@coreplane/switchboard 1.267.1 → 1.267.2

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.267.1",
+  "version": "1.267.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.267.1",
+      "version": "1.267.2",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -21023,7 +21023,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.267.1",
+      "version": "1.267.2",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",
@@ -21053,7 +21053,7 @@
       "dependencies": {
         "@nuxt/ui": "^4.11.0",
         "@pierre/diffs": "1.4.2",
-        "@vueuse/core": "^14.4.0",
+        "@vueuse/core": "^15.0.0",
         "vue": "^3.5.42",
         "vue-router": "^5.3.1"
       },
@@ -21076,6 +21076,53 @@
       "engines": {
         "node": ">=22"
       }
+    },
+    "web/node_modules/@vueuse/core": {
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/core/-/core-15.0.0.tgz",
+      "integrity": "sha512-Zv67h5mrk7YHDJsRObx+DXaCBz6RKBUpxqLesJ+3xZNPG6yuQs7ja7kg3veFrrouYLWAqydQ7CwGEbLVxB43Ng==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/web-bluetooth": "^0.0.21",
+        "@vueuse/metadata": "15.0.0",
+        "@vueuse/shared": "15.0.0"
+      },
+      "engines": {
+        "node": ">=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "vue": "^3.5.0"
+      }
+    },
+    "web/node_modules/@vueuse/core/node_modules/@vueuse/shared": {
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/shared/-/shared-15.0.0.tgz",
+      "integrity": "sha512-vbNXhGrbV53xPOMSyOzMHQRvhMgZf7oNDw2RChUetVxwTIEkInQ1joZ9JbT0G3z2n2AJNjvmCWeM9ySYrnvogA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      },
+      "peerDependencies": {
+        "vue": "^3.5.0"
+      }
+    },
+    "web/node_modules/@vueuse/metadata": {
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/@vueuse/metadata/-/metadata-15.0.0.tgz",
+      "integrity": "sha512-sfWE5LADAKJ0KnjtGliMdSN8Ij/L7uP6rXIZlgPloAI4zvvefbw6H5Lt7KJA6RqQOYgVqWF5Guj50HHMIzygBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
     }
   }
 }

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.267.1",
+  "version": "1.267.2",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.267.1",
-  "commit": "6382de7f03c465e18b040fd93103afb1dc44d543",
-  "builtAt": "2026-09-28T23:55:40.901Z"
+  "version": "1.267.2",
+  "commit": "08956af1ac05f7f428a07f4e2190b68695623a62",
+  "builtAt": "2026-09-29T01:42:48.486Z"
 }

package/dist/assets/src/core/publicationPush.ts

@@ -15,14 +15,19 @@ const refName = (s: string): boolean =>
   /^[a-zA-Z0-9_/-]+(?:\.[a-zA-Z0-9_/-]+)*$/.test(s) && !s.includes("..") && !s.startsWith("-");
 const shortRef = (s: string): string => s.replace(/^refs\/heads\//, "");
 
+/** Broad enough to count competing Git config pushes; leasedPushCommand
+ * separately proves whether one selected call is authorized evidence. */
+export const mentionsGitPush = (command: string): boolean => /\bgit(?:\s+-c\s+\S+)*\s+push\b/.test(command);
+
 /** Deliberately not a shell interpreter. Only a standalone literal push can
  * attest its result: pipelines, scripts, substitutions and compound commands
  * cannot prove which operation produced stdout or the successful exit. */
 export function leasedPushCommand(command: string): { ref: string; expectedHeadSha: string } | undefined {
   if (command.length >= COMMAND_CAP) return;
   const literal = command.replace(/[ \t]+2>&1[ \t]*$/, "");
-  if (!/^git push\s/.test(literal) || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
-  const words = literal.trim().split(/\s+/).slice(2);
+  const prefix = /^git(?: -c http\.postBuffer=[0-9]+)? push\s/.exec(literal);
+  if (!prefix || /[\n\r'"`$;|<>\\&]/.test(literal)) return;
+  const words = literal.slice(prefix[0].length).trim().split(/\s+/);
   const leases = words.filter((w) => w.startsWith("--force-with-lease="));
   if (leases.length !== 1) return;
   const lease = /^--force-with-lease=refs\/heads\/([^:]+):([a-f0-9]{40})$/.exec(leases[0]!);
@@ -42,13 +47,14 @@ export function pairedPublicationPush(
   binding: ExistingPrPublicationBinding,
   head: string,
   callId?: string,
+  gitDoorBaseUrl?: string,
 ): PushEvent | undefined {
   if (!fullSha(head) || !fullSha(binding.expectedHeadSha) || head === binding.expectedHeadSha) return;
   const calls = events.filter(
     (e): e is Extract<RunEvent, { type: "tool_call" }> =>
       e.type === "tool_call" &&
       e.tool === "bash" &&
-      (callId === undefined ? /\bgit\s+push\b/.test(e.command ?? e.summary) : e.callId === callId),
+      (callId === undefined ? mentionsGitPush(e.command ?? e.summary) : e.callId === callId),
   );
   if (calls.length !== 1) return;
   const call = calls[0]!;
@@ -76,20 +82,36 @@ export function pairedPublicationPush(
   )
     return;
   let lines = result.output.trim().split(/\r?\n/);
-  const tracking = `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`;
+  const tracking = [
+    `branch '${binding.publicationRef}' set up to track 'origin/${binding.publicationRef}'.`,
+    `Branch '${binding.publicationRef}' set up to track remote branch '${binding.publicationRef}' from 'origin'.`,
+  ];
   if (
     /(?:^|\s)(?:-u|--set-upstream)(?:\s|$)/.test(call.command) &&
-    lines.filter((line) => line === tracking).length === 1
+    lines.filter((line) => tracking.includes(line)).length === 1
   )
-    lines = lines.filter((line) => line !== tracking);
+    lines = lines.filter((line) => !tracking.includes(line));
   if (lines.length !== 2) return;
-  const remote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(lines[0]!);
+  const githubRemote = /^To (?:https:\/\/github\.com\/|git@github\.com:|github\.com:)([^\s]+?)(?:\.git)?$/.exec(
+    lines[0]!,
+  );
+  let doorRemote: string | undefined;
+  if (gitDoorBaseUrl !== undefined) {
+    try {
+      doorRemote = `${new URL(gitDoorBaseUrl).origin}/git/${binding.repo}`;
+    } catch {
+      return;
+    }
+  }
+  const remoteMatches =
+    doorRemote === undefined
+      ? githubRemote?.[1]?.toLowerCase() === binding.repo.toLowerCase()
+      : lines[0] === `To ${doorRemote}` || lines[0] === `To ${doorRemote}.git`;
   const update = /^\s*\+?\s*([a-f0-9]{7,40})(\.{2,3})([a-f0-9]{7,40})\s+(\S+) -> (\S+)( \(forced update\))?$/.exec(
     lines[1]!,
   );
   if (
-    !remote ||
-    remote[1]!.toLowerCase() !== binding.repo.toLowerCase() ||
+    !remoteMatches ||
     !update ||
     !binding.expectedHeadSha.startsWith(update[1]!) ||
     !head.startsWith(update[3]!) ||

package/dist/assets/src/core/ship/coordinator.ts

@@ -3883,9 +3883,16 @@ function renderUnitReportWithWake(
   const rounds = `${e.reviewRounds} review round${e.reviewRounds === 1 ? "" : "s"}`;
   const prUrl = s.pr?.url;
   const prLine = prUrl ? ` PR: ${prUrl}` : "";
+  const spentCapAction = (): string | undefined => {
+    const cap = s.input.grant?.costCapUsd;
+    if (cap === undefined || s.spendUsd === null || s.spendUsd < cap) return undefined;
+    return `Next action: $${s.spendUsd.toFixed(2)} spent against the original $${cap.toFixed(2)} cost cap; this unit cannot start another child. Continue ${prUrl ? `the existing pull request (${prUrl})` : "the saved branch"} only under separate authorization, then request review of its exact head.`;
+  };
   const nextAction = (checkpoint?: { branch: string; sha: string }): string => {
     if (durableWake)
       return `The unit remains live; a reply in this thread is recorded as its continuation action${prUrl ? ` from the open pull request (${prUrl})` : " from the saved branch state"}.`;
+    const cappedAction = spentCapAction();
+    if (cappedAction !== undefined) return cappedAction;
     const reconcile = checkpoint
       ? `verify \`${checkpoint.sha.slice(0, 7)}\` is on \`${checkpoint.branch}\`, then reconcile the remote branch and pull request if needed`
       : prUrl
@@ -4167,7 +4174,10 @@ function renderUnitReportWithWake(
       ]);
     case "no_verdict":
       if (!shows(verbosity, "verbose"))
-        return `⚠️ No verdict from review round ${e.round.index} — aborted after ${rounds}.${prLine}`;
+        return join([
+          `⚠️ No verdict from review round ${e.round.index} — aborted after ${rounds}.${prLine}`,
+          spentCapAction(),
+        ]);
       return join([
         `⚠️ Review round ${e.round.index} ended without a submitted verdict (budget, refusal, or stop) — ship never converts that into a request for changes, so no findings step ran.`,
         writeUpPointer(s, e.round.kind, s.reviewRunByRound[e.round.index]),