blun-king-cli 9.1.447 → 9.1.448

package/bin/cognitive-action-checkpoint.cjs

@@ -13,7 +13,7 @@ const TRIGGER_KINDS = new Set([
   'immediate', 'external_event', 'time', 'dependency', 'user_decision',
 ]);
 const MODEL_KEYS = new Set([
-  'revision', 'phase', 'evidenceBasis', 'epistemicState', 'lastVerified', 'nextAction', 'expectedEvidence', 'nextTrigger', 'problemFrame', 'updatedAt',
+  'revision', 'phase', 'evidenceBasis', 'epistemicState', 'lastVerified', 'nextAction', 'expectedEvidence', 'verificationProof', 'nextTrigger', 'problemFrame', 'updatedAt',
 ]);
 const RUNTIME_KEYS = new Set([...MODEL_KEYS, 'evidenceReceipt']);
 const PROBLEM_FRAME_KEYS = new Set([
@@ -27,6 +27,12 @@ const EVIDENCE_INPUT_KEYS = new Set([
 const EVIDENCE_DIGEST_RE = /^[a-f0-9]{16}$/u;
 const DECISION_BASIS_RE = /^[a-f0-9]{16}$/u;
 const ISO_TIMESTAMP_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}(?::?\d{2})?)$/u;
+const ACTION_ONLY_TOOL_NAMES = new Set([
+  'CreateGoal', 'CronCreate', 'CronDelete', 'DubVideo', 'Edit', 'EnterPlanMode',
+  'ExitPlanMode', 'GenerateImage', 'GenerateSpeech', 'GenerateVideo', 'LipSyncMedia',
+  'MistakeRecord', 'SetGoalBudget', 'TaskStop', 'TaskUpdate', 'UpdateGoal', 'Write',
+]);
+const MAX_SUCCESSFUL_TOOL_DIGESTS = 32;
 
 function bounded(value, field, max = 512) {
   const text = String(value ?? '')
@@ -148,6 +154,44 @@ function normalizedTurnId(value) {
   return turnId;
 }
 
+function successfulToolDigest(toolName) {
+  const name = bounded(toolName, 'verificationProof toolName', 128);
+  return crypto.createHash('sha256').update(`tool:${name}`).digest('hex').slice(0, 16);
+}
+
+function isActionOnlyTool(toolName) {
+  return ACTION_ONLY_TOOL_NAMES.has(String(toolName ?? '').trim());
+}
+
+function normalizeSuccessfulToolDigests(value) {
+  if (value === undefined) return Object.freeze([]);
+  if (!Array.isArray(value) || value.length > MAX_SUCCESSFUL_TOOL_DIGESTS
+      || value.some((item) => typeof item !== 'string' || !EVIDENCE_DIGEST_RE.test(item))
+      || new Set(value).size !== value.length) {
+    throw new TypeError('successful tool digests are invalid');
+  }
+  return Object.freeze([...value]);
+}
+
+function normalizeVerificationProof(input, evidenceReceipt) {
+  if (!input || typeof input !== 'object' || Array.isArray(input)
+      || Object.keys(input).length !== 2
+      || !Object.hasOwn(input, 'toolName')
+      || !Object.hasOwn(input, 'claim')) {
+    throw new TypeError('verificationProof fields are invalid');
+  }
+  const toolName = bounded(input.toolName, 'verificationProof toolName', 128);
+  const claim = bounded(input.claim, 'verificationProof claim');
+  if (isActionOnlyTool(toolName)) {
+    throw new TypeError('action-only tool cannot serve as verification proof');
+  }
+  const receipt = normalizeActionEvidenceReceipt(evidenceReceipt);
+  if (!receipt.successfulToolDigests.includes(successfulToolDigest(toolName))) {
+    throw new TypeError('verificationProof must name a successful current-turn tool');
+  }
+  return Object.freeze({ toolName, claim });
+}
+
 function emptyActionEvidenceReceipt(turnId) {
   const normalized = normalizedTurnId(turnId);
   return Object.freeze({
@@ -155,14 +199,17 @@ function emptyActionEvidenceReceipt(turnId) {
     completedTools: 0,
     successfulTools: 0,
     failedTools: 0,
+    successfulToolDigests: Object.freeze([]),
     digest: crypto.createHash('sha256').update(`turn:${normalized}:empty`).digest('hex').slice(0, 16),
   });
 }
 
 function normalizeActionEvidenceReceipt(input) {
   if (!input || typeof input !== 'object' || Array.isArray(input)) throw new TypeError('evidence receipt must be an object');
-  const keys = new Set(['turnId', 'completedTools', 'successfulTools', 'failedTools', 'digest']);
-  if (!Object.keys(input).every((key) => keys.has(key)) || Object.keys(input).length !== keys.size) {
+  const requiredKeys = new Set(['turnId', 'completedTools', 'successfulTools', 'failedTools', 'digest']);
+  const allowedKeys = new Set([...requiredKeys, 'successfulToolDigests']);
+  if (!Object.keys(input).every((key) => allowedKeys.has(key))
+      || ![...requiredKeys].every((key) => Object.hasOwn(input, key))) {
     throw new TypeError('evidence receipt fields are invalid');
   }
   const receipt = {
@@ -170,6 +217,7 @@ function normalizeActionEvidenceReceipt(input) {
     completedTools: Number(input.completedTools),
     successfulTools: Number(input.successfulTools),
     failedTools: Number(input.failedTools),
+    successfulToolDigests: normalizeSuccessfulToolDigests(input.successfulToolDigests),
     digest: String(input.digest ?? ''),
   };
   if (![receipt.completedTools, receipt.successfulTools, receipt.failedTools]
@@ -200,6 +248,12 @@ function advanceActionEvidenceReceipt(current, input) {
     throw new TypeError('evidence input values are invalid');
   }
   const successful = decision === 'passed' && outcome === 'success';
+  const successfulToolDigests = [...prior.successfulToolDigests];
+  const toolDigest = successfulToolDigest(toolName);
+  if (successful && !successfulToolDigests.includes(toolDigest)) {
+    successfulToolDigests.push(toolDigest);
+    if (successfulToolDigests.length > MAX_SUCCESSFUL_TOOL_DIGESTS) successfulToolDigests.shift();
+  }
   const digest = crypto.createHash('sha256').update([
     prior.digest, String(turnId), toolCallId, toolName, decision, outcome, String(durationMs),
   ].join('\0')).digest('hex').slice(0, 16);
@@ -208,6 +262,7 @@ function advanceActionEvidenceReceipt(current, input) {
     completedTools: prior.completedTools + 1,
     successfulTools: prior.successfulTools + (successful ? 1 : 0),
     failedTools: prior.failedTools + (successful ? 0 : 1),
+    successfulToolDigests: Object.freeze(successfulToolDigests),
     digest,
   });
 }
@@ -293,6 +348,12 @@ function normalizeActionCheckpoint(input, options = {}) {
       ? normalizeActionEvidenceReceipt(input.evidenceReceipt)
       : undefined;
   if (evidenceReceipt !== undefined) checkpoint.evidenceReceipt = evidenceReceipt;
+  if (input.verificationProof !== undefined) {
+    if (phase !== 'verify' || evidenceBasis !== 'runtime_tool') {
+      throw new TypeError('verificationProof requires a runtime_tool verify checkpoint');
+    }
+    checkpoint.verificationProof = normalizeVerificationProof(input.verificationProof, evidenceReceipt);
+  }
   return Object.freeze(checkpoint);
 }
 
@@ -309,6 +370,9 @@ function projectActionCheckpoint(checkpoint) {
   ];
   lines.push(`Next action: ${value.nextAction}`);
   lines.push(`Expected evidence: ${value.expectedEvidence}`);
+  if (value.verificationProof !== undefined) {
+    lines.push(`Verification proof: ${value.verificationProof.toolName} - ${value.verificationProof.claim}`);
+  }
   if (value.nextTrigger !== undefined) {
     lines.push(`Next trigger: ${value.nextTrigger.kind.replaceAll('_', ' ')} - ${value.nextTrigger.condition}`);
     if (value.nextTrigger.dueAt !== undefined) lines.push(`Due at: ${value.nextTrigger.dueAt}`);
@@ -344,5 +408,7 @@ module.exports = {
   assertActionCheckpointRevision,
   emptyActionEvidenceReceipt,
   normalizeActionCheckpoint,
+  normalizeVerificationProof,
   projectActionCheckpoint,
+  successfulToolDigest,
 };

package/bin/goal-completion-evidence-policy.cjs

@@ -1,5 +1,9 @@
 'use strict';
 
+const {
+  normalizeVerificationProof,
+} = require('./cognitive-action-checkpoint.cjs');
+
 function hasCompletionCriterion(goal) {
   return typeof goal?.completionCriterion === 'string'
     && goal.completionCriterion.trim().length > 0;
@@ -10,6 +14,24 @@ function successfulRuntimeEvidence(checkpoint) {
   return Number.isSafeInteger(successfulTools) && successfulTools > 0;
 }
 
+function verificationProofGaps(checkpoint) {
+  if (!checkpoint?.verificationProof) {
+    return ['Bind the completion claim to a successful verification tool from the checkpoint turn.'];
+  }
+  try {
+    normalizeVerificationProof(checkpoint.verificationProof, checkpoint.evidenceReceipt);
+    return [];
+  } catch (error) {
+    if (/action-only tool/u.test(String(error?.message ?? ''))) {
+      return ['The completion proof names an action-only tool, not a verification tool.'];
+    }
+    if (/successful current-turn tool/u.test(String(error?.message ?? ''))) {
+      return ['The completion proof does not match a successful verification tool from the checkpoint turn.'];
+    }
+    return ['The completion verification proof is malformed.'];
+  }
+}
+
 function evaluateGoalCompletionEvidence(goal) {
   if (!hasCompletionCriterion(goal)) {
     return {
@@ -40,9 +62,16 @@ function evaluateGoalCompletionEvidence(goal) {
   if (checkpoint.epistemicState !== 'verified') {
     gaps.push('The completion proof must be classified as verified.');
   }
-  if (!successfulRuntimeEvidence(checkpoint)) {
+  const hasRuntimeEvidence = successfulRuntimeEvidence(checkpoint);
+  if (!hasRuntimeEvidence) {
     gaps.push('The runtime evidence receipt must contain at least one successful tool result.');
   }
+  if (checkpoint.phase === 'verify'
+      && checkpoint.evidenceBasis === 'runtime_tool'
+      && checkpoint.epistemicState === 'verified'
+      && hasRuntimeEvidence) {
+    gaps.push(...verificationProofGaps(checkpoint));
+  }
 
   return {
     required: true,

package/blun.mjs

@@ -260348,6 +260348,10 @@ function createActionCheckpointInputSchema(problemFrameSchema, requireProblemFra
 		lastVerified: string().min(1).max(512),
 		nextAction: string().min(1).max(512),
 		expectedEvidence: string().min(1).max(512),
+		verificationProof: object({
+			toolName: string().min(1).max(128),
+			claim: string().min(1).max(512)
+		}).strict().optional(),
 		nextTrigger: object({
 			kind: _enum(["immediate", "external_event", "time", "dependency", "user_decision"]),
 			condition: string().min(1).max(512),
@@ -262868,6 +262872,7 @@ var init_outcome_prompts = __esmMin((() => {}));
 var update_goal_default;
 var init_update_goal$1 = __esmMin((() => {
 	update_goal_default = "Update the current autonomous goal. Set `status` only for a lifecycle change. After a coherent work slice, save `actionCheckpoint` with a monotone revision, the last verified result, exact next action, expected evidence, exact `nextTrigger`, and an explicit evidence basis. Persist the exact `nextTrigger` that releases `nextAction`: use `immediate` outside the `wait` phase; while waiting, name the external event, time, dependency, or user decision instead of pretending work can continue. A `time` trigger must include the exact ISO timestamp in `dueAt`; no other trigger kind may include `dueAt`. Use `runtime_tool` only when a successful tool in this turn measured the result; use `user_statement` for a direct user assertion, `external_report` for a report not independently measured here, and `carried_forward` only when the last verified text is unchanged. Classify knowledge as `verified`, `credible_unverified`, `hypothesis`, `uncertain_memory`, `stale`, or `unknown`; never present a weaker state as verified, and preserve the state on carry-forward. Start at revision 1 and increment the currently projected revision by exactly one; stale writers fail closed. This is durable progress state, not permission, and should change only when the facts change. A checkpoint-only call keeps the goal active.\n\n- `active` — resume a paused or blocked goal when the user explicitly asks you to work on that goal.\n- `complete` — the objective is fully satisfied, all files are written, all tests pass, and any stated validation has passed. When the goal has a completion criterion, first save a `verify` checkpoint with `runtime_tool`, `verified`, and a successful runtime evidence receipt.\n- `blocked` — a genuine external condition or required user decision prevents progress.\n- `paused` — set the goal aside for now.\n\nDo not mark complete after a plan or partial result. If useful work remains, checkpoint it and continue. Do not ask for permission merely to execute an already authorized checkpoint; ask only at a real rights boundary or missing user decision.\n";
+	update_goal_default += "\nBefore completing a goal with a criterion, bind the verified claim to the successful current-turn verification tool in `verificationProof`. A write or edit is an action, not proof that the changed behavior works. Run a separate observation, test, or counterexample probe and name that successful tool plus the exact claim it supports.\n";
 	update_goal_default += "\nFor a non-trivial or unfamiliar problem, preserve `problemFrame` with the success criterion, missing knowledge, bounded candidate actions, selected action and reason, support choice, risk, and reversibility. The selected action must match one candidate. Bind each selected action to the projected durable facts or assumptions it relies on by copying their explicit refs into `decisionBasis`. A stale or unknown decision basis requires replanning before execution. Problem framing is descriptive state and never grants permission.\n";
 }));
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.447",
+  "version": "9.1.448",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {