@coreplane/switchboard 1.265.0 → 1.265.1

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.265.0",
+  "version": "1.265.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.265.0",
+      "version": "1.265.1",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -21060,7 +21060,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.265.0",
+      "version": "1.265.1",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.265.0",
+  "version": "1.265.1",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.265.0",
-  "commit": "39607a27b4b5751330311c08f9068a6bc007ca80",
-  "builtAt": "2026-09-26T04:13:47.389Z"
+  "version": "1.265.1",
+  "commit": "dccb10815d97823de2be35d9768379a2d9ff6aaf",
+  "builtAt": "2026-09-26T14:55:53.149Z"
 }

package/dist/assets/src/core/publicationPush.ts

@@ -0,0 +1,173 @@
+import type { ExistingPrPublicationBinding } from "./coordinator/contract.js";
+import { COMMAND_CAP, TOOL_OUTPUT_CAP, type RunEvent } from "./runEvents.js";
+
+export interface PublicationPushReceipt {
+  callId: string;
+  previousHeadSha: string;
+  repo: string;
+  pr: number;
+  owner: ExistingPrPublicationBinding["owner"];
+}
+
+type PushEvent = Extract<RunEvent, { type: "pushed_head" }>;
+const fullSha = (s: string): boolean => /^[a-f0-9]{40}$/.test(s);
+const refName = (s: string): boolean =>
+  /^[a-zA-Z0-9_/-]+(?:\.[a-zA-Z0-9_/-]+)*$/.test(s) && !s.includes("..") && !s.startsWith("-");
+const shortRef = (s: string): string => s.replace(/^refs\/heads\//, "");
+
+/** Deliberately not a shell interpreter. Only a standalone literal push can
+ * attest its result: pipelines, scripts, substitutions and compound commands
+ * cannot prove which operation produced stdout or the successful exit. */
+export function leasedPushCommand(command: string): { ref: string; expectedHeadSha: string } | undefined {
+  if (command.length >= COMMAND_CAP) return;
+  const literal = command.replace(/[ \t]+2>&1[ \t]*$/, "");
+  if (!/^git push\s/.test(literal) || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
+  const words = literal.trim().split(/\s+/).slice(2);
+  const leases = words.filter((w) => w.startsWith("--force-with-lease="));
+  if (leases.length !== 1) return;
+  const lease = /^--force-with-lease=refs\/heads\/([^:]+):([a-f0-9]{40})$/.exec(leases[0]!);
+  if (!lease || !refName(lease[1]!)) return;
+  const args = words.filter((w) => w !== leases[0] && w !== "-u" && w !== "--set-upstream");
+  if (args.length !== 2 || args[0] !== "origin") return;
+  const refs = args[1]!.split(":");
+  if (refs.length > 2 || shortRef(refs[0]!) !== lease[1] || shortRef(refs[1] ?? refs[0]!) !== lease[1]) return;
+  return { ref: lease[1]!, expectedHeadSha: lease[2]! };
+}
+
+/** A legacy record needs the complete pair, never its display summary, an
+ * assistant's prose or the remote head alone. More than one attempted push is
+ * intentionally ambiguous; historical reconciliation does not choose one. */
+export function pairedPublicationPush(
+  events: readonly RunEvent[],
+  binding: ExistingPrPublicationBinding,
+  head: string,
+  callId?: string,
+): PushEvent | undefined {
+  if (!fullSha(head) || !fullSha(binding.expectedHeadSha) || head === binding.expectedHeadSha) return;
+  const calls = events.filter(
+    (e): e is Extract<RunEvent, { type: "tool_call" }> =>
+      e.type === "tool_call" &&
+      e.tool === "bash" &&
+      (callId === undefined ? /\bgit\s+push\b/.test(e.command ?? e.summary) : e.callId === callId),
+  );
+  if (calls.length !== 1) return;
+  const call = calls[0]!;
+  if (
+    !call.callId ||
+    !call.command ||
+    events.filter((e) => e.type === "tool_call" && e.callId === call.callId).length !== 1
+  )
+    return;
+  const command = leasedPushCommand(call.command);
+  if (command?.ref !== binding.publicationRef || command.expectedHeadSha !== binding.expectedHeadSha) return;
+  const results = events.filter(
+    (e): e is Extract<RunEvent, { type: "tool_result" }> => e.type === "tool_result" && e.callId === call.callId,
+  );
+  if (results.length !== 1) return;
+  const result = results[0]!;
+  if (
+    events.indexOf(result) <= events.indexOf(call) ||
+    result.tool !== "bash" ||
+    !result.ok ||
+    result.exitCode !== 0 ||
+    result.cut ||
+    !result.output ||
+    result.output.length >= TOOL_OUTPUT_CAP
+  )
+    return;
+  let lines = result.output.trim().split(/\r?\n/);
+  const tracking = `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`;
+  if (
+    /(?:^|\s)(?:-u|--set-upstream)(?:\s|$)/.test(call.command) &&
+    lines.filter((line) => line === tracking).length === 1
+  )
+    lines = lines.filter((line) => line !== tracking);
+  if (lines.length !== 2) return;
+  const remote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(lines[0]!);
+  const update = /^\s*\+?\s*([a-f0-9]{7,40})(\.{2,3})([a-f0-9]{7,40})\s+(\S+) -> (\S+)( \(forced update\))?$/.exec(
+    lines[1]!,
+  );
+  if (
+    !remote ||
+    remote[1]!.toLowerCase() !== binding.repo.toLowerCase() ||
+    !update ||
+    !binding.expectedHeadSha.startsWith(update[1]!) ||
+    !head.startsWith(update[3]!) ||
+    update[1] === update[3] ||
+    shortRef(update[4]!) !== binding.publicationRef ||
+    shortRef(update[5]!) !== binding.publicationRef
+  )
+    return;
+  return {
+    type: "pushed_head",
+    ref: binding.publicationRef,
+    sha: head,
+    by: "push",
+    receipt: {
+      callId: call.callId,
+      previousHeadSha: binding.expectedHeadSha,
+      repo: binding.repo,
+      pr: binding.pr,
+      owner: { ...binding.owner },
+    },
+  };
+}
+
+/** State is stored JSON, not an unchecked cast back into publication authority. */
+export function publicationReceiptsFromState(value: unknown): PushEvent[] {
+  if (!Array.isArray(value)) return [];
+  const valid = value.every((v) => {
+    if (typeof v !== "object" || v === null) return false;
+    const r = v.receipt;
+    return (
+      v.type === "pushed_head" &&
+      v.by === "push" &&
+      typeof v.ref === "string" &&
+      refName(v.ref) &&
+      typeof v.sha === "string" &&
+      fullSha(v.sha) &&
+      typeof r === "object" &&
+      r !== null &&
+      typeof r.callId === "string" &&
+      r.callId.length > 0 &&
+      typeof r.previousHeadSha === "string" &&
+      fullSha(r.previousHeadSha) &&
+      typeof r.repo === "string" &&
+      Number.isSafeInteger(r.pr) &&
+      r.pr > 0 &&
+      typeof r.owner === "object" &&
+      r.owner !== null &&
+      typeof r.owner.instanceId === "string" &&
+      typeof r.owner.unit === "string"
+    );
+  });
+  return valid ? ([...value] as PushEvent[]) : [];
+}
+
+/** Only the run's typed, contiguous leased transitions can move its restart
+ * fence. The caller still verifies the fresh PR and attached workspace. */
+export function restoredPublicationHead(
+  events: readonly RunEvent[],
+  binding: ExistingPrPublicationBinding,
+): string | undefined {
+  let head = binding.expectedHeadSha;
+  const seen = new Set<string>();
+  for (const e of events) {
+    if (e.type !== "pushed_head" || e.receipt === undefined) continue;
+    const r = e.receipt;
+    if (
+      e.ref !== binding.publicationRef ||
+      r.repo !== binding.repo ||
+      r.pr !== binding.pr ||
+      r.owner.instanceId !== binding.owner.instanceId ||
+      r.owner.unit !== binding.owner.unit ||
+      r.previousHeadSha !== head ||
+      !fullSha(e.sha) ||
+      seen.has(r.callId)
+    )
+      return;
+    seen.add(r.callId);
+    head = e.sha;
+  }
+  return head === binding.expectedHeadSha ? undefined : head;
+}

package/dist/assets/src/core/runEvents.ts

@@ -944,12 +944,23 @@ export type RunEvent =
       ref: string;
       sha: string;
       by: "push" | "salvage";
+      /** Exact leased tool result, retained before any post-step can refuse. */
+      receipt?: import("./publicationPush.js").PublicationPushReceipt;
       /** No uncommitted or unpushed work at the push (record 0064): the fact
        *  the plane's soft stop reads. Absent where the measure was missing. */
       clean?: boolean;
       seq?: number;
       at?: number;
     }
+  /** The server gate admitted this exact leased push, not a child's claim. */
+  | {
+      type: "publication_push_authorized";
+      callId: string;
+      ref: string;
+      expectedHeadSha: string;
+      seq?: number;
+      at?: number;
+    }
   /** The coordinator tag as a fact of the run (docs/reference/specs/run-history.md
    *  item 48a): the instance the run is a child of, the unit its idempotency
    *  key named, and the base branch its pull request targets — published by

package/dist/cli.js

@@ -36249,6 +36249,8 @@ function activityLine(e) {
     case "pr_opened":
       return "PR opened";
     // published straight to the registry — never arrives here
+    case "publication_push_authorized":
+      return "push authorized";
     case "pushed_head":
       return `\u2B06 pushed ${e.ref} @ ${e.sha.slice(0, 7)}`;
     case "coordinator_tag":
@@ -50261,6 +50263,11 @@ function reachFor(identity2) {
   if (identity2 === "read") return READ_REACH;
   return NONE_REACH;
 }
+function publicationAttributionRefusal(rules, callId) {
+  const pending2 = rules.publication?.attributingCallId;
+  if (pending2 !== void 0 && pending2 !== callId)
+    return "push attribution is still pending; no later tool may change the checkout until its result is recorded";
+}
 function openCodeToolWord(action) {
   const mapped = OPENCODE_ACTION_TO_TOOL_WORD[action];
   if (mapped !== void 0) return mapped;
@@ -50464,6 +50471,98 @@ var init_toolRules = __esm({
   }
 });
 
+// ../../src/core/publicationPush.ts
+function leasedPushCommand(command2) {
+  if (command2.length >= COMMAND_CAP) return;
+  const literal = command2.replace(/[ \t]+2>&1[ \t]*$/, "");
+  if (!/^git push\s/.test(literal) || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
+  const words = literal.trim().split(/\s+/).slice(2);
+  const leases = words.filter((w) => w.startsWith("--force-with-lease="));
+  if (leases.length !== 1) return;
+  const lease = /^--force-with-lease=refs\/heads\/([^:]+):([a-f0-9]{40})$/.exec(leases[0]);
+  if (!lease || !refName(lease[1])) return;
+  const args = words.filter((w) => w !== leases[0] && w !== "-u" && w !== "--set-upstream");
+  if (args.length !== 2 || args[0] !== "origin") return;
+  const refs = args[1].split(":");
+  if (refs.length > 2 || shortRef(refs[0]) !== lease[1] || shortRef(refs[1] ?? refs[0]) !== lease[1]) return;
+  return { ref: lease[1], expectedHeadSha: lease[2] };
+}
+function pairedPublicationPush(events, binding, head, callId) {
+  if (!fullSha(head) || !fullSha(binding.expectedHeadSha) || head === binding.expectedHeadSha) return;
+  const calls = events.filter(
+    (e) => e.type === "tool_call" && e.tool === "bash" && (callId === void 0 ? /\bgit\s+push\b/.test(e.command ?? e.summary) : e.callId === callId)
+  );
+  if (calls.length !== 1) return;
+  const call2 = calls[0];
+  if (!call2.callId || !call2.command || events.filter((e) => e.type === "tool_call" && e.callId === call2.callId).length !== 1)
+    return;
+  const command2 = leasedPushCommand(call2.command);
+  if (command2?.ref !== binding.publicationRef || command2.expectedHeadSha !== binding.expectedHeadSha) return;
+  const results = events.filter(
+    (e) => e.type === "tool_result" && e.callId === call2.callId
+  );
+  if (results.length !== 1) return;
+  const result = results[0];
+  if (events.indexOf(result) <= events.indexOf(call2) || result.tool !== "bash" || !result.ok || result.exitCode !== 0 || result.cut || !result.output || result.output.length >= TOOL_OUTPUT_CAP)
+    return;
+  let lines = result.output.trim().split(/\r?\n/);
+  const tracking = `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`;
+  if (/(?:^|\s)(?:-u|--set-upstream)(?:\s|$)/.test(call2.command) && lines.filter((line4) => line4 === tracking).length === 1)
+    lines = lines.filter((line4) => line4 !== tracking);
+  if (lines.length !== 2) return;
+  const remote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(lines[0]);
+  const update = /^\s*\+?\s*([a-f0-9]{7,40})(\.{2,3})([a-f0-9]{7,40})\s+(\S+) -> (\S+)( \(forced update\))?$/.exec(
+    lines[1]
+  );
+  if (!remote || remote[1].toLowerCase() !== binding.repo.toLowerCase() || !update || !binding.expectedHeadSha.startsWith(update[1]) || !head.startsWith(update[3]) || update[1] === update[3] || shortRef(update[4]) !== binding.publicationRef || shortRef(update[5]) !== binding.publicationRef)
+    return;
+  return {
+    type: "pushed_head",
+    ref: binding.publicationRef,
+    sha: head,
+    by: "push",
+    receipt: {
+      callId: call2.callId,
+      previousHeadSha: binding.expectedHeadSha,
+      repo: binding.repo,
+      pr: binding.pr,
+      owner: { ...binding.owner }
+    }
+  };
+}
+function publicationReceiptsFromState(value) {
+  if (!Array.isArray(value)) return [];
+  const valid = value.every((v) => {
+    if (typeof v !== "object" || v === null) return false;
+    const r = v.receipt;
+    return v.type === "pushed_head" && v.by === "push" && typeof v.ref === "string" && refName(v.ref) && typeof v.sha === "string" && fullSha(v.sha) && typeof r === "object" && r !== null && typeof r.callId === "string" && r.callId.length > 0 && typeof r.previousHeadSha === "string" && fullSha(r.previousHeadSha) && typeof r.repo === "string" && Number.isSafeInteger(r.pr) && r.pr > 0 && typeof r.owner === "object" && r.owner !== null && typeof r.owner.instanceId === "string" && typeof r.owner.unit === "string";
+  });
+  return valid ? [...value] : [];
+}
+function restoredPublicationHead(events, binding) {
+  let head = binding.expectedHeadSha;
+  const seen = /* @__PURE__ */ new Set();
+  for (const e of events) {
+    if (e.type !== "pushed_head" || e.receipt === void 0) continue;
+    const r = e.receipt;
+    if (e.ref !== binding.publicationRef || r.repo !== binding.repo || r.pr !== binding.pr || r.owner.instanceId !== binding.owner.instanceId || r.owner.unit !== binding.owner.unit || r.previousHeadSha !== head || !fullSha(e.sha) || seen.has(r.callId))
+      return;
+    seen.add(r.callId);
+    head = e.sha;
+  }
+  return head === binding.expectedHeadSha ? void 0 : head;
+}
+var fullSha, refName, shortRef;
+var init_publicationPush = __esm({
+  "../../src/core/publicationPush.ts"() {
+    "use strict";
+    init_runEvents();
+    fullSha = (s) => /^[a-f0-9]{40}$/.test(s);
+    refName = (s) => /^[a-zA-Z0-9_/-]+(?:\.[a-zA-Z0-9_/-]+)*$/.test(s) && !s.includes("..") && !s.startsWith("-");
+    shortRef = (s) => s.replace(/^refs\/heads\//, "");
+  }
+});
+
 // ../../src/core/harness/pi/relay.ts
 function stillRunningNote(tool) {
   return `This ${tool} call is still running in the bot: the process that made it was relaunched while the call was in flight, and the call keeps running there rather than being re-run \u2014 do not run it again; its result is kept on the relay under the same call id.`;
@@ -50494,9 +50593,18 @@ function authorizeToolCall(harness, ask) {
     return { allow: false, reason: reason2 };
   };
   if (blocked2 !== void 0) return refuse3(blocked2);
+  const pending2 = publicationAttributionRefusal(harness.rules, ask.toolCallId);
+  if (pending2 !== void 0) return refuse3(pending2);
   if (harness.tools.some((t) => t.name === ask.tool)) return { allow: true };
   const verdict = judgeToolCall(ask.tool, ask.input, harness.rules);
-  if (verdict.verdict === "allowed") return { allow: true };
+  if (verdict.verdict === "allowed") {
+    const authority = harness.rules.publication?.authority;
+    const input = ask.input;
+    const push = ask.tool === "bash" && typeof input?.command === "string" ? leasedPushCommand(input.command) : void 0;
+    if (push !== void 0 && authority !== void 0 && !("blocked" in authority) && push.ref === authority.ref && push.expectedHeadSha === authority.expectedHeadSha)
+      harness.emit({ type: "publication_push_authorized", callId: ask.toolCallId, ...push });
+    return { allow: true };
+  }
   return refuse3(verdict.reason);
 }
 function answerCompaction(harness, ask) {
@@ -50563,6 +50671,7 @@ var init_relay = __esm({
     init_runEvents();
     init_compactionFallback();
     init_toolRules();
+    init_publicationPush();
     HarnessRegistry = class {
       live = /* @__PURE__ */ new Map();
       /** The run drives a pi from here, its relayed calls kept beside it; the
@@ -52376,19 +52485,19 @@ var init_resume = __esm({
 // ../../src/core/existingPrPublication.ts
 function verifyExistingPrPublication(durable, local, remote) {
   if (durable === void 0) return blocked("the durable existing-PR binding is missing");
-  if (!fullSha(durable.expectedHeadSha)) return blocked("the durable expected head is not a full commit SHA");
+  if (!fullSha2(durable.expectedHeadSha)) return blocked("the durable expected head is not a full commit SHA");
   if (durable.headRef !== durable.publicationRef)
     return blocked("the durable head ref and owned publication ref do not agree");
   if (local.repo !== durable.repo) return blocked("the resolved repository does not match the durable binding");
   if (local.pr !== durable.pr) return blocked("the resolved pull request does not match the durable binding");
   if (local.ref !== durable.headRef) return blocked("the resolved head ref does not match the durable binding");
   if (local.baseRef !== durable.baseRef) return blocked("the resolved base ref does not match the durable binding");
-  if (!fullSha(local.requestHeadSha)) return blocked("the request head is missing or not a full commit SHA");
+  if (!fullSha2(local.requestHeadSha)) return blocked("the request head is missing or not a full commit SHA");
   if (local.requestHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the request head does not match the durable expected commit");
   if (local.workspaceRef !== durable.publicationRef)
     return blocked("the checked-out publication ref does not match the durable binding");
-  if (!fullSha(local.workspaceHeadSha)) return blocked("the checked-out head is missing or not a full commit SHA");
+  if (!fullSha2(local.workspaceHeadSha)) return blocked("the checked-out head is missing or not a full commit SHA");
   if (local.workspaceHeadSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the checked-out head does not match the durable expected commit");
   if (!sameOwner(local.owner, durable.owner)) return blocked("the publication owner changed");
@@ -52398,7 +52507,7 @@ function verifyExistingPrPublication(durable, local, remote) {
   if (remote.headBranchExists !== true) return blocked("the pull request head branch is missing or unknown");
   if (remote.headRef !== durable.headRef) return blocked("the pull request head ref moved");
   if (remote.baseRef !== durable.baseRef) return blocked("the pull request base ref moved");
-  if (!fullSha(remote.headSha)) return blocked("the fresh pull-request head is missing or not a full commit SHA");
+  if (!fullSha2(remote.headSha)) return blocked("the fresh pull-request head is missing or not a full commit SHA");
   if (remote.headSha.toLowerCase() !== durable.expectedHeadSha.toLowerCase())
     return blocked("the pull request head moved from the durable expected commit");
   return {
@@ -52406,11 +52515,11 @@ function verifyExistingPrPublication(durable, local, remote) {
     publication: { ref: durable.publicationRef, expectedHeadSha: durable.expectedHeadSha.toLowerCase() }
   };
 }
-var fullSha, sameOwner, blocked;
+var fullSha2, sameOwner, blocked;
 var init_existingPrPublication = __esm({
   "../../src/core/existingPrPublication.ts"() {
     "use strict";
-    fullSha = (value) => value !== void 0 && /^[0-9a-f]{40}$/i.test(value);
+    fullSha2 = (value) => value !== void 0 && /^[0-9a-f]{40}$/i.test(value);
     sameOwner = (left, right) => left?.instanceId === right.instanceId && left.unit === right.unit;
     blocked = (reason2) => ({ ok: false, reason: reason2 });
   }
@@ -53437,6 +53546,14 @@ async function runLoop(deps, ctx) {
   let reviewHead = ctx.reviewHead;
   let lastActivityAt = ctx.loopStartedAt;
   const restored = resume?.row.state ?? {};
+  const restoredReceipts = publicationReceiptsFromState(restored.publicationReceipts);
+  const publicationReceipts = coordinator?.publication !== void 0 && restoredPublicationHead(restoredReceipts, coordinator.publication) !== void 0 ? restoredReceipts : [];
+  const retainPublicationReceipts = () => {
+    const history = registry.snapshot(run2.id, run2.token)?.events ?? [];
+    const latest = publicationReceipts.at(-1);
+    if (latest !== void 0 && !history.some((e) => e.type === "pushed_head" && e.ref === latest.ref))
+      registry.publish(run2.id, latest);
+  };
   let checklist = typeof restored.checklist === "string" ? restored.checklist : void 0;
   let lastActivity;
   let inFlightTool;
@@ -53473,6 +53590,23 @@ async function runLoop(deps, ctx) {
   let budgetEnded = false;
   let recordedPushedBranch;
   let modelBudgetEndsAt;
+  const receiptAtToolResult = async (e) => {
+    const binding2 = coordinator?.publication;
+    const authority = existingPrPublicationFence?.authority;
+    if (e.type !== "tool_result" || e.tool !== "bash" || !e.ok || e.exitCode !== 0 || e.cut || binding2 === void 0 || authority === void 0 || "blocked" in authority)
+      return;
+    const history = registry.snapshot(run2.id, run2.token)?.events ?? [];
+    const gates = history.filter((event) => event.type === "publication_push_authorized" && event.callId === e.callId);
+    if (gates.length !== 1 || gates[0]?.type !== "publication_push_authorized" || gates[0].ref !== authority.ref || gates[0].expectedHeadSha !== authority.expectedHeadSha)
+      return;
+    try {
+      const head = (await executor.exec(`git rev-parse refs/heads/${authority.ref}`)).trim();
+      const current = { ...binding2, expectedHeadSha: authority.expectedHeadSha };
+      return pairedPublicationPush([...history, e], current, head, e.callId);
+    } catch {
+      return;
+    }
+  };
   const publishEvent = (e, startsRunBudget) => {
     registry.publish(run2.id, e);
     if (isSpanRecord(e)) return;
@@ -53497,12 +53631,16 @@ async function runLoop(deps, ctx) {
     card.update(currentFrame());
   };
   const onEvent = (e) => {
+    if (e.type === "publication_push_authorized" && existingPrPublicationFence !== void 0)
+      existingPrPublicationFence.attributingCallId = e.callId;
     const startsRunBudget = e.type === "lease";
     if (startsRunBudget) {
       modelBudgetEndsAt = e.endsAt;
       run2.control.startLease(() => e.endsAt - clock4());
     }
     void events.write(async () => {
+      const receipt = await receiptAtToolResult(e);
+      let receiptCommitted = false;
       if ((e.type === "tool_call" || e.type === "tool_result") && typeof registry.commitLiveState === "function") {
         const summary = registry.getById(run2.id);
         if (summary?.liveState?.state === "working") {
@@ -53516,12 +53654,16 @@ async function runLoop(deps, ctx) {
               state: "working",
               bound,
               detail: e.type === "tool_call" ? "running a tool" : "model turn",
-              sourceEvents: [{ ...e, seq: sourceSeq }]
+              sourceEvents: [{ ...e, seq: sourceSeq }, ...receipt ? [{ ...receipt, seq: sourceSeq + 1, at }] : []],
+              ...receipt ? { statePatch: { publicationReceipts: [...publicationReceipts, receipt] } } : {}
             };
             try {
               if (ledgerRun?.tracked()) {
                 const committed = await ledgerRun.assignLiveState(assignment);
-                if (committed.ok) registry.commitLiveState(run2.id, committed);
+                if (committed.ok) {
+                  registry.commitLiveState(run2.id, committed);
+                  receiptCommitted = true;
+                }
               } else {
                 const local = assignRunLiveState(summary.liveState, summary.liveStateSeq ?? 0, assignment);
                 if (local.ok) registry.commitLiveState(run2.id, { ...local, liveStateSeq: sourceSeq });
@@ -53535,6 +53677,16 @@ async function runLoop(deps, ctx) {
         }
       }
       publishEvent(e, startsRunBudget);
+      if (receipt !== void 0) {
+        if (receiptCommitted) {
+          publicationReceipts.push(receipt);
+          publishEvent(receipt, false);
+          existingPrPublication = { ref: receipt.ref, expectedHeadSha: receipt.sha };
+          if (existingPrPublicationFence !== void 0) existingPrPublicationFence.authority = existingPrPublication;
+        } else blockExistingPrPublication("the successful push receipt could not be committed durably");
+      }
+      if (e.type === "tool_result" && existingPrPublicationFence !== void 0 && existingPrPublicationFence.attributingCallId === e.callId)
+        delete existingPrPublicationFence.attributingCallId;
     });
   };
   for (const s of mcpForRun?.servers ?? []) {
@@ -53686,6 +53838,8 @@ async function runLoop(deps, ctx) {
   };
   const preserveCodingChildWork = async (cue) => {
     if (workSalvageAttempted || !isCodingPrRun || coordinator === void 0) return;
+    await events.drain();
+    retainPublicationReceipts();
     if (!workspaceObserved) await observeWorkspaceNow();
     const target = coordinatorBranch === void 0 ? { skipped: "the ending checkpoint was skipped: the unit's branch is unavailable" } : salvageTargetOf({
       pushedBranch: pushes.branch(),
@@ -53839,6 +53993,40 @@ async function runLoop(deps, ctx) {
   };
   let workspaceBinding = workspaceBindingFor(round2.selection, profile.machine);
   try {
+    const prBase = repoCtx.baseRef ?? await coordinatorBase;
+    if (coordinator?.publication !== void 0) {
+      const original = coordinator.publication;
+      const restoredHead = resume === void 0 ? void 0 : restoredPublicationHead(publicationReceipts, original);
+      const publication = restoredHead === void 0 ? original : { ...original, expectedHeadSha: restoredHead };
+      const fresh = await (deps.fetchPrFacts ?? fetchPullRequestFacts)({
+        repo: publication.repo,
+        number: publication.pr
+      }).catch(() => void 0);
+      const verified = verifyExistingPrPublication(
+        publication,
+        {
+          repo: repoCtx.repo,
+          pr: repoCtx.pr,
+          ref: repoCtx.ref,
+          baseRef: prBase,
+          requestHeadSha: restoredHead ?? repoCtx.headSha,
+          workspaceRef: binding?.ref,
+          workspaceHeadSha: binding?.sha,
+          owner: {
+            instanceId: coordinator.parentInstanceId,
+            unit: unitOfIdempotencyKey(coordinator.idempotencyKey) ?? ""
+          }
+        },
+        fresh
+      );
+      existingPrPublication = verified.ok ? verified.publication : { blocked: verified.reason };
+      existingPrPublicationFence = { authority: existingPrPublication };
+      if (!verified.ok)
+        shell.note(
+          "quiet",
+          `Existing-PR publication is blocked: ${verified.reason}. Work stays on the bound checkout; no alternate branch or pull request will be published.`
+        );
+    }
     if (finish2) {
       onEvent({
         type: "run_note",
@@ -53904,38 +54092,6 @@ async function runLoop(deps, ctx) {
       const providerCfg = deps.config.config.providers[providerName];
       if (!providerCfg)
         throw new Error(`the ${harness.name} harness found no provider named ${providerName} in the config`);
-      const prBase = repoCtx.baseRef ?? await coordinatorBase;
-      if (coordinator?.publication !== void 0) {
-        const publication = coordinator.publication;
-        const fresh = await (deps.fetchPrFacts ?? fetchPullRequestFacts)({
-          repo: publication.repo,
-          number: publication.pr
-        }).catch(() => void 0);
-        const verified = verifyExistingPrPublication(
-          publication,
-          {
-            repo: repoCtx.repo,
-            pr: repoCtx.pr,
-            ref: repoCtx.ref,
-            baseRef: prBase,
-            requestHeadSha: repoCtx.headSha,
-            workspaceRef: binding?.ref,
-            workspaceHeadSha: binding?.sha,
-            owner: {
-              instanceId: coordinator.parentInstanceId,
-              unit: unitOfIdempotencyKey(coordinator.idempotencyKey) ?? ""
-            }
-          },
-          fresh
-        );
-        existingPrPublication = verified.ok ? verified.publication : { blocked: verified.reason };
-        existingPrPublicationFence = { authority: existingPrPublication };
-        if (!verified.ok)
-          shell.note(
-            "quiet",
-            `Existing-PR publication is blocked: ${verified.reason}. Work stays on the bound checkout; no alternate branch or pull request will be published.`
-          );
-      }
       const ownBranch = coordinator?.publication !== void 0 ? coordinator.publication.publicationRef : prBase !== void 0 ? binding?.ref ?? repoCtx.ref : void 0;
       const protectedBranches = [
         ...new Set(
@@ -54196,6 +54352,8 @@ async function runLoop(deps, ctx) {
     };
     const endingNeedsPreservation = isCodingPrRun && coordinator !== void 0 && (budgetEnded || run2.control.requested !== void 0);
     if (endingNeedsPreservation && run2.control.requested === "hard") await endHarness();
+    await events.drain();
+    retainPublicationReceipts();
     if (isCodingPrRun && !tailSkipped()) await observeWorkspaceNow();
     if (endingNeedsPreservation) await preserveCodingChildWork(budgetEnded ? "budget" : "ending");
     else if (isCodingPrRun && coordinator !== void 0 && !tailSkipped()) await preserveCodingChildWork("completion");
@@ -54411,6 +54569,7 @@ async function runLoop(deps, ctx) {
   } finally {
     clearInterval(heartbeat);
     await events.drain();
+    retainPublicationReceipts();
     const status3 = statusNow();
     if (typeof registry.commitLiveState === "function") {
       const commitBoundary = async (state, at2) => {
@@ -54574,6 +54733,7 @@ var init_runLoop = __esm({
     init_githubPulls();
     init_repoContext();
     init_existingPrPublication();
+    init_publicationPush();
     init_prDescription();
     init_handoff();
     init_reviewVerdict();
@@ -60848,7 +61008,7 @@ function isBudgetRefusal(error) {
   if (error.status !== void 0 && error.status !== 403) return false;
   return TURN_BUDGET_REFUSAL.test(error.message);
 }
-function judgeOpenCodeAsk(action, resources, rules, relayedToolNames) {
+function judgeOpenCodeAsk(action, resources, rules, relayedToolNames, callId) {
   if (action === "doom_loop")
     return {
       reply: "reject",
@@ -60857,6 +61017,8 @@ function judgeOpenCodeAsk(action, resources, rules, relayedToolNames) {
     };
   const word = openCodeToolWord(action);
   const tool = TOOL_NAME_WORD[action] ?? word;
+  const pending2 = publicationAttributionRefusal(rules, callId);
+  if (pending2 !== void 0) return { reply: "reject", message: pending2, tool };
   if (relayedToolNames.has(action) || relayedToolNames.has(word)) return { reply: "once", tool: action };
   const refuse3 = (reason2) => ({ reply: "reject", message: reason2, tool });
   if (action === "external_directory") {
@@ -61677,6 +61839,7 @@ var init_bridge3 = __esm({
     "use strict";
     init_budgets();
     init_runEvents();
+    init_publicationPush();
     init_contract4();
     init_container();
     init_reattach();
@@ -62544,9 +62707,14 @@ ${data.text}` : data.text;
           request2.action,
           Array.isArray(request2.resources) ? request2.resources : [],
           this.deps.rules,
-          this.deps.relayedToolNames
+          this.deps.relayedToolNames,
+          callId
         );
         if (this.answered.get(callId) !== "reject") this.answered.set(callId, verdict.reply);
+        const authority = this.deps.rules.publication?.authority;
+        const push = openCodeToolWord(request2.action) === "bash" && request2.resources?.length === 1 ? leasedPushCommand(request2.resources[0]) : void 0;
+        if (this.answered.get(callId) === "once" && push !== void 0 && authority !== void 0 && !("blocked" in authority) && push.ref === authority.ref && push.expectedHeadSha === authority.expectedHeadSha)
+          this.emit({ type: "publication_push_authorized", callId, ...push });
         this.decidedReplies.set(request2.id, { reply: verdict.reply, callId, echoed: false });
         const stepID = typeof request2.source?.messageID === "string" ? request2.source.messageID : void 0;
         if (verdict.reply === "reject") {
@@ -74048,6 +74216,36 @@ function publicationStepPrefix(row2) {
   }
   return prefix;
 }
+async function reconcileMissingFindingsPush(deps, instance, row2, runId3, head, siblings, after) {
+  const binding = row2.publication;
+  if (binding === void 0) return false;
+  const read = await deps.runs.getRun(runId3, { include: "messages" });
+  if (!read.ok) return false;
+  const run2 = read.value;
+  const complete2 = (r) => {
+    const models = Object.values(r.usage?.byModel ?? {});
+    return r.finished && r.persisted === true && !r.provisional && !r.restarting && r.truncated === false && r.events !== void 0 && r.eventCount === r.events.length && r.storedEventCount === r.events.length && r.events.every(
+      (e) => e.type !== "tool_call" || e.tool !== "bash" || e.command !== void 0 && e.command.length < COMMAND_CAP && !e.command.includes("\u2026")
+    ) && !r.events.some((e) => e.type === "tool_result" && e.cut || e.type === "pushed_head") && models.length > 0 && models.every((m) => typeof m.usd === "number" && Number.isFinite(m.usd) && m.usd >= 0);
+  };
+  const tags = run2.events?.filter((e) => e.type === "coordinator_tag") ?? [];
+  const tag = tags.length === 1 ? tags[0] : void 0;
+  if (!complete2(run2) || run2.status !== "completed" || (run2.pushed?.length ?? 0) !== 0 || run2.headSha !== head || run2.parentInstanceId !== instance.id || run2.userId !== instance.userId || run2.repo?.toLowerCase() !== instance.repo.toLowerCase() || run2.threadKey !== (row2.threadKey ?? instance.threadKey) || run2.agent !== "coding" || run2.startedAt < after || run2.finishedAt === void 0 || run2.finishedAt < run2.startedAt || tag?.parentInstanceId !== instance.id || tag.unit !== row2.unit || tag.base !== instance.base || !samePublicationBinding(tag.publication, binding) || run2.pr !== void 0 && (run2.pr.number !== binding.pr || run2.pr.head !== void 0 && run2.pr.head !== row2.branch) || pairedPublicationPush(run2.events, binding, head) === void 0)
+    return false;
+  for (const sibling of siblings.filter(
+    (r) => r.id !== runId3 && r.agent === "coding" && (r.finishedAt === void 0 || r.finishedAt >= after)
+  )) {
+    if (!sibling.finished || sibling.status !== "failed" && sibling.status !== "interrupted" || sibling.parentInstanceId !== instance.id || sibling.userId !== instance.userId || sibling.repo?.toLowerCase() !== instance.repo.toLowerCase() || sibling.threadKey !== run2.threadKey || sibling.startedAt < after || sibling.finishedAt === void 0 || sibling.finishedAt > run2.startedAt || (sibling.pushed?.length ?? 0) > 0)
+      return false;
+    const prior = await deps.runs.getRun(sibling.id, { include: "messages" });
+    if (!prior.ok || !complete2(prior.value) || prior.value.events.some(
+      (e) => e.type === "pushed_head" || e.type === "tool_call" && e.tool === "bash" && /\bgit\s+push\b/.test(e.command ?? e.summary)
+    ))
+      return false;
+  }
+  const fresh = await deps.fetchPrFacts({ repo: instance.repo, number: binding.pr }).catch(() => void 0);
+  return fresh?.state === "open" && fresh.sameRepoHead === true && fresh.headBranchExists === true && fresh.headRef === binding.headRef && fresh.baseRef === binding.baseRef && fresh.headSha === head && fresh.verifiedHead?.repo.toLowerCase() === instance.repo.toLowerCase() && fresh.verifiedHead.ref === binding.publicationRef && fresh.verifiedHead.sha === head;
+}
 async function advanceFindingsPublication(deps, instance, row2, facts2, runId3) {
   if (row2.publication === void 0 || facts2.headSha === row2.publication.expectedHeadSha) return row2;
   const child = await deps.runs.getRun(runId3, { include: "messages" });
@@ -74055,6 +74253,7 @@ async function advanceFindingsPublication(deps, instance, row2, facts2, runId3)
   const latestReview = [...row2.rounds].reverse().find((round2) => round2.agent === "review");
   const prefix = row2.recovery !== void 0 ? `${row2.unit}/recovery` : publicationStepPrefix(row2);
   const findingsPrefix = `${instance.id}:${prefix}/${latestReview?.index}/findings`;
+  let reconciledPush = false;
   if (row2.recovery === void 0) {
     const tags = child.ok ? child.value.events?.filter((event) => event.type === "coordinator_tag") ?? [] : [];
     const tag = tags.length === 1 ? tags[0] : void 0;
@@ -74073,8 +74272,18 @@ async function advanceFindingsPublication(deps, instance, row2, facts2, runId3)
       (run2) => run2.id !== runId3 && !(run2.finished && (run2.status === "failed" || run2.status === "interrupted") && run2.agent === "coding" && run2.userId === instance.userId && run2.repo?.toLowerCase() === instance.repo.toLowerCase() && run2.threadKey === (row2.threadKey ?? instance.threadKey) && run2.startedAt >= latestReview.at && run2.finishedAt !== void 0 && run2.finishedAt >= run2.startedAt && run2.finishedAt <= child.value.startedAt && (run2.pushed?.length ?? 0) === 0)
     ))
       throw new PublicationBindingRefusal("publication_facts_mismatch");
+    if (child.ok && (child.value.pushed?.length ?? 0) === 0 && fullHead(facts2.headSha))
+      reconciledPush = await reconcileMissingFindingsPush(
+        deps,
+        instance,
+        row2,
+        runId3,
+        facts2.headSha,
+        listing.runs,
+        latestReview.at
+      );
   }
-  if (!child.ok || child.value.finished !== true || child.value.status !== "completed" || child.value.agent !== "coding" || child.value.parentInstanceId !== instance.id || child.value.userId !== instance.userId || child.value.repo?.toLowerCase() !== instance.repo.toLowerCase() || child.value.threadKey !== (row2.threadKey ?? instance.threadKey) || (row2.recovery !== void 0 ? child.value.idempotencyKey?.startsWith(`${instance.id}:${row2.unit}/recovery/`) !== true || !/\/findings(?:\/a[1-9][0-9]*)?$/.test(child.value.idempotencyKey ?? "") : !isStepAttempt(child.value.idempotencyKey, findingsPrefix)) || !fullHead(facts2.headSha) || child.value.headSha !== facts2.headSha || child.value.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || facts2.state !== "open" || facts2.sameRepoHead !== true || facts2.headBranchExists !== true || facts2.headRef !== row2.publication.headRef || facts2.baseRef !== row2.publication.baseRef || facts2.verifiedHead?.repo.toLowerCase() !== instance.repo.toLowerCase() || facts2.verifiedHead.ref !== row2.publication.publicationRef || facts2.verifiedHead.sha !== facts2.headSha || row2.publication.repo.toLowerCase() !== instance.repo.toLowerCase() || row2.publication.pr !== row2.pr?.number || row2.publication.baseRef !== instance.base || row2.publication.headRef !== row2.branch || row2.publication.publicationRef !== row2.branch || !samePublicationOwner(row2.publication.owner, owner))
+  if (!child.ok || child.value.finished !== true || child.value.status !== "completed" || child.value.agent !== "coding" || child.value.parentInstanceId !== instance.id || child.value.userId !== instance.userId || child.value.repo?.toLowerCase() !== instance.repo.toLowerCase() || child.value.threadKey !== (row2.threadKey ?? instance.threadKey) || (row2.recovery !== void 0 ? child.value.idempotencyKey?.startsWith(`${instance.id}:${row2.unit}/recovery/`) !== true || !/\/findings(?:\/a[1-9][0-9]*)?$/.test(child.value.idempotencyKey ?? "") : !isStepAttempt(child.value.idempotencyKey, findingsPrefix)) || !fullHead(facts2.headSha) || child.value.headSha !== facts2.headSha || !reconciledPush && child.value.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || facts2.state !== "open" || facts2.sameRepoHead !== true || facts2.headBranchExists !== true || facts2.headRef !== row2.publication.headRef || facts2.baseRef !== row2.publication.baseRef || facts2.verifiedHead?.repo.toLowerCase() !== instance.repo.toLowerCase() || facts2.verifiedHead.ref !== row2.publication.publicationRef || facts2.verifiedHead.sha !== facts2.headSha || row2.publication.repo.toLowerCase() !== instance.repo.toLowerCase() || row2.publication.pr !== row2.pr?.number || row2.publication.baseRef !== instance.base || row2.publication.headRef !== row2.branch || row2.publication.publicationRef !== row2.branch || !samePublicationOwner(row2.publication.owner, owner))
     throw new PublicationBindingRefusal("publication_facts_mismatch");
   try {
     if (row2.recovery !== void 0 && deps.runnerOwnership?.claim(instance.repo, row2.publication.pr, owner) !== true)
@@ -74371,7 +74580,16 @@ async function recoverOriginalUnit(body, deps, caller) {
       const checkedAttempts = attempts.filter((run2) => run2.idempotencyKey === `${instance.id}:${checkedStep}`);
       const completed = checkedAttempts.length === 1 ? checkedAttempts[0] : void 0;
       const reviewFinishedAt = review.finishedAt;
-      if (reviewFinishedAt === void 0 || completed === void 0 || !completed.finished || completed.status !== "completed" || completed.agent !== "coding" || completed.userId !== instance.userId || completed.repo?.toLowerCase() !== instance.repo.toLowerCase() || completed.threadKey !== unitThreadKey || completed.pr !== void 0 && (completed.pr.number !== pr.number || completed.pr.head !== void 0 && completed.pr.head !== row2.branch) || completed.headSha !== facts2.headSha || expectedHead !== reviewedHead && expectedHead !== facts2.headSha || completed.pushed?.some((push) => push.ref !== row2.branch) === true || headMoved && completed.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || completed.startedAt < reviewFinishedAt || completed.finishedAt === void 0 || completed.finishedAt < completed.startedAt || completed.finishedAt > row2.ending.at || // Inspect every attempt, not just runs matching the current PR head:
+      const reconciledPush = completed !== void 0 && headMoved && reviewFinishedAt !== void 0 && (completed.pushed?.length ?? 0) === 0 && await reconcileMissingFindingsPush(
+        deps,
+        instance,
+        row2,
+        completed.id,
+        facts2.headSha,
+        unitListing.runs,
+        reviewFinishedAt
+      );
+      if (reviewFinishedAt === void 0 || completed === void 0 || !completed.finished || completed.status !== "completed" || completed.agent !== "coding" || completed.userId !== instance.userId || completed.repo?.toLowerCase() !== instance.repo.toLowerCase() || completed.threadKey !== unitThreadKey || completed.pr !== void 0 && (completed.pr.number !== pr.number || completed.pr.head !== void 0 && completed.pr.head !== row2.branch) || completed.headSha !== facts2.headSha || expectedHead !== reviewedHead && expectedHead !== facts2.headSha || completed.pushed?.some((push) => push.ref !== row2.branch) === true || headMoved && !reconciledPush && completed.pushed?.some((push) => push.ref === row2.branch && push.sha === facts2.headSha) !== true || completed.startedAt < reviewFinishedAt || completed.finishedAt === void 0 || completed.finishedAt < completed.startedAt || completed.finishedAt > row2.ending.at || // Inspect every attempt, not just runs matching the current PR head:
       // any competing success or push remains ambiguous after a later push.
       attempts.some(
         (run2) => run2.id !== completed.id && !(run2.finished && (run2.status === "failed" || run2.status === "interrupted") && run2.agent === "coding" && run2.userId === instance.userId && run2.repo?.toLowerCase() === instance.repo.toLowerCase() && run2.threadKey === unitThreadKey && run2.startedAt >= reviewFinishedAt && run2.finishedAt !== void 0 && run2.finishedAt >= run2.startedAt && run2.finishedAt <= completed.startedAt && (run2.pushed?.length ?? 0) === 0)
@@ -76035,6 +76253,7 @@ var init_adminCoordinator = __esm({
     "use strict";
     init_budgets();
     init_verbosity();
+    init_publicationPush();
     init_prDescription();
     init_reply();
     init_registry();
@@ -76049,6 +76268,7 @@ var init_adminCoordinator = __esm({
     init_effort();
     init_reviewVerdict();
     init_runFriction();
+    init_runEvents();
     init_runRecord();
     init_coordinator();
     init_renewal();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coreplane/switchboard",
-  "version": "1.265.0",
+  "version": "1.265.1",
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
   "homepage": "https://openswitchboard.dev",