@riddledc/riddle-proof 0.8.59 → 0.8.61

package/dist/index.cjs

@@ -3511,6 +3511,8 @@ __export(index_exports, {
   preflightRiddleProofProfileHttpStatusChecks: () => preflightRiddleProofProfileHttpStatusChecks,
   profileStatusExitCode: () => profileStatusExitCode,
   proofContractFromAuthorCheckpointResponse: () => proofContractFromAuthorCheckpointResponse,
+  publicMergeRecommendationForRunState: () => publicMergeRecommendationForRunState,
+  publicStateForRunState: () => publicStateForRunState,
   readRiddleProofRunStatus: () => readRiddleProofRunStatus,
   recordValue: () => recordValue,
   redactForProofDiagnostics: () => redactForProofDiagnostics,
@@ -3520,6 +3522,9 @@ __export(index_exports, {
   resolveRiddleProofProfileRouteUrl: () => resolveRiddleProofProfileRouteUrl,
   resolveRiddleProofProfileTargetUrl: () => resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec: () => resolveRiddleProofProfileTimeoutSec,
+  riddleProofPublicStateAllowsClaim: () => riddleProofPublicStateAllowsClaim,
+  riddleProofPublicStateAllowsMergeRecommendation: () => riddleProofPublicStateAllowsMergeRecommendation,
+  riddleProofPublicStateMergeRecommendation: () => riddleProofPublicStateMergeRecommendation,
   riddleRequestJson: () => riddleRequestJson,
   runCodexExecAgentDoctor: () => runCodexExecAgentDoctor,
   runLocalAgentDoctor: () => runCodexExecAgentDoctor,
@@ -3541,6 +3546,167 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/public-state.ts
+function riddleProofPublicStateAllowsClaim(summary, claim) {
+  return !summary?.prohibited_claims.includes(claim);
+}
+function riddleProofPublicStateAllowsMergeRecommendation(summary) {
+  return riddleProofPublicStateAllowsClaim(summary, "merge_ready") && riddleProofPublicStateAllowsClaim(summary, "sync_allowed");
+}
+function riddleProofPublicStateMergeRecommendation(summary, recommendation) {
+  return recommendation && riddleProofPublicStateAllowsMergeRecommendation(summary) ? recommendation : void 0;
+}
+function asRecord(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function stringValue(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function booleanValue(value) {
+  return typeof value === "boolean" ? value : void 0;
+}
+function numberValue(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function firstStringValue(...values) {
+  for (const value of values) {
+    const text = stringValue(value);
+    if (text) return text;
+  }
+  return void 0;
+}
+function firstBooleanValue(...values) {
+  for (const value of values) {
+    const bool = booleanValue(value);
+    if (typeof bool === "boolean") return bool;
+  }
+  return void 0;
+}
+function firstRecordValue(...values) {
+  for (const value of values) {
+    const record = asRecord(value);
+    if (Object.keys(record).length) return record;
+  }
+  return void 0;
+}
+function countValue(value) {
+  const number = numberValue(value);
+  return typeof number === "number" && number > 0 ? Math.trunc(number) : 0;
+}
+function checkpointSummaryFrom(...values) {
+  const record = firstRecordValue(...values);
+  if (!record) return void 0;
+  const accepted = countValue(record.response_count);
+  const rejected = countValue(record.rejected_response_count);
+  const ignored = countValue(record.ignored_response_count);
+  const duplicate = countValue(record.duplicate_response_count);
+  const summary = {
+    pending: booleanValue(record.pending),
+    accepted_response_count: accepted,
+    rejected_response_count: rejected,
+    ignored_response_count: ignored,
+    duplicate_response_count: duplicate,
+    latest_decision: stringValue(record.latest_decision),
+    audit_disclosure_required: rejected > 0 || ignored > 0 || duplicate > 0
+  };
+  return Object.values(summary).some((value) => typeof value !== "undefined") ? summary : void 0;
+}
+function uniqueStrings(values) {
+  return [...new Set(values.filter(Boolean))];
+}
+function summarizeRiddleProofPublicState(input) {
+  const record = asRecord(input);
+  const runCard = asRecord(record.run_card);
+  const stopCondition = asRecord(runCard.stop_condition);
+  const raw = asRecord(record.raw);
+  const request = asRecord(record.request);
+  const requestMetadata = asRecord(record.request_metadata);
+  const prState = asRecord(record.pr_state);
+  const handoff = asRecord(record.pr_handoff_policy);
+  const handoffState = stringValue(handoff.state);
+  const status = firstStringValue(record.status, stopCondition.status);
+  const ok = booleanValue(record.ok) ?? null;
+  const shipMode = firstStringValue(request.ship_mode, requestMetadata.ship_mode, record.ship_mode, handoff.ship_mode);
+  const explicitShippingDisabled = firstBooleanValue(
+    record.shipping_disabled,
+    stopCondition.shipping_disabled,
+    raw.shipping_disabled,
+    handoff.shipping_disabled
+  );
+  const shippingDisabled = explicitShippingDisabled === true || shipMode === "none" || handoffState === "proof_complete_ship_disabled";
+  const explicitShipAuthorized = firstBooleanValue(
+    record.ship_authorized,
+    stopCondition.ship_authorized,
+    raw.ship_authorized
+  );
+  const authorizationEvidence = Boolean(
+    status === "shipped" || record.marked_ready === true || stringValue(prState.status) === "merged" || record.merge_commit || record.merged_at
+  );
+  const shipAuthorizedBeforeHold = explicitShipAuthorized ?? authorizationEvidence;
+  const explicitShipHeld = firstBooleanValue(record.ship_held, stopCondition.ship_held, raw.ship_held);
+  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !shipAuthorizedBeforeHold;
+  const shipHeld = explicitShipHeld === true || inferredHeld;
+  const shipAuthorized = shipHeld ? false : shipAuthorizedBeforeHold === true;
+  const proofComplete = Boolean(
+    status === "ready_to_ship" || status === "shipped" || status === "completed" || status === "passed" || ok === true || handoff.proof_complete === true
+  );
+  const checkpointSummary = checkpointSummaryFrom(
+    record.checkpoint_summary,
+    stopCondition.checkpoint_summary,
+    asRecord(record.details).checkpoint_summary,
+    asRecord(raw.details).checkpoint_summary
+  );
+  const blockedOrWaiting = status === "blocked" || status === "failed" || status === "awaiting_checkpoint" || handoffState === "proof_blocked" || handoffState === "proof_review_required" || handoffState === "proof_failed" || handoffState === "proof_checkpoint_required";
+  const proofPassed = Boolean(proofComplete && !blockedOrWaiting);
+  const explicitMergeReady = firstBooleanValue(record.merge_ready, stopCondition.merge_ready, raw.merge_ready, handoff.merge_ready);
+  const normalPrAllowed = firstBooleanValue(record.normal_pr_allowed, raw.normal_pr_allowed, handoff.normal_pr_allowed);
+  const baseHandoffAllowed = !blockedOrWaiting && !shipHeld && !shippingDisabled;
+  const mergeReady = baseHandoffAllowed && normalPrAllowed !== false && (explicitMergeReady ?? shipAuthorized);
+  const syncAllowed = mergeReady;
+  let policyState = "unknown";
+  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") policyState = "awaiting_checkpoint";
+  else if (status === "failed" || handoffState === "proof_failed") policyState = "proof_failed";
+  else if (status === "blocked" || handoffState === "proof_blocked" || handoffState === "proof_review_required") policyState = "proof_blocked";
+  else if (handoffState === "proof_complete_ship_disabled") policyState = "proof_complete_ship_disabled";
+  else if (proofComplete && shipHeld && !shipAuthorized) policyState = "proof_passed_ship_held";
+  else if (proofComplete && shippingDisabled && !shipAuthorized) policyState = "proof_complete_ship_disabled";
+  else if (shipAuthorized) policyState = "ship_authorized";
+  else if (proofPassed) policyState = "proof_passed";
+  else if (status === "running") policyState = "proof_in_progress";
+  const requiredDisclosures = [];
+  if (shipHeld) requiredDisclosures.push("ship_held");
+  if (shippingDisabled) requiredDisclosures.push("shipping_disabled");
+  if (checkpointSummary?.audit_disclosure_required) requiredDisclosures.push("checkpoint_audit_counters");
+  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") requiredDisclosures.push("checkpoint_required");
+  const prohibitedClaims = [];
+  if (!shipAuthorized || shipHeld || shippingDisabled) prohibitedClaims.push("ship_authorized", "shipped");
+  if (!mergeReady) prohibitedClaims.push("merge_ready");
+  if (!syncAllowed) prohibitedClaims.push("sync_allowed");
+  if (blockedOrWaiting) {
+    prohibitedClaims.push("proof_passed", "ready_to_ship");
+  }
+  if (checkpointSummary?.audit_disclosure_required) {
+    prohibitedClaims.push("all_checkpoint_responses_accepted");
+  }
+  const resultLabel2 = policyState === "awaiting_checkpoint" ? "checkpoint required" : policyState === "proof_blocked" ? "blocked" : policyState === "proof_failed" ? "failed" : policyState === "proof_complete_ship_disabled" ? "proof complete; shipping disabled" : policyState === "proof_passed_ship_held" ? "proof passed; ship held" : policyState === "ship_authorized" ? status === "shipped" ? "shipped" : "ship authorized" : policyState === "proof_passed" ? "passed" : policyState === "proof_in_progress" ? "running" : status || "recorded";
+  return {
+    status,
+    ok,
+    policy_state: policyState,
+    result_label: resultLabel2,
+    proof_complete: proofComplete,
+    proof_passed: proofPassed,
+    ship_held: shipHeld,
+    shipping_disabled: shippingDisabled,
+    ship_authorized: shipAuthorized,
+    merge_ready: mergeReady,
+    sync_allowed: syncAllowed,
+    checkpoint_summary: checkpointSummary,
+    required_disclosures: uniqueStrings(requiredDisclosures),
+    prohibited_claims: uniqueStrings(prohibitedClaims)
+  };
+}
+
 // src/result.ts
 function isTerminalStatus(status) {
   return status === "blocked" || status === "failed" || status === "ready_to_ship" || status === "shipped" || status === "completed";
@@ -3715,6 +3881,37 @@ function applyTerminalMetadata(state, metadata) {
   if (typeof metadata.finalized === "boolean") state.finalized = metadata.finalized;
   return state;
 }
+function publicStateForRunState(input) {
+  const state = input.state;
+  const status = input.status || state.status;
+  const raw = recordValue(input.raw) || {};
+  const extendedState = state;
+  const terminalOk = isTerminalStatus(status) ? state.ok : void 0;
+  return summarizeRiddleProofPublicState(compactRecord({
+    status,
+    ok: terminalOk,
+    request: state.request,
+    pr_state: state.pr_state,
+    marked_ready: state.marked_ready,
+    ship_held: state.ship_held,
+    shipping_disabled: state.shipping_disabled,
+    ship_authorized: state.ship_authorized,
+    ship_mode: state.request?.ship_mode,
+    merge_commit: state.merge_commit,
+    merged_at: state.merged_at,
+    checkpoint_summary: state.checkpoint_summary,
+    pr_handoff_policy: recordValue(extendedState.pr_handoff_policy),
+    merge_ready: extendedState.merge_ready,
+    normal_pr_allowed: extendedState.normal_pr_allowed,
+    raw: Object.keys(raw).length ? raw : void 0
+  }));
+}
+function publicMergeRecommendationForRunState(input) {
+  return riddleProofPublicStateMergeRecommendation(
+    publicStateForRunState(input),
+    input.state.merge_recommendation
+  );
+}
 function shipControlStateFor(input) {
   const state = input.state;
   const status = input.status || state.status;
@@ -3763,6 +3960,11 @@ function createRunResult(input) {
   state.ok = ok;
   if (isProtectedFinalStatus(status)) state.finalized = true;
   applyShipControlState(state, { status, raw: input.raw });
+  const publicState = publicStateForRunState({ state, status, raw: input.raw });
+  const publicMergeRecommendation = riddleProofPublicStateMergeRecommendation(
+    publicState,
+    state.merge_recommendation
+  );
   return compactRecord({
     ok,
     status,
@@ -3780,9 +3982,12 @@ function createRunResult(input) {
     pr_state: state.pr_state,
     marked_ready: state.marked_ready,
     left_draft: state.left_draft,
-    ship_held: state.ship_held,
-    shipping_disabled: state.shipping_disabled,
-    ship_authorized: state.ship_authorized,
+    result_label: publicState.result_label,
+    ship_held: publicState.ship_held,
+    shipping_disabled: publicState.shipping_disabled,
+    ship_authorized: publicState.ship_authorized,
+    merge_ready: publicState.merge_ready,
+    sync_allowed: publicState.sync_allowed,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -3796,7 +4001,8 @@ function createRunResult(input) {
     cleanup_report: state.cleanup_report,
     notification: state.notification,
     proof_decision: state.proof_decision,
-    merge_recommendation: state.merge_recommendation,
+    merge_recommendation: publicMergeRecommendation,
+    public_state: publicState,
     finalized: state.finalized,
     blocker: state.blocker,
     checkpoint_packet: state.checkpoint_packet,
@@ -4766,7 +4972,8 @@ function createRiddleProofRunCard(state, input = {}) {
   const visualDelta = visualDeltaFrom({ fullRiddleState: fullState, runState: state });
   const artifacts = artifactsFrom({ fullRiddleState: fullState, runState: state });
   const viewportMatrix = viewportMatrixFrom({ fullRiddleState: fullState, runState: state });
-  const shipControl = shipControlStateFor({ state });
+  const publicState = publicStateForRunState({ state, status: state.status });
+  const publicMergeRecommendation = publicMergeRecommendationForRunState({ state, status: state.status });
   return {
     version: RIDDLE_PROOF_RUN_CARD_VERSION,
     run_id: state.run_id || "unknown",
@@ -4820,14 +5027,18 @@ function createRiddleProofRunCard(state, input = {}) {
     stop_condition: compactRecord({
       status: state.status,
       terminal: isTerminalStatus(state.status),
-      ship_held: shipControl.ship_held,
-      shipping_disabled: shipControl.shipping_disabled,
-      ship_authorized: shipControl.ship_authorized,
+      result_label: publicState.result_label,
+      ship_held: publicState.ship_held,
+      shipping_disabled: publicState.shipping_disabled,
+      ship_authorized: publicState.ship_authorized,
+      merge_ready: publicState.merge_ready,
+      sync_allowed: publicState.sync_allowed,
       blocker_code: state.blocker?.code || null,
       blocker_message: state.blocker?.message || null,
       proof_decision: state.proof_decision,
-      merge_recommendation: state.merge_recommendation,
-      monitor_should_continue: !isTerminalStatus(state.status)
+      merge_recommendation: publicMergeRecommendation,
+      monitor_should_continue: !isTerminalStatus(state.status),
+      public_state: publicState
     }),
     updated_at: state.updated_at
   };
@@ -5013,8 +5224,8 @@ function appendStageHeartbeat(state, input) {
 function createRunStatusSnapshot(state, at = timestamp2()) {
   const latestEvent = state.events[state.events.length - 1];
   const runId = state.run_id || "unknown";
-  const shipControl = shipControlStateFor({ state });
-  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === shipControl.ship_held && state.run_card.stop_condition?.shipping_disabled === shipControl.shipping_disabled && state.run_card.stop_condition?.ship_authorized === shipControl.ship_authorized;
+  const publicState = publicStateForRunState({ state, status: state.status });
+  const existingRunCardCurrent = state.run_card?.status === state.status && state.run_card.stop_condition?.status === state.status && state.run_card.stop_condition?.terminal === isTerminalStatus(state.status) && state.run_card.stop_condition?.monitor_should_continue === !isTerminalStatus(state.status) && state.run_card.stop_condition?.ship_held === publicState.ship_held && state.run_card.stop_condition?.shipping_disabled === publicState.shipping_disabled && state.run_card.stop_condition?.ship_authorized === publicState.ship_authorized && state.run_card.stop_condition?.merge_ready === publicState.merge_ready && state.run_card.stop_condition?.sync_allowed === publicState.sync_allowed && state.run_card.stop_condition?.result_label === publicState.result_label;
   const runCard = existingRunCardCurrent ? state.run_card : createRiddleProofRunCard(state, { at });
   return compactRecord({
     run_id: runId,
@@ -5028,9 +5239,13 @@ function createRunStatusSnapshot(state, at = timestamp2()) {
     pr_url: state.pr_url ?? null,
     pr_branch: state.pr_branch ?? null,
     pr_state: state.pr_state,
-    ship_held: shipControl.ship_held,
-    shipping_disabled: shipControl.shipping_disabled,
-    ship_authorized: shipControl.ship_authorized,
+    result_label: publicState.result_label,
+    ship_held: publicState.ship_held,
+    shipping_disabled: publicState.shipping_disabled,
+    ship_authorized: publicState.ship_authorized,
+    merge_ready: publicState.merge_ready,
+    sync_allowed: publicState.sync_allowed,
+    public_state: publicState,
     ci_status: state.ci_status,
     ship_commit: state.ship_commit,
     ship_remote_head: state.ship_remote_head,
@@ -5078,158 +5293,6 @@ function applyPrLifecycleState(state, input, at = timestamp2()) {
   return state;
 }
 
-// src/public-state.ts
-function asRecord(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function stringValue(value) {
-  return typeof value === "string" && value.trim() ? value.trim() : void 0;
-}
-function booleanValue(value) {
-  return typeof value === "boolean" ? value : void 0;
-}
-function numberValue(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function firstStringValue(...values) {
-  for (const value of values) {
-    const text = stringValue(value);
-    if (text) return text;
-  }
-  return void 0;
-}
-function firstBooleanValue(...values) {
-  for (const value of values) {
-    const bool = booleanValue(value);
-    if (typeof bool === "boolean") return bool;
-  }
-  return void 0;
-}
-function firstRecordValue(...values) {
-  for (const value of values) {
-    const record = asRecord(value);
-    if (Object.keys(record).length) return record;
-  }
-  return void 0;
-}
-function countValue(value) {
-  const number = numberValue(value);
-  return typeof number === "number" && number > 0 ? Math.trunc(number) : 0;
-}
-function checkpointSummaryFrom(...values) {
-  const record = firstRecordValue(...values);
-  if (!record) return void 0;
-  const accepted = countValue(record.response_count);
-  const rejected = countValue(record.rejected_response_count);
-  const ignored = countValue(record.ignored_response_count);
-  const duplicate = countValue(record.duplicate_response_count);
-  const summary = {
-    pending: booleanValue(record.pending),
-    accepted_response_count: accepted,
-    rejected_response_count: rejected,
-    ignored_response_count: ignored,
-    duplicate_response_count: duplicate,
-    latest_decision: stringValue(record.latest_decision),
-    audit_disclosure_required: rejected > 0 || ignored > 0 || duplicate > 0
-  };
-  return Object.values(summary).some((value) => typeof value !== "undefined") ? summary : void 0;
-}
-function uniqueStrings(values) {
-  return [...new Set(values.filter(Boolean))];
-}
-function summarizeRiddleProofPublicState(input) {
-  const record = asRecord(input);
-  const runCard = asRecord(record.run_card);
-  const stopCondition = asRecord(runCard.stop_condition);
-  const raw = asRecord(record.raw);
-  const request = asRecord(record.request);
-  const requestMetadata = asRecord(record.request_metadata);
-  const prState = asRecord(record.pr_state);
-  const handoff = asRecord(record.pr_handoff_policy);
-  const handoffState = stringValue(handoff.state);
-  const status = firstStringValue(record.status, stopCondition.status);
-  const ok = booleanValue(record.ok) ?? null;
-  const shipMode = firstStringValue(request.ship_mode, requestMetadata.ship_mode, record.ship_mode, handoff.ship_mode);
-  const explicitShippingDisabled = firstBooleanValue(
-    record.shipping_disabled,
-    stopCondition.shipping_disabled,
-    raw.shipping_disabled,
-    handoff.shipping_disabled
-  );
-  const shippingDisabled = explicitShippingDisabled === true || shipMode === "none" || handoffState === "proof_complete_ship_disabled";
-  const explicitShipAuthorized = firstBooleanValue(
-    record.ship_authorized,
-    stopCondition.ship_authorized,
-    raw.ship_authorized
-  );
-  const authorizationEvidence = Boolean(
-    status === "shipped" || record.marked_ready === true || stringValue(prState.status) === "merged" || record.merge_commit || record.merged_at
-  );
-  const shipAuthorizedBeforeHold = explicitShipAuthorized ?? authorizationEvidence;
-  const explicitShipHeld = firstBooleanValue(record.ship_held, stopCondition.ship_held, raw.ship_held);
-  const inferredHeld = status === "ready_to_ship" && shippingDisabled && !shipAuthorizedBeforeHold;
-  const shipHeld = explicitShipHeld === true || inferredHeld;
-  const shipAuthorized = shipHeld ? false : shipAuthorizedBeforeHold === true;
-  const proofComplete = Boolean(
-    status === "ready_to_ship" || status === "shipped" || status === "completed" || status === "passed" || ok === true || handoff.proof_complete === true
-  );
-  const checkpointSummary = checkpointSummaryFrom(
-    record.checkpoint_summary,
-    stopCondition.checkpoint_summary,
-    asRecord(record.details).checkpoint_summary,
-    asRecord(raw.details).checkpoint_summary
-  );
-  const blockedOrWaiting = status === "blocked" || status === "failed" || status === "awaiting_checkpoint" || handoffState === "proof_blocked" || handoffState === "proof_review_required" || handoffState === "proof_failed" || handoffState === "proof_checkpoint_required";
-  const proofPassed = Boolean(proofComplete && !blockedOrWaiting);
-  const explicitMergeReady = firstBooleanValue(record.merge_ready, stopCondition.merge_ready, raw.merge_ready, handoff.merge_ready);
-  const normalPrAllowed = firstBooleanValue(record.normal_pr_allowed, raw.normal_pr_allowed, handoff.normal_pr_allowed);
-  const baseHandoffAllowed = !blockedOrWaiting && !shipHeld && !shippingDisabled;
-  const mergeReady = baseHandoffAllowed && normalPrAllowed !== false && (explicitMergeReady ?? shipAuthorized);
-  const syncAllowed = mergeReady;
-  let policyState = "unknown";
-  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") policyState = "awaiting_checkpoint";
-  else if (status === "failed" || handoffState === "proof_failed") policyState = "proof_failed";
-  else if (status === "blocked" || handoffState === "proof_blocked" || handoffState === "proof_review_required") policyState = "proof_blocked";
-  else if (handoffState === "proof_complete_ship_disabled") policyState = "proof_complete_ship_disabled";
-  else if (proofComplete && shipHeld && !shipAuthorized) policyState = "proof_passed_ship_held";
-  else if (proofComplete && shippingDisabled && !shipAuthorized) policyState = "proof_complete_ship_disabled";
-  else if (shipAuthorized) policyState = "ship_authorized";
-  else if (proofPassed) policyState = "proof_passed";
-  else if (status === "running") policyState = "proof_in_progress";
-  const requiredDisclosures = [];
-  if (shipHeld) requiredDisclosures.push("ship_held");
-  if (shippingDisabled) requiredDisclosures.push("shipping_disabled");
-  if (checkpointSummary?.audit_disclosure_required) requiredDisclosures.push("checkpoint_audit_counters");
-  if (status === "awaiting_checkpoint" || handoffState === "proof_checkpoint_required") requiredDisclosures.push("checkpoint_required");
-  const prohibitedClaims = [];
-  if (!shipAuthorized || shipHeld || shippingDisabled) prohibitedClaims.push("ship_authorized", "shipped");
-  if (!mergeReady) prohibitedClaims.push("merge_ready");
-  if (!syncAllowed) prohibitedClaims.push("sync_allowed");
-  if (blockedOrWaiting) {
-    prohibitedClaims.push("proof_passed", "ready_to_ship");
-  }
-  if (checkpointSummary?.audit_disclosure_required) {
-    prohibitedClaims.push("all_checkpoint_responses_accepted");
-  }
-  const resultLabel2 = policyState === "awaiting_checkpoint" ? "checkpoint required" : policyState === "proof_blocked" ? "blocked" : policyState === "proof_failed" ? "failed" : policyState === "proof_complete_ship_disabled" ? "proof complete; shipping disabled" : policyState === "proof_passed_ship_held" ? "proof passed; ship held" : policyState === "ship_authorized" ? status === "shipped" ? "shipped" : "ship authorized" : policyState === "proof_passed" ? "passed" : policyState === "proof_in_progress" ? "running" : status || "recorded";
-  return {
-    status,
-    ok,
-    policy_state: policyState,
-    result_label: resultLabel2,
-    proof_complete: proofComplete,
-    proof_passed: proofPassed,
-    ship_held: shipHeld,
-    shipping_disabled: shippingDisabled,
-    ship_authorized: shipAuthorized,
-    merge_ready: mergeReady,
-    sync_allowed: syncAllowed,
-    checkpoint_summary: checkpointSummary,
-    required_disclosures: uniqueStrings(requiredDisclosures),
-    prohibited_claims: uniqueStrings(prohibitedClaims)
-  };
-}
-
 // src/runner.ts
 init_proof_run_core();
 function errorDetails(error) {
@@ -6068,6 +6131,13 @@ function proofAssessmentHardBlockers(state, payload) {
   }
   return blockers;
 }
+function proofGateStateForCheckpointResponse(state) {
+  const fullState = readJson(state.request.engine_state_path) || {};
+  return compactRecord({
+    ...fullState,
+    verification_mode: nonEmptyString(fullState.verification_mode) || state.request.verification_mode
+  });
+}
 function proofAssessmentContinuation(result, payload) {
   const proof_assessment_json = jsonParam(payload);
   return { ...baseContinuation(result), proof_assessment_json };
@@ -6614,6 +6684,45 @@ function checkpointResponseContinuation(state, value) {
           blocker: sourceBlocker
         });
       }
+      const proofGateState = proofGateStateForCheckpointResponse(state);
+      const hardBlockers = proofAssessmentHardBlockers(proofGateState, assessment);
+      if (proofAssessmentRequestsShip(assessment) && hardBlockers.length) {
+        return checkpointResponseRejectedBlocker(state, {
+          packet,
+          response,
+          blocker: {
+            code: "checkpoint_response_proof_hard_blocker",
+            checkpoint: packet.checkpoint,
+            message: "Riddle Proof cannot mark ready_to_ship while the proof bundle contains a hard blocker: " + hardBlockers[0],
+            details: compactRecord({
+              stage: packet.stage,
+              hard_blockers: hardBlockers,
+              proofAssessment: assessment,
+              response
+            })
+          }
+        });
+      }
+      const visualBlocker = proofAssessmentVisualBlocker(proofGateState, assessment);
+      if (visualBlocker) {
+        const recoveryAssessment = visualDeltaEvidenceRecoveryAssessment(proofGateState, assessment, visualBlocker);
+        appendCheckpointResponse(state, response, { summary: visualBlocker });
+        recordEvent(state, {
+          kind: "checkpoint.response.evidence_recovery_required",
+          checkpoint: packet.checkpoint,
+          stage: "verify",
+          summary: visualBlocker,
+          details: compactRecord({
+            evidence_collection_incomplete: true,
+            recovery_stage: "verify",
+            evidence_issue_code: recoveryAssessment.evidence_issue_code || null,
+            visual_delta: recoveryAssessment.visual_delta || null,
+            proof_assessment: recoveryAssessment,
+            checkpoint_response_source: response.source || null
+          })
+        });
+        return { next: { ...base, proof_assessment_json: jsonParam(recoveryAssessment) } };
+      }
       appendCheckpointResponse(state, response);
       if (state.request.ship_mode !== "ship" && proofAssessmentRequestsShip(assessment)) {
         const result = {
@@ -20223,6 +20332,10 @@ function summarizeRiddleProofPrComment(input) {
     status: firstStringValue2(result.status, stopCondition.status),
     checkpoint_summary: checkpointSummary || result.checkpoint_summary
   });
+  const mergeRecommendation = riddleProofPublicStateMergeRecommendation(
+    publicState,
+    firstStringValue2(result.merge_recommendation, stopCondition.merge_recommendation, resultRaw.merge_recommendation)
+  );
   return {
     ok,
     status: stringValue7(proofResult.status),
@@ -20240,7 +20353,7 @@ function summarizeRiddleProofPrComment(input) {
     merge_ready: publicState.merge_ready,
     sync_allowed: publicState.sync_allowed,
     proof_decision: firstStringValue2(result.proof_decision, stopCondition.proof_decision, resultRaw.proof_decision),
-    merge_recommendation: firstStringValue2(result.merge_recommendation, stopCondition.merge_recommendation, resultRaw.merge_recommendation),
+    merge_recommendation: mergeRecommendation,
     checkpoint_summary: checkpointSummary,
     public_state: publicState,
     passed_checks: nestedChecks.passed,
@@ -20293,8 +20406,7 @@ function hasHandoffControl(summary) {
 }
 function shouldRenderMergeRecommendation(summary) {
   if (!summary.merge_recommendation) return false;
-  const prohibited = summary.public_state?.prohibited_claims || [];
-  return !prohibited.includes("merge_ready") && !prohibited.includes("sync_allowed");
+  return riddleProofPublicStateAllowsMergeRecommendation(summary.public_state);
 }
 function checkpointSummaryLine(summary) {
   const accepted = summary.response_count ?? 0;
@@ -20482,6 +20594,8 @@ function buildRiddleProofPrCommentMarkdown(input) {
   preflightRiddleProofProfileHttpStatusChecks,
   profileStatusExitCode,
   proofContractFromAuthorCheckpointResponse,
+  publicMergeRecommendationForRunState,
+  publicStateForRunState,
   readRiddleProofRunStatus,
   recordValue,
   redactForProofDiagnostics,
@@ -20491,6 +20605,9 @@ function buildRiddleProofPrCommentMarkdown(input) {
   resolveRiddleProofProfileRouteUrl,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec,
+  riddleProofPublicStateAllowsClaim,
+  riddleProofPublicStateAllowsMergeRecommendation,
+  riddleProofPublicStateMergeRecommendation,
   riddleRequestJson,
   runCodexExecAgentDoctor,
   runLocalAgentDoctor,

package/dist/index.d.cts

@@ -1,9 +1,9 @@
 export { EvidenceArtifact, EvidenceReference, ImplementationAdapter, ImplementationAdapterInput, ImplementationAdapterResult, IntegrationContext, JsonObject, JsonPrimitive, JsonValue, JudgeAdapter, NotificationAdapter, PreflightAdapter, PreflightAdapterInput, PreflightAdapterResult, ProofAdapter, ProofAdapterInput, ProofAdapterResult, RiddleProofArtifactRole, RiddleProofAssessment, RiddleProofBlocker, RiddleProofCheckpointArtifact, RiddleProofCheckpointPacket, RiddleProofCheckpointResponse, RiddleProofCheckpointRole, RiddleProofCheckpointRoutingHint, RiddleProofCheckpointSummary, RiddleProofCheckpointVisibility, RiddleProofDecision, RiddleProofEvent, RiddleProofEvidenceBundle, RiddleProofPrLifecycleState, RiddleProofPrLifecycleStatus, RiddleProofProofContract, RiddleProofRunCard, RiddleProofRunParams, RiddleProofRunResult, RiddleProofRunState, RiddleProofRunStatusSnapshot, RiddleProofStage, RiddleProofStatePaths, RiddleProofStatus, RiddleProofTerminalMetadata, RiddleProofVerificationMode, RiddleProofViewportCapture, RiddleProofViewportMatrixStatus, RiddleProofVisualSession, RiddleProofVisualSessionFingerprintBasis, SetupAdapter, SetupAdapterInput, SetupAdapterResult, ShipAdapter } from './types.cjs';
-export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from './result.cjs';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, publicMergeRecommendationForRunState, publicStateForRunState, recordValue, shipControlStateFor } from './result.cjs';
 export { CreateRunStateInput, RIDDLE_PROOF_RUN_STATE_VERSION, RunEventInput, appendRunEvent, appendStageHeartbeat, applyPrLifecycleState, createRunState, createRunStatusSnapshot, normalizeIntegrationContext, normalizePrLifecycleState, normalizeRunParams, setRunStatus } from './state.cjs';
 export { RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION, RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION, authorPacketPayloadFromCheckpointResponse, buildAuthorCheckpointPacket, buildCheckpointPacketForEngineResult, buildProofAssessmentCheckpointPacket, buildStageCheckpointPacket, checkpointPacketIdentity, checkpointResponseIdentity, checkpointSummaryFromState, createCheckpointResponseTemplate, isDuplicateCheckpointResponse, normalizeCheckpointResponse, proofContractFromAuthorCheckpointResponse, statePathsForRunState } from './checkpoint.cjs';
 export { RIDDLE_PROOF_RUN_CARD_VERSION, createRiddleProofRunCard } from './run-card.cjs';
-export { RiddleProofPublicCheckpointSummary, RiddleProofPublicPolicyState, RiddleProofPublicStateSummary, summarizeRiddleProofPublicState } from './public-state.cjs';
+export { RiddleProofPublicCheckpointSummary, RiddleProofPublicPolicyState, RiddleProofPublicStateSummary, riddleProofPublicStateAllowsClaim, riddleProofPublicStateAllowsMergeRecommendation, riddleProofPublicStateMergeRecommendation, summarizeRiddleProofPublicState } from './public-state.cjs';
 export { R as RiddleProofRunnerAdapters, a as RunRiddleProofInput, r as runRiddleProof } from './runner-4LJ5z0D-.cjs';
 export { R as RiddleProofAgentAdapter, a as RiddleProofAgentPayload, b as RiddleProofCheckpointMode, c as RiddleProofEngine, d as RiddleProofEngineHarnessConfig, e as RiddleProofEngineHarnessContext, f as RiddleProofEngineResult, g as RiddleProofShipMode, h as RiddleProofWorkflowParams, i as RunRiddleProofEngineHarnessInput, j as createDisabledRiddleProofAgentAdapter, r as readRiddleProofRunStatus, k as runRiddleProofEngineHarness } from './engine-harness-LBfqbFSe.cjs';
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, CodexExecAgentConfig as LocalAgentConfig, CodexJsonRequest as LocalAgentJsonRequest, CodexJsonResult as LocalAgentJsonResult, CodexJsonRunner as LocalAgentJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, createCodexExecAgentAdapter as createLocalAgentAdapter, createCodexExecJsonRunner as createLocalAgentJsonRunner, runCodexExecAgentDoctor, runCodexExecAgentDoctor as runLocalAgentDoctor } from './codex-exec-agent.cjs';

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 export { EvidenceArtifact, EvidenceReference, ImplementationAdapter, ImplementationAdapterInput, ImplementationAdapterResult, IntegrationContext, JsonObject, JsonPrimitive, JsonValue, JudgeAdapter, NotificationAdapter, PreflightAdapter, PreflightAdapterInput, PreflightAdapterResult, ProofAdapter, ProofAdapterInput, ProofAdapterResult, RiddleProofArtifactRole, RiddleProofAssessment, RiddleProofBlocker, RiddleProofCheckpointArtifact, RiddleProofCheckpointPacket, RiddleProofCheckpointResponse, RiddleProofCheckpointRole, RiddleProofCheckpointRoutingHint, RiddleProofCheckpointSummary, RiddleProofCheckpointVisibility, RiddleProofDecision, RiddleProofEvent, RiddleProofEvidenceBundle, RiddleProofPrLifecycleState, RiddleProofPrLifecycleStatus, RiddleProofProofContract, RiddleProofRunCard, RiddleProofRunParams, RiddleProofRunResult, RiddleProofRunState, RiddleProofRunStatusSnapshot, RiddleProofStage, RiddleProofStatePaths, RiddleProofStatus, RiddleProofTerminalMetadata, RiddleProofVerificationMode, RiddleProofViewportCapture, RiddleProofViewportMatrixStatus, RiddleProofVisualSession, RiddleProofVisualSessionFingerprintBasis, SetupAdapter, SetupAdapterInput, SetupAdapterResult, ShipAdapter } from './types.js';
-export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, recordValue, shipControlStateFor } from './result.js';
+export { RiddleProofShipControlState, TerminalMetadataInput, applyShipControlState, applyTerminalMetadata, compactRecord, createRunResult, isProtectedFinalStatus, isSuccessfulStatus, isTerminalStatus, nonEmptyString, normalizeTerminalMetadata, publicMergeRecommendationForRunState, publicStateForRunState, recordValue, shipControlStateFor } from './result.js';
 export { CreateRunStateInput, RIDDLE_PROOF_RUN_STATE_VERSION, RunEventInput, appendRunEvent, appendStageHeartbeat, applyPrLifecycleState, createRunState, createRunStatusSnapshot, normalizeIntegrationContext, normalizePrLifecycleState, normalizeRunParams, setRunStatus } from './state.js';
 export { RIDDLE_PROOF_CHECKPOINT_PACKET_VERSION, RIDDLE_PROOF_CHECKPOINT_RESPONSE_VERSION, authorPacketPayloadFromCheckpointResponse, buildAuthorCheckpointPacket, buildCheckpointPacketForEngineResult, buildProofAssessmentCheckpointPacket, buildStageCheckpointPacket, checkpointPacketIdentity, checkpointResponseIdentity, checkpointSummaryFromState, createCheckpointResponseTemplate, isDuplicateCheckpointResponse, normalizeCheckpointResponse, proofContractFromAuthorCheckpointResponse, statePathsForRunState } from './checkpoint.js';
 export { RIDDLE_PROOF_RUN_CARD_VERSION, createRiddleProofRunCard } from './run-card.js';
-export { RiddleProofPublicCheckpointSummary, RiddleProofPublicPolicyState, RiddleProofPublicStateSummary, summarizeRiddleProofPublicState } from './public-state.js';
+export { RiddleProofPublicCheckpointSummary, RiddleProofPublicPolicyState, RiddleProofPublicStateSummary, riddleProofPublicStateAllowsClaim, riddleProofPublicStateAllowsMergeRecommendation, riddleProofPublicStateMergeRecommendation, summarizeRiddleProofPublicState } from './public-state.js';
 export { R as RiddleProofRunnerAdapters, a as RunRiddleProofInput, r as runRiddleProof } from './runner-BdQpOkZD.js';
 export { R as RiddleProofAgentAdapter, a as RiddleProofAgentPayload, b as RiddleProofCheckpointMode, c as RiddleProofEngine, d as RiddleProofEngineHarnessConfig, e as RiddleProofEngineHarnessContext, f as RiddleProofEngineResult, g as RiddleProofShipMode, h as RiddleProofWorkflowParams, i as RunRiddleProofEngineHarnessInput, j as createDisabledRiddleProofAgentAdapter, r as readRiddleProofRunStatus, k as runRiddleProofEngineHarness } from './engine-harness-CMACHP6A.js';
 export { CodexExecAgentConfig, CodexJsonRequest, CodexJsonResult, CodexJsonRunner, CodexExecAgentConfig as LocalAgentConfig, CodexJsonRequest as LocalAgentJsonRequest, CodexJsonResult as LocalAgentJsonResult, CodexJsonRunner as LocalAgentJsonRunner, createCodexExecAgentAdapter, createCodexExecJsonRunner, createCodexExecAgentAdapter as createLocalAgentAdapter, createCodexExecJsonRunner as createLocalAgentJsonRunner, runCodexExecAgentDoctor, runCodexExecAgentDoctor as runLocalAgentDoctor } from './codex-exec-agent.js';