@riddledc/riddle-proof 0.8.45 → 0.8.47

package/dist/adapters/openclaw.js

@@ -3,10 +3,10 @@ import {
   parseOpenClawAssertions,
   parseOpenClawJsonObjectOrArray,
   toRiddleProofRunParams
-} from "../chunk-AYMHHRJZ.js";
-import "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
-import "../chunk-OILKSY5J.js";
+} from "../chunk-JP7ZBCDC.js";
+import "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/engine-harness.cjs

@@ -3869,11 +3869,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -4652,6 +4652,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -4681,7 +4683,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });
@@ -5383,6 +5385,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/advanced/engine-harness.js

@@ -2,11 +2,11 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "../chunk-ZREWMTFA.js";
-import "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
+} from "../chunk-32TJQ5TQ.js";
+import "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
 import "../chunk-X7SQTCIQ.js";
-import "../chunk-OILKSY5J.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/index.cjs

@@ -3901,11 +3901,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -4684,6 +4684,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -4713,7 +4715,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });
@@ -5920,6 +5922,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/advanced/index.js

@@ -3,16 +3,16 @@ import {
 } from "../chunk-IOI6QR3B.js";
 import {
   runner_exports
-} from "../chunk-C2NHHBFV.js";
+} from "../chunk-UBDJBUBV.js";
 import {
   engine_harness_exports
-} from "../chunk-ZREWMTFA.js";
-import "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
+} from "../chunk-32TJQ5TQ.js";
+import "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
 import {
   proof_run_core_exports
 } from "../chunk-X7SQTCIQ.js";
-import "../chunk-OILKSY5J.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/runner.js

@@ -1,10 +1,10 @@
 import {
   runRiddleProof
-} from "../chunk-C2NHHBFV.js";
-import "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
+} from "../chunk-UBDJBUBV.js";
+import "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
 import "../chunk-X7SQTCIQ.js";
-import "../chunk-OILKSY5J.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/checkpoint.cjs

@@ -310,11 +310,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";

package/dist/checkpoint.js

@@ -13,7 +13,7 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "./chunk-OILKSY5J.js";
+} from "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{chunk-ZREWMTFA.js → chunk-32TJQ5TQ.js}

@@ -5,10 +5,10 @@ import {
   createRunStatusSnapshot,
   normalizeRunParams,
   setRunStatus
-} from "./chunk-ZQWVXQKJ.js";
+} from "./chunk-PMLEZU7J.js";
 import {
   createRiddleProofRunCard
-} from "./chunk-RDPG554T.js";
+} from "./chunk-DZLBYXL3.js";
 import {
   noImplementationModeFor,
   proofAssessmentHardBlockersForState,
@@ -25,7 +25,7 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "./chunk-OILKSY5J.js";
+} from "./chunk-4D76AYZW.js";
 import {
   applyTerminalMetadata,
   compactRecord,
@@ -744,6 +744,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/{chunk-OILKSY5J.js → chunk-4D76AYZW.js}

@@ -256,11 +256,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";

package/dist/{chunk-RDPG554T.js → chunk-DZLBYXL3.js}

@@ -1,6 +1,6 @@
 import {
   statePathsForRunState
-} from "./chunk-OILKSY5J.js";
+} from "./chunk-4D76AYZW.js";
 import {
   compactRecord,
   isTerminalStatus,

package/dist/{chunk-AYMHHRJZ.js → chunk-JP7ZBCDC.js}

@@ -1,7 +1,7 @@
 import {
   normalizeIntegrationContext,
   normalizeRunParams
-} from "./chunk-ZQWVXQKJ.js";
+} from "./chunk-PMLEZU7J.js";
 import {
   compactRecord
 } from "./chunk-VY4Y5U57.js";

package/dist/{chunk-ZQWVXQKJ.js → chunk-PMLEZU7J.js}

@@ -1,6 +1,6 @@
 import {
   createRiddleProofRunCard
-} from "./chunk-RDPG554T.js";
+} from "./chunk-DZLBYXL3.js";
 import {
   compactRecord,
   isTerminalStatus,
@@ -188,6 +188,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -217,7 +219,7 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });

package/dist/{chunk-C2NHHBFV.js → chunk-UBDJBUBV.js}

@@ -3,7 +3,7 @@ import {
   appendStageHeartbeat,
   createRunState,
   setRunStatus
-} from "./chunk-ZQWVXQKJ.js";
+} from "./chunk-PMLEZU7J.js";
 import {
   noImplementationModeFor
 } from "./chunk-X7SQTCIQ.js";

package/dist/{chunk-EPFGN7G7.js → chunk-ZDK2GQ4Q.js}

@@ -28,10 +28,10 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-ZREWMTFA.js";
+} from "./chunk-32TJQ5TQ.js";
 import {
   createCheckpointResponseTemplate
-} from "./chunk-OILKSY5J.js";
+} from "./chunk-4D76AYZW.js";
 import {
   createCodexExecAgentAdapter,
   runCodexExecAgentDoctor

package/dist/cli/index.js

@@ -1,12 +1,12 @@
-import "../chunk-EPFGN7G7.js";
+import "../chunk-ZDK2GQ4Q.js";
 import "../chunk-DI2XNGEZ.js";
 import "../chunk-6KYXX4OE.js";
 import "../chunk-EX7TO4I5.js";
-import "../chunk-ZREWMTFA.js";
-import "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
+import "../chunk-32TJQ5TQ.js";
+import "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
 import "../chunk-X7SQTCIQ.js";
-import "../chunk-OILKSY5J.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-JFQXAJH2.js";
 import "../chunk-73EBR3YL.js";
 import "../chunk-VY4Y5U57.js";

package/dist/cli.cjs

@@ -3865,11 +3865,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -4737,6 +4737,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -4766,7 +4768,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });
@@ -5468,6 +5470,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
-import "./chunk-EPFGN7G7.js";
+import "./chunk-ZDK2GQ4Q.js";
 import "./chunk-DI2XNGEZ.js";
 import "./chunk-6KYXX4OE.js";
 import "./chunk-EX7TO4I5.js";
-import "./chunk-ZREWMTFA.js";
-import "./chunk-ZQWVXQKJ.js";
-import "./chunk-RDPG554T.js";
+import "./chunk-32TJQ5TQ.js";
+import "./chunk-PMLEZU7J.js";
+import "./chunk-DZLBYXL3.js";
 import "./chunk-X7SQTCIQ.js";
-import "./chunk-OILKSY5J.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-JFQXAJH2.js";
 import "./chunk-73EBR3YL.js";
 import "./chunk-VY4Y5U57.js";

package/dist/engine-harness.cjs

@@ -3867,11 +3867,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -4650,6 +4650,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -4679,7 +4681,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });
@@ -5381,6 +5383,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/engine-harness.js

@@ -2,11 +2,11 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-ZREWMTFA.js";
-import "./chunk-ZQWVXQKJ.js";
-import "./chunk-RDPG554T.js";
+} from "./chunk-32TJQ5TQ.js";
+import "./chunk-PMLEZU7J.js";
+import "./chunk-DZLBYXL3.js";
 import "./chunk-X7SQTCIQ.js";
-import "./chunk-OILKSY5J.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/index.cjs

@@ -3986,11 +3986,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -4888,6 +4888,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -4917,7 +4919,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });
@@ -6135,6 +6137,21 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (!packet.allowed_decisions.includes(response.decision)) {
+    return {
+      blocker: {
+        code: "checkpoint_response_decision_not_allowed",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response decision is not advertised by the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          decision: response.decision,
+          allowed_decisions: packet.allowed_decisions,
+          response
+        }
+      }
+    };
+  }
   const base = {
     action: "run",
     state_path: state.request.engine_state_path || packet.state_path || "",

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   runRiddleProof
-} from "./chunk-C2NHHBFV.js";
+} from "./chunk-UBDJBUBV.js";
 import "./chunk-6F4PWJZI.js";
 import {
   RIDDLE_PROOF_PLAYABILITY_ASSESSMENT_VERSION,
@@ -102,7 +102,7 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "./chunk-ZREWMTFA.js";
+} from "./chunk-32TJQ5TQ.js";
 import {
   RIDDLE_PROOF_RUN_STATE_VERSION,
   appendRunEvent,
@@ -114,11 +114,11 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "./chunk-ZQWVXQKJ.js";
+} from "./chunk-PMLEZU7J.js";
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "./chunk-RDPG554T.js";
+} from "./chunk-DZLBYXL3.js";
 import "./chunk-X7SQTCIQ.js";
 import {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
@@ -135,7 +135,7 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "./chunk-OILKSY5J.js";
+} from "./chunk-4D76AYZW.js";
 import "./chunk-JFQXAJH2.js";
 import {
   createCodexExecAgentAdapter,

package/dist/openclaw.js

@@ -3,10 +3,10 @@ import {
   parseOpenClawAssertions,
   parseOpenClawJsonObjectOrArray,
   toRiddleProofRunParams
-} from "./chunk-AYMHHRJZ.js";
-import "./chunk-ZQWVXQKJ.js";
-import "./chunk-RDPG554T.js";
-import "./chunk-OILKSY5J.js";
+} from "./chunk-JP7ZBCDC.js";
+import "./chunk-PMLEZU7J.js";
+import "./chunk-DZLBYXL3.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/run-card.js

@@ -1,8 +1,8 @@
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "./chunk-RDPG554T.js";
-import "./chunk-OILKSY5J.js";
+} from "./chunk-DZLBYXL3.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/runner.js

@@ -1,10 +1,10 @@
 import {
   runRiddleProof
-} from "./chunk-C2NHHBFV.js";
-import "./chunk-ZQWVXQKJ.js";
-import "./chunk-RDPG554T.js";
+} from "./chunk-UBDJBUBV.js";
+import "./chunk-PMLEZU7J.js";
+import "./chunk-DZLBYXL3.js";
 import "./chunk-X7SQTCIQ.js";
-import "./chunk-OILKSY5J.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/spec/checkpoint.cjs

@@ -312,11 +312,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";

package/dist/spec/checkpoint.js

@@ -13,7 +13,7 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "../chunk-OILKSY5J.js";
+} from "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/spec/index.cjs

@@ -535,11 +535,11 @@ function stageFromCheckpoint(checkpoint) {
   return "setup";
 }
 function allowedDecisionsForStage(stage, checkpoint) {
-  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "blocked", "human_review"];
+  if (stage === "recon") return ["ready_for_author", "retry_recon", "recon_stuck", "needs_recon", "blocked", "human_review"];
   if (stage === "implement") return ["implementation_complete", "needs_author", "needs_recon", "blocked", "human_review"];
-  if (stage === "ship") return ["continue_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
-  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "blocked", "human_review"];
-  return ["continue_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  if (stage === "ship") return ["continue_stage", "retry_stage", "needs_implementation", "needs_recon", "blocked", "human_review"];
+  if (checkpoint === "awaiting_stage_advance") return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
+  return ["continue_stage", "retry_stage", "needs_recon", "needs_implementation", "blocked", "human_review"];
 }
 function packetKindForStage(stage, checkpoint) {
   if (stage === "recon") return "assess_recon";
@@ -1437,6 +1437,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -1466,7 +1468,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });

package/dist/spec/index.js

@@ -10,11 +10,11 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "../chunk-ZQWVXQKJ.js";
+} from "../chunk-PMLEZU7J.js";
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "../chunk-RDPG554T.js";
+} from "../chunk-DZLBYXL3.js";
 import {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
   RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,
@@ -30,7 +30,7 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "../chunk-OILKSY5J.js";
+} from "../chunk-4D76AYZW.js";
 import {
   applyTerminalMetadata,
   compactRecord,

package/dist/spec/run-card.js

@@ -1,8 +1,8 @@
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "../chunk-RDPG554T.js";
-import "../chunk-OILKSY5J.js";
+} from "../chunk-DZLBYXL3.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/spec/state.cjs

@@ -469,6 +469,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -498,7 +500,7 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });

package/dist/spec/state.js

@@ -9,9 +9,9 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "../chunk-ZQWVXQKJ.js";
-import "../chunk-RDPG554T.js";
-import "../chunk-OILKSY5J.js";
+} from "../chunk-PMLEZU7J.js";
+import "../chunk-DZLBYXL3.js";
+import "../chunk-4D76AYZW.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/state.cjs

@@ -469,6 +469,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
     status: state.status,
@@ -498,7 +500,7 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     checkpoint_summary: state.checkpoint_summary,
     state_paths: state.state_paths,
     proof_contract: state.proof_contract,
-    run_card: state.run_card || createRiddleProofRunCard(state, { at }),
+    run_card: runCard,
     viewport_matrix_status: state.viewport_matrix_status,
     latest_event: latestEvent
   });

package/dist/state.js

@@ -9,9 +9,9 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "./chunk-ZQWVXQKJ.js";
-import "./chunk-RDPG554T.js";
-import "./chunk-OILKSY5J.js";
+} from "./chunk-PMLEZU7J.js";
+import "./chunk-DZLBYXL3.js";
+import "./chunk-4D76AYZW.js";
 import "./chunk-VY4Y5U57.js";
 import "./chunk-MLKGABMK.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.8.45",
+  "version": "0.8.47",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",
@@ -232,6 +232,6 @@
     "build": "npm --workspace @riddledc/riddle-proof-app-contract run build --if-present && tsup src/index.ts src/types.ts src/result.ts src/state.ts src/checkpoint.ts src/run-card.ts src/runner.ts src/engine-harness.ts src/codex-exec-agent.ts src/local-agent.ts src/cli.ts src/cli/index.ts src/diagnostics.ts src/proof-session.ts src/playability.ts src/basic-gameplay.ts src/profile.ts src/profile/index.ts src/pr-comment.ts src/openclaw.ts src/proof-run-core.ts src/proof-run-engine.ts src/riddle-client.ts src/runtime/riddle-client.ts src/spec/index.ts src/spec/types.ts src/spec/result.ts src/spec/state.ts src/spec/checkpoint.ts src/spec/run-card.ts src/runtime/index.ts src/app-contract/index.ts src/advanced/index.ts src/advanced/runner.ts src/advanced/engine-harness.ts src/advanced/proof-run-core.ts src/advanced/proof-run-engine.ts src/adapters/openclaw.ts src/adapters/local-agent.ts src/adapters/codex-exec-agent.ts src/adapters/codex.ts --format cjs,esm --dts --out-dir dist --clean",
     "clean": "rm -rf dist",
     "lint": "echo 'lint: (not configured)'",
-    "test": "npm run build && node test.js && node proof-run.test.js && node trust-boundary.test.js && node regression-packs.test.js && python3 runtime/tests/trust_boundary_regression.py && python3 runtime/tests/ship_artifact_publication.py && (python3 runtime/tests/recon_verify_smoke.py >/tmp/riddle-proof-recon-verify-smoke.json || (tail -120 /tmp/riddle-proof-recon-verify-smoke.json; exit 1))"
+    "test": "npm run build && node test.js && node proof-run.test.js && node formal-conformance.test.js && node trust-boundary.test.js && node regression-packs.test.js && python3 runtime/tests/trust_boundary_regression.py && python3 runtime/tests/ship_artifact_publication.py && (python3 runtime/tests/recon_verify_smoke.py >/tmp/riddle-proof-recon-verify-smoke.json || (tail -120 /tmp/riddle-proof-recon-verify-smoke.json; exit 1))"
   }
 }