@riddledc/riddle-proof 0.8.51 → 0.8.53

package/dist/adapters/openclaw.js

@@ -3,10 +3,10 @@ import {
   parseOpenClawAssertions,
   parseOpenClawJsonObjectOrArray,
   toRiddleProofRunParams
-} from "../chunk-OYWZGDTS.js";
-import "../chunk-M3IE3VNC.js";
-import "../chunk-RBAU2M4S.js";
-import "../chunk-AXWJJ2LC.js";
+} from "../chunk-LNWJAHAQ.js";
+import "../chunk-WDIKPIMB.js";
+import "../chunk-JJ4IWRMJ.js";
+import "../chunk-BLM5EIBA.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/engine-harness.cjs

@@ -31,6 +31,24 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/proof-run-core.ts
+function canonicalProofAssessmentStageForDecision(decision) {
+  const normalized = typeof decision === "string" ? decision.trim() : "";
+  if (normalized === "ready_to_ship") return "ship";
+  if (normalized === "needs_richer_proof") return "author";
+  if (normalized === "revise_capture") return "verify";
+  if (normalized === "needs_recon") return "recon";
+  if (normalized === "needs_implementation") return "implement";
+  return null;
+}
+function normalizeProofAssessmentStageFields(assessment) {
+  const canonicalStage = canonicalProofAssessmentStageForDecision(assessment.decision);
+  if (!canonicalStage) return assessment;
+  return {
+    ...assessment,
+    recommended_stage: canonicalStage,
+    continue_with_stage: canonicalStage
+  };
+}
 function normalizedMode(value) {
   return typeof value === "string" ? value.trim().toLowerCase() : "";
 }
@@ -866,10 +884,10 @@ function mergeStateFromParams(statePath, params) {
       state.proof_assessment_source = null;
     } else {
       const parsed = JSON.parse(raw);
-      const assessment = {
+      const assessment = normalizeProofAssessmentStageFields({
         ...parsed,
         source: (parsed?.source || "supervising_agent").toString()
-      };
+      });
       const readyBlocker = assessment?.decision === "ready_to_ship" ? visualDeltaShipGateReason({ ...state, proof_assessment: assessment, proof_assessment_source: assessment.source }) : null;
       if (readyBlocker) {
         assessment.blocked_decision = assessment.decision;
@@ -3664,12 +3682,13 @@ function statePathsForRunState(state, engineStatePath2) {
 function responseSchemaForAuthorPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "payload", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "payload", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3697,12 +3716,13 @@ function responseSchemaForAuthorPacket() {
 function responseSchemaForProofAssessmentPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3738,12 +3758,13 @@ function responseSchemaForProofAssessmentPacket() {
 function responseSchemaForReconPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3771,12 +3792,13 @@ function responseSchemaForReconPacket() {
 function responseSchemaForImplementationPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3804,12 +3826,13 @@ function responseSchemaForImplementationPacket() {
 function responseSchemaForAdvancePacket(stage) {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3835,6 +3858,20 @@ function resumeTokenFor(input) {
   const hash = import_node_crypto.default.createHash("sha256").update(JSON.stringify(input)).digest("hex").slice(0, 24);
   return `rpchk_${hash}`;
 }
+function packetIdentityPayload(packet) {
+  const { packet_id: _packetId, ...identityPayload } = packet;
+  return identityPayload;
+}
+function checkpointPacketIdentity(packet) {
+  const hash = import_node_crypto.default.createHash("sha256").update(stableJson(packetIdentityPayload(packet))).digest("hex").slice(0, 24);
+  return `rppkt_${hash}`;
+}
+function withPacketIdentity(packet) {
+  return {
+    ...packet,
+    packet_id: checkpointPacketIdentity(packet)
+  };
+}
 function artifactsFromState(state) {
   const artifacts = [];
   for (const role of ["before", "prod", "after"]) {
@@ -3907,7 +3944,7 @@ function buildStageCheckpointPacket(input) {
   const checkpointContract = recordValue(input.engineResult.checkpointContract);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.stage_summary) || `${stage} checkpoint needs a supervising decision.`;
   const kind = packetKindForStage(stage, checkpoint);
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -3956,7 +3993,7 @@ function buildStageCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function buildAuthorCheckpointPacket(input) {
   const checkpoint = nonEmptyString(input.engineResult.checkpoint) || "author_supervisor_judgment";
@@ -3969,7 +4006,7 @@ function buildAuthorCheckpointPacket(input) {
   const reconResults = recordValue(fullState.recon_results);
   const checkpointContract = recordValue(input.engineResult.checkpointContract);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.author_summary) || "Author checkpoint needs a supervising proof packet.";
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -4018,7 +4055,7 @@ function buildAuthorCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function visualDeltaFromState(fullState) {
   const bundle = recordValue(fullState.evidence_bundle);
@@ -4089,7 +4126,7 @@ function buildProofAssessmentCheckpointPacket(input) {
   const evidenceIssueCode2 = visualDeltaIssueCode(visualDelta, visualDeltaRequired);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.verify_summary) || "Verify captured evidence and needs a supervising proof assessment.";
   const recoveryHint = evidenceIssueCode2 ? "Required visual_delta evidence is incomplete. Keep this same run in verify/evidence recovery with decision=revise_capture and continue_with_stage=verify unless the evidence proves an implementation or recon problem." : "Assess whether the current artifacts prove the requested change, then choose the next stage.";
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -4149,7 +4186,7 @@ function buildProofAssessmentCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function buildCheckpointPacketForEngineResult(input) {
   const checkpoint = nonEmptyString(input.engineResult.checkpoint) || "";
@@ -4178,6 +4215,7 @@ function normalizeCheckpointResponse(value) {
     version: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,
     run_id: runId,
     checkpoint,
+    packet_id: nonEmptyString(record.packet_id),
     resume_token: nonEmptyString(record.resume_token),
     decision,
     summary,
@@ -4209,6 +4247,9 @@ function checkpointSummaryFromState(state, engineStatePath2) {
   const latestResponseEntry = [...responses].reverse().find((entry) => entry.response);
   const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
   const latestResponse = latestResponseEntry?.response;
+  const latestPacketId = latestPacket?.packet_id || null;
+  const latestResponsePacketId = latestResponse?.packet_id || null;
+  const packetIdMatches = !latestResponse ? null : latestPacketId && latestResponsePacketId ? latestPacketId === latestResponsePacketId : latestPacketId || latestResponsePacketId ? false : null;
   const latestResumeToken = latestPacket?.resume_token || null;
   const latestResponseToken = latestResponse?.resume_token || null;
   const tokenMatches = !latestResponse ? null : latestResumeToken && latestResponseToken ? latestResumeToken === latestResponseToken : latestResumeToken || latestResponseToken ? false : null;
@@ -4223,6 +4264,9 @@ function checkpointSummaryFromState(state, engineStatePath2) {
     latest_decision: latestResponse?.decision || null,
     latest_packet_summary: latestPacket?.summary || null,
     latest_response_summary: latestResponse?.summary || null,
+    latest_packet_id: latestPacketId,
+    latest_response_packet_id: latestResponsePacketId,
+    packet_id_matches: packetIdMatches,
     latest_resume_token: latestResumeToken,
     latest_response_token: latestResponseToken,
     token_matches: tokenMatches,
@@ -4239,6 +4283,7 @@ function checkpointResponseIdentity(response) {
   const logicalResponse = compactRecord({
     run_id: response.run_id,
     checkpoint: response.checkpoint,
+    packet_id: response.packet_id,
     resume_token: response.resume_token,
     decision: response.decision,
     summary: response.summary,
@@ -5010,10 +5055,7 @@ function isReadyShipGate(result) {
   return Boolean(gate && gate.ok === true);
 }
 function proofAssessmentRequestsShip(payload) {
-  const decision = String(payload.decision || "");
-  const recommendedStage = String(payload.recommended_stage || "");
-  const continueStage = String(payload.continue_with_stage || "");
-  return decision === "ready_to_ship" || recommendedStage === "ship" || continueStage === "ship";
+  return String(payload.decision || "").trim() === "ready_to_ship";
 }
 function proofAssessmentHardBlockers(state, payload) {
   const blockers = proofAssessmentHardBlockersForState(state || {});
@@ -5031,12 +5073,7 @@ function proofAssessmentContinuation(result, payload) {
   return { ...baseContinuation(result), proof_assessment_json };
 }
 function defaultStageForProofCheckpointDecision(decision) {
-  if (decision === "ready_to_ship") return "ship";
-  if (decision === "needs_implementation") return "implement";
-  if (decision === "needs_recon") return "recon";
-  if (decision === "revise_capture") return "verify";
-  if (decision === "needs_richer_proof") return "author";
-  return null;
+  return canonicalProofAssessmentStageForDecision(decision);
 }
 function checkpointContractFromPacket(packet) {
   return recordValue(packet.evidence_excerpt?.checkpoint_contract) || recordValue(recordValue(packet.state_excerpt?.stage_decision_request)?.checkpoint_contract) || null;
@@ -5062,7 +5099,7 @@ function proofAssessmentPayloadFromCheckpointResponse(response) {
   }
   const payload = recordValue(response.payload) || {};
   const stage = nonEmptyString(payload.continue_with_stage) || response.continue_with_stage || nonEmptyString(payload.recommended_stage) || defaultStageForProofCheckpointDecision(response.decision);
-  return compactRecord({
+  return normalizeProofAssessmentStageFields(compactRecord({
     ...payload,
     decision: response.decision,
     summary: response.summary,
@@ -5073,7 +5110,7 @@ function proofAssessmentPayloadFromCheckpointResponse(response) {
     source: "supervising_agent",
     checkpoint_response_source: response.source || null,
     checkpoint_response_created_at: response.created_at
-  });
+  }));
 }
 function reconAssessmentPayloadFromCheckpointResponse(response) {
   if (![
@@ -5397,6 +5434,22 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (packet.packet_id && response.packet_id !== packet.packet_id) {
+    return {
+      blocker: {
+        code: "checkpoint_response_packet_id_mismatch",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response packet_id does not match the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          expected_packet_id: packet.packet_id,
+          actual_packet_id: response.packet_id || null,
+          expected_resume_token: packet.resume_token || null,
+          actual_resume_token: response.resume_token || null
+        }
+      }
+    };
+  }
   if (!packet.allowed_decisions.includes(response.decision)) {
     return {
       blocker: {
@@ -6023,7 +6076,7 @@ async function routeCheckpoint(request, state, result, agent, input) {
       }
       return { blocker };
     }
-    const payload = assessment.payload;
+    const payload = normalizeProofAssessmentStageFields(assessment.payload);
     recordEvent(state, {
       kind: "agent.proof_assessment.completed",
       checkpoint,

package/dist/advanced/engine-harness.js

@@ -2,11 +2,11 @@ import {
   createDisabledRiddleProofAgentAdapter,
   readRiddleProofRunStatus,
   runRiddleProofEngineHarness
-} from "../chunk-ZHTJEZH5.js";
-import "../chunk-M3IE3VNC.js";
-import "../chunk-RBAU2M4S.js";
-import "../chunk-X7SQTCIQ.js";
-import "../chunk-AXWJJ2LC.js";
+} from "../chunk-ZLBOGPUL.js";
+import "../chunk-WDIKPIMB.js";
+import "../chunk-JJ4IWRMJ.js";
+import "../chunk-EKZXU6MU.js";
+import "../chunk-BLM5EIBA.js";
 import "../chunk-VY4Y5U57.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/advanced/index.cjs

@@ -39,6 +39,7 @@ __export(proof_run_core_exports, {
   WORKFLOW_STAGE_ORDER: () => WORKFLOW_STAGE_ORDER,
   buildCheckpointContract: () => buildCheckpointContract,
   buildSetupArgs: () => buildSetupArgs,
+  canonicalProofAssessmentStageForDecision: () => canonicalProofAssessmentStageForDecision,
   checkpointContinueStage: () => checkpointContinueStage,
   clearStageDecisionRequest: () => clearStageDecisionRequest,
   ensureAction: () => ensureAction,
@@ -46,6 +47,7 @@ __export(proof_run_core_exports, {
   invalidateVerifyEvidence: () => invalidateVerifyEvidence,
   mergeStateFromParams: () => mergeStateFromParams,
   noImplementationModeFor: () => noImplementationModeFor,
+  normalizeProofAssessmentStageFields: () => normalizeProofAssessmentStageFields,
   previewModeFromWorkflowMode: () => previewModeFromWorkflowMode,
   proofAssessmentHardBlockersForState: () => proofAssessmentHardBlockersForState,
   readState: () => readState,
@@ -62,6 +64,24 @@ __export(proof_run_core_exports, {
   workflowFile: () => workflowFile,
   writeState: () => writeState
 });
+function canonicalProofAssessmentStageForDecision(decision) {
+  const normalized = typeof decision === "string" ? decision.trim() : "";
+  if (normalized === "ready_to_ship") return "ship";
+  if (normalized === "needs_richer_proof") return "author";
+  if (normalized === "revise_capture") return "verify";
+  if (normalized === "needs_recon") return "recon";
+  if (normalized === "needs_implementation") return "implement";
+  return null;
+}
+function normalizeProofAssessmentStageFields(assessment) {
+  const canonicalStage = canonicalProofAssessmentStageForDecision(assessment.decision);
+  if (!canonicalStage) return assessment;
+  return {
+    ...assessment,
+    recommended_stage: canonicalStage,
+    continue_with_stage: canonicalStage
+  };
+}
 function normalizedMode(value) {
   return typeof value === "string" ? value.trim().toLowerCase() : "";
 }
@@ -897,10 +917,10 @@ function mergeStateFromParams(statePath, params) {
       state.proof_assessment_source = null;
     } else {
       const parsed = JSON.parse(raw);
-      const assessment = {
+      const assessment = normalizeProofAssessmentStageFields({
         ...parsed,
         source: (parsed?.source || "supervising_agent").toString()
-      };
+      });
       const readyBlocker = assessment?.decision === "ready_to_ship" ? visualDeltaShipGateReason({ ...state, proof_assessment: assessment, proof_assessment_source: assessment.source }) : null;
       if (readyBlocker) {
         assessment.blocked_decision = assessment.decision;
@@ -3696,12 +3716,13 @@ function statePathsForRunState(state, engineStatePath2) {
 function responseSchemaForAuthorPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "payload", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "payload", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3729,12 +3750,13 @@ function responseSchemaForAuthorPacket() {
 function responseSchemaForProofAssessmentPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3770,12 +3792,13 @@ function responseSchemaForProofAssessmentPacket() {
 function responseSchemaForReconPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3803,12 +3826,13 @@ function responseSchemaForReconPacket() {
 function responseSchemaForImplementationPacket() {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3836,12 +3860,13 @@ function responseSchemaForImplementationPacket() {
 function responseSchemaForAdvancePacket(stage) {
   return {
     type: "object",
-    required: ["version", "run_id", "checkpoint", "decision", "summary", "created_at"],
+    required: ["version", "run_id", "checkpoint", "packet_id", "decision", "summary", "created_at"],
     additionalProperties: false,
     properties: {
       version: { const: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION },
       run_id: { type: "string" },
       checkpoint: { type: "string" },
+      packet_id: { type: "string" },
       resume_token: { type: "string" },
       decision: {
         type: "string",
@@ -3867,6 +3892,20 @@ function resumeTokenFor(input) {
   const hash = import_node_crypto.default.createHash("sha256").update(JSON.stringify(input)).digest("hex").slice(0, 24);
   return `rpchk_${hash}`;
 }
+function packetIdentityPayload(packet) {
+  const { packet_id: _packetId, ...identityPayload } = packet;
+  return identityPayload;
+}
+function checkpointPacketIdentity(packet) {
+  const hash = import_node_crypto.default.createHash("sha256").update(stableJson(packetIdentityPayload(packet))).digest("hex").slice(0, 24);
+  return `rppkt_${hash}`;
+}
+function withPacketIdentity(packet) {
+  return {
+    ...packet,
+    packet_id: checkpointPacketIdentity(packet)
+  };
+}
 function artifactsFromState(state) {
   const artifacts = [];
   for (const role of ["before", "prod", "after"]) {
@@ -3939,7 +3978,7 @@ function buildStageCheckpointPacket(input) {
   const checkpointContract = recordValue(input.engineResult.checkpointContract);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.stage_summary) || `${stage} checkpoint needs a supervising decision.`;
   const kind = packetKindForStage(stage, checkpoint);
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -3988,7 +4027,7 @@ function buildStageCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function buildAuthorCheckpointPacket(input) {
   const checkpoint = nonEmptyString(input.engineResult.checkpoint) || "author_supervisor_judgment";
@@ -4001,7 +4040,7 @@ function buildAuthorCheckpointPacket(input) {
   const reconResults = recordValue(fullState.recon_results);
   const checkpointContract = recordValue(input.engineResult.checkpointContract);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.author_summary) || "Author checkpoint needs a supervising proof packet.";
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -4050,7 +4089,7 @@ function buildAuthorCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function visualDeltaFromState(fullState) {
   const bundle = recordValue(fullState.evidence_bundle);
@@ -4121,7 +4160,7 @@ function buildProofAssessmentCheckpointPacket(input) {
   const evidenceIssueCode2 = visualDeltaIssueCode(visualDelta, visualDeltaRequired);
   const summary = nonEmptyString(input.engineResult.summary) || nonEmptyString(fullState.verify_summary) || "Verify captured evidence and needs a supervising proof assessment.";
   const recoveryHint = evidenceIssueCode2 ? "Required visual_delta evidence is incomplete. Keep this same run in verify/evidence recovery with decision=revise_capture and continue_with_stage=verify unless the evidence proves an implementation or recon problem." : "Assess whether the current artifacts prove the requested change, then choose the next stage.";
-  return {
+  return withPacketIdentity({
     version: RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
     run_id: runId,
     state_path: input.runState.state_path,
@@ -4181,7 +4220,7 @@ function buildProofAssessmentCheckpointPacket(input) {
       stage
     }),
     created_at: input.created_at || timestamp()
-  };
+  });
 }
 function buildCheckpointPacketForEngineResult(input) {
   const checkpoint = nonEmptyString(input.engineResult.checkpoint) || "";
@@ -4210,6 +4249,7 @@ function normalizeCheckpointResponse(value) {
     version: RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,
     run_id: runId,
     checkpoint,
+    packet_id: nonEmptyString(record.packet_id),
     resume_token: nonEmptyString(record.resume_token),
     decision,
     summary,
@@ -4241,6 +4281,9 @@ function checkpointSummaryFromState(state, engineStatePath2) {
   const latestResponseEntry = [...responses].reverse().find((entry) => entry.response);
   const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
   const latestResponse = latestResponseEntry?.response;
+  const latestPacketId = latestPacket?.packet_id || null;
+  const latestResponsePacketId = latestResponse?.packet_id || null;
+  const packetIdMatches = !latestResponse ? null : latestPacketId && latestResponsePacketId ? latestPacketId === latestResponsePacketId : latestPacketId || latestResponsePacketId ? false : null;
   const latestResumeToken = latestPacket?.resume_token || null;
   const latestResponseToken = latestResponse?.resume_token || null;
   const tokenMatches = !latestResponse ? null : latestResumeToken && latestResponseToken ? latestResumeToken === latestResponseToken : latestResumeToken || latestResponseToken ? false : null;
@@ -4255,6 +4298,9 @@ function checkpointSummaryFromState(state, engineStatePath2) {
     latest_decision: latestResponse?.decision || null,
     latest_packet_summary: latestPacket?.summary || null,
     latest_response_summary: latestResponse?.summary || null,
+    latest_packet_id: latestPacketId,
+    latest_response_packet_id: latestResponsePacketId,
+    packet_id_matches: packetIdMatches,
     latest_resume_token: latestResumeToken,
     latest_response_token: latestResponseToken,
     token_matches: tokenMatches,
@@ -4271,6 +4317,7 @@ function checkpointResponseIdentity(response) {
   const logicalResponse = compactRecord({
     run_id: response.run_id,
     checkpoint: response.checkpoint,
+    packet_id: response.packet_id,
     resume_token: response.resume_token,
     decision: response.decision,
     summary: response.summary,
@@ -5547,10 +5594,7 @@ function isReadyShipGate(result) {
   return Boolean(gate && gate.ok === true);
 }
 function proofAssessmentRequestsShip(payload) {
-  const decision = String(payload.decision || "");
-  const recommendedStage = String(payload.recommended_stage || "");
-  const continueStage = String(payload.continue_with_stage || "");
-  return decision === "ready_to_ship" || recommendedStage === "ship" || continueStage === "ship";
+  return String(payload.decision || "").trim() === "ready_to_ship";
 }
 function proofAssessmentHardBlockers(state, payload) {
   const blockers = proofAssessmentHardBlockersForState(state || {});
@@ -5568,12 +5612,7 @@ function proofAssessmentContinuation(result, payload) {
   return { ...baseContinuation(result), proof_assessment_json };
 }
 function defaultStageForProofCheckpointDecision(decision) {
-  if (decision === "ready_to_ship") return "ship";
-  if (decision === "needs_implementation") return "implement";
-  if (decision === "needs_recon") return "recon";
-  if (decision === "revise_capture") return "verify";
-  if (decision === "needs_richer_proof") return "author";
-  return null;
+  return canonicalProofAssessmentStageForDecision(decision);
 }
 function checkpointContractFromPacket(packet) {
   return recordValue(packet.evidence_excerpt?.checkpoint_contract) || recordValue(recordValue(packet.state_excerpt?.stage_decision_request)?.checkpoint_contract) || null;
@@ -5599,7 +5638,7 @@ function proofAssessmentPayloadFromCheckpointResponse(response) {
   }
   const payload = recordValue(response.payload) || {};
   const stage = nonEmptyString(payload.continue_with_stage) || response.continue_with_stage || nonEmptyString(payload.recommended_stage) || defaultStageForProofCheckpointDecision(response.decision);
-  return compactRecord({
+  return normalizeProofAssessmentStageFields(compactRecord({
     ...payload,
     decision: response.decision,
     summary: response.summary,
@@ -5610,7 +5649,7 @@ function proofAssessmentPayloadFromCheckpointResponse(response) {
     source: "supervising_agent",
     checkpoint_response_source: response.source || null,
     checkpoint_response_created_at: response.created_at
-  });
+  }));
 }
 function reconAssessmentPayloadFromCheckpointResponse(response) {
   if (![
@@ -5934,6 +5973,22 @@ function checkpointResponseContinuation(state, value) {
       }
     };
   }
+  if (packet.packet_id && response.packet_id !== packet.packet_id) {
+    return {
+      blocker: {
+        code: "checkpoint_response_packet_id_mismatch",
+        checkpoint: packet.checkpoint,
+        message: "Checkpoint response packet_id does not match the pending checkpoint packet.",
+        details: {
+          stage: packet.stage,
+          expected_packet_id: packet.packet_id,
+          actual_packet_id: response.packet_id || null,
+          expected_resume_token: packet.resume_token || null,
+          actual_resume_token: response.resume_token || null
+        }
+      }
+    };
+  }
   if (!packet.allowed_decisions.includes(response.decision)) {
     return {
       blocker: {
@@ -6560,7 +6615,7 @@ async function routeCheckpoint(request, state, result, agent, input) {
       }
       return { blocker };
     }
-    const payload = assessment.payload;
+    const payload = normalizeProofAssessmentStageFields(assessment.payload);
     recordEvent(state, {
       kind: "agent.proof_assessment.completed",
       checkpoint,

package/dist/advanced/index.d.cts

@@ -1,5 +1,5 @@
 export { b as runner } from '../runner-4LJ5z0D-.cjs';
 export { l as engineHarness } from '../engine-harness-LBfqbFSe.cjs';
-export { p as proofRunCore } from '../proof-run-core-B1GeqkR8.cjs';
-export { p as proofRunEngine } from '../proof-run-engine-4dM37pEx.cjs';
+export { p as proofRunCore } from '../proof-run-core-7Dqm7RKM.cjs';
+export { p as proofRunEngine } from '../proof-run-engine-DpChFR5H.cjs';
 import '../types.cjs';

package/dist/advanced/index.d.ts

@@ -1,5 +1,5 @@
 export { b as runner } from '../runner-BdQpOkZD.js';
 export { l as engineHarness } from '../engine-harness-CMACHP6A.js';
-export { p as proofRunCore } from '../proof-run-core-B1GeqkR8.js';
-export { p as proofRunEngine } from '../proof-run-engine-BqaeqAze.js';
+export { p as proofRunCore } from '../proof-run-core-7Dqm7RKM.js';
+export { p as proofRunEngine } from '../proof-run-engine-BqRoA3Do.js';
 import '../types.js';