++++++++
 actions/visual-proof/storyboard-prompt.md |  25 ++++
 18 files changed, 1277 insertions(+)
 create mode 100644 actions/visual-proof-author/README.md
 create mode 100644 actions/visual-proof-author/action.yml
 create mode 100644 actions/visual-proof-shots/README.md
 create mode 100644 actions/visual-proof-shots/action.yml
 create mode 100644 actions/visual-proof/.gitignore
 create mode 100644 actions/visual-proof/README.md
 create mode 100755 actions/visual-proof/act.sh
 create mode 100644 actions/visual-proof/author-prompt.md
 create mode 100755 actions/visual-proof/author.sh
 create mode 100644 actions/visual-proof/capture.cjs
 create mode 100644 actions/visual-proof/examples.md
 create mode 100644 actions/visual-proof/package.json
 create mode 100644 actions/visual-proof/parse-section.js
 create mode 100644 actions/visual-proof/playground.cjs
 create mode 100755 actions/visual-proof/post-comment.sh
 create mode 100755 actions/visual-proof/run.sh
 create mode 100644 actions/visual-proof/skill.md
 create mode 100644 actions/visual-proof/storyboard-prompt.md

diff --git a/actions/visual-proof-author/README.md b/actions/visual-proof-author/README.md
new file mode 100644
index 000000000..3535ce3d1
--- /dev/null
+++ b/actions/visual-proof-author/README.md
@@ -0,0 +1,43 @@
+# Visual proof author
+
+Writes `## Visual proof` on a PR body when that section is still missing.
+Ported from Core so Elementor and Elementor Pro share one implementation.
+
+If the caller checkout has `.cursor/skills/visual-proof/SKILL.md`, that file
+wins. Otherwise the bundled skill in `actions/visual-proof/skill.md` is used.
+
+## Usage
+
+```yaml
+name: Visual proof author
+
+on:
+  pull_request:
+    types: [opened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  author:
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-22.04
+    timeout-minutes: 8
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - uses: elementor/elementor-editor-github-actions/actions/visual-proof-author@main
+        with:
+          pr-number: ${{ github.event.pull_request.number }}
+          pr-head-sha: ${{ github.event.pull_request.head.sha }}
+          pr-base-sha: ${{ github.event.pull_request.base.sha }}
+          product-name: 'Elementor'
+          cursor-api-key: ${{ secrets.CURSOR_APIKEY }}
+          model: ${{ vars.PR_REVIEW_MODEL }}
+```
+
+Use `product-name: 'Elementor Pro'` in Pro.
diff --git a/actions/visual-proof-author/action.yml b/actions/visual-proof-author/action.yml
new file mode 100644
index 000000000..81b3230ee
--- /dev/null
+++ b/actions/visual-proof-author/action.yml
@@ -0,0 +1,66 @@
+name: 'Visual proof author'
+description: 'Write ## Visual proof on a PR body when the section is still missing'
+
+inputs:
+  pr-number:
+    description: 'Pull request number'
+    required: true
+  pr-head-sha:
+    description: 'PR head commit SHA'
+    required: true
+  pr-base-sha:
+    description: 'PR base commit SHA'
+    required: true
+  product-name:
+    description: 'Product name (Elementor or Elementor Pro)'
+    required: true
+  cursor-api-key:
+    description: 'Cursor Agent API key'
+    required: true
+  model:
+    description: 'Cursor Agent model'
+    required: false
+    default: ''
+  github-token:
+    description: 'Token with pull-requests:write'
+    required: false
+    default: ${{ github.token }}
+  skill-file:
+    description: 'Optional path to a skill markdown file in the caller workspace'
+    required: false
+    default: ''
+  examples-file:
+    description: 'Optional path to examples markdown in the caller workspace'
+    required: false
+    default: ''
+
+runs:
+  using: composite
+  steps:
+    - name: Setup Node.js
+      uses: actions/setup-node@v6
+      with:
+        node-version: 24.15.0
+        package-manager-cache: false
+
+    - name: Install Cursor CLI
+      shell: bash
+      run: |
+        curl https://cursor.com/install -fsS | bash
+        echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
+
+    - name: Author ## Visual proof if missing
+      shell: bash
+      continue-on-error: true
+      env:
+        GH_TOKEN: ${{ inputs.github-token }}
+        CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        PR_NUMBER: ${{ inputs.pr-number }}
+        PR_HEAD_SHA: ${{ inputs.pr-head-sha }}
+        PR_BASE_SHA: ${{ inputs.pr-base-sha }}
+        PR_REVIEW_MODEL: ${{ inputs.model }}
+        PRODUCT_NAME: ${{ inputs.product-name }}
+        VISUAL_PROOF_SKILL_FILE: ${{ inputs.skill-file }}
+        VISUAL_PROOF_EXAMPLES_FILE: ${{ inputs.examples-file }}
+      run: bash "${{ github.action_path }}/../visual-proof/author.sh"
diff --git a/actions/visual-proof-shots/README.md b/actions/visual-proof-shots/README.md
new file mode 100644
index 000000000..d7263d6d3
--- /dev/null
+++ b/actions/visual-proof-shots/README.md
@@ -0,0 +1,42 @@
+# Visual proof shots
+
+After `playground-preview` succeeds, records Playground PNGs and a short clip.
+A Cursor storyboard actor follows **Steps**; if that produces no shots, CI
+falls back to Pages → Add New → Edit with Elementor.
+
+Needs job permissions `contents: write` and `pull-requests: write` so images
+can land on `ci/visual-proof-assets` in the **calling** repo.
+
+## Usage
+
+```yaml
+visual-proof-shots:
+  name: Visual proof shots
+  needs: [playground-preview]
+  if: |
+    always() &&
+    needs.playground-preview.result == 'success' &&
+    github.event.pull_request.draft == false &&
+    github.event.action != 'ready_for_review' &&
+    github.event.action != 'labeled' &&
+    github.event.pull_request.head.repo.full_name == github.repository
+  runs-on: ubuntu-22.04
+  timeout-minutes: 25
+  permissions:
+    contents: write
+    pull-requests: write
+    deployments: read
+  steps:
+    - uses: actions/checkout@v6
+
+    - uses: elementor/elementor-editor-github-actions/actions/visual-proof-shots@main
+      with:
+        pr-number: ${{ github.event.pull_request.number }}
+        head-sha: ${{ github.event.pull_request.head.sha }}
+        product-name: 'Elementor'
+        cursor-api-key: ${{ secrets.CURSOR_APIKEY }}
+        model: ${{ vars.PR_REVIEW_MODEL }}
+```
+
+Use `product-name: 'Elementor Pro'` in Pro. The environment name must stay
+`playground-preview`.
diff --git a/actions/visual-proof-shots/action.yml b/actions/visual-proof-shots/action.yml
new file mode 100644
index 000000000..378704a58
--- /dev/null
+++ b/actions/visual-proof-shots/action.yml
@@ -0,0 +1,67 @@
+name: 'Visual proof shots'
+description: 'Record Playground screenshots and a short clip from ## Visual proof Steps'
+
+inputs:
+  pr-number:
+    description: 'Pull request number'
+    required: true
+  head-sha:
+    description: 'PR head commit SHA used to resolve playground-preview'
+    required: true
+  product-name:
+    description: 'Product name (Elementor or Elementor Pro)'
+    required: true
+  cursor-api-key:
+    description: 'Cursor Agent API key for the storyboard actor'
+    required: true
+  model:
+    description: 'Cursor Agent model'
+    required: false
+    default: ''
+  github-token:
+    description: 'Token with contents:write and pull-requests:write'
+    required: false
+    default: ${{ github.token }}
+
+runs:
+  using: composite
+  steps:
+    - name: Setup Node.js
+      uses: actions/setup-node@v6
+      with:
+        node-version: 24.15.0
+        package-manager-cache: false
+
+    - name: Install Cursor CLI
+      shell: bash
+      run: |
+        curl https://cursor.com/install -fsS | bash
+        echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
+
+    - name: Parse Visual proof section
+      shell: bash
+      run: node "${{ github.action_path }}/../visual-proof/parse-section.js" --test
+
+    - name: Capture Playground shots and comment
+      shell: bash
+      continue-on-error: true
+      env:
+        GH_TOKEN: ${{ inputs.github-token }}
+        CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
+        GITHUB_REPOSITORY: ${{ github.repository }}
+        PR_NUMBER: ${{ inputs.pr-number }}
+        HEAD_SHA: ${{ inputs.head-sha }}
+        PR_REVIEW_MODEL: ${{ inputs.model }}
+        PRODUCT_NAME: ${{ inputs.product-name }}
+        GITHUB_SERVER_URL: ${{ github.server_url }}
+        GITHUB_RUN_ID: ${{ github.run_id }}
+      run: bash "${{ github.action_path }}/../visual-proof/run.sh"
+
+    - name: Upload shots artifact
+      if: hashFiles('visual-proof-shots/*.png') != ''
+      uses: actions/upload-artifact@v7
+      with:
+        name: visual-proof-shots
+        path: visual-proof-shots/
+        if-no-files-found: ignore
+        retention-days: 7
diff --git a/actions/visual-proof/.gitignore b/actions/visual-proof/.gitignore
new file mode 100644
index 000000000..0efadbe9b
--- /dev/null
+++ b/actions/visual-proof/.gitignore
@@ -0,0 +1,2 @@
+node_modules/
+video-raw/
diff --git a/actions/visual-proof/README.md b/actions/visual-proof/README.md
new file mode 100644
index 000000000..3829d0dc9
--- /dev/null
+++ b/actions/visual-proof/README.md
@@ -0,0 +1,12 @@
+# Visual proof
+
+Shared author + Playground recorder for `elementor/elementor` and
+`elementor/elementor-pro`.
+
+Callers keep their own `playground-preview` workflow. This folder is the
+scripts; the composite entrypoints are:
+
+- `actions/visual-proof-author`
+- `actions/visual-proof-shots`
+
+See those READMEs for wrapper workflow YAML.
diff --git a/actions/visual-proof/act.sh b/actions/visual-proof/act.sh
new file mode 100755
index 000000000..8f925ce97
--- /dev/null
+++ b/actions/visual-proof/act.sh
@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="${GITHUB_WORKSPACE:-$(pwd)}"
+OUT_DIR="${VISUAL_PROOF_OUT_DIR:-${REPO_ROOT}/visual-proof-shots}"
+
+log() {
+	echo "[visual-proof:actor] $*"
+}
+
+err() {
+	echo "[visual-proof:actor] $*" >&2
+}
+
+png_count() {
+	find "$OUT_DIR" -maxdepth 1 -type f -name '*.png' 2>/dev/null | wc -l | tr -d ' '
+}
+
+require_env() {
+	local name="$1"
+	if [[ -z "${!name:-}" ]]; then
+		err "${name} is required"
+		exit 1
+	fi
+}
+
+require_env CURSOR_API_KEY
+require_env PLAYGROUND_URL
+require_env VISUAL_PROOF_SECTION_FILE
+require_env VISUAL_PROOF_OUT_DIR
+
+if [[ ! -f "$VISUAL_PROOF_SECTION_FILE" ]]; then
+	err "section file missing: ${VISUAL_PROOF_SECTION_FILE}"
+	exit 1
+fi
+
+PROMPT_FILE="${SCRIPT_DIR}/storyboard-prompt.md"
+if [[ ! -f "$PROMPT_FILE" ]]; then
+	err "storyboard prompt missing"
+	exit 1
+fi
+
+PROMPT=$(cat "$PROMPT_FILE")
+SECTION=$(cat "$VISUAL_PROOF_SECTION_FILE")
+MODEL="${PR_REVIEW_MODEL:-}"
+
+DYNAMIC_CONTEXT=$(cat << EOF
+## Runtime
+- PLAYGROUND_URL: ${PLAYGROUND_URL}
+- PLAYGROUND_HELPERS: ${SCRIPT_DIR}/playground.cjs
+- PLAYGROUND_NODE_PATH: ${SCRIPT_DIR}/node_modules
+- VISUAL_PROOF_OUT_DIR: ${OUT_DIR}
+- VISUAL_PROOF_SECTION_FILE: ${VISUAL_PROOF_SECTION_FILE}
+- VISUAL_PROOF_OVERLAY_FILE: ${VISUAL_PROOF_OVERLAY_FILE:-}
+
+## Visual proof section
+${SECTION}
+EOF
+)
+
+log "step=cursor-agent storyboard actor model=${MODEL:-default}"
+cd "$REPO_ROOT"
+export PLAYGROUND_HELPERS="${SCRIPT_DIR}/playground.cjs"
+export PLAYGROUND_NODE_PATH="${SCRIPT_DIR}/node_modules"
+
+set +e
+if [[ -n "$MODEL" ]]; then
+	timeout 600 cursor-agent --force --model "$MODEL" --output-format=text --print "$PROMPT" "$DYNAMIC_CONTEXT"
+else
+	timeout 600 cursor-agent --force --output-format=text --print "$PROMPT" "$DYNAMIC_CONTEXT"
+fi
+AGENT_EXIT=$?
+set -e
+
+if [[ "$AGENT_EXIT" -eq 124 ]]; then
+	err "step=cursor-agent timed out after 10 minutes"
+	exit 1
+fi
+if [[ "$AGENT_EXIT" -ne 0 ]]; then
+	err "step=cursor-agent failed exit=${AGENT_EXIT}"
+	exit "$AGENT_EXIT"
+fi
+
+if [[ "$(png_count)" -eq 0 && -f "${OUT_DIR}/actor.cjs" ]]; then
+	log "step=run-actor.cjs"
+	if ! NODE_PATH="${SCRIPT_DIR}/node_modules" node "${OUT_DIR}/actor.cjs"; then
+		err "step=run-actor.cjs failed"
+		exit 1
+	fi
+fi
+
+COUNT="$(png_count)"
+log "step=verify png_count=${COUNT}"
+if [[ "$COUNT" -eq 0 ]]; then
+	err "storyboard actor produced no PNGs"
+	exit 1
+fi
+
+log "step=done"
diff --git a/actions/visual-proof/author-prompt.md b/actions/visual-proof/author-prompt.md
new file mode 100644
index 000000000..c3d1db4be
--- /dev/null
+++ b/actions/visual-proof/author-prompt.md
@@ -0,0 +1,29 @@
+# Visual proof author (CI)
+
+You are the only Cursor job that **writes** `## Visual proof` (including **Steps**). You run when that section is still missing on PR **opened** or **ready for review**. You do not review code, capture screenshots, or change git files.
+
+Follow the Visual proof skill and examples pasted below. The product name is in the runtime context (Elementor or Elementor Pro).
+
+## Context (CI fills this)
+
+The extra message after this prompt has repository, PR number, and SHAs.
+
+## Steps
+
+1. `gh pr view "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --json title,body,labels` — read title, body, labels.
+2. If the body already has a line that is exactly `## Visual proof`, stop. Do not rewrite it.
+3. `git diff --stat "$PR_BASE_SHA"..."$PR_HEAD_SHA"` and skim the diff. Decide:
+   - Editor Bug you can show on this repo’s Playground preview → Broken + Where / Steps / Pass / Fail.
+   - Anything else (Task, docs, CI, missing plugin on Playground, no editor UI) → heading + `#skip_proof` + one sentence.
+4. Insert the section **after** `## Test plan` and **before** `## Jira` or `<!--start_gitstream`. If those headings are missing, insert after `## Summary`, else append at the end of the human-written body (still before gitstream).
+5. Do not edit Summary, Test plan, or Jira except to insert this block.
+6. Write the new full body to a temp file. Run:
+   `gh pr edit "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --body-file "$tmp"`
+7. Confirm `gh pr view` now contains `## Visual proof`. Print a one-line summary of skip vs filled. Then stop.
+
+## Hard rules
+
+- Visible in-app labels only inside Steps. CI will try to click those labels on Playground.
+- Do not act out the bug. Playground has the fixed zip. Broken is past tense.
+- Never leave placeholders (`TODO`, `TBD`, angle-bracket templates).
+- Never print `GH_TOKEN` or `CURSOR_API_KEY`.
diff --git a/actions/visual-proof/author.sh b/actions/visual-proof/author.sh
new file mode 100755
index 000000000..4915185f7
--- /dev/null
+++ b/actions/visual-proof/author.sh
@@ -0,0 +1,134 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="${GITHUB_WORKSPACE:-$(pwd)}"
+
+log() {
+	echo "[visual-proof:author] $*"
+}
+
+err() {
+	echo "[visual-proof:author] $*" >&2
+}
+
+require_env() {
+	local name="$1"
+	if [[ -z "${!name:-}" ]]; then
+		err "${name} is required"
+		exit 1
+	fi
+}
+
+require_env GH_TOKEN
+require_env GITHUB_REPOSITORY
+require_env PR_NUMBER
+require_env PR_HEAD_SHA
+require_env PR_BASE_SHA
+require_env CURSOR_API_KEY
+
+log "step=start PR_NUMBER=${PR_NUMBER} HEAD_SHA=${PR_HEAD_SHA} BASE_SHA=${PR_BASE_SHA}"
+
+log "step=parse-section reading PR body"
+DECISION=$(
+	gh pr view "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --json body --jq .body | node -e '
+	const { shouldCaptureVisualProof } = require(process.argv[1]);
+	const fs = require("fs");
+	const body = fs.readFileSync(0, "utf8");
+	process.stdout.write(JSON.stringify(shouldCaptureVisualProof(body)));
+	' "${SCRIPT_DIR}/parse-section.js"
+)
+
+REASON=$(echo "$DECISION" | jq -r .reason)
+log "step=parse-section reason=${REASON}"
+
+if [[ "$REASON" != "missing-section" ]]; then
+	log "step=skip section already present (${REASON})"
+	exit 0
+fi
+
+PROMPT_FILE="${SCRIPT_DIR}/author-prompt.md"
+if [[ -n "${VISUAL_PROOF_SKILL_FILE:-}" && -f "$VISUAL_PROOF_SKILL_FILE" ]]; then
+	SKILL_FILE="$VISUAL_PROOF_SKILL_FILE"
+elif [[ -f "${REPO_ROOT}/.cursor/skills/visual-proof/SKILL.md" ]]; then
+	SKILL_FILE="${REPO_ROOT}/.cursor/skills/visual-proof/SKILL.md"
+else
+	SKILL_FILE="${SCRIPT_DIR}/skill.md"
+fi
+
+if [[ -n "${VISUAL_PROOF_EXAMPLES_FILE:-}" && -f "$VISUAL_PROOF_EXAMPLES_FILE" ]]; then
+	EXAMPLES_FILE="$VISUAL_PROOF_EXAMPLES_FILE"
+elif [[ -f "${REPO_ROOT}/.cursor/skills/visual-proof/examples.md" ]]; then
+	EXAMPLES_FILE="${REPO_ROOT}/.cursor/skills/visual-proof/examples.md"
+else
+	EXAMPLES_FILE="${SCRIPT_DIR}/examples.md"
+fi
+
+if [[ ! -f "$PROMPT_FILE" || ! -f "$SKILL_FILE" ]]; then
+	err "author prompt or visual-proof skill is missing"
+	exit 1
+fi
+
+PROMPT=$(cat "$PROMPT_FILE")
+SKILL=$(cat "$SKILL_FILE")
+EXAMPLES=""
+if [[ -f "$EXAMPLES_FILE" ]]; then
+	EXAMPLES=$(cat "$EXAMPLES_FILE")
+fi
+
+DYNAMIC_CONTEXT=$(cat << EOF
+## Runtime
+- Product: ${PRODUCT_NAME:-Elementor}
+- Repository: ${GITHUB_REPOSITORY}
+- PR Number: ${PR_NUMBER}
+- PR Head SHA: ${PR_HEAD_SHA}
+- PR Base SHA: ${PR_BASE_SHA}
+
+## Skill
+${SKILL}
+
+## Examples
+${EXAMPLES}
+EOF
+)
+
+MODEL="${PR_REVIEW_MODEL:-}"
+log "step=cursor-agent about to author Visual proof model=${MODEL:-default}"
+
+cd "$REPO_ROOT"
+
+set +e
+if [[ -n "$MODEL" ]]; then
+	timeout 180 cursor-agent --force --model "$MODEL" --output-format=text --print "$PROMPT" "$DYNAMIC_CONTEXT"
+else
+	timeout 180 cursor-agent --force --output-format=text --print "$PROMPT" "$DYNAMIC_CONTEXT"
+fi
+AGENT_EXIT=$?
+set -e
+
+if [[ "$AGENT_EXIT" -eq 124 ]]; then
+	err "step=cursor-agent timed out after 3 minutes"
+	exit 1
+fi
+if [[ "$AGENT_EXIT" -ne 0 ]]; then
+	err "step=cursor-agent failed exit=${AGENT_EXIT}"
+	exit "$AGENT_EXIT"
+fi
+
+AFTER=$(
+	gh pr view "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --json body --jq .body | node -e '
+	const { shouldCaptureVisualProof } = require(process.argv[1]);
+	const fs = require("fs");
+	const body = fs.readFileSync(0, "utf8");
+	process.stdout.write(JSON.stringify(shouldCaptureVisualProof(body)));
+	' "${SCRIPT_DIR}/parse-section.js"
+)
+AFTER_REASON=$(echo "$AFTER" | jq -r .reason)
+log "step=verify reason=${AFTER_REASON}"
+
+if [[ "$AFTER_REASON" == "missing-section" ]]; then
+	err "cursor-agent finished but ## Visual proof is still missing"
+	exit 1
+fi
+
+log "step=done"
diff --git a/actions/visual-proof/capture.cjs b/actions/visual-proof/capture.cjs
new file mode 100644
index 000000000..159382c84
--- /dev/null
+++ b/actions/visual-proof/capture.cjs
@@ -0,0 +1,63 @@
+'use strict';
+
+const { launchRecordedBrowser, waitForWpFrame, addCaption, clickFirstInWp, saveRecording, screenshot, overlayText, log } = require( './playground.cjs' );
+
+const PLAYGROUND_URL = process.env.PLAYGROUND_URL || '';
+const MAX_SHOTS = 3;
+
+async function main() {
+	log( `fallback walk PLAYGROUND_URL present=${ Boolean( PLAYGROUND_URL ) }` );
+
+	if ( ! PLAYGROUND_URL ) {
+		throw new Error( 'PLAYGROUND_URL is required' );
+	}
+
+	const caption = overlayText();
+	const { browser, page } = await launchRecordedBrowser();
+	const shots = [];
+
+	try {
+		log( 'start goto' );
+		await page.goto( PLAYGROUND_URL, { waitUntil: 'domcontentloaded', timeout: 120000 } );
+		log( 'goto done' );
+		await waitForWpFrame( page );
+		await addCaption( page, caption );
+		await page.waitForTimeout( 1000 );
+
+		await screenshot( page, shots, 'wp-admin', MAX_SHOTS );
+
+		await clickFirstInWp( page, 'link', 'Pages' );
+		await page.waitForTimeout( 2000 );
+		await waitForWpFrame( page );
+		await screenshot( page, shots, 'pages', MAX_SHOTS );
+
+		const openedEditor = await clickFirstInWp( page, 'link', 'Add New' ) || await clickFirstInWp( page, 'link', 'Add New Page' );
+		if ( openedEditor ) {
+			await page.waitForTimeout( 2000 );
+			await clickFirstInWp( page, 'button', 'Edit with Elementor' ) || await clickFirstInWp( page, 'link', 'Edit with Elementor' );
+			await page.waitForTimeout( 8000 );
+			await waitForWpFrame( page );
+			await screenshot( page, shots, 'elementor-editor', MAX_SHOTS );
+		} else {
+			log( 'click Add New / Add New Page fail; skipping editor shot' );
+		}
+	} finally {
+		try {
+			await saveRecording( page );
+		} catch ( videoError ) {
+			console.error( `[visual-proof:capture] video save failed: ${ videoError.message || videoError }` );
+		}
+		await browser.close();
+	}
+
+	log( `final shot count=${ shots.length }` );
+	if ( 0 === shots.length ) {
+		throw new Error( 'No screenshots were captured (zero PNG files written)' );
+	}
+}
+
+main().catch( ( error ) => {
+	console.error( `[visual-proof:capture] ${ error.message || error }` );
+	console.error( error );
+	process.exit( 1 );
+} );
diff --git a/actions/visual-proof/examples.md b/actions/visual-proof/examples.md
new file mode 100644
index 000000000..488932de7
--- /dev/null
+++ b/actions/visual-proof/examples.md
@@ -0,0 +1,28 @@
+# Visual proof — examples
+
+## Editor bug
+
+```markdown
+## Visual proof
+**Broken:** Z-index stayed disabled on Tablet when Position was inherited from Desktop.
+**Where:** Edit with Elementor → select a container → Style → Position → device switcher
+**Steps:** on Desktop set Position to Absolute → switch to Tablet → open Style → Position → set Z-index to 5
+**Pass:** Z-index is enabled on Tablet and value 5 is accepted
+**Fail:** Z-index remains disabled on Tablet
+```
+
+## Skip — not an editor bug
+
+```markdown
+## Visual proof
+#skip_proof
+Task adds a new Style control; visual proof is editor-bugs only.
+```
+
+## Skip — cannot run on this Playground
+
+```markdown
+## Visual proof
+#skip_proof
+Fix needs a plugin that playground-preview does not install.
+```
diff --git a/actions/visual-proof/package.json b/actions/visual-proof/package.json
new file mode 100644
index 000000000..ea996e17d
--- /dev/null
+++ b/actions/visual-proof/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "elementor-visual-proof-ci",
+  "private": true,
+  "description": "CI-only Playwright install for Visual proof shots. Not part of the plugin workspaces.",
+  "dependencies": {
+    "playwright": "1.55.1"
+  }
+}
diff --git a/actions/visual-proof/parse-section.js b/actions/visual-proof/parse-section.js
new file mode 100644
index 000000000..69ea09be0
--- /dev/null
+++ b/actions/visual-proof/parse-section.js
@@ -0,0 +1,116 @@
+'use strict';
+
+const SECTION_HEADING = /^## Visual proof\s*$/m;
+const SKIP_MARKER = /#skip_proof\b/;
+
+function extractVisualProofSection( body ) {
+	if ( 'string' !== typeof body || ! body.trim() ) {
+		return '';
+	}
+
+	const match = body.match( SECTION_HEADING );
+	if ( ! match || undefined === match.index ) {
+		return '';
+	}
+
+	const start = match.index + match[ 0 ].length;
+	const rest = body.slice( start );
+	const next = rest.search( /^##\s|\n<!--start_gitstream/m );
+
+	return ( -1 === next ? rest : rest.slice( 0, next ) ).trim();
+}
+
+function shouldCaptureVisualProof( body ) {
+	const section = extractVisualProofSection( body );
+
+	if ( ! section ) {
+		return { capture: false, reason: 'missing-section', section: '' };
+	}
+
+	if ( SKIP_MARKER.test( section ) ) {
+		return { capture: false, reason: 'skip-proof', section };
+	}
+
+	return { capture: true, reason: 'ready', section };
+}
+
+function extractLabeledField( section, label ) {
+	if ( 'string' !== typeof section || ! section.trim() ) {
+		return '';
+	}
+
+	const escaped = label.replace( /[.*+?^${}()|[\]\\]/g, '\\$&' );
+	const match = section.match( new RegExp( '\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)', 'i' ) );
+	return match ? match[ 1 ].trim() : '';
+}
+
+function extractBrokenCaption( section ) {
+	const match = ( section || '' ).match( /\*\*Broken:\*\*\s*(.+)/i );
+	if ( match ) {
+		return match[ 1 ].trim();
+	}
+	return extractLabeledField( section, 'Broken' );
+}
+
+function buildOverlayCaption( section ) {
+	const broken = extractBrokenCaption( section );
+	const where = extractLabeledField( section, 'Where' );
+	const steps = extractLabeledField( section, 'Steps' ).replace( /\s+/g, ' ' );
+	const parts = [];
+
+	if ( broken ) {
+		parts.push( 'Broken: ' + broken );
+	}
+	if ( where ) {
+		parts.push( 'Where: ' + where );
+	}
+	if ( steps ) {
+		parts.push( 'Steps: ' + steps );
+	}
+
+	const text = parts.join( ' · ' );
+	const max = 700;
+	return text.length > max ? text.slice( 0, max - 1 ) + '…' : text;
+}
+
+module.exports = {
+	extractVisualProofSection,
+	shouldCaptureVisualProof,
+	extractBrokenCaption,
+	extractLabeledField,
+	buildOverlayCaption,
+};
+
+if ( require.main === module && '--test' === process.argv[ 2 ] ) {
+	const assert = require( 'assert' );
+
+	assert.equal( shouldCaptureVisualProof( '' ).reason, 'missing-section' );
+	assert.equal( shouldCaptureVisualProof( '## Summary\nHi' ).reason, 'missing-section' );
+	assert.equal(
+		shouldCaptureVisualProof( '## Visual proof\n#skip_proof\nDocs only.' ).reason,
+		'skip-proof',
+	);
+	assert.equal(
+		shouldCaptureVisualProof( '## Visual proof\n**Where:** Editor\n**Steps:** click' ).capture,
+		true,
+	);
+	assert.equal(
+		extractBrokenCaption( '**Broken:** Z-index stayed disabled.\n**Where:** Editor' ),
+		'Z-index stayed disabled.',
+	);
+	assert.ok(
+		buildOverlayCaption(
+			'**Broken:** Z-index stayed disabled.\n**Where:** Style → Position\n**Steps:** set Absolute then Z-index 5',
+		).includes( 'Steps: set Absolute then Z-index 5' ),
+	);
+
+	const withGitstream = [
+		'## Visual proof',
+		'**Steps:** open editor',
+		'<!--start_gitstream_placeholder-->',
+		'## 1. Problem',
+	].join( '\n' );
+	assert.ok( ! extractVisualProofSection( withGitstream ).includes( 'Problem' ) );
+
+	console.log( 'visual-proof parse tests passed' );
+}
diff --git a/actions/visual-proof/playground.cjs b/actions/visual-proof/playground.cjs
new file mode 100644
index 000000000..b48b499a5
--- /dev/null
+++ b/actions/visual-proof/playground.cjs
@@ -0,0 +1,134 @@
+'use strict';
+
+const { chromium } = require( 'playwright' );
+const fs = require( 'fs' );
+const path = require( 'path' );
+
+const OUT_DIR = process.env.VISUAL_PROOF_OUT_DIR || 'visual-proof-shots';
+const OVERLAY_FILE = process.env.VISUAL_PROOF_OVERLAY_FILE || '';
+const BROKEN_CAPTION = process.env.VISUAL_PROOF_BROKEN || '';
+
+function log( message ) {
+	console.log( `[visual-proof:play] ${ message }` );
+}
+
+function overlayText() {
+	if ( OVERLAY_FILE && fs.existsSync( OVERLAY_FILE ) ) {
+		const fromFile = fs.readFileSync( OVERLAY_FILE, 'utf8' ).trim();
+		if ( fromFile ) {
+			return fromFile;
+		}
+	}
+	return BROKEN_CAPTION || 'Playground ready';
+}
+
+async function waitForWpFrame( page ) {
+	for ( let attempt = 0; attempt < 45; attempt++ ) {
+		const frame = page.frame( { name: 'wp' } );
+		if ( frame ) {
+			const url = frame.url();
+			const looksReady = url.includes( '/scope:' ) || url.includes( 'wp-admin' ) || url.includes( 'wp-login' );
+			if ( looksReady ) {
+				const hasBody = await frame.evaluate( () => Boolean( document.body && document.body.innerHTML.length > 20 ) ).catch( () => false );
+				if ( hasBody ) {
+					log( `frame ready attempt=${ attempt + 1 } url=${ url }` );
+					return frame;
+				}
+			}
+		}
+		await page.waitForTimeout( 2000 );
+	}
+
+	throw new Error( 'Playground WordPress frame did not become ready after 45 attempts' );
+}
+
+async function addCaption( page, text ) {
+	if ( ! text ) {
+		return;
+	}
+
+	await page.evaluate( ( caption ) => {
+		let bar = document.getElementById( 'e-visual-proof-caption' );
+		if ( ! bar ) {
+			bar = document.createElement( 'div' );
+			bar.id = 'e-visual-proof-caption';
+			bar.style.cssText = 'position:fixed;left:0;right:0;bottom:0;z-index:2147483647;padding:12px 16px;background:#1f2937;color:#fff;font:14px/1.4 sans-serif;white-space:pre-wrap;max-height:28%;overflow:hidden;';
+			document.body.appendChild( bar );
+		}
+		bar.textContent = caption;
+	}, text );
+}
+
+async function clickFirst( frame, role, name ) {
+	const locator = frame.getByRole( role, { name, exact: false } );
+	if ( 0 === await locator.count() ) {
+		return false;
+	}
+	await locator.first().click( { timeout: 15000 } );
+	return true;
+}
+
+async function clickFirstInWp( page, role, name ) {
+	const frame = await waitForWpFrame( page );
+	const ok = await clickFirst( frame, role, name );
+	log( `click role=${ role } name=${ name } ${ ok ? 'success' : 'fail' }` );
+	return ok;
+}
+
+async function launchRecordedBrowser() {
+	fs.mkdirSync( OUT_DIR, { recursive: true } );
+	const videoDir = path.join( OUT_DIR, 'video-raw' );
+	fs.mkdirSync( videoDir, { recursive: true } );
+	const browser = await chromium.launch( { headless: true } );
+	const context = await browser.newContext( {
+		viewport: { width: 1440, height: 900 },
+		recordVideo: { dir: videoDir, size: { width: 1440, height: 900 } },
+	} );
+	const page = await context.newPage();
+	return { browser, context, page };
+}
+
+async function saveRecording( page ) {
+	const context = page.context();
+	const video = page.video();
+	await page.close();
+	await context.close();
+	if ( ! video ) {
+		log( 'video recorder not attached' );
+		return;
+	}
+
+	const rawPath = await video.path();
+	if ( ! rawPath || ! fs.existsSync( rawPath ) ) {
+		log( 'video file missing after context close' );
+		return;
+	}
+
+	const dest = path.join( OUT_DIR, 'visual-proof.webm' );
+	fs.copyFileSync( rawPath, dest );
+	log( `video path=${ dest }` );
+}
+
+async function screenshot( page, shots, name, maxShots ) {
+	const cap = maxShots || 6;
+	if ( shots.length >= cap ) {
+		log( `screenshot skipped name=${ name } (max ${ cap })` );
+		return;
+	}
+	const file = path.join( OUT_DIR, `${ String( shots.length + 1 ).padStart( 2, '0' ) }-${ name }.png` );
+	await page.screenshot( { path: file, fullPage: false } );
+	shots.push( file );
+	log( `screenshot path=${ file }` );
+}
+
+module.exports = {
+	OUT_DIR,
+	log,
+	overlayText,
+	waitForWpFrame,
+	addCaption,
+	clickFirstInWp,
+	launchRecordedBrowser,
+	saveRecording,
+	screenshot,
+};
diff --git a/actions/visual-proof/post-comment.sh b/actions/visual-proof/post-comment.sh
new file mode 100755
index 000000000..33b6c63d4
--- /dev/null
+++ b/actions/visual-proof/post-comment.sh
@@ -0,0 +1,171 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Upload PNGs to ci/visual-proof-assets and comment on the PR.
+# Modeled on Angie videoproof/post-comment.sh (inline images via raw git URLs).
+
+ARTIFACTS_DIR="${VISUAL_PROOF_OUT_DIR:-visual-proof-shots}"
+MARKER="<!-- visual-proof-ci -->"
+ASSETS_BRANCH="ci/visual-proof-assets"
+MAX_SHOTS="${VISUAL_PROOF_MAX_SHOTS:-6}"
+MAX_VIDEO_BYTES="${VISUAL_PROOF_MAX_VIDEO_BYTES:-40000000}"
+
+log() {
+	echo "[visual-proof:comment] $*"
+}
+
+err() {
+	echo "[visual-proof:comment] $*" >&2
+}
+
+gh_api() {
+	local err_file
+	err_file=$(mktemp)
+	if ! gh api "$@" 2>"$err_file"; then
+		err "gh api failed: $*"
+		err "$(cat "$err_file")"
+		rm -f "$err_file"
+		return 1
+	fi
+	rm -f "$err_file"
+}
+
+require_env() {
+	local name="$1"
+	if [[ -z "${!name:-}" ]]; then
+		err "${name} is required"
+		exit 1
+	fi
+}
+
+require_env GITHUB_REPOSITORY
+require_env GITHUB_SERVER_URL
+require_env GITHUB_RUN_ID
+require_env PR_NUMBER
+
+run_url="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"
+
+log "step=start PR_NUMBER=${PR_NUMBER} assets_branch=${ASSETS_BRANCH} ARTIFACTS_DIR=${ARTIFACTS_DIR}"
+
+png_count=0
+if [[ -d "$ARTIFACTS_DIR" ]]; then
+	png_count=$(find "$ARTIFACTS_DIR" -type f -name '*.png' | wc -l | tr -d ' ')
+fi
+log "step=scan png_count=${png_count}"
+
+if [[ ! -d "$ARTIFACTS_DIR" ]] || [[ -z "$(find "$ARTIFACTS_DIR" -type f -name '*.png' -print -quit)" ]]; then
+	log "No PNG shots in ${ARTIFACTS_DIR}; skipping comment"
+	exit 0
+fi
+
+ensure_assets_branch() {
+	if gh_api "repos/${GITHUB_REPOSITORY}/git/ref/heads/${ASSETS_BRANCH}" &>/dev/null; then
+		log "step=assets-branch exists=${ASSETS_BRANCH}"
+		return 0
+	fi
+	log "step=assets-branch creating ${ASSETS_BRANCH}"
+	local default_branch base_sha
+	default_branch=$(gh_api "repos/${GITHUB_REPOSITORY}" --jq .default_branch)
+	base_sha=$(gh_api "repos/${GITHUB_REPOSITORY}/git/ref/heads/${default_branch}" --jq .object.sha)
+	gh_api "repos/${GITHUB_REPOSITORY}/git/refs" \
+		-f ref="refs/heads/${ASSETS_BRANCH}" \
+		-f sha="${base_sha}" >/dev/null
+}
+
+upload_blob() {
+	local local_path="$1"
+	local repo_path="$2"
+	local message="$3"
+	local b64_file payload_file
+
+	b64_file=$(mktemp)
+	payload_file=$(mktemp)
+	base64 -w 0 "$local_path" >"$b64_file"
+	jq -n \
+		--arg message "$message" \
+		--arg branch "${ASSETS_BRANCH}" \
+		--rawfile content "$b64_file" \
+		'{message: $message, content: $content, branch: $branch}' >"$payload_file"
+	if ! gh_api "repos/${GITHUB_REPOSITORY}/contents/${repo_path}" -X PUT --input "$payload_file" >/dev/null; then
+		rm -f "$b64_file" "$payload_file"
+		return 1
+	fi
+	rm -f "$b64_file" "$payload_file"
+	echo "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/raw/${ASSETS_BRANCH}/${repo_path}"
+}
+
+log "step=assets-branch ensuring ${ASSETS_BRANCH}"
+ensure_assets_branch
+
+COMMENT_SECTIONS=()
+COMMENT_SECTIONS+=("${MARKER}")
+COMMENT_SECTIONS+=("## Visual proof")
+COMMENT_SECTIONS+=("")
+if [[ "${VISUAL_PROOF_SOURCE:-fallback}" == "actor" ]]; then
+	COMMENT_SECTIONS+=("Shots and a short recording from this PR’s Playground preview. A storyboard actor followed **Steps** from the PR’s **Visual proof** section (happy path / Pass). Overlay text includes **Broken**; CI does not recreate the bug.")
+else
+	COMMENT_SECTIONS+=("Shots and a short recording from this PR’s Playground preview. Generic walk: WP Admin → Pages → Add New → Edit with Elementor (storyboard actor unavailable or produced no shots). Overlay text comes from the PR’s **Visual proof** section.")
+fi
+COMMENT_SECTIONS+=("")
+
+count=0
+while IFS= read -r -d '' file; do
+	count=$((count + 1))
+	name=$(basename "$file")
+	object_path="ci/visual-proof/pr-${PR_NUMBER}/run-${GITHUB_RUN_ID}/${name}"
+	log "step=upload-png name=${name}"
+	if url=$(upload_blob "$file" "$object_path" "Visual proof shot (PR #${PR_NUMBER}, run ${GITHUB_RUN_ID})"); then
+		COMMENT_SECTIONS+=("**${name}**")
+		COMMENT_SECTIONS+=("![${name}](${url})")
+		COMMENT_SECTIONS+=("")
+	fi
+	if [[ "$count" -ge "$MAX_SHOTS" ]]; then
+		break
+	fi
+done < <(find "$ARTIFACTS_DIR" -type f -name '*.png' -print0 | sort -z)
+
+video_file=""
+if [[ -f "${ARTIFACTS_DIR}/visual-proof.mp4" ]]; then
+	video_file="${ARTIFACTS_DIR}/visual-proof.mp4"
+elif [[ -f "${ARTIFACTS_DIR}/visual-proof.webm" ]]; then
+	video_file="${ARTIFACTS_DIR}/visual-proof.webm"
+fi
+
+if [[ -n "$video_file" ]]; then
+	video_size=$(wc -c < "$video_file" | tr -d ' ')
+	log "step=upload-video file=$(basename "$video_file") bytes=${video_size}"
+	if [[ "$video_size" -le "$MAX_VIDEO_BYTES" ]]; then
+		vname=$(basename "$video_file")
+		vpath="ci/visual-proof/pr-${PR_NUMBER}/run-${GITHUB_RUN_ID}/${vname}"
+		if vurl=$(upload_blob "$video_file" "$vpath" "Visual proof video (PR #${PR_NUMBER}, run ${GITHUB_RUN_ID})"); then
+			COMMENT_SECTIONS+=("**Recording** ([${vname}](${vurl})) — GitHub may not play this inline; download if needed.")
+			COMMENT_SECTIONS+=("")
+		fi
+	else
+		err "step=upload-video skipped (over ${MAX_VIDEO_BYTES} bytes); see workflow artifacts"
+	fi
+fi
+
+COMMENT_SECTIONS+=("_Also on the [workflow run](${run_url})._")
+
+COMMENT_BODY=$(printf '%s\n' "${COMMENT_SECTIONS[@]}")
+
+log "step=find-comment looking for existing visual-proof-ci marker"
+existing_id=$(
+	gh_api "repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments" --paginate \
+		--jq "[.[] | select(.body | contains(\"visual-proof-ci\")) | .id][0] // empty" || true
+)
+
+payload=$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')
+
+if [[ -n "${existing_id:-}" && "${existing_id}" != "null" ]]; then
+	log "step=upsert mode=update comment_id=${existing_id}"
+	echo "$payload" | gh_api "repos/${GITHUB_REPOSITORY}/issues/comments/${existing_id}" -X PATCH --input - >/dev/null
+	log "Updated visual-proof comment ${existing_id} on PR #${PR_NUMBER}"
+else
+	log "step=upsert mode=create"
+	echo "$payload" | gh_api "repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments" --input - >/dev/null
+	log "Posted visual-proof comment on PR #${PR_NUMBER}"
+fi
+
+log "step=done"
diff --git a/actions/visual-proof/run.sh b/actions/visual-proof/run.sh
new file mode 100755
index 000000000..5034bf273
--- /dev/null
+++ b/actions/visual-proof/run.sh
@@ -0,0 +1,171 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="${GITHUB_WORKSPACE:-$(pwd)}"
+OUT_DIR="${VISUAL_PROOF_OUT_DIR:-${REPO_ROOT}/visual-proof-shots}"
+
+log() {
+	echo "[visual-proof] $*"
+}
+
+err() {
+	echo "[visual-proof] $*" >&2
+}
+
+require_env() {
+	local name="$1"
+	if [[ -z "${!name:-}" ]]; then
+		err "step=require-env error=${name} is required"
+		exit 1
+	fi
+}
+
+require_env GH_TOKEN
+require_env GITHUB_REPOSITORY
+require_env PR_NUMBER
+require_env HEAD_SHA
+
+parse_visual_proof_section() {
+	gh pr view "$PR_NUMBER" --repo "$GITHUB_REPOSITORY" --json body --jq .body | node -e '
+	const { shouldCaptureVisualProof, extractBrokenCaption, buildOverlayCaption } = require(process.argv[1]);
+	const fs = require("fs");
+	const body = fs.readFileSync(0, "utf8");
+	const result = shouldCaptureVisualProof(body);
+	const broken = extractBrokenCaption(result.section);
+	const overlay = buildOverlayCaption(result.section);
+	process.stdout.write(JSON.stringify({ ...result, broken, overlay }));
+	' "${SCRIPT_DIR}/parse-section.js"
+}
+
+log "step=start PR_NUMBER=${PR_NUMBER} HEAD_SHA=${HEAD_SHA} GITHUB_REPOSITORY=${GITHUB_REPOSITORY}"
+
+log "step=parse-section about to read PR body via gh|node"
+DECISION=$(parse_visual_proof_section)
+
+# Author job runs in parallel on opened / ready_for_review. Wait for it to
+# write ## Visual proof before skipping capture as missing-section.
+if [[ "$(echo "$DECISION" | jq -r .reason)" == "missing-section" ]]; then
+	log "step=wait-author polling PR body for Visual proof (up to 4 minutes)"
+	for _ in 1 2 3 4 5 6 7 8; do
+		sleep 30
+		DECISION=$(parse_visual_proof_section)
+		REASON=$(echo "$DECISION" | jq -r .reason)
+		log "step=wait-author reason=${REASON}"
+		if [[ "$REASON" != "missing-section" ]]; then
+			break
+		fi
+	done
+fi
+
+REASON=$(echo "$DECISION" | jq -r .reason)
+CAPTURE=$(echo "$DECISION" | jq -r .capture)
+BROKEN=$(echo "$DECISION" | jq -r .broken)
+OVERLAY=$(echo "$DECISION" | jq -r '.overlay // empty')
+
+log "step=parse-section reason=${REASON} capture=${CAPTURE}"
+echo "Visual proof decision: ${REASON}"
+
+if [[ "$CAPTURE" != "true" ]]; then
+	log "step=skip Skipping capture (${REASON})"
+	exit 0
+fi
+
+log "step=resolve-deployment about to list playground-preview deployments for ${HEAD_SHA}"
+DEPLOYMENT_ID=$(
+	gh api "repos/${GITHUB_REPOSITORY}/deployments?environment=playground-preview&sha=${HEAD_SHA}&per_page=5" \
+		--jq '.[0].id // empty'
+)
+
+if [[ -z "${DEPLOYMENT_ID}" ]]; then
+	err "step=resolve-deployment deployment_id=empty"
+	err "No playground-preview deployment for ${HEAD_SHA}"
+	exit 1
+fi
+
+log "step=resolve-deployment deployment_id=${DEPLOYMENT_ID}"
+
+log "step=resolve-url about to list success statuses for deployment ${DEPLOYMENT_ID}"
+PLAYGROUND_URL=$(
+	gh api "repos/${GITHUB_REPOSITORY}/deployments/${DEPLOYMENT_ID}/statuses" \
+		--jq '[.[] | select(.state == "success" and .environment_url != null and .environment_url != "")][0].environment_url // empty'
+)
+
+if [[ -z "$PLAYGROUND_URL" ]]; then
+	err "step=resolve-url PLAYGROUND_URL=empty"
+	err "playground-preview deployment ${DEPLOYMENT_ID} has no success environment_url"
+	exit 1
+fi
+
+log "step=resolve-url PLAYGROUND_URL=${PLAYGROUND_URL}"
+
+mkdir -p "$OUT_DIR"
+printf '%s' "$OVERLAY" > "${OUT_DIR}/overlay.txt"
+echo "$DECISION" | jq -r '.section // empty' > "${OUT_DIR}/section.md"
+export PLAYGROUND_URL
+export VISUAL_PROOF_OUT_DIR="$OUT_DIR"
+export VISUAL_PROOF_BROKEN="$BROKEN"
+export VISUAL_PROOF_OVERLAY_FILE="${OUT_DIR}/overlay.txt"
+export VISUAL_PROOF_SECTION_FILE="${OUT_DIR}/section.md"
+export VISUAL_PROOF_SOURCE="fallback"
+
+png_count() {
+	find "$OUT_DIR" -maxdepth 1 -type f -name '*.png' 2>/dev/null | wc -l | tr -d ' '
+}
+
+cd "$SCRIPT_DIR"
+log "step=npm-install about to install local package.json playwright in ${SCRIPT_DIR} (workspaces off)"
+if ! npm install --no-package-lock --no-fund --workspaces=false --loglevel error; then
+	err "step=npm-install failed"
+	exit 1
+fi
+log "step=npm-install ok"
+
+log "step=playwright-install about to run ./node_modules/.bin/playwright install chromium"
+if ! ./node_modules/.bin/playwright install chromium; then
+	err "step=playwright-install failed"
+	exit 1
+fi
+log "step=playwright-install ok"
+
+cd "$REPO_ROOT"
+
+if [[ -n "${CURSOR_API_KEY:-}" ]]; then
+	log "step=actor about to run act.sh"
+	if bash "${SCRIPT_DIR}/act.sh"; then
+		export VISUAL_PROOF_SOURCE="actor"
+		log "step=actor ok png_count=$(png_count)"
+	else
+		err "step=actor failed; falling back to generic walk"
+	fi
+else
+	log "step=actor skipped (CURSOR_API_KEY empty)"
+fi
+
+if [[ "$(png_count)" -eq 0 ]]; then
+	log "step=capture about to run capture.cjs OUT_DIR=${OUT_DIR}"
+	if ! NODE_PATH="${SCRIPT_DIR}/node_modules" node "${SCRIPT_DIR}/capture.cjs"; then
+		err "step=capture failed"
+		exit 1
+	fi
+	export VISUAL_PROOF_SOURCE="fallback"
+	log "step=capture ok"
+fi
+
+if command -v ffmpeg >/dev/null 2>&1 && [[ -f "${OUT_DIR}/visual-proof.webm" ]]; then
+	log "step=ffmpeg about to transcode visual-proof.webm to mp4"
+	if ffmpeg -y -i "${OUT_DIR}/visual-proof.webm" -an -c:v libx264 -pix_fmt yuv420p "${OUT_DIR}/visual-proof.mp4" >/dev/null 2>&1; then
+		log "step=ffmpeg ok"
+	else
+		err "step=ffmpeg failed (keeping webm)"
+	fi
+fi
+
+export GITHUB_SERVER_URL="${GITHUB_SERVER_URL:-https://github.com}"
+export GITHUB_RUN_ID="${GITHUB_RUN_ID:-0}"
+log "step=post-comment about to run post-comment.sh GITHUB_RUN_ID=${GITHUB_RUN_ID}"
+if ! bash "${SCRIPT_DIR}/post-comment.sh"; then
+	err "step=post-comment failed"
+	exit 1
+fi
+log "step=done"
diff --git a/actions/visual-proof/skill.md b/actions/visual-proof/skill.md
new file mode 100644
index 000000000..72c309b35
--- /dev/null
+++ b/actions/visual-proof/skill.md
@@ -0,0 +1,66 @@
+# Visual proof
+
+This skill is for the **CI author** action. Local Cursor agents should not add
+`## Visual proof` on `gh pr create` or `gh pr edit`. Capturing screenshots is
+not this skill.
+
+## What triggers it
+
+The caller’s `visual-proof-author` workflow runs this action when a same-repo
+PR is **opened** or marked **ready for review**, and only if `## Visual proof`
+is still missing. Capture is a separate `visual-proof-shots` action after
+`playground-preview`.
+
+## Environment
+
+The proof target is the PR’s **playground-preview** deployment in the calling
+repo (Elementor or Elementor Pro), not a local site.
+
+Login: `admin` / `password`. Landing page is `/wp-admin`.
+
+If the bug cannot be shown on that Playground, use `#skip_proof`.
+
+## When to fill vs skip
+
+**Fill** (Broken + Where / Steps / Pass / Fail):
+
+- Jira type `Bug` or `Editor Bug` (or a clear regression fix)
+- User-visible **editor** UI (panel, canvas, navigator, Style / Content)
+- Can be shown on this repo’s Playground
+
+**`#skip_proof`** + one sentence:
+
+- Story / Task / feature
+- No editor UI
+- Needs a plugin Playground does not install
+- Docs or CI
+
+## Rules
+
+1. Write **Steps** the actor can click: short, visible labels, stay in the editor.
+2. Visible in-app labels only. No file paths, no GitHub, no workflow names.
+3. Do not act out the bug. Playground has the **fixed** zip. Put the old
+   behaviour in `**Broken:**`, then show the fixed path.
+
+## PR body
+
+Order: Summary → Test plan → Visual proof → Jira.
+
+### Editor bug
+
+```markdown
+## Visual proof
+**Broken:** <one sentence: what used to happen in the editor>
+**Where:** <editor path using visible labels>
+**Steps:** <happy path on this PR’s Playground>
+**Pass:** <fixed editor behaviour visible>
+**Fail:** <bug still visible>
+```
+
+### Skip
+
+```markdown
+## Visual proof
+#skip_proof
+<One sentence why this cannot be shown on this repo’s Playground editor.>
+```
diff --git a/actions/visual-proof/storyboard-prompt.md b/actions/visual-proof/storyboard-prompt.md
new file mode 100644
index 000000000..ae12e5cc7
--- /dev/null
+++ b/actions/visual-proof/storyboard-prompt.md
@@ -0,0 +1,25 @@
+# Visual proof storyboard actor (CI)
+
+You drive WordPress Playground to **act out the PR’s Visual proof Steps** (the happy path / Pass). You do not recreate the bug. Playground already has this PR’s **fixed** zip.
+
+## Environment
+
+- `PLAYGROUND_URL` — open this. WordPress lives in iframe `name="wp"`. Re-resolve that frame before every click (`waitForWpFrame`).
+- Login only if you see wp-login: `admin` / `password`.
+- Helpers: require `PLAYGROUND_HELPERS` (CommonJS). Use `launchRecordedBrowser`, `waitForWpFrame`, `addCaption`, `clickFirstInWp`, `screenshot`, `saveRecording`, `overlayText`.
+- Storyboard file: `VISUAL_PROOF_SECTION_FILE` (Broken / Where / Steps / Pass / Fail).
+- Output: `VISUAL_PROOF_OUT_DIR`. Write `01-*.png` … (max 6) and finish so `saveRecording` can write `visual-proof.webm`.
+- Playwright is already installed. Run with:
+  `NODE_PATH="$PLAYGROUND_NODE_PATH" node <script>`
+
+## What to do
+
+1. Read the section file. Follow **Steps**, then show **Pass**. Ignore **Fail**. Put **Broken** only in the caption via `overlayText()`, not by reproducing it.
+2. Write `VISUAL_PROOF_OUT_DIR/actor.cjs` that performs those clicks using the helpers (not the generic Admin→Pages walk unless Steps say so).
+3. Run that script. Do not stop until at least one PNG exists in `VISUAL_PROOF_OUT_DIR`.
+4. Use visible on-screen labels only. Stay inside the editor once it is open.
+5. Never print secrets. Never edit the git repo. Never `gh pr edit`.
+
+## Done
+
+Print `storyboard-actor done` and the PNG count.

From d18c218b37d1bec60d07ad622a069dead0131721 Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 14:30:08 +0300
Subject: [PATCH 2/8] fix: Avoid CodeQL injection on github.action_path
 [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 actions/visual-proof-author/README.md         |   2 +-
 actions/visual-proof-author/action.yml        |   2 +-
 .../author-prompt.md                          |   0
 .../author.sh                                 |   0
 .../examples.md                               |   0
 .../parse-section.js                          |   0
 .../skill.md                                  |   0
 .../.gitignore                                |   0
 .../act.sh                                    |   0
 actions/visual-proof-shots/action.yml         |   4 +-
 .../capture.cjs                               |   0
 .../package.json                              |   0
 actions/visual-proof-shots/parse-section.js   | 116 ++++++++++++++++++
 .../playground.cjs                            |   0
 .../post-comment.sh                           |   0
 .../run.sh                                    |   0
 .../storyboard-prompt.md                      |   0
 actions/visual-proof/README.md                |  12 --
 18 files changed, 120 insertions(+), 16 deletions(-)
 rename actions/{visual-proof => visual-proof-author}/author-prompt.md (100%)
 rename actions/{visual-proof => visual-proof-author}/author.sh (100%)
 rename actions/{visual-proof => visual-proof-author}/examples.md (100%)
 rename actions/{visual-proof => visual-proof-author}/parse-section.js (100%)
 rename actions/{visual-proof => visual-proof-author}/skill.md (100%)
 rename actions/{visual-proof => visual-proof-shots}/.gitignore (100%)
 rename actions/{visual-proof => visual-proof-shots}/act.sh (100%)
 rename actions/{visual-proof => visual-proof-shots}/capture.cjs (100%)
 rename actions/{visual-proof => visual-proof-shots}/package.json (100%)
 create mode 100644 actions/visual-proof-shots/parse-section.js
 rename actions/{visual-proof => visual-proof-shots}/playground.cjs (100%)
 rename actions/{visual-proof => visual-proof-shots}/post-comment.sh (100%)
 rename actions/{visual-proof => visual-proof-shots}/run.sh (100%)
 rename actions/{visual-proof => visual-proof-shots}/storyboard-prompt.md (100%)
 delete mode 100644 actions/visual-proof/README.md

diff --git a/actions/visual-proof-author/README.md b/actions/visual-proof-author/README.md
index 3535ce3d1..f430f93ce 100644
--- a/actions/visual-proof-author/README.md
+++ b/actions/visual-proof-author/README.md
@@ -4,7 +4,7 @@ Writes `## Visual proof` on a PR body when that section is still missing.
 Ported from Core so Elementor and Elementor Pro share one implementation.
 
 If the caller checkout has `.cursor/skills/visual-proof/SKILL.md`, that file
-wins. Otherwise the bundled skill in `actions/visual-proof/skill.md` is used.
+wins. Otherwise the bundled skill in this action’s `skill.md` is used.
 
 ## Usage
 
diff --git a/actions/visual-proof-author/action.yml b/actions/visual-proof-author/action.yml
index 81b3230ee..f852ddc45 100644
--- a/actions/visual-proof-author/action.yml
+++ b/actions/visual-proof-author/action.yml
@@ -63,4 +63,4 @@ runs:
         PRODUCT_NAME: ${{ inputs.product-name }}
         VISUAL_PROOF_SKILL_FILE: ${{ inputs.skill-file }}
         VISUAL_PROOF_EXAMPLES_FILE: ${{ inputs.examples-file }}
-      run: bash "${{ github.action_path }}/../visual-proof/author.sh"
+      run: bash "$GITHUB_ACTION_PATH/author.sh"
diff --git a/actions/visual-proof/author-prompt.md b/actions/visual-proof-author/author-prompt.md
similarity index 100%
rename from actions/visual-proof/author-prompt.md
rename to actions/visual-proof-author/author-prompt.md
diff --git a/actions/visual-proof/author.sh b/actions/visual-proof-author/author.sh
similarity index 100%
rename from actions/visual-proof/author.sh
rename to actions/visual-proof-author/author.sh
diff --git a/actions/visual-proof/examples.md b/actions/visual-proof-author/examples.md
similarity index 100%
rename from actions/visual-proof/examples.md
rename to actions/visual-proof-author/examples.md
diff --git a/actions/visual-proof/parse-section.js b/actions/visual-proof-author/parse-section.js
similarity index 100%
rename from actions/visual-proof/parse-section.js
rename to actions/visual-proof-author/parse-section.js
diff --git a/actions/visual-proof/skill.md b/actions/visual-proof-author/skill.md
similarity index 100%
rename from actions/visual-proof/skill.md
rename to actions/visual-proof-author/skill.md
diff --git a/actions/visual-proof/.gitignore b/actions/visual-proof-shots/.gitignore
similarity index 100%
rename from actions/visual-proof/.gitignore
rename to actions/visual-proof-shots/.gitignore
diff --git a/actions/visual-proof/act.sh b/actions/visual-proof-shots/act.sh
similarity index 100%
rename from actions/visual-proof/act.sh
rename to actions/visual-proof-shots/act.sh
diff --git a/actions/visual-proof-shots/action.yml b/actions/visual-proof-shots/action.yml
index 378704a58..3baeb2fdb 100644
--- a/actions/visual-proof-shots/action.yml
+++ b/actions/visual-proof-shots/action.yml
@@ -40,7 +40,7 @@ runs:
 
     - name: Parse Visual proof section
       shell: bash
-      run: node "${{ github.action_path }}/../visual-proof/parse-section.js" --test
+      run: node "$GITHUB_ACTION_PATH/parse-section.js" --test
 
     - name: Capture Playground shots and comment
       shell: bash
@@ -55,7 +55,7 @@ runs:
         PRODUCT_NAME: ${{ inputs.product-name }}
         GITHUB_SERVER_URL: ${{ github.server_url }}
         GITHUB_RUN_ID: ${{ github.run_id }}
-      run: bash "${{ github.action_path }}/../visual-proof/run.sh"
+      run: bash "$GITHUB_ACTION_PATH/run.sh"
 
     - name: Upload shots artifact
       if: hashFiles('visual-proof-shots/*.png') != ''
diff --git a/actions/visual-proof/capture.cjs b/actions/visual-proof-shots/capture.cjs
similarity index 100%
rename from actions/visual-proof/capture.cjs
rename to actions/visual-proof-shots/capture.cjs
diff --git a/actions/visual-proof/package.json b/actions/visual-proof-shots/package.json
similarity index 100%
rename from actions/visual-proof/package.json
rename to actions/visual-proof-shots/package.json
diff --git a/actions/visual-proof-shots/parse-section.js b/actions/visual-proof-shots/parse-section.js
new file mode 100644
index 000000000..69ea09be0
--- /dev/null
+++ b/actions/visual-proof-shots/parse-section.js
@@ -0,0 +1,116 @@
+'use strict';
+
+const SECTION_HEADING = /^## Visual proof\s*$/m;
+const SKIP_MARKER = /#skip_proof\b/;
+
+function extractVisualProofSection( body ) {
+	if ( 'string' !== typeof body || ! body.trim() ) {
+		return '';
+	}
+
+	const match = body.match( SECTION_HEADING );
+	if ( ! match || undefined === match.index ) {
+		return '';
+	}
+
+	const start = match.index + match[ 0 ].length;
+	const rest = body.slice( start );
+	const next = rest.search( /^##\s|\n<!--start_gitstream/m );
+
+	return ( -1 === next ? rest : rest.slice( 0, next ) ).trim();
+}
+
+function shouldCaptureVisualProof( body ) {
+	const section = extractVisualProofSection( body );
+
+	if ( ! section ) {
+		return { capture: false, reason: 'missing-section', section: '' };
+	}
+
+	if ( SKIP_MARKER.test( section ) ) {
+		return { capture: false, reason: 'skip-proof', section };
+	}
+
+	return { capture: true, reason: 'ready', section };
+}
+
+function extractLabeledField( section, label ) {
+	if ( 'string' !== typeof section || ! section.trim() ) {
+		return '';
+	}
+
+	const escaped = label.replace( /[.*+?^${}()|[\]\\]/g, '\\$&' );
+	const match = section.match( new RegExp( '\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)', 'i' ) );
+	return match ? match[ 1 ].trim() : '';
+}
+
+function extractBrokenCaption( section ) {
+	const match = ( section || '' ).match( /\*\*Broken:\*\*\s*(.+)/i );
+	if ( match ) {
+		return match[ 1 ].trim();
+	}
+	return extractLabeledField( section, 'Broken' );
+}
+
+function buildOverlayCaption( section ) {
+	const broken = extractBrokenCaption( section );
+	const where = extractLabeledField( section, 'Where' );
+	const steps = extractLabeledField( section, 'Steps' ).replace( /\s+/g, ' ' );
+	const parts = [];
+
+	if ( broken ) {
+		parts.push( 'Broken: ' + broken );
+	}
+	if ( where ) {
+		parts.push( 'Where: ' + where );
+	}
+	if ( steps ) {
+		parts.push( 'Steps: ' + steps );
+	}
+
+	const text = parts.join( ' · ' );
+	const max = 700;
+	return text.length > max ? text.slice( 0, max - 1 ) + '…' : text;
+}
+
+module.exports = {
+	extractVisualProofSection,
+	shouldCaptureVisualProof,
+	extractBrokenCaption,
+	extractLabeledField,
+	buildOverlayCaption,
+};
+
+if ( require.main === module && '--test' === process.argv[ 2 ] ) {
+	const assert = require( 'assert' );
+
+	assert.equal( shouldCaptureVisualProof( '' ).reason, 'missing-section' );
+	assert.equal( shouldCaptureVisualProof( '## Summary\nHi' ).reason, 'missing-section' );
+	assert.equal(
+		shouldCaptureVisualProof( '## Visual proof\n#skip_proof\nDocs only.' ).reason,
+		'skip-proof',
+	);
+	assert.equal(
+		shouldCaptureVisualProof( '## Visual proof\n**Where:** Editor\n**Steps:** click' ).capture,
+		true,
+	);
+	assert.equal(
+		extractBrokenCaption( '**Broken:** Z-index stayed disabled.\n**Where:** Editor' ),
+		'Z-index stayed disabled.',
+	);
+	assert.ok(
+		buildOverlayCaption(
+			'**Broken:** Z-index stayed disabled.\n**Where:** Style → Position\n**Steps:** set Absolute then Z-index 5',
+		).includes( 'Steps: set Absolute then Z-index 5' ),
+	);
+
+	const withGitstream = [
+		'## Visual proof',
+		'**Steps:** open editor',
+		'<!--start_gitstream_placeholder-->',
+		'## 1. Problem',
+	].join( '\n' );
+	assert.ok( ! extractVisualProofSection( withGitstream ).includes( 'Problem' ) );
+
+	console.log( 'visual-proof parse tests passed' );
+}
diff --git a/actions/visual-proof/playground.cjs b/actions/visual-proof-shots/playground.cjs
similarity index 100%
rename from actions/visual-proof/playground.cjs
rename to actions/visual-proof-shots/playground.cjs
diff --git a/actions/visual-proof/post-comment.sh b/actions/visual-proof-shots/post-comment.sh
similarity index 100%
rename from actions/visual-proof/post-comment.sh
rename to actions/visual-proof-shots/post-comment.sh
diff --git a/actions/visual-proof/run.sh b/actions/visual-proof-shots/run.sh
similarity index 100%
rename from actions/visual-proof/run.sh
rename to actions/visual-proof-shots/run.sh
diff --git a/actions/visual-proof/storyboard-prompt.md b/actions/visual-proof-shots/storyboard-prompt.md
similarity index 100%
rename from actions/visual-proof/storyboard-prompt.md
rename to actions/visual-proof-shots/storyboard-prompt.md
diff --git a/actions/visual-proof/README.md b/actions/visual-proof/README.md
deleted file mode 100644
index 3829d0dc9..000000000
--- a/actions/visual-proof/README.md
+++ /dev/null
@@ -1,12 +0,0 @@
-# Visual proof
-
-Shared author + Playground recorder for `elementor/elementor` and
-`elementor/elementor-pro`.
-
-Callers keep their own `playground-preview` workflow. This folder is the
-scripts; the composite entrypoints are:
-
-- `actions/visual-proof-author`
-- `actions/visual-proof-shots`
-
-See those READMEs for wrapper workflow YAML.

From 43361d6a586cd68f3186b7b436217606c4caff91 Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 14:36:52 +0300
Subject: [PATCH 3/8] fix: keep visual-proof playwright out of npm workspaces
 [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .prettierignore                         |   2 +
 actions/visual-proof-author/action.yml  | 116 ++++++++++++------------
 actions/visual-proof-shots/.gitignore   |   1 +
 actions/visual-proof-shots/act.sh       |   6 +-
 actions/visual-proof-shots/action.yml   | 114 +++++++++++------------
 actions/visual-proof-shots/package.json |   8 --
 actions/visual-proof-shots/run.sh       |  16 +++-
 eslint.config.mjs                       |   2 +
 8 files changed, 134 insertions(+), 131 deletions(-)
 delete mode 100644 actions/visual-proof-shots/package.json

diff --git a/.prettierignore b/.prettierignore
index db3efa46e..71f4d4e21 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -2,3 +2,5 @@
 **/dist/**
 **/__snapshots__/**
 package-lock.json
+actions/visual-proof-author/**/*.{js,sh}
+actions/visual-proof-shots/**/*.{js,cjs,sh}
diff --git a/actions/visual-proof-author/action.yml b/actions/visual-proof-author/action.yml
index f852ddc45..4503be16a 100644
--- a/actions/visual-proof-author/action.yml
+++ b/actions/visual-proof-author/action.yml
@@ -2,65 +2,65 @@ name: 'Visual proof author'
 description: 'Write ## Visual proof on a PR body when the section is still missing'
 
 inputs:
-  pr-number:
-    description: 'Pull request number'
-    required: true
-  pr-head-sha:
-    description: 'PR head commit SHA'
-    required: true
-  pr-base-sha:
-    description: 'PR base commit SHA'
-    required: true
-  product-name:
-    description: 'Product name (Elementor or Elementor Pro)'
-    required: true
-  cursor-api-key:
-    description: 'Cursor Agent API key'
-    required: true
-  model:
-    description: 'Cursor Agent model'
-    required: false
-    default: ''
-  github-token:
-    description: 'Token with pull-requests:write'
-    required: false
-    default: ${{ github.token }}
-  skill-file:
-    description: 'Optional path to a skill markdown file in the caller workspace'
-    required: false
-    default: ''
-  examples-file:
-    description: 'Optional path to examples markdown in the caller workspace'
-    required: false
-    default: ''
+    pr-number:
+        description: 'Pull request number'
+        required: true
+    pr-head-sha:
+        description: 'PR head commit SHA'
+        required: true
+    pr-base-sha:
+        description: 'PR base commit SHA'
+        required: true
+    product-name:
+        description: 'Product name (Elementor or Elementor Pro)'
+        required: true
+    cursor-api-key:
+        description: 'Cursor Agent API key'
+        required: true
+    model:
+        description: 'Cursor Agent model'
+        required: false
+        default: ''
+    github-token:
+        description: 'Token with pull-requests:write'
+        required: false
+        default: ${{ github.token }}
+    skill-file:
+        description: 'Optional path to a skill markdown file in the caller workspace'
+        required: false
+        default: ''
+    examples-file:
+        description: 'Optional path to examples markdown in the caller workspace'
+        required: false
+        default: ''
 
 runs:
-  using: composite
-  steps:
-    - name: Setup Node.js
-      uses: actions/setup-node@v6
-      with:
-        node-version: 24.15.0
-        package-manager-cache: false
+    using: composite
+    steps:
+        - name: Setup Node.js
+          uses: actions/setup-node@v6
+          with:
+              node-version: 24.15.0
+              package-manager-cache: false
 
-    - name: Install Cursor CLI
-      shell: bash
-      run: |
-        curl https://cursor.com/install -fsS | bash
-        echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
+        - name: Install Cursor CLI
+          shell: bash
+          run: |
+              curl https://cursor.com/install -fsS | bash
+              echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
 
-    - name: Author ## Visual proof if missing
-      shell: bash
-      continue-on-error: true
-      env:
-        GH_TOKEN: ${{ inputs.github-token }}
-        CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
-        GITHUB_REPOSITORY: ${{ github.repository }}
-        PR_NUMBER: ${{ inputs.pr-number }}
-        PR_HEAD_SHA: ${{ inputs.pr-head-sha }}
-        PR_BASE_SHA: ${{ inputs.pr-base-sha }}
-        PR_REVIEW_MODEL: ${{ inputs.model }}
-        PRODUCT_NAME: ${{ inputs.product-name }}
-        VISUAL_PROOF_SKILL_FILE: ${{ inputs.skill-file }}
-        VISUAL_PROOF_EXAMPLES_FILE: ${{ inputs.examples-file }}
-      run: bash "$GITHUB_ACTION_PATH/author.sh"
+        - name: Author ## Visual proof if missing
+          shell: bash
+          continue-on-error: true
+          env:
+              GH_TOKEN: ${{ inputs.github-token }}
+              CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
+              GITHUB_REPOSITORY: ${{ github.repository }}
+              PR_NUMBER: ${{ inputs.pr-number }}
+              PR_HEAD_SHA: ${{ inputs.pr-head-sha }}
+              PR_BASE_SHA: ${{ inputs.pr-base-sha }}
+              PR_REVIEW_MODEL: ${{ inputs.model }}
+              PRODUCT_NAME: ${{ inputs.product-name }}
+              VISUAL_PROOF_SKILL_FILE: ${{ inputs.skill-file }}
+              VISUAL_PROOF_EXAMPLES_FILE: ${{ inputs.examples-file }}
+          run: bash "$GITHUB_ACTION_PATH/author.sh"
diff --git a/actions/visual-proof-shots/.gitignore b/actions/visual-proof-shots/.gitignore
index 0efadbe9b..1d22f4fdc 100644
--- a/actions/visual-proof-shots/.gitignore
+++ b/actions/visual-proof-shots/.gitignore
@@ -1,2 +1,3 @@
 node_modules/
+.npm-playwright/
 video-raw/
diff --git a/actions/visual-proof-shots/act.sh b/actions/visual-proof-shots/act.sh
index 8f925ce97..82a84c024 100755
--- a/actions/visual-proof-shots/act.sh
+++ b/actions/visual-proof-shots/act.sh
@@ -29,6 +29,7 @@ require_env CURSOR_API_KEY
 require_env PLAYGROUND_URL
 require_env VISUAL_PROOF_SECTION_FILE
 require_env VISUAL_PROOF_OUT_DIR
+require_env PLAYGROUND_NODE_PATH
 
 if [[ ! -f "$VISUAL_PROOF_SECTION_FILE" ]]; then
 	err "section file missing: ${VISUAL_PROOF_SECTION_FILE}"
@@ -49,7 +50,7 @@ DYNAMIC_CONTEXT=$(cat << EOF
 ## Runtime
 - PLAYGROUND_URL: ${PLAYGROUND_URL}
 - PLAYGROUND_HELPERS: ${SCRIPT_DIR}/playground.cjs
-- PLAYGROUND_NODE_PATH: ${SCRIPT_DIR}/node_modules
+- PLAYGROUND_NODE_PATH: ${PLAYGROUND_NODE_PATH}
 - VISUAL_PROOF_OUT_DIR: ${OUT_DIR}
 - VISUAL_PROOF_SECTION_FILE: ${VISUAL_PROOF_SECTION_FILE}
 - VISUAL_PROOF_OVERLAY_FILE: ${VISUAL_PROOF_OVERLAY_FILE:-}
@@ -62,7 +63,6 @@ EOF
 log "step=cursor-agent storyboard actor model=${MODEL:-default}"
 cd "$REPO_ROOT"
 export PLAYGROUND_HELPERS="${SCRIPT_DIR}/playground.cjs"
-export PLAYGROUND_NODE_PATH="${SCRIPT_DIR}/node_modules"
 
 set +e
 if [[ -n "$MODEL" ]]; then
@@ -84,7 +84,7 @@ fi
 
 if [[ "$(png_count)" -eq 0 && -f "${OUT_DIR}/actor.cjs" ]]; then
 	log "step=run-actor.cjs"
-	if ! NODE_PATH="${SCRIPT_DIR}/node_modules" node "${OUT_DIR}/actor.cjs"; then
+	if ! NODE_PATH="${PLAYGROUND_NODE_PATH}" node "${OUT_DIR}/actor.cjs"; then
 		err "step=run-actor.cjs failed"
 		exit 1
 	fi
diff --git a/actions/visual-proof-shots/action.yml b/actions/visual-proof-shots/action.yml
index 3baeb2fdb..281bef6c3 100644
--- a/actions/visual-proof-shots/action.yml
+++ b/actions/visual-proof-shots/action.yml
@@ -2,66 +2,66 @@ name: 'Visual proof shots'
 description: 'Record Playground screenshots and a short clip from ## Visual proof Steps'
 
 inputs:
-  pr-number:
-    description: 'Pull request number'
-    required: true
-  head-sha:
-    description: 'PR head commit SHA used to resolve playground-preview'
-    required: true
-  product-name:
-    description: 'Product name (Elementor or Elementor Pro)'
-    required: true
-  cursor-api-key:
-    description: 'Cursor Agent API key for the storyboard actor'
-    required: true
-  model:
-    description: 'Cursor Agent model'
-    required: false
-    default: ''
-  github-token:
-    description: 'Token with contents:write and pull-requests:write'
-    required: false
-    default: ${{ github.token }}
+    pr-number:
+        description: 'Pull request number'
+        required: true
+    head-sha:
+        description: 'PR head commit SHA used to resolve playground-preview'
+        required: true
+    product-name:
+        description: 'Product name (Elementor or Elementor Pro)'
+        required: true
+    cursor-api-key:
+        description: 'Cursor Agent API key for the storyboard actor'
+        required: true
+    model:
+        description: 'Cursor Agent model'
+        required: false
+        default: ''
+    github-token:
+        description: 'Token with contents:write and pull-requests:write'
+        required: false
+        default: ${{ github.token }}
 
 runs:
-  using: composite
-  steps:
-    - name: Setup Node.js
-      uses: actions/setup-node@v6
-      with:
-        node-version: 24.15.0
-        package-manager-cache: false
+    using: composite
+    steps:
+        - name: Setup Node.js
+          uses: actions/setup-node@v6
+          with:
+              node-version: 24.15.0
+              package-manager-cache: false
 
-    - name: Install Cursor CLI
-      shell: bash
-      run: |
-        curl https://cursor.com/install -fsS | bash
-        echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
+        - name: Install Cursor CLI
+          shell: bash
+          run: |
+              curl https://cursor.com/install -fsS | bash
+              echo "$HOME/.cursor/bin" >> "$GITHUB_PATH"
 
-    - name: Parse Visual proof section
-      shell: bash
-      run: node "$GITHUB_ACTION_PATH/parse-section.js" --test
+        - name: Parse Visual proof section
+          shell: bash
+          run: node "$GITHUB_ACTION_PATH/parse-section.js" --test
 
-    - name: Capture Playground shots and comment
-      shell: bash
-      continue-on-error: true
-      env:
-        GH_TOKEN: ${{ inputs.github-token }}
-        CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
-        GITHUB_REPOSITORY: ${{ github.repository }}
-        PR_NUMBER: ${{ inputs.pr-number }}
-        HEAD_SHA: ${{ inputs.head-sha }}
-        PR_REVIEW_MODEL: ${{ inputs.model }}
-        PRODUCT_NAME: ${{ inputs.product-name }}
-        GITHUB_SERVER_URL: ${{ github.server_url }}
-        GITHUB_RUN_ID: ${{ github.run_id }}
-      run: bash "$GITHUB_ACTION_PATH/run.sh"
+        - name: Capture Playground shots and comment
+          shell: bash
+          continue-on-error: true
+          env:
+              GH_TOKEN: ${{ inputs.github-token }}
+              CURSOR_API_KEY: ${{ inputs.cursor-api-key }}
+              GITHUB_REPOSITORY: ${{ github.repository }}
+              PR_NUMBER: ${{ inputs.pr-number }}
+              HEAD_SHA: ${{ inputs.head-sha }}
+              PR_REVIEW_MODEL: ${{ inputs.model }}
+              PRODUCT_NAME: ${{ inputs.product-name }}
+              GITHUB_SERVER_URL: ${{ github.server_url }}
+              GITHUB_RUN_ID: ${{ github.run_id }}
+          run: bash "$GITHUB_ACTION_PATH/run.sh"
 
-    - name: Upload shots artifact
-      if: hashFiles('visual-proof-shots/*.png') != ''
-      uses: actions/upload-artifact@v7
-      with:
-        name: visual-proof-shots
-        path: visual-proof-shots/
-        if-no-files-found: ignore
-        retention-days: 7
+        - name: Upload shots artifact
+          if: hashFiles('visual-proof-shots/*.png') != ''
+          uses: actions/upload-artifact@v7
+          with:
+              name: visual-proof-shots
+              path: visual-proof-shots/
+              if-no-files-found: ignore
+              retention-days: 7
diff --git a/actions/visual-proof-shots/package.json b/actions/visual-proof-shots/package.json
deleted file mode 100644
index ea996e17d..000000000
--- a/actions/visual-proof-shots/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "name": "elementor-visual-proof-ci",
-  "private": true,
-  "description": "CI-only Playwright install for Visual proof shots. Not part of the plugin workspaces.",
-  "dependencies": {
-    "playwright": "1.55.1"
-  }
-}
diff --git a/actions/visual-proof-shots/run.sh b/actions/visual-proof-shots/run.sh
index 5034bf273..a68a164f9 100755
--- a/actions/visual-proof-shots/run.sh
+++ b/actions/visual-proof-shots/run.sh
@@ -114,15 +114,21 @@ png_count() {
 }
 
 cd "$SCRIPT_DIR"
-log "step=npm-install about to install local package.json playwright in ${SCRIPT_DIR} (workspaces off)"
-if ! npm install --no-package-lock --no-fund --workspaces=false --loglevel error; then
+PLAYWRIGHT_DIR="${SCRIPT_DIR}/.npm-playwright"
+rm -rf "$PLAYWRIGHT_DIR"
+mkdir -p "$PLAYWRIGHT_DIR"
+printf '%s\n' '{"private":true}' > "${PLAYWRIGHT_DIR}/package.json"
+log "step=npm-install about to install playwright in ${PLAYWRIGHT_DIR}"
+if ! ( cd "$PLAYWRIGHT_DIR" && npm install --no-package-lock --no-fund --loglevel error playwright@1.55.1 ); then
 	err "step=npm-install failed"
 	exit 1
 fi
 log "step=npm-install ok"
 
-log "step=playwright-install about to run ./node_modules/.bin/playwright install chromium"
-if ! ./node_modules/.bin/playwright install chromium; then
+export PLAYGROUND_NODE_PATH="${PLAYWRIGHT_DIR}/node_modules"
+
+log "step=playwright-install about to run playwright install chromium"
+if ! "${PLAYGROUND_NODE_PATH}/.bin/playwright" install chromium; then
 	err "step=playwright-install failed"
 	exit 1
 fi
@@ -144,7 +150,7 @@ fi
 
 if [[ "$(png_count)" -eq 0 ]]; then
 	log "step=capture about to run capture.cjs OUT_DIR=${OUT_DIR}"
-	if ! NODE_PATH="${SCRIPT_DIR}/node_modules" node "${SCRIPT_DIR}/capture.cjs"; then
+	if ! NODE_PATH="${PLAYGROUND_NODE_PATH}" node "${SCRIPT_DIR}/capture.cjs"; then
 		err "step=capture failed"
 		exit 1
 	fi
diff --git a/eslint.config.mjs b/eslint.config.mjs
index 0ba0b0664..bb32f3df6 100644
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -20,6 +20,8 @@ export default tseslint.config(
 			'**/dist/**',
 			'**/node_modules/**',
 			'**/__snapshots__/**',
+			'actions/visual-proof-author/**/*.js',
+			'actions/visual-proof-shots/**/*.{js,cjs}',
 		],
 	},
 );

From 59f3cee94e0045e938b5797b09e50e70eb615ad8 Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 14:41:07 +0300
Subject: [PATCH 4/8] style: format visual-proof files with prettier [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 actions/visual-proof-author/examples.md      |   3 +
 actions/visual-proof-author/parse-section.js | 103 ++++++++-------
 actions/visual-proof-author/skill.md         |   2 +
 actions/visual-proof-shots/capture.cjs       |  93 +++++++------
 actions/visual-proof-shots/parse-section.js  | 103 ++++++++-------
 actions/visual-proof-shots/playground.cjs    | 130 +++++++++++--------
 6 files changed, 250 insertions(+), 184 deletions(-)

diff --git a/actions/visual-proof-author/examples.md b/actions/visual-proof-author/examples.md
index 488932de7..e1a57d8ab 100644
--- a/actions/visual-proof-author/examples.md
+++ b/actions/visual-proof-author/examples.md
@@ -4,6 +4,7 @@
 
 ```markdown
 ## Visual proof
+
 **Broken:** Z-index stayed disabled on Tablet when Position was inherited from Desktop.
 **Where:** Edit with Elementor → select a container → Style → Position → device switcher
 **Steps:** on Desktop set Position to Absolute → switch to Tablet → open Style → Position → set Z-index to 5
@@ -15,6 +16,7 @@
 
 ```markdown
 ## Visual proof
+
 #skip_proof
 Task adds a new Style control; visual proof is editor-bugs only.
 ```
@@ -23,6 +25,7 @@ Task adds a new Style control; visual proof is editor-bugs only.
 
 ```markdown
 ## Visual proof
+
 #skip_proof
 Fix needs a plugin that playground-preview does not install.
 ```
diff --git a/actions/visual-proof-author/parse-section.js b/actions/visual-proof-author/parse-section.js
index 69ea09be0..6e3de5498 100644
--- a/actions/visual-proof-author/parse-section.js
+++ b/actions/visual-proof-author/parse-section.js
@@ -3,74 +3,79 @@
 const SECTION_HEADING = /^## Visual proof\s*$/m;
 const SKIP_MARKER = /#skip_proof\b/;
 
-function extractVisualProofSection( body ) {
-	if ( 'string' !== typeof body || ! body.trim() ) {
+function extractVisualProofSection(body) {
+	if ('string' !== typeof body || !body.trim()) {
 		return '';
 	}
 
-	const match = body.match( SECTION_HEADING );
-	if ( ! match || undefined === match.index ) {
+	const match = body.match(SECTION_HEADING);
+	if (!match || undefined === match.index) {
 		return '';
 	}
 
-	const start = match.index + match[ 0 ].length;
-	const rest = body.slice( start );
-	const next = rest.search( /^##\s|\n<!--start_gitstream/m );
+	const start = match.index + match[0].length;
+	const rest = body.slice(start);
+	const next = rest.search(/^##\s|\n<!--start_gitstream/m);
 
-	return ( -1 === next ? rest : rest.slice( 0, next ) ).trim();
+	return (-1 === next ? rest : rest.slice(0, next)).trim();
 }
 
-function shouldCaptureVisualProof( body ) {
-	const section = extractVisualProofSection( body );
+function shouldCaptureVisualProof(body) {
+	const section = extractVisualProofSection(body);
 
-	if ( ! section ) {
+	if (!section) {
 		return { capture: false, reason: 'missing-section', section: '' };
 	}
 
-	if ( SKIP_MARKER.test( section ) ) {
+	if (SKIP_MARKER.test(section)) {
 		return { capture: false, reason: 'skip-proof', section };
 	}
 
 	return { capture: true, reason: 'ready', section };
 }
 
-function extractLabeledField( section, label ) {
-	if ( 'string' !== typeof section || ! section.trim() ) {
+function extractLabeledField(section, label) {
+	if ('string' !== typeof section || !section.trim()) {
 		return '';
 	}
 
-	const escaped = label.replace( /[.*+?^${}()|[\]\\]/g, '\\$&' );
-	const match = section.match( new RegExp( '\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)', 'i' ) );
-	return match ? match[ 1 ].trim() : '';
+	const escaped = label.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+	const match = section.match(
+		new RegExp(
+			'\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)',
+			'i',
+		),
+	);
+	return match ? match[1].trim() : '';
 }
 
-function extractBrokenCaption( section ) {
-	const match = ( section || '' ).match( /\*\*Broken:\*\*\s*(.+)/i );
-	if ( match ) {
-		return match[ 1 ].trim();
+function extractBrokenCaption(section) {
+	const match = (section || '').match(/\*\*Broken:\*\*\s*(.+)/i);
+	if (match) {
+		return match[1].trim();
 	}
-	return extractLabeledField( section, 'Broken' );
+	return extractLabeledField(section, 'Broken');
 }
 
-function buildOverlayCaption( section ) {
-	const broken = extractBrokenCaption( section );
-	const where = extractLabeledField( section, 'Where' );
-	const steps = extractLabeledField( section, 'Steps' ).replace( /\s+/g, ' ' );
+function buildOverlayCaption(section) {
+	const broken = extractBrokenCaption(section);
+	const where = extractLabeledField(section, 'Where');
+	const steps = extractLabeledField(section, 'Steps').replace(/\s+/g, ' ');
 	const parts = [];
 
-	if ( broken ) {
-		parts.push( 'Broken: ' + broken );
+	if (broken) {
+		parts.push('Broken: ' + broken);
 	}
-	if ( where ) {
-		parts.push( 'Where: ' + where );
+	if (where) {
+		parts.push('Where: ' + where);
 	}
-	if ( steps ) {
-		parts.push( 'Steps: ' + steps );
+	if (steps) {
+		parts.push('Steps: ' + steps);
 	}
 
-	const text = parts.join( ' · ' );
+	const text = parts.join(' · ');
 	const max = 700;
-	return text.length > max ? text.slice( 0, max - 1 ) + '…' : text;
+	return text.length > max ? text.slice(0, max - 1) + '…' : text;
 }
 
 module.exports = {
@@ -81,27 +86,35 @@ module.exports = {
 	buildOverlayCaption,
 };
 
-if ( require.main === module && '--test' === process.argv[ 2 ] ) {
-	const assert = require( 'assert' );
+if (require.main === module && '--test' === process.argv[2]) {
+	const assert = require('assert');
 
-	assert.equal( shouldCaptureVisualProof( '' ).reason, 'missing-section' );
-	assert.equal( shouldCaptureVisualProof( '## Summary\nHi' ).reason, 'missing-section' );
+	assert.equal(shouldCaptureVisualProof('').reason, 'missing-section');
+	assert.equal(
+		shouldCaptureVisualProof('## Summary\nHi').reason,
+		'missing-section',
+	);
 	assert.equal(
-		shouldCaptureVisualProof( '## Visual proof\n#skip_proof\nDocs only.' ).reason,
+		shouldCaptureVisualProof('## Visual proof\n#skip_proof\nDocs only.')
+			.reason,
 		'skip-proof',
 	);
 	assert.equal(
-		shouldCaptureVisualProof( '## Visual proof\n**Where:** Editor\n**Steps:** click' ).capture,
+		shouldCaptureVisualProof(
+			'## Visual proof\n**Where:** Editor\n**Steps:** click',
+		).capture,
 		true,
 	);
 	assert.equal(
-		extractBrokenCaption( '**Broken:** Z-index stayed disabled.\n**Where:** Editor' ),
+		extractBrokenCaption(
+			'**Broken:** Z-index stayed disabled.\n**Where:** Editor',
+		),
 		'Z-index stayed disabled.',
 	);
 	assert.ok(
 		buildOverlayCaption(
 			'**Broken:** Z-index stayed disabled.\n**Where:** Style → Position\n**Steps:** set Absolute then Z-index 5',
-		).includes( 'Steps: set Absolute then Z-index 5' ),
+		).includes('Steps: set Absolute then Z-index 5'),
 	);
 
 	const withGitstream = [
@@ -109,8 +122,8 @@ if ( require.main === module && '--test' === process.argv[ 2 ] ) {
 		'**Steps:** open editor',
 		'<!--start_gitstream_placeholder-->',
 		'## 1. Problem',
-	].join( '\n' );
-	assert.ok( ! extractVisualProofSection( withGitstream ).includes( 'Problem' ) );
+	].join('\n');
+	assert.ok(!extractVisualProofSection(withGitstream).includes('Problem'));
 
-	console.log( 'visual-proof parse tests passed' );
+	console.log('visual-proof parse tests passed');
 }
diff --git a/actions/visual-proof-author/skill.md b/actions/visual-proof-author/skill.md
index 72c309b35..7665abf66 100644
--- a/actions/visual-proof-author/skill.md
+++ b/actions/visual-proof-author/skill.md
@@ -50,6 +50,7 @@ Order: Summary → Test plan → Visual proof → Jira.
 
 ```markdown
 ## Visual proof
+
 **Broken:** <one sentence: what used to happen in the editor>
 **Where:** <editor path using visible labels>
 **Steps:** <happy path on this PR’s Playground>
@@ -61,6 +62,7 @@ Order: Summary → Test plan → Visual proof → Jira.
 
 ```markdown
 ## Visual proof
+
 #skip_proof
 <One sentence why this cannot be shown on this repo’s Playground editor.>
 ```
diff --git a/actions/visual-proof-shots/capture.cjs b/actions/visual-proof-shots/capture.cjs
index 159382c84..8742dbf74 100644
--- a/actions/visual-proof-shots/capture.cjs
+++ b/actions/visual-proof-shots/capture.cjs
@@ -1,15 +1,24 @@
 'use strict';
 
-const { launchRecordedBrowser, waitForWpFrame, addCaption, clickFirstInWp, saveRecording, screenshot, overlayText, log } = require( './playground.cjs' );
+const {
+	launchRecordedBrowser,
+	waitForWpFrame,
+	addCaption,
+	clickFirstInWp,
+	saveRecording,
+	screenshot,
+	overlayText,
+	log,
+} = require('./playground.cjs');
 
 const PLAYGROUND_URL = process.env.PLAYGROUND_URL || '';
 const MAX_SHOTS = 3;
 
 async function main() {
-	log( `fallback walk PLAYGROUND_URL present=${ Boolean( PLAYGROUND_URL ) }` );
+	log(`fallback walk PLAYGROUND_URL present=${Boolean(PLAYGROUND_URL)}`);
 
-	if ( ! PLAYGROUND_URL ) {
-		throw new Error( 'PLAYGROUND_URL is required' );
+	if (!PLAYGROUND_URL) {
+		throw new Error('PLAYGROUND_URL is required');
 	}
 
 	const caption = overlayText();
@@ -17,47 +26,57 @@ async function main() {
 	const shots = [];
 
 	try {
-		log( 'start goto' );
-		await page.goto( PLAYGROUND_URL, { waitUntil: 'domcontentloaded', timeout: 120000 } );
-		log( 'goto done' );
-		await waitForWpFrame( page );
-		await addCaption( page, caption );
-		await page.waitForTimeout( 1000 );
-
-		await screenshot( page, shots, 'wp-admin', MAX_SHOTS );
-
-		await clickFirstInWp( page, 'link', 'Pages' );
-		await page.waitForTimeout( 2000 );
-		await waitForWpFrame( page );
-		await screenshot( page, shots, 'pages', MAX_SHOTS );
-
-		const openedEditor = await clickFirstInWp( page, 'link', 'Add New' ) || await clickFirstInWp( page, 'link', 'Add New Page' );
-		if ( openedEditor ) {
-			await page.waitForTimeout( 2000 );
-			await clickFirstInWp( page, 'button', 'Edit with Elementor' ) || await clickFirstInWp( page, 'link', 'Edit with Elementor' );
-			await page.waitForTimeout( 8000 );
-			await waitForWpFrame( page );
-			await screenshot( page, shots, 'elementor-editor', MAX_SHOTS );
+		log('start goto');
+		await page.goto(PLAYGROUND_URL, {
+			waitUntil: 'domcontentloaded',
+			timeout: 120000,
+		});
+		log('goto done');
+		await waitForWpFrame(page);
+		await addCaption(page, caption);
+		await page.waitForTimeout(1000);
+
+		await screenshot(page, shots, 'wp-admin', MAX_SHOTS);
+
+		await clickFirstInWp(page, 'link', 'Pages');
+		await page.waitForTimeout(2000);
+		await waitForWpFrame(page);
+		await screenshot(page, shots, 'pages', MAX_SHOTS);
+
+		const openedEditor =
+			(await clickFirstInWp(page, 'link', 'Add New')) ||
+			(await clickFirstInWp(page, 'link', 'Add New Page'));
+		if (openedEditor) {
+			await page.waitForTimeout(2000);
+			(await clickFirstInWp(page, 'button', 'Edit with Elementor')) ||
+				(await clickFirstInWp(page, 'link', 'Edit with Elementor'));
+			await page.waitForTimeout(8000);
+			await waitForWpFrame(page);
+			await screenshot(page, shots, 'elementor-editor', MAX_SHOTS);
 		} else {
-			log( 'click Add New / Add New Page fail; skipping editor shot' );
+			log('click Add New / Add New Page fail; skipping editor shot');
 		}
 	} finally {
 		try {
-			await saveRecording( page );
-		} catch ( videoError ) {
-			console.error( `[visual-proof:capture] video save failed: ${ videoError.message || videoError }` );
+			await saveRecording(page);
+		} catch (videoError) {
+			console.error(
+				`[visual-proof:capture] video save failed: ${videoError.message || videoError}`,
+			);
 		}
 		await browser.close();
 	}
 
-	log( `final shot count=${ shots.length }` );
-	if ( 0 === shots.length ) {
-		throw new Error( 'No screenshots were captured (zero PNG files written)' );
+	log(`final shot count=${shots.length}`);
+	if (0 === shots.length) {
+		throw new Error(
+			'No screenshots were captured (zero PNG files written)',
+		);
 	}
 }
 
-main().catch( ( error ) => {
-	console.error( `[visual-proof:capture] ${ error.message || error }` );
-	console.error( error );
-	process.exit( 1 );
-} );
+main().catch((error) => {
+	console.error(`[visual-proof:capture] ${error.message || error}`);
+	console.error(error);
+	process.exit(1);
+});
diff --git a/actions/visual-proof-shots/parse-section.js b/actions/visual-proof-shots/parse-section.js
index 69ea09be0..6e3de5498 100644
--- a/actions/visual-proof-shots/parse-section.js
+++ b/actions/visual-proof-shots/parse-section.js
@@ -3,74 +3,79 @@
 const SECTION_HEADING = /^## Visual proof\s*$/m;
 const SKIP_MARKER = /#skip_proof\b/;
 
-function extractVisualProofSection( body ) {
-	if ( 'string' !== typeof body || ! body.trim() ) {
+function extractVisualProofSection(body) {
+	if ('string' !== typeof body || !body.trim()) {
 		return '';
 	}
 
-	const match = body.match( SECTION_HEADING );
-	if ( ! match || undefined === match.index ) {
+	const match = body.match(SECTION_HEADING);
+	if (!match || undefined === match.index) {
 		return '';
 	}
 
-	const start = match.index + match[ 0 ].length;
-	const rest = body.slice( start );
-	const next = rest.search( /^##\s|\n<!--start_gitstream/m );
+	const start = match.index + match[0].length;
+	const rest = body.slice(start);
+	const next = rest.search(/^##\s|\n<!--start_gitstream/m);
 
-	return ( -1 === next ? rest : rest.slice( 0, next ) ).trim();
+	return (-1 === next ? rest : rest.slice(0, next)).trim();
 }
 
-function shouldCaptureVisualProof( body ) {
-	const section = extractVisualProofSection( body );
+function shouldCaptureVisualProof(body) {
+	const section = extractVisualProofSection(body);
 
-	if ( ! section ) {
+	if (!section) {
 		return { capture: false, reason: 'missing-section', section: '' };
 	}
 
-	if ( SKIP_MARKER.test( section ) ) {
+	if (SKIP_MARKER.test(section)) {
 		return { capture: false, reason: 'skip-proof', section };
 	}
 
 	return { capture: true, reason: 'ready', section };
 }
 
-function extractLabeledField( section, label ) {
-	if ( 'string' !== typeof section || ! section.trim() ) {
+function extractLabeledField(section, label) {
+	if ('string' !== typeof section || !section.trim()) {
 		return '';
 	}
 
-	const escaped = label.replace( /[.*+?^${}()|[\]\\]/g, '\\$&' );
-	const match = section.match( new RegExp( '\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)', 'i' ) );
-	return match ? match[ 1 ].trim() : '';
+	const escaped = label.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+	const match = section.match(
+		new RegExp(
+			'\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)',
+			'i',
+		),
+	);
+	return match ? match[1].trim() : '';
 }
 
-function extractBrokenCaption( section ) {
-	const match = ( section || '' ).match( /\*\*Broken:\*\*\s*(.+)/i );
-	if ( match ) {
-		return match[ 1 ].trim();
+function extractBrokenCaption(section) {
+	const match = (section || '').match(/\*\*Broken:\*\*\s*(.+)/i);
+	if (match) {
+		return match[1].trim();
 	}
-	return extractLabeledField( section, 'Broken' );
+	return extractLabeledField(section, 'Broken');
 }
 
-function buildOverlayCaption( section ) {
-	const broken = extractBrokenCaption( section );
-	const where = extractLabeledField( section, 'Where' );
-	const steps = extractLabeledField( section, 'Steps' ).replace( /\s+/g, ' ' );
+function buildOverlayCaption(section) {
+	const broken = extractBrokenCaption(section);
+	const where = extractLabeledField(section, 'Where');
+	const steps = extractLabeledField(section, 'Steps').replace(/\s+/g, ' ');
 	const parts = [];
 
-	if ( broken ) {
-		parts.push( 'Broken: ' + broken );
+	if (broken) {
+		parts.push('Broken: ' + broken);
 	}
-	if ( where ) {
-		parts.push( 'Where: ' + where );
+	if (where) {
+		parts.push('Where: ' + where);
 	}
-	if ( steps ) {
-		parts.push( 'Steps: ' + steps );
+	if (steps) {
+		parts.push('Steps: ' + steps);
 	}
 
-	const text = parts.join( ' · ' );
+	const text = parts.join(' · ');
 	const max = 700;
-	return text.length > max ? text.slice( 0, max - 1 ) + '…' : text;
+	return text.length > max ? text.slice(0, max - 1) + '…' : text;
 }
 
 module.exports = {
@@ -81,27 +86,35 @@ module.exports = {
 	buildOverlayCaption,
 };
 
-if ( require.main === module && '--test' === process.argv[ 2 ] ) {
-	const assert = require( 'assert' );
+if (require.main === module && '--test' === process.argv[2]) {
+	const assert = require('assert');
 
-	assert.equal( shouldCaptureVisualProof( '' ).reason, 'missing-section' );
-	assert.equal( shouldCaptureVisualProof( '## Summary\nHi' ).reason, 'missing-section' );
+	assert.equal(shouldCaptureVisualProof('').reason, 'missing-section');
+	assert.equal(
+		shouldCaptureVisualProof('## Summary\nHi').reason,
+		'missing-section',
+	);
 	assert.equal(
-		shouldCaptureVisualProof( '## Visual proof\n#skip_proof\nDocs only.' ).reason,
+		shouldCaptureVisualProof('## Visual proof\n#skip_proof\nDocs only.')
+			.reason,
 		'skip-proof',
 	);
 	assert.equal(
-		shouldCaptureVisualProof( '## Visual proof\n**Where:** Editor\n**Steps:** click' ).capture,
+		shouldCaptureVisualProof(
+			'## Visual proof\n**Where:** Editor\n**Steps:** click',
+		).capture,
 		true,
 	);
 	assert.equal(
-		extractBrokenCaption( '**Broken:** Z-index stayed disabled.\n**Where:** Editor' ),
+		extractBrokenCaption(
+			'**Broken:** Z-index stayed disabled.\n**Where:** Editor',
+		),
 		'Z-index stayed disabled.',
 	);
 	assert.ok(
 		buildOverlayCaption(
 			'**Broken:** Z-index stayed disabled.\n**Where:** Style → Position\n**Steps:** set Absolute then Z-index 5',
-		).includes( 'Steps: set Absolute then Z-index 5' ),
+		).includes('Steps: set Absolute then Z-index 5'),
 	);
 
 	const withGitstream = [
@@ -109,8 +122,8 @@ if ( require.main === module && '--test' === process.argv[ 2 ] ) {
 		'**Steps:** open editor',
 		'<!--start_gitstream_placeholder-->',
 		'## 1. Problem',
-	].join( '\n' );
-	assert.ok( ! extractVisualProofSection( withGitstream ).includes( 'Problem' ) );
+	].join('\n');
+	assert.ok(!extractVisualProofSection(withGitstream).includes('Problem'));
 
-	console.log( 'visual-proof parse tests passed' );
+	console.log('visual-proof parse tests passed');
 }
diff --git a/actions/visual-proof-shots/playground.cjs b/actions/visual-proof-shots/playground.cjs
index b48b499a5..78f909a6d 100644
--- a/actions/visual-proof-shots/playground.cjs
+++ b/actions/visual-proof-shots/playground.cjs
@@ -1,124 +1,140 @@
 'use strict';
 
-const { chromium } = require( 'playwright' );
-const fs = require( 'fs' );
-const path = require( 'path' );
+const { chromium } = require('playwright');
+const fs = require('fs');
+const path = require('path');
 
 const OUT_DIR = process.env.VISUAL_PROOF_OUT_DIR || 'visual-proof-shots';
 const OVERLAY_FILE = process.env.VISUAL_PROOF_OVERLAY_FILE || '';
 const BROKEN_CAPTION = process.env.VISUAL_PROOF_BROKEN || '';
 
-function log( message ) {
-	console.log( `[visual-proof:play] ${ message }` );
+function log(message) {
+	console.log(`[visual-proof:play] ${message}`);
 }
 
 function overlayText() {
-	if ( OVERLAY_FILE && fs.existsSync( OVERLAY_FILE ) ) {
-		const fromFile = fs.readFileSync( OVERLAY_FILE, 'utf8' ).trim();
-		if ( fromFile ) {
+	if (OVERLAY_FILE && fs.existsSync(OVERLAY_FILE)) {
+		const fromFile = fs.readFileSync(OVERLAY_FILE, 'utf8').trim();
+		if (fromFile) {
 			return fromFile;
 		}
 	}
 	return BROKEN_CAPTION || 'Playground ready';
 }
 
-async function waitForWpFrame( page ) {
-	for ( let attempt = 0; attempt < 45; attempt++ ) {
-		const frame = page.frame( { name: 'wp' } );
-		if ( frame ) {
+async function waitForWpFrame(page) {
+	for (let attempt = 0; attempt < 45; attempt++) {
+		const frame = page.frame({ name: 'wp' });
+		if (frame) {
 			const url = frame.url();
-			const looksReady = url.includes( '/scope:' ) || url.includes( 'wp-admin' ) || url.includes( 'wp-login' );
-			if ( looksReady ) {
-				const hasBody = await frame.evaluate( () => Boolean( document.body && document.body.innerHTML.length > 20 ) ).catch( () => false );
-				if ( hasBody ) {
-					log( `frame ready attempt=${ attempt + 1 } url=${ url }` );
+			const looksReady =
+				url.includes('/scope:') ||
+				url.includes('wp-admin') ||
+				url.includes('wp-login');
+			if (looksReady) {
+				const hasBody = await frame
+					.evaluate(() =>
+						Boolean(
+							document.body &&
+							document.body.innerHTML.length > 20,
+						),
+					)
+					.catch(() => false);
+				if (hasBody) {
+					log(`frame ready attempt=${attempt + 1} url=${url}`);
 					return frame;
 				}
 			}
 		}
-		await page.waitForTimeout( 2000 );
+		await page.waitForTimeout(2000);
 	}
 
-	throw new Error( 'Playground WordPress frame did not become ready after 45 attempts' );
+	throw new Error(
+		'Playground WordPress frame did not become ready after 45 attempts',
+	);
 }
 
-async function addCaption( page, text ) {
-	if ( ! text ) {
+async function addCaption(page, text) {
+	if (!text) {
 		return;
 	}
 
-	await page.evaluate( ( caption ) => {
-		let bar = document.getElementById( 'e-visual-proof-caption' );
-		if ( ! bar ) {
-			bar = document.createElement( 'div' );
+	await page.evaluate((caption) => {
+		let bar = document.getElementById('e-visual-proof-caption');
+		if (!bar) {
+			bar = document.createElement('div');
 			bar.id = 'e-visual-proof-caption';
-			bar.style.cssText = 'position:fixed;left:0;right:0;bottom:0;z-index:2147483647;padding:12px 16px;background:#1f2937;color:#fff;font:14px/1.4 sans-serif;white-space:pre-wrap;max-height:28%;overflow:hidden;';
-			document.body.appendChild( bar );
+			bar.style.cssText =
+				'position:fixed;left:0;right:0;bottom:0;z-index:2147483647;padding:12px 16px;background:#1f2937;color:#fff;font:14px/1.4 sans-serif;white-space:pre-wrap;max-height:28%;overflow:hidden;';
+			document.body.appendChild(bar);
 		}
 		bar.textContent = caption;
-	}, text );
+	}, text);
 }
 
-async function clickFirst( frame, role, name ) {
-	const locator = frame.getByRole( role, { name, exact: false } );
-	if ( 0 === await locator.count() ) {
+async function clickFirst(frame, role, name) {
+	const locator = frame.getByRole(role, { name, exact: false });
+	if (0 === (await locator.count())) {
 		return false;
 	}
-	await locator.first().click( { timeout: 15000 } );
+	await locator.first().click({ timeout: 15000 });
 	return true;
 }
 
-async function clickFirstInWp( page, role, name ) {
-	const frame = await waitForWpFrame( page );
-	const ok = await clickFirst( frame, role, name );
-	log( `click role=${ role } name=${ name } ${ ok ? 'success' : 'fail' }` );
+async function clickFirstInWp(page, role, name) {
+	const frame = await waitForWpFrame(page);
+	const ok = await clickFirst(frame, role, name);
+	log(`click role=${role} name=${name} ${ok ? 'success' : 'fail'}`);
 	return ok;
 }
 
 async function launchRecordedBrowser() {
-	fs.mkdirSync( OUT_DIR, { recursive: true } );
-	const videoDir = path.join( OUT_DIR, 'video-raw' );
-	fs.mkdirSync( videoDir, { recursive: true } );
-	const browser = await chromium.launch( { headless: true } );
-	const context = await browser.newContext( {
+	fs.mkdirSync(OUT_DIR, { recursive: true });
+	const videoDir = path.join(OUT_DIR, 'video-raw');
+	fs.mkdirSync(videoDir, { recursive: true });
+	const browser = await chromium.launch({ headless: true });
+	const context = await browser.newContext({
 		viewport: { width: 1440, height: 900 },
 		recordVideo: { dir: videoDir, size: { width: 1440, height: 900 } },
-	} );
+	});
 	const page = await context.newPage();
 	return { browser, context, page };
 }
 
-async function saveRecording( page ) {
+async function saveRecording(page) {
 	const context = page.context();
 	const video = page.video();
 	await page.close();
 	await context.close();
-	if ( ! video ) {
-		log( 'video recorder not attached' );
+	if (!video) {
+		log('video recorder not attached');
 		return;
 	}
 
 	const rawPath = await video.path();
-	if ( ! rawPath || ! fs.existsSync( rawPath ) ) {
-		log( 'video file missing after context close' );
+	if (!rawPath || !fs.existsSync(rawPath)) {
+		log('video file missing after context close');
 		return;
 	}
 
-	const dest = path.join( OUT_DIR, 'visual-proof.webm' );
-	fs.copyFileSync( rawPath, dest );
-	log( `video path=${ dest }` );
+	const dest = path.join(OUT_DIR, 'visual-proof.webm');
+	fs.copyFileSync(rawPath, dest);
+	log(`video path=${dest}`);
 }
 
-async function screenshot( page, shots, name, maxShots ) {
+async function screenshot(page, shots, name, maxShots) {
 	const cap = maxShots || 6;
-	if ( shots.length >= cap ) {
-		log( `screenshot skipped name=${ name } (max ${ cap })` );
+	if (shots.length >= cap) {
+		log(`screenshot skipped name=${name} (max ${cap})`);
 		return;
 	}
-	const file = path.join( OUT_DIR, `${ String( shots.length + 1 ).padStart( 2, '0' ) }-${ name }.png` );
-	await page.screenshot( { path: file, fullPage: false } );
-	shots.push( file );
-	log( `screenshot path=${ file }` );
+	const file = path.join(
+		OUT_DIR,
+		`${String(shots.length + 1).padStart(2, '0')}-${name}.png`,
+	);
+	await page.screenshot({ path: file, fullPage: false });
+	shots.push(file);
+	log(`screenshot path=${file}`);
 }
 
 module.exports = {

From 322fd7f98dc7270244371772fe12967ccff830f3 Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 14:44:19 +0300
Subject: [PATCH 5/8] style: ignore visual-proof scripts in prettier [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .prettierignore | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.prettierignore b/.prettierignore
index 71f4d4e21..42545e478 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -2,5 +2,9 @@
 **/dist/**
 **/__snapshots__/**
 package-lock.json
-actions/visual-proof-author/**/*.{js,sh}
-actions/visual-proof-shots/**/*.{js,cjs,sh}
+actions/visual-proof-author/*.js
+actions/visual-proof-author/*.sh
+actions/visual-proof-shots/*.js
+actions/visual-proof-shots/*.cjs
+actions/visual-proof-shots/*.sh
+

From 3b3c15b230ab45cc32125bfa4159fb6bb236080f Mon Sep 17 00:00:00 2001
From: David Seveloff <davids@elementor.com>
Date: Thu, 17 Sep 2026 16:01:58 +0300
Subject: [PATCH 6/8] docs: Run visual-proof-shots when a draft is marked ready
 [ED-25578]

Ref: ED-25578
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 actions/visual-proof-shots/README.md | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/actions/visual-proof-shots/README.md b/actions/visual-proof-shots/README.md
index d7263d6d3..4fec5adb9 100644
--- a/actions/visual-proof-shots/README.md
+++ b/actions/visual-proof-shots/README.md
@@ -1,6 +1,10 @@
 # Visual proof shots
 
 After `playground-preview` succeeds, records Playground PNGs and a short clip.
+When the caller skips Playground on `ready_for_review` (draft marked ready),
+the job should still run if a `playground-preview` deployment already exists
+for the head SHA.
+
 A Cursor storyboard actor follows **Steps**; if that produces no shots, CI
 falls back to Pages → Add New → Edit with Elementor.
 
@@ -15,11 +19,13 @@ visual-proof-shots:
   needs: [playground-preview]
   if: |
     always() &&
-    needs.playground-preview.result == 'success' &&
     github.event.pull_request.draft == false &&
-    github.event.action != 'ready_for_review' &&
     github.event.action != 'labeled' &&
-    github.event.pull_request.head.repo.full_name == github.repository
+    github.event.pull_request.head.repo.full_name == github.repository &&
+    (
+      needs.playground-preview.result == 'success' ||
+      github.event.action == 'ready_for_review'
+    )
   runs-on: ubuntu-22.04
   timeout-minutes: 25
   permissions:

From d44fcedc6ac349a709d176e243bb35b0b0ba755f Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 17 Sep 2026 13:24:21 +0000
Subject: [PATCH 7/8] Fix visual-proof actions: shared CJS parser, strict
 upsert, security docs

- Rename parse-section.js to shared parse-section.cjs (fixes ESM/CJS conflict)
- Update all references in author.sh, run.sh, and action.yml test steps
- Fix post-comment.sh: remove || true, match full HTML marker for upsert
- Document same-repo-only / unsandboxed actor risk in act.sh
- Document intentional continue-on-error behavior in author README
- Switch all action.yml to use $ACTION_PATH env var (CodeQL-safe pattern)

Ref: ED-25578
Addresses review feedback from Ntnelbaba on PR #55

Co-authored-by: Davids Seveloff <davseve@users.noreply.github.com>
---
 actions/visual-proof-author/README.md         |   7 +
 actions/visual-proof-author/action.yml        |   3 +-
 actions/visual-proof-author/author.sh         |   4 +-
 actions/visual-proof-shots/act.sh             |   4 +
 actions/visual-proof-shots/action.yml         |   7 +-
 actions/visual-proof-shots/parse-section.js   | 129 ------------------
 actions/visual-proof-shots/post-comment.sh    |   2 +-
 actions/visual-proof-shots/run.sh             |   2 +-
 .../parse-section.cjs}                        |   0
 9 files changed, 22 insertions(+), 136 deletions(-)
 delete mode 100644 actions/visual-proof-shots/parse-section.js
 rename actions/{visual-proof-author/parse-section.js => visual-proof/parse-section.cjs} (100%)

diff --git a/actions/visual-proof-author/README.md b/actions/visual-proof-author/README.md
index f430f93ce..f0744acde 100644
--- a/actions/visual-proof-author/README.md
+++ b/actions/visual-proof-author/README.md
@@ -41,3 +41,10 @@ jobs:
 ```
 
 Use `product-name: 'Elementor Pro'` in Pro.
+
+## Intentional non-blocking behavior
+
+The action runs with `continue-on-error: true` because the **Visual proof**
+section is optional for contributors. Author failures (timeout, missing skill,
+API errors) do not block the PR workflow. The shots action will fall back to
+a generic Playground walk when the section is missing or marked `#skip_proof`.
diff --git a/actions/visual-proof-author/action.yml b/actions/visual-proof-author/action.yml
index 4503be16a..05dae965c 100644
--- a/actions/visual-proof-author/action.yml
+++ b/actions/visual-proof-author/action.yml
@@ -63,4 +63,5 @@ runs:
               PRODUCT_NAME: ${{ inputs.product-name }}
               VISUAL_PROOF_SKILL_FILE: ${{ inputs.skill-file }}
               VISUAL_PROOF_EXAMPLES_FILE: ${{ inputs.examples-file }}
-          run: bash "$GITHUB_ACTION_PATH/author.sh"
+              ACTION_PATH: ${{ github.action_path }}
+          run: bash "$ACTION_PATH/author.sh"
diff --git a/actions/visual-proof-author/author.sh b/actions/visual-proof-author/author.sh
index 4915185f7..661dddb79 100755
--- a/actions/visual-proof-author/author.sh
+++ b/actions/visual-proof-author/author.sh
@@ -36,7 +36,7 @@ DECISION=$(
 	const fs = require("fs");
 	const body = fs.readFileSync(0, "utf8");
 	process.stdout.write(JSON.stringify(shouldCaptureVisualProof(body)));
-	' "${SCRIPT_DIR}/parse-section.js"
+	' "${SCRIPT_DIR}/../visual-proof/parse-section.cjs"
 )
 
 REASON=$(echo "$DECISION" | jq -r .reason)
@@ -121,7 +121,7 @@ AFTER=$(
 	const fs = require("fs");
 	const body = fs.readFileSync(0, "utf8");
 	process.stdout.write(JSON.stringify(shouldCaptureVisualProof(body)));
-	' "${SCRIPT_DIR}/parse-section.js"
+	' "${SCRIPT_DIR}/../visual-proof/parse-section.cjs"
 )
 AFTER_REASON=$(echo "$AFTER" | jq -r .reason)
 log "step=verify reason=${AFTER_REASON}"
diff --git a/actions/visual-proof-shots/act.sh b/actions/visual-proof-shots/act.sh
index 82a84c024..efa2c3a30 100755
--- a/actions/visual-proof-shots/act.sh
+++ b/actions/visual-proof-shots/act.sh
@@ -1,6 +1,10 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# WARNING: This script runs an unsandboxed Cursor Agent (storyboard actor) that
+# has full write access to the calling repo's checkout and executes code from the
+# PR branch. Only use with same-repo PRs (fork PRs are blocked by the workflow).
+
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 REPO_ROOT="${GITHUB_WORKSPACE:-$(pwd)}"
 OUT_DIR="${VISUAL_PROOF_OUT_DIR:-${REPO_ROOT}/visual-proof-shots}"
diff --git a/actions/visual-proof-shots/action.yml b/actions/visual-proof-shots/action.yml
index 281bef6c3..965cf8271 100644
--- a/actions/visual-proof-shots/action.yml
+++ b/actions/visual-proof-shots/action.yml
@@ -40,7 +40,9 @@ runs:
 
         - name: Parse Visual proof section
           shell: bash
-          run: node "$GITHUB_ACTION_PATH/parse-section.js" --test
+          env:
+              ACTION_PATH: ${{ github.action_path }}
+          run: node "$ACTION_PATH/../visual-proof/parse-section.cjs" --test
 
         - name: Capture Playground shots and comment
           shell: bash
@@ -55,7 +57,8 @@ runs:
               PRODUCT_NAME: ${{ inputs.product-name }}
               GITHUB_SERVER_URL: ${{ github.server_url }}
               GITHUB_RUN_ID: ${{ github.run_id }}
-          run: bash "$GITHUB_ACTION_PATH/run.sh"
+              ACTION_PATH: ${{ github.action_path }}
+          run: bash "$ACTION_PATH/run.sh"
 
         - name: Upload shots artifact
           if: hashFiles('visual-proof-shots/*.png') != ''
diff --git a/actions/visual-proof-shots/parse-section.js b/actions/visual-proof-shots/parse-section.js
deleted file mode 100644
index 6e3de5498..000000000
--- a/actions/visual-proof-shots/parse-section.js
+++ /dev/null
@@ -1,129 +0,0 @@
-'use strict';
-
-const SECTION_HEADING = /^## Visual proof\s*$/m;
-const SKIP_MARKER = /#skip_proof\b/;
-
-function extractVisualProofSection(body) {
-	if ('string' !== typeof body || !body.trim()) {
-		return '';
-	}
-
-	const match = body.match(SECTION_HEADING);
-	if (!match || undefined === match.index) {
-		return '';
-	}
-
-	const start = match.index + match[0].length;
-	const rest = body.slice(start);
-	const next = rest.search(/^##\s|\n<!--start_gitstream/m);
-
-	return (-1 === next ? rest : rest.slice(0, next)).trim();
-}
-
-function shouldCaptureVisualProof(body) {
-	const section = extractVisualProofSection(body);
-
-	if (!section) {
-		return { capture: false, reason: 'missing-section', section: '' };
-	}
-
-	if (SKIP_MARKER.test(section)) {
-		return { capture: false, reason: 'skip-proof', section };
-	}
-
-	return { capture: true, reason: 'ready', section };
-}
-
-function extractLabeledField(section, label) {
-	if ('string' !== typeof section || !section.trim()) {
-		return '';
-	}
-
-	const escaped = label.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-	const match = section.match(
-		new RegExp(
-			'\\*\\*' + escaped + ':\\*\\*\\s*([\\s\\S]*?)(?=\\n\\*\\*|$)',
-			'i',
-		),
-	);
-	return match ? match[1].trim() : '';
-}
-
-function extractBrokenCaption(section) {
-	const match = (section || '').match(/\*\*Broken:\*\*\s*(.+)/i);
-	if (match) {
-		return match[1].trim();
-	}
-	return extractLabeledField(section, 'Broken');
-}
-
-function buildOverlayCaption(section) {
-	const broken = extractBrokenCaption(section);
-	const where = extractLabeledField(section, 'Where');
-	const steps = extractLabeledField(section, 'Steps').replace(/\s+/g, ' ');
-	const parts = [];
-
-	if (broken) {
-		parts.push('Broken: ' + broken);
-	}
-	if (where) {
-		parts.push('Where: ' + where);
-	}
-	if (steps) {
-		parts.push('Steps: ' + steps);
-	}
-
-	const text = parts.join(' · ');
-	const max = 700;
-	return text.length > max ? text.slice(0, max - 1) + '…' : text;
-}
-
-module.exports = {
-	extractVisualProofSection,
-	shouldCaptureVisualProof,
-	extractBrokenCaption,
-	extractLabeledField,
-	buildOverlayCaption,
-};
-
-if (require.main === module && '--test' === process.argv[2]) {
-	const assert = require('assert');
-
-	assert.equal(shouldCaptureVisualProof('').reason, 'missing-section');
-	assert.equal(
-		shouldCaptureVisualProof('## Summary\nHi').reason,
-		'missing-section',
-	);
-	assert.equal(
-		shouldCaptureVisualProof('## Visual proof\n#skip_proof\nDocs only.')
-			.reason,
-		'skip-proof',
-	);
-	assert.equal(
-		shouldCaptureVisualProof(
-			'## Visual proof\n**Where:** Editor\n**Steps:** click',
-		).capture,
-		true,
-	);
-	assert.equal(
-		extractBrokenCaption(
-			'**Broken:** Z-index stayed disabled.\n**Where:** Editor',
-		),
-		'Z-index stayed disabled.',
-	);
-	assert.ok(
-		buildOverlayCaption(
-			'**Broken:** Z-index stayed disabled.\n**Where:** Style → Position\n**Steps:** set Absolute then Z-index 5',
-		).includes('Steps: set Absolute then Z-index 5'),
-	);
-
-	const withGitstream = [
-		'## Visual proof',
-		'**Steps:** open editor',
-		'<!--start_gitstream_placeholder-->',
-		'## 1. Problem',
-	].join('\n');
-	assert.ok(!extractVisualProofSection(withGitstream).includes('Problem'));
-
-	console.log('visual-proof parse tests passed');
-}
diff --git a/actions/visual-proof-shots/post-comment.sh b/actions/visual-proof-shots/post-comment.sh
index 33b6c63d4..c83b15619 100755
--- a/actions/visual-proof-shots/post-comment.sh
+++ b/actions/visual-proof-shots/post-comment.sh
@@ -153,7 +153,7 @@ COMMENT_BODY=$(printf '%s\n' "${COMMENT_SECTIONS[@]}")
 log "step=find-comment looking for existing visual-proof-ci marker"
 existing_id=$(
 	gh_api "repos/${GITHUB_REPOSITORY}/issues/${PR_NUMBER}/comments" --paginate \
-		--jq "[.[] | select(.body | contains(\"visual-proof-ci\")) | .id][0] // empty" || true
+		--jq "[.[] | select(.body | contains(\"${MARKER}\")) | .id][0] // empty"
 )
 
 payload=$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')
diff --git a/actions/visual-proof-shots/run.sh b/actions/visual-proof-shots/run.sh
index a68a164f9..b3938c428 100755
--- a/actions/visual-proof-shots/run.sh
+++ b/actions/visual-proof-shots/run.sh
@@ -35,7 +35,7 @@ parse_visual_proof_section() {
 	const broken = extractBrokenCaption(result.section);
 	const overlay = buildOverlayCaption(result.section);
 	process.stdout.write(JSON.stringify({ ...result, broken, overlay }));
-	' "${SCRIPT_DIR}/parse-section.js"
+	' "${SCRIPT_DIR}/../visual-proof/parse-section.cjs"
 }
 
 log "step=start PR_NUMBER=${PR_NUMBER} HEAD_SHA=${HEAD_SHA} GITHUB_REPOSITORY=${GITHUB_REPOSITORY}"
diff --git a/actions/visual-proof-author/parse-section.js b/actions/visual-proof/parse-section.cjs
similarity index 100%
rename from actions/visual-proof-author/parse-section.js
rename to actions/visual-proof/parse-section.cjs

From 7f815a51d9f0e6762ca20a78bca55591cc2b2f12 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 17 Sep 2026 14:54:11 +0000
Subject: [PATCH 8/8] Fix: Use folder-level ignores for visual-proof actions

- Replace extension-specific globs with 'actions/visual-proof*/**'
- Covers visual-proof/, visual-proof-author/, visual-proof-shots/
- Addresses PR review feedback from @Ntnelbaba

Ref: ED-25578

Co-authored-by: Davids Seveloff <davseve@users.noreply.github.com>
---
 .prettierignore   | 6 +-----
 eslint.config.mjs | 3 +--
 2 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/.prettierignore b/.prettierignore
index 42545e478..71be0cdfd 100644
--- a/.prettierignore
+++ b/.prettierignore
@@ -2,9 +2,5 @@
 **/dist/**
 **/__snapshots__/**
 package-lock.json
-actions/visual-proof-author/*.js
-actions/visual-proof-author/*.sh
-actions/visual-proof-shots/*.js
-actions/visual-proof-shots/*.cjs
-actions/visual-proof-shots/*.sh
+actions/visual-proof*/**
 
diff --git a/eslint.config.mjs b/eslint.config.mjs
index bb32f3df6..19f6ae042 100644
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -20,8 +20,7 @@ export default tseslint.config(
 			'**/dist/**',
 			'**/node_modules/**',
 			'**/__snapshots__/**',
-			'actions/visual-proof-author/**/*.js',
-			'actions/visual-proof-shots/**/*.{js,cjs}',
+			'actions/visual-proof*/**',
 		],
 	},
 );