@riddledc/riddle-proof 0.6.0 → 0.7.1

package/dist/cli.js

@@ -1,4 +1,15 @@
 #!/usr/bin/env node
+import {
+  assessRiddleProofProfileEvidence,
+  buildRiddleProofProfileScript,
+  collectRiddleProfileArtifactRefs,
+  createRiddleProofProfileEnvironmentBlockedResult,
+  createRiddleProofProfileInsufficientResult,
+  extractRiddleProofProfileResult,
+  normalizeRiddleProofProfile,
+  profileStatusExitCode,
+  resolveRiddleProofProfileTargetUrl
+} from "./chunk-7NMAU4DP.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -7,10 +18,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-2FBF2UDZ.js";
-import "./chunk-MO24D3PY.js";
-import "./chunk-RFJ5BQF6.js";
+} from "./chunk-N5BVCRKI.js";
+import "./chunk-4DM3OTWH.js";
 import "./chunk-3UHWI3FO.js";
+import "./chunk-FPD2RF3Q.js";
 import {
   createCheckpointResponseTemplate
 } from "./chunk-33XO42CY.js";
@@ -22,7 +33,8 @@ import {
 import "./chunk-DUFDZJOF.js";
 
 // src/cli.ts
-import { existsSync, readFileSync } from "fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import path from "path";
 function usage() {
   return [
     "Usage:",
@@ -31,6 +43,7 @@ function usage() {
     "  riddle-proof-loop respond --state-path <path> --response-json <file|json|->",
     "  riddle-proof-loop respond --state-path <path> --decision <decision> --summary <text> [--payload-json <file|json|->]",
     "  riddle-proof-loop status --state-path <path>",
+    "  riddle-proof-loop run-profile --profile <file|json|-> --url <base-url> [--runner riddle] [--output <dir>]",
     "  riddle-proof-loop riddle-preview-deploy <build-dir> <label>",
     "  riddle-proof-loop riddle-server-preview <directory> --script-file <file> [--path /route] [--wait-for-selector selector]",
     "  riddle-proof-loop riddle-run-script --url <url> --script-file <file> [--viewport 1280x720]",
@@ -222,6 +235,173 @@ function riddleClientConfig(options) {
     apiBaseUrl: optionString(options, "apiBaseUrl")
   };
 }
+function parseProfileViewports(value) {
+  if (!value) return void 0;
+  return value.split(",").map((part, index) => {
+    const trimmed = part.trim();
+    const named = /^([a-zA-Z0-9_-]+)=(\d+x\d+)$/.exec(trimmed);
+    const viewport = parseRiddleViewport(named ? named[2] : trimmed);
+    if (!viewport) throw new Error(`Invalid viewport ${trimmed}.`);
+    return {
+      name: named ? named[1] : `viewport-${index + 1}`,
+      width: viewport.width,
+      height: viewport.height
+    };
+  });
+}
+function normalizeProfileForCli(options) {
+  const rawProfile = readJsonValue(optionString(options, "profile"), "--profile");
+  return normalizeRiddleProofProfile(rawProfile, {
+    url: optionString(options, "url"),
+    route: optionString(options, "route"),
+    viewports: parseProfileViewports(optionString(options, "viewports") || optionString(options, "viewport"))
+  });
+}
+function profileResultMarkdown(result) {
+  const lines = [
+    `# Riddle Proof Profile: ${result.profile_name}`,
+    "",
+    `Status: ${result.status}`,
+    `Runner: ${result.runner}`,
+    `Captured: ${result.captured_at}`,
+    "",
+    result.summary,
+    "",
+    "## Checks",
+    ""
+  ];
+  for (const check of result.checks) {
+    lines.push(`- ${check.status}: ${check.label || check.type}`);
+    if (check.message) lines.push(`  ${check.message}`);
+  }
+  if (result.artifacts.riddle_artifacts?.length) {
+    lines.push("", "## Riddle Artifacts", "");
+    for (const artifact of result.artifacts.riddle_artifacts.slice(0, 40)) {
+      lines.push(`- ${artifact.name || artifact.kind || "artifact"}${artifact.url ? `: ${artifact.url}` : ""}`);
+    }
+  }
+  return `${lines.join("\n")}
+`;
+}
+function writeProfileOutput(outputDir, result) {
+  if (!outputDir) return;
+  mkdirSync(outputDir, { recursive: true });
+  writeFileSync(path.join(outputDir, "profile-result.json"), `${JSON.stringify(result, null, 2)}
+`);
+  writeFileSync(path.join(outputDir, "summary.md"), profileResultMarkdown(result));
+  if (result.evidence) writeFileSync(path.join(outputDir, "proof.json"), `${JSON.stringify(result, null, 2)}
+`);
+  if (result.evidence?.console) writeFileSync(path.join(outputDir, "console.json"), `${JSON.stringify(result.evidence.console, null, 2)}
+`);
+  if (result.evidence?.dom_summary) writeFileSync(path.join(outputDir, "dom-summary.json"), `${JSON.stringify(result.evidence.dom_summary, null, 2)}
+`);
+}
+async function readArtifactJson(artifact) {
+  const target = artifact.url || artifact.path;
+  if (!target) return void 0;
+  try {
+    const raw = artifact.url ? await (await fetch(artifact.url)).text() : existsSync(target) ? readFileSync(target, "utf-8") : "";
+    if (!raw.trim()) return void 0;
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+async function profileResultFromRiddleArtifacts(profile, artifacts, fallbackInputs) {
+  for (const input of fallbackInputs) {
+    const result = extractRiddleProofProfileResult(input);
+    if (result) return result;
+  }
+  const proofArtifacts = artifacts.filter((artifact) => /(^|\/)proof\.json(?:\.json)?$/i.test(artifact.name || artifact.url || artifact.path || "")).sort((left, right) => {
+    const leftName = left.name || left.url || left.path || "";
+    const rightName = right.name || right.url || right.path || "";
+    return Number(/proof\.json\.json$/i.test(rightName)) - Number(/proof\.json\.json$/i.test(leftName));
+  });
+  for (const artifact of proofArtifacts) {
+    const parsed = await readArtifactJson(artifact);
+    const result = extractRiddleProofProfileResult(parsed);
+    if (result) return result;
+  }
+  const evidenceArtifacts = artifacts.filter((artifact) => /profile-evidence|evidence\.json/i.test(artifact.name || artifact.url || artifact.path || ""));
+  for (const artifact of evidenceArtifacts) {
+    const parsed = await readArtifactJson(artifact);
+    if (parsed?.version === "riddle-proof.profile-evidence.v1") {
+      return assessRiddleProofProfileEvidence(profile, parsed, { artifacts });
+    }
+  }
+  return void 0;
+}
+function withRiddleMetadata(result, input) {
+  return {
+    ...result,
+    riddle: {
+      ...result.riddle || {},
+      job_id: input.job_id || result.riddle?.job_id,
+      status: input.status ?? result.riddle?.status,
+      terminal: input.terminal ?? result.riddle?.terminal
+    },
+    artifacts: {
+      ...result.artifacts,
+      riddle_artifacts: input.artifacts || result.artifacts.riddle_artifacts
+    }
+  };
+}
+async function runProfileForCli(profile, options) {
+  const runner = optionString(options, "runner") || "riddle";
+  if (runner !== "riddle") {
+    throw new Error(`Unsupported --runner ${runner}. The current CLI supports --runner riddle.`);
+  }
+  const targetUrl = resolveRiddleProofProfileTargetUrl(profile);
+  const client = createRiddleApiClient(riddleClientConfig(options));
+  let created;
+  try {
+    created = await client.runScript({
+      url: targetUrl,
+      script: buildRiddleProofProfileScript(profile),
+      viewport: profile.target.viewports[0],
+      timeoutSec: optionString(options, "timeout") ? Number(optionString(options, "timeout")) : void 0,
+      sync: options.sync === true ? true : void 0
+    });
+  } catch (error) {
+    return createRiddleProofProfileEnvironmentBlockedResult({ profile, runner, error });
+  }
+  const jobId = typeof created.job_id === "string" ? created.job_id : typeof created.id === "string" ? created.id : "";
+  if (!jobId) {
+    const directResult = extractRiddleProofProfileResult(created);
+    return directResult ? withRiddleMetadata(directResult, { artifacts: collectRiddleProfileArtifactRefs(created) }) : createRiddleProofProfileInsufficientResult({ profile, runner, error: "Riddle run response was missing job_id.", artifacts: collectRiddleProfileArtifactRefs(created) });
+  }
+  const poll = await client.pollJob(jobId, {
+    wait: true,
+    attempts: optionString(options, "attempts") ? Number(optionString(options, "attempts")) : void 0,
+    intervalMs: optionString(options, "intervalMs") ? Number(optionString(options, "intervalMs")) : void 0
+  });
+  const artifacts = collectRiddleProfileArtifactRefs(poll.artifacts);
+  if (!poll.ok || !poll.terminal) {
+    return createRiddleProofProfileEnvironmentBlockedResult({
+      profile,
+      runner,
+      error: `Riddle job ${jobId} ended with status ${poll.status || "unknown"}.`,
+      riddle: { job_id: jobId, status: poll.status, terminal: poll.terminal },
+      artifacts
+    });
+  }
+  const artifactResult = await profileResultFromRiddleArtifacts(profile, artifacts, [poll.job, poll.artifacts, created]);
+  if (!artifactResult) {
+    return createRiddleProofProfileInsufficientResult({
+      profile,
+      runner,
+      riddle: { job_id: jobId, status: poll.status, terminal: poll.terminal },
+      artifacts
+    });
+  }
+  return withRiddleMetadata(artifactResult, {
+    job_id: jobId,
+    status: poll.status,
+    terminal: poll.terminal,
+    artifacts
+  });
+}
 function requestForRun(options) {
   const statePath = optionString(options, "statePath");
   const withEngineModuleUrl = (request) => {
@@ -268,6 +448,15 @@ async function main() {
 `);
     return;
   }
+  if (command === "run-profile") {
+    const profile = normalizeProfileForCli(options);
+    const result = await runProfileForCli(profile, options);
+    writeProfileOutput(optionString(options, "output"), result);
+    process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+    process.exitCode = profileStatusExitCode(profile, result.status);
+    return;
+  }
   if (command === "riddle-preview-deploy") {
     const buildDir = positional[1];
     const label = positional[2];

package/dist/engine-harness.cjs

@@ -31,6 +31,25 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/proof-run-core.ts
+function normalizedMode(value) {
+  return typeof value === "string" ? value.trim().toLowerCase() : "";
+}
+function previewModeFromWorkflowMode(value) {
+  const mode = normalizedMode(value);
+  return mode === "server" || mode === "static" ? mode : void 0;
+}
+function noImplementationModeInput(value) {
+  return value && typeof value === "object" ? value : {};
+}
+function noImplementationModeFor(params, state) {
+  const input = noImplementationModeInput(params);
+  const stateInput = noImplementationModeInput(state);
+  const mode = normalizedMode(input.mode ?? input.workflow_mode ?? stateInput.mode ?? stateInput.workflow_mode);
+  const implementationMode = normalizedMode(input.implementation_mode ?? stateInput.implementation_mode);
+  const requireDiff = input.require_diff ?? stateInput.require_diff;
+  const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
+  return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
+}
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
   if (typeof meta.url === "string" && meta.url) {
@@ -114,7 +133,7 @@ function buildSetupArgs(params, config) {
     allow_static_preview_fallback: params.allow_static_preview_fallback ? "true" : "",
     context: params.context || "",
     reviewer: params.reviewer || config.defaultReviewer,
-    mode: params.mode || "",
+    mode: previewModeFromWorkflowMode(params.mode) || "",
     build_command: params.build_command || "npm run build",
     build_output: params.build_output || "build",
     server_image: params.server_image || "node:20-slim",
@@ -539,7 +558,8 @@ function mergeStateFromParams(statePath, params) {
     "auth_cookies_json",
     "auth_headers_json",
     "proof_plan",
-    "implementation_notes"
+    "implementation_notes",
+    "implementation_mode"
   ];
   for (const field of stringFields) {
     if (params[field] !== void 0) {
@@ -554,7 +574,17 @@ function mergeStateFromParams(statePath, params) {
     if (issues.length) state.implementation_environment_issues = issues;
   }
   if (params.reference !== void 0) state.reference = params.reference;
-  if (params.mode !== void 0) state.mode = params.mode;
+  if (params.mode !== void 0) {
+    const previewMode = previewModeFromWorkflowMode(params.mode);
+    if (previewMode) {
+      state.mode = previewMode;
+    } else {
+      state.workflow_mode = normalizeOptionalString(params.mode);
+    }
+  }
+  if (params.implementation_mode !== void 0) state.implementation_mode = normalizeOptionalString(params.implementation_mode);
+  if (params.require_diff !== void 0) state.require_diff = params.require_diff;
+  if (params.allow_code_changes !== void 0) state.allow_code_changes = params.allow_code_changes;
   if (params.allow_static_preview_fallback !== void 0) {
     state.allow_static_preview_fallback = params.allow_static_preview_fallback;
   }
@@ -699,6 +729,11 @@ function summarizeState(state) {
     repo: state.repo || null,
     branch: state.branch || null,
     mode: state.mode || null,
+    workflow_mode: state.workflow_mode || null,
+    implementation_mode: state.implementation_mode || null,
+    require_diff: state.require_diff ?? null,
+    allow_code_changes: state.allow_code_changes ?? null,
+    no_implementation_mode: noImplementationModeFor(state),
     reference: state.reference || null,
     before_ref: state.before_ref || null,
     allow_static_preview_fallback: Boolean(state.allow_static_preview_fallback),
@@ -997,8 +1032,11 @@ function authorReady(state) {
 function implementationReady(state) {
   return ["changes_detected", "completed"].includes(state?.implementation_status || "");
 }
-function stageAfterAuthor(state) {
-  return implementationReady(state) ? "verify" : "implement";
+function implementationRequired(params, state) {
+  return !noImplementationModeFor(params, state);
+}
+function stageAfterAuthor(state, params) {
+  return implementationReady(state) || !implementationRequired(params, state) ? "verify" : "implement";
 }
 function latestReconAttempt(state) {
   const history = Array.isArray(state?.recon_results?.attempt_history) ? state.recon_results.attempt_history : [];
@@ -1208,7 +1246,7 @@ function recommendedAdvanceStage(state) {
   if (!state?.workspace_ready) return "setup";
   if (!state?.recon_results || ["needs_agent_decision", "needs_supervisor_judgment"].includes(state?.recon_status || "")) return "recon";
   if (!authorReady(state)) return "author";
-  if (!implementationReady(state)) return "implement";
+  if (!implementationReady(state) && !noImplementationModeFor(state)) return "implement";
   if (state?.verify_status === "capture_incomplete") return verifyAssessment(state).continueWithStage || verifyAssessment(state).recommendedStage || "author";
   if (state?.verify_status === "evidence_captured") return verifyAssessment(state).continueWithStage || verifyAssessment(state).recommendedStage;
   if (!(state?.after_cdn || "").trim()) return "verify";
@@ -1833,6 +1871,7 @@ async function executeWorkflow(params, pluginConfig, resolvedConfig) {
         checkpoint: params.advance_stage === "setup" ? "setup_review" : null,
         autoApproved: setupRes.autoApproved || false
       });
+      mergeStateFromParams(config.statePath, params);
       state = readState(config.statePath);
       if (params.advance_stage === "setup") {
         return checkpoint(
@@ -2130,7 +2169,8 @@ async function executeWorkflow(params, pluginConfig, resolvedConfig) {
           }
         );
       }
-      const authorNextStage = stageAfterAuthor(state);
+      const noImplementationMode = !implementationRequired(params, state);
+      const authorNextStage = stageAfterAuthor(state, params);
       const explicitAuthorDebug = params.advance_stage === "author";
       recordAttempt("author", "completed", "Author applied the supervising agent's proof packet to recon observations.", {
         autoApproved: authorRes.autoApproved || false,
@@ -2148,7 +2188,7 @@ async function executeWorkflow(params, pluginConfig, resolvedConfig) {
         return checkpoint(
           "author",
           "author_review",
-          authorNextStage === "verify" ? "Author applied the supervising agent's proof packet. Because implementation is already recorded, you can continue straight into verify." : "Author applied the supervising agent's proof packet. Inspect it if needed, then continue into implement.",
+          authorNextStage === "verify" ? noImplementationMode ? "Author applied the supervising agent's proof packet. Audit/no-diff mode disables implementation, so you can continue straight into verify." : "Author applied the supervising agent's proof packet. Because implementation is already recorded, you can continue straight into verify." : "Author applied the supervising agent's proof packet. Inspect it if needed, then continue into implement.",
           {
             nextActions: authorNextStage === "verify" ? ["inspect_proof_packet", "advance_run_to_verify", "rerun_author"] : ["inspect_proof_packet", "advance_run_to_implement", "rerun_author"],
             advanceOptions: authorNextStage === "verify" ? ["author", "verify", "recon"] : ["author", "implement", "recon"],
@@ -2181,13 +2221,14 @@ async function executeWorkflow(params, pluginConfig, resolvedConfig) {
     }
     if (!effectiveAdvanceStage) {
       const recommended = recommendedAdvanceStage(state);
+      const noImplementationMode = !implementationRequired(params, state);
       return checkpoint(
-        recommended || "implement",
+        recommended || (noImplementationMode ? "verify" : "implement"),
         "awaiting_stage_advance",
         "Proof authoring is ready. The wrapper will not guess the next stage from here, explicitly choose whether to revisit recon/author, validate implementation, capture verify evidence, or ship.",
         {
           nextActions: ["inspect_state", "set_advance_stage", "resume_run"],
-          advanceOptions: ["recon", "author", "implement", "verify", "ship"],
+          advanceOptions: noImplementationMode ? ["recon", "author", "verify", "ship"] : ["recon", "author", "implement", "verify", "ship"],
           recommendedAdvanceStage: recommended,
           details: { executed },
           executed
@@ -2195,6 +2236,26 @@ async function executeWorkflow(params, pluginConfig, resolvedConfig) {
       );
     }
     if (effectiveAdvanceStage === "implement") {
+      if (!implementationRequired(params, state)) {
+        recordAttempt("implement", "checkpoint", "Implementation stage was skipped because audit/no-diff mode disables code changes.", {
+          checkpoint: "implement_disabled_for_audit",
+          details: { executed }
+        });
+        return checkpoint(
+          "verify",
+          "implement_disabled_for_audit",
+          "Audit/no-diff mode disables implementation. Continue to verify against the existing target; do not launch an implementation agent or require a git diff.",
+          {
+            nextActions: ["advance_run_to_verify", "inspect_author_packet", "rerun_recon_if_target_changed"],
+            advanceOptions: ["verify", "author", "recon"],
+            recommendedAdvanceStage: "verify",
+            continueWithStage: "verify",
+            blocking: false,
+            details: { executed },
+            executed
+          }
+        );
+      }
       const implementRes = runOne("implement");
       executed.push(executedStep(implementRes));
       if (implementRes.haltedForApproval) {
@@ -2285,7 +2346,8 @@ ${implementRes.stderr || ""}`;
     }
     if (effectiveAdvanceStage === "verify") {
       state = readState(config.statePath);
-      if (!["changes_detected", "completed"].includes(state?.implementation_status || "")) {
+      const needsImplementation = implementationRequired(params, state);
+      if (needsImplementation && !implementationReady(state)) {
         return checkpoint(
           "implement",
           "implement_required",
@@ -2302,6 +2364,18 @@ ${implementRes.stderr || ""}`;
           }
         );
       }
+      if (!needsImplementation && !implementationReady(state)) {
+        recordAttempt("implement", "completed", "Implementation stage is not required for this audit/no-diff run.", {
+          checkpoint: "implementation_not_required",
+          details: { executed }
+        });
+        state = updateState(config.statePath, (currentState) => {
+          currentState.implementation_status = "not_required";
+          currentState.implementation_mode = currentState.implementation_mode || "none";
+          if (currentState.require_diff === void 0) currentState.require_diff = false;
+          if (currentState.allow_code_changes === void 0) currentState.allow_code_changes = false;
+        });
+      }
       const hasIncomingProofAssessment = typeof params.proof_assessment_json === "string" && params.proof_assessment_json.trim().length > 0;
       const canReuseVerifyEvidence = (params.advance_stage !== "verify" || hasIncomingProofAssessment) && state?.verify_status === "evidence_captured" && Boolean((state?.after_cdn || "").trim()) && (state?.active_checkpoint === "verify_supervisor_judgment" || hasSupervisorProofAssessment(state));
       let verifyRes = { ok: true, step: "verify", reusedEvidence: canReuseVerifyEvidence };
@@ -2324,8 +2398,13 @@ ${implementRes.stderr || ""}`;
       const verifySummary = state?.verify_summary || state?.proof_summary || null;
       const proofAssessment = verifyAssessment(state);
       const convergenceSignals = nonConvergenceSignals(state, proofAssessment);
-      const verifyRecommendedStage = proofAssessment.recommendedStage || null;
-      const verifyContinueWithStage = shouldEscalateVerifyToHuman(state, proofAssessment) ? null : proofAssessment.continueWithStage || verifyRecommendedStage || null;
+      const rawVerifyRecommendedStage = proofAssessment.recommendedStage || null;
+      const verifyRecommendedStage = !needsImplementation && rawVerifyRecommendedStage === "implement" ? "verify" : rawVerifyRecommendedStage;
+      const rawVerifyContinueWithStage = shouldEscalateVerifyToHuman(state, proofAssessment) ? null : proofAssessment.continueWithStage || verifyRecommendedStage || null;
+      const verifyContinueWithStage = !needsImplementation && rawVerifyContinueWithStage === "implement" ? "verify" : rawVerifyContinueWithStage;
+      const verifyLoopAdvanceOptions = needsImplementation ? ["author", "verify", "implement", "recon"] : ["author", "verify", "recon"];
+      const verifyReviewAdvanceOptions = needsImplementation ? ["verify", "author", "implement", "recon", "ship"] : ["verify", "author", "recon"];
+      const verifyRetryAdvanceOptions = needsImplementation ? ["author", "implement", "ship", "verify", "recon"] : ["author", "verify", "recon"];
       const verifyDetails = {
         executed,
         verifyStatus,
@@ -2363,7 +2442,7 @@ ${implementRes.stderr || ""}`;
           {
             ok: true,
             nextActions: ["inspect_after_capture", "continue_internal_loop_with_checkpoint", "return_to_recon_if_baseline_is_wrong"],
-            advanceOptions: ["author", "verify", "implement", "recon"],
+            advanceOptions: verifyLoopAdvanceOptions,
             recommendedAdvanceStage: verifyRecommendedStage || "author",
             continueWithStage: verifyContinueWithStage || "author",
             blocking: false,
@@ -2391,7 +2470,7 @@ ${implementRes.stderr || ""}`;
           summary,
           {
             nextActions: ["inspect_evidence", "author_proof_assessment_json", "continue_internal_loop_with_checkpoint"],
-            advanceOptions: ["verify", "author", "implement", "recon", "ship"],
+            advanceOptions: verifyReviewAdvanceOptions,
             recommendedAdvanceStage: "verify",
             continueWithStage: "verify",
             blocking: false,
@@ -2421,7 +2500,7 @@ ${implementRes.stderr || ""}`;
           {
             ok: false,
             nextActions: ["inspect_retry_history", "summarize_internal_loop", "ask_human_for_direction"],
-            advanceOptions: ["author", "implement", "ship", "verify", "recon"],
+            advanceOptions: verifyRetryAdvanceOptions,
             recommendedAdvanceStage: null,
             continueWithStage: null,
             blocking: true,
@@ -2436,7 +2515,7 @@ ${implementRes.stderr || ""}`;
           }
         );
       }
-      const shouldAutoShip = verifyContinueWithStage === "ship" && (params.ship_after_verify || params.continue_from_checkpoint || params.advance_stage !== "verify");
+      const shouldAutoShip = verifyContinueWithStage === "ship" && needsImplementation && (params.ship_after_verify || params.continue_from_checkpoint || params.advance_stage !== "verify");
       if (shouldAutoShip) {
         const shipGate = validateShipGate(state);
         if (!shipGate.ok) {
@@ -2494,6 +2573,33 @@ ${implementRes.stderr || ""}`;
         };
       }
       if (proofAssessment.decision === "ready_to_ship") {
+        if (!needsImplementation) {
+          recordAttempt("verify", "completed", "Verify captured a proof packet for audit/no-diff mode; shipping remains disabled.", {
+            autoApproved: verifyRes.autoApproved || false,
+            checkpoint: "verify_audit_complete",
+            details: verifyDetails
+          });
+          return checkpoint(
+            "verify",
+            "verify_audit_complete",
+            "The supervising agent judged the audit proof sufficient. Audit/no-diff mode disables ship, PR creation, implementation agents, and git-diff requirements.",
+            {
+              nextActions: ["inspect_evidence", "report_audit_result", "rerun_verify_if_needed"],
+              advanceOptions: ["verify", "author", "recon"],
+              recommendedAdvanceStage: "verify",
+              continueWithStage: null,
+              blocking: false,
+              details: verifyDetails,
+              verifyStatus,
+              verifySummary,
+              afterCdn: state?.after_cdn || null,
+              mergeRecommendation: state?.merge_recommendation || null,
+              verifyDecisionRequest,
+              proofAssessment: proofAssessment.raw,
+              executed
+            }
+          );
+        }
         const shipGate = validateShipGate(state);
         if (!shipGate.ok) {
           recordAttempt("verify", "checkpoint", "Verify cannot mark ship ready because the hard ship gate is missing required evidence or approval.", {
@@ -2550,8 +2656,8 @@ ${implementRes.stderr || ""}`;
         unresolvedSummary,
         {
           ok: true,
-          nextActions: convergenceSignals.warning ? ["inspect_retry_history", "decide_whether_to_keep_iterating_or_escalate", "continue_internal_loop_with_checkpoint"] : ["inspect_proof_assessment", "continue_internal_loop_with_checkpoint", "return_to_implement_if_fix_failed"],
-          advanceOptions: ["author", "implement", "ship", "verify", "recon"],
+          nextActions: convergenceSignals.warning ? ["inspect_retry_history", "decide_whether_to_keep_iterating_or_escalate", "continue_internal_loop_with_checkpoint"] : needsImplementation ? ["inspect_proof_assessment", "continue_internal_loop_with_checkpoint", "return_to_implement_if_fix_failed"] : ["inspect_proof_assessment", "continue_internal_loop_with_checkpoint", "rerun_author_if_proof_contract_is_wrong"],
+          advanceOptions: verifyRetryAdvanceOptions,
           recommendedAdvanceStage: verifyRecommendedStage,
           continueWithStage: verifyContinueWithStage,
           blocking: false,
@@ -2568,6 +2674,23 @@ ${implementRes.stderr || ""}`;
     }
     if (effectiveAdvanceStage === "ship") {
       state = readState(config.statePath);
+      if (!implementationRequired(params, state)) {
+        return checkpoint(
+          "verify",
+          "ship_disabled_for_audit",
+          "Audit/no-diff mode disables ship and PR creation. Report the audit result from verify evidence instead.",
+          {
+            ok: false,
+            nextActions: ["inspect_verify_state", "report_audit_result"],
+            advanceOptions: ["verify", "author", "recon"],
+            recommendedAdvanceStage: "verify",
+            continueWithStage: "verify",
+            blocking: true,
+            details: { executed },
+            executed
+          }
+        );
+      }
       const shipAssessment = verifyAssessment(state);
       const shipGate = validateShipGate(state);
       if (state?.verify_status !== "evidence_captured") {
@@ -3897,6 +4020,9 @@ function normalizeRunParams(input) {
     context: input.context,
     reviewer: input.reviewer,
     mode: input.mode,
+    implementation_mode: input.implementation_mode,
+    require_diff: input.require_diff,
+    allow_code_changes: input.allow_code_changes,
     build_command: input.build_command,
     build_output: input.build_output,
     server_image: input.server_image,
@@ -4210,7 +4336,7 @@ function stageFromWorkflowParams(params) {
   if (params.ship_after_verify) return "ship";
   if (params.proof_assessment_json) return "verify";
   if (params.implementation_notes) return "verify";
-  if (params.author_packet_json) return "implement";
+  if (params.author_packet_json) return noImplementationModeFor(params) ? "verify" : "implement";
   if (params.recon_assessment_json) return "author";
   return "setup";
 }
@@ -4240,6 +4366,9 @@ function initialRunParams(request, input, state) {
     context: request.context,
     reviewer: request.reviewer,
     mode: request.mode,
+    implementation_mode: request.implementation_mode,
+    require_diff: request.require_diff,
+    allow_code_changes: request.allow_code_changes,
     build_command: request.build_command,
     build_output: request.build_output,
     server_image: request.server_image,

package/dist/engine-harness.js

@@ -2,10 +2,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-2FBF2UDZ.js";
-import "./chunk-MO24D3PY.js";
-import "./chunk-RFJ5BQF6.js";
+} from "./chunk-N5BVCRKI.js";
+import "./chunk-4DM3OTWH.js";
 import "./chunk-3UHWI3FO.js";
+import "./chunk-FPD2RF3Q.js";
 import "./chunk-33XO42CY.js";
 import "./chunk-DUFDZJOF.js";
 export {