@riddledc/riddle-proof 0.8.8 → 0.8.10

package/dist/index.cjs

@@ -6319,6 +6319,18 @@ async function routeCheckpoint(request, state, result, agent, input) {
   if (checkpoint === "verify_agent_retry") {
     const next = recommendedContinuation(result);
     if (next) return { next };
+    return {
+      blocker: {
+        code: "proof_assessment_blocked",
+        checkpoint,
+        message: result.summary || "The supervising proof assessment did not approve shipping and did not provide a safe retry continuation.",
+        details: compactRecord({
+          proofAssessment: result.proofAssessment || result.checkpointContract?.proof_assessment || recordValue(result.raw)?.proofAssessment || null,
+          verifyDecisionRequest: result.verifyDecisionRequest || result.checkpointContract?.verify_decision_request || null,
+          checkpointContract: result.checkpointContract || null
+        })
+      }
+    };
   }
   if (checkpoint === "awaiting_stage_advance") {
     const next = recommendedContinuation(result) || defaultAwaitingStageContinuation(result);
@@ -6531,6 +6543,8 @@ var import_node_child_process3 = require("child_process");
 var import_node_fs4 = require("fs");
 var import_node_os = __toESM(require("os"), 1);
 var import_node_path4 = __toESM(require("path"), 1);
+var DEFAULT_CODEX_TIMEOUT_MS = 6e5;
+var DEFAULT_PROOF_PACKET_AUTHOR_TIMEOUT_MS = 18e4;
 var REFINED_INPUTS_SCHEMA = {
   type: "object",
   additionalProperties: false,
@@ -6874,6 +6888,46 @@ function parseJsonFromRunnerOutputs(outputs, schema) {
   if (!combined.trim() || seen.has(combined)) return { parsed: null, source: "" };
   return { parsed: parseJsonObject(combined, schema), source: "combined_output" };
 }
+function resolveCodexTimeoutMs(config, request) {
+  if (typeof config.codexTimeoutMs === "number" && Number.isFinite(config.codexTimeoutMs) && config.codexTimeoutMs > 0) {
+    return Number(config.codexTimeoutMs);
+  }
+  return request.purpose === "proof packet authoring" ? DEFAULT_PROOF_PACKET_AUTHOR_TIMEOUT_MS : DEFAULT_CODEX_TIMEOUT_MS;
+}
+function isCodexLifecycleEvent(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const type = value.type;
+  return typeof type === "string" && (type.startsWith("thread.") || type.startsWith("turn.") || type.startsWith("exec.") || type.startsWith("agent.") || type.startsWith("token.") || type.startsWith("reasoning.") || type.startsWith("error."));
+}
+function analyzeCodexRunnerOutput(outputs) {
+  const eventTypes = /* @__PURE__ */ new Set();
+  let eventLineCount = 0;
+  let nonEventLineCount = 0;
+  const nonEventSamples = [];
+  for (const output of outputs) {
+    const lines = output.text.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+    for (const line of lines) {
+      try {
+        const parsed = JSON.parse(line);
+        if (isCodexLifecycleEvent(parsed)) {
+          eventLineCount += 1;
+          eventTypes.add(parsed.type);
+          continue;
+        }
+      } catch {
+      }
+      nonEventLineCount += 1;
+      if (nonEventSamples.length < 3) nonEventSamples.push(line.slice(0, 240));
+    }
+  }
+  return {
+    eventLineCount,
+    eventTypes: Array.from(eventTypes),
+    nonEventLineCount,
+    nonEventSamples,
+    onlyLifecycleEvents: eventLineCount > 0 && nonEventLineCount === 0
+  };
+}
 function isHarnessVerificationOnlyBlocker(blocker) {
   const text = blocker.toLowerCase();
   return (text.includes("erofs") || text.includes("read-only file system")) && text.includes("node_modules") && (text.includes(".vite-temp") || text.includes("vite.config"));
@@ -6897,21 +6951,25 @@ function runnerMetrics(input) {
     exit_status: input.status ?? null,
     timed_out: input.timedOut || false,
     error_code: input.errorCode,
+    codex_event_types: input.codexEventTypes && input.codexEventTypes.length ? input.codexEventTypes : void 0,
+    codex_event_line_count: input.codexEventLineCount,
+    codex_non_event_line_count: input.codexNonEventLineCount,
     codex_command: input.config.codexCommand || "codex",
     codex_model: input.config.codexModel,
     codex_sandbox: input.config.codexSandbox || "workspace-write",
     codex_full_auto: input.config.codexFullAuto !== false,
-    timeout_ms: Number(input.config.codexTimeoutMs || 6e5)
+    timeout_ms: input.timeoutMs ?? DEFAULT_CODEX_TIMEOUT_MS
   });
 }
 function createCodexExecJsonRunner(config = {}) {
   return (request) => {
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
     const startedMs = Date.now();
+    const timeoutMs = resolveCodexTimeoutMs(config, request);
     if (!request.workdir || !(0, import_node_fs4.existsSync)(request.workdir)) {
       return {
         ok: false,
-        metrics: runnerMetrics({ request, config, startedAt, startedMs, errorCode: "workdir_missing" }),
+        metrics: runnerMetrics({ request, config, startedAt, startedMs, timeoutMs, errorCode: "workdir_missing" }),
         blocker: {
           code: "codex_workdir_missing",
           message: `Codex workdir does not exist for ${request.purpose}.`,
@@ -6946,7 +7004,7 @@ function createCodexExecJsonRunner(config = {}) {
       const proc = (0, import_node_child_process3.spawnSync)(config.codexCommand || "codex", args, {
         input: request.prompt,
         encoding: "utf-8",
-        timeout: Number(config.codexTimeoutMs || 6e5),
+        timeout: timeoutMs,
         maxBuffer: 10 * 1024 * 1024,
         env
       });
@@ -6965,6 +7023,7 @@ function createCodexExecJsonRunner(config = {}) {
             stderr: proc.stderr || "",
             status: proc.status,
             timedOut,
+            timeoutMs,
             errorCode: proc.error.code || "spawn_error"
           }),
           blocker: {
@@ -6987,6 +7046,7 @@ function createCodexExecJsonRunner(config = {}) {
             stdout: proc.stdout || "",
             stderr: proc.stderr || "",
             status: proc.status,
+            timeoutMs,
             errorCode: "nonzero_exit"
           }),
           blocker: {
@@ -6999,12 +7059,15 @@ function createCodexExecJsonRunner(config = {}) {
       const finalText = (0, import_node_fs4.existsSync)(lastMessagePath) ? (0, import_node_fs4.readFileSync)(lastMessagePath, "utf-8") : String(proc.stdout || "");
       const stdoutText = String(proc.stdout || "");
       const stderrText = String(proc.stderr || "");
-      const { parsed, source: parsedJsonSource } = parseJsonFromRunnerOutputs([
+      const runnerOutputs = [
         { source: (0, import_node_fs4.existsSync)(lastMessagePath) ? "last_message" : "stdout", text: finalText },
         { source: "stdout", text: stdoutText },
         { source: "stderr", text: stderrText }
-      ], request.schema);
+      ];
+      const { parsed, source: parsedJsonSource } = parseJsonFromRunnerOutputs(runnerOutputs, request.schema);
       if (!parsed) {
+        const outputAnalysis = analyzeCodexRunnerOutput(runnerOutputs);
+        const errorCode = outputAnalysis.onlyLifecycleEvents ? "no_final_response" : "invalid_json";
         return {
           ok: false,
           stdout: stdoutText,
@@ -7018,12 +7081,24 @@ function createCodexExecJsonRunner(config = {}) {
             stderr: stderrText,
             finalText,
             status: proc.status,
-            errorCode: "invalid_json"
+            timeoutMs,
+            errorCode,
+            codexEventTypes: outputAnalysis.eventTypes,
+            codexEventLineCount: outputAnalysis.eventLineCount,
+            codexNonEventLineCount: outputAnalysis.nonEventLineCount
           }),
           blocker: {
-            code: "codex_invalid_json",
-            message: `Codex completed ${request.purpose}, but did not return valid JSON.`,
-            details: { finalText, stdout: stdoutText, stderr: stderrText }
+            code: outputAnalysis.onlyLifecycleEvents ? "codex_no_final_response" : "codex_invalid_json",
+            message: outputAnalysis.onlyLifecycleEvents ? `Codex emitted lifecycle events during ${request.purpose}, but did not produce a final JSON response.` : `Codex completed ${request.purpose}, but did not return valid JSON.`,
+            details: {
+              finalText,
+              stdout: stdoutText,
+              stderr: stderrText,
+              event_types: outputAnalysis.eventTypes,
+              event_line_count: outputAnalysis.eventLineCount,
+              non_event_line_count: outputAnalysis.nonEventLineCount,
+              non_event_samples: outputAnalysis.nonEventSamples
+            }
           }
         };
       }
@@ -7041,7 +7116,8 @@ function createCodexExecJsonRunner(config = {}) {
           stderr: stderrText,
           finalText,
           parsedJsonSource,
-          status: proc.status
+          status: proc.status,
+          timeoutMs
         })
       };
     } finally {
@@ -7150,6 +7226,7 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "Write a proof_plan and capture_script that will verify the exact user-facing change.",
           "Use recon_assessment.baseline_understanding as the source of truth. Do not author a proof plan unless it names the observed before state and the requested delta from that state.",
           "Use the recon-approved route and baseline context; make the plan name the concrete target, expected before state, expected after state, and stop condition.",
+          "Do not leave this authoring stage pending for external investigation. Keep any repo inspection brief, do not modify files, and return the JSON proof packet from the available state.",
           "Choose the evidence modality from verification_mode and success_criteria: screenshots for visual/UI proof, interactions plus screenshots for interaction proof, structured metrics/logs/JSON/audio analysis for non-visual proof.",
           "For playable/gameplay proof, treat screenshots as supporting artifacts only: start the game, send keyboard or pointer input, measure state before/after, measure non-HUD canvas/playfield pixel deltas across time, and return playability evidence with version riddle-proof.playability.v1.",
           "For interaction proof, return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text. Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",

package/dist/index.js

@@ -95,7 +95,7 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-E7ATYSYS.js";
+} from "./chunk-BBUO7HM4.js";
 import {
   RIDDLE_PROOF_RUN_STATE_VERSION,
   appendRunEvent,
@@ -134,7 +134,7 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "./chunk-PYCQNK66.js";
+} from "./chunk-EEIYUZXE.js";
 import {
   applyTerminalMetadata,
   compactRecord,

package/dist/local-agent.cjs

@@ -48,6 +48,8 @@ function compactRecord(input) {
 }
 
 // src/codex-exec-agent.ts
+var DEFAULT_CODEX_TIMEOUT_MS = 6e5;
+var DEFAULT_PROOF_PACKET_AUTHOR_TIMEOUT_MS = 18e4;
 var REFINED_INPUTS_SCHEMA = {
   type: "object",
   additionalProperties: false,
@@ -391,6 +393,46 @@ function parseJsonFromRunnerOutputs(outputs, schema) {
   if (!combined.trim() || seen.has(combined)) return { parsed: null, source: "" };
   return { parsed: parseJsonObject(combined, schema), source: "combined_output" };
 }
+function resolveCodexTimeoutMs(config, request) {
+  if (typeof config.codexTimeoutMs === "number" && Number.isFinite(config.codexTimeoutMs) && config.codexTimeoutMs > 0) {
+    return Number(config.codexTimeoutMs);
+  }
+  return request.purpose === "proof packet authoring" ? DEFAULT_PROOF_PACKET_AUTHOR_TIMEOUT_MS : DEFAULT_CODEX_TIMEOUT_MS;
+}
+function isCodexLifecycleEvent(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  const type = value.type;
+  return typeof type === "string" && (type.startsWith("thread.") || type.startsWith("turn.") || type.startsWith("exec.") || type.startsWith("agent.") || type.startsWith("token.") || type.startsWith("reasoning.") || type.startsWith("error."));
+}
+function analyzeCodexRunnerOutput(outputs) {
+  const eventTypes = /* @__PURE__ */ new Set();
+  let eventLineCount = 0;
+  let nonEventLineCount = 0;
+  const nonEventSamples = [];
+  for (const output of outputs) {
+    const lines = output.text.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+    for (const line of lines) {
+      try {
+        const parsed = JSON.parse(line);
+        if (isCodexLifecycleEvent(parsed)) {
+          eventLineCount += 1;
+          eventTypes.add(parsed.type);
+          continue;
+        }
+      } catch {
+      }
+      nonEventLineCount += 1;
+      if (nonEventSamples.length < 3) nonEventSamples.push(line.slice(0, 240));
+    }
+  }
+  return {
+    eventLineCount,
+    eventTypes: Array.from(eventTypes),
+    nonEventLineCount,
+    nonEventSamples,
+    onlyLifecycleEvents: eventLineCount > 0 && nonEventLineCount === 0
+  };
+}
 function isHarnessVerificationOnlyBlocker(blocker) {
   const text = blocker.toLowerCase();
   return (text.includes("erofs") || text.includes("read-only file system")) && text.includes("node_modules") && (text.includes(".vite-temp") || text.includes("vite.config"));
@@ -414,21 +456,25 @@ function runnerMetrics(input) {
     exit_status: input.status ?? null,
     timed_out: input.timedOut || false,
     error_code: input.errorCode,
+    codex_event_types: input.codexEventTypes && input.codexEventTypes.length ? input.codexEventTypes : void 0,
+    codex_event_line_count: input.codexEventLineCount,
+    codex_non_event_line_count: input.codexNonEventLineCount,
     codex_command: input.config.codexCommand || "codex",
     codex_model: input.config.codexModel,
     codex_sandbox: input.config.codexSandbox || "workspace-write",
     codex_full_auto: input.config.codexFullAuto !== false,
-    timeout_ms: Number(input.config.codexTimeoutMs || 6e5)
+    timeout_ms: input.timeoutMs ?? DEFAULT_CODEX_TIMEOUT_MS
   });
 }
 function createCodexExecJsonRunner(config = {}) {
   return (request) => {
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
     const startedMs = Date.now();
+    const timeoutMs = resolveCodexTimeoutMs(config, request);
     if (!request.workdir || !(0, import_node_fs.existsSync)(request.workdir)) {
       return {
         ok: false,
-        metrics: runnerMetrics({ request, config, startedAt, startedMs, errorCode: "workdir_missing" }),
+        metrics: runnerMetrics({ request, config, startedAt, startedMs, timeoutMs, errorCode: "workdir_missing" }),
         blocker: {
           code: "codex_workdir_missing",
           message: `Codex workdir does not exist for ${request.purpose}.`,
@@ -463,7 +509,7 @@ function createCodexExecJsonRunner(config = {}) {
       const proc = (0, import_node_child_process.spawnSync)(config.codexCommand || "codex", args, {
         input: request.prompt,
         encoding: "utf-8",
-        timeout: Number(config.codexTimeoutMs || 6e5),
+        timeout: timeoutMs,
         maxBuffer: 10 * 1024 * 1024,
         env
       });
@@ -482,6 +528,7 @@ function createCodexExecJsonRunner(config = {}) {
             stderr: proc.stderr || "",
             status: proc.status,
             timedOut,
+            timeoutMs,
             errorCode: proc.error.code || "spawn_error"
           }),
           blocker: {
@@ -504,6 +551,7 @@ function createCodexExecJsonRunner(config = {}) {
             stdout: proc.stdout || "",
             stderr: proc.stderr || "",
             status: proc.status,
+            timeoutMs,
             errorCode: "nonzero_exit"
           }),
           blocker: {
@@ -516,12 +564,15 @@ function createCodexExecJsonRunner(config = {}) {
       const finalText = (0, import_node_fs.existsSync)(lastMessagePath) ? (0, import_node_fs.readFileSync)(lastMessagePath, "utf-8") : String(proc.stdout || "");
       const stdoutText = String(proc.stdout || "");
       const stderrText = String(proc.stderr || "");
-      const { parsed, source: parsedJsonSource } = parseJsonFromRunnerOutputs([
+      const runnerOutputs = [
         { source: (0, import_node_fs.existsSync)(lastMessagePath) ? "last_message" : "stdout", text: finalText },
         { source: "stdout", text: stdoutText },
         { source: "stderr", text: stderrText }
-      ], request.schema);
+      ];
+      const { parsed, source: parsedJsonSource } = parseJsonFromRunnerOutputs(runnerOutputs, request.schema);
       if (!parsed) {
+        const outputAnalysis = analyzeCodexRunnerOutput(runnerOutputs);
+        const errorCode = outputAnalysis.onlyLifecycleEvents ? "no_final_response" : "invalid_json";
         return {
           ok: false,
           stdout: stdoutText,
@@ -535,12 +586,24 @@ function createCodexExecJsonRunner(config = {}) {
             stderr: stderrText,
             finalText,
             status: proc.status,
-            errorCode: "invalid_json"
+            timeoutMs,
+            errorCode,
+            codexEventTypes: outputAnalysis.eventTypes,
+            codexEventLineCount: outputAnalysis.eventLineCount,
+            codexNonEventLineCount: outputAnalysis.nonEventLineCount
           }),
           blocker: {
-            code: "codex_invalid_json",
-            message: `Codex completed ${request.purpose}, but did not return valid JSON.`,
-            details: { finalText, stdout: stdoutText, stderr: stderrText }
+            code: outputAnalysis.onlyLifecycleEvents ? "codex_no_final_response" : "codex_invalid_json",
+            message: outputAnalysis.onlyLifecycleEvents ? `Codex emitted lifecycle events during ${request.purpose}, but did not produce a final JSON response.` : `Codex completed ${request.purpose}, but did not return valid JSON.`,
+            details: {
+              finalText,
+              stdout: stdoutText,
+              stderr: stderrText,
+              event_types: outputAnalysis.eventTypes,
+              event_line_count: outputAnalysis.eventLineCount,
+              non_event_line_count: outputAnalysis.nonEventLineCount,
+              non_event_samples: outputAnalysis.nonEventSamples
+            }
           }
         };
       }
@@ -558,7 +621,8 @@ function createCodexExecJsonRunner(config = {}) {
           stderr: stderrText,
           finalText,
           parsedJsonSource,
-          status: proc.status
+          status: proc.status,
+          timeoutMs
         })
       };
     } finally {
@@ -667,6 +731,7 @@ function createCodexExecAgentAdapter(config = {}, runner = createCodexExecJsonRu
           "Write a proof_plan and capture_script that will verify the exact user-facing change.",
           "Use recon_assessment.baseline_understanding as the source of truth. Do not author a proof plan unless it names the observed before state and the requested delta from that state.",
           "Use the recon-approved route and baseline context; make the plan name the concrete target, expected before state, expected after state, and stop condition.",
+          "Do not leave this authoring stage pending for external investigation. Keep any repo inspection brief, do not modify files, and return the JSON proof packet from the available state.",
           "Choose the evidence modality from verification_mode and success_criteria: screenshots for visual/UI proof, interactions plus screenshots for interaction proof, structured metrics/logs/JSON/audio analysis for non-visual proof.",
           "For playable/gameplay proof, treat screenshots as supporting artifacts only: start the game, send keyboard or pointer input, measure state before/after, measure non-HUD canvas/playfield pixel deltas across time, and return playability evidence with version riddle-proof.playability.v1.",
           "For interaction proof, return a structured evidence object with start route/state, terminal route/state, action, assertions, and matched UI text. Catch waitForURL or selector timeouts and record them as failed assertions instead of throwing before evidence is emitted.",

package/dist/local-agent.js

@@ -3,7 +3,7 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "./chunk-PYCQNK66.js";
+} from "./chunk-EEIYUZXE.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{proof-run-core-CE0jx7wL.d.ts → proof-run-core-Ci9uFxMc.d.cts}

@@ -120,7 +120,7 @@ declare function buildSetupArgs(params: WorkflowParams, config: ReturnType<typeo
     target_image_hash: string;
     viewport_matrix_json: string;
     deterministic_setup_json: string;
-    reference: "before" | "prod" | "both";
+    reference: "prod" | "before" | "both";
     base_branch: string;
     before_ref: string;
     allow_static_preview_fallback: string;

package/dist/{proof-run-core-CE0jx7wL.d.cts → proof-run-core-Ci9uFxMc.d.ts}

@@ -120,7 +120,7 @@ declare function buildSetupArgs(params: WorkflowParams, config: ReturnType<typeo
     target_image_hash: string;
     viewport_matrix_json: string;
     deterministic_setup_json: string;
-    reference: "before" | "prod" | "both";
+    reference: "prod" | "before" | "both";
     base_branch: string;
     before_ref: string;
     allow_static_preview_fallback: string;

package/dist/proof-run-core.d.cts

@@ -1 +1 @@
-export { B as BUNDLED_RIDDLE_PROOF_DIR, C as CHECKPOINT_CONTRACT_VERSION, b as CheckpointInputContract, P as PluginConfig, R as RIDDLE_PROOF_DIR_CANDIDATES, S as ShipGateValidation, c as WORKFLOW_STAGE_ORDER, d as WorkflowAction, W as WorkflowParams, a as WorkflowStage, e as buildCheckpointContract, f as buildSetupArgs, g as checkpointContinueStage, h as clearStageDecisionRequest, i as ensureAction, j as ensureStageLoopState, k as invalidateVerifyEvidence, m as mergeStateFromParams, n as noImplementationModeFor, l as previewModeFromWorkflowMode, o as readState, q as recordStageAttempt, s as requiredBaselineLabelsForState, r as resolveConfig, t as resolveRiddleProofDir, u as setStageDecisionRequest, v as summarizeState, w as validateShipGate, x as visualDeltaForState, y as visualDeltaRequiredForState, z as visualDeltaShipGateReason, A as workflowFile, D as writeState } from './proof-run-core-CE0jx7wL.cjs';
+export { B as BUNDLED_RIDDLE_PROOF_DIR, C as CHECKPOINT_CONTRACT_VERSION, b as CheckpointInputContract, P as PluginConfig, R as RIDDLE_PROOF_DIR_CANDIDATES, S as ShipGateValidation, c as WORKFLOW_STAGE_ORDER, d as WorkflowAction, W as WorkflowParams, a as WorkflowStage, e as buildCheckpointContract, f as buildSetupArgs, g as checkpointContinueStage, h as clearStageDecisionRequest, i as ensureAction, j as ensureStageLoopState, k as invalidateVerifyEvidence, m as mergeStateFromParams, n as noImplementationModeFor, l as previewModeFromWorkflowMode, o as readState, q as recordStageAttempt, s as requiredBaselineLabelsForState, r as resolveConfig, t as resolveRiddleProofDir, u as setStageDecisionRequest, v as summarizeState, w as validateShipGate, x as visualDeltaForState, y as visualDeltaRequiredForState, z as visualDeltaShipGateReason, A as workflowFile, D as writeState } from './proof-run-core-Ci9uFxMc.cjs';

package/dist/proof-run-core.d.ts

@@ -1 +1 @@
-export { B as BUNDLED_RIDDLE_PROOF_DIR, C as CHECKPOINT_CONTRACT_VERSION, b as CheckpointInputContract, P as PluginConfig, R as RIDDLE_PROOF_DIR_CANDIDATES, S as ShipGateValidation, c as WORKFLOW_STAGE_ORDER, d as WorkflowAction, W as WorkflowParams, a as WorkflowStage, e as buildCheckpointContract, f as buildSetupArgs, g as checkpointContinueStage, h as clearStageDecisionRequest, i as ensureAction, j as ensureStageLoopState, k as invalidateVerifyEvidence, m as mergeStateFromParams, n as noImplementationModeFor, l as previewModeFromWorkflowMode, o as readState, q as recordStageAttempt, s as requiredBaselineLabelsForState, r as resolveConfig, t as resolveRiddleProofDir, u as setStageDecisionRequest, v as summarizeState, w as validateShipGate, x as visualDeltaForState, y as visualDeltaRequiredForState, z as visualDeltaShipGateReason, A as workflowFile, D as writeState } from './proof-run-core-CE0jx7wL.js';
+export { B as BUNDLED_RIDDLE_PROOF_DIR, C as CHECKPOINT_CONTRACT_VERSION, b as CheckpointInputContract, P as PluginConfig, R as RIDDLE_PROOF_DIR_CANDIDATES, S as ShipGateValidation, c as WORKFLOW_STAGE_ORDER, d as WorkflowAction, W as WorkflowParams, a as WorkflowStage, e as buildCheckpointContract, f as buildSetupArgs, g as checkpointContinueStage, h as clearStageDecisionRequest, i as ensureAction, j as ensureStageLoopState, k as invalidateVerifyEvidence, m as mergeStateFromParams, n as noImplementationModeFor, l as previewModeFromWorkflowMode, o as readState, q as recordStageAttempt, s as requiredBaselineLabelsForState, r as resolveConfig, t as resolveRiddleProofDir, u as setStageDecisionRequest, v as summarizeState, w as validateShipGate, x as visualDeltaForState, y as visualDeltaRequiredForState, z as visualDeltaShipGateReason, A as workflowFile, D as writeState } from './proof-run-core-Ci9uFxMc.js';

package/dist/{proof-run-engine-BlocjMni.d.cts → proof-run-engine-Bd1T43Dy.d.cts}

@@ -1,4 +1,4 @@
-import { W as WorkflowParams, r as resolveConfig, P as PluginConfig, a as WorkflowStage } from './proof-run-core-CE0jx7wL.cjs';
+import { W as WorkflowParams, r as resolveConfig, P as PluginConfig, a as WorkflowStage } from './proof-run-core-Ci9uFxMc.cjs';
 
 declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, resolvedConfig?: ReturnType<typeof resolveConfig>): Promise<{
     ok: boolean;
@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship";
     state_path: string;
     stage: any;
     summary: string;

package/dist/{proof-run-engine-C_m8WJmX.d.ts → proof-run-engine-CXyhB-io.d.ts}

@@ -1,4 +1,4 @@
-import { W as WorkflowParams, r as resolveConfig, P as PluginConfig, a as WorkflowStage } from './proof-run-core-CE0jx7wL.js';
+import { W as WorkflowParams, r as resolveConfig, P as PluginConfig, a as WorkflowStage } from './proof-run-core-Ci9uFxMc.js';
 
 declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, resolvedConfig?: ReturnType<typeof resolveConfig>): Promise<{
     ok: boolean;
@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup" | "run";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "recon" | "author" | "ship" | "implement" | "verify" | "setup";
+    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship";
     state_path: string;
     stage: any;
     summary: string;

package/dist/proof-run-engine.d.cts

@@ -1,2 +1,2 @@
-import './proof-run-core-CE0jx7wL.cjs';
-export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-BlocjMni.cjs';
+import './proof-run-core-Ci9uFxMc.cjs';
+export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-Bd1T43Dy.cjs';

package/dist/proof-run-engine.d.ts

@@ -1,2 +1,2 @@
-import './proof-run-core-CE0jx7wL.js';
-export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-C_m8WJmX.js';
+import './proof-run-core-Ci9uFxMc.js';
+export { R as RiddleProofEngine, c as createRiddleProofEngine, e as executeWorkflow } from './proof-run-engine-CXyhB-io.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.8.8",
+  "version": "0.8.10",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",
@@ -227,6 +227,6 @@
     "build": "tsup src/index.ts src/types.ts src/result.ts src/state.ts src/checkpoint.ts src/run-card.ts src/runner.ts src/engine-harness.ts src/codex-exec-agent.ts src/local-agent.ts src/cli.ts src/cli/index.ts src/diagnostics.ts src/proof-session.ts src/playability.ts src/basic-gameplay.ts src/profile.ts src/profile/index.ts src/openclaw.ts src/proof-run-core.ts src/proof-run-engine.ts src/riddle-client.ts src/runtime/riddle-client.ts src/spec/index.ts src/spec/types.ts src/spec/result.ts src/spec/state.ts src/spec/checkpoint.ts src/spec/run-card.ts src/runtime/index.ts src/app-contract/index.ts src/advanced/index.ts src/advanced/runner.ts src/advanced/engine-harness.ts src/advanced/proof-run-core.ts src/advanced/proof-run-engine.ts src/adapters/openclaw.ts src/adapters/local-agent.ts src/adapters/codex-exec-agent.ts src/adapters/codex.ts --format cjs,esm --dts --out-dir dist --clean",
     "clean": "rm -rf dist",
     "lint": "echo 'lint: (not configured)'",
-    "test": "npm run build && node test.js && node proof-run.test.js"
+    "test": "npm run build && node test.js && node proof-run.test.js && node trust-boundary.test.js && python3 runtime/tests/trust_boundary_regression.py"
   }
 }