新增市場情報 review decision writer run package

tests/test_market_intel_skeleton.py

@@ -848,6 +848,10 @@ def test_market_intel_preview_template_uses_safe_fetch_false_endpoint():
         "market_intel_review.market_intel_manual_sample_candidate_queue_review_decision_writer_operator_drill"
         in template
     )
+    assert (
+        "market_intel_review.market_intel_manual_sample_candidate_queue_review_decision_writer_run_package"
+        in template
+    )
     assert (
         "data-market-intel-sample-candidate-queue-review-decision-writer"
         in template
@@ -864,6 +868,10 @@ def test_market_intel_preview_template_uses_safe_fetch_false_endpoint():
         "data-market-intel-sample-candidate-queue-review-decision-operator-drill"
         in template
     )
+    assert (
+        "data-market-intel-sample-candidate-queue-review-decision-run-package"
+        in template
+    )
     assert "X-CSRFToken" in template
     assert "market_intel.market_intel_scheduler_plan" in template
     assert "market_intel.market_intel_match_review_plan" in template
@@ -900,7 +908,7 @@ def test_legacy_source_bridge_default_is_planned_only():
     bridge = MarketIntelService().build_legacy_source_bridge()
 
     assert bridge["mode"] == "legacy_source_bridge_planned"
-    assert bridge["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert bridge["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert bridge["execute_requested"] is False
     assert bridge["read_only_query_executed"] is False
     assert bridge["database_connection_opened"] is False
@@ -1058,7 +1066,7 @@ def test_mcp_tool_contract_preview_is_read_only_and_whitelisted():
     contract = MarketIntelService().build_mcp_tool_contract()
 
     assert contract["mode"] == "mcp_tool_contract_preview"
-    assert contract["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert contract["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert contract["caller"] == "market_intel"
     assert contract["contract_ready"] is True
     assert contract["blocked_reasons"] == []
@@ -1191,7 +1199,7 @@ def test_mcp_activation_runbook_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_activation_runbook_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["deployment_actions_executed"] is False
     assert data["docker_command_executed"] is False
     assert data["ssh_command_executed"] is False
@@ -1204,7 +1212,7 @@ def test_mcp_fetch_gate_default_blocks_external_fetch():
     gate = MarketIntelService().build_mcp_fetch_gate(fetch_requested=True)
 
     assert gate["mode"] == "mcp_fetch_gate_planned"
-    assert gate["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert gate["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert gate["fetch_requested"] is True
     assert gate["manual_fetch_gate_open"] is False
     assert gate["network_request_allowed"] is False
@@ -1274,7 +1282,7 @@ def test_mcp_fetch_gate_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_fetch_gate_planned"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["fetch_requested"] is False
     assert data["network_request_allowed"] is False
     assert data["external_network_executed"] is False
@@ -1286,7 +1294,7 @@ def test_manual_sample_plan_preview_blocks_fetch_and_write():
     plan = MarketIntelService().build_manual_sample_plan()
 
     assert plan["mode"] == "manual_sample_fetch_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_manual_sample_fetch"] is False
     assert plan["sample_fetch_executed"] is False
     assert plan["external_network_executed"] is False
@@ -1334,7 +1342,7 @@ def test_manual_sample_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_fetch_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["sample_fetch_executed"] is False
     assert data["external_network_executed"] is False
     assert data["database_write_executed"] is False
@@ -1345,7 +1353,7 @@ def test_manual_sample_acceptance_preview_blocks_candidate_import():
     acceptance = MarketIntelService().build_manual_sample_acceptance()
 
     assert acceptance["mode"] == "manual_sample_acceptance_preview"
-    assert acceptance["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert acceptance["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert acceptance["contract_ready"] is True
     assert acceptance["sample_result_loaded"] is False
     assert acceptance["sample_result_accepted"] is False
@@ -1387,7 +1395,7 @@ def test_manual_sample_acceptance_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_acceptance_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["sample_result_loaded"] is False
     assert data["candidate_import_allowed"] is False
     assert data["external_network_executed"] is False
@@ -1399,7 +1407,7 @@ def test_manual_sample_review_preview_is_planned_until_result_loaded():
     review = MarketIntelService().build_manual_sample_review()
 
     assert review["mode"] == "manual_sample_review_preview"
-    assert review["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert review["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert review["contract_ready"] is True
     assert review["sample_result_loaded"] is False
     assert review["sample_result_reviewed"] is False
@@ -1510,7 +1518,7 @@ def test_manual_sample_review_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_review_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["sample_result_loaded"] is False
     assert data["sample_result_reviewed"] is False
     assert data["candidate_import_allowed"] is False
@@ -1549,7 +1557,7 @@ def test_manual_sample_review_evaluation_preview_accepts_payload_without_persist
     )
 
     assert review["mode"] == "manual_sample_review_evaluation_preview"
-    assert review["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert review["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert review["review_request_type"] == "operator_posted_json"
     assert review["payload_received"] is True
     assert review["payload_valid_json_object"] is True
@@ -1611,7 +1619,7 @@ def test_manual_sample_review_evaluate_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_review_evaluation_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["payload_received"] is True
     assert data["payload_valid_json_object"] is True
     assert data["payload_persisted"] is False
@@ -1691,7 +1699,7 @@ def test_manual_sample_candidate_handoff_preview_creates_candidates_without_pers
     )
 
     assert handoff["mode"] == "manual_sample_candidate_handoff_preview"
-    assert handoff["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert handoff["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert handoff["payload_received"] is True
     assert handoff["payload_valid_json_object"] is True
     assert handoff["payload_persisted"] is False
@@ -1755,7 +1763,7 @@ def test_manual_sample_candidate_handoff_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_handoff_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["payload_received"] is True
     assert data["handoff_ready"] is True
     assert data["candidate_handoff_created"] is True
@@ -1814,7 +1822,7 @@ def test_manual_sample_candidate_queue_draft_preview_builds_review_items_without
     )
 
     assert queue_draft["mode"] == "manual_sample_candidate_queue_draft_preview"
-    assert queue_draft["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert queue_draft["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert queue_draft["payload_received"] is True
     assert queue_draft["payload_valid_json_object"] is True
     assert queue_draft["payload_persisted"] is False
@@ -1888,7 +1896,7 @@ def test_manual_sample_candidate_queue_draft_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_draft_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["payload_received"] is True
     assert data["handoff_ready"] is True
     assert data["queue_draft_ready"] is True
@@ -1951,7 +1959,7 @@ def test_manual_sample_candidate_queue_approval_preview_blocks_write_and_maps_ro
     )
 
     assert approval["mode"] == "manual_sample_candidate_queue_approval_preview"
-    assert approval["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert approval["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert approval["payload_received"] is True
     assert approval["payload_valid_json_object"] is True
     assert approval["payload_persisted"] is False
@@ -2029,7 +2037,7 @@ def test_manual_sample_candidate_queue_approval_route_is_post_only_and_no_write(
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_approval_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["payload_received"] is True
     assert data["approval_preview_created"] is True
     assert data["approval_request_created"] is False
@@ -2092,7 +2100,7 @@ def test_manual_sample_candidate_queue_transaction_preview_blocks_execution():
     )
 
     assert transaction["mode"] == "manual_sample_candidate_queue_transaction_preview"
-    assert transaction["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert transaction["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert transaction["payload_received"] is True
     assert transaction["payload_valid_json_object"] is True
     assert transaction["payload_persisted"] is False
@@ -2172,7 +2180,7 @@ def test_manual_sample_candidate_queue_transaction_route_is_post_only_and_no_wri
 
     assert response.status_code == 200
     assert data["mode"] == "manual_sample_candidate_queue_transaction_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["payload_received"] is True
     assert data["transaction_preview_created"] is True
     assert data["transaction_ready"] is False
@@ -4170,6 +4178,94 @@ def test_candidate_queue_review_decision_writer_operator_drill_preview_is_safe()
     assert TEST_APPROVAL_TOKEN not in payload
 
 
+def test_candidate_queue_review_decision_writer_run_package_preview_is_safe():
+    from services.market_intel.candidate_queue_review_decision_writer_cli import (
+        build_candidate_queue_review_decision_writer_cli_plan,
+    )
+    from services.market_intel.candidate_queue_review_decision_writer_preflight import (
+        build_candidate_queue_review_decision_writer_preflight,
+    )
+    from services.market_intel.candidate_queue_review_decision_writer_postwrite_smoke import (
+        build_candidate_queue_review_decision_writer_postwrite_smoke,
+    )
+    from services.market_intel.candidate_queue_review_decision_writer_operator_drill import (
+        build_candidate_queue_review_decision_writer_operator_drill,
+    )
+    from services.market_intel.candidate_queue_review_decision_writer_run_package import (
+        build_candidate_queue_review_decision_writer_run_package,
+    )
+
+    transaction, operator_evidence = _build_ready_review_decision_transaction()
+    operator_evidence = {
+        **operator_evidence,
+        "operator_confirmed_manual_shell_window": True,
+        "operator_confirmed_post_update_inventory_planned": True,
+        "operator_drill_notes": "review_state shell drill reviewed",
+    }
+    writer_status = build_candidate_queue_review_decision_writer_cli_plan(
+        transaction_preview=transaction,
+        operator_evidence=operator_evidence,
+    )
+    preflight = build_candidate_queue_review_decision_writer_preflight(
+        writer_status=writer_status,
+        transaction_preview=transaction,
+        operator_evidence=operator_evidence,
+    )
+    smoke = build_candidate_queue_review_decision_writer_postwrite_smoke(
+        transaction_preview=transaction,
+        execute_requested=False,
+    )
+    drill = build_candidate_queue_review_decision_writer_operator_drill(
+        transaction_preview=transaction,
+        writer_preflight=preflight,
+        writer_status=writer_status,
+        postwrite_smoke=smoke,
+        operator_evidence=operator_evidence,
+    )
+    package = build_candidate_queue_review_decision_writer_run_package(
+        transaction_preview=transaction,
+        writer_preflight=preflight,
+        writer_status=writer_status,
+        postwrite_smoke=smoke,
+        operator_drill=drill,
+    )
+    payload = json.dumps(package, ensure_ascii=False, sort_keys=True)
+
+    assert package["mode"] == (
+        "candidate_queue_review_decision_writer_run_package_preview"
+    )
+    assert package["target_table"] == "market_alert_review_queue"
+    assert package["target_operation"] == "update_review_state"
+    assert package["package_ready"] is False
+    assert package["package_artifact_created"] is False
+    assert package["ready_for_api_review_state_update"] is False
+    assert package["ready_for_api_database_write"] is False
+    assert package["ready_for_scheduler_attach"] is False
+    assert package["api_writes_file"] is False
+    assert package["api_executes_cli"] is False
+    assert package["api_reads_approval_token"] is False
+    assert package["api_writes_database"] is False
+    assert package["api_updates_review_state"] is False
+    assert package["review_state_update_executed"] is False
+    assert package["database_connection_opened"] is False
+    assert package["database_session_created"] is False
+    assert package["transaction_opened"] is False
+    assert package["transaction_committed"] is False
+    assert package["database_write_executed"] is False
+    assert package["database_commit_executed"] is False
+    assert package["scheduler_attached"] is False
+    assert package["payload_manifest"]["payload_count"] == 1
+    assert package["payload_manifest"]["payloads"][0]["next_review_state"] == "confirmed"
+    assert len(package["required_artifacts"]) == 5
+    assert len(package["command_bundle"]) == 5
+    assert "backup_artifact_path_recorded" in package["blocked_reasons"]
+    assert "one_time_token_supplied_in_shell_only" in package["blocked_reasons"]
+    assert "do_not_update_review_state_from_review_state_run_package" in package[
+        "safe_boundaries"
+    ]
+    assert TEST_APPROVAL_TOKEN not in payload
+
+
 def test_candidate_queue_writer_preflight_route_is_post_only_and_no_write():
     from routes.market_intel_routes import market_intel_bp
 
@@ -4212,7 +4308,7 @@ def test_candidate_queue_writer_preflight_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_preflight_planned"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_connection_opened"] is False
@@ -4269,7 +4365,7 @@ def test_candidate_queue_writer_status_route_never_leaks_approval_token(monkeypa
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_cli_blocked"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is True
     assert data["apply_real_write_requested"] is True
     assert data["approval_token_present"] is False
@@ -4358,7 +4454,7 @@ def test_candidate_queue_writer_postwrite_smoke_route_is_post_only_and_no_write(
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_postwrite_smoke_planned"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_connection_opened"] is False
@@ -4412,7 +4508,7 @@ def test_candidate_queue_writer_operator_drill_route_is_post_only_and_no_write()
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_operator_drill_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["operator_drill_ready"] is True
     assert data["api_executes_cli"] is False
     assert data["api_reads_approval_token"] is False
@@ -4468,7 +4564,7 @@ def test_candidate_queue_writer_run_package_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_package_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["package_ready"] is True
     assert data["package_artifact_created"] is False
     assert data["api_writes_file"] is False
@@ -4534,7 +4630,7 @@ def test_candidate_queue_writer_run_readiness_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_readiness_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["ready_for_cli_operator_run"] is True
     assert data["ready_for_api_database_write"] is False
     assert data["api_executes_cli"] is False
@@ -4836,7 +4932,7 @@ def test_candidate_queue_writer_run_receipt_route_accepts_inline_payload_no_writ
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_receipt_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["receipt_passed"] is True
     assert data["ready_for_api_database_write"] is False
     assert data["ready_for_scheduler_attach"] is False
@@ -4884,7 +4980,7 @@ def test_candidate_queue_writer_run_closeout_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_closeout_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["closeout_passed"] is True
     assert data["ready_for_next_manual_phase"] is True
     assert data["ready_for_api_database_write"] is False
@@ -4933,7 +5029,7 @@ def test_candidate_queue_review_handoff_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_handoff_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["handoff_ready"] is True
     assert data["ready_for_manual_queue_review"] is True
     assert data["ready_for_api_database_write"] is False
@@ -4991,7 +5087,7 @@ def test_candidate_queue_review_inventory_route_is_post_only_and_no_write():
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_inventory_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["review_inventory_ready"] is False
     assert data["ready_for_human_decision_review"] is False
@@ -5057,7 +5153,7 @@ def test_candidate_queue_review_decision_route_is_post_only_and_no_write():
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["decision_ready"] is False
     assert data["ready_for_human_decision_record"] is False
     assert data["ready_for_api_review_state_update"] is False
@@ -5128,7 +5224,7 @@ def test_candidate_queue_review_decision_approval_route_is_post_only_and_no_writ
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_approval_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["approval_ready"] is False
     assert data["ready_for_review_state_transaction_preview"] is False
     assert data["ready_for_cli_decision_writer"] is False
@@ -5204,7 +5300,7 @@ def test_candidate_queue_review_decision_transaction_route_is_post_only_and_no_w
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_transaction_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["transaction_preview_created"] is False
     assert data["transaction_ready"] is False
     assert data["ready_for_manual_shell_update_window"] is False
@@ -5286,7 +5382,7 @@ def test_candidate_queue_review_decision_writer_status_route_is_post_only_and_no
     assert get_response.status_code == 405
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_review_decision_writer_cli_blocked"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is True
     assert data["apply_real_write_requested"] is True
     assert data["approval_token_present"] is False
@@ -5372,7 +5468,7 @@ def test_candidate_queue_review_decision_writer_preflight_route_is_post_only_and
     assert data["mode"] == (
         "candidate_queue_review_decision_writer_preflight_preview"
     )
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is True
     assert data["apply_real_write_requested"] is True
     assert data["read_only_query_executed"] is False
@@ -5455,7 +5551,7 @@ def test_candidate_queue_review_decision_writer_postwrite_smoke_route_is_post_on
     assert data["mode"] == (
         "candidate_queue_review_decision_writer_postwrite_smoke_planned"
     )
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_connection_opened"] is False
@@ -5538,7 +5634,7 @@ def test_candidate_queue_review_decision_writer_operator_drill_route_is_post_onl
     assert data["mode"] == (
         "candidate_queue_review_decision_writer_operator_drill_preview"
     )
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["operator_drill_ready"] is False
     assert data["ready_for_api_review_state_update"] is False
     assert data["ready_for_api_database_write"] is False
@@ -5566,6 +5662,90 @@ def test_candidate_queue_review_decision_writer_operator_drill_route_is_post_onl
     assert TEST_APPROVAL_TOKEN not in payload
 
 
+def test_candidate_queue_review_decision_writer_run_package_route_is_post_only_and_no_write():
+    from routes.market_intel_routes import market_intel_bp
+    from routes.market_intel_review_routes import market_intel_review_bp
+
+    fixture = _build_candidate_queue_writer_receipt_fixture(
+        "sample-batch-review-decision-run-package-route"
+    )
+    app = Flask(__name__)
+    app.secret_key = "test-secret"
+    app.register_blueprint(market_intel_bp)
+    app.register_blueprint(market_intel_review_bp)
+    client = app.test_client()
+    with client.session_transaction() as session:
+        session["logged_in"] = True
+
+    get_response = client.get(
+        "/api/market_intel/manual_sample_review/"
+        "candidate_queue_review_decision_writer_run_package"
+    )
+    response = client.post(
+        "/api/market_intel/manual_sample_review/"
+        "candidate_queue_review_decision_writer_run_package",
+        json={
+            "sample_result": fixture["sample_result"],
+            "operator_evidence": {
+                **fixture["operator_evidence"],
+                "closeout_artifact_path": "artifacts/market_intel/closeout.json",
+                "operator_confirmed_queue_review_next": True,
+                "operator_confirmed_no_scheduler_attach": True,
+                "operator_confirmed_no_api_db_write": True,
+                "operator_confirmed_inventory_read_only": True,
+                "reviewer_id": "operator-a",
+                "proposed_review_decision": "confirmed",
+                "decision_notes": "manual review only",
+                "operator_confirmed_manual_decision_only": True,
+                "decision_approval_notes": "cli-only approval gate",
+                "operator_confirmed_decision_payload_reviewed": True,
+                "operator_confirmed_decision_apply_requires_cli": True,
+                "operator_confirmed_review_state_update_is_not_api": True,
+                "decision_transaction_notes": "shell-only transaction preview",
+                "operator_confirmed_transaction_payload_reviewed": True,
+                "operator_confirmed_cli_only_transaction": True,
+                "operator_confirmed_manual_shell_window": True,
+                "operator_confirmed_post_update_inventory_planned": True,
+                "operator_drill_notes": "manual shell drill reviewed",
+            },
+            "writer_output": fixture["writer_output"],
+            "postwrite_smoke_result": fixture["postwrite_smoke_result"],
+        },
+    )
+    data = response.get_json()
+    payload = json.dumps(data, ensure_ascii=False, sort_keys=True)
+
+    assert get_response.status_code == 405
+    assert response.status_code == 200
+    assert data["mode"] == (
+        "candidate_queue_review_decision_writer_run_package_preview"
+    )
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
+    assert data["package_ready"] is False
+    assert data["package_artifact_created"] is False
+    assert data["ready_for_api_review_state_update"] is False
+    assert data["ready_for_api_database_write"] is False
+    assert data["ready_for_scheduler_attach"] is False
+    assert data["api_writes_file"] is False
+    assert data["api_executes_cli"] is False
+    assert data["api_reads_approval_token"] is False
+    assert data["api_writes_database"] is False
+    assert data["api_updates_review_state"] is False
+    assert data["database_connection_opened"] is False
+    assert data["database_write_executed"] is False
+    assert data["database_commit_executed"] is False
+    assert data["review_state_update_executed"] is False
+    assert data["scheduler_attached"] is False
+    assert data["payload_manifest"]["payload_count"] == 0
+    assert "transaction_preview_created" in data["blocked_reasons"]
+    assert "transaction_has_update_statements" in data["blocked_reasons"]
+    assert "backup_artifact_path_recorded" in data["blocked_reasons"]
+    assert "do_not_execute_review_state_writer_from_run_package_api" in data[
+        "safe_boundaries"
+    ]
+    assert TEST_APPROVAL_TOKEN not in payload
+
+
 def test_candidate_queue_writer_run_receipt_route_is_post_only_and_no_write():
     from routes.market_intel_routes import market_intel_bp
 
@@ -5594,7 +5774,7 @@ def test_candidate_queue_writer_run_receipt_route_is_post_only_and_no_write():
 
     assert response.status_code == 200
     assert data["mode"] == "candidate_queue_writer_run_receipt_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["receipt_passed"] is True
     assert data["ready_for_next_manual_review"] is True
     assert data["ready_for_api_database_write"] is False
@@ -5619,7 +5799,7 @@ def test_scheduler_plan_preview_blocks_job_attachment():
     plan = MarketIntelService().build_scheduler_plan()
 
     assert plan["mode"] == "scheduler_attach_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_to_attach_scheduler"] is False
     assert plan["scheduler_attached"] is False
     assert plan["scheduler_registration_executed"] is False
@@ -5657,7 +5837,7 @@ def test_scheduler_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "scheduler_attach_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["scheduler_registration_executed"] is False
     assert data["crawler_job_started"] is False
     assert data["external_network_executed"] is False
@@ -5668,7 +5848,7 @@ def test_match_review_plan_preview_blocks_auto_confirm():
     plan = MarketIntelService().build_match_review_plan()
 
     assert plan["mode"] == "match_review_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_review_queue"] is False
     assert plan["review_queue_created"] is False
     assert plan["auto_match_executed"] is False
@@ -5704,7 +5884,7 @@ def test_match_review_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "match_review_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["review_queue_created"] is False
     assert data["auto_confirm_executed"] is False
     assert data["external_network_executed"] is False
@@ -5715,7 +5895,7 @@ def test_opportunity_plan_preview_blocks_alerts_and_ai_summary():
     plan = MarketIntelService().build_opportunity_plan()
 
     assert plan["mode"] == "opportunity_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_opportunity_queue"] is False
     assert plan["opportunity_queue_created"] is False
     assert plan["threat_alert_dispatched"] is False
@@ -5756,7 +5936,7 @@ def test_opportunity_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["opportunity_queue_created"] is False
     assert data["threat_alert_dispatched"] is False
     assert data["ai_summary_generated"] is False
@@ -5767,7 +5947,7 @@ def test_opportunity_scoring_plan_preview_blocks_scoring_and_alerts():
     plan = MarketIntelService().build_opportunity_scoring_plan()
 
     assert plan["mode"] == "opportunity_scoring_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_scoring_job"] is False
     assert plan["scoring_job_created"] is False
     assert plan["score_calculation_executed"] is False
@@ -5815,7 +5995,7 @@ def test_opportunity_scoring_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_scoring_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["scoring_job_created"] is False
     assert data["score_calculation_executed"] is False
     assert data["sample_scores_generated"] is False
@@ -5827,7 +6007,7 @@ def test_opportunity_evidence_plan_preview_blocks_queries_and_alerts():
     plan = MarketIntelService().build_opportunity_evidence_plan()
 
     assert plan["mode"] == "opportunity_evidence_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_evidence_bundle"] is False
     assert plan["evidence_bundle_created"] is False
     assert plan["evidence_query_executed"] is False
@@ -5873,7 +6053,7 @@ def test_opportunity_evidence_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_evidence_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["evidence_bundle_created"] is False
     assert data["evidence_query_executed"] is False
     assert data["sample_evidence_generated"] is False
@@ -5886,7 +6066,7 @@ def test_opportunity_alert_plan_preview_blocks_dispatch_and_llm_calls():
     plan = MarketIntelService().build_opportunity_alert_plan()
 
     assert plan["mode"] == "opportunity_alert_plan_preview"
-    assert plan["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert plan["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert plan["ready_for_alert_candidates"] is False
     assert plan["alert_candidate_created"] is False
     assert plan["alert_queue_created"] is False
@@ -5971,7 +6151,7 @@ def test_opportunity_alert_plan_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "opportunity_alert_plan_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["alert_candidate_created"] is False
     assert data["alert_queue_created"] is False
     assert data["review_queue_created"] is False
@@ -6049,7 +6229,7 @@ def test_mcp_deploy_preflight_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "mcp_external_deploy_preflight_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["deployment_actions_executed"] is False
     assert data["docker_command_executed"] is False
     assert data["ssh_command_executed"] is False
@@ -6064,7 +6244,7 @@ def test_mcp_readiness_default_is_planned_only(monkeypatch):
     readiness = MarketIntelService().build_mcp_readiness()
 
     assert readiness["mode"] == "mcp_readiness_planned"
-    assert readiness["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert readiness["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert readiness["execute_requested"] is False
     assert readiness["router_enabled"] is False
     assert readiness["external_mcp_complete"] is False
@@ -6528,6 +6708,12 @@ def test_deployment_readiness_reports_app_only_release_gate():
         ]
         is True
     )
+    assert (
+        readiness["checks"][
+            "candidate_queue_review_decision_writer_run_package_preview_safe"
+        ]
+        is True
+    )
     assert (
         readiness["checks"][
             "candidate_queue_review_decision_writer_cli_status_safe"
@@ -6637,6 +6823,11 @@ def test_deployment_readiness_reports_app_only_release_gate():
         "candidate_queue_review_decision_writer_operator_drill"
         in readiness["production_smoke_targets"]
     )
+    assert (
+        "/api/market_intel/manual_sample_review/"
+        "candidate_queue_review_decision_writer_run_package"
+        in readiness["production_smoke_targets"]
+    )
     assert (
         "/api/market_intel/manual_sample_review/"
         "candidate_queue_review_decision_writer_status"
@@ -7578,6 +7769,52 @@ def test_deployment_readiness_reports_app_only_release_gate():
         ]
         is False
     )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"]["mode"]
+        == "candidate_queue_review_decision_writer_run_package_preview"
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "package_artifact_created"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "api_writes_file"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "api_executes_cli"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "api_reads_approval_token"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "api_updates_review_state"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "database_write_executed"
+        ]
+        is False
+    )
+    assert (
+        readiness["candidate_queue_review_decision_writer_run_package"][
+            "scheduler_attached"
+        ]
+        is False
+    )
     assert (
         readiness["candidate_queue_review_decision_writer_status"]["mode"]
         == "candidate_queue_review_decision_writer_cli_blocked"
@@ -7728,7 +7965,7 @@ def test_migration_apply_drill_planned_is_safe_and_manual_only():
     drill = MarketIntelService().build_migration_apply_drill()
 
     assert drill["mode"] == "migration_apply_drill_preview"
-    assert drill["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert drill["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert drill["execute_requested"] is False
     assert drill["schema_state"] == "planned_no_db_probe"
     assert drill["drill_ready_for_operator_review"] is True
@@ -7843,7 +8080,7 @@ def test_migration_apply_drill_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_apply_drill_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["migration_executed"] is False
     assert data["rollback_executed"] is False
@@ -7855,7 +8092,7 @@ def test_migration_catalog_review_planned_is_safe_and_diagnostic():
     review = MarketIntelService().build_migration_catalog_review()
 
     assert review["mode"] == "migration_catalog_review_preview"
-    assert review["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert review["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert review["execute_requested"] is False
     assert review["catalog_state"] == "planned_no_probe"
     assert review["seed_state"] == "planned_no_probe"
@@ -7970,7 +8207,7 @@ def test_migration_catalog_review_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_catalog_review_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["catalog_state"] == "planned_no_probe"
     assert data["migration_executed"] is False
@@ -7983,7 +8220,7 @@ def test_migration_live_smoke_planned_is_preview_only():
     smoke = MarketIntelService().build_migration_live_smoke()
 
     assert smoke["mode"] == "migration_live_smoke_preview"
-    assert smoke["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert smoke["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert smoke["execute_requested"] is False
     assert smoke["smoke_result"] == "planned_no_execution"
     assert smoke["live_smoke_passed"] is False
@@ -8045,7 +8282,7 @@ def test_migration_live_smoke_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "migration_live_smoke_preview"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["smoke_result"] == "planned_no_execution"
     assert data["migration_executed"] is False
@@ -8058,7 +8295,7 @@ def test_live_db_inventory_planned_is_preview_only():
     inventory = MarketIntelService().build_live_db_inventory()
 
     assert inventory["mode"] == "live_db_inventory_planned"
-    assert inventory["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert inventory["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert inventory["execute_requested"] is False
     assert inventory["read_only_query_executed"] is False
     assert inventory["database_connection_opened"] is False
@@ -8202,7 +8439,7 @@ def test_live_db_inventory_route_is_preview_only():
 
     assert response.status_code == 200
     assert data["mode"] == "live_db_inventory_planned"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["read_only_query_executed"] is False
     assert data["database_write_executed"] is False
@@ -8429,7 +8666,7 @@ def test_candidate_queue_writer_cli_script_outputs_blocked_gate(tmp_path):
 
     assert result.returncode == 0
     assert data["mode"] == "candidate_queue_writer_cli_blocked"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["apply_real_write_requested"] is False
     assert data["writes_executed"] is False
@@ -8458,7 +8695,7 @@ def test_review_decision_writer_cli_script_outputs_blocked_gate_without_login_en
 
     assert result.returncode == 0
     assert data["mode"] == "candidate_queue_review_decision_writer_cli_blocked"
-    assert data["phase"] == "phase_72_candidate_queue_review_decision_writer_operator_drill"
+    assert data["phase"] == "phase_73_candidate_queue_review_decision_writer_run_package"
     assert data["execute_requested"] is False
     assert data["apply_real_write_requested"] is False
     assert data["approval_token_present"] is False