@coreplane/switchboard 1.261.1 → 1.261.3

package/dist/cli.js

@@ -4186,6 +4186,7 @@ var init_runEvents = __esm({
       "ledger_untracked",
       "rebind_refused",
       "work_left_behind",
+      "publication_blocked",
       "workspace_torn_down",
       "pr_not_opened",
       "pr_head_unverified",
@@ -5792,6 +5793,7 @@ function isCoordinatorUnit(v) {
   if (r.issue !== void 0 && !isFinite(r.issue)) return false;
   if (r.pr !== void 0 && !isPr(r.pr)) return false;
   if (r.resume !== void 0 && !isResume(r.resume)) return false;
+  if (r.publication !== void 0 && !isPublication(r.publication)) return false;
   if (r.record !== void 0 && (typeof r.record !== "string" || !/^\d{4}$/.test(r.record))) return false;
   if (r.lastPush !== void 0 && !isText(r.lastPush)) return false;
   if (r.segments !== void 0 && (!Array.isArray(r.segments) || !r.segments.every(isSegment))) return false;
@@ -5855,7 +5857,7 @@ async function sendChildSignal(workflow, signal2) {
     return { kind: "failed", instance, type, reason: err2 instanceof Error ? err2.message : String(err2) };
   }
 }
-var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isThread, isRoundGate, isHumanGatePending, isUnitIdle, isSegment, isUnitWakeAnswer;
+var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isFullSha, isPublication, isThread, isRoundGate, isHumanGatePending, isUnitIdle, isSegment, isUnitWakeAnswer;
 var init_contract2 = __esm({
   "../../src/core/coordinator/contract.ts"() {
     "use strict";
@@ -5895,6 +5897,8 @@ var init_contract2 = __esm({
     isObject = (v) => typeof v === "object" && v !== null;
     isPr = (v) => isObject(v) && isFinite(v.number) && isText(v.url, 2048);
     isResume = (v) => isObject(v) && isFinite(v.pr) && (v.headSha === void 0 || isText(v.headSha)) && (v.url === void 0 || isText(v.url, 2048));
+    isFullSha = (v) => typeof v === "string" && /^[0-9a-f]{40}$/i.test(v);
+    isPublication = (v) => isObject(v) && typeof v.repo === "string" && REPO_SLUG.test(v.repo) && typeof v.pr === "number" && Number.isInteger(v.pr) && v.pr > 0 && isText(v.headRef) && isText(v.baseRef) && isFullSha(v.expectedHeadSha) && isText(v.publicationRef) && isObject(v.owner) && typeof v.owner.instanceId === "string" && INSTANCE_ID_PATTERN.test(v.owner.instanceId) && typeof v.owner.unit === "string" && UNIT_PATTERN.test(v.owner.unit);
     isThread = (v) => isObject(v) && isText(v.threadKey) && isOptionalText(v.sourceUrl);
     isRoundGate = (v) => isObject(v) && isAddressSeverity(v.level) && Array.isArray(v.findings) && v.findings.every((f) => typeof f === "string");
     isHumanGatePending = (v) => isObject(v) && isObject(v.pr) && typeof v.pr.number === "number" && Number.isInteger(v.pr.number) && v.pr.number > 0 && isText(v.pr.url) && typeof v.round === "number" && Number.isInteger(v.round) && v.round >= 1 && Array.isArray(v.findings) && v.findings.every((finding) => isFindingShape(finding)) && (v.verdict === "approve" || v.verdict === "request_changes") && (v.reviewRunId === void 0 || isText(v.reviewRunId)) && (v.headSha === void 0 || isText(v.headSha)) && (v.askedAt === void 0 || isFinite(v.askedAt));
@@ -7128,9 +7132,9 @@ function makeSsrfLookup(resolve13) {
     const family = (ip) => ip.includes(":") ? 6 : 4;
     resolve13(hostname3).then(
       (ips) => {
-        const blocked = ips.find((ip) => ipInBlockedRange(ip));
-        if (blocked) {
-          cb(new BlockedUrlError(`host ${hostname3} resolves to blocked address ${blocked}`));
+        const blocked2 = ips.find((ip) => ipInBlockedRange(ip));
+        if (blocked2) {
+          cb(new BlockedUrlError(`host ${hostname3} resolves to blocked address ${blocked2}`));
           return;
         }
         if (ips.length === 0) {
@@ -34683,6 +34687,9 @@ var init_instanceStore = __esm({
       async putUnits(_units) {
         return { ok: false, reason: "unavailable" };
       }
+      async claimLegacyContinuation(_expected, _recovered) {
+        return { ok: false, reason: "unavailable" };
+      }
       async listUnits(_instanceId) {
         return [];
       }
@@ -34757,6 +34764,15 @@ var init_instanceStore = __esm({
         if (d.ok === true) return { ok: true };
         throw new Error(`coordinator store /runs/coordinator/units/put: unexpected answer (HTTP ${r.status})`);
       }
+      async claimLegacyContinuation(expected, recovered) {
+        const r = await this.post("/runs/coordinator/units/claim-legacy-continuation", { expected, recovered });
+        const d = r.data;
+        if (r.status === 409 && d.reason === "stale") return { ok: false, reason: "stale" };
+        if (d.ok === true) return { ok: true };
+        throw new Error(
+          `coordinator store /runs/coordinator/units/claim-legacy-continuation: unexpected answer (HTTP ${r.status})`
+        );
+      }
       async listUnits(instanceId) {
         const r = await this.post("/runs/coordinator/units/list", { instanceId });
         const d = r.data;
@@ -36133,7 +36149,7 @@ function cardActivity(e) {
   if (e.type === "tool_call" && e.command !== void 0) return { kind: "command", tool: e.tool, command: e.command };
   return { kind: "line", text: activityLine(e) };
 }
-function quietActivity(activity) {
+function compactActivity(activity) {
   if (activity?.kind === "command") return { kind: "line", text: `\u2192 ${activity.tool}` };
   return activity;
 }
@@ -36238,7 +36254,9 @@ function cardLines(trace, opts) {
   });
   return { ...shape ? { shape } : {}, ...opts.queued ? { queued: opts.queued } : {} };
 }
-async function replyCommandOutput(io, parsed, text) {
+async function replyCommandOutput(io, parsed, text, display = {}) {
+  if (parsed.kind === "invoke" && parsed.id === "steer.run" && display.ok === true && !shows(display.verbosity ?? "quiet", "verbose"))
+    return;
   if (!io.attach || text.length <= LONG_COMMAND_REPLY_CHARS) return io.reply(text);
   const nl = text.indexOf("\n");
   const lead = nl === -1 ? text : text.slice(0, nl);
@@ -38783,6 +38801,79 @@ var init_commandChat = __esm({
   }
 });
 
+// ../../src/directives.ts
+function parseBudgetMinutes(value) {
+  if (!/^\d+$/.test(value)) return void 0;
+  const minutes = Number(value);
+  return minutes >= MIN_BOUNDARY_MINUTES ? minutes : void 0;
+}
+function lastThreadDirectives(history) {
+  const out = {};
+  for (const h of history) {
+    if (h.role !== "user") continue;
+    for (const m of h.text.matchAll(DIRECTIVE_RE)) {
+      if (m[1] === "model") out.model = m[2];
+      else if (m[1] === "effort" && isEffort(m[2])) out.effort = m[2];
+      else if (m[1] === "verbosity" && isVerbosity(m[2])) out.verbosity = m[2];
+    }
+  }
+  return out;
+}
+function parseRenewals(value) {
+  if (!/^\d+$/.test(value)) return void 0;
+  const count = Number(value);
+  return count <= GRANT_RENEWALS_MAX ? count : void 0;
+}
+function parseDirectives(input) {
+  const out = { text: input };
+  let text = input;
+  const head = HEAD_AGENT_RE.exec(input);
+  if (head !== null && AGENTS[head[1]] !== void 0) {
+    out.agent = head[1];
+    text = text.replace(head[0], " ");
+  }
+  for (const m of input.matchAll(DIRECTIVE_RE)) {
+    const [token2, key, value] = m;
+    if (key === "model") {
+      out.model = value;
+    } else if (key === "effort") {
+      if (!isEffort(value)) continue;
+      out.effort = value;
+    } else if (key === "budget") {
+      const minutes = parseBudgetMinutes(value);
+      if (minutes === void 0) continue;
+      out.budget = minutes;
+    } else if (key === "severity") {
+      if (!isAddressSeverity(value)) continue;
+      out.severity = value;
+    } else if (key === "renewals") {
+      const count = parseRenewals(value);
+      if (count === void 0) continue;
+      out.renewals = count;
+    } else {
+      if (!isVerbosity(value)) continue;
+      out.verbosity = value;
+    }
+    text = text.replace(token2, " ");
+  }
+  out.text = text.replace(/\s+/g, " ").trim();
+  return out;
+}
+var DIRECTIVE_RE, HEAD_AGENT_RE;
+var init_directives = __esm({
+  "../../src/directives.ts"() {
+    "use strict";
+    init_registry();
+    init_validate();
+    init_budgets();
+    init_effort();
+    init_shipPipeline();
+    init_verbosity();
+    DIRECTIVE_RE = /(?:^|\s)(model|effort|budget|severity|renewals|verbosity)[:=](\S+)/g;
+    HEAD_AGENT_RE = /^\s*agent[:=](\S+)/;
+  }
+});
+
 // ../../src/core/runRegistry/runControl.ts
 var RunControl;
 var init_runControl = __esm({
@@ -39782,6 +39873,7 @@ var init_commandRun = __esm({
 async function answerChatCommand(deps, ctx) {
   const { msg, io, ending, trace } = ctx;
   const root = trace.root;
+  const verbosity2 = deps.config.verbosityFor(msg.channelId, msg.userId, parseDirectives(msg.text).verbosity);
   if (deps.commands) {
     const chatCmd = parseChatCommand(msg.text, deps.commands);
     if (chatCmd) {
@@ -39801,7 +39893,7 @@ async function answerChatCommand(deps, ctx) {
             confirmations: deps.confirmations
           })
         );
-      } : () => root.span("post.reply", () => replyCommandOutput(io, chatCmd, res.text));
+      } : () => root.span("post.reply", () => replyCommandOutput(io, chatCmd, res.text, { verbosity: verbosity2, ok: res.ok }));
       await ending.sealAfterReply(async () => {
       }, replyFn);
       if (res.followUp) postSettledOutcome(res.followUp, io, root);
@@ -39817,6 +39909,7 @@ var init_fastPath = __esm({
     init_commandChat();
     init_reply();
     init_refusal();
+    init_directives();
     init_commandRun();
     init_commandRun();
   }
@@ -40110,79 +40203,6 @@ var init_references = __esm({
   }
 });
 
-// ../../src/directives.ts
-function parseBudgetMinutes(value) {
-  if (!/^\d+$/.test(value)) return void 0;
-  const minutes = Number(value);
-  return minutes >= MIN_BOUNDARY_MINUTES ? minutes : void 0;
-}
-function lastThreadDirectives(history) {
-  const out = {};
-  for (const h of history) {
-    if (h.role !== "user") continue;
-    for (const m of h.text.matchAll(DIRECTIVE_RE)) {
-      if (m[1] === "model") out.model = m[2];
-      else if (m[1] === "effort" && isEffort(m[2])) out.effort = m[2];
-      else if (m[1] === "verbosity" && isVerbosity(m[2])) out.verbosity = m[2];
-    }
-  }
-  return out;
-}
-function parseRenewals(value) {
-  if (!/^\d+$/.test(value)) return void 0;
-  const count = Number(value);
-  return count <= GRANT_RENEWALS_MAX ? count : void 0;
-}
-function parseDirectives(input) {
-  const out = { text: input };
-  let text = input;
-  const head = HEAD_AGENT_RE.exec(input);
-  if (head !== null && AGENTS[head[1]] !== void 0) {
-    out.agent = head[1];
-    text = text.replace(head[0], " ");
-  }
-  for (const m of input.matchAll(DIRECTIVE_RE)) {
-    const [token2, key, value] = m;
-    if (key === "model") {
-      out.model = value;
-    } else if (key === "effort") {
-      if (!isEffort(value)) continue;
-      out.effort = value;
-    } else if (key === "budget") {
-      const minutes = parseBudgetMinutes(value);
-      if (minutes === void 0) continue;
-      out.budget = minutes;
-    } else if (key === "severity") {
-      if (!isAddressSeverity(value)) continue;
-      out.severity = value;
-    } else if (key === "renewals") {
-      const count = parseRenewals(value);
-      if (count === void 0) continue;
-      out.renewals = count;
-    } else {
-      if (!isVerbosity(value)) continue;
-      out.verbosity = value;
-    }
-    text = text.replace(token2, " ");
-  }
-  out.text = text.replace(/\s+/g, " ").trim();
-  return out;
-}
-var DIRECTIVE_RE, HEAD_AGENT_RE;
-var init_directives = __esm({
-  "../../src/directives.ts"() {
-    "use strict";
-    init_registry();
-    init_validate();
-    init_budgets();
-    init_effort();
-    init_shipPipeline();
-    init_verbosity();
-    DIRECTIVE_RE = /(?:^|\s)(model|effort|budget|severity|renewals|verbosity)[:=](\S+)/g;
-    HEAD_AGENT_RE = /^\s*agent[:=](\S+)/;
-  }
-});
-
 // ../../src/execution/githubRepoProbe.ts
 function githubRepoProbe(opts) {
   const fetchImpl = opts.fetch ?? fetch;
@@ -41563,10 +41583,8 @@ function presetRequestOf(line4) {
 async function executeOperatorDecision(deps, ctx) {
   const { event, io, msg } = ctx;
   const surface = io.offer ? "chat" : "typed";
-  const verbose = shows(
-    deps.config.verbosityFor(msg.channelId, msg.userId, parseDirectives(msg.text).verbosity),
-    "verbose"
-  );
+  const verbosity2 = deps.config.verbosityFor(msg.channelId, msg.userId, parseDirectives(msg.text).verbosity);
+  const verbose = shows(verbosity2, "verbose");
   const answered = { kind: "answered" };
   if (ctx.owner?.kind === "pipeline") return { kind: "fold" };
   if (event.outcome === "question") {
@@ -41673,7 +41691,7 @@ async function executeOperatorDecision(deps, ctx) {
     if (verbose) await io.reply(receipt);
     const res = await runChatCommand(deps, msg, io, invocation, ctx.ending, ctx.trace, { operator: executedEvent });
     carried = true;
-    if (res.text.length > 0) await io.reply(res.text);
+    if (res.text.length > 0) await replyCommandOutput(io, invocation, res.text, { verbosity: verbosity2, ok: res.ok });
   }
   if (!carried) await recordOperatorDecision(deps, msg, event, ctx.ending, ctx.trace);
   return answered;
@@ -42352,7 +42370,7 @@ async function openAckCard(deps, ctx) {
   });
   if (route2) shell.note("debug", routeReasonLabel(route2.reason, route2.collapsed));
   const card = coalesceStatus(
-    await root.span("dispatch.ack_card", () => io.status(shell.ack())),
+    await root.span("dispatch.ack_card", () => io.status(shell.ack(), { verbosity: resolved.verbosity })),
     deps.statusUpdateMinMs ?? STATUS_UPDATE_MIN_MS
   );
   trace.bindCard({ setupLabel: (label) => shell.setSetupLabel(label) });
@@ -44079,7 +44097,7 @@ function watchedChild(io, on) {
       on.replied(text);
       await io.reply(text);
     },
-    status: (initial) => io.status(initial),
+    status: (initial, display) => io.status(initial, display),
     history: () => io.history(),
     runStarted: (started) => {
       io.runStarted?.(started);
@@ -46164,6 +46182,7 @@ async function claimRun(deps, ctx) {
       parentInstanceId: coordinator.parentInstanceId,
       ...unit !== void 0 ? { unit } : {},
       ...coordinator.base !== void 0 ? { base: coordinator.base } : {},
+      ...coordinator.publication !== void 0 ? { publication: coordinator.publication } : {},
       at: clock4()
     });
   }
@@ -47446,7 +47465,7 @@ function established(facts2) {
   else if (w?.kind === "salvaged")
     tree = `What the tree held was pushed to \`${w.branch}\`${w.head ? ` at \`${shortSha2(w.head)}\`` : ""} by the budget salvage, unreviewed \u2014 a follow-up starts from it.`;
   else if (w?.kind === "left")
-    tree = w.fate === "kept" ? `${counted(w)} sit in the workspace, kept for this thread until it idles out \u2014 a follow-up here reuses them.` : w.fate === "discarded" ? `${counted(w)} were left in the tree and discarded at the run's end.` : `${counted(w)} were left in the tree, which is torn down since a command may still be running in it.`;
+    tree = w.fate === "kept" ? `${counted(w)} sit in the workspace, kept for this thread until it idles out \u2014 a follow-up here reuses them.` : w.fate === "retained_unverified" ? `${counted(w)} remain in the attached workspace after the existing-PR push was blocked; retention beyond this run is unverified, so no continuation is promised.` : w.fate === "discarded" ? `${counted(w)} were left in the tree and discarded at the run's end.` : `${counted(w)} were left in the tree, which is torn down since a command may still be running in it.`;
   const description = facts2?.description === "submitted" ? "The PR description was submitted." : facts2?.description === "not_submitted" ? "No PR description was submitted." : "";
   return [tree, description].filter((s) => s !== "").join(" ");
 }
@@ -49979,10 +49998,28 @@ function judgeBashTimeout(timeout, ctx) {
   return refused4(commandPastLoopEndRefusal(Math.round(timeout), Math.max(0, Math.floor(leftMs / 1e3))));
 }
 function judgePush(tail, ctx) {
-  const [remote, refspec] = pushArguments(tail);
+  const [remote, refspec, ...additionalRefspecs] = pushArguments(tail);
   if (remote !== void 0 && remote !== "origin") {
     return refused4(`repo:use \u2014 push to remote \`${remote}\`, not the run's repository (origin)`);
   }
+  if (ctx.publication !== void 0) {
+    const publication = ctx.publication.authority;
+    if ("blocked" in publication) return refused4(`repo:use \u2014 existing-PR publication blocked: ${publication.blocked}`);
+    if (refspec === void 0)
+      return refused4("repo:use \u2014 existing-PR publication requires the explicit owned destination");
+    if (additionalRefspecs.length > 0)
+      return refused4("repo:use \u2014 existing-PR publication allows exactly one owned destination");
+    const destination2 = refspec.replace(/^\+/, "").split(":").pop() ?? refspec;
+    const branch3 = destination2 === "HEAD" ? ctx.branch : destination2.replace(/^refs\/heads\//, "");
+    if (branch3 !== publication.ref)
+      return refused4(`repo:use \u2014 push to \`${branch3}\`, not the owned publication ref ${publication.ref}`);
+    const lease = `--force-with-lease=refs/heads/${publication.ref}:${publication.expectedHeadSha}`;
+    if (!tail.split(/\s+/).includes(lease))
+      return refused4(
+        `repo:use \u2014 existing-PR publication requires \`${lease}\` so concurrent movement fails atomically`
+      );
+    return allowed;
+  }
   if (refspec === void 0) return allowed;
   const destination = refspec.replace(/^\+/, "").split(":").pop() ?? refspec;
   if (ctx.branch !== void 0) {
@@ -50102,7 +50139,7 @@ function relayedToolDefinitions(harness) {
 }
 function authorizeToolCall(harness, ask) {
   harness.gateSaw(ask.toolCallId);
-  const blocked = harness.toolsBlocked();
+  const blocked2 = harness.toolsBlocked();
   const refuse3 = (reason2) => {
     harness.emit({
       type: "run_note",
@@ -50111,7 +50148,7 @@ function authorizeToolCall(harness, ask) {
     });
     return { allow: false, reason: reason2 };
   };
-  if (blocked !== void 0) return refuse3(blocked);
+  if (blocked2 !== void 0) return refuse3(blocked2);
   if (harness.tools.some((t) => t.name === ask.tool)) return { allow: true };
   const verdict = judgeToolCall(ask.tool, ask.input, harness.rules);
   if (verdict.verdict === "allowed") return { allow: true };
@@ -51991,6 +52028,49 @@ var init_resume = __esm({
   }
 });
 
+// ../../src/core/existingPrPublication.ts
+function verifyExistingPrPublication(durable, local, remote) {
+  if (durable === void 0) return blocked("the durable existing-PR binding is missing");
+  if (!fullSha(durable.expectedHeadSha)) return blocked("the durable expected head is not a full commit SHA");
+  if (durable.headRef !== durable.publicationRef)
+    return blocked("the durable head ref and owned publication ref do not agree");
+  if (local.repo !== durable.repo) return blocked("the resolved repository does not match the durable binding");
+  if (local.pr !== durable.pr) return blocked("the resolved pull request does not match the durable binding");
+  if (local.ref !== durable.headRef) return blocked("the resolved head ref does not match the durable binding");
+  if (local.baseRef !== durable.baseRef) return blocked("the resolved base ref does not match the durable binding");
+  if (!fullSha(local.requestHeadSha)) return blocked("the request head is missing or not a full commit SHA");
+  if (local.requestHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
+    return blocked("the request head does not match the durable expected commit");
+  if (local.workspaceRef !== durable.publicationRef)
+    return blocked("the checked-out publication ref does not match the durable binding");
+  if (!fullSha(local.workspaceHeadSha)) return blocked("the checked-out head is missing or not a full commit SHA");
+  if (local.workspaceHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
+    return blocked("the checked-out head does not match the durable expected commit");
+  if (!sameOwner(local.owner, durable.owner)) return blocked("the publication owner changed");
+  if (remote === void 0) return blocked("the fresh pull-request read is unavailable");
+  if (remote.state !== "open") return blocked("the bound pull request is no longer open");
+  if (remote.sameRepoHead !== true) return blocked("the pull request head is not in the bound repository");
+  if (remote.headBranchExists !== true) return blocked("the pull request head branch is missing or unknown");
+  if (remote.headRef !== durable.headRef) return blocked("the pull request head ref moved");
+  if (remote.baseRef !== durable.baseRef) return blocked("the pull request base ref moved");
+  if (!fullSha(remote.headSha)) return blocked("the fresh pull-request head is missing or not a full commit SHA");
+  if (remote.headSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
+    return blocked("the pull request head moved from the durable expected commit");
+  return {
+    ok: true,
+    publication: { ref: durable.publicationRef, expectedHeadSha: durable.expectedHeadSha.toLowerCase() }
+  };
+}
+var fullSha, sameOwner, blocked;
+var init_existingPrPublication = __esm({
+  "../../src/core/existingPrPublication.ts"() {
+    "use strict";
+    fullSha = (value) => value !== void 0 && /^[0-9a-f]{40}$/i.test(value);
+    sameOwner = (left, right) => left?.instanceId === right.instanceId && left.unit === right.unit;
+    blocked = (reason2) => ({ ok: false, reason: reason2 });
+  }
+});
+
 // ../../src/execution/githubComments.ts
 async function postReviewComment(target, body) {
   const codePoints = [...body].length;
@@ -52234,7 +52314,26 @@ async function salvageBudgetPush(executor, opts, span) {
     }
     const unpushed = parseCountOutput(await run2("git rev-list --count HEAD --not --remotes")) ?? 0;
     if (!dirty && !endingCheckpoint && unpushed === 0) return { pushed: false, summary: words.nothing };
-    await run2(`git push origin ${shellQuote(`HEAD:refs/heads/${opts.branch}`)}`);
+    if (opts.publication !== void 0 && "blocked" in opts.publication)
+      return {
+        pushed: false,
+        summary: `${words.failedLead}: existing-PR publication is blocked (${opts.publication.blocked}) \u2014 the commit remains unpublished in the bound workspace; no alternate ref was created`
+      };
+    const lease = opts.publication !== void 0 ? ` --force-with-lease=${shellQuote(`refs/heads/${opts.publication.ref}:${opts.publication.expectedHeadSha}`)}` : "";
+    try {
+      await run2(`git push${lease} origin ${shellQuote(`HEAD:refs/heads/${opts.branch}`)}`);
+    } catch (err2) {
+      if (opts.publication !== void 0) {
+        const detail = err2 instanceof Error ? err2.message : String(err2);
+        const publicationBlocked = `the atomic leased push was rejected: ${detail}`;
+        return {
+          pushed: false,
+          publicationBlocked,
+          summary: `${words.failedLead}: existing-PR publication is blocked (${publicationBlocked}) \u2014 the commit remains unpublished in the bound workspace; no alternate ref was created`
+        };
+      }
+      throw err2;
+    }
     const head = parseRevParseOutput(await probe("git rev-parse HEAD"));
     return {
       pushed: true,
@@ -52961,6 +53060,12 @@ async function runLoop(deps, ctx) {
       return void 0;
     }
   })();
+  let existingPrPublication;
+  let existingPrPublicationFence;
+  const blockExistingPrPublication = (reason2) => {
+    existingPrPublication = { blocked: reason2 };
+    if (existingPrPublicationFence !== void 0) existingPrPublicationFence.authority = existingPrPublication;
+  };
   const identitySeam = deps.identityRewrite;
   const startStateRead = identitySeam !== void 0 && isCodingPrRun && repoCtx.repo !== void 0 ? (async () => {
     const repo = repoCtx.repo;
@@ -52997,14 +53102,14 @@ async function runLoop(deps, ctx) {
     );
     return pace ? ` \xB7 ${pace}` : "";
   };
+  const showsActivity = shows(resolved.verbosity, "verbose");
   const chatty = shows(resolved.verbosity, "debug");
   const showBookkeeping = shows(resolved.verbosity, "verbose");
   const currentFrame = () => shell.live({
-    // the pace mark rides every level (the stall signal is a fact, not chatter); the quiet suffix is debug's
-    suffix: chatty ? `${quietSuffix(clock4() - lastActivityAt, inFlightTool)}${cardPace()}` : cardPace(),
+    suffix: showsActivity ? chatty ? `${quietSuffix(clock4() - lastActivityAt, inFlightTool)}${cardPace()}` : cardPace() : "",
     notice: shutdownNotice(),
     detail: [checklist],
-    activity: chatty ? lastActivity : quietActivity(lastActivity)
+    activity: showsActivity ? chatty ? lastActivity : compactActivity(lastActivity) : void 0
   });
   const checklistAsLeft = () => checklist;
   const checklistCheckedOff = () => checklist?.replace(/^(\s*)[○✱](?=\s)/gm, "$1\u2713");
@@ -53239,8 +53344,18 @@ async function runLoop(deps, ctx) {
     });
     const salvaged = "skipped" in target ? { pushed: false, summary: target.skipped } : await root.span(
       cue === "budget" ? "run.budget_salvage" : "run.work_salvage",
-      (span) => salvageBudgetPush(executor, { branch: target.branch, cue }, span)
+      (span) => salvageBudgetPush(
+        executor,
+        {
+          branch: target.branch,
+          cue,
+          ...existingPrPublication !== void 0 ? { publication: existingPrPublication } : {}
+        },
+        span
+      )
     );
+    if ("publicationBlocked" in salvaged && salvaged.publicationBlocked !== void 0)
+      blockExistingPrPublication(salvaged.publicationBlocked);
     const cleanCompletion = cue === "completion" && !salvaged.pushed && (/ended with nothing to preserve/i.test(salvaged.summary) || "skipped" in target && (observedUncommitted ?? 0) === 0 && (observedUnpushed ?? 0) === 0);
     if (cleanCompletion) return;
     workSalvageAttempted = true;
@@ -53255,7 +53370,10 @@ async function runLoop(deps, ctx) {
       salvagedTo = { branch: target.branch, head: salvaged.head };
     } else if (salvaged.pushed && !("skipped" in target)) salvagedTo = { branch: target.branch };
     if (salvaged.pushed) await observeWorkspaceNow();
-    else if ("skipped" in target || /failed|not attempted/i.test(salvaged.summary))
+    else if (existingPrPublication !== void 0 && "blocked" in existingPrPublication) {
+      await observeWorkspaceNow();
+      shell.note("quiet", salvaged.summary);
+    } else if ("skipped" in target || /failed|not attempted/i.test(salvaged.summary))
       shell.note("quiet", salvaged.summary);
   };
   let relaunchEndedRun = false;
@@ -53281,7 +53399,9 @@ async function runLoop(deps, ctx) {
     return true;
   };
   const tailSkipped = () => run2.control.requested === "hard" || relaunchEndedRun || latchReviewStoppedBeforeStart();
+  const keepBlockedPublicationWorkspace = () => existingPrPublication !== void 0 && "blocked" in existingPrPublication && run2.control.requested !== "hard" && !commandInFlight && !gateBypassed && ((observedUncommitted ?? 0) > 0 || (observedUnpushed ?? 0) > 0);
   const releaseWorkspace = (span) => {
+    if (keepBlockedPublicationWorkspace()) return Promise.resolve();
     const events2 = recordEvents();
     const pushed = pushedBranchesOf(events2);
     return round2.release({
@@ -53434,7 +53554,38 @@ async function runLoop(deps, ctx) {
       if (!providerCfg)
         throw new Error(`the ${harness.name} harness found no provider named ${providerName} in the config`);
       const prBase = repoCtx.baseRef ?? await coordinatorBase;
-      const ownBranch = prBase !== void 0 ? binding?.ref ?? repoCtx.ref : void 0;
+      if (coordinator?.publication !== void 0) {
+        const publication = coordinator.publication;
+        const fresh = await (deps.fetchPrFacts ?? fetchPullRequestFacts)({
+          repo: publication.repo,
+          number: publication.pr
+        }).catch(() => void 0);
+        const verified = verifyExistingPrPublication(
+          publication,
+          {
+            repo: repoCtx.repo,
+            pr: repoCtx.pr,
+            ref: repoCtx.ref,
+            baseRef: prBase,
+            requestHeadSha: repoCtx.headSha,
+            workspaceRef: binding?.ref,
+            workspaceHeadSha: binding?.sha,
+            owner: {
+              instanceId: coordinator.parentInstanceId,
+              unit: unitOfIdempotencyKey(coordinator.idempotencyKey) ?? ""
+            }
+          },
+          fresh
+        );
+        existingPrPublication = verified.ok ? verified.publication : { blocked: verified.reason };
+        existingPrPublicationFence = { authority: existingPrPublication };
+        if (!verified.ok)
+          shell.note(
+            "quiet",
+            `Existing-PR publication is blocked: ${verified.reason}. Work stays on the bound checkout; no alternate branch or pull request will be published.`
+          );
+      }
+      const ownBranch = coordinator?.publication !== void 0 ? coordinator.publication.publicationRef : prBase !== void 0 ? binding?.ref ?? repoCtx.ref : void 0;
       const protectedBranches = [
         ...new Set(
           (prBase !== void 0 ? [prBase] : [binding?.ref, repoCtx.ref]).filter(
@@ -53494,8 +53645,18 @@ async function runLoop(deps, ctx) {
               const branch2 = ownBranch;
               const salvaged = await root.span(
                 "run.compaction_salvage",
-                (span) => salvageBudgetPush(executor, { branch: branch2, cue: "compaction" }, span)
+                (span) => salvageBudgetPush(
+                  executor,
+                  {
+                    branch: branch2,
+                    cue: "compaction",
+                    ...existingPrPublication !== void 0 ? { publication: existingPrPublication } : {}
+                  },
+                  span
+                )
               );
+              if (salvaged.publicationBlocked !== void 0)
+                blockExistingPrPublication(salvaged.publicationBlocked);
               onEvent({
                 type: "run_note",
                 kind: "compaction_salvage",
@@ -53508,7 +53669,8 @@ async function runLoop(deps, ctx) {
           rules: {
             checkout: binding?.workspace ?? "/workspace",
             ...ownBranch !== void 0 ? { branch: ownBranch } : {},
-            protectedBranches
+            protectedBranches,
+            ...existingPrPublicationFence !== void 0 ? { publication: existingPrPublicationFence } : {}
           },
           ...round2.selection.backend ? { backend: round2.selection.backend } : {},
           span: root,
@@ -53724,6 +53886,12 @@ async function runLoop(deps, ctx) {
     if (descriptionTurnRan) await preserveCodingChildWork("completion");
     await endHarness();
     const leftBehind = isCodingPrRun && !tailSkipped() && !workSalvageAttempted ? workLeftBehindOf({ uncommittedChanges: observedUncommitted, unpushedCommits: observedUnpushed }) : void 0;
+    const blockedCheckpoint = keepBlockedPublicationWorkspace() && existingPrPublication !== void 0 && "blocked" in existingPrPublication && observedUncommitted !== void 0 && observedUnpushed !== void 0 && (observedUncommitted > 0 || observedUnpushed > 0) ? {
+      reason: existingPrPublication.blocked,
+      uncommitted: observedUncommitted,
+      unpushed: observedUnpushed,
+      ...observedHead !== void 0 ? { head: observedHead } : {}
+    } : void 0;
     const endingFacts = () => {
       if (profile.machine === "none") return { workspace: { kind: "none" } };
       if (!isCodingPrRun || tailSkipped()) return { workspace: { kind: "unread" } };
@@ -53742,11 +53910,16 @@ async function runLoop(deps, ctx) {
           kind: "left",
           uncommitted: observedUncommitted,
           unpushed: observedUnpushed,
-          fate: commandInFlight ? "torn_down" : profile.machine === "repo-resident" ? "discarded" : "kept"
+          fate: blockedCheckpoint !== void 0 ? "retained_unverified" : commandInFlight ? "torn_down" : profile.machine === "repo-resident" ? "discarded" : "kept"
         };
       return { workspace, description: prDescription !== void 0 ? "submitted" : "not_submitted" };
     };
-    if (leftBehind) {
+    if (blockedCheckpoint !== void 0) {
+      const checkpoint = blockedCheckpoint.head ? ` at ${blockedCheckpoint.head.slice(0, 7)}` : "";
+      const summary = `the existing-PR push is blocked (${blockedCheckpoint.reason}); kept the local checkpoint${checkpoint} with ${blockedCheckpoint.uncommitted} uncommitted change(s) and ${blockedCheckpoint.unpushed} unpushed commit(s) in the run workspace; no alternate ref or pull request was created, and retention beyond this run is unverified`;
+      events.publish({ type: "run_note", kind: "publication_blocked", summary: oneLine(summary), at: clock4() });
+      shell.note("quiet", `\u26A0\uFE0F ${summary}`);
+    } else if (leftBehind) {
       events.publish({
         type: "run_note",
         kind: "work_left_behind",
@@ -53762,7 +53935,7 @@ async function runLoop(deps, ctx) {
         at: clock4()
       });
     }
-    if (isCodingPrRun && !tailSkipped() && !endingSalvageAttempted) {
+    if (isCodingPrRun && !tailSkipped() && !endingSalvageAttempted && !(existingPrPublication !== void 0 && "blocked" in existingPrPublication)) {
       const instance = coordinator && deps.coordinatorInstances ? await deps.coordinatorInstances.get(coordinator.parentInstanceId).catch(() => void 0) : void 0;
       const requester = instance?.userId === msg.userId ? instance : msg;
       const requestedLogin = identitySeam !== void 0 ? await identitySeam.requestedLogin(requester.userId).catch(() => void 0) : void 0;
@@ -54033,6 +54206,7 @@ var init_runLoop = __esm({
     "use strict";
     init_actor();
     init_predicate();
+    init_contract2();
     init_decisionRecordReservation();
     init_profile();
     init_provider();
@@ -54048,6 +54222,7 @@ var init_runLoop = __esm({
     init_resume();
     init_githubPulls();
     init_repoContext();
+    init_existingPrPublication();
     init_prDescription();
     init_handoff();
     init_reviewVerdict();
@@ -54202,7 +54377,7 @@ async function shipPreflight(input) {
             `\u{1F6AB} ${where}'s head branch lives on a fork, not on \`${repo}\` \u2014 ship cannot drive it.`
           );
         }
-        const branch2 = facts2.headRef ?? repoCtx.ref;
+        const branch2 = facts2.headRef;
         if (!branch2) {
           return refuse2(
             "ship_preflight_head_unknown",
@@ -54211,10 +54386,34 @@ async function shipPreflight(input) {
             `\u{1F6AB} Could not determine ${where}'s head branch, so ship cannot bind the thread's worktree to it \u2014 refusing fail-closed.`
           );
         }
-        const ownBase = facts2.baseRef ?? repoCtx.baseRef;
+        const headSha = facts2.headSha;
+        if (headSha === void 0 || !/^[0-9a-f]{40}$/i.test(headSha)) {
+          return refuse2(
+            "ship_preflight_head_unknown",
+            "full head commit unknown",
+            "not started (head commit unknown)",
+            `\u{1F6AB} Could not determine ${where}'s full head commit, so ship cannot fence publication to it \u2014 refusing fail-closed.`
+          );
+        }
+        if (facts2.baseRef === void 0) {
+          return refuse2(
+            "ship_preflight_head_unknown",
+            "base branch unknown",
+            "not started (base branch unknown)",
+            `\u{1F6AB} Could not determine ${where}'s base branch, so ship cannot bind publication to it \u2014 refusing fail-closed.`
+          );
+        }
+        const ownBase = facts2.baseRef;
         const ownBaseExists = ownBase !== void 0 && input.refExists ? await input.refExists(repo, ownBase).catch(() => void 0) : void 0;
-        const baseFallback = ownBase !== void 0 && ownBaseExists === false ? { requested: ownBase } : void 0;
-        const base = resolveBaseRef([ownBaseExists === false ? void 0 : ownBase], info?.defaultBranch);
+        if (ownBaseExists === false) {
+          return refuse2(
+            "ship_preflight_head_unknown",
+            "pull request base branch missing",
+            "not started (base branch missing)",
+            `\u{1F6AB} ${where}'s base branch \`${ownBase}\` is not present in \`${repo}\`, so ship cannot establish an exact publication binding \u2014 refusing fail-closed.`
+          );
+        }
+        const base = resolveBaseRef([ownBase], info?.defaultBranch);
         const autoMerge = facts2.autoMergeEnabled !== void 0 ? { autoMergeEnabled: facts2.autoMergeEnabled } : {};
         if (task) {
           return {
@@ -54223,8 +54422,7 @@ async function shipPreflight(input) {
               repo,
               branch: branch2,
               base,
-              adopt: { pr: repoCtx.pr, ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {} },
-              ...baseFallback !== void 0 ? { baseFallback } : {},
+              adopt: { pr: repoCtx.pr, headSha, ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {} },
               ...autoMerge
             }
           };
@@ -54237,10 +54435,9 @@ async function shipPreflight(input) {
             base,
             resume: {
               pr: repoCtx.pr,
-              headSha: facts2.headSha ?? repoCtx.headSha,
+              headSha,
               ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {}
             },
-            ...baseFallback !== void 0 ? { baseFallback } : {},
             ...autoMerge
           }
         };
@@ -54432,15 +54629,27 @@ async function rowsFor(deps, p, selected, instanceId, carried) {
       const previous = carried?.get(u.id);
       const taskKey = p.recordTasks?.[u.id];
       const record3 = taskKey !== void 0 ? await reserve(p.identity.repo, taskKey, previous?.record) : previous?.record;
+      const branch2 = p.entryBranch ?? u.branch;
+      const existing = p.adopt ?? p.resume;
+      const publication = existing !== void 0 && p.entryBranch !== void 0 ? {
+        repo: p.identity.repo,
+        pr: existing.pr,
+        headRef: p.entryBranch,
+        baseRef: p.base,
+        expectedHeadSha: existing.headSha,
+        publicationRef: p.entryBranch,
+        owner: { instanceId, unit: u.id }
+      } : void 0;
       return {
         instanceId,
         unit: u.id,
         slug: u.slug,
         title: u.title,
-        branch: p.entryBranch ?? u.branch,
+        branch: branch2,
         dependsOn: u.dependsOn,
         rounds: [],
         ...p.resume !== void 0 ? { resume: p.resume } : {},
+        ...publication !== void 0 ? { publication } : {},
         ...previous?.lastPush !== void 0 ? { lastPush: previous.lastPush } : {},
         ...record3 !== void 0 ? { record: record3 } : {}
       };
@@ -54577,75 +54786,103 @@ async function handOffToCoordinatorUnchecked(deps, input) {
 }
 async function start(deps, input, instance, units, where, write) {
   const log = deps.log ?? console.log;
-  const put = write === "replace" ? await deps.instances.replace(instance) : await deps.instances.put(instance);
-  if (!put.ok) {
-    if (put.reason === "unavailable")
+  const reservation = await input.beforeStart?.();
+  if (reservation?.ok === false)
+    return { status: "aborted", reply: reservation.refusal.text, refusal: reservation.refusal };
+  let started = false;
+  try {
+    const put = write === "replace" ? await deps.instances.replace(instance) : await deps.instances.put(instance);
+    if (!put.ok) {
+      if (put.reason === "unavailable")
+        return refused5(
+          "plan_history_unavailable",
+          "\u26A0\uFE0F The plan runner needs run history on the state Worker (`runHistory.worker`): the instance record could not be written, so nothing ran."
+        );
       return refused5(
-        "plan_history_unavailable",
-        "\u26A0\uFE0F The plan runner needs run history on the state Worker (`runHistory.worker`): the instance record could not be written, so nothing ran."
+        "plan_runner_conflict",
+        `\u{1F6AB} A runner for \`${instance.id}\` was just recorded by another request, so this request started nothing; the recorded runner owns the pipeline.`
       );
-    return refused5(
-      "plan_runner_conflict",
-      `\u{1F6AB} A runner for \`${instance.id}\` was just recorded by another request, so this request started nothing; the recorded runner owns the pipeline.`
-    );
-  }
-  const rows = await deps.instances.putUnits(units);
-  if (!rows.ok)
-    return refused5(
-      "plan_history_unavailable",
-      "\u26A0\uFE0F The plan runner needs run history on the state Worker: the unit rows could not be written, so nothing ran."
-    );
-  const accepted = [...input.msg.images ?? [], ...input.msg.documents ?? []];
-  if (instance.plan?.path === void 0 && accepted.length > 0) {
-    const unit = units[0];
-    const seeded = await deps.instances.appendEvent(
-      { instanceId: instance.id, unit: unit.unit },
-      {
-        id: `${instance.id}:${unit.unit}:ship-request`,
-        sender: input.msg.userId,
-        ...input.msg.userName !== void 0 ? { senderName: input.msg.userName } : {},
-        text: "Attachments from the ship request.",
-        attachments: accepted,
-        mode: "steer",
-        at: input.now
-      }
-    );
-    if (!seeded.ok)
+    }
+    const rows = await deps.instances.putUnits(units);
+    if (!rows.ok)
       return refused5(
         "plan_history_unavailable",
-        "\u26A0\uFE0F The plan runner needs run history on the state Worker: the ship request's attachments could not be written, so nothing ran."
+        "\u26A0\uFE0F The plan runner needs run history on the state Worker: the unit rows could not be written, so nothing ran."
       );
-  }
-  let answer;
-  try {
-    answer = await deps.create(instance.id);
-  } catch (err2) {
-    answer = { kind: "unanswered", reason: describe7(err2) };
-  }
-  switch (answer.kind) {
-    case "created": {
-      log(`[ship] ${input.msg.threadKey}: handed to the plan runner ${instance.id} (${units.length} unit(s))`);
-      const replaced = write === "replace" ? ["the records of an earlier attempt that never started were replaced"] : [];
-      return {
-        status: "completed",
-        reply: handedOff([...where, ...replaced]),
-        instanceId: instance.id
-      };
-    }
-    case "duplicate": {
-      const status3 = answer.status !== void 0 ? `, status: ${answer.status}` : "";
-      return refused5(
-        "plan_instance_orphaned",
-        `\u{1F6AB} A Workflow instance \`${instance.id}\` already exists on the platform${status3} but the state Worker knew nothing of it \u2014 a person decides; re-issuing will not resume it.`
+    const accepted = [...input.msg.images ?? [], ...input.msg.documents ?? []];
+    if (instance.plan?.path === void 0 && accepted.length > 0) {
+      const unit = units[0];
+      const seeded = await deps.instances.appendEvent(
+        { instanceId: instance.id, unit: unit.unit },
+        {
+          id: `${instance.id}:${unit.unit}:ship-request`,
+          sender: input.msg.userId,
+          ...input.msg.userName !== void 0 ? { senderName: input.msg.userName } : {},
+          text: "Attachments from the ship request.",
+          attachments: accepted,
+          mode: "steer",
+          at: input.now
+        }
       );
+      if (!seeded.ok)
+        return refused5(
+          "plan_history_unavailable",
+          "\u26A0\uFE0F The plan runner needs run history on the state Worker: the ship request's attachments could not be written, so nothing ran."
+        );
     }
-    case "failed":
-    case "unanswered":
-      log(`[ship] ${input.msg.threadKey}: the plan runner ${instance.id} could not be started \u2014 ${answer.reason}`);
-      return refused5(
-        "plan_start_failed",
-        `\u26A0\uFE0F This is a bug: the plan runner could not be started (${answer.reason}), nothing ran, and no automatic start retry was scheduled.`
-      );
+    if (reservation?.ok === true) {
+      const unit = units[0];
+      if (unit === void 0)
+        return refused5(
+          "setup_failed",
+          "\u26A0\uFE0F The plan runner had no durable unit to own at its final start gate, so nothing ran."
+        );
+      try {
+        await reservation.commit({ instanceId: instance.id, unit: unit.unit });
+      } catch (err2) {
+        return refused5(
+          "setup_failed",
+          `\u26A0\uFE0F The plan runner could not transfer existing-pull-request ownership to its new attempt (${describe7(err2)}), so nothing ran.`
+        );
+      }
+    }
+    let answer;
+    try {
+      answer = await deps.create(instance.id);
+    } catch (err2) {
+      answer = { kind: "unanswered", reason: describe7(err2) };
+    }
+    switch (answer.kind) {
+      case "created": {
+        if (reservation?.ok === true) reservation.complete();
+        started = true;
+        log(`[ship] ${input.msg.threadKey}: handed to the plan runner ${instance.id} (${units.length} unit(s))`);
+        const replaced = write === "replace" ? ["the records of an earlier attempt that never started were replaced"] : [];
+        return {
+          status: "completed",
+          reply: handedOff([...where, ...replaced]),
+          instanceId: instance.id
+        };
+      }
+      case "duplicate": {
+        const status3 = answer.status !== void 0 ? `, status: ${answer.status}` : "";
+        return refused5(
+          "plan_instance_orphaned",
+          `\u{1F6AB} A Workflow instance \`${instance.id}\` already exists on the platform${status3} but the state Worker knew nothing of it \u2014 a person decides; re-issuing will not resume it.`
+        );
+      }
+      case "failed":
+      case "unanswered":
+        log(`[ship] ${input.msg.threadKey}: the plan runner ${instance.id} could not be started \u2014 ${answer.reason}`);
+        return refused5(
+          "plan_start_failed",
+          `\u26A0\uFE0F This is a bug: the plan runner could not be started (${answer.reason}), nothing ran, and no automatic start retry was scheduled.`
+        );
+    }
+    const unreachable3 = answer;
+    return unreachable3;
+  } finally {
+    if (!started && reservation?.ok === true) await reservation.abort();
   }
 }
 function handedOff(facts2) {
@@ -55006,6 +55243,7 @@ async function runShipBranch(deps, msg, io, ctx) {
           ...msg.authenticatedAs !== void 0 ? { authenticatedAs: msg.authenticatedAs } : {},
           ...msg.postedBy !== void 0 ? { postedBy: msg.postedBy } : {},
           ...entry.resume !== void 0 ? { pr: entry.resume.pr } : {},
+          verbosity: ctx.verbosity,
           profile
         },
         card: card.handle ?? null,
@@ -55098,6 +55336,7 @@ async function runShipBranch(deps, msg, io, ctx) {
           entry,
           requestText: directives.text,
           ...ctx.reissuePlanId !== void 0 ? { reissuePlanId: ctx.reissuePlanId } : {},
+          ...ctx.beforeCoordinatorStart !== void 0 ? { beforeStart: ctx.beforeCoordinatorStart } : {},
           msg,
           agentSource: ctx.agentSource,
           runId: run2.id,
@@ -55349,7 +55588,13 @@ function carriedCoordinatorTag(row2, events) {
   if (typeof parentInstanceId !== "string" || typeof idempotencyKey !== "string") return void 0;
   const tag = events.find((e) => e.type === "coordinator_tag");
   const base = tag?.type === "coordinator_tag" ? tag.base : void 0;
-  return { parentInstanceId, idempotencyKey, ...base !== void 0 ? { base } : {} };
+  const publication = tag?.type === "coordinator_tag" ? tag.publication : void 0;
+  return {
+    parentInstanceId,
+    idempotencyKey,
+    ...base !== void 0 ? { base } : {},
+    ...publication !== void 0 ? { publication } : {}
+  };
 }
 function lostWorkspaceNote(why, restarts) {
   const lost = `resumed after a restart: the run's workspace could not be re-attached (${why})`;
@@ -55885,6 +56130,29 @@ function continuationBudgetOf(instance, unit) {
   if (remainingRounds <= 0) return { kind: "exhausted", budget: "review-round" };
   return { kind: "remaining", caps: { maxRounds: remainingRounds, maxMinutes: remainingMinutes } };
 }
+async function legacyReviewedHeadOf(runs, instance, unit, prNumber) {
+  const listed = await runs.listUnitRuns(unitKeyOf({ instanceId: instance.id, unit: unit.unit }), { kind: "all" }).catch(() => void 0);
+  if (listed === void 0 || !listed.ok || listed.value.unit !== unitKeyOf({ instanceId: instance.id, unit: unit.unit }) || listed.value.instanceId !== instance.id || listed.value.id !== unit.unit || listed.value.instance.id !== instance.id || listed.value.instance.repo.toLowerCase() !== instance.repo.toLowerCase())
+    return void 0;
+  const prefix = `${instance.id}:${unit.unit}/`;
+  const owned = listed.value.runs.filter(
+    (run2) => run2.finished && run2.status === "completed" && run2.parentInstanceId === instance.id && run2.idempotencyKey?.startsWith(prefix) === true && run2.userId === instance.userId && run2.repo?.toLowerCase() === instance.repo.toLowerCase()
+  );
+  const coding = new Set(
+    owned.flatMap(
+      (run2) => run2.agent === "coding" && run2.pr?.number === prNumber && typeof run2.headSha === "string" && FULL_SHA2.test(run2.headSha) ? [run2.headSha.toLowerCase()] : []
+    )
+  );
+  const approved = new Set(
+    owned.flatMap((run2) => {
+      const head = run2.reviewHead;
+      const post = run2.reviewPost;
+      return run2.agent === "review" && typeof head === "string" && FULL_SHA2.test(head) && run2.verdict?.verdict === "approve" && run2.verdict.head?.toLowerCase() === head.toLowerCase() && post?.posted === true && post.target.repo.toLowerCase() === instance.repo.toLowerCase() && post.target.number === prNumber && post.head.toLowerCase() === head.toLowerCase() && post.verdict === "approve" ? [head.toLowerCase()] : [];
+    })
+  );
+  const exact = [...approved].filter((head) => coding.has(head));
+  return exact.length === 1 ? exact[0] : void 0;
+}
 async function dispatch(deps, msg, io, opts = {}) {
   const ended = { status: "completed" };
   const resume = opts.resume;
@@ -55969,6 +56237,7 @@ async function dispatch(deps, msg, io, opts = {}) {
   let stoppedWhileAttaching;
   let resumeRowClosed = false;
   let restartRequest;
+  let releaseLegacyOwnership;
   const reservationHooks = {
     onStop: (mode) => void registered?.control.requestStop(mode),
     onFenced: () => {
@@ -55987,6 +56256,8 @@ async function dispatch(deps, msg, io, opts = {}) {
     let operatorRepo;
     let reissuePlanId;
     let reissueCaps;
+    let beforeCoordinatorStart;
+    let reserveLegacyOwnership;
     let operatorThread;
     let pageOwner;
     if (operatorMode !== "off") {
@@ -56204,7 +56475,19 @@ async function dispatch(deps, msg, io, opts = {}) {
           await recordPendingOperator();
           return ended;
         }
-        const expectedHead = owner.unit.lastPush;
+        let expectedHead = owner.unit.lastPush;
+        const recoverLegacyBinding = owner.unit.ending?.kind === "merge_ready" && (expectedHead === void 0 || owner.unit.publication === void 0);
+        if (recoverLegacyBinding) {
+          const recovered = await legacyReviewedHeadOf(runsService, instance, owner.unit, recordedPr.number);
+          if (recovered === void 0 || expectedHead !== void 0 && expectedHead.toLowerCase() !== recovered) {
+            await io.reply(
+              `Unit ${owner.unit.unit} has no single exact reviewed head in its durable child records, so continuation did not start. Nothing else ran.`
+            );
+            await recordPendingOperator();
+            return ended;
+          }
+          expectedHead = recovered;
+        }
         if (expectedHead === void 0) {
           await io.reply(
             `Unit ${owner.unit.unit} does not retain the pull request's durable expected head, so continuation did not start. Nothing else ran.`
@@ -56243,6 +56526,140 @@ async function dispatch(deps, msg, io, opts = {}) {
           await recordPendingOperator();
           return ended;
         }
+        if (recoverLegacyBinding) {
+          const baseRef = instance.base;
+          if (baseRef === void 0 || facts2.baseRef !== baseRef) {
+            await io.reply(
+              `${instance.repo}#${recordedPr.number} no longer has the pipeline's verifiable base ref, so continuation did not start. Nothing else ran.`
+            );
+            await recordPendingOperator();
+            return ended;
+          }
+          const existingBinding = owner.unit.publication;
+          if (existingBinding !== void 0 && (existingBinding.repo.toLowerCase() !== instance.repo.toLowerCase() || existingBinding.pr !== recordedPr.number || existingBinding.headRef !== owner.unit.branch || existingBinding.baseRef !== baseRef || existingBinding.expectedHeadSha.toLowerCase() !== expectedHead || existingBinding.publicationRef !== owner.unit.branch || existingBinding.owner.instanceId !== owner.instanceId || existingBinding.owner.unit !== owner.unit.unit)) {
+            await io.reply(
+              `Unit ${owner.unit.unit}'s durable publication binding no longer matches this pipeline, so continuation did not start. Nothing else ran.`
+            );
+            await recordPendingOperator();
+            return ended;
+          }
+          let currentOwner;
+          const runnerOwnership = deps.runnerOwnership;
+          try {
+            if (runnerOwnership === void 0) throw new Error("runner ownership is unavailable");
+            currentOwner = runnerOwnership.owner(instance.repo, recordedPr.number);
+          } catch {
+            await io.reply(
+              `Runner ownership for ${instance.repo}#${recordedPr.number} could not be verified, so continuation did not start. Nothing else ran.`
+            );
+            await recordPendingOperator();
+            return ended;
+          }
+          if (currentOwner !== void 0 && (currentOwner.instanceId !== owner.instanceId || currentOwner.unit !== owner.unit.unit)) {
+            await io.reply(
+              `${instance.repo}#${recordedPr.number} is owned by another runner, so continuation of ${owner.instanceId}:${owner.unit.unit} did not start. Nothing else ran.`
+            );
+            await recordPendingOperator();
+            return ended;
+          }
+          const legacyUnit = owner.unit;
+          const coordinatorInstances = deps.coordinatorInstances;
+          const reservationOwner = { instanceId: owner.instanceId, unit: owner.unit.unit };
+          const recoveredUnit = {
+            ...legacyUnit,
+            lastPush: expectedHead,
+            publication: {
+              repo: instance.repo,
+              pr: recordedPr.number,
+              headRef: legacyUnit.branch,
+              baseRef,
+              expectedHeadSha: expectedHead,
+              publicationRef: legacyUnit.branch,
+              owner: reservationOwner
+            }
+          };
+          let token2;
+          let transferredOwner;
+          releaseLegacyOwnership = () => {
+            if (token2 !== void 0) {
+              const released = runnerOwnership.releaseReservation(instance.repo, recordedPr.number, token2);
+              if (released) token2 = void 0;
+              return released;
+            }
+            if (transferredOwner !== void 0) {
+              const released = runnerOwnership.release(instance.repo, recordedPr.number, transferredOwner);
+              if (released) transferredOwner = void 0;
+              return released;
+            }
+            return true;
+          };
+          reserveLegacyOwnership = () => {
+            token2 = runnerOwnership.reserve(instance.repo, recordedPr.number, reservationOwner);
+            if (token2 !== void 0) return void 0;
+            const competing = runnerOwnership.owner(instance.repo, recordedPr.number);
+            const sameContinuation = competing?.instanceId === reservationOwner.instanceId && competing.unit === reservationOwner.unit;
+            return refusalOf(
+              "setup_failed",
+              sameContinuation ? `Unit ${legacyUnit.unit} changed while its legacy continuation was being reserved, so continuation did not start. Nothing else ran.` : `${instance.repo}#${recordedPr.number} is owned by another runner, so continuation of ${owner.instanceId}:${legacyUnit.unit} did not start. Nothing else ran.`
+            );
+          };
+          beforeCoordinatorStart = async () => {
+            const activeToken = token2;
+            if (activeToken === void 0)
+              return {
+                ok: false,
+                refusal: refusalOf(
+                  "setup_failed",
+                  `Unit ${legacyUnit.unit}'s ownership reservation was lost, so continuation did not start. Nothing else ran.`
+                )
+              };
+            const persisted = await coordinatorInstances.claimLegacyContinuation(legacyUnit, recoveredUnit).catch(() => void 0);
+            if (persisted?.ok !== true) {
+              const released = releaseLegacyOwnership?.() ?? true;
+              const reason2 = persisted?.reason === "stale" ? `Unit ${legacyUnit.unit} changed while its legacy continuation was being reserved, so continuation did not start.` : `Unit ${legacyUnit.unit}'s recovered continuation binding could not be stored, so continuation did not start.`;
+              const text = released ? `${reason2} Nothing else ran.` : `${reason2} Its ownership reservation could not be released. Nothing else ran.`;
+              return { ok: false, refusal: refusalOf("setup_failed", text) };
+            }
+            const reservedOwner = runnerOwnership.owner(instance.repo, recordedPr.number);
+            if (reservedOwner?.instanceId !== reservationOwner.instanceId || reservedOwner.unit !== reservationOwner.unit) {
+              const restored = await coordinatorInstances.claimLegacyContinuation(recoveredUnit, legacyUnit).catch(() => void 0);
+              const released = releaseLegacyOwnership?.() ?? true;
+              const rollbackFailure = restored?.ok === true ? void 0 : restored?.reason ?? "unavailable";
+              const cleanupFailure = released ? "" : " and its ownership reservation could not be released";
+              const text = rollbackFailure === void 0 ? `${instance.repo}#${recordedPr.number} changed runner ownership while its legacy continuation was being reserved${cleanupFailure}, so continuation did not start. Nothing else ran.` : `${instance.repo}#${recordedPr.number} changed runner ownership while its legacy continuation was being reserved, and the exact legacy row could not be restored (${rollbackFailure})${cleanupFailure}; continuation did not start. Nothing else ran.`;
+              return { ok: false, refusal: refusalOf("setup_failed", text) };
+            }
+            owner.unit = recoveredUnit;
+            return {
+              ok: true,
+              commit: async (nextOwner) => {
+                if (!runnerOwnership.transferReservation(
+                  instance.repo,
+                  recordedPr.number,
+                  activeToken,
+                  reservationOwner,
+                  nextOwner
+                ))
+                  throw new Error("legacy continuation ownership reservation or current owner changed");
+                token2 = void 0;
+                transferredOwner = nextOwner;
+              },
+              complete: () => {
+                transferredOwner = void 0;
+              },
+              abort: async () => {
+                const restored = await coordinatorInstances.claimLegacyContinuation(recoveredUnit, legacyUnit).catch(() => void 0);
+                const released = releaseLegacyOwnership?.() ?? true;
+                owner.unit = legacyUnit;
+                const failures = [
+                  ...restored?.ok === true ? [] : [`legacy continuation rollback failed (${restored?.reason ?? "unavailable"})`],
+                  ...released ? [] : ["legacy continuation ownership cleanup failed"]
+                ];
+                if (failures.length > 0) throw new Error(failures.join("; "));
+              }
+            };
+          };
+        }
         reissuePlanId = instance.plan.id;
         reissueCaps = continuationBudget.caps;
         const durableRequest = parseDirectives(original);
@@ -56295,6 +56712,12 @@ async function dispatch(deps, msg, io, opts = {}) {
     });
     if (profileGate.kind === "refused") return ended;
     const { profile } = profileGate;
+    const legacyOwnershipRefusal = reserveLegacyOwnership?.();
+    if (legacyOwnershipRefusal !== void 0) {
+      await io.reply(legacyOwnershipRefusal.text);
+      await recordPendingOperator();
+      return ended;
+    }
     const earlyRepoTarget = agent.name === "review" ? resolveRepoTarget(deps, {
       msg,
       history,
@@ -56473,6 +56896,7 @@ async function dispatch(deps, msg, io, opts = {}) {
         card,
         directives,
         ...reissuePlanId !== void 0 ? { reissuePlanId } : {},
+        ...beforeCoordinatorStart !== void 0 ? { beforeCoordinatorStart } : {},
         ...reissueCaps !== void 0 ? { reissueCaps: { ...reissueCaps, maxMinutes: Math.min(reissueCaps.maxMinutes, profile.minutes) } } : {},
         sticky,
         history,
@@ -57185,6 +57609,7 @@ async function dispatch(deps, msg, io, opts = {}) {
     });
   } finally {
     clearInterval(setupHeartbeat);
+    releaseLegacyOwnership?.();
     ending.drain(void 0);
     if (registered) deps.runBearers?.revoke(registered.id);
     if (resume && ledgerRun && !runLoopStarted && !resumeRowClosed) {
@@ -57372,7 +57797,7 @@ async function dispatchClick(deps, click) {
     activeRuns--;
   }
 }
-var activeRuns;
+var activeRuns, FULL_SHA2;
 var init_dispatcher = __esm({
   "../../src/core/dispatcher.ts"() {
     "use strict";
@@ -57438,6 +57863,7 @@ var init_dispatcher = __esm({
     init_types5();
     init_decisionRecordReservation();
     activeRuns = 0;
+    FULL_SHA2 = /^[0-9a-f]{40}$/i;
   }
 });
 
@@ -65712,7 +66138,8 @@ async function handle(deps, { client, statusClient }, ev, intake) {
         span,
         {
           staging: deps.artifacts !== void 0,
-          maxBytesPerMessage: deps.config.config.artifacts?.inbound?.maxBytesPerMessage ?? ARTIFACT_DEFAULTS.maxBytesPerMessage
+          maxBytesPerMessage: deps.config.config.artifacts?.inbound?.maxBytesPerMessage ?? ARTIFACT_DEFAULTS.maxBytesPerMessage,
+          verbosityFor: (channelId, userId, request2) => deps.config.verbosityFor(channelId, userId, request2)
         },
         relayAppsOf(deps),
         intake
@@ -65794,10 +66221,25 @@ async function receiveSlackMessage(client, ev, span, policy, relayApps, intake)
       threadRuns = gated.thread;
     }
   }
-  client.reactions.add({ channel: ev.channel, timestamp: ev.ts, name: ACK_EMOJI }).catch((err2) => {
-    if (!err2.message.includes("already_reacted")) console.error(`[ack] ${err2.message}`);
-  });
-  const delayNote = ev.caughtUp ? new SlackIO(client, ev).reply(catchUpDelayNote(ev.ts, systemClock())).catch((err2) => {
+  const requester = await resolveSlackRequester(
+    client,
+    {
+      channel: ev.channel,
+      ts: ev.ts,
+      threadTs: ev.threadTs,
+      ...ev.user !== void 0 ? { user: ev.user } : {},
+      text: ev.rawText ?? ev.text,
+      ...ev.poster !== void 0 ? { poster: ev.poster } : {}
+    },
+    relayApps
+  );
+  span.setAttrs({ requester: requester.resolvedBy });
+  const verbosity2 = policy.verbosityFor?.(`${PLATFORM3}:${ev.channel}`, requester.userId, parseDirectives(ev.text).verbosity) ?? policy.verbosity ?? DEFAULT_VERBOSITY;
+  if (shows(verbosity2, "verbose"))
+    client.reactions.add({ channel: ev.channel, timestamp: ev.ts, name: ACK_EMOJI }).catch((err2) => {
+      if (!err2.message.includes("already_reacted")) console.error(`[ack] ${err2.message}`);
+    });
+  const delayNote = ev.caughtUp && shows(verbosity2, "verbose") ? new SlackIO(client, ev).reply(catchUpDelayNote(ev.ts, systemClock())).catch((err2) => {
     console.error(`[catch-up] ${ev.channel}:${ev.ts} delay note failed: ${err2.message}`);
   }) : Promise.resolve();
   const [imagePass, documentPass] = await Promise.all([
@@ -65820,19 +66262,6 @@ async function receiveSlackMessage(client, ev, span, policy, relayApps, intake)
   });
   const unsupported = imagePass.skippedFiles.filter((f) => documentPass.skippedFiles.includes(f));
   const { staged, skipped } = stagedFiles(unsupported, { ...policy, messageId: ev.ts });
-  const requester = await resolveSlackRequester(
-    client,
-    {
-      channel: ev.channel,
-      ts: ev.ts,
-      threadTs: ev.threadTs,
-      ...ev.user !== void 0 ? { user: ev.user } : {},
-      text: ev.rawText ?? ev.text,
-      ...ev.poster !== void 0 ? { poster: ev.poster } : {}
-    },
-    relayApps
-  );
-  span.setAttrs({ requester: requester.resolvedBy });
   const [channelName, userName, team] = await Promise.all([
     resolveChannelName(client, ev.channel),
     requester.slackUserId !== void 0 ? resolveUserName(client, requester.slackUserId) : Promise.resolve(requester.userName),
@@ -66152,6 +66581,8 @@ var init_slack = __esm({
     init_intake();
     init_thread();
     init_operator();
+    init_directives();
+    init_verbosity();
     init_confirmations();
     init_threadTurns();
     init_statusBudget();
@@ -66337,14 +66768,15 @@ ${file.text}`));
           io
         };
       }
-      async status(initial) {
+      async status(initial, display = {}) {
         const statusClient = this.opts.statusClient ?? this.client;
         const budget = this.opts.statusBudget ?? processStatusBudget;
-        const setShimmer = () => statusClient.assistant.threads.setStatus({
+        const shimmerVisible = shows(display.verbosity ?? DEFAULT_VERBOSITY, "verbose");
+        const setShimmer = (status3 = LOADING_PHRASES[0]) => statusClient.assistant.threads.setStatus({
           channel_id: this.ev.channel,
           thread_ts: this.ev.threadTs,
-          status: LOADING_PHRASES[0],
-          loading_messages: LOADING_PHRASES
+          status: status3,
+          ...status3 === "" ? {} : { loading_messages: LOADING_PHRASES }
         }).catch((err2) => console.error(`[shimmer] ${err2.message}`));
         let ts;
         if (this.opts.existingCard) {
@@ -66369,11 +66801,17 @@ ${file.text}`));
         liveCards.add(liveCardKey(this.ev.channel, ts));
         const card = `${this.ev.channel}:${ts}`;
         const shimmerKey = `${this.ev.channel}:${this.ev.threadTs}`;
-        shimmerOwners.set(shimmerKey, card);
-        await setShimmer();
-        const shimmerTimer = setInterval(() => {
-          if (shimmerOwners.get(shimmerKey) === card) void setShimmer();
-        }, 75e3);
+        let shimmerTimer;
+        if (shimmerVisible) {
+          shimmerOwners.set(shimmerKey, card);
+          await setShimmer();
+          shimmerTimer = setInterval(() => {
+            if (shimmerOwners.get(shimmerKey) === card) void setShimmer();
+          }, 75e3);
+        } else {
+          shimmerOwners.delete(shimmerKey);
+          await setShimmer("");
+        }
         budget.open(card);
         const edit = (frame2) => statusClient.chat.update({ channel: this.ev.channel, ts, ...render2(frame2) });
         let dropped = 0;
@@ -66402,7 +66840,7 @@ ${file.text}`));
             });
           },
           done: async (frame2) => {
-            clearInterval(shimmerTimer);
+            if (shimmerTimer !== void 0) clearInterval(shimmerTimer);
             liveCards.delete(liveCardKey(this.ev.channel, ts));
             budget.close(card);
             const waitMs = budget.takeTerminal(this.ev.channel);
@@ -66414,7 +66852,7 @@ ${file.text}`));
             if (dropped > 0) console.log(`[slack] card ${card}: ${dropped} progress frames dropped by the status budget`);
             if (shimmerOwners.get(shimmerKey) !== card) return;
             shimmerOwners.delete(shimmerKey);
-            await statusClient.assistant.threads.setStatus({ channel_id: this.ev.channel, thread_ts: this.ev.threadTs, status: "" }).catch(() => {
+            await setShimmer("").catch(() => {
             });
           }
         };
@@ -71187,7 +71625,12 @@ async function launchResumes(deps, resumable, opts) {
               startedAt: row2.startedAt,
               now: deps.clock ?? Date.now
             });
-            await io2.status(shell.live({ detail: [rehostCardDetail(run2)] }));
+            const verbosity2 = row2.meta.verbosity ?? deps.config.verbosityFor(
+              row2.meta.channelId,
+              row2.meta.userId,
+              parseDirectives(inputTextOf(run2.events)).verbosity
+            );
+            await io2.status(shell.live({ detail: [rehostCardDetail(run2)] }), { verbosity: verbosity2 });
           } catch (err2) {
             warn(
               `[resume] ${row2.runId} ${row2.threadKey}: restart card could not be written: ${err2 instanceof Error ? err2.message : String(err2)}`
@@ -71266,6 +71709,7 @@ var PI_READ_ONLY_TOOLS;
 var init_resumeLaunch = __esm({
   "../../src/core/resumeLaunch.ts"() {
     "use strict";
+    init_directives();
     init_inboxMessage();
     init_resume();
     init_runRegistry();
@@ -71300,22 +71744,73 @@ var init_runnerOwnership = __esm({
       recovered = /* @__PURE__ */ new Set();
       claimedOwners = /* @__PURE__ */ new Map();
       recoveredOwners = /* @__PURE__ */ new Map();
+      reservations = /* @__PURE__ */ new Map();
       localRecoveredInstances = /* @__PURE__ */ new Set();
       recoveryComplete;
       constructor(requiresRecovery) {
         this.recoveryComplete = !requiresRecovery;
       }
+      /** Claim without displacing a different live runner. The read and write are
+       * synchronous, so a caller owns the process-local fence before its next
+       * awaited durable transition. Repeating the same owner's claim is idempotent. */
       claim(repo, prNumber, owner) {
         const key = runnerOwnedPullKey(repo, prNumber);
+        const current = this.claimedOwners.get(key) ?? this.recoveredOwners.get(key);
+        const alreadyOwned = this.claimed.has(key) || this.recovered.has(key);
+        if (this.reservations.has(key)) return false;
+        if (alreadyOwned && (owner === void 0 || current === void 0 || current.instanceId !== owner.instanceId || current.unit !== owner.unit))
+          return false;
         this.claimed.add(key);
         if (owner !== void 0) this.claimedOwners.set(key, owner);
+        return true;
       }
-      release(repo, prNumber) {
+      /** Exclusively reserve an unowned pull request across an awaited durable
+       * transition. Even the same runner identity cannot reserve it twice: the
+       * returned token, not the owner fields, identifies the one caller. */
+      reserve(repo, prNumber, owner) {
+        const key = runnerOwnedPullKey(repo, prNumber);
+        if (this.claimed.has(key) || this.recovered.has(key) || this.reservations.has(key)) return void 0;
+        const token2 = Symbol(key);
+        this.reservations.set(key, token2);
+        this.claimed.add(key);
+        this.claimedOwners.set(key, owner);
+        return token2;
+      }
+      /** Move an exclusive recovery reservation to the durable attempt that is
+       * about to start. Both the unforgeable token and the currently recorded
+       * owner must still match; a stale caller can neither displace nor adopt a
+       * successor. The transfer consumes the reservation but retains ownership. */
+      transferReservation(repo, prNumber, token2, currentOwner, nextOwner) {
         const key = runnerOwnedPullKey(repo, prNumber);
+        const current = this.claimedOwners.get(key);
+        if (this.reservations.get(key) !== token2 || !this.claimed.has(key) || current?.instanceId !== currentOwner.instanceId || current.unit !== currentOwner.unit)
+          return false;
+        this.reservations.delete(key);
+        this.claimedOwners.set(key, nextOwner);
+        return true;
+      }
+      releaseReservation(repo, prNumber, token2) {
+        const key = runnerOwnedPullKey(repo, prNumber);
+        if (this.reservations.get(key) !== token2) return false;
+        this.reservations.delete(key);
+        this.claimed.delete(key);
+        this.claimedOwners.delete(key);
+        return true;
+      }
+      /** Release unconditionally for the runner's ordinary end, or conditionally
+       * for a provisional claim whose cleanup must not erase a successor. */
+      release(repo, prNumber, owner) {
+        const key = runnerOwnedPullKey(repo, prNumber);
+        if (owner !== void 0) {
+          const current = this.claimedOwners.get(key) ?? this.recoveredOwners.get(key);
+          if (current?.instanceId !== owner.instanceId || current.unit !== owner.unit) return false;
+        }
+        this.reservations.delete(key);
         this.claimed.delete(key);
         this.recovered.delete(key);
         this.claimedOwners.delete(key);
         this.recoveredOwners.delete(key);
+        return true;
       }
       owns(repo, prNumber) {
         if (!this.recoveryComplete) throw new Error("runner ownership recovery is still in progress");
@@ -72242,7 +72737,7 @@ function watched(io, on) {
       on.replied(text);
       await io.reply(text);
     },
-    status: (initial) => io.status(initial),
+    status: (initial, display) => io.status(initial, display),
     history: () => io.history(),
     runStarted: (started) => {
       io.runStarted?.(started);
@@ -72316,6 +72811,33 @@ The thread since the last step:
 ${foldThreadEvents(folded)}` };
   }
   const carried = foldThreadAttachments(folded);
+  const existingPrCodingTarget = req.preset === "coding" && row2 !== void 0 && (row2.publication !== void 0 || row2.pr !== void 0 || row2.resume !== void 0 || parsePlanBranch(row2.branch) === void 0);
+  if (existingPrCodingTarget) {
+    if (row2.publication === void 0)
+      return json3(409, {
+        ok: false,
+        error: "publication_binding_missing",
+        message: "the existing pull request has no durable publication binding",
+        at
+      });
+    try {
+      const owner = deps.runnerOwnership?.owner(instance.repo, row2.publication.pr);
+      if (owner === void 0 || owner.instanceId !== row2.publication.owner.instanceId || owner.unit !== row2.publication.owner.unit)
+        return json3(409, {
+          ok: false,
+          error: "publication_ownership_changed",
+          message: "the durable existing-PR publication owner is no longer the runner's sole owner",
+          at
+        });
+    } catch (err2) {
+      return json3(409, {
+        ok: false,
+        error: "publication_ownership_unknown",
+        message: describe12(err2),
+        at
+      });
+    }
+  }
   const msg = {
     channelId: instance.channelId,
     userId: instance.userId,
@@ -72357,10 +72879,16 @@ ${foldThreadEvents(folded)}` };
       lastReply = text;
     }
   });
+  const roundExpectedHead = req.brief?.kind === "findings" || req.brief?.kind === "rebase" ? req.brief.headSha : req.brief?.kind === "contract" ? req.brief.continue?.from : void 0;
+  const publication = req.preset === "coding" && row2?.publication !== void 0 ? {
+    ...row2.publication,
+    ...roundExpectedHead !== void 0 ? { expectedHeadSha: roundExpectedHead } : {}
+  } : void 0;
   const tag = {
     parentInstanceId: instance.id,
     idempotencyKey: key,
-    ...instance.base !== void 0 ? { base: instance.base } : {}
+    ...instance.base !== void 0 ? { base: instance.base } : {},
+    ...publication !== void 0 ? { publication } : {}
   };
   let dispatching;
   try {
@@ -72851,9 +73379,19 @@ async function prCheck(body, deps) {
   const unit = await unitRowOf(deps, instance, body.unit);
   if (!unit.ok) return unit.response;
   const branch2 = unit.row?.branch ?? instance.branch;
-  const remember = async (pr) => {
-    if (unit.row && (unit.row.pr?.number !== pr.number || unit.row.pr.url !== pr.url))
-      await deps.instances.putUnits([{ ...unit.row, pr }]);
+  const remember = async (pr, facts2) => {
+    if (!unit.row) return;
+    const publication = unit.row.publication ?? (facts2?.state === "open" && facts2.sameRepoHead === true && facts2.headBranchExists === true && typeof facts2.headRef === "string" && typeof facts2.baseRef === "string" && typeof facts2.headSha === "string" && /^[0-9a-f]{40}$/i.test(facts2.headSha) ? {
+      repo: instance.repo,
+      pr: pr.number,
+      headRef: facts2.headRef,
+      baseRef: facts2.baseRef,
+      expectedHeadSha: facts2.headSha,
+      publicationRef: facts2.headRef,
+      owner: { instanceId: instance.id, unit: unit.row.unit }
+    } : void 0);
+    if (unit.row.pr?.number !== pr.number || unit.row.pr.url !== pr.url || unit.row.publication === void 0 && publication !== void 0)
+      await deps.instances.putUnits([{ ...unit.row, pr, ...publication !== void 0 ? { publication } : {} }]);
   };
   try {
     if (follow !== void 0) {
@@ -72862,8 +73400,12 @@ async function prCheck(body, deps) {
       const fallbackUrl = unit.row?.pr?.url ?? `https://github.com/${instance.repo}/pull/${follow}`;
       const state2 = pullRequestState(follow, fallbackUrl, facts2);
       if (state2 === void 0) throw new Error(headBranchStateError(instance.repo, follow));
-      await remember({ number: follow, url: String(state2.url) });
+      await remember({ number: follow, url: String(state2.url) }, facts2);
       if (state2.state !== "open") return json3(200, { ok: true, ...state2, at });
+      deps.runnerOwnership?.claim(instance.repo, follow, {
+        instanceId: instance.id,
+        unit: unit.row?.unit ?? body.unit
+      });
       const prRef = { repo: instance.repo, number: follow };
       const headSha = facts2.headSha;
       const approved = entry && headSha !== void 0 ? await reviewPostedAt(deps, prRef, "approve", headSha) : void 0;
@@ -72894,13 +73436,13 @@ async function prCheck(body, deps) {
     }
     const open2 = await deps.findOpenPrByHead(instance.repo, branch2);
     if (open2) {
-      await remember({ number: open2.number, url: open2.htmlUrl });
       deps.runnerOwnership?.claim(instance.repo, open2.number, {
         instanceId: instance.id,
         unit: unit.row?.unit ?? body.unit
       });
       const liveFacts = await deps.fetchPrFacts({ repo: instance.repo, number: open2.number });
       if (liveFacts === void 0) throw new Error(`could not read ${instance.repo}#${open2.number}`);
+      await remember({ number: open2.number, url: open2.htmlUrl }, liveFacts);
       const current = pullRequestState(open2.number, open2.htmlUrl, liveFacts);
       if (current === void 0) throw new Error(headBranchStateError(instance.repo, open2.number));
       if (current.state !== "open") return json3(200, { ok: true, ...current, at });
@@ -73209,12 +73751,13 @@ async function drawCard(deps, instance, units, close) {
       source: instance.addressSeveritySource ?? "org"
     } : void 0
   );
+  const display = { verbosity: instance.verbosity ?? DEFAULT_VERBOSITY };
   if (!close) {
-    await io.status(shell.live({ detail }));
+    await io.status(shell.live({ detail }), display);
     return;
   }
   shell.freeze(clock4());
-  const handle2 = await io.status(shell.live({ detail }));
+  const handle2 = await io.status(shell.live({ detail }), display);
   await handle2.done(shell.close({ kind: "done", icon: close.icon, detail: detail.join("\n") }));
 }
 function parseGate(raw) {
@@ -75274,6 +75817,7 @@ async function runBot() {
   ) : new NullMetricsService();
   const sweepState = { roundSpent: /* @__PURE__ */ new Set() };
   const runnerOwnership = new RunnerOwnershipFence(capabilities.runLedger);
+  deps.runnerOwnership = runnerOwnership;
   const pullsWiring = /* @__PURE__ */ (() => {
     const state = sweepState;
     const chains = /* @__PURE__ */ new Map();