@riddledc/riddle-proof 0.5.39 → 0.5.41

package/dist/engine-harness.cjs

@@ -2946,6 +2946,9 @@ function createRunResult(input) {
     finalized: state.finalized,
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     proof_session: state.proof_session,
     evidence_bundle: input.evidence_bundle,
     raw: input.raw
@@ -3045,6 +3048,9 @@ function createRunState(input) {
     iterations: input.iterations ?? 0,
     last_checkpoint: input.last_checkpoint ?? null,
     checkpoint_packet: input.checkpoint_packet,
+    checkpoint_summary: input.checkpoint_summary,
+    state_paths: input.state_paths,
+    proof_contract: input.proof_contract,
     checkpoint_history: input.checkpoint_history,
     events: input.events ? [...input.events] : []
   });
@@ -3120,6 +3126,9 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     stage_elapsed_ms: elapsedMs(state.stage_started_at, at),
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     latest_event: latestEvent
   });
 }
@@ -3146,11 +3155,34 @@ function jsonCloneRecord(value) {
     return { ...record };
   }
 }
+function jsonCloneValue(value) {
+  if (value === void 0 || value === null) return void 0;
+  try {
+    return JSON.parse(JSON.stringify(value));
+  } catch {
+    return value;
+  }
+}
+function stableJson(value) {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+  const record = recordValue(value);
+  if (record) {
+    return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
 function compactText(value, limit = 1600) {
   const text = nonEmptyString(value);
   if (!text) return void 0;
   return text.length <= limit ? text : `${text.slice(0, limit - 20).trimEnd()}...`;
 }
+function statePathsForRunState(state, engineStatePath2) {
+  return compactRecord({
+    wrapper_state_path: state.state_path || state.request.harness_state_path || null,
+    engine_state_path: engineStatePath2 || state.request.engine_state_path || null,
+    resume_state_path: engineStatePath2 || state.request.engine_state_path || null
+  });
+}
 function responseSchemaForAuthorPacket() {
   return {
     type: "object",
@@ -3292,6 +3324,55 @@ function normalizeCheckpointResponse(value) {
     created_at: nonEmptyString(record.created_at) || timestamp2()
   });
 }
+function checkpointSummaryFromState(state, engineStatePath2) {
+  const history = state.checkpoint_history || [];
+  const packets = history.filter((entry) => entry.packet);
+  const responses = history.filter((entry) => entry.response);
+  const duplicateResponses = (state.events || []).filter((event) => event.kind === "checkpoint.response.duplicate");
+  const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
+  const latestResponseEntry = [...history].reverse().find((entry) => entry.response);
+  const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
+  const latestResponse = latestResponseEntry?.response;
+  const latestResumeToken = latestPacket?.resume_token || null;
+  const latestResponseToken = latestResponse?.resume_token || null;
+  const tokenMatches = latestResumeToken && latestResponseToken ? latestResumeToken === latestResponseToken : latestResumeToken || latestResponseToken ? false : null;
+  return compactRecord({
+    pending: Boolean(state.checkpoint_packet),
+    packet_count: packets.length,
+    response_count: responses.length,
+    duplicate_response_count: duplicateResponses.length,
+    latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
+    latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
+    latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,
+    latest_decision: latestResponse?.decision || null,
+    latest_packet_summary: latestPacket?.summary || null,
+    latest_response_summary: latestResponse?.summary || null,
+    latest_resume_token: latestResumeToken,
+    latest_response_token: latestResponseToken,
+    token_matches: tokenMatches,
+    last_packet_at: latestPacketEntry?.ts || null,
+    last_response_at: latestResponseEntry?.ts || null,
+    state_paths: statePathsForRunState(state, engineStatePath2)
+  });
+}
+function isDuplicateCheckpointResponse(state, response) {
+  const identity = checkpointResponseIdentity(response);
+  return (state.checkpoint_history || []).some((entry) => entry.response ? checkpointResponseIdentity(entry.response) === identity : false);
+}
+function checkpointResponseIdentity(response) {
+  const logicalResponse = compactRecord({
+    run_id: response.run_id,
+    checkpoint: response.checkpoint,
+    resume_token: response.resume_token,
+    decision: response.decision,
+    summary: response.summary,
+    payload: response.payload,
+    reasons: response.reasons,
+    continue_with_stage: response.continue_with_stage,
+    source: response.source
+  });
+  return import_node_crypto.default.createHash("sha256").update(stableJson(logicalResponse)).digest("hex").slice(0, 24);
+}
 function authorPacketPayloadFromCheckpointResponse(response) {
   if (response.decision !== "author_packet") return null;
   const payload = recordValue(response.payload);
@@ -3301,6 +3382,37 @@ function authorPacketPayloadFromCheckpointResponse(response) {
   if (!nonEmptyString(candidate.proof_plan) || !nonEmptyString(candidate.capture_script)) return null;
   return candidate;
 }
+function proofContractFromAuthorCheckpointResponse(response, packet, payload) {
+  const refinedInputs = recordValue(payload.refined_inputs) || {};
+  return compactRecord({
+    version: "riddle-proof.proof-contract.v1",
+    checkpoint: packet.checkpoint,
+    source_response: compactRecord({
+      run_id: response.run_id,
+      checkpoint: response.checkpoint,
+      resume_token: response.resume_token,
+      decision: response.decision,
+      summary: response.summary,
+      created_at: response.created_at
+    }),
+    proof_plan: nonEmptyString(payload.proof_plan),
+    capture_script: nonEmptyString(payload.capture_script),
+    artifact_contract: jsonCloneRecord(payload.artifact_contract),
+    assertions: jsonCloneValue(payload.assertions),
+    baseline_understanding: jsonCloneRecord(payload.baseline_understanding) || jsonCloneRecord(payload.recon_baseline_understanding) || jsonCloneRecord(packet.state_excerpt?.recon_baseline_understanding),
+    route_assumptions: compactRecord({
+      server_path: nonEmptyString(refinedInputs.server_path) || nonEmptyString(payload.server_path) || nonEmptyString(packet.state_excerpt?.server_path),
+      wait_for_selector: nonEmptyString(refinedInputs.wait_for_selector) || nonEmptyString(payload.wait_for_selector) || nonEmptyString(packet.state_excerpt?.wait_for_selector),
+      reference: nonEmptyString(refinedInputs.reference) || nonEmptyString(payload.reference),
+      expected_path: nonEmptyString(payload.expected_path) || nonEmptyString(refinedInputs.expected_path)
+    }),
+    stop_condition: nonEmptyString(payload.stop_condition),
+    rationale: jsonCloneValue(payload.rationale),
+    verdict_dimensions: jsonCloneRecord(payload.verdict_dimensions),
+    payload: jsonCloneRecord(payload),
+    created_at: timestamp2()
+  });
+}
 
 // src/engine-harness.ts
 init_proof_run_core();
@@ -3377,6 +3489,8 @@ function shouldPreserveFinalizedRunState(filePath, incoming) {
   return !(existing.status === "ready_to_ship" && incoming.status === "shipped");
 }
 function persist(state) {
+  state.state_paths = statePathsForRunState(state);
+  state.checkpoint_summary = checkpointSummaryFromState(state);
   if (!state.state_path) return;
   if (shouldPreserveFinalizedRunState(state.state_path, state)) return;
   writeJson(state.state_path, state);
@@ -3633,6 +3747,10 @@ function engineFailureBlocker(result, checkpoint) {
   };
 }
 function terminalResult(state, status, result, summary, raw = {}) {
+  if (result) {
+    const terminalStage = stageFromCheckpoint(result);
+    if (terminalStage !== "setup") state.current_stage = terminalStage;
+  }
   setRunStatus(state, status);
   if (isProtectedFinalStatus(status)) state.finalized = true;
   const metadata = normalizeTerminalMetadata({
@@ -3655,10 +3773,12 @@ function terminalResult(state, status, result, summary, raw = {}) {
 }
 function blockerResult(state, result, blocker) {
   state.blocker = blocker;
+  const blockerStage = nonEmptyString(recordValue(blocker.details)?.stage);
+  const stage = blockerStage || stageFromCheckpoint(result || { checkpoint: blocker.checkpoint || void 0 });
   recordEvent(state, {
     kind: "run.blocked",
     checkpoint: blocker.checkpoint || result?.checkpoint || null,
-    stage: stageFromCheckpoint(result || {}),
+    stage,
     summary: blocker.message,
     details: {
       code: blocker.code,
@@ -3750,7 +3870,35 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_invalid",
         checkpoint: packet?.checkpoint || state.last_checkpoint || null,
         message: "Checkpoint response was not a valid riddle-proof.checkpoint_response.v1 object.",
-        details: { checkpoint_packet: packet || null }
+        details: { checkpoint_packet: packet || null, checkpoint_summary: checkpointSummaryFromState(state) }
+      }
+    };
+  }
+  if (isDuplicateCheckpointResponse(state, response)) {
+    const stage = packet?.stage || state.current_stage || "author";
+    recordEvent(state, {
+      kind: "checkpoint.response.duplicate",
+      checkpoint: response.checkpoint,
+      stage,
+      summary: "Duplicate checkpoint response ignored.",
+      details: compactRecord({
+        decision: response.decision,
+        resume_token: response.resume_token,
+        response_identity: checkpointResponseIdentity(response)
+      })
+    });
+    return {
+      blocker: {
+        code: "checkpoint_response_duplicate",
+        checkpoint: response.checkpoint,
+        message: "Checkpoint response was already accepted for this run/checkpoint/resume token and was not applied again.",
+        details: {
+          stage,
+          duplicate: true,
+          response,
+          response_identity: checkpointResponseIdentity(response),
+          checkpoint_summary: checkpointSummaryFromState(state)
+        }
       }
     };
   }
@@ -3760,7 +3908,7 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_without_packet",
         checkpoint: response.checkpoint,
         message: "A checkpoint response was supplied, but the run state has no pending checkpoint packet.",
-        details: { response }
+        details: { response, checkpoint_summary: checkpointSummaryFromState(state) }
       }
     };
   }
@@ -3771,6 +3919,7 @@ function checkpointResponseContinuation(state, value) {
         checkpoint: packet.checkpoint,
         message: "Checkpoint response does not match the pending checkpoint packet.",
         details: {
+          stage: packet.stage,
           expected: { run_id: packet.run_id, checkpoint: packet.checkpoint },
           actual: { run_id: response.run_id, checkpoint: response.checkpoint }
         }
@@ -3783,7 +3932,11 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_resume_token_mismatch",
         checkpoint: packet.checkpoint,
         message: "Checkpoint response resume_token does not match the pending checkpoint packet.",
-        details: { expected_resume_token: packet.resume_token, actual_resume_token: response.resume_token || null }
+        details: {
+          stage: packet.stage,
+          expected_resume_token: packet.resume_token,
+          actual_resume_token: response.resume_token || null
+        }
       }
     };
   }
@@ -3800,10 +3953,11 @@ function checkpointResponseContinuation(state, value) {
           code: "checkpoint_author_packet_missing",
           checkpoint: packet.checkpoint,
           message: "Checkpoint response decision=author_packet did not include a proof_plan and capture_script payload.",
-          details: { response }
+          details: { stage: packet.stage, response }
         }
       };
     }
+    state.proof_contract = proofContractFromAuthorCheckpointResponse(response, packet, payload);
     appendCheckpointResponse(state, response);
     return { next: { ...base, author_packet_json: jsonParam(payload) } };
   }
@@ -3817,7 +3971,7 @@ function checkpointResponseContinuation(state, value) {
       code: `checkpoint_response_${response.decision}`,
       checkpoint: packet.checkpoint,
       message: response.summary || `Checkpoint response stopped the run with decision=${response.decision}.`,
-      details: { response }
+      details: { stage: packet.stage, response }
     }
   };
 }

package/dist/engine-harness.js

@@ -2,10 +2,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-ORRP7CXT.js";
-import "./chunk-UQPTCP4D.js";
-import "./chunk-Z3BWCHFV.js";
-import "./chunk-Z7QUCDPT.js";
+} from "./chunk-ZBM67XGB.js";
+import "./chunk-RI25RGQP.js";
+import "./chunk-7S7O3NKF.js";
+import "./chunk-W7VTDN4T.js";
 import "./chunk-4YCWZVBN.js";
 export {
   createDisabledRiddleProofAgentAdapter,

package/dist/index.cjs

@@ -2751,6 +2751,8 @@ __export(index_exports, {
   authorPacketPayloadFromCheckpointResponse: () => authorPacketPayloadFromCheckpointResponse,
   buildAuthorCheckpointPacket: () => buildAuthorCheckpointPacket,
   buildVisualProofSession: () => buildVisualProofSession,
+  checkpointResponseIdentity: () => checkpointResponseIdentity,
+  checkpointSummaryFromState: () => checkpointSummaryFromState,
   compactRecord: () => compactRecord,
   compareVisualProofSessionFingerprint: () => compareVisualProofSessionFingerprint,
   createCaptureDiagnostic: () => createCaptureDiagnostic,
@@ -2759,6 +2761,7 @@ __export(index_exports, {
   createRunState: () => createRunState,
   createRunStatusSnapshot: () => createRunStatusSnapshot,
   extractPlayabilityEvidence: () => extractPlayabilityEvidence,
+  isDuplicateCheckpointResponse: () => isDuplicateCheckpointResponse,
   isRiddleProofPlayabilityMode: () => isRiddleProofPlayabilityMode,
   isSuccessfulStatus: () => isSuccessfulStatus,
   isTerminalStatus: () => isTerminalStatus,
@@ -2769,12 +2772,14 @@ __export(index_exports, {
   normalizeRunParams: () => normalizeRunParams,
   normalizeTerminalMetadata: () => normalizeTerminalMetadata,
   parseVisualProofSession: () => parseVisualProofSession,
+  proofContractFromAuthorCheckpointResponse: () => proofContractFromAuthorCheckpointResponse,
   readRiddleProofRunStatus: () => readRiddleProofRunStatus,
   recordValue: () => recordValue,
   redactForProofDiagnostics: () => redactForProofDiagnostics,
   runRiddleProof: () => runRiddleProof,
   runRiddleProofEngineHarness: () => runRiddleProofEngineHarness,
   setRunStatus: () => setRunStatus,
+  statePathsForRunState: () => statePathsForRunState,
   summarizeCaptureArtifacts: () => summarizeCaptureArtifacts,
   visualSessionFingerprint: () => visualSessionFingerprint,
   visualSessionFingerprintBasis: () => visualSessionFingerprintBasis
@@ -2986,6 +2991,9 @@ function createRunResult(input) {
     finalized: state.finalized,
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     proof_session: state.proof_session,
     evidence_bundle: input.evidence_bundle,
     raw: input.raw
@@ -3115,6 +3123,9 @@ function createRunState(input) {
     iterations: input.iterations ?? 0,
     last_checkpoint: input.last_checkpoint ?? null,
     checkpoint_packet: input.checkpoint_packet,
+    checkpoint_summary: input.checkpoint_summary,
+    state_paths: input.state_paths,
+    proof_contract: input.proof_contract,
     checkpoint_history: input.checkpoint_history,
     events: input.events ? [...input.events] : []
   });
@@ -3190,6 +3201,9 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     stage_elapsed_ms: elapsedMs(state.stage_started_at, at),
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
+    checkpoint_summary: state.checkpoint_summary,
+    state_paths: state.state_paths,
+    proof_contract: state.proof_contract,
     latest_event: latestEvent
   });
 }
@@ -3233,11 +3247,34 @@ function jsonCloneRecord(value) {
     return { ...record };
   }
 }
+function jsonCloneValue(value) {
+  if (value === void 0 || value === null) return void 0;
+  try {
+    return JSON.parse(JSON.stringify(value));
+  } catch {
+    return value;
+  }
+}
+function stableJson(value) {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+  const record = recordValue(value);
+  if (record) {
+    return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
 function compactText(value, limit = 1600) {
   const text = nonEmptyString(value);
   if (!text) return void 0;
   return text.length <= limit ? text : `${text.slice(0, limit - 20).trimEnd()}...`;
 }
+function statePathsForRunState(state, engineStatePath2) {
+  return compactRecord({
+    wrapper_state_path: state.state_path || state.request.harness_state_path || null,
+    engine_state_path: engineStatePath2 || state.request.engine_state_path || null,
+    resume_state_path: engineStatePath2 || state.request.engine_state_path || null
+  });
+}
 function responseSchemaForAuthorPacket() {
   return {
     type: "object",
@@ -3379,6 +3416,55 @@ function normalizeCheckpointResponse(value) {
     created_at: nonEmptyString(record.created_at) || timestamp2()
   });
 }
+function checkpointSummaryFromState(state, engineStatePath2) {
+  const history = state.checkpoint_history || [];
+  const packets = history.filter((entry) => entry.packet);
+  const responses = history.filter((entry) => entry.response);
+  const duplicateResponses = (state.events || []).filter((event) => event.kind === "checkpoint.response.duplicate");
+  const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
+  const latestResponseEntry = [...history].reverse().find((entry) => entry.response);
+  const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
+  const latestResponse = latestResponseEntry?.response;
+  const latestResumeToken = latestPacket?.resume_token || null;
+  const latestResponseToken = latestResponse?.resume_token || null;
+  const tokenMatches = latestResumeToken && latestResponseToken ? latestResumeToken === latestResponseToken : latestResumeToken || latestResponseToken ? false : null;
+  return compactRecord({
+    pending: Boolean(state.checkpoint_packet),
+    packet_count: packets.length,
+    response_count: responses.length,
+    duplicate_response_count: duplicateResponses.length,
+    latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
+    latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
+    latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,
+    latest_decision: latestResponse?.decision || null,
+    latest_packet_summary: latestPacket?.summary || null,
+    latest_response_summary: latestResponse?.summary || null,
+    latest_resume_token: latestResumeToken,
+    latest_response_token: latestResponseToken,
+    token_matches: tokenMatches,
+    last_packet_at: latestPacketEntry?.ts || null,
+    last_response_at: latestResponseEntry?.ts || null,
+    state_paths: statePathsForRunState(state, engineStatePath2)
+  });
+}
+function isDuplicateCheckpointResponse(state, response) {
+  const identity = checkpointResponseIdentity(response);
+  return (state.checkpoint_history || []).some((entry) => entry.response ? checkpointResponseIdentity(entry.response) === identity : false);
+}
+function checkpointResponseIdentity(response) {
+  const logicalResponse = compactRecord({
+    run_id: response.run_id,
+    checkpoint: response.checkpoint,
+    resume_token: response.resume_token,
+    decision: response.decision,
+    summary: response.summary,
+    payload: response.payload,
+    reasons: response.reasons,
+    continue_with_stage: response.continue_with_stage,
+    source: response.source
+  });
+  return import_node_crypto.default.createHash("sha256").update(stableJson(logicalResponse)).digest("hex").slice(0, 24);
+}
 function authorPacketPayloadFromCheckpointResponse(response) {
   if (response.decision !== "author_packet") return null;
   const payload = recordValue(response.payload);
@@ -3388,6 +3474,37 @@ function authorPacketPayloadFromCheckpointResponse(response) {
   if (!nonEmptyString(candidate.proof_plan) || !nonEmptyString(candidate.capture_script)) return null;
   return candidate;
 }
+function proofContractFromAuthorCheckpointResponse(response, packet, payload) {
+  const refinedInputs = recordValue(payload.refined_inputs) || {};
+  return compactRecord({
+    version: "riddle-proof.proof-contract.v1",
+    checkpoint: packet.checkpoint,
+    source_response: compactRecord({
+      run_id: response.run_id,
+      checkpoint: response.checkpoint,
+      resume_token: response.resume_token,
+      decision: response.decision,
+      summary: response.summary,
+      created_at: response.created_at
+    }),
+    proof_plan: nonEmptyString(payload.proof_plan),
+    capture_script: nonEmptyString(payload.capture_script),
+    artifact_contract: jsonCloneRecord(payload.artifact_contract),
+    assertions: jsonCloneValue(payload.assertions),
+    baseline_understanding: jsonCloneRecord(payload.baseline_understanding) || jsonCloneRecord(payload.recon_baseline_understanding) || jsonCloneRecord(packet.state_excerpt?.recon_baseline_understanding),
+    route_assumptions: compactRecord({
+      server_path: nonEmptyString(refinedInputs.server_path) || nonEmptyString(payload.server_path) || nonEmptyString(packet.state_excerpt?.server_path),
+      wait_for_selector: nonEmptyString(refinedInputs.wait_for_selector) || nonEmptyString(payload.wait_for_selector) || nonEmptyString(packet.state_excerpt?.wait_for_selector),
+      reference: nonEmptyString(refinedInputs.reference) || nonEmptyString(payload.reference),
+      expected_path: nonEmptyString(payload.expected_path) || nonEmptyString(refinedInputs.expected_path)
+    }),
+    stop_condition: nonEmptyString(payload.stop_condition),
+    rationale: jsonCloneValue(payload.rationale),
+    verdict_dimensions: jsonCloneRecord(payload.verdict_dimensions),
+    payload: jsonCloneRecord(payload),
+    created_at: timestamp2()
+  });
+}
 
 // src/runner.ts
 function errorDetails(error) {
@@ -3950,6 +4067,8 @@ function shouldPreserveFinalizedRunState(filePath, incoming) {
   return !(existing.status === "ready_to_ship" && incoming.status === "shipped");
 }
 function persist(state) {
+  state.state_paths = statePathsForRunState(state);
+  state.checkpoint_summary = checkpointSummaryFromState(state);
   if (!state.state_path) return;
   if (shouldPreserveFinalizedRunState(state.state_path, state)) return;
   writeJson(state.state_path, state);
@@ -4206,6 +4325,10 @@ function engineFailureBlocker(result, checkpoint) {
   };
 }
 function terminalResult(state, status, result, summary, raw = {}) {
+  if (result) {
+    const terminalStage = stageFromCheckpoint(result);
+    if (terminalStage !== "setup") state.current_stage = terminalStage;
+  }
   setRunStatus(state, status);
   if (isProtectedFinalStatus(status)) state.finalized = true;
   const metadata = normalizeTerminalMetadata({
@@ -4228,10 +4351,12 @@ function terminalResult(state, status, result, summary, raw = {}) {
 }
 function blockerResult(state, result, blocker) {
   state.blocker = blocker;
+  const blockerStage = nonEmptyString(recordValue(blocker.details)?.stage);
+  const stage = blockerStage || stageFromCheckpoint(result || { checkpoint: blocker.checkpoint || void 0 });
   recordEvent(state, {
     kind: "run.blocked",
     checkpoint: blocker.checkpoint || result?.checkpoint || null,
-    stage: stageFromCheckpoint(result || {}),
+    stage,
     summary: blocker.message,
     details: {
       code: blocker.code,
@@ -4323,7 +4448,35 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_invalid",
         checkpoint: packet?.checkpoint || state.last_checkpoint || null,
         message: "Checkpoint response was not a valid riddle-proof.checkpoint_response.v1 object.",
-        details: { checkpoint_packet: packet || null }
+        details: { checkpoint_packet: packet || null, checkpoint_summary: checkpointSummaryFromState(state) }
+      }
+    };
+  }
+  if (isDuplicateCheckpointResponse(state, response)) {
+    const stage = packet?.stage || state.current_stage || "author";
+    recordEvent(state, {
+      kind: "checkpoint.response.duplicate",
+      checkpoint: response.checkpoint,
+      stage,
+      summary: "Duplicate checkpoint response ignored.",
+      details: compactRecord({
+        decision: response.decision,
+        resume_token: response.resume_token,
+        response_identity: checkpointResponseIdentity(response)
+      })
+    });
+    return {
+      blocker: {
+        code: "checkpoint_response_duplicate",
+        checkpoint: response.checkpoint,
+        message: "Checkpoint response was already accepted for this run/checkpoint/resume token and was not applied again.",
+        details: {
+          stage,
+          duplicate: true,
+          response,
+          response_identity: checkpointResponseIdentity(response),
+          checkpoint_summary: checkpointSummaryFromState(state)
+        }
       }
     };
   }
@@ -4333,7 +4486,7 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_without_packet",
         checkpoint: response.checkpoint,
         message: "A checkpoint response was supplied, but the run state has no pending checkpoint packet.",
-        details: { response }
+        details: { response, checkpoint_summary: checkpointSummaryFromState(state) }
       }
     };
   }
@@ -4344,6 +4497,7 @@ function checkpointResponseContinuation(state, value) {
         checkpoint: packet.checkpoint,
         message: "Checkpoint response does not match the pending checkpoint packet.",
         details: {
+          stage: packet.stage,
           expected: { run_id: packet.run_id, checkpoint: packet.checkpoint },
           actual: { run_id: response.run_id, checkpoint: response.checkpoint }
         }
@@ -4356,7 +4510,11 @@ function checkpointResponseContinuation(state, value) {
         code: "checkpoint_response_resume_token_mismatch",
         checkpoint: packet.checkpoint,
         message: "Checkpoint response resume_token does not match the pending checkpoint packet.",
-        details: { expected_resume_token: packet.resume_token, actual_resume_token: response.resume_token || null }
+        details: {
+          stage: packet.stage,
+          expected_resume_token: packet.resume_token,
+          actual_resume_token: response.resume_token || null
+        }
       }
     };
   }
@@ -4373,10 +4531,11 @@ function checkpointResponseContinuation(state, value) {
           code: "checkpoint_author_packet_missing",
           checkpoint: packet.checkpoint,
           message: "Checkpoint response decision=author_packet did not include a proof_plan and capture_script payload.",
-          details: { response }
+          details: { stage: packet.stage, response }
         }
       };
     }
+    state.proof_contract = proofContractFromAuthorCheckpointResponse(response, packet, payload);
     appendCheckpointResponse(state, response);
     return { next: { ...base, author_packet_json: jsonParam(payload) } };
   }
@@ -4390,7 +4549,7 @@ function checkpointResponseContinuation(state, value) {
       code: `checkpoint_response_${response.decision}`,
       checkpoint: packet.checkpoint,
       message: response.summary || `Checkpoint response stopped the run with decision=${response.decision}.`,
-      details: { response }
+      details: { stage: packet.stage, response }
     }
   };
 }
@@ -5067,12 +5226,12 @@ function hashString(value) {
   if (!text) return void 0;
   return (0, import_node_crypto4.createHash)("sha256").update(text).digest("hex");
 }
-function stableJson(value) {
+function stableJson2(value) {
   if (value === void 0) return "null";
   if (value === null || typeof value !== "object") return JSON.stringify(value);
-  if (Array.isArray(value)) return `[${value.map((item) => stableJson(item)).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map((item) => stableJson2(item)).join(",")}]`;
   const record = value;
-  return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`).join(",")}}`;
+  return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${stableJson2(record[key])}`).join(",")}}`;
 }
 function withoutUndefined(record) {
   for (const key of Object.keys(record)) {
@@ -5098,7 +5257,7 @@ function visualSessionFingerprintBasis(input) {
 }
 function visualSessionFingerprint(input) {
   const basis = input.version === RIDDLE_PROOF_VISUAL_SESSION_FINGERPRINT_VERSION ? input : visualSessionFingerprintBasis(input);
-  return (0, import_node_crypto4.createHash)("sha256").update(stableJson(basis)).digest("hex");
+  return (0, import_node_crypto4.createHash)("sha256").update(stableJson2(basis)).digest("hex");
 }
 function buildVisualProofSession(input) {
   const basis = visualSessionFingerprintBasis(input);
@@ -5159,7 +5318,7 @@ function compareVisualProofSessionFingerprint(parent, input) {
   for (const key of keys) {
     const expectedValue = expectedRecord[key];
     const actualValue = actualRecord[key];
-    if (stableJson(expectedValue) !== stableJson(actualValue)) {
+    if (stableJson2(expectedValue) !== stableJson2(actualValue)) {
       mismatches.push({ key, expected: expectedValue, actual: actualValue });
     }
   }
@@ -5541,6 +5700,8 @@ function parseJson(value) {
   authorPacketPayloadFromCheckpointResponse,
   buildAuthorCheckpointPacket,
   buildVisualProofSession,
+  checkpointResponseIdentity,
+  checkpointSummaryFromState,
   compactRecord,
   compareVisualProofSessionFingerprint,
   createCaptureDiagnostic,
@@ -5549,6 +5710,7 @@ function parseJson(value) {
   createRunState,
   createRunStatusSnapshot,
   extractPlayabilityEvidence,
+  isDuplicateCheckpointResponse,
   isRiddleProofPlayabilityMode,
   isSuccessfulStatus,
   isTerminalStatus,
@@ -5559,12 +5721,14 @@ function parseJson(value) {
   normalizeRunParams,
   normalizeTerminalMetadata,
   parseVisualProofSession,
+  proofContractFromAuthorCheckpointResponse,
   readRiddleProofRunStatus,
   recordValue,
   redactForProofDiagnostics,
   runRiddleProof,
   runRiddleProofEngineHarness,
   setRunStatus,
+  statePathsForRunState,
   summarizeCaptureArtifacts,
   visualSessionFingerprint,
   visualSessionFingerprintBasis