@coreplane/switchboard 1.264.0 → 1.265.1

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.264.0",
+  "version": "1.265.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.264.0",
+      "version": "1.265.1",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -21060,7 +21060,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.264.0",
+      "version": "1.265.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.264.0",
+  "version": "1.265.1",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.264.0",
-  "commit": "3f965ac7812604e62bd3e7df613ccf72ee665615",
-  "builtAt": "2026-09-26T02:38:42.181Z"
+  "version": "1.265.1",
+  "commit": "dccb10815d97823de2be35d9768379a2d9ff6aaf",
+  "builtAt": "2026-09-26T14:55:53.149Z"
 }

package/dist/assets/src/core/publicationPush.ts

@@ -0,0 +1,173 @@
+import type { ExistingPrPublicationBinding } from "./coordinator/contract.js";
+import { COMMAND_CAP, TOOL_OUTPUT_CAP, type RunEvent } from "./runEvents.js";
+
+export interface PublicationPushReceipt {
+  callId: string;
+  previousHeadSha: string;
+  repo: string;
+  pr: number;
+  owner: ExistingPrPublicationBinding["owner"];
+}
+
+type PushEvent = Extract<RunEvent, { type: "pushed_head" }>;
+const fullSha = (s: string): boolean => /^[a-f0-9]{40}$/.test(s);
+const refName = (s: string): boolean =>
+  /^[a-zA-Z0-9_/-]+(?:\.[a-zA-Z0-9_/-]+)*$/.test(s) && !s.includes("..") && !s.startsWith("-");
+const shortRef = (s: string): string => s.replace(/^refs\/heads\//, "");
+
+/** Deliberately not a shell interpreter. Only a standalone literal push can
+ * attest its result: pipelines, scripts, substitutions and compound commands
+ * cannot prove which operation produced stdout or the successful exit. */
+export function leasedPushCommand(command: string): { ref: string; expectedHeadSha: string } | undefined {
+  if (command.length >= COMMAND_CAP) return;
+  const literal = command.replace(/[ \t]+2>&1[ \t]*$/, "");
+  if (!/^git push\s/.test(literal) || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
+  const words = literal.trim().split(/\s+/).slice(2);
+  const leases = words.filter((w) => w.startsWith("--force-with-lease="));
+  if (leases.length !== 1) return;
+  const lease = /^--force-with-lease=refs\/heads\/([^:]+):([a-f0-9]{40})$/.exec(leases[0]!);
+  if (!lease || !refName(lease[1]!)) return;
+  const args = words.filter((w) => w !== leases[0] && w !== "-u" && w !== "--set-upstream");
+  if (args.length !== 2 || args[0] !== "origin") return;
+  const refs = args[1]!.split(":");
+  if (refs.length > 2 || shortRef(refs[0]!) !== lease[1] || shortRef(refs[1] ?? refs[0]!) !== lease[1]) return;
+  return { ref: lease[1]!, expectedHeadSha: lease[2]! };
+}
+
+/** A legacy record needs the complete pair, never its display summary, an
+ * assistant's prose or the remote head alone. More than one attempted push is
+ * intentionally ambiguous; historical reconciliation does not choose one. */
+export function pairedPublicationPush(
+  events: readonly RunEvent[],
+  binding: ExistingPrPublicationBinding,
+  head: string,
+  callId?: string,
+): PushEvent | undefined {
+  if (!fullSha(head) || !fullSha(binding.expectedHeadSha) || head === binding.expectedHeadSha) return;
+  const calls = events.filter(
+    (e): e is Extract<RunEvent, { type: "tool_call" }> =>
+      e.type === "tool_call" &&
+      e.tool === "bash" &&
+      (callId === undefined ? /\bgit\s+push\b/.test(e.command ?? e.summary) : e.callId === callId),
+  );
+  if (calls.length !== 1) return;
+  const call = calls[0]!;
+  if (
+    !call.callId ||
+    !call.command ||
+    events.filter((e) => e.type === "tool_call" && e.callId === call.callId).length !== 1
+  )
+    return;
+  const command = leasedPushCommand(call.command);
+  if (command?.ref !== binding.publicationRef || command.expectedHeadSha !== binding.expectedHeadSha) return;
+  const results = events.filter(
+    (e): e is Extract<RunEvent, { type: "tool_result" }> => e.type === "tool_result" && e.callId === call.callId,
+  );
+  if (results.length !== 1) return;
+  const result = results[0]!;
+  if (
+    events.indexOf(result) <= events.indexOf(call) ||
+    result.tool !== "bash" ||
+    !result.ok ||
+    result.exitCode !== 0 ||
+    result.cut ||
+    !result.output ||
+    result.output.length >= TOOL_OUTPUT_CAP
+  )
+    return;
+  let lines = result.output.trim().split(/\r?\n/);
+  const tracking = `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`;
+  if (
+    /(?:^|\s)(?:-u|--set-upstream)(?:\s|$)/.test(call.command) &&
+    lines.filter((line) => line === tracking).length === 1
+  )
+    lines = lines.filter((line) => line !== tracking);
+  if (lines.length !== 2) return;
+  const remote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(lines[0]!);
+  const update = /^\s*\+?\s*([a-f0-9]{7,40})(\.{2,3})([a-f0-9]{7,40})\s+(\S+) -> (\S+)( \(forced update\))?$/.exec(
+    lines[1]!,
+  );
+  if (
+    !remote ||
+    remote[1]!.toLowerCase() !== binding.repo.toLowerCase() ||
+    !update ||
+    !binding.expectedHeadSha.startsWith(update[1]!) ||
+    !head.startsWith(update[3]!) ||
+    update[1] === update[3] ||
+    shortRef(update[4]!) !== binding.publicationRef ||
+    shortRef(update[5]!) !== binding.publicationRef
+  )
+    return;
+  return {
+    type: "pushed_head",
+    ref: binding.publicationRef,
+    sha: head,
+    by: "push",
+    receipt: {
+      callId: call.callId,
+      previousHeadSha: binding.expectedHeadSha,
+      repo: binding.repo,
+      pr: binding.pr,
+      owner: { ...binding.owner },
+    },
+  };
+}
+
+/** State is stored JSON, not an unchecked cast back into publication authority. */
+export function publicationReceiptsFromState(value: unknown): PushEvent[] {
+  if (!Array.isArray(value)) return [];
+  const valid = value.every((v) => {
+    if (typeof v !== "object" || v === null) return false;
+    const r = v.receipt;
+    return (
+      v.type === "pushed_head" &&
+      v.by === "push" &&
+      typeof v.ref === "string" &&
+      refName(v.ref) &&
+      typeof v.sha === "string" &&
+      fullSha(v.sha) &&
+      typeof r === "object" &&
+      r !== null &&
+      typeof r.callId === "string" &&
+      r.callId.length > 0 &&
+      typeof r.previousHeadSha === "string" &&
+      fullSha(r.previousHeadSha) &&
+      typeof r.repo === "string" &&
+      Number.isSafeInteger(r.pr) &&
+      r.pr > 0 &&
+      typeof r.owner === "object" &&
+      r.owner !== null &&
+      typeof r.owner.instanceId === "string" &&
+      typeof r.owner.unit === "string"
+    );
+  });
+  return valid ? ([...value] as PushEvent[]) : [];
+}
+
+/** Only the run's typed, contiguous leased transitions can move its restart
+ * fence. The caller still verifies the fresh PR and attached workspace. */
+export function restoredPublicationHead(
+  events: readonly RunEvent[],
+  binding: ExistingPrPublicationBinding,
+): string | undefined {
+  let head = binding.expectedHeadSha;
+  const seen = new Set<string>();
+  for (const e of events) {
+    if (e.type !== "pushed_head" || e.receipt === undefined) continue;
+    const r = e.receipt;
+    if (
+      e.ref !== binding.publicationRef ||
+      r.repo !== binding.repo ||
+      r.pr !== binding.pr ||
+      r.owner.instanceId !== binding.owner.instanceId ||
+      r.owner.unit !== binding.owner.unit ||
+      r.previousHeadSha !== head ||
+      !fullSha(e.sha) ||
+      seen.has(r.callId)
+    )
+      return;
+    seen.add(r.callId);
+    head = e.sha;
+  }
+  return head === binding.expectedHeadSha ? undefined : head;
+}

package/dist/assets/src/core/runEvents.ts

@@ -944,12 +944,23 @@ export type RunEvent =
       ref: string;
       sha: string;
       by: "push" | "salvage";
+      /** Exact leased tool result, retained before any post-step can refuse. */
+      receipt?: import("./publicationPush.js").PublicationPushReceipt;
       /** No uncommitted or unpushed work at the push (record 0064): the fact
        *  the plane's soft stop reads. Absent where the measure was missing. */
       clean?: boolean;
       seq?: number;
       at?: number;
     }
+  /** The server gate admitted this exact leased push, not a child's claim. */
+  | {
+      type: "publication_push_authorized";
+      callId: string;
+      ref: string;
+      expectedHeadSha: string;
+      seq?: number;
+      at?: number;
+    }
   /** The coordinator tag as a fact of the run (docs/reference/specs/run-history.md
    *  item 48a): the instance the run is a child of, the unit its idempotency
    *  key named, and the base branch its pull request targets — published by

package/dist/assets/src/core/ship/coordinator.ts

@@ -1998,10 +1998,12 @@ function settleCoding(
   // final observed head. Only then may a fresh remote read decide readiness.
   if (round.kind === "findings" && facts.status === "completed") {
     const issued = next.findingsByRound[round.index] ?? [];
-    const matched = matchDispositions(issued, facts.dispositions ?? []).matched;
+    const { matched, dropped } = matchDispositions(issued, facts.dispositions ?? []);
     const missingOutputs = issued
       .filter((finding) => !matched.some((disposition) => disposition.findingId === finding.id))
       .map((finding) => `missing disposition for ${finding.id}`);
+    if (missingOutputs.length > 0 && dropped.length > 0)
+      missingOutputs.push(`submitted IDs with no matching finding: ${dropped.join(", ")}`);
     if (facts.description !== true) missingOutputs.push("missing updated pull request description");
     const observedHead = fullHead(facts.headSha);
     if (observedHead === undefined) missingOutputs.push("missing final observed commit");

package/dist/cli.js

@@ -36249,6 +36249,8 @@ function activityLine(e) {
     case "pr_opened":
       return "PR opened";
     // published straight to the registry — never arrives here
+    case "publication_push_authorized":
+      return "push authorized";
     case "pushed_head":
       return `\u2B06 pushed ${e.ref} @ ${e.sha.slice(0, 7)}`;
     case "coordinator_tag":
@@ -36722,13 +36724,16 @@ async function resolveRepoContext(msg, history = [], probe, residentSlugs, recor
     rejected = void 0;
     unverified = void 0;
   }
+  const bareNumberText = !s.pr && repo === records?.pr?.repo ? /\b(?:PR|pull request)\s*#(\d+)\b/i.exec(unwrapSlack(msg.text).replace(CODE_SPAN, " "))?.[1] : void 0;
+  const bareNumber = bareNumberText === void 0 ? void 0 : Number(bareNumberText);
+  const namedPr = s.pr ?? (repo && bareNumber !== void 0 && Number.isSafeInteger(bareNumber) && bareNumber > 0 ? { repo, number: bareNumber } : void 0);
   let headSha;
   let baseRef;
   let prSize;
   let facts2;
   let closedPr;
-  if (s.pr && repo === s.pr.repo) {
-    const head = await prHead(s.pr).catch(() => void 0);
+  if (namedPr && repo === namedPr.repo) {
+    const head = await prHead(namedPr).catch(() => void 0);
     if (head?.ref && head.state === "open") {
       ref = head.ref;
       refFromPr = true;
@@ -36739,7 +36744,7 @@ async function resolveRepoContext(msg, history = [], probe, residentSlugs, recor
     facts2 = head?.facts;
     if (head?.state === "closed")
       closedPr = {
-        number: s.pr.number,
+        number: namedPr.number,
         merged: head.merged,
         ...head.mergedAt !== void 0 ? { mergedAt: head.mergedAt } : {}
       };
@@ -36750,16 +36755,16 @@ async function resolveRepoContext(msg, history = [], probe, residentSlugs, recor
   else if (rejected) out.rejectedRepo = rejected;
   if (ref) out.ref = ref;
   if (refFromPr) out.refFromPr = true;
-  if (repo && s.pr && repo === s.pr.repo) {
-    out.pr = s.pr.number;
+  if (repo && namedPr && repo === namedPr.repo) {
+    out.pr = namedPr.number;
     out.prFromMessage = true;
-    if (isThreadOwnPr(records, repo, s.pr.number)) out.prIsThreadOwn = true;
+    if (isThreadOwnPr(records, repo, namedPr.number)) out.prIsThreadOwn = true;
     if (headSha) out.headSha = headSha;
     if (baseRef) out.baseRef = baseRef;
     if (prSize) out.prSize = prSize;
     if (facts2) out.prDescription = facts2;
     if (closedPr) out.closedPr = closedPr;
-  } else if (repo && !s.pr) {
+  } else if (repo && !namedPr) {
     const inherited = inheritedPr(thread, records, repo);
     if (inherited) {
       const head = await openPrHeadSha(inherited);
@@ -40793,6 +40798,7 @@ async function ownerOf2(runs, unitsOf, threadKey) {
   if (live !== void 0) return { kind: "live", run: live };
   const hosted = runs.find((r) => !r.finished && r.hosted === true);
   const instanceId = instanceOf(runs);
+  let releasedPr;
   if (instanceId !== void 0) {
     const units = await unitsOf(instanceId).catch(() => []);
     const unit = units.find((u) => u.threadKey === threadKey && u.ending === void 0);
@@ -40807,11 +40813,19 @@ async function ownerOf2(runs, unitsOf, threadKey) {
     if (ended.length === 1 && ship !== void 0) return { kind: "pipeline", instanceId, run: ship, unit: ended[0] };
     if (ended.length > 1 && ship !== void 0)
       return { kind: "pipeline_ambiguous", instanceId, run: ship, units: ended };
+    const released = units.filter((u) => {
+      const binding = u.publication;
+      return u.threadKey === threadKey && u.instanceId === instanceId && u.ending?.kind === "merge_ready" && binding !== void 0 && u.pr?.number === binding.pr && u.branch === binding.headRef && u.branch === binding.publicationRef && binding.owner.instanceId === instanceId && binding.owner.unit === u.unit && (u.lastPush === void 0 || u.lastPush === binding.expectedHeadSha);
+    });
+    if (released.length === 1) {
+      const unit2 = released[0];
+      releasedPr = { repo: unit2.publication.repo, number: unit2.publication.pr, at: unit2.ending.at };
+    }
   }
   if (hosted !== void 0) return { kind: "live", run: hosted };
   const agent = stickyAgentOf(runs);
-  if (agent !== void 0) return { kind: "session", agent };
-  return { kind: "none" };
+  if (agent !== void 0) return { kind: "session", agent, ...releasedPr ? { releasedPr } : {} };
+  return { kind: "none", ...releasedPr ? { releasedPr } : {} };
 }
 async function shipRequestOf(service, runId3) {
   const result = await service.getRun(runId3, { include: "messages" }).catch(() => void 0);
@@ -46062,7 +46076,7 @@ var init_submit = __esm({
     submitDispositionsTool = {
       name: "submit_dispositions",
       failsInText: true,
-      description: "Record one disposition per review finding after addressing them: `fixed` (the finding is addressed in your pushed code) or `declined` (deliberately not doing it \u2014 the note says why). `findingId` is the finding's stable id from the review (F1, F2, \u2026) \u2014 use exactly those ids; an id the review never issued answers nothing and is dropped when the plan runner reads your record. Every finding gets exactly one entry, every severity included (nits too). Call it once with the complete set after your last push; a later call replaces the earlier one. The set rides this run's record, where the plan runner reads it for the re-review.",
+      description: "Record one disposition per review finding after addressing them: `fixed` (the finding is addressed in your pushed code) or `declined` (deliberately not doing it \u2014 the note says why). `findingId` is the finding's stable id printed in the findings. Copy it exactly, including check ids such as `check:CI / checks (test)`; do not replace a check id with `F1`. An id the review never issued answers nothing and is dropped when the plan runner reads your record. Every finding gets exactly one entry, every severity included (nits too). Call it once with the complete set after your last push; a later call replaces the earlier one. The set rides this run's record, where the plan runner reads it for the re-review.",
       inputSchema: {
         type: "object",
         properties: {
@@ -46072,7 +46086,10 @@ var init_submit = __esm({
             items: {
               type: "object",
               properties: {
-                findingId: { type: "string", description: `The finding's stable id from the review (e.g. "F1")` },
+                findingId: {
+                  type: "string",
+                  description: 'Copy the exact id in the findings (e.g. "F1" or "check:CI / checks (test)")'
+                },
                 disposition: { type: "string", enum: ["fixed", "declined"], description: "fixed | declined" },
                 note: { type: "string", description: "One line: what was done, or why it was declined" }
               },
@@ -46088,7 +46105,7 @@ var init_submit = __esm({
         if (!ctx.onDispositions) return "no run is recording dispositions here";
         ctx.onDispositions(parsed.dispositions);
         const drops = parsed.dropped.length ? ` (dropped: ${parsed.dropped.join("; ")})` : "";
-        return `dispositions recorded: ${parsed.dispositions.length}${drops}; a later call replaces this one`;
+        return `dispositions recorded: ${parsed.dispositions.length}${drops}; IDs are checked against the findings by the plan runner; a later call replaces this one`;
       }
     };
     submitPrDescriptionTool = {
@@ -50246,6 +50263,11 @@ function reachFor(identity2) {
   if (identity2 === "read") return READ_REACH;
   return NONE_REACH;
 }
+function publicationAttributionRefusal(rules, callId) {
+  const pending2 = rules.publication?.attributingCallId;
+  if (pending2 !== void 0 && pending2 !== callId)
+    return "push attribution is still pending; no later tool may change the checkout until its result is recorded";
+}
 function openCodeToolWord(action) {
   const mapped = OPENCODE_ACTION_TO_TOOL_WORD[action];
   if (mapped !== void 0) return mapped;
@@ -50278,19 +50300,36 @@ function judgeBashCommand(command2, ctx) {
   if (MERGE_OR_APPROVE.test(command2)) {
     return refused4("merge/approve \u2014 a coding run never merges or approves a pull request");
   }
+  const pushCommand = withoutShellContinuations(command2);
   if (ctx.identity !== "write") {
-    if (ANY_PUSH.test(command2)) return refused4("read-only \u2014 a read-identity run never pushes");
+    if (ANY_PUSH.test(pushCommand)) return refused4("read-only \u2014 a read-identity run never pushes");
     if (GH_WRITE_VERB.test(command2) || GH_API_WRITE.test(command2) || CURL_GITHUB_WRITE.test(command2)) {
       return refused4("read-only \u2014 a read-identity run never writes to GitHub");
     }
     return allowed;
   }
-  for (const match of command2.matchAll(GIT_PUSH)) {
+  for (const match of pushCommand.matchAll(GIT_PUSH)) {
     const verdict = judgePush(match[1], ctx);
     if (verdict.verdict !== "allowed") return verdict;
   }
   return allowed;
 }
+function withoutShellContinuations(command2) {
+  let result = "";
+  let quote3;
+  for (let i = 0; i < command2.length; i++) {
+    const char = command2[i];
+    if (char === "\\" && quote3 !== "'" && i + 1 < command2.length) {
+      const next = command2[++i];
+      if (next !== "\n") result += char + next;
+      continue;
+    }
+    if (char === quote3) quote3 = void 0;
+    else if (quote3 === void 0 && (char === "'" || char === '"')) quote3 = char;
+    result += char;
+  }
+  return result;
+}
 function judgeBashTimeout(timeout, ctx) {
   if (!ctx.loopEndsIn || typeof timeout !== "number" || !Number.isFinite(timeout) || timeout <= 0) return allowed;
   const leftMs = ctx.loopEndsIn();
@@ -50401,8 +50440,11 @@ var init_toolRules = __esm({
     ENV_DUMP = /(^|[;&|(]\s*)((printenv|env)(\s+-[A-Za-z0-9-]+)*|export\s+-p|declare\s+-[a-zA-Z]*[px][a-zA-Z]*|set)\s*($|[|;&>)])|\/proc\/(self|\d+)\/environ|process\.env(?![.[\w])/;
     CREDENTIAL_VAR = /\$\{?[A-Z][A-Z0-9_]*(_API_KEY|_TOKEN|_SECRET|_BEARER|_PASSWORD)\b|printenv\s+[A-Z][A-Z0-9_]*(_API_KEY|_TOKEN|_SECRET|_BEARER|_PASSWORD)\b/;
     MERGE_OR_APPROVE = /\bgh\s+pr\s+(merge|review)\b|\/pulls\/\d+\/(merge|reviews)\b/;
-    GIT_THEN_PUSH = String.raw`\bgit(?:\s+(?:-C\s+\S+|--git-dir=\S+|--work-tree=\S+|-c\s+\S+|--no-pager))*\s+push\b`;
-    GIT_PUSH = new RegExp(`${GIT_THEN_PUSH}((?:[^;&|]|(?<=[<>])&|&(?=>))*)`, "g");
+    GIT_THEN_PUSH = String.raw`\bgit(?:[ \t]+(?:-C[ \t]+\S+|--git-dir=\S+|--work-tree=\S+|-c[ \t]+\S+|--no-pager))*[ \t]+push\b`;
+    GIT_PUSH = new RegExp(
+      GIT_THEN_PUSH + String.raw`((?:"(?:\\[\s\S]|[^"\\])*"|'[^']*'|\\[^\n]|[^\n;&|'"\\]|(?<=[<>])&|&(?=>))*)`,
+      "g"
+    );
     ANY_PUSH = new RegExp(GIT_THEN_PUSH);
     GH_WRITE_VERB = /\bgh\s+(pr|issue)\s+(comment|create|edit|close|reopen|ready|lock|unlock|review|merge|delete|transfer|pin|unpin)\b/;
     WRITE_METHOD = "(POST|post|PATCH|patch|PUT|put|DELETE|delete)";
@@ -50429,6 +50471,98 @@ var init_toolRules = __esm({
   }
 });
 
+// ../../src/core/publicationPush.ts
+function leasedPushCommand(command2) {
+  if (command2.length >= COMMAND_CAP) return;
+  const literal = command2.replace(/[ \t]+2>&1[ \t]*$/, "");
+  if (!/^git push\s/.test(literal) || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
+  const words = literal.trim().split(/\s+/).slice(2);
+  const leases = words.filter((w) => w.startsWith("--force-with-lease="));
+  if (leases.length !== 1) return;
+  const lease = /^--force-with-lease=refs\/heads\/([^:]+):([a-f0-9]{40})$/.exec(leases[0]);
+  if (!lease || !refName(lease[1])) return;
+  const args = words.filter((w) => w !== leases[0] && w !== "-u" && w !== "--set-upstream");
+  if (args.length !== 2 || args[0] !== "origin") return;
+  const refs = args[1].split(":");
+  if (refs.length > 2 || shortRef(refs[0]) !== lease[1] || shortRef(refs[1] ?? refs[0]) !== lease[1]) return;
+  return { ref: lease[1], expectedHeadSha: lease[2] };
+}
+function pairedPublicationPush(events, binding, head, callId) {
+  if (!fullSha(head) || !fullSha(binding.expectedHeadSha) || head === binding.expectedHeadSha) return;
+  const calls = events.filter(
+    (e) => e.type === "tool_call" && e.tool === "bash" && (callId === void 0 ? /\bgit\s+push\b/.test(e.command ?? e.summary) : e.callId === callId)
+  );
+  if (calls.length !== 1) return;
+  const call2 = calls[0];
+  if (!call2.callId || !call2.command || events.filter((e) => e.type === "tool_call" && e.callId === call2.callId).length !== 1)
+    return;
+  const command2 = leasedPushCommand(call2.command);
+  if (command2?.ref !== binding.publicationRef || command2.expectedHeadSha !== binding.expectedHeadSha) return;
+  const results = events.filter(
+    (e) => e.type === "tool_result" && e.callId === call2.callId
+  );
+  if (results.length !== 1) return;
+  const result = results[0];
+  if (events.indexOf(result) <= events.indexOf(call2) || result.tool !== "bash" || !result.ok || result.exitCode !== 0 || result.cut || !result.output || result.output.length >= TOOL_OUTPUT_CAP)
+    return;
+  let lines = result.output.trim().split(/\r?\n/);
+  const tracking = `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`;
+  if (/(?:^|\s)(?:-u|--set-upstream)(?:\s|$)/.test(call2.command) && lines.filter((line4) => line4 === tracking).length === 1)
+    lines = lines.filter((line4) => line4 !== tracking);
+  if (lines.length !== 2) return;
+  const remote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(lines[0]);
+  const update = /^\s*\+?\s*([a-f0-9]{7,40})(\.{2,3})([a-f0-9]{7,40})\s+(\S+) -> (\S+)( \(forced update\))?$/.exec(
+    lines[1]
+  );
+  if (!remote || remote[1].toLowerCase() !== binding.repo.toLowerCase() || !update || !binding.expectedHeadSha.startsWith(update[1]) || !head.startsWith(update[3]) || update[1] === update[3] || shortRef(update[4]) !== binding.publicationRef || shortRef(update[5]) !== binding.publicationRef)
+    return;
+  return {
+    type: "pushed_head",
+    ref: binding.publicationRef,
+    sha: head,
+    by: "push",
+    receipt: {
+      callId: call2.callId,
+      previousHeadSha: binding.expectedHeadSha,
+      repo: binding.repo,
+      pr: binding.pr,
+      owner: { ...binding.owner }
+    }
+  };
+}
+function publicationReceiptsFromState(value) {
+  if (!Array.isArray(value)) return [];
+  const valid = value.every((v) => {
+    if (typeof v !== "object" || v === null) return false;
+    const r = v.receipt;
+    return v.type === "pushed_head" && v.by === "push" && typeof v.ref === "string" && refName(v.ref) && typeof v.sha === "string" && fullSha(v.sha) && typeof r === "object" && r !== null && typeof r.callId === "string" && r.callId.length > 0 && typeof r.previousHeadSha === "string" && fullSha(r.previousHeadSha) && typeof r.repo === "string" && Number.isSafeInteger(r.pr) && r.pr > 0 && typeof r.owner === "object" && r.owner !== null && typeof r.owner.instanceId === "string" && typeof r.owner.unit === "string";
+  });
+  return valid ? [...value] : [];
+}
+function restoredPublicationHead(events, binding) {
+  let head = binding.expectedHeadSha;
+  const seen = /* @__PURE__ */ new Set();
+  for (const e of events) {
+    if (e.type !== "pushed_head" || e.receipt === void 0) continue;
+    const r = e.receipt;
+    if (e.ref !== binding.publicationRef || r.repo !== binding.repo || r.pr !== binding.pr || r.owner.instanceId !== binding.owner.instanceId || r.owner.unit !== binding.owner.unit || r.previousHeadSha !== head || !fullSha(e.sha) || seen.has(r.callId))
+      return;
+    seen.add(r.callId);
+    head = e.sha;
+  }
+  return head === binding.expectedHeadSha ? void 0 : head;
+}
+var fullSha, refName, shortRef;
+var init_publicationPush = __esm({
+  "../../src/core/publicationPush.ts"() {
+    "use strict";
+    init_runEvents();
+    fullSha = (s) => /^[a-f0-9]{40}$/.test(s);
+    refName = (s) => /^[a-zA-Z0-9_/-]+(?:\.[a-zA-Z0-9_/-]+)*$/.test(s) && !s.includes("..") && !s.startsWith("-");
+    shortRef = (s) => s.replace(/^refs\/heads\//, "");
+  }
+});
+
 // ../../src/core/harness/pi/relay.ts
 function stillRunningNote(tool) {
   return `This ${tool} call is still running in the bot: the process that made it was relaunched while the call was in flight, and the call keeps running there rather than being re-run \u2014 do not run it again; its result is kept on the relay under the same call id.`;
@@ -50459,9 +50593,18 @@ function authorizeToolCall(harness, ask) {
     return { allow: false, reason: reason2 };
   };
   if (blocked2 !== void 0) return refuse3(blocked2);
+  const pending2 = publicationAttributionRefusal(harness.rules, ask.toolCallId);
+  if (pending2 !== void 0) return refuse3(pending2);
   if (harness.tools.some((t) => t.name === ask.tool)) return { allow: true };
   const verdict = judgeToolCall(ask.tool, ask.input, harness.rules);
-  if (verdict.verdict === "allowed") return { allow: true };
+  if (verdict.verdict === "allowed") {
+    const authority = harness.rules.publication?.authority;
+    const input = ask.input;
+    const push = ask.tool === "bash" && typeof input?.command === "string" ? leasedPushCommand(input.command) : void 0;
+    if (push !== void 0 && authority !== void 0 && !("blocked" in authority) && push.ref === authority.ref && push.expectedHeadSha === authority.expectedHeadSha)
+      harness.emit({ type: "publication_push_authorized", callId: ask.toolCallId, ...push });
+    return { allow: true };
+  }
   return refuse3(verdict.reason);
 }
 function answerCompaction(harness, ask) {
@@ -50528,6 +50671,7 @@ var init_relay = __esm({
     init_runEvents();
     init_compactionFallback();
     init_toolRules();
+    init_publicationPush();
     HarnessRegistry = class {
       live = /* @__PURE__ */ new Map();
       /** The run drives a pi from here, its relayed calls kept beside it; the
@@ -52341,19 +52485,19 @@ var init_resume = __esm({
 // ../../src/core/existingPrPublication.ts
 function verifyExistingPrPublication(durable, local, remote) {
   if (durable === void 0) return blocked("the durable existing-PR binding is missing");
-  if (!fullSha(durable.expectedHeadSha)) return blocked("the durable expected head is not a full commit SHA");
+  if (!fullSha2(durable.expectedHeadSha)) return blocked("the durable expected head is not a full commit SHA");
   if (durable.headRef !== durable.publicationRef)
     return blocked("the durable head ref and owned publication ref do not agree");
   if (local.repo !== durable.repo) return blocked("the resolved repository does not match the durable binding");
   if (local.pr !== durable.pr) return blocked("the resolved pull request does not match the durable binding");
   if (local.ref !== durable.headRef) return blocked("the resolved head ref does not match the durable binding");
   if (local.baseRef !== durable.baseRef) return blocked("the resolved base ref does not match the durable binding");
-  if (!fullSha(local.requestHeadSha)) return blocked("the request head is missing or not a full commit SHA");
+  if (!fullSha2(local.requestHeadSha)) return blocked("the request head is missing or not a full commit SHA");
   if (local.requestHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the request head does not match the durable expected commit");
   if (local.workspaceRef !== durable.publicationRef)
     return blocked("the checked-out publication ref does not match the durable binding");
-  if (!fullSha(local.workspaceHeadSha)) return blocked("the checked-out head is missing or not a full commit SHA");
+  if (!fullSha2(local.workspaceHeadSha)) return blocked("the checked-out head is missing or not a full commit SHA");
   if (local.workspaceHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the checked-out head does not match the durable expected commit");
   if (!sameOwner(local.owner, durable.owner)) return blocked("the publication owner changed");
@@ -52363,7 +52507,7 @@ function verifyExistingPrPublication(durable, local, remote) {
   if (remote.headBranchExists !== true) return blocked("the pull request head branch is missing or unknown");
   if (remote.headRef !== durable.headRef) return blocked("the pull request head ref moved");
   if (remote.baseRef !== durable.baseRef) return blocked("the pull request base ref moved");
-  if (!fullSha(remote.headSha)) return blocked("the fresh pull-request head is missing or not a full commit SHA");
+  if (!fullSha2(remote.headSha)) return blocked("the fresh pull-request head is missing or not a full commit SHA");
   if (remote.headSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the pull request head moved from the durable expected commit");
   return {
@@ -52371,11 +52515,11 @@ function verifyExistingPrPublication(durable, local, remote) {
     publication: { ref: durable.publicationRef, expectedHeadSha: durable.expectedHeadSha.toLowerCase() }
   };
 }
-var fullSha, sameOwner, blocked;
+var fullSha2, sameOwner, blocked;
 var init_existingPrPublication = __esm({
   "../../src/core/existingPrPublication.ts"() {
     "use strict";
-    fullSha = (value) => value !== void 0 && /^[0-9a-f]{40}$/i.test(value);
+    fullSha2 = (value) => value !== void 0 && /^[0-9a-f]{40}$/i.test(value);
     sameOwner = (left, right) => left?.instanceId === right.instanceId && left.unit === right.unit;
     blocked = (reason2) => ({ ok: false, reason: reason2 });
   }
@@ -53402,6 +53546,14 @@ async function runLoop(deps, ctx) {
   let reviewHead = ctx.reviewHead;
   let lastActivityAt = ctx.loopStartedAt;
   const restored = resume?.row.state ?? {};
+  const restoredReceipts = publicationReceiptsFromState(restored.publicationReceipts);
+  const publicationReceipts = coordinator?.publication !== void 0 && restoredPublicationHead(restoredReceipts, coordinator.publication) !== void 0 ? restoredReceipts : [];
+  const retainPublicationReceipts = () => {
+    const history = registry.snapshot(run2.id, run2.token)?.events ?? [];
+    const latest = publicationReceipts.at(-1);
+    if (latest !== void 0 && !history.some((e) => e.type === "pushed_head" && e.ref === latest.ref))
+      registry.publish(run2.id, latest);
+  };
   let checklist = typeof restored.checklist === "string" ? restored.checklist : void 0;
   let lastActivity;
   let inFlightTool;
@@ -53438,6 +53590,23 @@ async function runLoop(deps, ctx) {
   let budgetEnded = false;
   let recordedPushedBranch;
   let modelBudgetEndsAt;
+  const receiptAtToolResult = async (e) => {
+    const binding2 = coordinator?.publication;
+    const authority = existingPrPublicationFence?.authority;
+    if (e.type !== "tool_result" || e.tool !== "bash" || !e.ok || e.exitCode !== 0 || e.cut || binding2 === void 0 || authority === void 0 || "blocked" in authority)
+      return;
+    const history = registry.snapshot(run2.id, run2.token)?.events ?? [];
+    const gates = history.filter((event) => event.type === "publication_push_authorized" && event.callId === e.callId);
+    if (gates.length !== 1 || gates[0]?.type !== "publication_push_authorized" || gates[0].ref !== authority.ref || gates[0].expectedHeadSha !== authority.expectedHeadSha)
+      return;
+    try {
+      const head = (await executor.exec(`git rev-parse refs/heads/${authority.ref}`)).trim();
+      const current = { ...binding2, expectedHeadSha: authority.expectedHeadSha };
+      return pairedPublicationPush([...history, e], current, head, e.callId);
+    } catch {
+      return;
+    }
+  };
   const publishEvent = (e, startsRunBudget) => {
     registry.publish(run2.id, e);
     if (isSpanRecord(e)) return;
@@ -53462,12 +53631,16 @@ async function runLoop(deps, ctx) {
     card.update(currentFrame());
   };
   const onEvent = (e) => {
+    if (e.type === "publication_push_authorized" && existingPrPublicationFence !== void 0)
+      existingPrPublicationFence.attributingCallId = e.callId;
     const startsRunBudget = e.type === "lease";
     if (startsRunBudget) {
       modelBudgetEndsAt = e.endsAt;
       run2.control.startLease(() => e.endsAt - clock4());
     }
     void events.write(async () => {
+      const receipt = await receiptAtToolResult(e);
+      let receiptCommitted = false;
       if ((e.type === "tool_call" || e.type === "tool_result") && typeof registry.commitLiveState === "function") {
         const summary = registry.getById(run2.id);
         if (summary?.liveState?.state === "working") {
@@ -53481,12 +53654,16 @@ async function runLoop(deps, ctx) {
               state: "working",
               bound,
               detail: e.type === "tool_call" ? "running a tool" : "model turn",
-              sourceEvents: [{ ...e, seq: sourceSeq }]
+              sourceEvents: [{ ...e, seq: sourceSeq }, ...receipt ? [{ ...receipt, seq: sourceSeq + 1, at }] : []],
+              ...receipt ? { statePatch: { publicationReceipts: [...publicationReceipts, receipt] } } : {}
             };
             try {
               if (ledgerRun?.tracked()) {
                 const committed = await ledgerRun.assignLiveState(assignment);
-                if (committed.ok) registry.commitLiveState(run2.id, committed);
+                if (committed.ok) {
+                  registry.commitLiveState(run2.id, committed);
+                  receiptCommitted = true;
+                }
               } else {
                 const local = assignRunLiveState(summary.liveState, summary.liveStateSeq ?? 0, assignment);
                 if (local.ok) registry.commitLiveState(run2.id, { ...local, liveStateSeq: sourceSeq });
@@ -53500,6 +53677,16 @@ async function runLoop(deps, ctx) {
         }
       }
       publishEvent(e, startsRunBudget);
+      if (receipt !== void 0) {
+        if (receiptCommitted) {
+          publicationReceipts.push(receipt);
+          publishEvent(receipt, false);
+          existingPrPublication = { ref: receipt.ref, expectedHeadSha: receipt.sha };
+          if (existingPrPublicationFence !== void 0) existingPrPublicationFence.authority = existingPrPublication;
+        } else blockExistingPrPublication("the successful push receipt could not be committed durably");
+      }
+      if (e.type === "tool_result" && existingPrPublicationFence !== void 0 && existingPrPublicationFence.attributingCallId === e.callId)
+        delete existingPrPublicationFence.attributingCallId;
     });
   };
   for (const s of mcpForRun?.servers ?? []) {
@@ -53651,6 +53838,8 @@ async function runLoop(deps, ctx) {
   };
   const preserveCodingChildWork = async (cue) => {
     if (workSalvageAttempted || !isCodingPrRun || coordinator === void 0) return;
+    await events.drain();
+    retainPublicationReceipts();
     if (!workspaceObserved) await observeWorkspaceNow();
     const target = coordinatorBranch === void 0 ? { skipped: "the ending checkpoint was skipped: the unit's branch is unavailable" } : salvageTargetOf({
       pushedBranch: pushes.branch(),
@@ -53804,6 +53993,40 @@ async function runLoop(deps, ctx) {
   };
   let workspaceBinding = workspaceBindingFor(round2.selection, profile.machine);
   try {
+    const prBase = repoCtx.baseRef ?? await coordinatorBase;
+    if (coordinator?.publication !== void 0) {
+      const original = coordinator.publication;
+      const restoredHead = resume === void 0 ? void 0 : restoredPublicationHead(publicationReceipts, original);
+      const publication = restoredHead === void 0 ? original : { ...original, expectedHeadSha: restoredHead };
+      const fresh = await (deps.fetchPrFacts ?? fetchPullRequestFacts)({
+        repo: publication.repo,
+        number: publication.pr
+      }).catch(() => void 0);
+      const verified = verifyExistingPrPublication(
+        publication,
+        {
+          repo: repoCtx.repo,
+          pr: repoCtx.pr,
+          ref: repoCtx.ref,
+          baseRef: prBase,
+          requestHeadSha: restoredHead ?? repoCtx.headSha,
+          workspaceRef: binding?.ref,
+          workspaceHeadSha: binding?.sha,
+          owner: {
+            instanceId: coordinator.parentInstanceId,
+            unit: unitOfIdempotencyKey(coordinator.idempotencyKey) ?? ""
+          }
+        },
+        fresh
+      );
+      existingPrPublication = verified.ok ? verified.publication : { blocked: verified.reason };
+      existingPrPublicationFence = { authority: existingPrPublication };
+      if (!verified.ok)
+        shell.note(
+          "quiet",
+          `Existing-PR publication is blocked: ${verified.reason}. Work stays on the bound checkout; no alternate branch or pull request will be published.`
+        );
+    }
     if (finish2) {
       onEvent({
         type: "run_note",
@@ -53869,38 +54092,6 @@ async function runLoop(deps, ctx) {
       const providerCfg = deps.config.config.providers[providerName];
       if (!providerCfg)
         throw new Error(`the ${harness.name} harness found no provider named ${providerName} in the config`);
-      const prBase = repoCtx.baseRef ?? await coordinatorBase;
-      if (coordinator?.publication !== void 0) {
-        const publication = coordinator.publication;
-        const fresh = await (deps.fetchPrFacts ?? fetchPullRequestFacts)({
-          repo: publication.repo,
-          number: publication.pr
-        }).catch(() => void 0);
-        const verified = verifyExistingPrPublication(
-          publication,
-          {
-            repo: repoCtx.repo,
-            pr: repoCtx.pr,
-            ref: repoCtx.ref,
-            baseRef: prBase,
-            requestHeadSha: repoCtx.headSha,
-            workspaceRef: binding?.ref,
-            workspaceHeadSha: binding?.sha,
-            owner: {
-              instanceId: coordinator.parentInstanceId,
-              unit: unitOfIdempotencyKey(coordinator.idempotencyKey) ?? ""
-            }
-          },
-          fresh
-        );
-        existingPrPublication = verified.ok ? verified.publication : { blocked: verified.reason };
-        existingPrPublicationFence = { authority: existingPrPublication };
-        if (!verified.ok)
-          shell.note(
-            "quiet",
-            `Existing-PR publication is blocked: ${verified.reason}. Work stays on the bound checkout; no alternate branch or pull request will be published.`
-          );
-      }
       const ownBranch = coordinator?.publication !== void 0 ? coordinator.publication.publicationRef : prBase !== void 0 ? binding?.ref ?? repoCtx.ref : void 0;
       const protectedBranches = [
         ...new Set(
@@ -54161,6 +54352,8 @@ async function runLoop(deps, ctx) {
     };
     const endingNeedsPreservation = isCodingPrRun && coordinator !== void 0 && (budgetEnded || run2.control.requested !== void 0);
     if (endingNeedsPreservation && run2.control.requested === "hard") await endHarness();
+    await events.drain();
+    retainPublicationReceipts();
     if (isCodingPrRun && !tailSkipped()) await observeWorkspaceNow();
     if (endingNeedsPreservation) await preserveCodingChildWork(budgetEnded ? "budget" : "ending");
     else if (isCodingPrRun && coordinator !== void 0 && !tailSkipped()) await preserveCodingChildWork("completion");
@@ -54376,6 +54569,7 @@ async function runLoop(deps, ctx) {
   } finally {
     clearInterval(heartbeat);
     await events.drain();
+    retainPublicationReceipts();
     const status3 = statusNow();
     if (typeof registry.commitLiveState === "function") {
       const commitBoundary = async (state, at2) => {
@@ -54539,6 +54733,7 @@ var init_runLoop = __esm({
     init_githubPulls();
     init_repoContext();
     init_existingPrPublication();
+    init_publicationPush();
     init_prDescription();
     init_handoff();
     init_reviewVerdict();
@@ -56782,7 +56977,8 @@ async function dispatch(deps, msg, io, opts = {}) {
       );
     };
     const stickyAgent = thread ? stickyAgentOf(thread) : void 0;
-    const threadPr = thread ? threadPrOf(thread) : void 0;
+    const laterPr = (runPr, releasedPr) => releasedPr !== void 0 && (runPr === void 0 || releasedPr.at > runPr.at) ? releasedPr : runPr;
+    let threadPr = laterPr(thread ? threadPrOf(thread) : void 0, pageOwner?.releasedPr);
     const inheritedRepo = operatorRepo ?? (thread ? newestFinishedRunOf(thread)?.repo : void 0) ?? deps.config.scopes(msg.channelId, msg.userId).channel.repo;
     const historicalRoutePreset = restart?.row.meta.route?.preset;
     const resolveCurrent = () => resolveRun(deps, {
@@ -56803,6 +56999,7 @@ async function dispatch(deps, msg, io, opts = {}) {
     const threadLive = admission.get(msg.threadKey) !== void 0 || !resume && !restart && deps.threadsElsewhere.get(msg.threadKey) !== void 0;
     if (thread && !threadLive && deps.coordinatorInstances !== void 0) {
       const owner = pageOwner ?? await ownerOf2(thread, (id) => deps.coordinatorInstances.listUnits(id), msg.threadKey);
+      threadPr = laterPr(threadPr, owner.releasedPr);
       if (owner.kind === "live" && owner.run.hosted === true) {
         const units = owner.run.instanceId === void 0 ? [] : await deps.coordinatorInstances.listUnits(owner.run.instanceId).catch(() => []);
         const open2 = units.filter((u) => u.ending === void 0);
@@ -60811,7 +61008,7 @@ function isBudgetRefusal(error) {
   if (error.status !== void 0 && error.status !== 403) return false;
   return TURN_BUDGET_REFUSAL.test(error.message);
 }
-function judgeOpenCodeAsk(action, resources, rules, relayedToolNames) {
+function judgeOpenCodeAsk(action, resources, rules, relayedToolNames, callId) {
   if (action === "doom_loop")
     return {
       reply: "reject",
@@ -60820,6 +61017,8 @@ function judgeOpenCodeAsk(action, resources, rules, relayedToolNames) {
     };
   const word = openCodeToolWord(action);
   const tool = TOOL_NAME_WORD[action] ?? word;
+  const pending2 = publicationAttributionRefusal(rules, callId);
+  if (pending2 !== void 0) return { reply: "reject", message: pending2, tool };
   if (relayedToolNames.has(action) || relayedToolNames.has(word)) return { reply: "once", tool: action };
   const refuse3 = (reason2) => ({ reply: "reject", message: reason2, tool });
   if (action === "external_directory") {
@@ -61640,6 +61839,7 @@ var init_bridge3 = __esm({
     "use strict";
     init_budgets();
     init_runEvents();
+    init_publicationPush();
     init_contract4();
     init_container();
     init_reattach();
@@ -62507,9 +62707,14 @@ ${data.text}` : data.text;
           request2.action,
           Array.isArray(request2.resources) ? request2.resources : [],
           this.deps.rules,
-          this.deps.relayedToolNames
+          this.deps.relayedToolNames,
+          callId
         );
         if (this.answered.get(callId) !== "reject") this.answered.set(callId, verdict.reply);
+        const authority = this.deps.rules.publication?.authority;
+        const push = openCodeToolWord(request2.action) === "bash" && request2.resources?.length === 1 ? leasedPushCommand(request2.resources[0]) : void 0;
+        if (this.answered.get(callId) === "once" && push !== void 0 && authority !== void 0 && !("blocked" in authority) && push.ref === authority.ref && push.expectedHeadSha === authority.expectedHeadSha)
+          this.emit({ type: "publication_push_authorized", callId, ...push });
         this.decidedReplies.set(request2.id, { reply: verdict.reply, callId, echoed: false });
         const stepID = typeof request2.source?.messageID === "string" ? request2.source.messageID : void 0;
         if (verdict.reply === "reject") {
@@ -72943,7 +73148,7 @@ function findingsRequest(input) {
 
 A person answered the human-gated finding. Treat the finding and this answer together as the fix brief:
 ${input.answers.join("\n\n")}` : "";
-  return `The review of ${input.where} requested changes. Load the \`address-review-findings\` skill and address every finding below, nits included: record one disposition per finding with submit_dispositions (fixed or declined, with a note), squash to coherent commits, resubmit the pull request description with submit_pr_description, and push the branch. Never merge and never approve.
+  return `The review of ${input.where} requested changes. Load the \`address-review-findings\` skill and address every finding below, nits included: record one disposition per finding with submit_dispositions (fixed or declined, with a note). Copy each finding ID exactly, including any \`check:\u2026\` ID; never substitute an \`F1\` ID for a check. Squash to coherent commits, resubmit the pull request description with submit_pr_description, and push the branch. Never merge and never approve.
 
 Findings:
 ${findings}${answers}
@@ -74011,6 +74216,36 @@ function publicationStepPrefix(row2) {
   }
   return prefix;
 }
+async function reconcileMissingFindingsPush(deps, instance, row2, runId3, head, siblings, after) {
+  const binding = row2.publication;
+  if (binding === void 0) return false;
+  const read = await deps.runs.getRun(runId3, { include: "messages" });
+  if (!read.ok) return false;
+  const run2 = read.value;
+  const complete2 = (r) => {
+    const models = Object.values(r.usage?.byModel ?? {});
+    return r.finished && r.persisted === true && !r.provisional && !r.restarting && r.truncated === false && r.events !== void 0 && r.eventCount === r.events.length && r.storedEventCount === r.events.length && r.events.every(
+      (e) => e.type !== "tool_call" || e.tool !== "bash" || e.command !== void 0 && e.command.length < COMMAND_CAP && !e.command.includes("\u2026")
+    ) && !r.events.some((e) => e.type === "tool_result" && e.cut || e.type === "pushed_head") && models.length > 0 && models.every((m) => typeof m.usd === "number" && Number.isFinite(m.usd) && m.usd >= 0);
+  };
+  const tags = run2.events?.filter((e) => e.type === "coordinator_tag") ?? [];
+  const tag = tags.length === 1 ? tags[0] : void 0;
+  if (!complete2(run2) || run2.status !== "completed" || (run2.pushed?.length ?? 0) !== 0 || run2.headSha !== head || run2.parentInstanceId !== instance.id || run2.userId !== instance.userId || run2.repo?.toLowerCase() !== instance.repo.toLowerCase() || run2.threadKey !== (row2.threadKey ?? instance.threadKey) || run2.agent !== "coding" || run2.startedAt < after || run2.finishedAt === void 0 || run2.finishedAt < run2.startedAt || tag?.parentInstanceId !== instance.id || tag.unit !== row2.unit || tag.base !== instance.base || !samePublicationBinding(tag.publication, binding) || run2.pr !== void 0 && (run2.pr.number !== binding.pr || run2.pr.head !== void 0 && run2.pr.head !== row2.branch) || pairedPublicationPush(run2.events, binding, head) === void 0)
+    return false;
+  for (const sibling of siblings.filter(
+    (r) => r.id !== runId3 && r.agent === "coding" && (r.finishedAt === void 0 || r.finishedAt >= after)
+  )) {
+    if (!sibling.finished || sibling.status !== "failed" && sibling.status !== "interrupted" || sibling.parentInstanceId !== instance.id || sibling.userId !== instance.userId || sibling.repo?.toLowerCase() !== instance.repo.toLowerCase() || sibling.threadKey !== run2.threadKey || sibling.startedAt < after || sibling.finishedAt === void 0 || sibling.finishedAt > run2.startedAt || (sibling.pushed?.length ?? 0) > 0)
+      return false;
+    const prior = await deps.runs.getRun(sibling.id, { include: "messages" });
+    if (!prior.ok || !complete2(prior.value) || prior.value.events.some(
+      (e) => e.type === "pushed_head" || e.type === "tool_call" && e.tool === "bash" && /\bgit\s+push\b/.test(e.command ?? e.summary)
+    ))
+      return false;
+  }
+  const fresh = await deps.fetchPrFacts({ repo: instance.repo, number: binding.pr }).catch(() => void 0);
+  return fresh?.state === "open" && fresh.sameRepoHead === true && fresh.headBranchExists === true && fresh.headRef === binding.headRef && fresh.baseRef === binding.baseRef && fresh.headSha === head && fresh.verifiedHead?.repo.toLowerCase() === instance.repo.toLowerCase() && fresh.verifiedHead.ref === binding.publicationRef && fresh.verifiedHead.sha === head;
+}
 async function advanceFindingsPublication(deps, instance, row2, facts2, runId3) {
   if (row2.publication === void 0 || facts2.headSha === row2.publication.expectedHeadSha) return row2;
   const child = await deps.runs.getRun(runId3, { include: "messages" });
@@ -74018,6 +74253,7 @@ async function advanceFindingsPublication(deps, instance, row2, facts2, runId3)
   const latestReview = [...row2.rounds].reverse().find((round2) => round2.agent === "review");
   const prefix = row2.recovery !== void 0 ? `${row2.unit}/recovery` : publicationStepPrefix(row2);
   const findingsPrefix = `${instance.id}:${prefix}/${latestReview?.index}/findings`;
+  let reconciledPush = false;
   if (row2.recovery === void 0) {
     const tags = child.ok ? child.value.events?.filter((event) => event.type === "coordinator_tag") ?? [] : [];
     const tag = tags.length === 1 ? tags[0] : void 0;
@@ -74036,8 +74272,18 @@ async function advanceFindingsPublication(deps, instance, row2, facts2, runId3)
       (run2) => run2.id !== runId3 && !(run2.finished && (run2.status === "failed" || run2.status === "interrupted") && run2.agent === "coding" && run2.userId === instance.userId && run2.repo?.toLowerCase() === instance.repo.toLowerCase() && run2.threadKey === (row2.threadKey ?? instance.threadKey) && run2.startedAt >= latestReview.at && run2.finishedAt !== void 0 && run2.finishedAt >= run2.startedAt && run2.finishedAt <= child.value.startedAt && (run2.pushed?.length ?? 0) === 0)
     ))
       throw new PublicationBindingRefusal("publication_facts_mismatch");
+    if (child.ok && (child.value.pushed?.length ?? 0) === 0 && fullHead(facts2.headSha))
+      reconciledPush = await reconcileMissingFindingsPush(
+        deps,
+        instance,
+        row2,
+        runId3,
+        facts2.headSha,
+        listing.runs,
+        latestReview.at
+      );
   }
-  if (!child.ok || child.value.finished !== true || child.value.status !== "completed" || child.value.agent !== "coding" || child.value.parentInstanceId !== instance.id || child.value.userId !== instance.userId || child.value.repo?.toLowerCase() !== instance.repo.toLowerCase() || child.value.threadKey !== (row2.threadKey ?? instance.threadKey) || (row2.recovery !== void 0 ? child.value.idempotencyKey?.startsWith(`${instance.id}:${row2.unit}/recovery/`) !== true || !/\/findings(?:\/a[1-9][0-9]*)?$/.test(child.value.idempotencyKey ?? "") : !isStepAttempt(child.value.idempotencyKey, findingsPrefix)) || !fullHead(facts2.headSha) || child.value.headSha !== facts2.headSha || child.value.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || facts2.state !== "open" || facts2.sameRepoHead !== true || facts2.headBranchExists !== true || facts2.headRef !== row2.publication.headRef || facts2.baseRef !== row2.publication.baseRef || facts2.verifiedHead?.repo.toLowerCase() !== instance.repo.toLowerCase() || facts2.verifiedHead.ref !== row2.publication.publicationRef || facts2.verifiedHead.sha !== facts2.headSha || row2.publication.repo.toLowerCase() !== instance.repo.toLowerCase() || row2.publication.pr !== row2.pr?.number || row2.publication.baseRef !== instance.base || row2.publication.headRef !== row2.branch || row2.publication.publicationRef !== row2.branch || !samePublicationOwner(row2.publication.owner, owner))
+  if (!child.ok || child.value.finished !== true || child.value.status !== "completed" || child.value.agent !== "coding" || child.value.parentInstanceId !== instance.id || child.value.userId !== instance.userId || child.value.repo?.toLowerCase() !== instance.repo.toLowerCase() || child.value.threadKey !== (row2.threadKey ?? instance.threadKey) || (row2.recovery !== void 0 ? child.value.idempotencyKey?.startsWith(`${instance.id}:${row2.unit}/recovery/`) !== true || !/\/findings(?:\/a[1-9][0-9]*)?$/.test(child.value.idempotencyKey ?? "") : !isStepAttempt(child.value.idempotencyKey, findingsPrefix)) || !fullHead(facts2.headSha) || child.value.headSha !== facts2.headSha || !reconciledPush && child.value.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || facts2.state !== "open" || facts2.sameRepoHead !== true || facts2.headBranchExists !== true || facts2.headRef !== row2.publication.headRef || facts2.baseRef !== row2.publication.baseRef || facts2.verifiedHead?.repo.toLowerCase() !== instance.repo.toLowerCase() || facts2.verifiedHead.ref !== row2.publication.publicationRef || facts2.verifiedHead.sha !== facts2.headSha || row2.publication.repo.toLowerCase() !== instance.repo.toLowerCase() || row2.publication.pr !== row2.pr?.number || row2.publication.baseRef !== instance.base || row2.publication.headRef !== row2.branch || row2.publication.publicationRef !== row2.branch || !samePublicationOwner(row2.publication.owner, owner))
     throw new PublicationBindingRefusal("publication_facts_mismatch");
   try {
     if (row2.recovery !== void 0 && deps.runnerOwnership?.claim(instance.repo, row2.publication.pr, owner) !== true)
@@ -74334,7 +74580,16 @@ async function recoverOriginalUnit(body, deps, caller) {
       const checkedAttempts = attempts.filter((run2) => run2.idempotencyKey === `${instance.id}:${checkedStep}`);
       const completed = checkedAttempts.length === 1 ? checkedAttempts[0] : void 0;
       const reviewFinishedAt = review.finishedAt;
-      if (reviewFinishedAt === void 0 || completed === void 0 || !completed.finished || completed.status !== "completed" || completed.agent !== "coding" || completed.userId !== instance.userId || completed.repo?.toLowerCase() !== instance.repo.toLowerCase() || completed.threadKey !== unitThreadKey || completed.pr !== void 0 && (completed.pr.number !== pr.number || completed.pr.head !== void 0 && completed.pr.head !== row2.branch) || completed.headSha !== facts2.headSha || expectedHead !== reviewedHead && expectedHead !== facts2.headSha || completed.pushed?.some((push) => push.ref !== row2.branch) === true || headMoved && completed.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || completed.startedAt < reviewFinishedAt || completed.finishedAt === void 0 || completed.finishedAt < completed.startedAt || completed.finishedAt > row2.ending.at || // Inspect every attempt, not just runs matching the current PR head:
+      const reconciledPush = completed !== void 0 && headMoved && reviewFinishedAt !== void 0 && (completed.pushed?.length ?? 0) === 0 && await reconcileMissingFindingsPush(
+        deps,
+        instance,
+        row2,
+        completed.id,
+        facts2.headSha,
+        unitListing.runs,
+        reviewFinishedAt
+      );
+      if (reviewFinishedAt === void 0 || completed === void 0 || !completed.finished || completed.status !== "completed" || completed.agent !== "coding" || completed.userId !== instance.userId || completed.repo?.toLowerCase() !== instance.repo.toLowerCase() || completed.threadKey !== unitThreadKey || completed.pr !== void 0 && (completed.pr.number !== pr.number || completed.pr.head !== void 0 && completed.pr.head !== row2.branch) || completed.headSha !== facts2.headSha || expectedHead !== reviewedHead && expectedHead !== facts2.headSha || completed.pushed?.some((push) => push.ref !== row2.branch) === true || headMoved && !reconciledPush && completed.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || completed.startedAt < reviewFinishedAt || completed.finishedAt === void 0 || completed.finishedAt < completed.startedAt || completed.finishedAt > row2.ending.at || // Inspect every attempt, not just runs matching the current PR head:
       // any competing success or push remains ambiguous after a later push.
       attempts.some(
         (run2) => run2.id !== completed.id && !(run2.finished && (run2.status === "failed" || run2.status === "interrupted") && run2.agent === "coding" && run2.userId === instance.userId && run2.repo?.toLowerCase() === instance.repo.toLowerCase() && run2.threadKey === unitThreadKey && run2.startedAt >= reviewFinishedAt && run2.finishedAt !== void 0 && run2.finishedAt >= run2.startedAt && run2.finishedAt <= completed.startedAt && (run2.pushed?.length ?? 0) === 0)
@@ -75998,6 +76253,7 @@ var init_adminCoordinator = __esm({
     "use strict";
     init_budgets();
     init_verbosity();
+    init_publicationPush();
     init_prDescription();
     init_reply();
     init_registry();
@@ -76012,6 +76268,7 @@ var init_adminCoordinator = __esm({
     init_effort();
     init_reviewVerdict();
     init_runFriction();
+    init_runEvents();
     init_runRecord();
     init_coordinator();
     init_renewal();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreplane/switchboard",
-  "version": "1.264.0",
+  "version": "1.265.1",
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
   "homepage": "https://openswitchboard.dev",