@riddledc/riddle-proof 0.5.38 → 0.5.40

package/dist/engine-harness.cjs

@@ -41,7 +41,7 @@ function currentDistDir() {
 }
 function createWorkflowStatePath() {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
-  return `/tmp/riddle-proof-state-${stamp}-${(0, import_node_crypto.randomUUID)().slice(0, 8)}.json`;
+  return `/tmp/riddle-proof-state-${stamp}-${(0, import_node_crypto2.randomUUID)().slice(0, 8)}.json`;
 }
 function argsPathForStatePath(statePath) {
   const base = import_node_path.default.basename(statePath);
@@ -759,12 +759,12 @@ function summarizeState(state) {
     state: selected
   };
 }
-var import_node_fs, import_node_crypto, import_node_path, import_node_url, import_meta, WORKFLOW_STAGE_ORDER, CHECKPOINT_CONTRACT_VERSION, BUNDLED_RIDDLE_PROOF_DIR, RIDDLE_PROOF_DIR_CANDIDATES, VISUAL_FIRST_MODES, CHECKPOINT_CONTRACT_SPECS;
+var import_node_fs, import_node_crypto2, import_node_path, import_node_url, import_meta, WORKFLOW_STAGE_ORDER, CHECKPOINT_CONTRACT_VERSION, BUNDLED_RIDDLE_PROOF_DIR, RIDDLE_PROOF_DIR_CANDIDATES, VISUAL_FIRST_MODES, CHECKPOINT_CONTRACT_SPECS;
 var init_proof_run_core = __esm({
   "src/proof-run-core.ts"() {
     "use strict";
     import_node_fs = require("fs");
-    import_node_crypto = require("crypto");
+    import_node_crypto2 = require("crypto");
     import_node_path = __toESM(require("path"), 1);
     import_node_url = require("url");
     import_meta = {};
@@ -2739,7 +2739,7 @@ module.exports = __toCommonJS(engine_harness_exports);
 var import_node_child_process2 = require("child_process");
 var import_node_fs3 = require("fs");
 var import_node_path3 = __toESM(require("path"), 1);
-var import_node_crypto2 = __toESM(require("crypto"), 1);
+var import_node_crypto3 = __toESM(require("crypto"), 1);
 
 // src/result.ts
 function isTerminalStatus(status) {
@@ -2945,6 +2945,10 @@ function createRunResult(input) {
     merge_recommendation: state.merge_recommendation,
     finalized: state.finalized,
     blocker: state.blocker,
+    checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     proof_session: state.proof_session,
     evidence_bundle: input.evidence_bundle,
     raw: input.raw
@@ -3043,6 +3047,11 @@ function createRunState(input) {
     request: normalizeRunParams(input.request),
     iterations: input.iterations ?? 0,
     last_checkpoint: input.last_checkpoint ?? null,
+    checkpoint_packet: input.checkpoint_packet,
+    checkpoint_summary: input.checkpoint_summary,
+    state_paths: input.state_paths,
+    proof_contract: input.proof_contract,
+    checkpoint_history: input.checkpoint_history,
     events: input.events ? [...input.events] : []
   });
 }
@@ -3116,6 +3125,10 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     elapsed_ms: elapsedMs(state.created_at, at),
     stage_elapsed_ms: elapsedMs(state.stage_started_at, at),
     blocker: state.blocker,
+    checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     latest_event: latestEvent
   });
 }
@@ -3126,6 +3139,258 @@ function setRunStatus(state, status, at = timestamp()) {
   return state;
 }
 
+// src/checkpoint.ts
+var import_node_crypto = __toESM(require("crypto"), 1);
+var RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION = "riddle-proof.checkpoint.v1";
+var RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION = "riddle-proof.checkpoint_response.v1";
+function timestamp2() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function jsonCloneRecord(value) {
+  const record = recordValue(value);
+  if (!record) return void 0;
+  try {
+    return JSON.parse(JSON.stringify(record));
+  } catch {
+    return { ...record };
+  }
+}
+function jsonCloneValue(value) {
+  if (value === void 0 || value === null) return void 0;
+  try {
+    return JSON.parse(JSON.stringify(value));
+  } catch {
+    return value;
+  }
+}
+function compactText(value, limit = 1600) {
+  const text = nonEmptyString(value);
+  if (!text) return void 0;
+  return text.length <= limit ? text : `${text.slice(0, limit - 20).trimEnd()}...`;
+}
+function statePathsForRunState(state, engineStatePath2) {
+  return compactRecord({
+    wrapper_state_path: state.state_path || state.request.harness_state_path || null,
+    engine_state_path: engineStatePath2 || state.request.engine_state_path || null,
+    resume_state_path: engineStatePath2 || state.request.engine_state_path || null
+  });
+}
+function responseSchemaForAuthorPacket() {
+  return {
+    type: "object",
+    required: ["version", "run_id", "checkpoint", "decision", "summary", "payload", "created_at"],
+    additionalProperties: false,
+    properties: {
+      version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
+      run_id: { type: "string" },
+      checkpoint: { type: "string" },
+      resume_token: { type: "string" },
+      decision: {
+        type: "string",
+        enum: ["author_packet", "needs_recon", "blocked", "human_review"]
+      },
+      summary: { type: "string" },
+      payload: {
+        type: "object",
+        description: "For decision=author_packet, provide the proof packet itself or {author_packet:{...}} with proof_plan and capture_script."
+      },
+      reasons: { type: "array", items: { type: "string" } },
+      continue_with_stage: { type: "string", enum: ["author", "recon"] },
+      source: {
+        type: "object",
+        properties: {
+          kind: { type: "string" },
+          session_id: { type: "string" },
+          user_id: { type: "string" }
+        }
+      },
+      created_at: { type: "string" }
+    }
+  };
+}
+function resumeTokenFor(input) {
+  const hash = import_node_crypto.default.createHash("sha256").update(JSON.stringify(input)).digest("hex").slice(0, 24);
+  return `rpchk_${hash}`;
+}
+function artifactsFromState(state) {
+  const artifacts = [];
+  for (const role of ["before", "prod", "after"]) {
+    const url = nonEmptyString(state?.[`${role}_cdn`]);
+    if (url) artifacts.push({ role, url, name: `${role}.png`, mime_type: "image/png" });
+  }
+  const authorRequest = recordValue(state?.author_request);
+  const latestAttempt = recordValue(authorRequest?.latest_attempt);
+  const observations = recordValue(latestAttempt?.observations);
+  for (const [label, observation] of Object.entries(observations || {})) {
+    const record = recordValue(observation);
+    const url = nonEmptyString(record?.url);
+    if (url && !artifacts.some((artifact) => artifact.url === url)) {
+      artifacts.push({
+        role: label === "before" || label === "prod" ? label : "json",
+        url,
+        name: `${label}-observation`,
+        summary: compactText(record?.reason, 240)
+      });
+    }
+  }
+  return artifacts.slice(0, 16);
+}
+function buildAuthorCheckpointPacket(input) {
+  const checkpoint = nonEmptyString(input.engineResult.checkpoint) || "author_supervisor_judgment";
+  const stage = "author";
+  const runId = input.runState.run_id || "unknown";
+  const fullState = input.fullRiddleState || {};
+  const decisionDetails = recordValue(input.engineResult.decisionRequest?.details);
+  const authorRequest = recordValue(fullState.author_request) || recordValue(fullState.proof_plan_request) || recordValue(decisionDetails?.authorRequest) || {};
+  const fallbackDefaults = recordValue(authorRequest.fallback_defaults) || {};
+  const reconResults = recordValue(fullState.recon_results);
+  const checkpointContract = recordValue(input.engineResult.checkpointContract);
+  const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.author_summary) || "Author checkpoint needs a supervising proof packet.";
+  return {
+    version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
+    run_id: runId,
+    state_path: input.runState.state_path,
+    stage,
+    checkpoint,
+    kind: "author_proof",
+    summary,
+    question: "Author the proof packet for this Riddle Proof run. Return a CheckpointResponse with decision=author_packet and payload containing proof_plan and capture_script.",
+    change_request: input.request.change_request || nonEmptyString(fullState.change_request) || "",
+    context: input.request.context,
+    artifacts: artifactsFromState(fullState),
+    state_excerpt: compactRecord({
+      repo: input.request.repo || fullState.repo,
+      branch: input.request.branch || fullState.branch,
+      verification_mode: input.request.verification_mode || fullState.verification_mode,
+      reference: input.request.reference || fullState.reference,
+      server_path: fullState.server_path,
+      wait_for_selector: fullState.wait_for_selector,
+      author_summary: fullState.author_summary,
+      author_request: jsonCloneRecord(authorRequest),
+      recon_baseline_understanding: jsonCloneRecord(fullState.recon_baseline_understanding),
+      fallback_defaults: jsonCloneRecord(fallbackDefaults)
+    }),
+    evidence_excerpt: compactRecord({
+      recon_results: jsonCloneRecord(reconResults),
+      checkpoint_contract: jsonCloneRecord(checkpointContract)
+    }),
+    allowed_decisions: ["author_packet", "needs_recon", "blocked", "human_review"],
+    response_schema: responseSchemaForAuthorPacket(),
+    routing_hint: {
+      suggested_role: "proof_author",
+      visibility: input.visibility || "quiet",
+      urgency: "normal",
+      can_auto_answer: input.visibility !== "manual"
+    },
+    resume_token: resumeTokenFor({
+      runId,
+      statePath: input.engineResult.state_path || input.request.engine_state_path || null,
+      checkpoint,
+      stage
+    }),
+    created_at: input.created_at || timestamp2()
+  };
+}
+function normalizeCheckpointResponse(value) {
+  const record = recordValue(value);
+  if (!record) return null;
+  const version = nonEmptyString(record.version);
+  const runId = nonEmptyString(record.run_id);
+  const checkpoint = nonEmptyString(record.checkpoint);
+  const decision = nonEmptyString(record.decision);
+  const summary = nonEmptyString(record.summary);
+  if (version !== RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION || !runId || !checkpoint || !decision || !summary) {
+    return null;
+  }
+  return compactRecord({
+    version: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,
+    run_id: runId,
+    checkpoint,
+    resume_token: nonEmptyString(record.resume_token),
+    decision,
+    summary,
+    payload: jsonCloneRecord(record.payload),
+    reasons: Array.isArray(record.reasons) ? record.reasons.filter((item) => typeof item === "string") : void 0,
+    continue_with_stage: nonEmptyString(record.continue_with_stage),
+    source: jsonCloneRecord(record.source),
+    created_at: nonEmptyString(record.created_at) || timestamp2()
+  });
+}
+function checkpointSummaryFromState(state, engineStatePath2) {
+  const history = state.checkpoint_history || [];
+  const packets = history.filter((entry) => entry.packet);
+  const responses = history.filter((entry) => entry.response);
+  const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
+  const latestResponseEntry = [...history].reverse().find((entry) => entry.response);
+  const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
+  const latestResponse = latestResponseEntry?.response;
+  const latestResumeToken = latestPacket?.resume_token || null;
+  const latestResponseToken = latestResponse?.resume_token || null;
+  const tokenMatches = latestResumeToken && latestResponseToken ? latestResumeToken === latestResponseToken : latestResumeToken || latestResponseToken ? false : null;
+  return compactRecord({
+    pending: Boolean(state.checkpoint_packet),
+    packet_count: packets.length,
+    response_count: responses.length,
+    latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
+    latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
+    latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,
+    latest_decision: latestResponse?.decision || null,
+    latest_packet_summary: latestPacket?.summary || null,
+    latest_response_summary: latestResponse?.summary || null,
+    latest_resume_token: latestResumeToken,
+    latest_response_token: latestResponseToken,
+    token_matches: tokenMatches,
+    last_packet_at: latestPacketEntry?.ts || null,
+    last_response_at: latestResponseEntry?.ts || null,
+    state_paths: statePathsForRunState(state, engineStatePath2)
+  });
+}
+function isDuplicateCheckpointResponse(state, response) {
+  const latestResponse = [...state.checkpoint_history || []].reverse().find((entry) => entry.response)?.response;
+  if (!latestResponse) return false;
+  return latestResponse.run_id === response.run_id && latestResponse.checkpoint === response.checkpoint && latestResponse.resume_token === response.resume_token && latestResponse.decision === response.decision;
+}
+function authorPacketPayloadFromCheckpointResponse(response) {
+  if (response.decision !== "author_packet") return null;
+  const payload = recordValue(response.payload);
+  if (!payload) return null;
+  const nested = recordValue(payload.author_packet);
+  const candidate = nested || payload;
+  if (!nonEmptyString(candidate.proof_plan) || !nonEmptyString(candidate.capture_script)) return null;
+  return candidate;
+}
+function proofContractFromAuthorCheckpointResponse(response, packet, payload) {
+  const refinedInputs = recordValue(payload.refined_inputs) || {};
+  return compactRecord({
+    version: "riddle-proof.proof-contract.v1",
+    checkpoint: packet.checkpoint,
+    source_response: compactRecord({
+      run_id: response.run_id,
+      checkpoint: response.checkpoint,
+      resume_token: response.resume_token,
+      decision: response.decision,
+      summary: response.summary,
+      created_at: response.created_at
+    }),
+    proof_plan: nonEmptyString(payload.proof_plan),
+    capture_script: nonEmptyString(payload.capture_script),
+    artifact_contract: jsonCloneRecord(payload.artifact_contract),
+    assertions: jsonCloneValue(payload.assertions),
+    baseline_understanding: jsonCloneRecord(payload.baseline_understanding) || jsonCloneRecord(payload.recon_baseline_understanding) || jsonCloneRecord(packet.state_excerpt?.recon_baseline_understanding),
+    route_assumptions: compactRecord({
+      server_path: nonEmptyString(refinedInputs.server_path) || nonEmptyString(payload.server_path) || nonEmptyString(packet.state_excerpt?.server_path),
+      wait_for_selector: nonEmptyString(refinedInputs.wait_for_selector) || nonEmptyString(payload.wait_for_selector) || nonEmptyString(packet.state_excerpt?.wait_for_selector),
+      reference: nonEmptyString(refinedInputs.reference) || nonEmptyString(payload.reference),
+      expected_path: nonEmptyString(payload.expected_path) || nonEmptyString(refinedInputs.expected_path)
+    }),
+    stop_condition: nonEmptyString(payload.stop_condition),
+    rationale: jsonCloneValue(payload.rationale),
+    verdict_dimensions: jsonCloneRecord(payload.verdict_dimensions),
+    payload: jsonCloneRecord(payload),
+    created_at: timestamp2()
+  });
+}
+
 // src/engine-harness.ts
 init_proof_run_core();
 var DEFAULT_MAX_ITERATIONS = 12;
@@ -3139,12 +3404,12 @@ var DEFAULT_STAGE_ITERATION_LIMITS = {
   ship: 2,
   notify: 2
 };
-function timestamp2() {
+function timestamp3() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function createHarnessStatePath(stateDir) {
-  const stamp = timestamp2().replace(/\D/g, "").slice(0, 14) || "unknown";
-  return import_node_path3.default.join(stateDir, `riddle-proof-run-${stamp}-${import_node_crypto2.default.randomUUID().slice(0, 8)}.json`);
+  const stamp = timestamp3().replace(/\D/g, "").slice(0, 14) || "unknown";
+  return import_node_path3.default.join(stateDir, `riddle-proof-run-${stamp}-${import_node_crypto3.default.randomUUID().slice(0, 8)}.json`);
 }
 function createEngineStatePath(state, config) {
   const existing = nonEmptyString(state.request.engine_state_path);
@@ -3159,8 +3424,8 @@ function createEngineStatePath(state, config) {
     return import_node_path3.default.join(dir, `${base}.engine-state.json`);
   }
   const stateDir = config?.stateDir || "/tmp";
-  const stamp = timestamp2().replace(/\D/g, "").slice(0, 14) || "unknown";
-  return import_node_path3.default.join(stateDir, `riddle-proof-state-${stamp}-${import_node_crypto2.default.randomUUID().slice(0, 8)}.json`);
+  const stamp = timestamp3().replace(/\D/g, "").slice(0, 14) || "unknown";
+  return import_node_path3.default.join(stateDir, `riddle-proof-state-${stamp}-${import_node_crypto3.default.randomUUID().slice(0, 8)}.json`);
 }
 function ensureParent(filePath) {
   (0, import_node_fs3.mkdirSync)(import_node_path3.default.dirname(filePath), { recursive: true });
@@ -3201,6 +3466,8 @@ function shouldPreserveFinalizedRunState(filePath, incoming) {
   return !(existing.status === "ready_to_ship" && incoming.status === "shipped");
 }
 function persist(state) {
+  state.state_paths = statePathsForRunState(state);
+  state.checkpoint_summary = checkpointSummaryFromState(state);
   if (!state.state_path) return;
   if (shouldPreserveFinalizedRunState(state.state_path, state)) return;
   writeJson(state.state_path, state);
@@ -3457,6 +3724,10 @@ function engineFailureBlocker(result, checkpoint) {
   };
 }
 function terminalResult(state, status, result, summary, raw = {}) {
+  if (result) {
+    const terminalStage = stageFromCheckpoint(result);
+    if (terminalStage !== "setup") state.current_stage = terminalStage;
+  }
   setRunStatus(state, status);
   if (isProtectedFinalStatus(status)) state.finalized = true;
   const metadata = normalizeTerminalMetadata({
@@ -3479,10 +3750,12 @@ function terminalResult(state, status, result, summary, raw = {}) {
 }
 function blockerResult(state, result, blocker) {
   state.blocker = blocker;
+  const blockerStage = nonEmptyString(recordValue(blocker.details)?.stage);
+  const stage = blockerStage || stageFromCheckpoint(result || { checkpoint: blocker.checkpoint || void 0 });
   recordEvent(state, {
     kind: "run.blocked",
     checkpoint: blocker.checkpoint || result?.checkpoint || null,
-    stage: stageFromCheckpoint(result || {}),
+    stage,
     summary: blocker.message,
     details: {
       code: blocker.code,
@@ -3501,6 +3774,169 @@ function blockerResult(state, result, blocker) {
     }
   });
 }
+function checkpointAwaitingResult(state, result, visibility) {
+  const packet = buildAuthorCheckpointPacket({
+    request: state.request,
+    runState: state,
+    engineResult: result,
+    fullRiddleState: fullRiddleState(result, state),
+    visibility
+  });
+  const at = timestamp3();
+  state.checkpoint_packet = packet;
+  state.checkpoint_history = [
+    ...state.checkpoint_history || [],
+    { ts: at, packet }
+  ].slice(-25);
+  appendRunEvent(state, {
+    ts: at,
+    kind: "checkpoint.packet.created",
+    checkpoint: packet.checkpoint,
+    stage: packet.stage,
+    summary: packet.summary,
+    details: compactRecord({
+      kind: packet.kind,
+      routing_hint: packet.routing_hint,
+      resume_token: packet.resume_token
+    })
+  });
+  setRunStatus(state, "awaiting_checkpoint", at);
+  persist(state);
+  return createRunResult({
+    state,
+    status: "awaiting_checkpoint",
+    last_summary: packet.summary,
+    raw: {
+      engine_state_path: result.state_path || state.request.engine_state_path || null,
+      last_result: result,
+      checkpoint_packet: packet
+    }
+  });
+}
+function appendCheckpointResponse(state, response, input = {}) {
+  const at = timestamp3();
+  state.checkpoint_history = [
+    ...state.checkpoint_history || [],
+    { ts: at, response }
+  ].slice(-25);
+  if (input.clear_packet !== false) {
+    state.checkpoint_packet = void 0;
+  }
+  appendRunEvent(state, {
+    ts: at,
+    kind: "checkpoint.response.accepted",
+    checkpoint: response.checkpoint,
+    stage: state.current_stage || "author",
+    summary: input.summary || response.summary,
+    details: compactRecord({
+      decision: response.decision,
+      resume_token: response.resume_token,
+      source: response.source
+    })
+  });
+  setRunStatus(state, "running", at);
+  persist(state);
+}
+function checkpointResponseContinuation(state, value) {
+  if (!value) return {};
+  const packet = state.checkpoint_packet;
+  const response = normalizeCheckpointResponse(value);
+  if (!response) {
+    return {
+      blocker: {
+        code: "checkpoint_response_invalid",
+        checkpoint: packet?.checkpoint || state.last_checkpoint || null,
+        message: "Checkpoint response was not a valid riddle-proof.checkpoint_response.v1 object.",
+        details: { checkpoint_packet: packet || null, checkpoint_summary: checkpointSummaryFromState(state) }
+      }
+    };
+  }
+  if (!packet) {
+    if (isDuplicateCheckpointResponse(state, response)) {
+      return {
+        blocker: {
+          code: "checkpoint_response_duplicate",
+          checkpoint: response.checkpoint,
+          message: "Checkpoint response was already accepted and there is no pending checkpoint packet to resume.",
+          details: {
+            response,
+            checkpoint_summary: checkpointSummaryFromState(state)
+          }
+        }
+      };
+    }
+    return {
+      blocker: {
+        code: "checkpoint_response_without_packet",
+        checkpoint: response.checkpoint,
+        message: "A checkpoint response was supplied, but the run state has no pending checkpoint packet.",
+        details: { response, checkpoint_summary: checkpointSummaryFromState(state) }
+      }
+    };
+  }
+  if (response.run_id !== packet.run_id || response.checkpoint !== packet.checkpoint) {
+    return {
+      blocker: {
+        code: "checkpoint_response_mismatch",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response does not match the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          expected: { run_id: packet.run_id, checkpoint: packet.checkpoint },
+          actual: { run_id: response.run_id, checkpoint: response.checkpoint }
+        }
+      }
+    };
+  }
+  if (packet.resume_token && response.resume_token !== packet.resume_token) {
+    return {
+      blocker: {
+        code: "checkpoint_response_resume_token_mismatch",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response resume_token does not match the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          expected_resume_token: packet.resume_token,
+          actual_resume_token: response.resume_token || null
+        }
+      }
+    };
+  }
+  const base = {
+    action: "run",
+    state_path: state.request.engine_state_path || packet.state_path || "",
+    continue_from_checkpoint: true
+  };
+  if (response.decision === "author_packet") {
+    const payload = authorPacketPayloadFromCheckpointResponse(response);
+    if (!payload) {
+      return {
+        blocker: {
+          code: "checkpoint_author_packet_missing",
+          checkpoint: packet.checkpoint,
+          message: "Checkpoint response decision=author_packet did not include a proof_plan and capture_script payload.",
+          details: { stage: packet.stage, response }
+        }
+      };
+    }
+    state.proof_contract = proofContractFromAuthorCheckpointResponse(response, packet, payload);
+    appendCheckpointResponse(state, response);
+    return { next: { ...base, author_packet_json: jsonParam(payload) } };
+  }
+  if (response.decision === "needs_recon") {
+    appendCheckpointResponse(state, response);
+    return { next: { ...base, advance_stage: "recon" } };
+  }
+  appendCheckpointResponse(state, response, { clear_packet: false });
+  return {
+    blocker: {
+      code: `checkpoint_response_${response.decision}`,
+      checkpoint: packet.checkpoint,
+      message: response.summary || `Checkpoint response stopped the run with decision=${response.decision}.`,
+      details: { stage: packet.stage, response }
+    }
+  };
+}
 function disabledAdapterPayload(action, context) {
   return {
     ok: false,
@@ -3749,6 +4185,9 @@ async function routeCheckpoint(request, state, result, agent, input) {
   const continueStage = checkpointContinueStage2(result);
   const checkpointContinuesToAuthor = continueStage === "author";
   if (checkpoint === "author_supervisor_judgment" || checkpoint === "verify_capture_retry" || checkpoint === "verify_agent_retry" && checkpointContinuesToAuthor) {
+    if (input.checkpoint_mode === "yield") {
+      return { terminal: checkpointAwaitingResult(state, result, input.checkpoint_visibility) };
+    }
     const packet = await agent.authorProofPacket(context);
     const blocker = requirePayload("author_packet", packet, state, result);
     if (blocker) return { blocker };
@@ -3850,6 +4289,10 @@ async function runRiddleProofEngineHarness(input) {
   const state = loadRunState(input);
   state.request = normalizeRunParams({ ...state.request, ...input.request });
   state.request.engine_state_path = nonEmptyString(input.resume_params?.state_path) || nonEmptyString(state.request.engine_state_path) || createEngineStatePath(state, input.config);
+  const checkpointContinuation = checkpointResponseContinuation(state, input.checkpoint_response);
+  if (checkpointContinuation.blocker) {
+    return blockerResult(state, null, checkpointContinuation.blocker);
+  }
   const request = state.request;
   const agent = input.agent || createDisabledRiddleProofAgentAdapter();
   const maxIterations = Math.max(
@@ -3871,6 +4314,8 @@ async function runRiddleProofEngineHarness(input) {
       engine_state_path: request.engine_state_path || null,
       max_iterations: maxIterations,
       ship_mode: effectiveShipMode(request, input.config),
+      checkpoint_mode: input.checkpoint_mode || "auto",
+      checkpoint_visibility: input.checkpoint_visibility || null,
       leave_draft: request.leave_draft || false
     }
   });
@@ -3885,7 +4330,7 @@ async function runRiddleProofEngineHarness(input) {
       message
     });
   }
-  let nextParams = input.resume_params || initialRunParams(request, input, state);
+  let nextParams = input.resume_params || checkpointContinuation.next || initialRunParams(request, input, state);
   let lastResult = null;
   const stageIterations = {};
   for (let index = 0; index < maxIterations; index += 1) {
@@ -3906,7 +4351,7 @@ async function runRiddleProofEngineHarness(input) {
         branch: state.branch || null
       }
     });
-    const engineCallStartedAt = timestamp2();
+    const engineCallStartedAt = timestamp3();
     const engineCallStartedMs = Date.now();
     recordEvent(state, {
       kind: "engine.call",
@@ -3931,7 +4376,7 @@ async function runRiddleProofEngineHarness(input) {
         details: {
           duration_ms: Date.now() - engineCallStartedMs,
           started_at: engineCallStartedAt,
-          finished_at: timestamp2()
+          finished_at: timestamp3()
         }
       });
       return blockerResult(state, lastResult, {
@@ -3969,7 +4414,7 @@ async function runRiddleProofEngineHarness(input) {
         checkpoint: result.checkpoint || null,
         duration_ms: engineCallDurationMs,
         started_at: engineCallStartedAt,
-        finished_at: timestamp2()
+        finished_at: timestamp3()
       }
     });
     const stageLimit = DEFAULT_STAGE_ITERATION_LIMITS[resultStage];

package/dist/engine-harness.d.cts

@@ -1,6 +1,7 @@
-import { RiddleProofRunParams, RiddleProofRunState, RiddleProofBlocker, RiddleProofRunStatusSnapshot, RiddleProofRunResult } from './types.cjs';
+import { RiddleProofRunParams, RiddleProofRunState, RiddleProofBlocker, RiddleProofCheckpointVisibility, RiddleProofCheckpointResponse, RiddleProofRunStatusSnapshot, RiddleProofRunResult } from './types.cjs';
 
 type RiddleProofShipMode = "none" | "ship";
+type RiddleProofCheckpointMode = "auto" | "yield";
 interface RiddleProofWorkflowParams extends Record<string, unknown> {
     action: string;
     state_path?: string;
@@ -64,6 +65,9 @@ interface RunRiddleProofEngineHarnessInput {
     state?: RiddleProofRunState;
     state_path?: string;
     resume_params?: RiddleProofWorkflowParams;
+    checkpoint_mode?: RiddleProofCheckpointMode;
+    checkpoint_visibility?: RiddleProofCheckpointVisibility;
+    checkpoint_response?: RiddleProofCheckpointResponse | Record<string, unknown>;
     max_iterations?: number;
     dry_run?: boolean;
     auto_approve?: boolean;
@@ -72,4 +76,4 @@ declare function createDisabledRiddleProofAgentAdapter(): RiddleProofAgentAdapte
 declare function readRiddleProofRunStatus(state_path: string): RiddleProofRunStatusSnapshot | null;
 declare function runRiddleProofEngineHarness(input: RunRiddleProofEngineHarnessInput): Promise<RiddleProofRunResult>;
 
-export { type RiddleProofAgentAdapter, type RiddleProofAgentPayload, type RiddleProofEngine, type RiddleProofEngineHarnessConfig, type RiddleProofEngineHarnessContext, type RiddleProofEngineResult, type RiddleProofShipMode, type RiddleProofWorkflowParams, type RunRiddleProofEngineHarnessInput, createDisabledRiddleProofAgentAdapter, readRiddleProofRunStatus, runRiddleProofEngineHarness };
+export { type RiddleProofAgentAdapter, type RiddleProofAgentPayload, type RiddleProofCheckpointMode, type RiddleProofEngine, type RiddleProofEngineHarnessConfig, type RiddleProofEngineHarnessContext, type RiddleProofEngineResult, type RiddleProofShipMode, type RiddleProofWorkflowParams, type RunRiddleProofEngineHarnessInput, createDisabledRiddleProofAgentAdapter, readRiddleProofRunStatus, runRiddleProofEngineHarness };

package/dist/engine-harness.d.ts

@@ -1,6 +1,7 @@
-import { RiddleProofRunParams, RiddleProofRunState, RiddleProofBlocker, RiddleProofRunStatusSnapshot, RiddleProofRunResult } from './types.js';
+import { RiddleProofRunParams, RiddleProofRunState, RiddleProofBlocker, RiddleProofCheckpointVisibility, RiddleProofCheckpointResponse, RiddleProofRunStatusSnapshot, RiddleProofRunResult } from './types.js';
 
 type RiddleProofShipMode = "none" | "ship";
+type RiddleProofCheckpointMode = "auto" | "yield";
 interface RiddleProofWorkflowParams extends Record<string, unknown> {
     action: string;
     state_path?: string;
@@ -64,6 +65,9 @@ interface RunRiddleProofEngineHarnessInput {
     state?: RiddleProofRunState;
     state_path?: string;
     resume_params?: RiddleProofWorkflowParams;
+    checkpoint_mode?: RiddleProofCheckpointMode;
+    checkpoint_visibility?: RiddleProofCheckpointVisibility;
+    checkpoint_response?: RiddleProofCheckpointResponse | Record<string, unknown>;
     max_iterations?: number;
     dry_run?: boolean;
     auto_approve?: boolean;
@@ -72,4 +76,4 @@ declare function createDisabledRiddleProofAgentAdapter(): RiddleProofAgentAdapte
 declare function readRiddleProofRunStatus(state_path: string): RiddleProofRunStatusSnapshot | null;
 declare function runRiddleProofEngineHarness(input: RunRiddleProofEngineHarnessInput): Promise<RiddleProofRunResult>;
 
-export { type RiddleProofAgentAdapter, type RiddleProofAgentPayload, type RiddleProofEngine, type RiddleProofEngineHarnessConfig, type RiddleProofEngineHarnessContext, type RiddleProofEngineResult, type RiddleProofShipMode, type RiddleProofWorkflowParams, type RunRiddleProofEngineHarnessInput, createDisabledRiddleProofAgentAdapter, readRiddleProofRunStatus, runRiddleProofEngineHarness };
+export { type RiddleProofAgentAdapter, type RiddleProofAgentPayload, type RiddleProofCheckpointMode, type RiddleProofEngine, type RiddleProofEngineHarnessConfig, type RiddleProofEngineHarnessContext, type RiddleProofEngineResult, type RiddleProofShipMode, type RiddleProofWorkflowParams, type RunRiddleProofEngineHarnessInput, createDisabledRiddleProofAgentAdapter, readRiddleProofRunStatus, runRiddleProofEngineHarness };

package/dist/engine-harness.js

@@ -2,9 +2,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-GN7HSZ6G.js";
-import "./chunk-OASB3CYU.js";
-import "./chunk-J2MERROF.js";
+} from "./chunk-COFOLRUW.js";
+import "./chunk-5LVCGDSD.js";
+import "./chunk-7S7O3NKF.js";
+import "./chunk-W7VTDN4T.js";
 import "./chunk-4YCWZVBN.js";
 export {
   createDisabledRiddleProofAgentAdapter,