@riddledc/riddle-proof 0.7.223 → 0.7.224

package/dist/{chunk-ENWYM4L7.js → chunk-MA6ZR5XY.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-UYB7ABWU.js";
 import {
   noImplementationModeFor
-} from "./chunk-SGXB5S4B.js";
+} from "./chunk-WWYZBWKZ.js";
 import {
   createRunResult
 } from "./chunk-VY4Y5U57.js";

package/dist/{chunk-MPPLZ35C.js → chunk-VJLHXZAA.js}

@@ -14,7 +14,7 @@ import {
   visualDeltaForState,
   visualDeltaRequiredForState,
   visualDeltaShipGateReason
-} from "./chunk-SGXB5S4B.js";
+} from "./chunk-WWYZBWKZ.js";
 import {
   authorPacketPayloadFromCheckpointResponse,
   buildCheckpointPacketForEngineResult,

package/dist/{chunk-SGXB5S4B.js → chunk-WWYZBWKZ.js}

@@ -23,6 +23,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 var CHECKPOINT_CONTRACT_VERSION = "riddle-proof-run.checkpoint.v1";
 function currentDistDir() {
   const meta = typeof import.meta === "object" ? import.meta : {};
@@ -88,7 +91,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/cli.cjs

@@ -50,6 +50,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
   if (typeof meta.url === "string" && meta.url) {
@@ -106,7 +109,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/cli.js

@@ -23,10 +23,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-MPPLZ35C.js";
+} from "./chunk-VJLHXZAA.js";
 import "./chunk-UYB7ABWU.js";
 import "./chunk-ZHEFYLII.js";
-import "./chunk-SGXB5S4B.js";
+import "./chunk-WWYZBWKZ.js";
 import {
   createCheckpointResponseTemplate
 } from "./chunk-ABQQLRTS.js";

package/dist/engine-harness.cjs

@@ -50,6 +50,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
   if (typeof meta.url === "string" && meta.url) {
@@ -106,7 +109,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/engine-harness.js

@@ -2,10 +2,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-MPPLZ35C.js";
+} from "./chunk-VJLHXZAA.js";
 import "./chunk-UYB7ABWU.js";
 import "./chunk-ZHEFYLII.js";
-import "./chunk-SGXB5S4B.js";
+import "./chunk-WWYZBWKZ.js";
 import "./chunk-ABQQLRTS.js";
 import "./chunk-VY4Y5U57.js";
 export {

package/dist/index.cjs

@@ -50,6 +50,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
   if (typeof meta.url === "string" && meta.url) {
@@ -106,7 +109,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   runRiddleProof
-} from "./chunk-ENWYM4L7.js";
+} from "./chunk-MA6ZR5XY.js";
 import "./chunk-6F4PWJZI.js";
 import {
   RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION,
@@ -95,7 +95,7 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-MPPLZ35C.js";
+} from "./chunk-VJLHXZAA.js";
 import {
   RIDDLE_PROOF_RUN_STATE_VERSION,
   appendRunEvent,
@@ -112,7 +112,7 @@ import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
 } from "./chunk-ZHEFYLII.js";
-import "./chunk-SGXB5S4B.js";
+import "./chunk-WWYZBWKZ.js";
 import {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
   RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,

package/dist/proof-run-core.cjs

@@ -84,6 +84,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 var CHECKPOINT_CONTRACT_VERSION = "riddle-proof-run.checkpoint.v1";
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
@@ -149,7 +152,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/proof-run-core.d.cts

@@ -106,7 +106,7 @@ declare function resolveConfig(config?: PluginConfig, params?: Partial<Pick<Work
 declare function ensureAction(action: string): WorkflowAction;
 declare function workflowFile(riddleProofDir: string, action: WorkflowStage): string;
 declare function buildSetupArgs(params: WorkflowParams, config: ReturnType<typeof resolveConfig>): {
-    repo: string;
+    repo: string | undefined;
     branch: string;
     change_request: string;
     commit_message: string;

package/dist/proof-run-core.d.ts

@@ -106,7 +106,7 @@ declare function resolveConfig(config?: PluginConfig, params?: Partial<Pick<Work
 declare function ensureAction(action: string): WorkflowAction;
 declare function workflowFile(riddleProofDir: string, action: WorkflowStage): string;
 declare function buildSetupArgs(params: WorkflowParams, config: ReturnType<typeof resolveConfig>): {
-    repo: string;
+    repo: string | undefined;
     branch: string;
     change_request: string;
     commit_message: string;

package/dist/proof-run-core.js

@@ -26,7 +26,7 @@ import {
   visualDeltaShipGateReason,
   workflowFile,
   writeState
-} from "./chunk-SGXB5S4B.js";
+} from "./chunk-WWYZBWKZ.js";
 export {
   BUNDLED_RIDDLE_PROOF_DIR,
   CHECKPOINT_CONTRACT_VERSION,

package/dist/proof-run-engine.cjs

@@ -64,6 +64,9 @@ function noImplementationModeFor(params, state) {
   const allowCodeChanges = input.allow_code_changes ?? stateInput.allow_code_changes;
   return mode === "audit" || mode === "profile" || implementationMode === "none" || requireDiff === false || allowCodeChanges === false;
 }
+function canRunSetupWithoutRepo(params) {
+  return noImplementationModeFor(params) && Boolean((params.prod_url || "").trim());
+}
 var CHECKPOINT_CONTRACT_VERSION = "riddle-proof-run.checkpoint.v1";
 function currentDistDir() {
   const meta = typeof import_meta === "object" ? import_meta : {};
@@ -129,7 +132,7 @@ function asJsonString(value) {
   return JSON.stringify(value);
 }
 function buildSetupArgs(params, config) {
-  if (!params.repo) throw new Error("repo is required for setup/run");
+  if (!params.repo && !canRunSetupWithoutRepo(params)) throw new Error("repo is required for setup/run");
   if (!params.change_request) throw new Error("change_request is required for setup/run");
   const commitMessage = (params.commit_message || params.change_request || "").trim();
   const captureScript = (params.capture_script || "").trim();

package/dist/proof-run-engine.js

@@ -15,7 +15,7 @@ import {
   validateShipGate,
   workflowFile,
   writeState
-} from "./chunk-SGXB5S4B.js";
+} from "./chunk-WWYZBWKZ.js";
 
 // src/proof-run-engine.ts
 import { execFileSync } from "child_process";

package/dist/runner.js

@@ -1,9 +1,9 @@
 import {
   runRiddleProof
-} from "./chunk-ENWYM4L7.js";
+} from "./chunk-MA6ZR5XY.js";
 import "./chunk-UYB7ABWU.js";
 import "./chunk-ZHEFYLII.js";
-import "./chunk-SGXB5S4B.js";
+import "./chunk-WWYZBWKZ.js";
 import "./chunk-ABQQLRTS.js";
 import "./chunk-VY4Y5U57.js";
 export {

package/lib/workspace-core.mjs

@@ -96,6 +96,25 @@ export function workspaceRoots({ workspaceRoot = "", currentRepoDir = "" } = {})
   return roots;
 }
 
+function expandHome(candidate) {
+  const text = String(candidate || "").trim();
+  if (!text.startsWith("~")) return text;
+  const home = process.env.HOME || "/root";
+  return path.join(home, text.slice(1));
+}
+
+function looksLikeLocalRepoRef(repo) {
+  const text = String(repo || "").trim();
+  if (!text) return false;
+  if (path.isAbsolute(text) || text.startsWith("./") || text.startsWith("../") || text.startsWith("~/")) return true;
+  return existsSync(expandHome(text));
+}
+
+function localRepoDirFromRef(repo) {
+  if (!looksLikeLocalRepoRef(repo)) return "";
+  return path.resolve(expandHome(repo));
+}
+
 export function resolveRepoDir({ repoName, repoDir = "", workspaceRoot = "", currentRepoDir = "" }) {
   const candidates = [];
   if (repoDir) candidates.push(repoDir);
@@ -136,22 +155,27 @@ export function prepareRepo({
   if (!repo) throw new Error("repo is required");
   if (!branch) throw new Error("branch is required");
 
-  const repoName = repo.split("/").pop() || repo;
-  const resolvedRepoDir = resolveRepoDir({ repoName, repoDir, workspaceRoot });
+  const localRepoDir = localRepoDirFromRef(repo);
+  const repoName = localRepoDir ? path.basename(localRepoDir) : repo.split("/").pop() || repo;
+  const resolvedRepoDir = localRepoDir || resolveRepoDir({ repoName, repoDir, workspaceRoot });
+  const localRepo = Boolean(localRepoDir);
   const hadExistingRepo = existsSync(path.join(resolvedRepoDir, ".git"));
   mkdirSync(path.dirname(resolvedRepoDir), { recursive: true });
 
   if (hadExistingRepo) {
-    if (ensureHttpsRemote) {
+    if (ensureHttpsRemote && !localRepo) {
       runSafe(`git remote set-url origin https://github.com/${repo}.git`, resolvedRepoDir);
     }
-    if (fetch) {
+    if (fetch && !localRepo) {
       const fetchResult = runSafe("git fetch --prune origin", resolvedRepoDir, 60000);
       if (!fetchResult.ok) {
         throw new Error(`git fetch failed for ${resolvedRepoDir}: ${fetchResult.output.slice(0, 300)}`);
       }
     }
   } else {
+    if (localRepo) {
+      throw new Error(`local repo path does not contain a .git directory: ${resolvedRepoDir}`);
+    }
     run(`git clone https://github.com/${repo}.git ${shellQuote(resolvedRepoDir)}`, undefined, 120000);
   }
 
@@ -165,10 +189,15 @@ export function prepareRepo({
       branchResult = runSafe(`git branch ${shellQuote(branch)} ${shellQuote(`origin/${branch}`)}`, resolvedRepoDir);
     } else {
       const remoteBase = `origin/${baseBranch}`;
-      branchResult = runSafe(`git branch ${shellQuote(branch)} ${shellQuote(remoteBase)}`, resolvedRepoDir);
-      if (!branchResult.ok) {
+      branchResult = localRepo
+        ? runSafe(`git branch ${shellQuote(branch)} ${shellQuote(baseBranch)}`, resolvedRepoDir)
+        : runSafe(`git branch ${shellQuote(branch)} ${shellQuote(remoteBase)}`, resolvedRepoDir);
+      if (!branchResult.ok && !localRepo) {
         branchResult = runSafe(`git branch ${shellQuote(branch)} ${shellQuote(baseBranch)}`, resolvedRepoDir);
       }
+      if (!branchResult.ok && localRepo) {
+        branchResult = runSafe(`git branch ${shellQuote(branch)} HEAD`, resolvedRepoDir);
+      }
     }
     if (!branchResult.ok) {
       throw new Error(`Failed to prepare workspace branch ${branch}: ${branchResult.output.slice(0, 300)}`);
@@ -180,7 +209,8 @@ export function prepareRepo({
     repoName,
     repoDir: resolvedRepoDir,
     branch,
-    source: hadExistingRepo ? "existing_repo" : "cloned_repo",
+    localRepo,
+    source: hadExistingRepo ? (localRepo ? "existing_local_repo" : "existing_repo") : "cloned_repo",
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.223",
+  "version": "0.7.224",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",

package/runtime/lib/preflight.py

@@ -24,6 +24,10 @@ def truthy(value):
     return str(value or '').strip().lower() in ('1', 'true', 'yes', 'y', 'on')
 
 
+def explicitly_false(value):
+    return value is False or str(value or '').strip().lower() in ('false', '0', 'no', 'off')
+
+
 def parse_json_arg(key, expected, default):
     raw = s.get(key)
     if raw in (None, ''):
@@ -70,6 +74,12 @@ reference_note = ''
 verification_mode = (s.get('verification_mode') or 'proof').strip() or 'proof'
 s['verification_mode'] = verification_mode
 s['success_criteria'] = (s.get('success_criteria') or '').strip()
+implementation_mode = (s.get('implementation_mode') or '').strip().lower()
+s['implementation_mode'] = implementation_mode or s.get('implementation_mode') or ''
+if explicitly_false(s.get('require_diff')):
+    s['require_diff'] = False
+if explicitly_false(s.get('allow_code_changes')):
+    s['allow_code_changes'] = False
 raw_assertions = (s.get('assertions_json') or '').strip()
 allow_static_preview_fallback = str(s.get('allow_static_preview_fallback') or '').strip().lower() in ('1', 'true', 'yes', 'y', 'on')
 s['allow_static_preview_fallback'] = allow_static_preview_fallback
@@ -101,6 +111,28 @@ s['reference_resolution'] = {
     'prod_reference_skipped': False,
     'prod_reference_skip_reason': '',
 }
+no_implementation_mode = (
+    implementation_mode in ('none', 'audit', 'no_implementation', 'no-implementation')
+    or explicitly_false(s.get('require_diff'))
+    or explicitly_false(s.get('allow_code_changes'))
+)
+remote_audit = (not (s.get('repo') or '').strip()) and prod_url_present and no_implementation_mode
+if remote_audit:
+    s['remote_audit'] = True
+    s['implementation_mode'] = s.get('implementation_mode') or 'none'
+    s['require_diff'] = False
+    s['allow_code_changes'] = False
+    if reference != 'prod':
+        s['reference_input_ignored'] = reference
+        reference = 'prod'
+        s['reference'] = reference
+        s['reference_resolution'].update({
+            'effective_reference': reference,
+            'prod_reference_requested': True,
+            'prod_reference_skipped': False,
+            'prod_reference_skip_reason': '',
+            'note': 'repo not provided for audit/no-diff prod_url run; using reference=prod and skipping repo worktrees.',
+        })
 
 # Infer a reasonable commit title during setup instead of forcing the caller to
 # fill boilerplate that can be derived from the requested change.
@@ -159,9 +191,11 @@ if s['target_branch'].startswith('riddle-proof/'):
 
 # Validate required fields (common)
 missing = []
-for k in ('repo', 'change_request', 'commit_message'):
+for k in ('change_request', 'commit_message'):
     if not s.get(k):
         missing.append(k)
+if not s.get('repo') and not remote_audit:
+    missing.append('repo')
 
 # prod_url required only once prod is actively part of the comparison
 if reference in ('prod', 'both') and not s.get('prod_url', '').strip():
@@ -175,6 +209,8 @@ if mode == 'server':
 
 # Derived fields
 repo_short = s['repo'].split('/')[-1] if s.get('repo') else ''
+if repo_short and (repo_short == s.get('repo') or s.get('repo', '').startswith(('/', './', '../', '~'))):
+    repo_short = os.path.basename(os.path.abspath(os.path.expanduser(s.get('repo', ''))))
 s['repo_short'] = repo_short
 base_branch = (s.get('base_branch') or 'main').strip() or 'main'
 s['base_branch'] = base_branch

package/runtime/lib/recon.py

@@ -46,6 +46,23 @@ s = load_state()
 after_dir = (s.get('after_worktree') or '').strip()
 before_dir = (s.get('before_worktree') or '').strip()
 if not after_dir or not os.path.exists(after_dir):
+    if s.get('remote_audit'):
+        s['workspace_ready'] = True
+        s['recon_status'] = 'ready_for_proof_plan'
+        s['recon_summary'] = s.get('recon_summary') or 'Remote audit/no-diff run skips repo-backed recon.'
+        s['recon_results'] = s.get('recon_results') or {
+            'status': 'ready_for_proof_plan',
+            'mode': 'remote_audit',
+            'hypothesis': s.get('recon_hypothesis') or {},
+            'baselines': {},
+            'attempt_history': [],
+            'route_hints': [],
+            'keyword_hits': [],
+            'max_attempts': 0,
+        }
+        save_state(s)
+        print('Remote audit/no-diff recon: repo worktree not required.')
+        sys.exit(0)
     raise SystemExit('after_worktree not found. Run setup first.')
 
 

package/runtime/lib/setup.py

@@ -7,14 +7,15 @@ scratch storage by default:
 """
 
 import json, subprocess as sp, os, sys, shutil, time, tempfile
+from urllib.parse import urlparse
 sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
 from util import load_state, save_state, git, shell_quote
 from util import apply_capture_hint
 
 s = load_state()
-repo = s['repo']
+repo = (s.get('repo') or '').strip()
 branch = (s.get('target_branch') or s['branch']).strip()
-repo_dir = s['repo_dir']
+repo_dir = s.get('repo_dir', '')
 base_branch = s.get('base_branch', 'main')
 before_ref_arg = (s.get('before_ref') or s.get('base_ref') or '').strip()
 mode = s.get('mode', 'server')
@@ -199,6 +200,36 @@ def env_int(name, default):
     return value if value > 0 else default
 
 
+def explicitly_false(value):
+    return value is False or str(value or '').strip().lower() in ('false', '0', 'no', 'off')
+
+
+def audit_no_diff_mode():
+    implementation_mode = str(s.get('implementation_mode') or '').strip().lower()
+    return (
+        implementation_mode in ('none', 'audit', 'no_implementation', 'no-implementation')
+        or explicitly_false(s.get('require_diff'))
+        or explicitly_false(s.get('allow_code_changes'))
+    )
+
+
+def remote_audit_mode():
+    return bool(s.get('remote_audit')) or (
+        not repo
+        and bool((s.get('prod_url') or '').strip())
+        and audit_no_diff_mode()
+    )
+
+
+def remote_audit_target_path():
+    explicit = (s.get('server_path') or '').strip()
+    if explicit:
+        return explicit
+    parsed = urlparse((s.get('prod_url') or '').strip())
+    path = parsed.path or '/'
+    return path + (('?' + parsed.query) if parsed.query else '')
+
+
 def disk_free_bytes(path):
     probe = path
     while probe and not os.path.exists(probe):
@@ -489,6 +520,61 @@ def apply_repo_profile(project_dir):
         }
         print('Applied Riddle Proof repo profile: ' + ', '.join(s['proof_profile']['applied_fields']))
 
+if remote_audit_mode():
+    target_path = remote_audit_target_path()
+    s['remote_audit'] = True
+    s['workspace_kind'] = 'remote_audit'
+    s['repo_dir'] = ''
+    s['worktree_root'] = ''
+    s['scratch_root'] = DEFAULT_SCRATCH_ROOT
+    s['before_worktree'] = ''
+    s['after_worktree'] = ''
+    s['after_worktree_branch'] = ''
+    s['before_ref'] = ''
+    s['before_ref_source'] = ''
+    s['workspace_ready'] = True
+    s['stage'] = 'author'
+    s['implementation_status'] = 'not_required'
+    s['implementation_mode'] = s.get('implementation_mode') or 'none'
+    s['require_diff'] = False
+    s['allow_code_changes'] = False
+    s['server_path'] = s.get('server_path') or target_path
+    s['server_path_source'] = s.get('server_path_source') or 'prod_url'
+    s['recon_status'] = 'ready_for_proof_plan'
+    s['recon_summary'] = 'Remote audit/no-diff run uses prod_url as the current target and skips repo worktrees.'
+    s['recon_hypothesis'] = {
+        'target_path': target_path,
+        'path_source': 'prod_url',
+        'reference': s.get('reference') or 'prod',
+        'mode': s.get('mode') or 'server',
+        'wait_for_selector': (s.get('wait_for_selector') or '').strip(),
+        'notes': ['Remote audit/no-diff setup skipped repository checkout and dependency staging.'],
+    }
+    s['recon_results'] = {
+        'status': 'ready_for_proof_plan',
+        'mode': 'remote_audit',
+        'hypothesis': s['recon_hypothesis'],
+        'baselines': {},
+        'attempt_history': [],
+        'route_hints': [],
+        'keyword_hits': [],
+        'max_attempts': 0,
+    }
+    s['author_status'] = 'ready'
+    s['proof_plan_status'] = 'ready'
+    s['proof_plan'] = (s.get('proof_plan') or 'Audit the current prod_url target and capture current evidence without requiring a repo diff.').strip()
+    s['dependency_install'] = {
+        'shared': 'skipped:remote_audit',
+        'before': 'skipped:remote_audit',
+        'after': 'skipped:remote_audit',
+    }
+    s['scratch_disk_after_setup'] = disk_snapshot(DEFAULT_SCRATCH_ROOT)
+    save_state(s)
+    print('Remote audit/no-diff setup: repo worktrees and dependency staging skipped.')
+    print('Current target: ' + (s.get('prod_url') or ''))
+    print(json.dumps({'ok': True, 'remote_audit': True}))
+    sys.exit(0)
+
 # Ensure the repo is cloned and up to date via the shared workspace core.
 setup = workspace_core('prepare-repo', {
     'repo': repo,
@@ -561,7 +647,7 @@ if reference in ('before', 'both'):
         'ref': before_ref,
         'detach': True,
         'cleanupPaths': worktree_cleanup_dirs,
-        'verifyPackageJson': True,
+        'verifyPackageJson': False,
     }, timeout=300)
     print('Before worktree: ' + BEFORE_DIR + ' (' + before_ref + ', source=' + before_ref_source + ')')
 
@@ -587,7 +673,7 @@ workspace_core('ensure-worktree', {
     'resetBranch': True,
     'cleanupPaths': after_cleanup_dirs,
     'cleanupBranches': cleanup_branches,
-    'verifyPackageJson': True,
+    'verifyPackageJson': False,
 }, timeout=300)
 print('After worktree: ' + AFTER_DIR + ' (' + AFTER_WORKTREE_BRANCH + ' -> ' + branch + ')')
 apply_repo_profile(AFTER_DIR)
@@ -597,20 +683,20 @@ target_dependency_dirs = [AFTER_DIR]
 if reference in ('before', 'both'):
     target_dependency_dirs.append(BEFORE_DIR)
 
-reuse_source = repo_dir if os.path.exists(os.path.join(repo_dir, 'package.json')) else ''
+reuse_source = repo_dir if env_flag('RIDDLE_PROOF_USE_ACTIVE_WORKSPACE_DEPS', False) and os.path.exists(os.path.join(repo_dir, 'package.json')) else ''
 shared_reuse_source = compatible_reuse_source(reuse_source, target_dependency_dirs)
 shared_status = ''
 if shared_reuse_source:
     shared_status = ensure_deps_phase('shared_deps', shared_reuse_source, summary='Ensuring shared repository dependencies.')
     if shared_status:
         print('Shared deps status: ' + shared_status)
-elif reuse_source:
+elif os.path.exists(os.path.join(repo_dir, 'package.json')):
     record_setup_phase(
         'shared_deps',
         'completed',
-        'skipped: active workspace dependencies differ from proof worktrees',
+        'skipped: active workspace dependency reuse disabled; proof worktrees use scratch cache',
     )
-    print('Shared deps skipped: active workspace dependencies differ from proof worktrees')
+    print('Shared deps skipped: active workspace dependency reuse disabled; proof worktrees use scratch cache')
 
 before_dep_status = ''
 if reference in ('before', 'both'):

package/runtime/lib/verify.py

@@ -2553,9 +2553,10 @@ if s.get('use_auth', '').lower() in ('true', '1', 'yes'):
 
 existing_before = (s.get('before_cdn') or '').strip()
 existing_prod = (s.get('prod_cdn') or '').strip()
-if reference in ('before', 'both') and not existing_before:
+remote_audit = bool(s.get('remote_audit')) and no_implementation_mode
+if reference in ('before', 'both') and not existing_before and not remote_audit:
     raise SystemExit('Recon baseline missing: before_cdn is empty. Run recon again and confirm the before baseline succeeds before verify.')
-if reference in ('prod', 'both') and prod_url and not existing_prod:
+if reference in ('prod', 'both') and prod_url and not existing_prod and not remote_audit:
     raise SystemExit('Recon baseline missing: prod_cdn is empty. Run recon again and confirm the prod baseline succeeds before verify.')
 if reference == 'prod' and not prod_url:
     raise SystemExit('reference is "prod" but no prod_url provided.')
@@ -2796,6 +2797,8 @@ if reference in ('before', 'both'):
     required_baseline_present = required_baseline_present and bool(existing_before)
 if reference in ('prod', 'both') and prod_url:
     required_baseline_present = required_baseline_present and bool(existing_prod)
+if remote_audit:
+    required_baseline_present = True
 
 evidence_bundle = build_evidence_bundle(s, results, after_payload, after_observation, required_baseline_present, expected_path)
 s['evidence_bundle'] = evidence_bundle

package/runtime/pipelines/riddle-proof-setup.lobster

@@ -46,6 +46,15 @@ args:
   mode:
     default: "server"
     description: "static or server"
+  implementation_mode:
+    default: ""
+    description: "change or none/audit"
+  require_diff:
+    default: ""
+    description: "Set false for audit/no-diff proof runs"
+  allow_code_changes:
+    default: ""
+    description: "Set false for audit/no-diff proof runs"
   build_command:
     default: "npm run build"
   build_output:
@@ -110,6 +119,9 @@ steps:
           'base_branch': """${base_branch}""".strip() or 'main',
           'before_ref': """${before_ref}""".strip(),
           'allow_static_preview_fallback': """${allow_static_preview_fallback}""".strip(),
+          'implementation_mode': """${implementation_mode}""".strip(),
+          'require_diff': """${require_diff}""".strip(),
+          'allow_code_changes': """${allow_code_changes}""".strip(),
           'build_command': """${build_command}""".strip() or 'npm run build',
           'build_output': """${build_output}""".strip() or 'build',
           'server_image': """${server_image}""".strip() or 'node:20-slim',

package/runtime/tests/recon_verify_smoke.py

@@ -14,6 +14,7 @@ ROOT = Path(__file__).resolve().parents[1]
 LIB = ROOT / 'lib'
 UTIL_PATH = LIB / 'util.py'
 PREFLIGHT_PATH = LIB / 'preflight.py'
+SETUP_PATH = LIB / 'setup.py'
 RECON_PATH = LIB / 'recon.py'
 VERIFY_PATH = LIB / 'verify.py'
 AUTHOR_PATH = LIB / 'author.py'
@@ -992,6 +993,54 @@ def run_preflight_records_prod_reference_skip_reason():
         shutil.rmtree(tempdir, ignore_errors=True)
 
 
+def run_remote_audit_setup_without_repo():
+    tempdir = Path(tempfile.mkdtemp(prefix='riddle-proof-remote-audit-'))
+    args_path = tempdir / 'args.json'
+    state_path = tempdir / 'state.json'
+    try:
+        args_path.write_text(json.dumps({
+            'repo': '',
+            'mode': 'server',
+            'reference': 'both',
+            'prod_url': 'https://prod.example.com/pricing?plan=pro',
+            'change_request': 'Audit the current pricing page without a repo checkout.',
+            'commit_message': '',
+            'success_criteria': 'Current target is captured.',
+            'verification_mode': 'visual',
+            'implementation_mode': 'none',
+            'require_diff': False,
+            'allow_code_changes': False,
+            'server_image': 'node:20-slim',
+            'server_command': 'npm start',
+            'server_port': '3000',
+        }, indent=2))
+        with temporary_env(
+            RIDDLE_PROOF_ARGS_FILE=str(args_path),
+            RIDDLE_PROOF_STATE_FILE=str(state_path),
+        ):
+            sys.modules.pop('util', None)
+            load_module('util_remote_audit_preflight', UTIL_PATH)
+            load_module('preflight_remote_audit', PREFLIGHT_PATH)
+            sys.modules.pop('util', None)
+            try:
+                load_module('setup_remote_audit', SETUP_PATH)
+            except SystemExit as exc:
+                assert exc.code in (0, None), exc
+        state = json.loads(state_path.read_text())
+        assert state['remote_audit'] is True
+        assert state['workspace_ready'] is True
+        assert state['reference'] == 'prod'
+        assert state['implementation_status'] == 'not_required'
+        assert state['dependency_install']['after'] == 'skipped:remote_audit'
+        assert state['server_path'] == '/pricing?plan=pro'
+        assert state['recon_status'] == 'ready_for_proof_plan'
+        assert state['proof_plan_status'] == 'ready'
+        return {'ok': True, 'server_path': state['server_path']}
+    finally:
+        sys.modules.pop('util', None)
+        shutil.rmtree(tempdir, ignore_errors=True)
+
+
 def run_preflight_resumes_visual_proof_session():
     tempdir = Path(tempfile.mkdtemp(prefix='riddle-proof-preflight-session-'))
     args_path = tempdir / 'args.json'
@@ -2388,6 +2437,7 @@ def run_ship_resolves_real_pr_branch():
 if __name__ == '__main__':
     payload = {
         'preflight_reference_skip_reason': run_preflight_records_prod_reference_skip_reason(),
+        'remote_audit_setup_without_repo': run_remote_audit_setup_without_repo(),
         'preflight_resume_visual_proof_session': run_preflight_resumes_visual_proof_session(),
         'capture_artifact_enrichment': run_capture_artifact_enrichment(),
         'capture_diagnostics_redaction': run_capture_diagnostics_redact_sensitive_values(),