@riddledc/riddle-proof 0.8.59 → 0.8.61

package/dist/adapters/codex-exec-agent.d.cts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, runCodexExecAgentDoctor } from '../codex-exec-agent.cjs';
 import '../engine-harness-LBfqbFSe.cjs';
 import '../types.cjs';
+import '../public-state.cjs';

package/dist/adapters/codex-exec-agent.d.ts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, runCodexExecAgentDoctor } from '../codex-exec-agent.js';
 import '../engine-harness-CMACHP6A.js';
 import '../types.js';
+import '../public-state.js';

package/dist/adapters/codex-exec-agent.js

@@ -3,8 +3,9 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-RS4HJLJQ.js";
-import "../chunk-CUBYSWZT.js";
+} from "../chunk-QPKY767W.js";
+import "../chunk-QGMSN34W.js";
+import "../chunk-WKIIJX3O.js";
 import "../chunk-MLKGABMK.js";
 export {
   createCodexExecAgentAdapter,

package/dist/adapters/codex.d.cts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, runCodexExecAgentDoctor } from '../codex-exec-agent.cjs';
 import '../engine-harness-LBfqbFSe.cjs';
 import '../types.cjs';
+import '../public-state.cjs';

package/dist/adapters/codex.d.ts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, runCodexExecAgentDoctor } from '../codex-exec-agent.js';
 import '../engine-harness-CMACHP6A.js';
 import '../types.js';
+import '../public-state.js';

package/dist/adapters/codex.js

@@ -3,8 +3,9 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-RS4HJLJQ.js";
-import "../chunk-CUBYSWZT.js";
+} from "../chunk-QPKY767W.js";
+import "../chunk-QGMSN34W.js";
+import "../chunk-WKIIJX3O.js";
 import "../chunk-MLKGABMK.js";
 export {
   createCodexExecAgentAdapter,

package/dist/adapters/local-agent.d.cts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig as LocalAgentConfig, CodexJsonRequest as LocalAgentJsonRequest, CodexJsonResult as LocalAgentJsonResult, CodexJsonRunner as LocalAgentJsonRunner, createCodexExecAgentAdapter as createLocalAgentAdapter, createCodexExecJsonRunner as createLocalAgentJsonRunner, runCodexExecAgentDoctor as runLocalAgentDoctor } from '../codex-exec-agent.cjs';
 import '../engine-harness-LBfqbFSe.cjs';
 import '../types.cjs';
+import '../public-state.cjs';

package/dist/adapters/local-agent.d.ts

@@ -1,3 +1,4 @@
 export { CodexExecAgentConfig as LocalAgentConfig, CodexJsonRequest as LocalAgentJsonRequest, CodexJsonResult as LocalAgentJsonResult, CodexJsonRunner as LocalAgentJsonRunner, createCodexExecAgentAdapter as createLocalAgentAdapter, createCodexExecJsonRunner as createLocalAgentJsonRunner, runCodexExecAgentDoctor as runLocalAgentDoctor } from '../codex-exec-agent.js';
 import '../engine-harness-CMACHP6A.js';
 import '../types.js';
+import '../public-state.js';

package/dist/adapters/local-agent.js

@@ -3,8 +3,9 @@ import {
   createCodexExecAgentAdapter,
   createCodexExecJsonRunner,
   runCodexExecAgentDoctor
-} from "../chunk-RS4HJLJQ.js";
-import "../chunk-CUBYSWZT.js";
+} from "../chunk-QPKY767W.js";
+import "../chunk-QGMSN34W.js";
+import "../chunk-WKIIJX3O.js";
 import "../chunk-MLKGABMK.js";
 export {
   createCodexExecAgentAdapter as createLocalAgentAdapter,

package/dist/adapters/openclaw.d.cts

@@ -1,2 +1,3 @@
 export { OpenClawProofedChangeParams, openClawIntegrationContext, parseOpenClawAssertions, parseOpenClawJsonObjectOrArray, toRiddleProofRunParams } from '../openclaw.cjs';
 import '../types.cjs';
+import '../public-state.cjs';

package/dist/adapters/openclaw.d.ts

@@ -1,2 +1,3 @@
 export { OpenClawProofedChangeParams, openClawIntegrationContext, parseOpenClawAssertions, parseOpenClawJsonObjectOrArray, toRiddleProofRunParams } from '../openclaw.js';
 import '../types.js';
+import '../public-state.js';

package/dist/adapters/openclaw.js

@@ -3,11 +3,12 @@ import {
   parseOpenClawAssertions,
   parseOpenClawJsonObjectOrArray,
   toRiddleProofRunParams
-} from "../chunk-TTB3ZAVX.js";
-import "../chunk-UZIX7M7D.js";
-import "../chunk-KNPCWWF3.js";
-import "../chunk-MOTQNIZX.js";
-import "../chunk-CUBYSWZT.js";
+} from "../chunk-3FK5HZHK.js";
+import "../chunk-UEY5SJG5.js";
+import "../chunk-NXEAFQYZ.js";
+import "../chunk-FX2CB4MG.js";
+import "../chunk-QGMSN34W.js";
+import "../chunk-WKIIJX3O.js";
 import "../chunk-MLKGABMK.js";
 export {
   openClawIntegrationContext,

package/dist/advanced/engine-harness.cjs

@@ -1609,7 +1609,7 @@ function normalizeStageRequest(state, requestedAdvanceStage) {
   if (!state?.recon_results || ["needs_agent_decision", "needs_supervisor_judgment"].includes(state?.recon_status || "")) return "recon";
   return null;
 }
-function stringValue(value) {
+function stringValue2(value) {
   return typeof value === "string" && value.trim() ? value.trim() : "";
 }
 function commandResult(command, args, cwd, timeout = 6e4) {
@@ -1632,7 +1632,7 @@ function repoDirForSync(state) {
     state?.repo_dir,
     state?.after_worktree,
     state?.before_worktree
-  ].map(stringValue).filter(Boolean);
+  ].map(stringValue2).filter(Boolean);
   return candidates.find((candidate) => (0, import_node_fs2.existsSync)(import_node_path2.default.join(candidate, ".git"))) || "";
 }
 function parseWorktreeList(output) {
@@ -1752,32 +1752,32 @@ function baseCheckoutReport(repoDir, baseBranch, updateRequested, updateAllowed)
   return report;
 }
 function normalizeGhPrStatus(value) {
-  const status = stringValue(value).toLowerCase();
+  const status = stringValue2(value).toLowerCase();
   if (status === "merged") return "merged";
   if (status === "open") return "open";
   if (status === "closed") return "closed";
   return status || "unknown";
 }
 function prRefFromState(state) {
-  return stringValue(state?.pr_number) || stringValue(state?.pr_url);
+  return stringValue2(state?.pr_number) || stringValue2(state?.pr_url);
 }
 function prNumberFromUrl(url) {
   const match = url.match(/\/pull\/(\d+)(?:$|[?#])/);
   return match?.[1] || "";
 }
 function normalizePrState(raw, state, checkedAt = (/* @__PURE__ */ new Date()).toISOString()) {
-  const mergeCommit = typeof raw?.mergeCommit === "object" && raw.mergeCommit ? stringValue(raw.mergeCommit.oid) : stringValue(raw?.mergeCommit);
-  const url = stringValue(raw?.url) || stringValue(state?.pr_url);
+  const mergeCommit = typeof raw?.mergeCommit === "object" && raw.mergeCommit ? stringValue2(raw.mergeCommit.oid) : stringValue2(raw?.mergeCommit);
+  const url = stringValue2(raw?.url) || stringValue2(state?.pr_url);
   return {
     status: normalizeGhPrStatus(raw?.state),
     pr_url: url || null,
     pr_number: String(raw?.number || state?.pr_number || prNumberFromUrl(url) || ""),
-    repo: stringValue(state?.repo) || null,
-    head_branch: stringValue(raw?.headRefName) || stringValue(state?.target_branch) || stringValue(state?.branch) || null,
-    base_branch: stringValue(raw?.baseRefName) || stringValue(state?.base_branch) || "main",
+    repo: stringValue2(state?.repo) || null,
+    head_branch: stringValue2(raw?.headRefName) || stringValue2(state?.target_branch) || stringValue2(state?.branch) || null,
+    base_branch: stringValue2(raw?.baseRefName) || stringValue2(state?.base_branch) || "main",
     merge_commit: mergeCommit || null,
-    merged_at: stringValue(raw?.mergedAt) || null,
-    closed_at: stringValue(raw?.closedAt) || null,
+    merged_at: stringValue2(raw?.mergedAt) || null,
+    closed_at: stringValue2(raw?.closedAt) || null,
     checked_at: checkedAt,
     source: "gh"
   };
@@ -1794,7 +1794,7 @@ function cleanupMergedProofRun(state, repoDir, params, prState) {
     branch_delete_errors: [],
     pruned: false
   };
-  const baseBranch = stringValue(prState.base_branch) || stringValue(state?.base_branch) || "main";
+  const baseBranch = stringValue2(prState.base_branch) || stringValue2(state?.base_branch) || "main";
   let fetchedBase = params.fetch_base === false;
   if (params.fetch_base !== false && baseBranch) {
     const fetch = commandResult("git", ["fetch", "origin", baseBranch], repoDir, 12e4);
@@ -1812,7 +1812,7 @@ function cleanupMergedProofRun(state, repoDir, params, prState) {
   }
   const removed = [];
   const removeErrors = [];
-  for (const candidate of [state?.before_worktree, state?.after_worktree].map(stringValue).filter(Boolean)) {
+  for (const candidate of [state?.before_worktree, state?.after_worktree].map(stringValue2).filter(Boolean)) {
     if (!(0, import_node_fs2.existsSync)(candidate) || import_node_path2.default.resolve(candidate) === import_node_path2.default.resolve(repoDir)) continue;
     const remove = commandResult("git", ["worktree", "remove", "--force", candidate], repoDir, 12e4);
     if (remove.ok) {
@@ -1823,7 +1823,7 @@ function cleanupMergedProofRun(state, repoDir, params, prState) {
   }
   cleanup.worktrees_removed = removed;
   cleanup.worktree_remove_errors = removeErrors;
-  const afterBranch = stringValue(state?.after_worktree_branch);
+  const afterBranch = stringValue2(state?.after_worktree_branch);
   if (afterBranch.startsWith("riddle-proof/")) {
     const deleted = commandResult("git", ["branch", "-D", afterBranch], repoDir, 6e4);
     if (deleted.ok) {
@@ -1859,7 +1859,7 @@ function syncPrLifecycle(statePath, params) {
     const prState2 = {
       status: missingPr ? "orphaned" : "unavailable",
       pr_url: state.pr_url || null,
-      pr_number: String(state.pr_number || prNumberFromUrl(stringValue(state.pr_url)) || ""),
+      pr_number: String(state.pr_number || prNumberFromUrl(stringValue2(state.pr_url)) || ""),
       repo: state.repo || null,
       head_branch: state.target_branch || state.branch || null,
       base_branch: state.base_branch || "main",
@@ -1888,7 +1888,7 @@ function syncPrLifecycle(statePath, params) {
     const prState2 = {
       status: "unavailable",
       pr_url: state.pr_url || null,
-      pr_number: String(state.pr_number || prNumberFromUrl(stringValue(state.pr_url)) || ""),
+      pr_number: String(state.pr_number || prNumberFromUrl(stringValue2(state.pr_url)) || ""),
       repo: state.repo || null,
       head_branch: state.target_branch || state.branch || null,
       base_branch: state.base_branch || "main",
@@ -2669,8 +2669,8 @@ ${implementRes.stdout || ""}
 ${implementRes.stderr || ""}`;
         if (implementError.includes("No implementation detected")) {
           const implementationState = readState(config.statePath) || {};
-          const implementationSummary = stringValue(implementationState?.implementation_summary) || null;
-          const implementationDetectionSummary = stringValue(implementationState?.implementation_detection_summary) || null;
+          const implementationSummary = stringValue2(implementationState?.implementation_summary) || null;
+          const implementationDetectionSummary = stringValue2(implementationState?.implementation_detection_summary) || null;
           const implementationDetection = implementationState?.implementation_detection && typeof implementationState.implementation_detection === "object" && !Array.isArray(implementationState.implementation_detection) ? implementationState.implementation_detection : null;
           recordAttempt("implement", "checkpoint", "Implementation checkpoint found no material code changes yet.", {
             checkpoint: "implement_changes_missing",
@@ -2788,14 +2788,14 @@ ${implementRes.stderr || ""}`;
             const captureQuality = verifyDecisionRequest2?.capture_quality || {};
             const conclusiveVerifyBlockers2 = proofAssessmentHardBlockersForState({
               ...failedVerifyState,
-              structured_interaction_capture_failure_summary: stringValue(verifyDecisionRequest2?.structured_interaction_capture_failure_summary) || stringValue(failedVerifyState?.structured_interaction_capture_failure_summary) || void 0,
-              structured_interaction_failure_summary: stringValue(verifyDecisionRequest2?.structured_interaction_failure_summary) || stringValue(failedVerifyState?.structured_interaction_failure_summary) || void 0
+              structured_interaction_capture_failure_summary: stringValue2(verifyDecisionRequest2?.structured_interaction_capture_failure_summary) || stringValue2(failedVerifyState?.structured_interaction_capture_failure_summary) || void 0,
+              structured_interaction_failure_summary: stringValue2(verifyDecisionRequest2?.structured_interaction_failure_summary) || stringValue2(failedVerifyState?.structured_interaction_failure_summary) || void 0
             });
-            const structuredInteractionFailureSummary2 = stringValue(verifyDecisionRequest2?.structured_interaction_capture_failure_summary) || stringValue(verifyDecisionRequest2?.structured_interaction_failure_summary) || stringValue(failedVerifyState?.structured_interaction_capture_failure_summary) || stringValue(failedVerifyState?.structured_interaction_failure_summary) || stringValue(conclusiveVerifyBlockers2[0]);
+            const structuredInteractionFailureSummary2 = stringValue2(verifyDecisionRequest2?.structured_interaction_capture_failure_summary) || stringValue2(verifyDecisionRequest2?.structured_interaction_failure_summary) || stringValue2(failedVerifyState?.structured_interaction_capture_failure_summary) || stringValue2(failedVerifyState?.structured_interaction_failure_summary) || stringValue2(conclusiveVerifyBlockers2[0]);
             const captureTerminalBlocker = failedVerifyStatus === "capture_error" || conclusiveVerifyBlockers2.length > 0 || Boolean(structuredInteractionFailureSummary2) || captureQuality?.terminal_blocker === true || captureQuality?.blocking === true;
-            const terminalCaptureQualitySummary = captureQuality?.terminal_blocker === true || captureQuality?.blocking === true ? stringValue(captureQuality?.summary) : "";
+            const terminalCaptureQualitySummary = captureQuality?.terminal_blocker === true || captureQuality?.blocking === true ? stringValue2(captureQuality?.summary) : "";
             const checkpointName = captureTerminalBlocker ? "verify_capture_blocked" : "verify_capture_retry";
-            const summary = terminalCaptureQualitySummary || structuredInteractionFailureSummary2 || stringValue(verifyDecisionRequest2?.summary) || stringValue(failedVerifyState?.verify_summary) || stringValue(failedVerifyState?.proof_summary) || stringValue(verifyRes.error) || "Verify capture failed before the evidence could be judged.";
+            const summary = terminalCaptureQualitySummary || structuredInteractionFailureSummary2 || stringValue2(verifyDecisionRequest2?.summary) || stringValue2(failedVerifyState?.verify_summary) || stringValue2(failedVerifyState?.proof_summary) || stringValue2(verifyRes.error) || "Verify capture failed before the evidence could be judged.";
             const failedVerifyDetails = {
               executed,
               verifyStatus: failedVerifyStatus,
@@ -2873,10 +2873,10 @@ ${implementRes.stderr || ""}`;
       };
       const conclusiveVerifyBlockers = proofAssessmentHardBlockersForState({
         ...state,
-        structured_interaction_capture_failure_summary: stringValue(verifyDecisionRequest?.structured_interaction_capture_failure_summary) || stringValue(state?.structured_interaction_capture_failure_summary) || void 0,
-        structured_interaction_failure_summary: stringValue(verifyDecisionRequest?.structured_interaction_failure_summary) || stringValue(state?.structured_interaction_failure_summary) || void 0
+        structured_interaction_capture_failure_summary: stringValue2(verifyDecisionRequest?.structured_interaction_capture_failure_summary) || stringValue2(state?.structured_interaction_capture_failure_summary) || void 0,
+        structured_interaction_failure_summary: stringValue2(verifyDecisionRequest?.structured_interaction_failure_summary) || stringValue2(state?.structured_interaction_failure_summary) || void 0
       });
-      const structuredInteractionFailureSummary = stringValue(verifyDecisionRequest?.structured_interaction_capture_failure_summary) || stringValue(verifyDecisionRequest?.structured_interaction_failure_summary) || stringValue(state?.structured_interaction_capture_failure_summary) || stringValue(state?.structured_interaction_failure_summary) || stringValue(conclusiveVerifyBlockers[0]);
+      const structuredInteractionFailureSummary = stringValue2(verifyDecisionRequest?.structured_interaction_capture_failure_summary) || stringValue2(verifyDecisionRequest?.structured_interaction_failure_summary) || stringValue2(state?.structured_interaction_capture_failure_summary) || stringValue2(state?.structured_interaction_failure_summary) || stringValue2(conclusiveVerifyBlockers[0]);
       if (verifyStatus !== "evidence_captured") {
         const captureQuality = verifyDecisionRequest?.capture_quality || {};
         const captureTerminalBlocker = conclusiveVerifyBlockers.length > 0 || Boolean(structuredInteractionFailureSummary) || captureQuality?.terminal_blocker === true || captureQuality?.blocking === true;
@@ -2888,9 +2888,9 @@ ${implementRes.stderr || ""}`;
           });
           state = readState(config.statePath);
         }
-        const terminalCaptureQualitySummary = captureQuality?.terminal_blocker === true || captureQuality?.blocking === true ? stringValue(captureQuality?.summary) : "";
+        const terminalCaptureQualitySummary = captureQuality?.terminal_blocker === true || captureQuality?.blocking === true ? stringValue2(captureQuality?.summary) : "";
         const checkpointName = captureTerminalBlocker ? "verify_capture_blocked" : "verify_capture_retry";
-        const summary = terminalCaptureQualitySummary || structuredInteractionFailureSummary || stringValue(proofAssessment.summary) || "Verify ran, but the proof packet still needs internal capture-plan work before it should ship.";
+        const summary = terminalCaptureQualitySummary || structuredInteractionFailureSummary || stringValue2(proofAssessment.summary) || "Verify ran, but the proof packet still needs internal capture-plan work before it should ship.";
         recordAttempt("verify", "checkpoint", summary, {
           autoApproved: verifyRes.autoApproved || false,
           checkpoint: checkpointName,
@@ -3419,6 +3419,167 @@ var import_node_fs3 = require("fs");
 var import_node_path3 = __toESM(require("path"), 1);
 var import_node_crypto3 = __toESM(require("crypto"), 1);
 
+// src/public-state.ts
+function riddleProofPublicStateAllowsClaim(summary, claim) {
+  return !summary?.prohibited_claims.includes(claim);
+}
+function riddleProofPublicStateAllowsMergeRecommendation(summary) {
+  return riddleProofPublicStateAllowsClaim(summary, "merge_ready") && riddleProofPublicStateAllowsClaim(summary, "sync_allowed");
+}
+function riddleProofPublicStateMergeRecommendation(summary, recommendation) {
+  return recommendation && riddleProofPublicStateAllowsMergeRecommendation(summary) ? recommendation : void 0;
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function stringValue(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function booleanValue(value) {
+  return typeof value === "boolean" ? value : void 0;
+}
+function numberValue(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function firstStringValue(...values) {
+  for (const value of values) {
+    const text = stringValue(value);
+    if (text) return text;
+  }
+  return void 0;
+}
+function firstBooleanValue(...values) {
+  for (const value of values) {
+    const bool = booleanValue(value);
+    if (typeof bool === "boolean") return bool;
+  }
+  return void 0;
+}
+function firstRecordValue(...values) {
+  for (const value of values) {
+    const record = asRecord(value);
+    if (Object.keys(record).length) return record;
+  }
+  return void 0;
+}
+function countValue(value) {
+  const number = numberValue(value);
+  return typeof number === "number" && number > 0 ? Math.trunc(number) : 0;
+}
+function checkpointSummaryFrom(...values) {
+  const record = firstRecordValue(...values);
+  if (!record) return void 0;
+  const accepted = countValue(record.response_count);
+  const rejected = countValue(record.rejected_response_count);
+  const ignored = countValue(record.ignored_response_count);
+  const duplicate = countValue(record.duplicate_response_count);
+  const summary = {
+    pending: booleanValue(record.pending),
+    accepted_response_count: accepted,
+    rejected_response_count: rejected,
+    ignored_response_count: ignored,
+    duplicate_response_count: duplicate,
+    latest_decision: stringValue(record.latest_decision),
+    audit_disclosure_required: rejected > 0 || ignored > 0 || duplicate > 0
+  };
+  return Object.values(summary).some((value) => typeof value !== "undefined") ? summary : void 0;
+}
+function uniqueStrings(values) {
+  return [...new Set(values.filter(Boolean))];
+}
+function summarizeRiddleProofPublicState(input) {
+  const record = asRecord(input);
+  const runCard = asRecord(record.run_card);
+  const stopCondition = asRecord(runCard.stop_condition);
+  const raw = asRecord(record.raw);
+  const request = asRecord(record.request);
+  const requestMetadata = asRecord(record.request_metadata);
+  const prState = asRecord(record.pr_state);
+  const handoff = asRecord(record.pr_handoff_policy);
+  const handoffState = stringValue(handoff.state);
+  const status = firstStringValue(record.status, stopCondition.status);
+  const ok = booleanValue(record.ok) ?? null;
+  const shipMode = firstStringValue(request.ship_mode, requestMetadata.ship_mode, record.ship_mode, handoff.ship_mode);
+  const explicitShippingDisabled = firstBooleanValue(
+    record.shipping_disabled,
+    stopCondition.shipping_disabled,
+    raw.shipping_disabled,
+    handoff.shipping_disabled
+  );
+  const shippingDisabled = explicitShippingDisabled === true || shipMode === "none" || handoffState === "proof_complete_ship_disabled";
+  const explicitShipAuthorized = firstBooleanValue(
+    record.ship_authorized,
+    stopCondition.ship_authorized,
+    raw.ship_authorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || record.marked_ready === true || stringValue(prState.status) === "merged" || record.merge_commit || record.merged_at
+  );
+  const shipAuthorizedBeforeHold = explicitShipAuthorized ?? authorizationEvidence;
+  const explicitShipHeld = firstBooleanValue(record.ship_held, stopCondition.ship_held, raw.ship_held);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !shipAuthorizedBeforeHold;
+  const shipHeld = explicitShipHeld === true || inferredHeld;
+  const shipAuthorized = shipHeld ? false : shipAuthorizedBeforeHold === true;
+  const proofComplete = Boolean(
+    status === "ready_to_ship" || status === "shipped" || status === "completed" || status === "passed" || ok === true || handoff.proof_complete === true
+  );
+  const checkpointSummary = checkpointSummaryFrom(
+    record.checkpoint_summary,
+    stopCondition.checkpoint_summary,
+    asRecord(record.details).checkpoint_summary,
+    asRecord(raw.details).checkpoint_summary
+  );
+  const blockedOrWaiting = status === "blocked" || status === "failed" || status === "awaiting_checkpoint" || handoffState === "proof_blocked" || handoffState === "proof_review_required" || handoffState === "proof_failed" || handoffState === "proof_checkpoint_required";
+  const proofPassed = Boolean(proofComplete && !blockedOrWaiting);
+  const explicitMergeReady = firstBooleanValue(record.merge_ready, stopCondition.merge_ready, raw.merge_ready, handoff.merge_ready);
+  const normalPrAllowed = firstBooleanValue(record.normal_pr_allowed, raw.normal_pr_allowed, handoff.normal_pr_allowed);
+  const baseHandoffAllowed = !blockedOrWaiting && !shipHeld && !shippingDisabled;
+  const mergeReady = baseHandoffAllowed && normalPrAllowed !== false && (explicitMergeReady ?? shipAuthorized);
+  const syncAllowed = mergeReady;
+  let policyState = "unknown";
+  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") policyState = "awaiting_checkpoint";
+  else if (status === "failed" || handoffState === "proof_failed") policyState = "proof_failed";
+  else if (status === "blocked" || handoffState === "proof_blocked" || handoffState === "proof_review_required") policyState = "proof_blocked";
+  else if (handoffState === "proof_complete_ship_disabled") policyState = "proof_complete_ship_disabled";
+  else if (proofComplete && shipHeld && !shipAuthorized) policyState = "proof_passed_ship_held";
+  else if (proofComplete && shippingDisabled && !shipAuthorized) policyState = "proof_complete_ship_disabled";
+  else if (shipAuthorized) policyState = "ship_authorized";
+  else if (proofPassed) policyState = "proof_passed";
+  else if (status === "running") policyState = "proof_in_progress";
+  const requiredDisclosures = [];
+  if (shipHeld) requiredDisclosures.push("ship_held");
+  if (shippingDisabled) requiredDisclosures.push("shipping_disabled");
+  if (checkpointSummary?.audit_disclosure_required) requiredDisclosures.push("checkpoint_audit_counters");
+  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") requiredDisclosures.push("checkpoint_required");
+  const prohibitedClaims = [];
+  if (!shipAuthorized || shipHeld || shippingDisabled) prohibitedClaims.push("ship_authorized", "shipped");
+  if (!mergeReady) prohibitedClaims.push("merge_ready");
+  if (!syncAllowed) prohibitedClaims.push("sync_allowed");
+  if (blockedOrWaiting) {
+    prohibitedClaims.push("proof_passed", "ready_to_ship");
+  }
+  if (checkpointSummary?.audit_disclosure_required) {
+    prohibitedClaims.push("all_checkpoint_responses_accepted");
+  }
+  const resultLabel = policyState === "awaiting_checkpoint" ? "checkpoint required" : policyState === "proof_blocked" ? "blocked" : policyState === "proof_failed" ? "failed" : policyState === "proof_complete_ship_disabled" ? "proof complete; shipping disabled" : policyState === "proof_passed_ship_held" ? "proof passed; ship held" : policyState === "ship_authorized" ? status === "shipped" ? "shipped" : "ship authorized" : policyState === "proof_passed" ? "passed" : policyState === "proof_in_progress" ? "running" : status || "recorded";
+  return {
+    status,
+    ok,
+    policy_state: policyState,
+    result_label: resultLabel,
+    proof_complete: proofComplete,
+    proof_passed: proofPassed,
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipAuthorized,
+    merge_ready: mergeReady,
+    sync_allowed: syncAllowed,
+    checkpoint_summary: checkpointSummary,
+    required_disclosures: uniqueStrings(requiredDisclosures),
+    prohibited_claims: uniqueStrings(prohibitedClaims)
+  };
+}
+
 // src/result.ts
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
@@ -3593,6 +3754,37 @@ function applyTerminalMetadata(state, metadata) {
   if (typeof metadata.finalized === "boolean") state.finalized = metadata.finalized;
   return state;
 }
+function publicStateForRunState(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const extendedState = state;
+  const terminalOk = isTerminalStatus(status) ? state.ok : void 0;
+  return summarizeRiddleProofPublicState(compactRecord({
+    status,
+    ok: terminalOk,
+    request: state.request,
+    pr_state: state.pr_state,
+    marked_ready: state.marked_ready,
+    ship_held: state.ship_held,
+    shipping_disabled: state.shipping_disabled,
+    ship_authorized: state.ship_authorized,
+    ship_mode: state.request?.ship_mode,
+    merge_commit: state.merge_commit,
+    merged_at: state.merged_at,
+    checkpoint_summary: state.checkpoint_summary,
+    pr_handoff_policy: recordValue(extendedState.pr_handoff_policy),
+    merge_ready: extendedState.merge_ready,
+    normal_pr_allowed: extendedState.normal_pr_allowed,
+    raw: Object.keys(raw).length ? raw : void 0
+  }));
+}
+function publicMergeRecommendationForRunState(input) {
+  return riddleProofPublicStateMergeRecommendation(
+    publicStateForRunState(input),
+    input.state.merge_recommendation
+  );
+}
 function shipControlStateFor(input) {
   const state = input.state;
   const status = input.status || state.status;
@@ -3641,6 +3833,11 @@ function createRunResult(input) {
   state.ok = ok;
   if (isProtectedFinalStatus(status)) state.finalized = true;
   applyShipControlState(state, { status, raw: input.raw });
+  const publicState = publicStateForRunState({ state, status, raw: input.raw });
+  const publicMergeRecommendation = riddleProofPublicStateMergeRecommendation(
+    publicState,
+    state.merge_recommendation
+  );
   return compactRecord({
     ok,
     status,
@@ -3658,9 +3855,12 @@ function createRunResult(input) {
     pr_state: state.pr_state,
     marked_ready: state.marked_ready,
     left_draft: state.left_draft,
-    ship_held: state.ship_held,
-    shipping_disabled: state.shipping_disabled,
-    ship_authorized: state.ship_authorized,
+    result_label: publicState.result_label,
+    ship_held: publicState.ship_held,
+    shipping_disabled: publicState.shipping_disabled,
+    ship_authorized: publicState.ship_authorized,
+    merge_ready: publicState.merge_ready,
+    sync_allowed: publicState.sync_allowed,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -3674,7 +3874,8 @@ function createRunResult(input) {
     cleanup_report: state.cleanup_report,
     notification: state.notification,
     proof_decision: state.proof_decision,
-    merge_recommendation: state.merge_recommendation,
+    merge_recommendation: publicMergeRecommendation,
+    public_state: publicState,
     finalized: state.finalized,
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
@@ -4554,7 +4755,8 @@ function createRiddleProofRunCard(state, input = {}) {
   const visualDelta = visualDeltaFrom({ fullRiddleState: fullState, runState: state });
   const artifacts = artifactsFrom({ fullRiddleState: fullState, runState: state });
   const viewportMatrix = viewportMatrixFrom({ fullRiddleState: fullState, runState: state });
-  const shipControl = shipControlStateFor({ state });
+  const publicState = publicStateForRunState({ state, status: state.status });
+  const publicMergeRecommendation = publicMergeRecommendationForRunState({ state, status: state.status });
   return {
     version: RIDDLE_PROOF_RUN_CARD_VERSION,
     run_id: state.run_id || "unknown",
@@ -4608,14 +4810,18 @@ function createRiddleProofRunCard(state, input = {}) {
     stop_condition: compactRecord({
       status: state.status,
       terminal: isTerminalStatus(state.status),
-      ship_held: shipControl.ship_held,
-      shipping_disabled: shipControl.shipping_disabled,
-      ship_authorized: shipControl.ship_authorized,
+      result_label: publicState.result_label,
+      ship_held: publicState.ship_held,
+      shipping_disabled: publicState.shipping_disabled,
+      ship_authorized: publicState.ship_authorized,
+      merge_ready: publicState.merge_ready,
+      sync_allowed: publicState.sync_allowed,
       blocker_code: state.blocker?.code || null,
       blocker_message: state.blocker?.message || null,
       proof_decision: state.proof_decision,
-      merge_recommendation: state.merge_recommendation,
-      monitor_should_continue: !isTerminalStatus(state.status)
+      merge_recommendation: publicMergeRecommendation,
+      monitor_should_continue: !isTerminalStatus(state.status),
+      public_state: publicState
     }),
     updated_at: state.updated_at
   };
@@ -4771,8 +4977,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
-  const shipControl = shipControlStateFor({ state });
-  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === shipControl.ship_held && state.run_card.stop_condition?.shipping_disabled === shipControl.shipping_disabled && state.run_card.stop_condition?.ship_authorized === shipControl.ship_authorized;
+  const publicState = publicStateForRunState({ state, status: state.status });
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === publicState.ship_held && state.run_card.stop_condition?.shipping_disabled === publicState.shipping_disabled && state.run_card.stop_condition?.ship_authorized === publicState.ship_authorized && state.run_card.stop_condition?.merge_ready === publicState.merge_ready && state.run_card.stop_condition?.sync_allowed === publicState.sync_allowed && state.run_card.stop_condition?.result_label === publicState.result_label;
   const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
@@ -4786,9 +4992,13 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     pr_url: state.pr_url ?? null,
     pr_branch: state.pr_branch ?? null,
     pr_state: state.pr_state,
-    ship_held: shipControl.ship_held,
-    shipping_disabled: shipControl.shipping_disabled,
-    ship_authorized: shipControl.ship_authorized,
+    result_label: publicState.result_label,
+    ship_held: publicState.ship_held,
+    shipping_disabled: publicState.shipping_disabled,
+    ship_authorized: publicState.ship_authorized,
+    merge_ready: publicState.merge_ready,
+    sync_allowed: publicState.sync_allowed,
+    public_state: publicState,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -5158,6 +5368,13 @@ function proofAssessmentHardBlockers(state, payload) {
   }
   return blockers;
 }
+function proofGateStateForCheckpointResponse(state) {
+  const fullState = readJson(state.request.engine_state_path) || {};
+  return compactRecord({
+    ...fullState,
+    verification_mode: nonEmptyString(fullState.verification_mode) || state.request.verification_mode
+  });
+}
 function proofAssessmentContinuation(result, payload) {
   const proof_assessment_json = jsonParam(payload);
   return { ...baseContinuation(result), proof_assessment_json };
@@ -5704,6 +5921,45 @@ function checkpointResponseContinuation(state, value) {
           blocker: sourceBlocker
         });
       }
+      const proofGateState = proofGateStateForCheckpointResponse(state);
+      const hardBlockers = proofAssessmentHardBlockers(proofGateState, assessment);
+      if (proofAssessmentRequestsShip(assessment) && hardBlockers.length) {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
+          blocker: {
+            code: "checkpoint_response_proof_hard_blocker",
+            checkpoint: packet.checkpoint,
+            message: "Riddle Proof cannot mark ready_to_ship while the proof bundle contains a hard blocker: " + hardBlockers[0],
+            details: compactRecord({
+              stage: packet.stage,
+              hard_blockers: hardBlockers,
+              proofAssessment: assessment,
+              response
+            })
+          }
+        });
+      }
+      const visualBlocker = proofAssessmentVisualBlocker(proofGateState, assessment);
+      if (visualBlocker) {
+        const recoveryAssessment = visualDeltaEvidenceRecoveryAssessment(proofGateState, assessment, visualBlocker);
+        appendCheckpointResponse(state, response, { summary: visualBlocker });
+        recordEvent(state, {
+          kind: "checkpoint.response.evidence_recovery_required",
+          checkpoint: packet.checkpoint,
+          stage: "verify",
+          summary: visualBlocker,
+          details: compactRecord({
+            evidence_collection_incomplete: true,
+            recovery_stage: "verify",
+            evidence_issue_code: recoveryAssessment.evidence_issue_code || null,
+            visual_delta: recoveryAssessment.visual_delta || null,
+            proof_assessment: recoveryAssessment,
+            checkpoint_response_source: response.source || null
+          })
+        });
+        return { next: { ...base, proof_assessment_json: jsonParam(recoveryAssessment) } };
+      }
       appendCheckpointResponse(state, response);
       if (state.request.ship_mode !== "ship" && proofAssessmentRequestsShip(assessment)) {
         const result = {

package/dist/advanced/engine-harness.d.cts

@@ -1,2 +1,3 @@
 export { R as RiddleProofAgentAdapter, a as RiddleProofAgentPayload, b as RiddleProofCheckpointMode, c as RiddleProofEngine, d as RiddleProofEngineHarnessConfig, e as RiddleProofEngineHarnessContext, f as RiddleProofEngineResult, g as RiddleProofShipMode, h as RiddleProofWorkflowParams, i as RunRiddleProofEngineHarnessInput, j as createDisabledRiddleProofAgentAdapter, r as readRiddleProofRunStatus, k as runRiddleProofEngineHarness } from '../engine-harness-LBfqbFSe.cjs';
 import '../types.cjs';
+import '../public-state.cjs';

package/dist/advanced/engine-harness.d.ts

@@ -1,2 +1,3 @@
 export { R as RiddleProofAgentAdapter, a as RiddleProofAgentPayload, b as RiddleProofCheckpointMode, c as RiddleProofEngine, d as RiddleProofEngineHarnessConfig, e as RiddleProofEngineHarnessContext, f as RiddleProofEngineResult, g as RiddleProofShipMode, h as RiddleProofWorkflowParams, i as RunRiddleProofEngineHarnessInput, j as createDisabledRiddleProofAgentAdapter, r as readRiddleProofRunStatus, k as runRiddleProofEngineHarness } from '../engine-harness-CMACHP6A.js';
 import '../types.js';
+import '../public-state.js';