@absolutejs/absolute 0.20.0-beta.111 → 0.20.0-beta.112

package/CHANGELOG.md

@@ -6,6 +6,13 @@ This file is generated by `absolute-changelog` from the entries in
 `changelog/`. Edit an entry, not this file — and add new ones under
 `changelog/unreleased/`.
 
+## 0.20.0-beta.112 — 2026-09-17
+
+### Added
+
+- **Mobile CI promotions correlate, watch, and audit the exact dispatched workflow run** (`ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT`, `ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT`, `AbsoluteMobileCiRunStatus`, `AbsoluteMobilePromotionAudit`, `AbsoluteMobilePromotionContext`, `AbsoluteMobilePromotionRun`, `discoverAbsoluteMobilePromotionRun`, `parseAbsoluteMobilePromotionRunList`)
+  The promotion CLI assigns each protected dispatch a unique non-secret identity, discovers only the GitHub Actions run carrying that identity, returns its run ID and URL, optionally waits for completion, and can chain an independent local audit without racing concurrent promotions; retained format-1 audit context remains readable.
+
 ## 0.20.0-beta.111 — 2026-09-17
 
 ### Added

package/changelog.json

@@ -2,6 +2,27 @@
 	"contract": 1,
 	"name": "@absolutejs/absolute",
 	"releases": [
+		{
+			"changes": [
+				{
+					"detail": "The promotion CLI assigns each protected dispatch a unique non-secret identity, discovers only the GitHub Actions run carrying that identity, returns its run ID and URL, optionally waits for completion, and can chain an independent local audit without racing concurrent promotions; retained format-1 audit context remains readable.",
+					"kind": "added",
+					"summary": "Mobile CI promotions correlate, watch, and audit the exact dispatched workflow run",
+					"symbols": [
+						"ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT",
+						"ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT",
+						"AbsoluteMobileCiRunStatus",
+						"AbsoluteMobilePromotionAudit",
+						"AbsoluteMobilePromotionContext",
+						"AbsoluteMobilePromotionRun",
+						"discoverAbsoluteMobilePromotionRun",
+						"parseAbsoluteMobilePromotionRunList"
+					]
+				}
+			],
+			"date": "2026-09-17",
+			"version": "0.20.0-beta.112"
+		},
 		{
 			"changes": [
 				{

package/dist/angular/components/core/streamingSlotRegistrar.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-gyyIkV/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-Pjgrp8/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");

package/dist/angular/components/core/streamingSlotRegistry.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-gyyIkV/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-Pjgrp8/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");
@@ -48,7 +48,7 @@ var warnMissingStreamingSlotCollector = (primitiveName) => {
   getWarningController()?.maybeWarn(primitiveName);
 };
 
-// .angular-partial-tmp-gyyIkV/src/core/streamingSlotRegistry.ts
+// .angular-partial-tmp-Pjgrp8/src/core/streamingSlotRegistry.ts
 var STREAMING_SLOT_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotAsyncLocalStorage");
 var isObjectRecord2 = (value) => Boolean(value) && typeof value === "object";
 var isAsyncLocalStorage = (value) => isObjectRecord2(value) && ("getStore" in value) && typeof value.getStore === "function" && ("run" in value) && typeof value.run === "function";

package/dist/cli/index.js

@@ -203,7 +203,7 @@ if (command === "dev") {
   sendTelemetryEvent("cli:command", {
     command: `mobile:${workspaceCommand ?? "unknown"}`
   });
-  const { runMobile } = await import("./mobile-k7gpwfs8.js");
+  const { runMobile } = await import("./mobile-d5wbqynh.js");
   try {
     await runMobile(args);
   } catch (error) {

package/dist/cli/{mobile-k7gpwfs8.js → mobile-d5wbqynh.js}

@@ -16786,7 +16786,7 @@ import {
   rm as rm10,
   writeFile as writeFile19
 } from "fs/promises";
-import { createPublicKey as createPublicKey2 } from "crypto";
+import { createPublicKey as createPublicKey2, randomUUID } from "crypto";
 import { join as join18, relative as relative16, resolve as resolve17 } from "path";
 import { createInterface } from "readline/promises";
 
@@ -22982,7 +22982,7 @@ var renderAbsoluteMobileProjectInspection = (report) => {
 import { existsSync } from "fs";
 import { access as access12, mkdir as mkdir13, readFile as readFile18, writeFile as writeFile14 } from "fs/promises";
 import { dirname as dirname11, extname as extname2, relative as relative11, resolve as resolve12, sep as sep8 } from "path";
-var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 3;
+var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 4;
 var SECRET_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/u;
 var CI_ENV_INDENTATION = 6;
 var RESERVED_SECRET_NAMES = new Set([
@@ -23141,6 +23141,10 @@ var publishingInputs = (platforms, includePublishing) => {
         description: Source workflow run ID for promotion without rebuilding
         required: false
         type: string`,
+    `      dispatch_id:
+        description: Unique promotion correlation ID supplied by the AbsoluteJS CLI
+        required: false
+        type: string`,
     `      certification_base64:
         description: AbsoluteJS certification supplied by the promotion CLI
         required: false
@@ -23513,6 +23517,10 @@ var promotionValidationSteps = `      - name: Validate promotion handoff
             echo "Promotion requires a numeric source workflow run ID." >&2
             exit 1
           fi
+          if [[ ! "$ABSOLUTE_PROMOTION_DISPATCH_ID" =~ ^amp_[a-f0-9]{32}$ ]]; then
+            echo "Promotion requires a valid AbsoluteJS dispatch correlation ID." >&2
+            exit 1
+          fi
           if [[ -z "$ABSOLUTE_CERTIFICATION_BASE64" ]]; then
             echo "Promotion requires certification supplied by absolute mobile ci promote." >&2
             exit 1
@@ -23527,7 +23535,7 @@ var promotionSharedSteps = (platform) => `      - name: Restore exact ${platform
       - name: Record bounded promotion context
         shell: bash
         run: |
-          bun -e 'const sourceRunId = process.env.ABSOLUTE_SOURCE_RUN_ID; const promotionRunId = process.env.GITHUB_RUN_ID; if (!sourceRunId?.match(/^[1-9][0-9]*$/) || !promotionRunId?.match(/^[1-9][0-9]*$/)) throw new Error("Invalid promotion run identity"); await Bun.write(".absolutejs/mobile-ci/promotion-context.json", JSON.stringify({ format: 1, platform: ${JSON.stringify(platform)}, promotionRunId, sourceArtifact: ${JSON.stringify(`absolute-mobile-${platform}`)}, sourceRunId }, null, 2) + "\\n");'
+          bun -e 'const dispatchId = process.env.ABSOLUTE_PROMOTION_DISPATCH_ID; const sourceRunId = process.env.ABSOLUTE_SOURCE_RUN_ID; const promotionRunId = process.env.GITHUB_RUN_ID; if (!dispatchId?.match(/^amp_[a-f0-9]{32}$/) || !sourceRunId?.match(/^[1-9][0-9]*$/) || !promotionRunId?.match(/^[1-9][0-9]*$/)) throw new Error("Invalid promotion run identity"); await Bun.write(".absolutejs/mobile-ci/promotion-context.json", JSON.stringify({ dispatchId, format: 2, platform: ${JSON.stringify(platform)}, promotionRunId, sourceArtifact: ${JSON.stringify(`absolute-mobile-${platform}`)}, sourceRunId }, null, 2) + "\\n");'
       - name: Import and verify exact certification
         shell: bash
         run: |
@@ -23565,6 +23573,7 @@ var androidPromotionJob = (options) => {
       id-token: write
     env:
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_RELEASE_CHANNEL: \${{ inputs.channel }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_PLAY_TRACK: \${{ inputs.play_track }}
@@ -23630,6 +23639,7 @@ var iosPromotionJob = (options) => {
       id-token: write
     env:
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_RELEASE_CHANNEL: \${{ inputs.channel }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_TESTFLIGHT_GROUP: \${{ inputs.testflight_group }}
@@ -23720,6 +23730,7 @@ var createAbsoluteMobileGithubWorkflow = (options) => {
   });
   let workflow = `# Generated by AbsoluteJS. Regenerate with: absolute mobile ci github${includePublishing ? " --publish" : ""}
 name: AbsoluteJS Mobile
+run-name: \${{ inputs.operation == 'promote' && format('AbsoluteJS mobile promotion [{0}]', inputs.dispatch_id) || format('AbsoluteJS mobile {0}', github.event_name) }}
 
 on:
   pull_request:
@@ -23745,6 +23756,7 @@ jobs:
     env:
 ${environment}${includePublishing ? `
       ABSOLUTE_PROMOTION_PLATFORM: \${{ inputs.platform }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}` : ""}
     steps:
@@ -23807,12 +23819,15 @@ import {
 } from "fs/promises";
 import { dirname as dirname12, isAbsolute as isAbsolute8, join as join15, relative as relative12, resolve as resolve13, sep as sep9 } from "path";
 var ABSOLUTE_MOBILE_CI_PROMOTION_AUDIT_FORMAT = 1;
-var ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT = 1;
+var ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT = 2;
 var MAX_GITHUB_OUTPUT_BYTES = 1048576;
 var MAX_AUDIT_JSON_BYTES = 1048576;
 var MAX_SEARCH_FILES = 20000;
 var RUN_ID_PATTERN = /^[1-9][0-9]*$/u;
 var REPOSITORY_PATTERN2 = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u;
+var DISPATCH_ID_PATTERN = /^amp_[a-f0-9]{32}$/u;
+var PROMOTION_DISCOVERY_ATTEMPTS = 60;
+var PROMOTION_DISCOVERY_INTERVAL_MS = 1000;
 var isRecord9 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var requiredString = (value, name) => {
   if (typeof value !== "string" || value.trim() === "")
@@ -23829,6 +23844,26 @@ var runId = (value, name) => {
     throw new TypeError(`${name} is invalid.`);
   return value;
 };
+var dispatchId = (value) => {
+  if (!DISPATCH_ID_PATTERN.test(value))
+    throw new TypeError("Mobile promotion dispatch ID is invalid.");
+  return value;
+};
+var promotionRunTitle = (value) => `AbsoluteJS mobile promotion [${dispatchId(value)}]`;
+var promotionDiscoveryCommand = (workflow, repository) => [
+  "gh",
+  "run",
+  "list",
+  "--workflow",
+  workflow,
+  "--event",
+  "workflow_dispatch",
+  "--limit",
+  "50",
+  ...repositoryArgs(repository),
+  "--json",
+  "databaseId,displayTitle,event,url"
+];
 var repositoryArgs = (repository) => {
   if (repository === undefined)
     return [];
@@ -23876,6 +23911,27 @@ var parseJob = (value) => {
     status: requiredString(value.status, "GitHub job status")
   };
 };
+var discoverAbsoluteMobilePromotionRun = async (options) => {
+  const requestedDispatchId = dispatchId(options.dispatchId);
+  const attempts = options.attempts ?? PROMOTION_DISCOVERY_ATTEMPTS;
+  if (!Number.isSafeInteger(attempts) || attempts < 1 || attempts > 300)
+    throw new TypeError("Mobile promotion discovery attempts are invalid.");
+  const pollIntervalMs = options.pollIntervalMs ?? PROMOTION_DISCOVERY_INTERVAL_MS;
+  if (!Number.isSafeInteger(pollIntervalMs) || pollIntervalMs < 0 || pollIntervalMs > 1e4)
+    throw new TypeError("Mobile promotion discovery interval is invalid.");
+  const sleep = options.sleep ?? Bun.sleep;
+  const discover = async (attempt) => {
+    const result = await requireCommand2(options.run ?? defaultRunner, promotionDiscoveryCommand(options.workflow, options.repository), { cwd: options.projectRoot }, "GitHub promotion run discovery");
+    const discovered = parseAbsoluteMobilePromotionRunList(JSON.parse(result.stdout), requestedDispatchId);
+    if (discovered)
+      return discovered;
+    if (attempt >= attempts)
+      throw new TypeError(`GitHub did not expose promotion dispatch ${requestedDispatchId} within ${attempts} attempts.`);
+    await sleep(pollIntervalMs);
+    return discover(attempt + 1);
+  };
+  return discover(1);
+};
 var inspectAbsoluteMobileCiRun = async (options) => {
   const requestedRunId = runId(options.runId, "GitHub run ID");
   const result = await requireCommand2(options.run ?? defaultRunner, [
@@ -23885,7 +23941,7 @@ var inspectAbsoluteMobileCiRun = async (options) => {
     requestedRunId,
     ...repositoryArgs(options.repository),
     "--json",
-    "conclusion,createdAt,databaseId,headBranch,headSha,jobs,startedAt,status,updatedAt,url,workflowName"
+    "conclusion,createdAt,databaseId,displayTitle,headBranch,headSha,jobs,startedAt,status,updatedAt,url,workflowName"
   ], { cwd: options.projectRoot }, "GitHub workflow inspection");
   return parseAbsoluteMobileCiRunStatus(JSON.parse(result.stdout), requestedRunId);
 };
@@ -23898,6 +23954,7 @@ var parseAbsoluteMobileCiRunStatus = (value, requestedRunId) => {
   return {
     conclusion: optionalString(value.conclusion, "GitHub run conclusion"),
     createdAt: requiredString(value.createdAt, "GitHub run createdAt"),
+    displayTitle: requiredString(value.displayTitle, "GitHub run displayTitle"),
     headBranch: requiredString(value.headBranch, "GitHub run headBranch"),
     headSha: requiredString(value.headSha, "GitHub run headSha"),
     jobs: value.jobs.map(parseJob),
@@ -23910,20 +23967,44 @@ var parseAbsoluteMobileCiRunStatus = (value, requestedRunId) => {
   };
 };
 var parseAbsoluteMobilePromotionContext = (value) => {
-  if (!isRecord9(value) || value.format !== ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT || value.platform !== "android" && value.platform !== "ios")
+  if (!isRecord9(value) || value.format !== 1 && value.format !== ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT || value.platform !== "android" && value.platform !== "ios")
     throw new TypeError("Mobile promotion context is invalid.");
   const { platform } = value;
   const sourceArtifact = requiredString(value.sourceArtifact, "promotion source artifact");
   if (sourceArtifact !== `absolute-mobile-${platform}`)
     throw new TypeError("Mobile promotion source artifact is invalid.");
   return {
-    format: ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT,
+    dispatchId: value.format === 1 ? null : dispatchId(requiredString(value.dispatchId, "promotion dispatch ID")),
+    format: value.format,
     platform,
     promotionRunId: runId(requiredString(value.promotionRunId, "promotion run ID"), "promotion run ID"),
     sourceArtifact,
     sourceRunId: runId(requiredString(value.sourceRunId, "source run ID"), "source run ID")
   };
 };
+var parseAbsoluteMobilePromotionRunList = (value, requestedDispatchId) => {
+  if (!Array.isArray(value))
+    throw new TypeError("GitHub workflow run list response is invalid.");
+  const expectedTitle = promotionRunTitle(requestedDispatchId);
+  const matches = value.filter((candidate) => isRecord9(candidate) && candidate.displayTitle === expectedTitle);
+  if (matches.length === 0)
+    return null;
+  if (matches.length !== 1)
+    throw new TypeError("GitHub returned multiple runs for one promotion dispatch identity.");
+  const [match] = matches;
+  if (!isRecord9(match) || match.event !== "workflow_dispatch")
+    throw new TypeError("GitHub promotion run identity is invalid.");
+  const databaseId = typeof match.databaseId === "number" || typeof match.databaseId === "string" ? String(match.databaseId) : "";
+  const requestedRunId = runId(databaseId, "GitHub promotion run ID");
+  const url = requiredString(match.url, "GitHub promotion run URL");
+  if (!url.endsWith(`/actions/runs/${requestedRunId}`))
+    throw new TypeError("GitHub promotion run URL does not match its ID.");
+  return {
+    dispatchId: requestedDispatchId,
+    runId: requestedRunId,
+    url
+  };
+};
 var watchAbsoluteMobileCiRun = async (options) => {
   const requestedRunId = runId(options.runId, "GitHub run ID");
   await requireCommand2(options.run ?? defaultRunner, [
@@ -24042,6 +24123,7 @@ var renderAuditMarkdown = (audit) => `# AbsoluteJS mobile promotion audit
 - Artifact SHA-256: \`${audit.release.sha256}\`
 - Source workflow run: ${audit.github.sourceRunId}
 - Promotion workflow run: ${audit.github.promotionRunId}
+- Dispatch correlation: ${audit.github.dispatchId ?? "legacy workflow (not recorded)"}
 - Workflow: ${audit.github.workflowName}
 - GitHub identity: \`${audit.provenance.repository}/${audit.provenance.workflowPath}@${audit.provenance.ref}\`
 - Certification: \`${audit.certification.certificationId}\` (${audit.certification.strength})
@@ -24091,6 +24173,8 @@ var auditAbsoluteMobileCiPromotion = async (options) => {
       throw new TypeError("Promotion context run identity does not match.");
     if (context && context.platform !== platform)
       throw new TypeError("Promotion context platform does not match.");
+    if (context?.dispatchId && status.displayTitle !== promotionRunTitle(context.dispatchId))
+      throw new TypeError("Promotion dispatch identity does not match the GitHub run.");
     const sourceRunId = options.sourceRunId ? runId(options.sourceRunId, "GitHub source run ID") : context?.sourceRunId;
     if (!sourceRunId)
       throw new TypeError("Promotion artifact predates source-run context; pass --source-run-id.");
@@ -24159,6 +24243,7 @@ var auditAbsoluteMobileCiPromotion = async (options) => {
       format: ABSOLUTE_MOBILE_CI_PROMOTION_AUDIT_FORMAT,
       github: {
         conclusion: status.conclusion,
+        dispatchId: context?.dispatchId ?? null,
         promotionRunId,
         repository: verification.identity.repository,
         sourceRunId,
@@ -25061,12 +25146,38 @@ var createGithubCertificationVerification = async (args) => {
   console.log(relative16(projectRoot, path).replaceAll("\\", "/"));
   return verification;
 };
+var auditDispatchedGithubMobilePromotion = async (options) => {
+  const startedAt = performance.now();
+  try {
+    const audited = await auditAbsoluteMobileCiPromotion({
+      outputDirectory: valueAfter(options.args, "--outdir"),
+      projectRoot: options.projectRoot,
+      ...options.repository ? { repository: options.repository } : {},
+      runId: options.runId
+    });
+    sendTelemetryEvent("mobile:ci-promotion-audit", {
+      durationMs: Math.round(performance.now() - startedAt),
+      platform: options.platform,
+      provider: "github-actions",
+      success: true
+    });
+    return audited;
+  } catch (error) {
+    sendTelemetryEvent("mobile:ci-promotion-audit", {
+      durationMs: Math.round(performance.now() - startedAt),
+      platform: options.platform,
+      provider: "github-actions",
+      success: false
+    });
+    throw error;
+  }
+};
 var dispatchGithubMobilePromotion = async (args) => {
   const [platform2] = args;
   if (platform2 !== "android" && platform2 !== "ios")
-    throw new TypeError("Usage: absolute mobile ci promote <android|ios> --run-id id --certification directory-or-json [--channel name] [store options]");
-  const runId2 = valueAfter(args, "--run-id");
-  if (!runId2 || !/^[1-9][0-9]*$/u.test(runId2))
+    throw new TypeError("Usage: absolute mobile ci promote <android|ios> --run-id id --certification directory-or-json [--channel name] [store options] [--watch] [--audit]");
+  const sourceRunId = valueAfter(args, "--run-id");
+  if (!sourceRunId || !/^[1-9][0-9]*$/u.test(sourceRunId))
     throw new TypeError("mobile ci promote requires a numeric --run-id.");
   const requestedCertification = valueAfter(args, "--certification");
   if (!requestedCertification || requestedCertification.startsWith("-"))
@@ -25085,6 +25196,8 @@ var dispatchGithubMobilePromotion = async (args) => {
   if (certificationBase64.length > 48000)
     throw new TypeError("Mobile certification is too large for protected GitHub dispatch.");
   const workflow = valueAfter(args, "--workflow") ?? ".github/workflows/absolute-mobile.yml";
+  const dispatchId2 = `amp_${randomUUID().replaceAll("-", "")}`;
+  const repository = valueAfter(args, "--repo");
   const command = [
     "workflow",
     "run",
@@ -25094,7 +25207,9 @@ var dispatchGithubMobilePromotion = async (args) => {
     "-f",
     `platform=${platform2}`,
     "-f",
-    `source_run_id=${runId2}`,
+    `source_run_id=${sourceRunId}`,
+    "-f",
+    `dispatch_id=${dispatchId2}`,
     "-f",
     `certification_base64=${certificationBase64}`,
     "-f",
@@ -25109,21 +25224,71 @@ var dispatchGithubMobilePromotion = async (args) => {
   const ref = valueAfter(args, "--ref");
   if (ref)
     command.push("--ref", ref);
+  if (repository)
+    command.push("--repo", repository);
   const child = Bun.spawn(["gh", ...command], {
     cwd: projectRoot,
-    stderr: "inherit",
+    stderr: "pipe",
     stdin: "inherit",
-    stdout: "inherit"
+    stdout: "pipe"
   });
-  const exitCode = await child.exited;
+  const [exitCode, stderr] = await Promise.all([
+    child.exited,
+    new Response(child.stderr).text(),
+    new Response(child.stdout).text()
+  ]);
   if (exitCode !== 0)
-    throw new TypeError(`GitHub promotion dispatch exited with status ${exitCode}.`);
+    throw new TypeError(`GitHub promotion dispatch exited with status ${exitCode}: ${stderr.trim() || "unknown GitHub CLI error"}`);
+  const promotion = await discoverAbsoluteMobilePromotionRun({
+    dispatchId: dispatchId2,
+    projectRoot,
+    ...repository ? { repository } : {},
+    workflow
+  });
   sendTelemetryEvent("mobile:ci-promotion-dispatched", {
+    discovery: "correlated",
     platform: platform2,
     provider: "github-actions",
     storeTarget: platform2 === "android" ? playTrack !== "registry-only" : testflightGroup !== ""
   });
-  console.log(`Dispatched protected ${platform2} promotion for ${certification.release.releaseId} from workflow run ${runId2}.`);
+  if (!args.includes("--json")) {
+    console.log(`Dispatched protected ${platform2} promotion ${promotion.runId} for ${certification.release.releaseId} from workflow run ${sourceRunId}.`);
+    console.log(promotion.url);
+  }
+  const shouldWatch = args.includes("--watch") || args.includes("--audit");
+  if (shouldWatch && !args.includes("--json"))
+    console.log(`Watching GitHub run ${promotion.runId} until completion\u2026`);
+  const status = shouldWatch ? await watchAbsoluteMobileCiRun({
+    projectRoot,
+    ...repository ? { repository } : {},
+    runId: promotion.runId
+  }) : null;
+  const audited = args.includes("--audit") ? await auditDispatchedGithubMobilePromotion({
+    args,
+    platform: platform2,
+    projectRoot,
+    ...repository ? { repository } : {},
+    runId: promotion.runId
+  }) : null;
+  const result = {
+    auditDirectory: audited ? relative16(projectRoot, audited.directory).replaceAll("\\", "/") : null,
+    dispatchId: dispatchId2,
+    platform: platform2,
+    releaseId: certification.release.releaseId,
+    runId: promotion.runId,
+    sourceRunId,
+    status: status?.status ?? "dispatched",
+    url: promotion.url
+  };
+  if (args.includes("--json"))
+    console.log(JSON.stringify(result, null, 2));
+  if (args.includes("--json"))
+    return result;
+  if (status)
+    renderGithubMobileRunStatus(status);
+  if (audited)
+    renderGithubMobilePromotionAudit(audited, projectRoot);
+  return result;
 };
 var githubMobileRunId = (args) => {
   const value = valueAfter(args, "--run-id");
@@ -27813,7 +27978,7 @@ var runMobile = async (args) => {
     await publishIos(args.slice(2));
     return;
   }
-  throw new TypeError("Usage: absolute mobile <pair mac <name> <user@host> [--port n] [--workspace path] | remotes [inspect [name] [--json] | clean [name] --yes | --json] | unpair mac <name> | init [--no-native] [--force] | sync [ios|android] | inspect [--json] [--require-bundle] | certify <release-dir> [--evidence report-dir]... [--require installed|simulator|device|store] [--outdir dir] [--json] | certify <release-dir> --verify certification-dir [--require installed|simulator|device|store] [--json] | associations [--outdir dir] [--verify] | ci github [server-entry] [--publish] [--registry module] [--secret-env NAME] [--output path] [--force] [--json] | ci promote <android|ios> --run-id id --certification path [--channel name] [--play-track track|--testflight-group group] [--ref branch] | ci status --run-id id [--watch] [--repo owner/name] [--json] | ci audit --run-id id [--source-run-id id] [--repo owner/name] [--outdir path] [--json] | doctor [ios|android|release [ios|android]] [--remote name] [--json|--fix [--yes]] | build <android|ios> [server-entry] [--remote name] [--registered-device-artifact] [--outdir dir] [--web-outdir dir] [--unsigned] | update provision [--storage local|s3] [--registry module] [--force] [--yes] | update signing generate --private-key path [--certificate path] [--public-key path] [--key-id id] [--common-name name] [--validity-years n] | update build [server-entry] --classification bug-fix|content|security --key-id id --signing-key path --within-submitted-purpose [--outdir dir] [--web-outdir dir] | update publish <release-directory> [--rollout fraction] [--registry module] | update promote --release id --rollout fraction [--registry module] | update rollback [--release id] [--registry module] | update status [--registry module] [--json] | update advance [--rollout fraction] [--registry module] [--json] | update pause|resume|cancel|reconcile [--registry module] [--json] | update storage [--retain count] [--min-age-days days] [--registry module] [--json] | update gc [--retain count] [--min-age-days days] [--grace-days days] [--apply] [--registry module] [--json] | publish android [server-entry] [--release release-dir] [--certification certification-dir] [--certification-attestation verification-json] [--registry module] [--channel name] [--play-track track] [--play-status completed|draft|halted|in-progress] [--play-rollout fraction] [--play-name name] [--play-notes language=text] [--play-update-priority 0..5] [--play-hold-review] [--play-cancel-existing-review] [--outdir dir] [--web-outdir dir] [--unsigned] | publish ios [server-entry] [--release release-dir] [--certification certification-dir] [--certification-attestation verification-json] [--remote name] [--registry module] [--channel name] [--testflight-group name-or-id] [--testflight-notes locale=text] [--testflight-submit-review] [--outdir dir] [--web-outdir dir] [--unsigned] | test android [--release release-dir [--yes] | --route path [--wait-for-hmr] [--port n]] [--report [dir]] [--serial id] [--artifacts dir] [--json] [--config path] | test ios [--release release-dir [--remote name] [--device id [--testflight] --yes] | --wait-for-hmr] [--report [dir]] [--udid id] [--artifacts dir] [--json] [--config path]");
+  throw new TypeError("Usage: absolute mobile <pair mac <name> <user@host> [--port n] [--workspace path] | remotes [inspect [name] [--json] | clean [name] --yes | --json] | unpair mac <name> | init [--no-native] [--force] | sync [ios|android] | inspect [--json] [--require-bundle] | certify <release-dir> [--evidence report-dir]... [--require installed|simulator|device|store] [--outdir dir] [--json] | certify <release-dir> --verify certification-dir [--require installed|simulator|device|store] [--json] | associations [--outdir dir] [--verify] | ci github [server-entry] [--publish] [--registry module] [--secret-env NAME] [--output path] [--force] [--json] | ci promote <android|ios> --run-id id --certification path [--channel name] [--play-track track|--testflight-group group] [--ref branch] [--repo owner/name] [--watch] [--audit] [--outdir path] [--json] | ci status --run-id id [--watch] [--repo owner/name] [--json] | ci audit --run-id id [--source-run-id id] [--repo owner/name] [--outdir path] [--json] | doctor [ios|android|release [ios|android]] [--remote name] [--json|--fix [--yes]] | build <android|ios> [server-entry] [--remote name] [--registered-device-artifact] [--outdir dir] [--web-outdir dir] [--unsigned] | update provision [--storage local|s3] [--registry module] [--force] [--yes] | update signing generate --private-key path [--certificate path] [--public-key path] [--key-id id] [--common-name name] [--validity-years n] | update build [server-entry] --classification bug-fix|content|security --key-id id --signing-key path --within-submitted-purpose [--outdir dir] [--web-outdir dir] | update publish <release-directory> [--rollout fraction] [--registry module] | update promote --release id --rollout fraction [--registry module] | update rollback [--release id] [--registry module] | update status [--registry module] [--json] | update advance [--rollout fraction] [--registry module] [--json] | update pause|resume|cancel|reconcile [--registry module] [--json] | update storage [--retain count] [--min-age-days days] [--registry module] [--json] | update gc [--retain count] [--min-age-days days] [--grace-days days] [--apply] [--registry module] [--json] | publish android [server-entry] [--release release-dir] [--certification certification-dir] [--certification-attestation verification-json] [--registry module] [--channel name] [--play-track track] [--play-status completed|draft|halted|in-progress] [--play-rollout fraction] [--play-name name] [--play-notes language=text] [--play-update-priority 0..5] [--play-hold-review] [--play-cancel-existing-review] [--outdir dir] [--web-outdir dir] [--unsigned] | publish ios [server-entry] [--release release-dir] [--certification certification-dir] [--certification-attestation verification-json] [--remote name] [--registry module] [--channel name] [--testflight-group name-or-id] [--testflight-notes locale=text] [--testflight-submit-review] [--outdir dir] [--web-outdir dir] [--unsigned] | test android [--release release-dir [--yes] | --route path [--wait-for-hmr] [--port n]] [--report [dir]] [--serial id] [--artifacts dir] [--json] [--config path] | test ios [--release release-dir [--remote name] [--device id [--testflight] --yes] | --wait-for-hmr] [--report [dir]] [--udid id] [--artifacts dir] [--json] [--config path]");
 };
 export {
   runMobile