@riddledc/riddle-proof 0.8.55 → 0.8.56

package/dist/{chunk-W44XEGYW.js → chunk-CUBYSWZT.js}

@@ -2,6 +2,9 @@
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
 }
+function isProtectedFinalStatus(status) {
+  return status === "ready_to_ship" || status === "shipped" || status === "completed";
+}
 function isSuccessfulStatus(status) {
   return status !== "blocked" && status !== "failed";
 }
@@ -215,6 +218,7 @@ function createRunResult(input) {
   const state = input.metadata ? applyTerminalMetadata(input.state, input.metadata) : input.state;
   state.status = status;
   state.ok = ok;
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   applyShipControlState(state, { status, raw: input.raw });
   return compactRecord({
     ok,
@@ -266,6 +270,7 @@ function createRunResult(input) {
 
 export {
   isTerminalStatus,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   compactRecord,
   nonEmptyString,

package/dist/{chunk-QGE3KBRL.js → chunk-GHBNDHG7.js}

@@ -5,10 +5,10 @@ import {
   createRunStatusSnapshot,
   normalizeRunParams,
   setRunStatus
-} from "./chunk-Q5GYD5RG.js";
+} from "./chunk-UZIX7M7D.js";
 import {
   createRiddleProofRunCard
-} from "./chunk-NYRMPWJB.js";
+} from "./chunk-KNPCWWF3.js";
 import {
   canonicalProofAssessmentStageForDecision,
   noImplementationModeFor,
@@ -27,16 +27,17 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "./chunk-QUK3SG24.js";
+} from "./chunk-MOTQNIZX.js";
 import {
   applyShipControlState,
   applyTerminalMetadata,
   compactRecord,
   createRunResult,
+  isProtectedFinalStatus,
   nonEmptyString,
   normalizeTerminalMetadata,
   recordValue
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";
@@ -121,9 +122,6 @@ function loadRunState(input) {
     state_path: statePath
   });
 }
-function isProtectedFinalStatus(status) {
-  return status === "ready_to_ship" || status === "shipped" || status === "completed";
-}
 function shouldPreserveFinalizedRunState(filePath, incoming) {
   const existing = readJson(filePath);
   if (!existing?.finalized || !isProtectedFinalStatus(existing.status)) return false;
@@ -695,19 +693,38 @@ function appendCheckpointResponse(state, response, input = {}) {
   setRunStatus(state, "running", at);
   persist(state);
 }
+function checkpointResponseRejectedBlocker(state, input) {
+  const packet = input.packet || null;
+  const response = input.response || null;
+  appendRunEvent(state, {
+    kind: "checkpoint.response.rejected",
+    checkpoint: response?.checkpoint || packet?.checkpoint || input.blocker.checkpoint || null,
+    stage: packet?.stage || state.current_stage || "author",
+    summary: input.blocker.message,
+    details: compactRecord({
+      code: input.blocker.code,
+      decision: response?.decision,
+      resume_token: response?.resume_token,
+      packet_id: response?.packet_id,
+      source: response?.source
+    })
+  });
+  return { blocker: input.blocker };
+}
 function checkpointResponseContinuation(state, value) {
   if (!value) return {};
   const packet = state.checkpoint_packet;
   const response = normalizeCheckpointResponse(value);
   if (!response) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
       blocker: {
         code: "checkpoint_response_invalid",
         checkpoint: packet?.checkpoint || state.last_checkpoint || null,
         message: "Checkpoint response was not a valid riddle-proof.checkpoint_response.v1 object.",
         details: { checkpoint_packet: packet || null, checkpoint_summary: checkpointSummaryFromState(state) }
       }
-    };
+    });
   }
   if (isDuplicateCheckpointResponse(state, response)) {
     const stage = packet?.stage || state.current_stage || "author";
@@ -738,17 +755,20 @@ function checkpointResponseContinuation(state, value) {
     };
   }
   if (!packet) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      response,
       blocker: {
         code: "checkpoint_response_without_packet",
         checkpoint: response.checkpoint,
         message: "A checkpoint response was supplied, but the run state has no pending checkpoint packet.",
         details: { response, checkpoint_summary: checkpointSummaryFromState(state) }
       }
-    };
+    });
   }
   if (response.run_id !== packet.run_id || response.checkpoint !== packet.checkpoint) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_mismatch",
         checkpoint: packet.checkpoint,
@@ -759,10 +779,12 @@ function checkpointResponseContinuation(state, value) {
           actual: { run_id: response.run_id, checkpoint: response.checkpoint }
         }
       }
-    };
+    });
   }
   if (packet.resume_token && response.resume_token !== packet.resume_token) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_resume_token_mismatch",
         checkpoint: packet.checkpoint,
@@ -773,10 +795,12 @@ function checkpointResponseContinuation(state, value) {
           actual_resume_token: response.resume_token || null
         }
       }
-    };
+    });
   }
   if (packet.packet_id && response.packet_id !== packet.packet_id) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_packet_id_mismatch",
         checkpoint: packet.checkpoint,
@@ -789,10 +813,12 @@ function checkpointResponseContinuation(state, value) {
           actual_resume_token: response.resume_token || null
         }
       }
-    };
+    });
   }
   if (!packet.allowed_decisions.includes(response.decision)) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_decision_not_allowed",
         checkpoint: packet.checkpoint,
@@ -804,7 +830,7 @@ function checkpointResponseContinuation(state, value) {
           response
         }
       }
-    };
+    });
   }
   const base = {
     action: "run",
@@ -814,14 +840,16 @@ function checkpointResponseContinuation(state, value) {
   if (response.decision === "author_packet") {
     const payload = authorPacketPayloadFromCheckpointResponse(response);
     if (!payload) {
-      return {
+      return checkpointResponseRejectedBlocker(state, {
+        packet,
+        response,
         blocker: {
           code: "checkpoint_author_packet_missing",
           checkpoint: packet.checkpoint,
           message: "Checkpoint response decision=author_packet did not include a proof_plan and capture_script payload.",
           details: { stage: packet.stage, response }
         }
-      };
+      });
     }
     state.proof_contract = proofContractFromAuthorCheckpointResponse(response, packet, payload);
     appendCheckpointResponse(state, response);
@@ -850,14 +878,16 @@ function checkpointResponseContinuation(state, value) {
       const workdir = nonEmptyString(packet.state_excerpt?.after_worktree) || state.worktree_path;
       if (workdir) state.worktree_path = workdir;
       if (!hasGitDiff(workdir)) {
-        return {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
           blocker: {
             code: "implementation_diff_missing",
             checkpoint: packet.checkpoint,
             message: "Checkpoint response claimed implementation_complete, but the after worktree has no detectable git diff.",
             details: { stage: packet.stage, worktree_path: workdir || null, response }
           }
-        };
+        });
       }
       appendCheckpointResponse(state, response);
       return {
@@ -906,7 +936,13 @@ function checkpointResponseContinuation(state, value) {
         response,
         code: "checkpoint_response_source_not_trusted"
       });
-      if (sourceBlocker) return { blocker: sourceBlocker };
+      if (sourceBlocker) {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
+          blocker: sourceBlocker
+        });
+      }
       appendCheckpointResponse(state, response);
       if (state.request.ship_mode !== "ship" && proofAssessmentRequestsShip(assessment)) {
         const result = {

package/dist/{chunk-F65S5LT2.js → chunk-JLOZTVXU.js}

@@ -3,13 +3,13 @@ import {
   appendStageHeartbeat,
   createRunState,
   setRunStatus
-} from "./chunk-Q5GYD5RG.js";
+} from "./chunk-UZIX7M7D.js";
 import {
   noImplementationModeFor
 } from "./chunk-EKZXU6MU.js";
 import {
   createRunResult
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 import {
   __export
 } from "./chunk-MLKGABMK.js";

package/dist/{chunk-NYRMPWJB.js → chunk-KNPCWWF3.js}

@@ -1,13 +1,13 @@
 import {
   statePathsForRunState
-} from "./chunk-QUK3SG24.js";
+} from "./chunk-MOTQNIZX.js";
 import {
   compactRecord,
   isTerminalStatus,
   nonEmptyString,
   recordValue,
   shipControlStateFor
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 
 // src/run-card.ts
 var RIDDLE_PROOF_RUN_CARD_VERSION = "riddle-proof.run-card.v1";

package/dist/{chunk-QUK3SG24.js → chunk-MOTQNIZX.js}

@@ -2,7 +2,7 @@ import {
   compactRecord,
   nonEmptyString,
   recordValue
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 
 // src/checkpoint.ts
 import crypto from "crypto";
@@ -702,6 +702,8 @@ function checkpointSummaryFromState(state, engineStatePath) {
   const packets = history.filter((entry) => entry.packet);
   const responses = acceptedCheckpointResponseEntries(state);
   const duplicateResponses = events.filter((event) => event.kind === "checkpoint.response.duplicate");
+  const rejectedResponses = events.filter((event) => event.kind === "checkpoint.response.rejected");
+  const ignoredResponses = events.filter((event) => event.kind === "checkpoint.response.ignored");
   const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
   const latestResponseEntry = [...responses].reverse().find((entry) => entry.response);
   const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
@@ -717,6 +719,8 @@ function checkpointSummaryFromState(state, engineStatePath) {
     packet_count: packets.length,
     response_count: responses.length,
     duplicate_response_count: duplicateResponses.length,
+    rejected_response_count: rejectedResponses.length,
+    ignored_response_count: ignoredResponses.length,
     latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
     latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
     latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,

package/dist/{chunk-SONWF3FQ.js → chunk-RS4HJLJQ.js}

@@ -1,6 +1,6 @@
 import {
   compactRecord
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 
 // src/codex-exec-agent.ts
 import { execFileSync, spawnSync } from "child_process";

package/dist/{chunk-J2ZNL3H3.js → chunk-TTB3ZAVX.js}

@@ -1,10 +1,10 @@
 import {
   normalizeIntegrationContext,
   normalizeRunParams
-} from "./chunk-Q5GYD5RG.js";
+} from "./chunk-UZIX7M7D.js";
 import {
   compactRecord
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 
 // src/openclaw.ts
 function parseOpenClawAssertions(value) {

package/dist/{chunk-Q5GYD5RG.js → chunk-UZIX7M7D.js}

@@ -1,13 +1,14 @@
 import {
   createRiddleProofRunCard
-} from "./chunk-NYRMPWJB.js";
+} from "./chunk-KNPCWWF3.js";
 import {
   compactRecord,
+  isProtectedFinalStatus,
   isTerminalStatus,
   nonEmptyString,
   recordValue,
   shipControlStateFor
-} from "./chunk-W44XEGYW.js";
+} from "./chunk-CUBYSWZT.js";
 
 // src/state.ts
 var RIDDLE_PROOF_RUN_STATE_VERSION = "riddle-proof.run-state.v1";
@@ -232,6 +233,7 @@ function createRunStatusSnapshot(state, at = timestamp()) {
 function setRunStatus(state, status, at = timestamp()) {
   state.status = status;
   state.ok = status !== "blocked" && status !== "failed";
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   state.updated_at = at;
   return state;
 }

package/dist/cli/index.js

@@ -1,13 +1,13 @@
-import "../chunk-MYMTAVGP.js";
+import "../chunk-54DIEDR3.js";
 import "../chunk-DI2XNGEZ.js";
 import "../chunk-6KYXX4OE.js";
 import "../chunk-EX7TO4I5.js";
-import "../chunk-QGE3KBRL.js";
-import "../chunk-Q5GYD5RG.js";
-import "../chunk-NYRMPWJB.js";
+import "../chunk-GHBNDHG7.js";
+import "../chunk-UZIX7M7D.js";
+import "../chunk-KNPCWWF3.js";
 import "../chunk-EKZXU6MU.js";
-import "../chunk-QUK3SG24.js";
+import "../chunk-MOTQNIZX.js";
 import "../chunk-JFQXAJH2.js";
-import "../chunk-SONWF3FQ.js";
-import "../chunk-W44XEGYW.js";
+import "../chunk-RS4HJLJQ.js";
+import "../chunk-CUBYSWZT.js";
 import "../chunk-MLKGABMK.js";

package/dist/cli.cjs

@@ -3419,6 +3419,9 @@ var import_node_crypto3 = __toESM(require("crypto"), 1);
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
 }
+function isProtectedFinalStatus(status) {
+  return status === "ready_to_ship" || status === "shipped" || status === "completed";
+}
 function isSuccessfulStatus(status) {
   return status !== "blocked" && status !== "failed";
 }
@@ -3632,6 +3635,7 @@ function createRunResult(input) {
   const state = input.metadata ? applyTerminalMetadata(input.state, input.metadata) : input.state;
   state.status = status;
   state.ok = ok;
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   applyShipControlState(state, { status, raw: input.raw });
   return compactRecord({
     ok,
@@ -4379,6 +4383,8 @@ function checkpointSummaryFromState(state, engineStatePath2) {
   const packets = history.filter((entry) => entry.packet);
   const responses = acceptedCheckpointResponseEntries(state);
   const duplicateResponses = events.filter((event) => event.kind === "checkpoint.response.duplicate");
+  const rejectedResponses = events.filter((event) => event.kind === "checkpoint.response.rejected");
+  const ignoredResponses = events.filter((event) => event.kind === "checkpoint.response.ignored");
   const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
   const latestResponseEntry = [...responses].reverse().find((entry) => entry.response);
   const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
@@ -4394,6 +4400,8 @@ function checkpointSummaryFromState(state, engineStatePath2) {
     packet_count: packets.length,
     response_count: responses.length,
     duplicate_response_count: duplicateResponses.length,
+    rejected_response_count: rejectedResponses.length,
+    ignored_response_count: ignoredResponses.length,
     latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
     latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
     latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,
@@ -4892,6 +4900,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
 function setRunStatus(state, status, at = timestamp2()) {
   state.status = status;
   state.ok = status !== "blocked" && status !== "failed";
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   state.updated_at = at;
   return state;
 }
@@ -4960,9 +4969,6 @@ function loadRunState(input) {
     state_path: statePath
   });
 }
-function isProtectedFinalStatus(status) {
-  return status === "ready_to_ship" || status === "shipped" || status === "completed";
-}
 function shouldPreserveFinalizedRunState(filePath, incoming) {
   const existing = readJson(filePath);
   if (!existing?.finalized || !isProtectedFinalStatus(existing.status)) return false;
@@ -5534,19 +5540,38 @@ function appendCheckpointResponse(state, response, input = {}) {
   setRunStatus(state, "running", at);
   persist(state);
 }
+function checkpointResponseRejectedBlocker(state, input) {
+  const packet = input.packet || null;
+  const response = input.response || null;
+  appendRunEvent(state, {
+    kind: "checkpoint.response.rejected",
+    checkpoint: response?.checkpoint || packet?.checkpoint || input.blocker.checkpoint || null,
+    stage: packet?.stage || state.current_stage || "author",
+    summary: input.blocker.message,
+    details: compactRecord({
+      code: input.blocker.code,
+      decision: response?.decision,
+      resume_token: response?.resume_token,
+      packet_id: response?.packet_id,
+      source: response?.source
+    })
+  });
+  return { blocker: input.blocker };
+}
 function checkpointResponseContinuation(state, value) {
   if (!value) return {};
   const packet = state.checkpoint_packet;
   const response = normalizeCheckpointResponse(value);
   if (!response) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
       blocker: {
         code: "checkpoint_response_invalid",
         checkpoint: packet?.checkpoint || state.last_checkpoint || null,
         message: "Checkpoint response was not a valid riddle-proof.checkpoint_response.v1 object.",
         details: { checkpoint_packet: packet || null, checkpoint_summary: checkpointSummaryFromState(state) }
       }
-    };
+    });
   }
   if (isDuplicateCheckpointResponse(state, response)) {
     const stage = packet?.stage || state.current_stage || "author";
@@ -5577,17 +5602,20 @@ function checkpointResponseContinuation(state, value) {
     };
   }
   if (!packet) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      response,
       blocker: {
         code: "checkpoint_response_without_packet",
         checkpoint: response.checkpoint,
         message: "A checkpoint response was supplied, but the run state has no pending checkpoint packet.",
         details: { response, checkpoint_summary: checkpointSummaryFromState(state) }
       }
-    };
+    });
   }
   if (response.run_id !== packet.run_id || response.checkpoint !== packet.checkpoint) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_mismatch",
         checkpoint: packet.checkpoint,
@@ -5598,10 +5626,12 @@ function checkpointResponseContinuation(state, value) {
           actual: { run_id: response.run_id, checkpoint: response.checkpoint }
         }
       }
-    };
+    });
   }
   if (packet.resume_token && response.resume_token !== packet.resume_token) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_resume_token_mismatch",
         checkpoint: packet.checkpoint,
@@ -5612,10 +5642,12 @@ function checkpointResponseContinuation(state, value) {
           actual_resume_token: response.resume_token || null
         }
       }
-    };
+    });
   }
   if (packet.packet_id && response.packet_id !== packet.packet_id) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_packet_id_mismatch",
         checkpoint: packet.checkpoint,
@@ -5628,10 +5660,12 @@ function checkpointResponseContinuation(state, value) {
           actual_resume_token: response.resume_token || null
         }
       }
-    };
+    });
   }
   if (!packet.allowed_decisions.includes(response.decision)) {
-    return {
+    return checkpointResponseRejectedBlocker(state, {
+      packet,
+      response,
       blocker: {
         code: "checkpoint_response_decision_not_allowed",
         checkpoint: packet.checkpoint,
@@ -5643,7 +5677,7 @@ function checkpointResponseContinuation(state, value) {
           response
         }
       }
-    };
+    });
   }
   const base = {
     action: "run",
@@ -5653,14 +5687,16 @@ function checkpointResponseContinuation(state, value) {
   if (response.decision === "author_packet") {
     const payload = authorPacketPayloadFromCheckpointResponse(response);
     if (!payload) {
-      return {
+      return checkpointResponseRejectedBlocker(state, {
+        packet,
+        response,
         blocker: {
           code: "checkpoint_author_packet_missing",
           checkpoint: packet.checkpoint,
           message: "Checkpoint response decision=author_packet did not include a proof_plan and capture_script payload.",
           details: { stage: packet.stage, response }
         }
-      };
+      });
     }
     state.proof_contract = proofContractFromAuthorCheckpointResponse(response, packet, payload);
     appendCheckpointResponse(state, response);
@@ -5689,14 +5725,16 @@ function checkpointResponseContinuation(state, value) {
       const workdir = nonEmptyString(packet.state_excerpt?.after_worktree) || state.worktree_path;
       if (workdir) state.worktree_path = workdir;
       if (!hasGitDiff(workdir)) {
-        return {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
           blocker: {
             code: "implementation_diff_missing",
             checkpoint: packet.checkpoint,
             message: "Checkpoint response claimed implementation_complete, but the after worktree has no detectable git diff.",
             details: { stage: packet.stage, worktree_path: workdir || null, response }
           }
-        };
+        });
       }
       appendCheckpointResponse(state, response);
       return {
@@ -5745,7 +5783,13 @@ function checkpointResponseContinuation(state, value) {
         response,
         code: "checkpoint_response_source_not_trusted"
       });
-      if (sourceBlocker) return { blocker: sourceBlocker };
+      if (sourceBlocker) {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
+          blocker: sourceBlocker
+        });
+      }
       appendCheckpointResponse(state, response);
       if (state.request.ship_mode !== "ship" && proofAssessmentRequestsShip(assessment)) {
         const result = {

package/dist/cli.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-import "./chunk-MYMTAVGP.js";
+import "./chunk-54DIEDR3.js";
 import "./chunk-DI2XNGEZ.js";
 import "./chunk-6KYXX4OE.js";
 import "./chunk-EX7TO4I5.js";
-import "./chunk-QGE3KBRL.js";
-import "./chunk-Q5GYD5RG.js";
-import "./chunk-NYRMPWJB.js";
+import "./chunk-GHBNDHG7.js";
+import "./chunk-UZIX7M7D.js";
+import "./chunk-KNPCWWF3.js";
 import "./chunk-EKZXU6MU.js";
-import "./chunk-QUK3SG24.js";
+import "./chunk-MOTQNIZX.js";
 import "./chunk-JFQXAJH2.js";
-import "./chunk-SONWF3FQ.js";
-import "./chunk-W44XEGYW.js";
+import "./chunk-RS4HJLJQ.js";
+import "./chunk-CUBYSWZT.js";
 import "./chunk-MLKGABMK.js";

package/dist/codex-exec-agent.js

@@ -2,8 +2,8 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "./chunk-SONWF3FQ.js";
-import "./chunk-W44XEGYW.js";
+} from "./chunk-RS4HJLJQ.js";
+import "./chunk-CUBYSWZT.js";
 import "./chunk-MLKGABMK.js";
 export {
   createCodexExecAgentAdapter,