@riddledc/riddle-proof 0.8.54 → 0.8.56

package/dist/spec/index.cjs

@@ -37,6 +37,7 @@ __export(spec_exports, {
   appendRunEvent: () => appendRunEvent,
   appendStageHeartbeat: () => appendStageHeartbeat,
   applyPrLifecycleState: () => applyPrLifecycleState,
+  applyShipControlState: () => applyShipControlState,
   applyTerminalMetadata: () => applyTerminalMetadata,
   authorPacketPayloadFromCheckpointResponse: () => authorPacketPayloadFromCheckpointResponse,
   buildAuthorCheckpointPacket: () => buildAuthorCheckpointPacket,
@@ -53,6 +54,7 @@ __export(spec_exports, {
   createRunState: () => createRunState,
   createRunStatusSnapshot: () => createRunStatusSnapshot,
   isDuplicateCheckpointResponse: () => isDuplicateCheckpointResponse,
+  isProtectedFinalStatus: () => isProtectedFinalStatus,
   isSuccessfulStatus: () => isSuccessfulStatus,
   isTerminalStatus: () => isTerminalStatus,
   nonEmptyString: () => nonEmptyString,
@@ -64,6 +66,7 @@ __export(spec_exports, {
   proofContractFromAuthorCheckpointResponse: () => proofContractFromAuthorCheckpointResponse,
   recordValue: () => recordValue,
   setRunStatus: () => setRunStatus,
+  shipControlStateFor: () => shipControlStateFor,
   statePathsForRunState: () => statePathsForRunState
 });
 module.exports = __toCommonJS(spec_exports);
@@ -72,6 +75,9 @@ module.exports = __toCommonJS(spec_exports);
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
 }
+function isProtectedFinalStatus(status) {
+  return status === "ready_to_ship" || status === "shipped" || status === "completed";
+}
 function isSuccessfulStatus(status) {
   return status !== "blocked" && status !== "failed";
 }
@@ -169,6 +175,9 @@ function normalizeTerminalMetadata(input) {
     pr_state: prState,
     marked_ready: markedReady,
     left_draft: leftDraft,
+    ship_held: firstBoolean(riddleState.ship_held, result.ship_held, result.shipHeld, details.ship_held, details.shipHeld, shipReport.ship_held, shipReport.shipHeld),
+    shipping_disabled: firstBoolean(riddleState.shipping_disabled, result.shipping_disabled, result.shippingDisabled, details.shipping_disabled, details.shippingDisabled, shipReport.shipping_disabled, shipReport.shippingDisabled),
+    ship_authorized: firstBoolean(riddleState.ship_authorized, result.ship_authorized, result.shipAuthorized, details.ship_authorized, details.shipAuthorized, shipReport.ship_authorized, shipReport.shipAuthorized),
     ci_status: firstNonEmptyString(riddleState.ci_status, result.ci_status, result.ciStatus, details.ci_status, details.ciStatus, shipReport.ci_status),
     ship_commit: firstNonEmptyString(riddleState.ship_commit, result.ship_commit, result.shipCommit, details.ship_commit, details.shipCommit, shipReport.shipped_commit, shipReport.ship_commit),
     ship_remote_head: firstNonEmptyString(riddleState.ship_remote_head, result.ship_remote_head, result.shipRemoteHead, details.ship_remote_head, details.shipRemoteHead, shipReport.ship_remote_head),
@@ -202,6 +211,9 @@ function applyTerminalMetadata(state, metadata) {
   if (prBranch) state.pr_branch = prBranch;
   if (typeof metadata.marked_ready === "boolean") state.marked_ready = metadata.marked_ready;
   if (typeof metadata.left_draft === "boolean") state.left_draft = metadata.left_draft;
+  if (typeof metadata.ship_held === "boolean") state.ship_held = metadata.ship_held;
+  if (typeof metadata.shipping_disabled === "boolean") state.shipping_disabled = metadata.shipping_disabled;
+  if (typeof metadata.ship_authorized === "boolean") state.ship_authorized = metadata.ship_authorized;
   const ciStatus = nonEmptyString(metadata.ci_status);
   if (ciStatus) state.ci_status = ciStatus;
   const shipCommit = nonEmptyString(metadata.ship_commit);
@@ -233,12 +245,54 @@ function applyTerminalMetadata(state, metadata) {
   if (typeof metadata.finalized === "boolean") state.finalized = metadata.finalized;
   return state;
 }
+function shipControlStateFor(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const shipReport = recordValue(state.ship_report) || {};
+  const prState = recordValue(state.pr_state) || {};
+  const shippingDisabled = firstBoolean(
+    raw.shipping_disabled,
+    raw.shippingDisabled,
+    state.shipping_disabled,
+    shipReport.shipping_disabled,
+    shipReport.shippingDisabled
+  ) ?? state.request?.ship_mode === "none";
+  const explicitAuthorized = firstBoolean(
+    raw.ship_authorized,
+    raw.shipAuthorized,
+    state.ship_authorized,
+    shipReport.ship_authorized,
+    shipReport.shipAuthorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || state.marked_ready === true || shipReport.marked_ready === true || prState.status === "merged" || state.merge_commit || state.merged_at
+  );
+  const inferredAuthorized = explicitAuthorized ?? authorizationEvidence;
+  const rawHeld = firstBoolean(raw.ship_held, raw.shipHeld);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !inferredAuthorized;
+  const shipHeld = rawHeld ?? (state.ship_held === true || inferredHeld);
+  return {
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipHeld ? false : inferredAuthorized
+  };
+}
+function applyShipControlState(state, input = {}) {
+  const control = shipControlStateFor({ state, status: input.status, raw: input.raw });
+  state.ship_held = control.ship_held;
+  state.shipping_disabled = control.shipping_disabled;
+  state.ship_authorized = control.ship_authorized;
+  return state;
+}
 function createRunResult(input) {
   const status = input.status || input.state.status;
   const ok = isSuccessfulStatus(status);
   const state = input.metadata ? applyTerminalMetadata(input.state, input.metadata) : input.state;
   state.status = status;
   state.ok = ok;
+  if (isProtectedFinalStatus(status)) state.finalized = true;
+  applyShipControlState(state, { status, raw: input.raw });
   return compactRecord({
     ok,
     status,
@@ -256,6 +310,9 @@ function createRunResult(input) {
     pr_state: state.pr_state,
     marked_ready: state.marked_ready,
     left_draft: state.left_draft,
+    ship_held: state.ship_held,
+    shipping_disabled: state.shipping_disabled,
+    ship_authorized: state.ship_authorized,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -982,6 +1039,8 @@ function checkpointSummaryFromState(state, engineStatePath) {
   const packets = history.filter((entry) => entry.packet);
   const responses = acceptedCheckpointResponseEntries(state);
   const duplicateResponses = events.filter((event) => event.kind === "checkpoint.response.duplicate");
+  const rejectedResponses = events.filter((event) => event.kind === "checkpoint.response.rejected");
+  const ignoredResponses = events.filter((event) => event.kind === "checkpoint.response.ignored");
   const latestPacketEntry = [...history].reverse().find((entry) => entry.packet);
   const latestResponseEntry = [...responses].reverse().find((entry) => entry.response);
   const latestPacket = state.checkpoint_packet || latestPacketEntry?.packet;
@@ -997,6 +1056,8 @@ function checkpointSummaryFromState(state, engineStatePath) {
     packet_count: packets.length,
     response_count: responses.length,
     duplicate_response_count: duplicateResponses.length,
+    rejected_response_count: rejectedResponses.length,
+    ignored_response_count: ignoredResponses.length,
     latest_checkpoint: state.checkpoint_packet?.checkpoint || latestResponse?.checkpoint || state.last_checkpoint || null,
     latest_stage: state.checkpoint_packet?.stage || latestResponse?.continue_with_stage || state.current_stage || null,
     latest_kind: state.checkpoint_packet?.kind || latestPacket?.kind || null,
@@ -1235,6 +1296,7 @@ function createRiddleProofRunCard(state, input = {}) {
   const visualDelta = visualDeltaFrom({ fullRiddleState: fullState, runState: state });
   const artifacts = artifactsFrom({ fullRiddleState: fullState, runState: state });
   const viewportMatrix = viewportMatrixFrom({ fullRiddleState: fullState, runState: state });
+  const shipControl = shipControlStateFor({ state });
   return {
     version: RIDDLE_PROOF_RUN_CARD_VERSION,
     run_id: state.run_id || "unknown",
@@ -1288,6 +1350,9 @@ function createRiddleProofRunCard(state, input = {}) {
     stop_condition: compactRecord({
       status: state.status,
       terminal: isTerminalStatus(state.status),
+      ship_held: shipControl.ship_held,
+      shipping_disabled: shipControl.shipping_disabled,
+      ship_authorized: shipControl.ship_authorized,
       blocker_code: state.blocker?.code || null,
       blocker_message: state.blocker?.message || null,
       proof_decision: state.proof_decision,
@@ -1478,7 +1543,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
-  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const shipControl = shipControlStateFor({ state });
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === shipControl.ship_held && state.run_card.stop_condition?.shipping_disabled === shipControl.shipping_disabled && state.run_card.stop_condition?.ship_authorized === shipControl.ship_authorized;
   const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
@@ -1492,6 +1558,9 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     pr_url: state.pr_url ?? null,
     pr_branch: state.pr_branch ?? null,
     pr_state: state.pr_state,
+    ship_held: shipControl.ship_held,
+    shipping_disabled: shipControl.shipping_disabled,
+    ship_authorized: shipControl.ship_authorized,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -1517,6 +1586,7 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
 function setRunStatus(state, status, at = timestamp2()) {
   state.status = status;
   state.ok = status !== "blocked" && status !== "failed";
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   state.updated_at = at;
   return state;
 }
@@ -1546,6 +1616,7 @@ function applyPrLifecycleState(state, input, at = timestamp2()) {
   appendRunEvent,
   appendStageHeartbeat,
   applyPrLifecycleState,
+  applyShipControlState,
   applyTerminalMetadata,
   authorPacketPayloadFromCheckpointResponse,
   buildAuthorCheckpointPacket,
@@ -1562,6 +1633,7 @@ function applyPrLifecycleState(state, input, at = timestamp2()) {
   createRunState,
   createRunStatusSnapshot,
   isDuplicateCheckpointResponse,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
@@ -1573,5 +1645,6 @@ function applyPrLifecycleState(state, input, at = timestamp2()) {
   proofContractFromAuthorCheckpointResponse,
   recordValue,
   setRunStatus,
+  shipControlStateFor,
   statePathsForRunState
 });

package/dist/spec/index.d.cts

@@ -1,5 +1,5 @@
 export { EvidenceArtifact, EvidenceReference, ImplementationAdapter, ImplementationAdapterInput, ImplementationAdapterResult, IntegrationContext, JsonObject, JsonPrimitive, JsonValue, JudgeAdapter, NotificationAdapter, PreflightAdapter, PreflightAdapterInput, PreflightAdapterResult, ProofAdapter, ProofAdapterInput, ProofAdapterResult, RiddleProofArtifactRole, RiddleProofAssessment, RiddleProofBlocker, RiddleProofCheckpointArtifact, RiddleProofCheckpointPacket, RiddleProofCheckpointResponse, RiddleProofCheckpointRole, RiddleProofCheckpointRoutingHint, RiddleProofCheckpointSummary, RiddleProofCheckpointVisibility, RiddleProofDecision, RiddleProofEvent, RiddleProofEvidenceBundle, RiddleProofPrLifecycleState, RiddleProofPrLifecycleStatus, RiddleProofProofContract, RiddleProofRunCard, RiddleProofRunParams, RiddleProofRunResult, RiddleProofRunState, RiddleProofRunStatusSnapshot, RiddleProofStage, RiddleProofStatePaths, RiddleProofStatus, RiddleProofTerminalMetadata, RiddleProofVerificationMode, RiddleProofViewportCapture, RiddleProofViewportMatrixStatus, RiddleProofVisualSession, RiddleProofVisualSessionFingerprintBasis, SetupAdapter, SetupAdapterInput, SetupAdapterResult, ShipAdapter } from '../types.cjs';
-export { TerminalMetadataInput, applyTerminalMetadata, compactRecord, createRunResult, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue } from '../result.cjs';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from '../result.cjs';
 export { CreateRunStateInput, RIDDLE_PROOF_RUN_STATE_VERSION, RunEventInput, appendRunEvent, appendStageHeartbeat, applyPrLifecycleState, createRunState, createRunStatusSnapshot, normalizeIntegrationContext, normalizePrLifecycleState, normalizeRunParams, setRunStatus } from '../state.cjs';
 export { RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION, RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION, authorPacketPayloadFromCheckpointResponse, buildAuthorCheckpointPacket, buildCheckpointPacketForEngineResult, buildProofAssessmentCheckpointPacket, buildStageCheckpointPacket, checkpointPacketIdentity, checkpointResponseIdentity, checkpointSummaryFromState, createCheckpointResponseTemplate, isDuplicateCheckpointResponse, normalizeCheckpointResponse, proofContractFromAuthorCheckpointResponse, statePathsForRunState } from '../checkpoint.cjs';
 export { RIDDLE_PROOF_RUN_CARD_VERSION, createRiddleProofRunCard } from '../run-card.cjs';

package/dist/spec/index.d.ts

@@ -1,5 +1,5 @@
 export { EvidenceArtifact, EvidenceReference, ImplementationAdapter, ImplementationAdapterInput, ImplementationAdapterResult, IntegrationContext, JsonObject, JsonPrimitive, JsonValue, JudgeAdapter, NotificationAdapter, PreflightAdapter, PreflightAdapterInput, PreflightAdapterResult, ProofAdapter, ProofAdapterInput, ProofAdapterResult, RiddleProofArtifactRole, RiddleProofAssessment, RiddleProofBlocker, RiddleProofCheckpointArtifact, RiddleProofCheckpointPacket, RiddleProofCheckpointResponse, RiddleProofCheckpointRole, RiddleProofCheckpointRoutingHint, RiddleProofCheckpointSummary, RiddleProofCheckpointVisibility, RiddleProofDecision, RiddleProofEvent, RiddleProofEvidenceBundle, RiddleProofPrLifecycleState, RiddleProofPrLifecycleStatus, RiddleProofProofContract, RiddleProofRunCard, RiddleProofRunParams, RiddleProofRunResult, RiddleProofRunState, RiddleProofRunStatusSnapshot, RiddleProofStage, RiddleProofStatePaths, RiddleProofStatus, RiddleProofTerminalMetadata, RiddleProofVerificationMode, RiddleProofViewportCapture, RiddleProofViewportMatrixStatus, RiddleProofVisualSession, RiddleProofVisualSessionFingerprintBasis, SetupAdapter, SetupAdapterInput, SetupAdapterResult, ShipAdapter } from '../types.js';
-export { TerminalMetadataInput, applyTerminalMetadata, compactRecord, createRunResult, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue } from '../result.js';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from '../result.js';
 export { CreateRunStateInput, RIDDLE_PROOF_RUN_STATE_VERSION, RunEventInput, appendRunEvent, appendStageHeartbeat, applyPrLifecycleState, createRunState, createRunStatusSnapshot, normalizeIntegrationContext, normalizePrLifecycleState, normalizeRunParams, setRunStatus } from '../state.js';
 export { RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION, RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION, authorPacketPayloadFromCheckpointResponse, buildAuthorCheckpointPacket, buildCheckpointPacketForEngineResult, buildProofAssessmentCheckpointPacket, buildStageCheckpointPacket, checkpointPacketIdentity, checkpointResponseIdentity, checkpointSummaryFromState, createCheckpointResponseTemplate, isDuplicateCheckpointResponse, normalizeCheckpointResponse, proofContractFromAuthorCheckpointResponse, statePathsForRunState } from '../checkpoint.js';
 export { RIDDLE_PROOF_RUN_CARD_VERSION, createRiddleProofRunCard } from '../run-card.js';

package/dist/spec/index.js

@@ -10,11 +10,11 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "../chunk-WDIKPIMB.js";
+} from "../chunk-UZIX7M7D.js";
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "../chunk-JJ4IWRMJ.js";
+} from "../chunk-KNPCWWF3.js";
 import {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
   RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION,
@@ -31,17 +31,20 @@ import {
   normalizeCheckpointResponse,
   proofContractFromAuthorCheckpointResponse,
   statePathsForRunState
-} from "../chunk-BLM5EIBA.js";
+} from "../chunk-MOTQNIZX.js";
 import {
+  applyShipControlState,
   applyTerminalMetadata,
   compactRecord,
   createRunResult,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
   normalizeTerminalMetadata,
-  recordValue
-} from "../chunk-VY4Y5U57.js";
+  recordValue,
+  shipControlStateFor
+} from "../chunk-CUBYSWZT.js";
 import "../chunk-MLKGABMK.js";
 export {
   RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION,
@@ -51,6 +54,7 @@ export {
   appendRunEvent,
   appendStageHeartbeat,
   applyPrLifecycleState,
+  applyShipControlState,
   applyTerminalMetadata,
   authorPacketPayloadFromCheckpointResponse,
   buildAuthorCheckpointPacket,
@@ -67,6 +71,7 @@ export {
   createRunState,
   createRunStatusSnapshot,
   isDuplicateCheckpointResponse,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
@@ -78,5 +83,6 @@ export {
   proofContractFromAuthorCheckpointResponse,
   recordValue,
   setRunStatus,
+  shipControlStateFor,
   statePathsForRunState
 };

package/dist/spec/result.cjs

@@ -20,14 +20,17 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/spec/result.ts
 var result_exports = {};
 __export(result_exports, {
+  applyShipControlState: () => applyShipControlState,
   applyTerminalMetadata: () => applyTerminalMetadata,
   compactRecord: () => compactRecord,
   createRunResult: () => createRunResult,
+  isProtectedFinalStatus: () => isProtectedFinalStatus,
   isSuccessfulStatus: () => isSuccessfulStatus,
   isTerminalStatus: () => isTerminalStatus,
   nonEmptyString: () => nonEmptyString,
   normalizeTerminalMetadata: () => normalizeTerminalMetadata,
-  recordValue: () => recordValue
+  recordValue: () => recordValue,
+  shipControlStateFor: () => shipControlStateFor
 });
 module.exports = __toCommonJS(result_exports);
 
@@ -35,6 +38,9 @@ module.exports = __toCommonJS(result_exports);
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
 }
+function isProtectedFinalStatus(status) {
+  return status === "ready_to_ship" || status === "shipped" || status === "completed";
+}
 function isSuccessfulStatus(status) {
   return status !== "blocked" && status !== "failed";
 }
@@ -132,6 +138,9 @@ function normalizeTerminalMetadata(input) {
     pr_state: prState,
     marked_ready: markedReady,
     left_draft: leftDraft,
+    ship_held: firstBoolean(riddleState.ship_held, result.ship_held, result.shipHeld, details.ship_held, details.shipHeld, shipReport.ship_held, shipReport.shipHeld),
+    shipping_disabled: firstBoolean(riddleState.shipping_disabled, result.shipping_disabled, result.shippingDisabled, details.shipping_disabled, details.shippingDisabled, shipReport.shipping_disabled, shipReport.shippingDisabled),
+    ship_authorized: firstBoolean(riddleState.ship_authorized, result.ship_authorized, result.shipAuthorized, details.ship_authorized, details.shipAuthorized, shipReport.ship_authorized, shipReport.shipAuthorized),
     ci_status: firstNonEmptyString(riddleState.ci_status, result.ci_status, result.ciStatus, details.ci_status, details.ciStatus, shipReport.ci_status),
     ship_commit: firstNonEmptyString(riddleState.ship_commit, result.ship_commit, result.shipCommit, details.ship_commit, details.shipCommit, shipReport.shipped_commit, shipReport.ship_commit),
     ship_remote_head: firstNonEmptyString(riddleState.ship_remote_head, result.ship_remote_head, result.shipRemoteHead, details.ship_remote_head, details.shipRemoteHead, shipReport.ship_remote_head),
@@ -165,6 +174,9 @@ function applyTerminalMetadata(state, metadata) {
   if (prBranch) state.pr_branch = prBranch;
   if (typeof metadata.marked_ready === "boolean") state.marked_ready = metadata.marked_ready;
   if (typeof metadata.left_draft === "boolean") state.left_draft = metadata.left_draft;
+  if (typeof metadata.ship_held === "boolean") state.ship_held = metadata.ship_held;
+  if (typeof metadata.shipping_disabled === "boolean") state.shipping_disabled = metadata.shipping_disabled;
+  if (typeof metadata.ship_authorized === "boolean") state.ship_authorized = metadata.ship_authorized;
   const ciStatus = nonEmptyString(metadata.ci_status);
   if (ciStatus) state.ci_status = ciStatus;
   const shipCommit = nonEmptyString(metadata.ship_commit);
@@ -196,12 +208,54 @@ function applyTerminalMetadata(state, metadata) {
   if (typeof metadata.finalized === "boolean") state.finalized = metadata.finalized;
   return state;
 }
+function shipControlStateFor(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const shipReport = recordValue(state.ship_report) || {};
+  const prState = recordValue(state.pr_state) || {};
+  const shippingDisabled = firstBoolean(
+    raw.shipping_disabled,
+    raw.shippingDisabled,
+    state.shipping_disabled,
+    shipReport.shipping_disabled,
+    shipReport.shippingDisabled
+  ) ?? state.request?.ship_mode === "none";
+  const explicitAuthorized = firstBoolean(
+    raw.ship_authorized,
+    raw.shipAuthorized,
+    state.ship_authorized,
+    shipReport.ship_authorized,
+    shipReport.shipAuthorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || state.marked_ready === true || shipReport.marked_ready === true || prState.status === "merged" || state.merge_commit || state.merged_at
+  );
+  const inferredAuthorized = explicitAuthorized ?? authorizationEvidence;
+  const rawHeld = firstBoolean(raw.ship_held, raw.shipHeld);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !inferredAuthorized;
+  const shipHeld = rawHeld ?? (state.ship_held === true || inferredHeld);
+  return {
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipHeld ? false : inferredAuthorized
+  };
+}
+function applyShipControlState(state, input = {}) {
+  const control = shipControlStateFor({ state, status: input.status, raw: input.raw });
+  state.ship_held = control.ship_held;
+  state.shipping_disabled = control.shipping_disabled;
+  state.ship_authorized = control.ship_authorized;
+  return state;
+}
 function createRunResult(input) {
   const status = input.status || input.state.status;
   const ok = isSuccessfulStatus(status);
   const state = input.metadata ? applyTerminalMetadata(input.state, input.metadata) : input.state;
   state.status = status;
   state.ok = ok;
+  if (isProtectedFinalStatus(status)) state.finalized = true;
+  applyShipControlState(state, { status, raw: input.raw });
   return compactRecord({
     ok,
     status,
@@ -219,6 +273,9 @@ function createRunResult(input) {
     pr_state: state.pr_state,
     marked_ready: state.marked_ready,
     left_draft: state.left_draft,
+    ship_held: state.ship_held,
+    shipping_disabled: state.shipping_disabled,
+    ship_authorized: state.ship_authorized,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -248,12 +305,15 @@ function createRunResult(input) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  applyShipControlState,
   applyTerminalMetadata,
   compactRecord,
   createRunResult,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
   normalizeTerminalMetadata,
-  recordValue
+  recordValue,
+  shipControlStateFor
 });

package/dist/spec/result.d.cts

@@ -1,2 +1,2 @@
-export { TerminalMetadataInput, applyTerminalMetadata, compactRecord, createRunResult, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue } from '../result.cjs';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from '../result.cjs';
 import '../types.cjs';

package/dist/spec/result.d.ts

@@ -1,2 +1,2 @@
-export { TerminalMetadataInput, applyTerminalMetadata, compactRecord, createRunResult, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue } from '../result.js';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from '../result.js';
 import '../types.js';

package/dist/spec/result.js

@@ -1,21 +1,27 @@
 import {
+  applyShipControlState,
   applyTerminalMetadata,
   compactRecord,
   createRunResult,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
   normalizeTerminalMetadata,
-  recordValue
-} from "../chunk-VY4Y5U57.js";
+  recordValue,
+  shipControlStateFor
+} from "../chunk-CUBYSWZT.js";
 import "../chunk-MLKGABMK.js";
 export {
+  applyShipControlState,
   applyTerminalMetadata,
   compactRecord,
   createRunResult,
+  isProtectedFinalStatus,
   isSuccessfulStatus,
   isTerminalStatus,
   nonEmptyString,
   normalizeTerminalMetadata,
-  recordValue
+  recordValue,
+  shipControlStateFor
 };

package/dist/spec/run-card.cjs

@@ -48,6 +48,45 @@ function nonEmptyString(value) {
 function recordValue(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
+function firstBoolean(...values) {
+  for (const value of values) {
+    if (typeof value === "boolean") return value;
+  }
+  return void 0;
+}
+function shipControlStateFor(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const shipReport = recordValue(state.ship_report) || {};
+  const prState = recordValue(state.pr_state) || {};
+  const shippingDisabled = firstBoolean(
+    raw.shipping_disabled,
+    raw.shippingDisabled,
+    state.shipping_disabled,
+    shipReport.shipping_disabled,
+    shipReport.shippingDisabled
+  ) ?? state.request?.ship_mode === "none";
+  const explicitAuthorized = firstBoolean(
+    raw.ship_authorized,
+    raw.shipAuthorized,
+    state.ship_authorized,
+    shipReport.ship_authorized,
+    shipReport.shipAuthorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || state.marked_ready === true || shipReport.marked_ready === true || prState.status === "merged" || state.merge_commit || state.merged_at
+  );
+  const inferredAuthorized = explicitAuthorized ?? authorizationEvidence;
+  const rawHeld = firstBoolean(raw.ship_held, raw.shipHeld);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !inferredAuthorized;
+  const shipHeld = rawHeld ?? (state.ship_held === true || inferredHeld);
+  return {
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipHeld ? false : inferredAuthorized
+  };
+}
 
 // src/checkpoint.ts
 var import_node_crypto = __toESM(require("crypto"), 1);
@@ -218,6 +257,7 @@ function createRiddleProofRunCard(state, input = {}) {
   const visualDelta = visualDeltaFrom({ fullRiddleState: fullState, runState: state });
   const artifacts = artifactsFrom({ fullRiddleState: fullState, runState: state });
   const viewportMatrix = viewportMatrixFrom({ fullRiddleState: fullState, runState: state });
+  const shipControl = shipControlStateFor({ state });
   return {
     version: RIDDLE_PROOF_RUN_CARD_VERSION,
     run_id: state.run_id || "unknown",
@@ -271,6 +311,9 @@ function createRiddleProofRunCard(state, input = {}) {
     stop_condition: compactRecord({
       status: state.status,
       terminal: isTerminalStatus(state.status),
+      ship_held: shipControl.ship_held,
+      shipping_disabled: shipControl.shipping_disabled,
+      ship_authorized: shipControl.ship_authorized,
       blocker_code: state.blocker?.code || null,
       blocker_message: state.blocker?.message || null,
       proof_decision: state.proof_decision,

package/dist/spec/run-card.js

@@ -1,9 +1,9 @@
 import {
   RIDDLE_PROOF_RUN_CARD_VERSION,
   createRiddleProofRunCard
-} from "../chunk-JJ4IWRMJ.js";
-import "../chunk-BLM5EIBA.js";
-import "../chunk-VY4Y5U57.js";
+} from "../chunk-KNPCWWF3.js";
+import "../chunk-MOTQNIZX.js";
+import "../chunk-CUBYSWZT.js";
 import "../chunk-MLKGABMK.js";
 export {
   RIDDLE_PROOF_RUN_CARD_VERSION,

package/dist/spec/state.cjs

@@ -47,6 +47,9 @@ module.exports = __toCommonJS(state_exports);
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
 }
+function isProtectedFinalStatus(status) {
+  return status === "ready_to_ship" || status === "shipped" || status === "completed";
+}
 function compactRecord(input) {
   return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== void 0 && value !== null && value !== ""));
 }
@@ -56,6 +59,45 @@ function nonEmptyString(value) {
 function recordValue(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
 }
+function firstBoolean(...values) {
+  for (const value of values) {
+    if (typeof value === "boolean") return value;
+  }
+  return void 0;
+}
+function shipControlStateFor(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const shipReport = recordValue(state.ship_report) || {};
+  const prState = recordValue(state.pr_state) || {};
+  const shippingDisabled = firstBoolean(
+    raw.shipping_disabled,
+    raw.shippingDisabled,
+    state.shipping_disabled,
+    shipReport.shipping_disabled,
+    shipReport.shippingDisabled
+  ) ?? state.request?.ship_mode === "none";
+  const explicitAuthorized = firstBoolean(
+    raw.ship_authorized,
+    raw.shipAuthorized,
+    state.ship_authorized,
+    shipReport.ship_authorized,
+    shipReport.shipAuthorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || state.marked_ready === true || shipReport.marked_ready === true || prState.status === "merged" || state.merge_commit || state.merged_at
+  );
+  const inferredAuthorized = explicitAuthorized ?? authorizationEvidence;
+  const rawHeld = firstBoolean(raw.ship_held, raw.shipHeld);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !inferredAuthorized;
+  const shipHeld = rawHeld ?? (state.ship_held === true || inferredHeld);
+  return {
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipHeld ? false : inferredAuthorized
+  };
+}
 
 // src/checkpoint.ts
 var import_node_crypto = __toESM(require("crypto"), 1);
@@ -226,6 +268,7 @@ function createRiddleProofRunCard(state, input = {}) {
   const visualDelta = visualDeltaFrom({ fullRiddleState: fullState, runState: state });
   const artifacts = artifactsFrom({ fullRiddleState: fullState, runState: state });
   const viewportMatrix = viewportMatrixFrom({ fullRiddleState: fullState, runState: state });
+  const shipControl = shipControlStateFor({ state });
   return {
     version: RIDDLE_PROOF_RUN_CARD_VERSION,
     run_id: state.run_id || "unknown",
@@ -279,6 +322,9 @@ function createRiddleProofRunCard(state, input = {}) {
     stop_condition: compactRecord({
       status: state.status,
       terminal: isTerminalStatus(state.status),
+      ship_held: shipControl.ship_held,
+      shipping_disabled: shipControl.shipping_disabled,
+      ship_authorized: shipControl.ship_authorized,
       blocker_code: state.blocker?.code || null,
       blocker_message: state.blocker?.message || null,
       proof_decision: state.proof_decision,
@@ -469,7 +515,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
-  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status);
+  const shipControl = shipControlStateFor({ state });
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === shipControl.ship_held && state.run_card.stop_condition?.shipping_disabled === shipControl.shipping_disabled && state.run_card.stop_condition?.ship_authorized === shipControl.ship_authorized;
   const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
@@ -483,6 +530,9 @@ function createRunStatusSnapshot(state, at = timestamp()) {
     pr_url: state.pr_url ?? null,
     pr_branch: state.pr_branch ?? null,
     pr_state: state.pr_state,
+    ship_held: shipControl.ship_held,
+    shipping_disabled: shipControl.shipping_disabled,
+    ship_authorized: shipControl.ship_authorized,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -508,6 +558,7 @@ function createRunStatusSnapshot(state, at = timestamp()) {
 function setRunStatus(state, status, at = timestamp()) {
   state.status = status;
   state.ok = status !== "blocked" && status !== "failed";
+  if (isProtectedFinalStatus(status)) state.finalized = true;
   state.updated_at = at;
   return state;
 }

package/dist/spec/state.js

@@ -9,10 +9,10 @@ import {
   normalizePrLifecycleState,
   normalizeRunParams,
   setRunStatus
-} from "../chunk-WDIKPIMB.js";
-import "../chunk-JJ4IWRMJ.js";
-import "../chunk-BLM5EIBA.js";
-import "../chunk-VY4Y5U57.js";
+} from "../chunk-UZIX7M7D.js";
+import "../chunk-KNPCWWF3.js";
+import "../chunk-MOTQNIZX.js";
+import "../chunk-CUBYSWZT.js";
 import "../chunk-MLKGABMK.js";
 export {
   RIDDLE_PROOF_RUN_STATE_VERSION,