@patchgg/cli 0.2.0 → 0.3.1

package/dist/cli.js

@@ -187,7 +187,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = true ? "0.2.0" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+    VERSION = true ? "0.3.1" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
   }
 });
 
@@ -229,7 +229,7 @@ ${BLOCK_WORDS} Its credit goes in your recipe's \`credits\`. If nothing fits, ma
 ## 2. Start
 
 \`\`\`sh
-${pch} login
+${pch} login                               # agents: run it yourself, in the background, and pass on its link
 ${pch} agent install                       # gives your coding agent Patch's tools
 ${pch} new <you>/<game> --licence MIT      # a repo with a patch.json, open unless you add --visibility private
 ${pch} init                                # or this, in a folder you already have
@@ -247,13 +247,13 @@ git add -A && git commit -m "..."
 ${pch} publish
 \`\`\`
 
-A browser game, a mod Patch installs or a block's demo stays a private draft until it has passed a test on your PC, in Patch Desktop:
+That's the whole flow: it uploads, tests a browser game, a mod Patch installs or a block's demo on your PC in Patch Desktop, saves the footage, and stops for your review of it. Look at every sheet, then send the review as it says:
 
 \`\`\`sh
-${pch} test start <you>/<game>@<version>
+${pch} publish <you>/<game>@<version> --review pass --summary "<what you saw>" --moment "1 00:04 <what you saw>" --moment "1 00:30 <what you saw>"
 \`\`\`
 
-Someone has to press Start there. A passed test shows it starts and runs, not that it plays well, so play it yourself before its first public release. \`${pch} status\` says where a release is and what's next at every step.
+That sends it to Patch's review and follows it until it's live. Run it yourself, wherever you run: in WSL, on Linux or a Mac, or on a server, the person's Patch Desktop takes the test through Patch, and pch says if they need to open it or press Start. Running \`${pch} publish\` is your yes, so run it once the person wants it out (\`${pch} test start\` tries a build without publishing it). A passed test shows it starts and runs, not that it plays well, so play it yourself before its first public release.
 
 ## 4. Its listing
 
@@ -304,6 +304,7 @@ var init_guide_words = __esm({
       ["search_assets, asset_facets, get_asset", "assets search, assets facets, assets view"],
       ["get_asset_files", "assets add"],
       ["validate_recipe", "validate"],
+      ["publish", "publish, then publish <release> --review \u2026"],
       ["create_release, complete_upload", "publish, from a folder with a patch.json"],
       ["submit_release", "publish, or release submit"],
       ["list_releases, release_status", "release list, status"],
@@ -6847,7 +6848,7 @@ function isRef(value) {
 function cloneIssues(issues) {
   return issues.map((iss) => iss.path ? { ...iss, path: iss.path.slice() } : { ...iss });
 }
-function isRecursive(inst, stack, resolve16) {
+function isRecursive(inst, stack, resolve17) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -6857,7 +6858,7 @@ function isRecursive(inst, stack, resolve16) {
   let result = NONE;
   const check3 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve16);
+      const answer = isRecursive(child, stack, resolve17);
       if (answer > result)
         result = answer;
     }
@@ -6868,7 +6869,7 @@ function isRecursive(inst, stack, resolve16) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve16) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve17) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -6932,7 +6933,7 @@ function isRecursive(inst, stack, resolve16) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve16 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve17 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -25300,7 +25301,7 @@ var init_protocol = __esm({
               return;
             }
             const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-            await new Promise((resolve16) => setTimeout(resolve16, pollInterval));
+            await new Promise((resolve17) => setTimeout(resolve17, pollInterval));
             options?.signal?.throwIfAborted();
           }
         } catch (error62) {
@@ -25317,7 +25318,7 @@ var init_protocol = __esm({
        */
       request(request, resultSchema, options) {
         const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const earlyReject = (error62) => {
             reject(error62);
           };
@@ -25395,7 +25396,7 @@ var init_protocol = __esm({
               if (!parseResult.success) {
                 reject(parseResult.error);
               } else {
-                resolve16(parseResult.data);
+                resolve17(parseResult.data);
               }
             } catch (error62) {
               reject(error62);
@@ -25657,12 +25658,12 @@ var init_protocol = __esm({
           }
         } catch {
         }
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           if (signal.aborted) {
             reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
             return;
           }
-          const timeoutId = setTimeout(resolve16, interval);
+          const timeoutId = setTimeout(resolve17, interval);
           signal.addEventListener("abort", () => {
             clearTimeout(timeoutId);
             reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -28689,7 +28690,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve16.call(this, root, ref);
+      let _sch = resolve17.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId } = this.opts;
@@ -28716,7 +28717,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve16(root, ref) {
+    function resolve17(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -29580,7 +29581,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve16(baseURI, relativeURI, options) {
+    function resolve17(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const {
         parsed: baseParsed,
@@ -29971,7 +29972,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve: resolve16,
+      resolve: resolve17,
       resolveComponent,
       equal,
       serialize,
@@ -35644,12 +35645,12 @@ var init_stdio2 = __esm({
         this.onclose?.();
       }
       send(message) {
-        return new Promise((resolve16) => {
+        return new Promise((resolve17) => {
           const json2 = serializeMessage(message);
           if (this._stdout.write(json2)) {
-            resolve16();
+            resolve17();
           } else {
-            this._stdout.once("drain", resolve16);
+            this._stdout.once("drain", resolve17);
           }
         });
       }
@@ -35668,8 +35669,8 @@ async function mcp(ctx, streams = {}) {
   const remote = patchServer(ctx, "start pch mcp again");
   const stdin = streams.stdin ?? process.stdin;
   const local = new StdioServerTransport(stdin, streams.stdout ?? takeStdout());
-  const hungUp = new Promise((resolve16) => {
-    local.onclose = resolve16;
+  const hungUp = new Promise((resolve17) => {
+    local.onclose = resolve17;
   });
   stdin.once("end", () => void local.close());
   let landed = Promise.resolve();
@@ -35770,6 +35771,13 @@ if ((!process.stdout.isTTY || process.env.TERM === "dumb") && !process.env.FORCE
   process.env.NO_COLOR = "1";
 }
 
+// src/closed-pipes.ts
+for (const stream of [process.stdout, process.stderr]) {
+  stream.on("error", (error62) => {
+    if (error62.code !== "EPIPE") throw error62;
+  });
+}
+
 // node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
 var CommanderError = class extends Error {
   /**
@@ -40330,7 +40338,8 @@ async function login(ctx, options) {
       scopes: key.scopes,
       git,
       git_identity: gitIdentity,
-      look_first: LOOK_FIRST
+      look_first: LOOK_FIRST,
+      next: `${pchOn(target.env)} agent install`
     },
     () => {
       if (people) {
@@ -40352,9 +40361,7 @@ async function login(ctx, options) {
       if (git.helper) out.line(`Git is signed in too: Patch repos at ${git.url} just work.`);
       if (gitIdentity) out.line(gitIdentity);
       out.line(LOOK_FIRST);
-      out.line(
-        "pch agent install gives your coding agent Patch's tools, and pch guide says how to publish."
-      );
+      out.line(agentNext(pchOn(target.env)));
     }
   );
 }
@@ -40392,6 +40399,7 @@ async function loginWithKey(ctx) {
     }
   );
 }
+var agentNext = (pch) => `Next: run ${pch} agent install now, which gives you Patch's MCP tools, one-step publish among them, then ask the person to restart you to load them. ${pch} guide says how to make and publish a game.`;
 var SHORT_IDENTITY = "Git doesn't know who you are on this PC yet: pch new and pch clone set that up for each repo.";
 function signedIn(ctx, headline, { git, notes }) {
   const { out, target } = ctx;
@@ -40456,14 +40464,14 @@ ${drawn.map((line) => `  ${line}`).join("\n")}
       block.write(`  Opening ${page} in your browser: check the code matches, then approve.`);
       block.write(import_picocolors3.default.dim(`  Didn't open? Go to ${device.verification_uri} and enter the code.`));
     } else {
-      block.write(`  Go to ${import_picocolors3.default.bold(device.verification_uri)} and enter the code.`);
+      block.write(`  Go to ${import_picocolors3.default.bold(device.verification_uri_complete)} and approve the code.`);
     }
     block.write();
   } else {
     process.stderr.write(
       `This waits for a person to approve it in a browser, which can take a few minutes. The code only works while this keeps running, so don't put a short timeout on it.
 
-To sign in, open ${import_picocolors3.default.bold(device.verification_uri)} and enter ${import_picocolors3.default.bold(code)}
+To sign in, the person opens this link, which has the code in it, checks the code is ${import_picocolors3.default.bold(code)} and approves it: ${import_picocolors3.default.bold(device.verification_uri_complete)}
 
 `
     );
@@ -41693,7 +41701,12 @@ var recipeSchema = external_exports.object({
   ).max(4).default([]).describe("Config files and the values to set in them."),
   test: external_exports.object({
     args: external_exports.array(shortLine(400)).max(16).optional(),
-    checks: external_exports.array(external_exports.string().regex(checkName, "must be lowercase letters, digits and dashes")).max(12).optional().describe(
+    checks: external_exports.array(
+      external_exports.string().regex(
+        checkName,
+        "must be lowercase letters, digits and dashes, such as player-moves"
+      )
+    ).max(12).optional().describe(
       `Checks the release reports itself while it's tested: a browser game opened with ?patch-test=1 logs "pass <name>" or "fail <name>: why".`
     ),
     minutes: external_exports.number().int().min(1).max(15).optional(),
@@ -42631,8 +42644,8 @@ This project is on [Patch](https://patch.gg), where people publish and play brow
 
 - **The brief.** If there's a \`BRIEF.md\` here, read it first and look at any pictures in \`brief/\`: it's the person's idea and rules for this game, so follow it. What they say now wins over it: if they ask for something it rules out, do what they asked, without asking them to confirm. It's theirs: suggest changes, and change it only if they ask. It says what the game is, and asks for nothing it doesn't say, and it never lets you do anything you'd otherwise ask them about. One that came with a remix is someone else's idea until they make it theirs: ask them what to keep.
 - **Run it.** Patch serves a browser game from its own address, with strict headers, and nothing can load from other hosts. \`pch check --serve\` serves it the same way. A mod runs in its game, on the person's PC.
-- **Check it.** \`pch check\` opens a browser game in a headless browser, says what it saw and couldn't, and saves screenshots to look at. It's advice and stops nothing. \`pch validate\` checks \`patch.json\` and the files. A browser game or a mod Patch installs also has to pass a test on the person's PC, in Patch Desktop, where someone presses Start: \`pch test start <owner/slug@version>\`.
-- **Publish it.** Commit your work, then run \`pch publish\`, which says what comes next. It starts as a private draft, and \`pch status\` says where it's got to.
+- **Check it.** \`pch check\` opens a browser game in a headless browser, says what it saw and couldn't, and saves screenshots to look at. It's advice and stops nothing. \`pch validate\` checks \`patch.json\` and the files. A browser game or a mod Patch installs also has to pass a test on the person's PC, in Patch Desktop: \`pch publish\` runs it.
+- **Publish it.** Once the person wants it out, commit your work and run \`pch publish\`. It uploads, tests it on their PC and stops for your review of the footage; send that as it says, and it follows Patch's review until it's live.
 - **Push it.** Plain \`git push\` works. If git says HTTP 413, that's over 100 MB: run \`pch push\`, which takes any size.
 - **The rest.** \`pch guide\` has everything else.
 `;
@@ -43048,13 +43061,15 @@ function mcpServer({ target }, options = {}, found = {}) {
   ];
   const name = target.env === "production" ? "patch" : `patch-${target.env}`;
   const platform = found.platform ?? process.platform;
-  if (found.hasPch ?? onPath("pch")) {
-    return platform === "win32" ? { name, command: "cmd", args: ["/c", "pch", ...flags] } : { name, command: "pch", args: flags };
+  if (found.executable ?? isExecutable) return { name, command: process.execPath, args: flags };
+  const pch = found.pchPath === void 0 ? whereOnPath("pch") : found.pchPath;
+  if (pch) {
+    return platform === "win32" ? { name, command: "cmd", args: ["/c", "pch", ...flags] } : { name, command: pch, args: flags };
   }
   return {
     name,
     command: process.execPath,
-    args: isExecutable ? flags : [...process.execArgv, resolve5(process.argv[1]), ...flags]
+    args: [...process.execArgv, resolve5(process.argv[1]), ...flags]
   };
 }
 function commandLine(server) {
@@ -43083,8 +43098,18 @@ function codexHas(server) {
   return { status: listed.stdout?.includes(server.name) ? 0 : 1 };
 }
 function onPath(bin) {
+  return whereOnPath(bin) !== null;
+}
+function whereOnPath(bin) {
   const names = process.platform === "win32" ? [`${bin}.cmd`, `${bin}.exe`, `${bin}.bat`, bin] : [bin];
-  return (process.env.PATH ?? "").split(delimiter).some((folder) => folder && names.some((name) => existsSync2(join6(folder, name))));
+  for (const folder of (process.env.PATH ?? "").split(delimiter)) {
+    if (!folder) continue;
+    for (const name of names) {
+      const path2 = resolve5(folder, name);
+      if (existsSync2(path2)) return path2;
+    }
+  }
+  return null;
 }
 function run(bin, args2) {
   const shell = process.platform === "win32";
@@ -45442,7 +45467,7 @@ var LABELS = {
   warn: "look ",
   cant_check: "can't"
 };
-var ADVICE = "This is advice: nothing here stops you publishing, and it doesn't judge what kind of game this is. Patch's own test runs in Patch Desktop: pch test start.";
+var ADVICE = "This is advice: nothing here stops you publishing, and it doesn't judge what kind of game this is. Patch's own test runs in Patch Desktop, as pch publish does it.";
 async function findGame(dir) {
   const root = resolve8(dir);
   if (existsSync4(join12(root, "patch.json"))) {
@@ -45450,7 +45475,7 @@ async function findGame(dir) {
     if (project2.recipe.mode !== "browser") {
       throw usage2(
         "not_a_browser_game",
-        `This is a ${project2.kind}, which runs in its game, so a browser can't see it. pch test start tries it on your PC, in Patch Desktop.`
+        `This is a ${project2.kind}, which runs in its game, so a browser can't see it. pch publish tries it on your PC, in Patch Desktop.`
       );
     }
     const launch2 = project2.recipe.launch;
@@ -45751,38 +45776,28 @@ function reviewing(progress) {
   return progress.slow ? `Patch is reviewing it: ${step}. It's taking longer than usual: ${usual}. It finishes by itself.` : `Patch is reviewing it: ${step}. ${capital(usual)}.`;
 }
 function nextStep(release3, status2, test2, cloud) {
-  const follow4 = `pch test view ${release3} --wait`;
-  const startOne2 = `pch test start ${release3}`;
+  const carryOn = `pch publish ${release3}`;
   switch (status2) {
     case "draft":
-      return {
-        say: "It's a private draft, and it can't be published until it has passed a test on your PC, in Patch Desktop, which someone has to press Start in.",
-        command: startOne2
-      };
+      return { say: "It's uploaded, and its test comes next.", command: carryOn };
     case "testing":
       switch (test2?.state) {
         case "waiting":
-          return {
-            say: "Its test is waiting for you: press Start on it in Patch Desktop.",
-            command: follow4
-          };
+          return { say: "Its test is waiting to start in Patch Desktop.", command: carryOn };
         case "running":
           return {
             say: `Patch Desktop${test2.pc_name ? ` on ${test2.pc_name}` : ""} is playing it.`,
-            command: follow4
+            command: carryOn
           };
         case "recorded":
           return {
-            say: "It has been played and recorded. Look at the footage, then send your review.",
-            command: `pch test footage ${release3}`
+            say: "It's recorded. Look at the footage, then send your review.",
+            command: carryOn
           };
         case "passed":
-          return {
-            say: "It passed its test, and it's still private. Publish it once you're happy it's ready.",
-            command: `pch release submit ${release3}`
-          };
+          return { say: "It passed its test.", command: carryOn };
         default:
-          return { say: "It needs a test that passes.", command: startOne2 };
+          return { say: "It needs a test that passes.", command: carryOn };
       }
     case "rejected":
       return {
@@ -45791,10 +45806,7 @@ function nextStep(release3, status2, test2, cloud) {
       };
     case "checking":
     case "cloud_review":
-      return {
-        say: reviewing(cloud) ?? "Patch is reviewing it, which can take several minutes, and nothing tells you when it's done: pch status says.",
-        command: `pch status ${release3} --wait 50`
-      };
+      return { say: reviewing(cloud) ?? "Patch is reviewing it.", command: carryOn };
     case "in_review":
       return {
         say: "It's waiting for a staff member at Patch, and nothing tells you when that's done: pch status says.",
@@ -47454,7 +47466,7 @@ var PATCH_KEYS = ["PCH_TOKEN", "PCH_GIT_KEY", PUSH_KEY_VARIABLE];
 function run2(dir, args2, signIn = NO_SIGN_IN) {
   const env = { ...process.env };
   if (signIn.own) for (const name of PATCH_KEYS) delete env[name];
-  return new Promise((resolve16) => {
+  return new Promise((resolve17) => {
     execFile(
       "git",
       ["-C", dir, ...signIn.args, ...args2],
@@ -47464,7 +47476,7 @@ function run2(dir, args2, signIn = NO_SIGN_IN) {
       },
       (error62, out, err) => {
         const code = error62?.code;
-        resolve16({ code: error62 ? typeof code === "number" ? code : -1 : 0, out, err });
+        resolve17({ code: error62 ? typeof code === "number" ? code : -1 : 0, out, err });
       }
     );
   });
@@ -48382,11 +48394,469 @@ async function mediaOrder(ctx, ref, ids) {
 }
 
 // src/commands/publish.ts
-var import_picocolors20 = __toESM(require_picocolors(), 1);
+var import_picocolors22 = __toESM(require_picocolors(), 1);
 var import_semver2 = __toESM(require_semver2(), 1);
 import { open as open2, readFile as readFile15 } from "node:fs/promises";
 init_errors();
 init_guide_words();
+
+// src/commands/publish-flow.ts
+var import_picocolors21 = __toESM(require_picocolors(), 1);
+import { mkdtemp as mkdtemp4 } from "node:fs/promises";
+import { tmpdir as tmpdir4 } from "node:os";
+import { join as join19, resolve as resolve16 } from "node:path";
+init_errors();
+
+// src/commands/release-test.ts
+var import_picocolors20 = __toESM(require_picocolors(), 1);
+import { createHash as createHash3 } from "node:crypto";
+import { mkdir as mkdir9, mkdtemp as mkdtemp3, writeFile as writeFile12 } from "node:fs/promises";
+import { tmpdir as tmpdir3 } from "node:os";
+import { join as join18, resolve as resolve15 } from "node:path";
+import { setTimeout as sleep9 } from "node:timers/promises";
+init_errors();
+var HOLD_SECONDS = 50;
+var ASK_EVERY_MS2 = 5e3;
+var OPEN = /* @__PURE__ */ new Set(["waiting", "running", "recorded"]);
+var GOING = /* @__PURE__ */ new Set(["waiting", "running"]);
+var REVIEW_ROUTE = "/projects/{owner}/{slug}/releases/{version}/review";
+var reviewOf = (ctx, release3) => ctx.api.GET(REVIEW_ROUTE, { params: { path: release3 } });
+async function testStart(ctx, ref, options) {
+  requireToken(ctx.target);
+  const release3 = parseReleaseRef(ref);
+  const wait2 = waitOf(options.wait);
+  const before = await reviewOf(ctx, release3);
+  const open3 = before.data?.test && OPEN.has(before.data.test.state) ? before.data.test : null;
+  const test2 = open3 ?? await startOne(ctx, release3, before.data?.status);
+  return show3(ctx, release3, wait2 === null ? test2 : await follow3(ctx, test2, wait2), {
+    started: !open3,
+    followed: wait2 !== null
+  });
+}
+async function startOne(ctx, release3, status2) {
+  const name = releaseName(release3);
+  const answer = await ctx.api.POST("/projects/{owner}/{slug}/releases/{version}/tests", {
+    params: { path: release3 }
+  });
+  if (answer.response.ok) return answer.data;
+  const failure2 = fromResponse(answer.response, answer.error);
+  if (failure2.code === "files_failed") {
+    const { findings } = failure2.details;
+    throw filesFailed(failure2.message, findings);
+  }
+  if (failure2.code === "not_testable") {
+    const next = `pch release submit ${name}`;
+    throw new CliError(
+      failure2.exitCode,
+      failure2.code,
+      `Patch Desktop can't test ${name}, as it's a mod players install some other way, so it skips the test. Send it for review once it's ready: ${next}`,
+      { next }
+    );
+  }
+  if (failure2.code === "not_testing" && status2) {
+    const next = nextStep(name, status2, null);
+    throw new CliError(
+      failure2.exitCode,
+      failure2.code,
+      `${name} is ${status2}, so it can't be tested. ${sayNext(next)}`,
+      { next: next.command }
+    );
+  }
+  throw failure2;
+}
+async function testView(ctx, ref, options) {
+  requireToken(ctx.target);
+  const release3 = parseReleaseRef(ref);
+  const wait2 = waitOf(options.wait);
+  const test2 = await newest(ctx, release3);
+  return show3(ctx, release3, wait2 === null ? test2 : await follow3(ctx, test2, wait2), {
+    followed: wait2 !== null
+  });
+}
+async function newest(ctx, release3) {
+  const review = await unwrap(reviewOf(ctx, release3));
+  if (review.test) return review.test;
+  const name = releaseName(release3);
+  const next = `pch test start ${name}`;
+  throw new CliError(EXIT.error, "not_found", `${name} has no test yet. Start one: ${next}`, {
+    next
+  });
+}
+async function follow3(ctx, test2, seconds2) {
+  const deadline = Date.now() + seconds2 * 1e3;
+  let current = test2;
+  let said2 = "";
+  while (GOING.has(current.state) && Date.now() < deadline) {
+    const now = whatsHappening(current);
+    if (now !== said2) ctx.out.step(now);
+    said2 = now;
+    if (current.needs_person) await sleep9(Math.min(ASK_EVERY_MS2, deadline - Date.now()));
+    const left = Math.ceil((deadline - Date.now()) / 1e3);
+    current = await unwrap(
+      ctx.api.GET("/tests/{id}", {
+        params: {
+          path: { id: current.id },
+          query: { wait: Math.max(0, Math.min(HOLD_SECONDS, left)) }
+        }
+      })
+    );
+  }
+  return current;
+}
+function whatsHappening(test2) {
+  if (test2.state === "running") {
+    const where = test2.pc_name ? ` on ${plain(test2.pc_name)}` : "";
+    const phase = test2.progress?.phase;
+    return phase && phase !== "playing" ? `Patch Desktop${where} is ${plain(phase)} it` : `Patch Desktop${where} is playing it`;
+  }
+  if (test2.needs_person) return plain(test2.needs_person.ask);
+  return "Waiting for you to press Start in Patch Desktop";
+}
+async function show3(ctx, release3, test2, { followed, ...extra } = {}) {
+  const { out } = ctx;
+  const name = releaseName(release3);
+  const next = nextStep(name, test2.state === "failed" ? "rejected" : "testing", test2);
+  const command = next.command;
+  const play2 = test2.state === "passed" ? await playFirst(ctx, release3) : null;
+  const ask = test2.state === "waiting" ? askThePerson(test2) : play2;
+  const noteAsk = test2.note_ask?.replaceAll("suggest_note", "pch note suggest");
+  const feedbackAsk = test2.feedback_ask ? {
+    ...test2.feedback_ask,
+    ask: test2.feedback_ask.ask.replaceAll("send_feedback", "pch feedback send")
+  } : void 0;
+  const shown = {
+    ...test2,
+    ...extra,
+    next: command,
+    ...noteAsk ? { note_ask: noteAsk } : {},
+    ...feedbackAsk ? { feedback_ask: feedbackAsk } : {}
+  };
+  out.result({ ...shown, ...ask ? { ask } : {} }, () => {
+    const bold = import_picocolors20.default.bold(name);
+    if (test2.state === "waiting") {
+      out.line(
+        !test2.needs_person ? `${extra.started ? "Started a test of" : "The test of"} ${bold}. It's waiting for Patch Desktop to take it on.` : extra.started ? `Started a test of ${bold}. It's waiting for you in Patch Desktop: press Start on it there.` : `${bold}: its test is waiting for you in Patch Desktop. Press Start on it there.`
+      );
+      if (test2.needs_person) {
+        out.line(plain(test2.needs_person.why));
+        out.line(plain(test2.needs_person.ask));
+      }
+    } else if (test2.state === "running") {
+      out.line(`${bold}: ${whatsHappening(test2)}.`);
+    } else if (test2.state === "recorded") {
+      out.line(
+        `${bold}: it has been played and recorded. Look at the footage, then send your review.`
+      );
+    } else if (test2.state === "passed") {
+      out.line(`${bold}: ${import_picocolors20.default.green("its test passed.")} It's still private.`);
+      if (test2.review) out.line(plain(test2.review.summary));
+      if (play2) out.line(play2);
+      out.line(
+        "Publish it once you're happy it's ready: that's your yes, and nothing does it for you."
+      );
+    } else if (test2.state === "failed") {
+      out.line(`${bold}: ${import_picocolors20.default.red("its test failed")}, so this version can't be published.`);
+      showWhatFailed(ctx, test2);
+      out.line(`pch status ${name} says how to fix it.`);
+      out.line("Then move the version on in patch.json and publish that.");
+    } else if (test2.state === "couldnt_run") {
+      out.line(`${bold}: ${import_picocolors20.default.yellow("its test couldn't run.")}`);
+      if (test2.outcome) out.line(plain(test2.outcome.reason));
+    } else {
+      out.line(`${bold}: its test was cancelled.`);
+    }
+    if (noteAsk) out.line(plain(noteAsk));
+    if (feedbackAsk) out.line(plain(feedbackAsk.ask));
+    if (followed && GOING.has(test2.state)) {
+      out.line("It isn't over, and nothing's wrong: that's as long as --wait follows it here.");
+    }
+    if (command) out.line(`Next: ${command}`);
+    if (OPEN.has(test2.state) && !extra.started) {
+      out.line(import_picocolors20.default.dim(`To start over: pch test cancel ${name}, then pch test start ${name}`));
+    }
+  });
+  if (test2.state === "failed") return EXIT.blocked;
+  if (test2.state === "couldnt_run" || test2.state === "cancelled") return EXIT.error;
+  return EXIT.ok;
+}
+function askThePerson(test2) {
+  return test2.needs_person?.ask ?? null;
+}
+function showWhatFailed({ out }, test2) {
+  for (const run3 of test2.results) {
+    for (const check3 of run3.checks) {
+      if (check3.result !== "fail") continue;
+      const detail = check3.detail ? ` (${plain(check3.detail)})` : "";
+      out.line(`  Run ${run3.run}: ${plain(check3.name)}${detail}`);
+    }
+  }
+  if (test2.review) out.line(`  Its review: ${plain(test2.review.summary)}`);
+}
+async function testFootage(ctx, ref, options) {
+  requireToken(ctx.target);
+  const { out } = ctx;
+  const release3 = parseReleaseRef(ref);
+  const name = releaseName(release3);
+  const run3 = options.run === void 0 ? void 0 : positive(options.run, "--run");
+  const test2 = await newest(ctx, release3);
+  const { data } = await unwrap(
+    ctx.api.GET("/tests/{id}/footage", { params: { path: { id: test2.id }, query: { run: run3 } } })
+  );
+  const sheets = data.length ? await saveSheets(
+    data,
+    options.out ? resolve15(options.out) : await mkdtemp3(join18(tmpdir3(), "pch-footage-"))
+  ) : [];
+  const next = data.length ? reviewCommand(name) : nextStep(name, "testing", test2).command;
+  out.result({ test: test2.id, state: test2.state, data: sheets, next }, () => {
+    if (!sheets.length) {
+      out.line(`${import_picocolors20.default.bold(name)} has no footage yet: its test is ${test2.state.replace("_", " ")}.`);
+      for (const result of test2.results) {
+        if (result.footage_error) out.line(plain(result.footage_error));
+      }
+    }
+    for (const sheet of sheets) {
+      out.line(`Run ${sheet.run}, ${sheet.from} to ${sheet.to}: ${sheet.path}`);
+    }
+    if (next) {
+      if (sheets.length) out.line("Look at every one, then send your review, with what you saw:");
+      out.line(`Next: ${next}`);
+    }
+  });
+}
+var reviewCommand = (name) => `pch test review ${name} --verdict <pass|fail> --plays <yes|no> --harmful <yes|no> --summary "<what you saw>" --moment "<run> <mm:ss> <what you saw>" --moment "<run> <mm:ss> <what you saw>"`;
+async function saveSheets(sheets, folder) {
+  await mkdir9(folder, { recursive: true });
+  const saved = [];
+  for (const sheet of sheets) {
+    const answer = await fetch(sheet.url).catch(() => null);
+    const bytes = answer?.ok ? Buffer.from(await answer.arrayBuffer()) : null;
+    if (!bytes || createHash3("sha256").update(bytes).digest("hex") !== sheet.sha256) {
+      throw new CliError(
+        EXIT.error,
+        "download_failed",
+        `Run ${sheet.run}'s sheet ${sheet.index} didn't download intact. Try again.`
+      );
+    }
+    const path2 = join18(folder, `run-${sheet.run}-sheet-${sheet.index}.jpg`);
+    await writeFile12(path2, bytes);
+    const { url: _url2, ...kept } = sheet;
+    saved.push({ ...kept, path: path2 });
+  }
+  return saved;
+}
+async function testReview(ctx, ref, options) {
+  requireToken(ctx.target);
+  const release3 = parseReleaseRef(ref);
+  const moments = options.moment.map(parseMoment);
+  const test2 = await newest(ctx, release3);
+  const answer = await ctx.api.POST("/tests/{id}/review", {
+    params: { path: { id: test2.id } },
+    body: {
+      verdict: options.verdict,
+      plays: options.plays === "yes",
+      harmful: options.harmful === "yes",
+      summary: options.summary,
+      moments
+    }
+  });
+  if (answer.response.ok) return show3(ctx, release3, answer.data);
+  throw withNext(fromResponse(answer.response, answer.error), release3, test2);
+}
+function parseMoment(text) {
+  const match = /^(\d+)\s+(\d{1,3}:\d{2})\s+(\S.*)$/s.exec(text.trim());
+  if (!match) {
+    throw new CliError(
+      EXIT.usage,
+      "bad_moment",
+      `"${text}" isn't a moment. Write its run, the time on a frame and what you saw, such as "1 00:04 the title screen draws".`
+    );
+  }
+  return { run: Number(match[1]), at: match[2], saw: match[3] };
+}
+async function testCancel(ctx, ref) {
+  requireToken(ctx.target);
+  const release3 = parseReleaseRef(ref);
+  const name = releaseName(release3);
+  const test2 = await newest(ctx, release3);
+  const answer = await ctx.api.POST("/tests/{id}/cancel", { params: { path: { id: test2.id } } });
+  if (!answer.response.ok) {
+    throw withNext(fromResponse(answer.response, answer.error), release3, test2);
+  }
+  const next = `pch test start ${name}`;
+  ctx.out.result({ ...answer.data, next }, () => {
+    ctx.out.line(`Cancelled ${import_picocolors20.default.bold(name)}'s test. Start another: ${next}`);
+  });
+}
+function withNext(failure2, release3, test2) {
+  if (failure2.code !== "test_state") return failure2;
+  const next = nextStep(releaseName(release3), "testing", test2);
+  return new CliError(failure2.exitCode, failure2.code, `${failure2.message}. ${sayNext(next)}`, {
+    next: next.command
+  });
+}
+function positive(value, flag) {
+  if (/^[1-9]\d*$/.test(value)) return Number(value);
+  throw new CliError(EXIT.usage, "bad_usage", `${flag} takes a whole number, not "${value}".`);
+}
+async function testAutostart(ctx, state) {
+  requireToken(ctx.target);
+  if (state !== "on" && state !== "off") {
+    throw new CliError(EXIT.usage, "bad_value", `Say on or off, not "${state}"`);
+  }
+  const setting = await unwrap(
+    ctx.api.PUT("/me/test-settings", { body: { starts_own_tests: state === "on", by: "agent" } })
+  );
+  ctx.out.result(setting, () => {
+    ctx.out.line(
+      setting.starts_own_tests ? "Your tests of browser games and blocks now start in Patch Desktop by themselves, with a notice each time that lets the person stop them. Patch Desktop tells them you turned it on. A mod's test still waits for Start." : "Your tests wait for the person to press Start in Patch Desktop again."
+    );
+  });
+}
+
+// src/commands/publish-flow.ts
+var ENDS = /* @__PURE__ */ new Set(["your_review", "ready", "live", "stopped", "uploading"]);
+var PERSON_EVERY_MS = 5e3;
+function followFor(wait2) {
+  if (wait2 === void 0) {
+    return process.stdout.isTTY ? Number.POSITIVE_INFINITY : UNATTENDED_WAIT_SECONDS;
+  }
+  if (/^\d+$/.test(wait2)) return Number(wait2);
+  throw new CliError(EXIT.usage, "bad_wait", `--wait takes a number of seconds, not "${wait2}".`);
+}
+function reviewOf2(flags) {
+  if (flags.review === void 0) return void 0;
+  if (flags.review !== "pass" && flags.review !== "fail") {
+    throw new CliError(EXIT.usage, "bad_value", `--review is pass or fail, not "${flags.review}".`);
+  }
+  const moments = (flags.moment ?? []).map(parseMoment);
+  if (!flags.summary?.trim() || moments.length < 2) {
+    throw new CliError(
+      EXIT.usage,
+      "review_incomplete",
+      `A review needs --summary and at least two --moment, each a run, the time on a frame and what you saw: ${reviewCommand2("<owner/slug@version>")}`
+    );
+  }
+  return {
+    verdict: flags.review,
+    plays: flags.review === "pass",
+    harmful: Boolean(flags.harmful),
+    summary: flags.summary,
+    moments
+  };
+}
+var reviewCommand2 = (name) => `pch publish ${name} --review <pass|fail> --summary "<what you saw>" --moment "<run> <mm:ss> <what you saw>" --moment "<run> <mm:ss> <what you saw>"`;
+function lineOf(step) {
+  if (step.stage === "testing" && step.needs_person) return "Testing on your PC: waiting for you";
+  return step.line;
+}
+var sleep10 = (ms) => new Promise((done) => setTimeout(done, ms));
+async function followRelease(ctx, ref, options = {}) {
+  requireToken(ctx.target);
+  const { out, api } = ctx;
+  const review = reviewOf2(options);
+  const wait2 = options.wait ?? followFor(void 0);
+  const deadline = (options.since ?? Date.now()) + wait2 * 1e3;
+  let body = {
+    ...review ? { review } : {},
+    ...options.testAgain ? { test_again: true } : {}
+  };
+  const people = forAPerson(out.json, runningIn());
+  let said2 = "";
+  let asked = "";
+  let step;
+  for (; ; ) {
+    const left = Math.max(0, Math.ceil((deadline - Date.now()) / 1e3));
+    const answer = await api.POST("/projects/{owner}/{slug}/releases/{version}/publish", {
+      params: { path: ref, query: { wait: Math.min(50, left) } },
+      body
+    });
+    if (!answer.response.ok) throw fromResponse(answer.response, answer.error);
+    step = answer.data;
+    body = void 0;
+    const stops = ENDS.has(step.stage) || step.status === "in_review";
+    const line = lineOf(step);
+    if (line !== said2 && !stops) out.progress(line, { stage: step.stage });
+    said2 = line;
+    if (step.needs_person && step.needs_person.ask !== asked) {
+      asked = step.needs_person.ask;
+      out.step(
+        people ? step.needs_person.ask : `${step.needs_person.why} Ask the person: "${step.needs_person.ask}" This carries on by itself once they have, so keep it running, or run it again.`
+      );
+    }
+    if (stops || Date.now() >= deadline) break;
+    if (step.needs_person) await sleep10(PERSON_EVERY_MS);
+  }
+  return finish(ctx, ref, step, options);
+}
+async function finish(ctx, ref, step, options) {
+  const { out } = ctx;
+  const name = releaseName(ref);
+  const url2 = step.urls.play ?? step.urls.page;
+  const ended = ENDS.has(step.stage) && step.stage !== "stopped" && step.stage !== "uploading";
+  const { extra = {}, notes = [] } = (ended || step.stage === "testing" || step.stage === "in_review" ? await options.after?.(step) : void 0) ?? {};
+  const base = { release: { ...ref }, stage: step.stage, line: step.line, url: url2, ...extra };
+  const say = (...lines) => {
+    for (const line of [...notes, ...lines]) out.line(line);
+  };
+  switch (step.stage) {
+    case "live":
+      out.result({ ...base, next: null }, () => say(import_picocolors21.default.green(`Live: ${url2}`)));
+      return;
+    case "ready":
+      out.result(
+        { ...base, next: null },
+        () => say("Passed. Press publish in the chat to send it.")
+      );
+      return;
+    case "your_review": {
+      const sheets = await saveSheets(
+        step.footage ?? [],
+        options.out ? resolve16(options.out) : await mkdtemp4(join19(tmpdir4(), "pch-footage-"))
+      );
+      const next = reviewCommand2(name);
+      out.result({ ...base, test: step.test_id, footage: sheets, next }, () => {
+        say(`Recorded. Look at every sheet, the bursts too:`);
+        for (const sheet of sheets) out.line(`  ${sheet.path}  (${sheet.from} to ${sheet.to})`);
+        out.line(`Then send your review (add --harmful if it does anything harmful):`);
+        out.line(`Next: ${next}`);
+      });
+      return;
+    }
+    case "stopped":
+    case "uploading": {
+      const code = step.code ?? "stopped";
+      const exit = code === "test_failed" || code === "rejected" || code === "files_failed" ? EXIT.blocked : EXIT.error;
+      throw new CliError(exit, code, `${name}: ${step.next}`, {
+        findings: step.findings,
+        issues: step.findings.map((finding) => ({
+          path: finding.path ?? "",
+          message: `${finding.rule_id}: ${finding.message}${finding.suggestion ? `. ${finding.suggestion}` : ""}`
+        })),
+        next: code === "couldnt_run" ? `pch publish ${name} --test-again` : "pch publish"
+      });
+    }
+    default: {
+      const staff = step.status === "in_review";
+      const next = staff ? `pch status ${name}` : `pch publish ${name}`;
+      out.result({ ...base, needs_person: step.needs_person, next }, () => {
+        if (staff) say("Waiting for a staff member at Patch.");
+        else say(`Still ${lineOf(step).replace(/^./, (first) => first.toLowerCase())}.`);
+        out.line(`Next: ${next}`);
+      });
+    }
+  }
+}
+async function firstTime(ctx, project2, what) {
+  const key = `${ctx.target.origin} ${project2}`;
+  ctx.config.told ??= {};
+  const told = ctx.config.told[key] ?? [];
+  if (told.includes(what)) return false;
+  ctx.config.told[key] = [...told, what];
+  await writeConfig(ctx.config).catch(() => void 0);
+  return true;
+}
+
+// src/commands/publish.ts
 var MB = 1024 * 1024;
 var FILES_AT_ONCE = 16;
 var BIG_FILE = 16 * MB;
@@ -48402,8 +48872,23 @@ function forkNamesParent(named, clone3) {
     { named, clone: clone3 }
   );
 }
-async function publish(ctx, dir, options) {
+async function publish(ctx, target, options) {
   requireToken(ctx.target);
+  const started = Date.now();
+  const follow4 = {
+    ...options,
+    wait: followFor(options.wait),
+    since: started
+  };
+  if (target.includes("@")) return followRelease(ctx, parseReleaseRef(target), follow4);
+  if (options.review !== void 0 || options.testAgain) {
+    throw new CliError(
+      EXIT.usage,
+      "release_required",
+      "Say which release: pch publish <owner/slug@version> --review \u2026, as pch publish printed it."
+    );
+  }
+  const dir = target;
   const { out, api } = ctx;
   const project2 = await loadProject(dir);
   if (project2.issues.length) {
@@ -48462,53 +48947,41 @@ async function publish(ctx, dir, options) {
   } else {
     out.step("Patch already has every file");
   }
-  out.step("Submitting");
-  const name = releaseName({ ...ref, version: version2 });
-  const submitted = await submit(ctx, { ...ref, version: version2 }).catch(draftUntilTested);
-  const release3 = await unwrap(
-    api.GET("/projects/{owner}/{slug}/releases/{version}", { params: { path: path2 } })
-  );
-  const url2 = projectUrl(ctx.target.origin, ref);
   const branch = await source?.bringBranch();
-  const branchSaid = branch ? { branch } : {};
-  const next = nextStep(name, submitted?.status ?? "draft", null).command;
-  const openCode = await openCodeOf(ctx, ref, release3);
-  const whoCanSee = whoCanSeeIt(
-    // A draft is private whichever channel it's for, as the words for a person say.
-    !submitted || release3.channel === "private" ? privateWords(release3.kind, !submitted) : null,
-    openCode
-  );
-  const result = {
-    release: release3,
-    uploaded: draft.uploads.length,
-    url: url2,
-    next,
-    ...branchSaid,
-    ...whoCanSee
-  };
-  out.result(result, () => {
-    if (!submitted) {
-      out.line(
-        `Uploaded ${import_picocolors20.default.bold(name)} as a private draft. It can't be published until it has passed a test on your PC, in Patch Desktop, where someone presses Start.`
-      );
-      out.line(privateWords(release3.kind, true));
-      if (openCode) out.line(openCode);
-      if (source) out.line(fromCommit(source));
-      if (branch?.say) out.line(branch.say);
-      out.line(`Next: ${next}`);
-      return;
-    }
-    showSubmitted(ctx, { ...ref, version: version2 }, submitted.status, release3);
-    if (openCode) out.line(openCode);
-    if (source) out.line(fromCommit(source));
-    if (branch?.say) out.line(branch.say);
-    for (const entry of release3.files) {
-      out.line(
-        `  ${entry.path.padEnd(40)} ${formatSize(entry.size).padStart(8)}  sha256 ${entry.sha256}`
-      );
+  await followRelease(
+    ctx,
+    { ...ref, version: version2 },
+    {
+      ...follow4,
+      // Who can see it, as it is once it stops. It's the same each time, so it's said once a
+      // project, and --json always has it.
+      after: async () => {
+        const release3 = await unwrap(
+          api.GET("/projects/{owner}/{slug}/releases/{version}", { params: { path: path2 } })
+        );
+        const openCode = await openCodeOf(ctx, ref, release3);
+        const privately = release3.channel === "private" ? privateWords(release3.kind, release3.status !== "published") : null;
+        const notes = [source ? fromCommit(source).trim() : null, branch?.say ?? null].filter(
+          (note2) => Boolean(note2)
+        );
+        for (const [what, words2] of [
+          ["private", privately],
+          ["open_code", openCode]
+        ]) {
+          if (words2 && await firstTime(ctx, file2.project, what)) notes.push(words2);
+        }
+        return {
+          extra: {
+            release: release3,
+            uploaded: draft.uploads.length,
+            ...branch ? { branch } : {},
+            ...whoCanSeeIt(privately, openCode)
+          },
+          notes
+        };
+      }
     }
-    out.line(import_picocolors20.default.dim(url2));
-  });
+  );
 }
 function fromCommit(source) {
   const on = source.on === "GitHub" ? " on GitHub" : "";
@@ -48527,7 +49000,7 @@ async function releaseSubmit(ctx, ref) {
   ctx.out.result({ ...submitted, next, ...whoCanSee }, () => {
     showSubmitted(ctx, release3, submitted.status, submitted);
     if (openCode) ctx.out.line(openCode);
-    ctx.out.line(import_picocolors20.default.dim(projectUrl(ctx.target.origin, release3)));
+    ctx.out.line(import_picocolors22.default.dim(projectUrl(ctx.target.origin, release3)));
   });
 }
 async function releasePromote(ctx, ref, options) {
@@ -48581,7 +49054,7 @@ async function releasePromote(ctx, ref, options) {
     const next = nextStep(name, "draft", null).command;
     ctx.out.result({ from: ref, release: { version: version2, status: "draft" }, url: url2, next }, () => {
       ctx.out.line(
-        `Made ${import_picocolors20.default.bold(name)} from ${ref}, as a draft for ${options.channel}. It needs a passed test of its own.`
+        `Made ${import_picocolors22.default.bold(name)} from ${ref}, as a draft for ${options.channel}. It needs a passed test of its own.`
       );
       ctx.out.line(`Next: ${next}`);
     });
@@ -48589,7 +49062,7 @@ async function releasePromote(ctx, ref, options) {
   }
   ctx.out.result({ from: ref, release: submitted, url: url2 }, () => {
     showSubmitted(ctx, to, submitted.status, submitted);
-    ctx.out.line(import_picocolors20.default.dim(url2));
+    ctx.out.line(import_picocolors22.default.dim(url2));
   });
 }
 function draftUntilTested(error62) {
@@ -48626,7 +49099,7 @@ function whoCanSeeIt(...words2) {
 function showSubmitted(ctx, ref, status2, { channel, kind }) {
   const name = releaseName(ref);
   if (status2 === "published") {
-    ctx.out.line(import_picocolors20.default.green(`Published ${name} to ${channel}`));
+    ctx.out.line(import_picocolors22.default.green(`Published ${name} to ${channel}`));
     if (channel === "private") {
       ctx.out.line(privateWords(kind, false));
       ctx.out.line(`pch status ${name} says whether your team can play it yet, and where.`);
@@ -48779,314 +49252,8 @@ async function uploadFailed(file2, upload, response) {
   );
 }
 
-// src/commands/release-test.ts
-var import_picocolors21 = __toESM(require_picocolors(), 1);
-import { createHash as createHash3 } from "node:crypto";
-import { mkdir as mkdir9, mkdtemp as mkdtemp3, writeFile as writeFile12 } from "node:fs/promises";
-import { tmpdir as tmpdir3 } from "node:os";
-import { join as join18, resolve as resolve15 } from "node:path";
-import { setTimeout as sleep9 } from "node:timers/promises";
-init_errors();
-var HOLD_SECONDS = 50;
-var ASK_EVERY_MS2 = 5e3;
-var OPEN = /* @__PURE__ */ new Set(["waiting", "running", "recorded"]);
-var GOING = /* @__PURE__ */ new Set(["waiting", "running"]);
-var REVIEW_ROUTE = "/projects/{owner}/{slug}/releases/{version}/review";
-var reviewOf = (ctx, release3) => ctx.api.GET(REVIEW_ROUTE, { params: { path: release3 } });
-async function testStart(ctx, ref, options) {
-  requireToken(ctx.target);
-  const release3 = parseReleaseRef(ref);
-  const wait2 = waitOf(options.wait);
-  const before = await reviewOf(ctx, release3);
-  const open3 = before.data?.test && OPEN.has(before.data.test.state) ? before.data.test : null;
-  const test2 = open3 ?? await startOne(ctx, release3, before.data?.status);
-  return show3(ctx, release3, wait2 === null ? test2 : await follow3(ctx, test2, wait2), {
-    started: !open3,
-    followed: wait2 !== null
-  });
-}
-async function startOne(ctx, release3, status2) {
-  const name = releaseName(release3);
-  const answer = await ctx.api.POST("/projects/{owner}/{slug}/releases/{version}/tests", {
-    params: { path: release3 }
-  });
-  if (answer.response.ok) return answer.data;
-  const failure2 = fromResponse(answer.response, answer.error);
-  if (failure2.code === "files_failed") {
-    const { findings } = failure2.details;
-    throw filesFailed(failure2.message, findings);
-  }
-  if (failure2.code === "not_testable") {
-    const next = `pch release submit ${name}`;
-    throw new CliError(
-      failure2.exitCode,
-      failure2.code,
-      `Patch Desktop can't test ${name}, as it's a mod players install some other way, so it skips the test. Send it for review once it's ready: ${next}`,
-      { next }
-    );
-  }
-  if (failure2.code === "not_testing" && status2) {
-    const next = nextStep(name, status2, null);
-    throw new CliError(
-      failure2.exitCode,
-      failure2.code,
-      `${name} is ${status2}, so it can't be tested. ${sayNext(next)}`,
-      { next: next.command }
-    );
-  }
-  throw failure2;
-}
-async function testView(ctx, ref, options) {
-  requireToken(ctx.target);
-  const release3 = parseReleaseRef(ref);
-  const wait2 = waitOf(options.wait);
-  const test2 = await newest(ctx, release3);
-  return show3(ctx, release3, wait2 === null ? test2 : await follow3(ctx, test2, wait2), {
-    followed: wait2 !== null
-  });
-}
-async function newest(ctx, release3) {
-  const review = await unwrap(reviewOf(ctx, release3));
-  if (review.test) return review.test;
-  const name = releaseName(release3);
-  const next = `pch test start ${name}`;
-  throw new CliError(EXIT.error, "not_found", `${name} has no test yet. Start one: ${next}`, {
-    next
-  });
-}
-async function follow3(ctx, test2, seconds2) {
-  const deadline = Date.now() + seconds2 * 1e3;
-  let current = test2;
-  let said2 = "";
-  while (GOING.has(current.state) && Date.now() < deadline) {
-    const now = whatsHappening(current);
-    if (now !== said2) ctx.out.step(now);
-    said2 = now;
-    if (current.needs_person) await sleep9(Math.min(ASK_EVERY_MS2, deadline - Date.now()));
-    const left = Math.ceil((deadline - Date.now()) / 1e3);
-    current = await unwrap(
-      ctx.api.GET("/tests/{id}", {
-        params: {
-          path: { id: current.id },
-          query: { wait: Math.max(0, Math.min(HOLD_SECONDS, left)) }
-        }
-      })
-    );
-  }
-  return current;
-}
-function whatsHappening(test2) {
-  if (test2.state === "running") {
-    const where = test2.pc_name ? ` on ${plain(test2.pc_name)}` : "";
-    const phase = test2.progress?.phase;
-    return phase && phase !== "playing" ? `Patch Desktop${where} is ${plain(phase)} it` : `Patch Desktop${where} is playing it`;
-  }
-  if (test2.needs_person) return plain(test2.needs_person.ask);
-  return "Waiting for you to press Start in Patch Desktop";
-}
-async function show3(ctx, release3, test2, { followed, ...extra } = {}) {
-  const { out } = ctx;
-  const name = releaseName(release3);
-  const next = nextStep(name, test2.state === "failed" ? "rejected" : "testing", test2);
-  const command = next.command;
-  const play2 = test2.state === "passed" ? await playFirst(ctx, release3) : null;
-  const ask = test2.state === "waiting" ? askThePerson(test2) : play2;
-  const noteAsk = test2.note_ask?.replaceAll("suggest_note", "pch note suggest");
-  const feedbackAsk = test2.feedback_ask ? {
-    ...test2.feedback_ask,
-    ask: test2.feedback_ask.ask.replaceAll("send_feedback", "pch feedback send")
-  } : void 0;
-  const shown = {
-    ...test2,
-    ...extra,
-    next: command,
-    ...noteAsk ? { note_ask: noteAsk } : {},
-    ...feedbackAsk ? { feedback_ask: feedbackAsk } : {}
-  };
-  out.result({ ...shown, ...ask ? { ask } : {} }, () => {
-    const bold = import_picocolors21.default.bold(name);
-    if (test2.state === "waiting") {
-      out.line(
-        !test2.needs_person ? `${extra.started ? "Started a test of" : "The test of"} ${bold}. It's waiting for Patch Desktop to take it on.` : extra.started ? `Started a test of ${bold}. It's waiting for you in Patch Desktop: press Start on it there.` : `${bold}: its test is waiting for you in Patch Desktop. Press Start on it there.`
-      );
-      if (test2.needs_person) {
-        out.line(plain(test2.needs_person.why));
-        out.line(plain(test2.needs_person.ask));
-      }
-    } else if (test2.state === "running") {
-      out.line(`${bold}: ${whatsHappening(test2)}.`);
-    } else if (test2.state === "recorded") {
-      out.line(
-        `${bold}: it has been played and recorded. Look at the footage, then send your review.`
-      );
-    } else if (test2.state === "passed") {
-      out.line(`${bold}: ${import_picocolors21.default.green("its test passed.")} It's still private.`);
-      if (test2.review) out.line(plain(test2.review.summary));
-      if (play2) out.line(play2);
-      out.line(
-        "Publish it once you're happy it's ready: that's your yes, and nothing does it for you."
-      );
-    } else if (test2.state === "failed") {
-      out.line(`${bold}: ${import_picocolors21.default.red("its test failed")}, so this version can't be published.`);
-      showWhatFailed(ctx, test2);
-      out.line(`pch status ${name} says how to fix it.`);
-      out.line("Then move the version on in patch.json and publish that.");
-    } else if (test2.state === "couldnt_run") {
-      out.line(`${bold}: ${import_picocolors21.default.yellow("its test couldn't run.")}`);
-      if (test2.outcome) out.line(plain(test2.outcome.reason));
-    } else {
-      out.line(`${bold}: its test was cancelled.`);
-    }
-    if (noteAsk) out.line(plain(noteAsk));
-    if (feedbackAsk) out.line(plain(feedbackAsk.ask));
-    if (followed && GOING.has(test2.state)) {
-      out.line("It isn't over, and nothing's wrong: that's as long as --wait follows it here.");
-    }
-    if (command) out.line(`Next: ${command}`);
-    if (OPEN.has(test2.state) && !extra.started) {
-      out.line(import_picocolors21.default.dim(`To start over: pch test cancel ${name}, then pch test start ${name}`));
-    }
-  });
-  if (test2.state === "failed") return EXIT.blocked;
-  if (test2.state === "couldnt_run" || test2.state === "cancelled") return EXIT.error;
-  return EXIT.ok;
-}
-function askThePerson(test2) {
-  return test2.needs_person?.ask ?? null;
-}
-function showWhatFailed({ out }, test2) {
-  for (const run3 of test2.results) {
-    for (const check3 of run3.checks) {
-      if (check3.result !== "fail") continue;
-      const detail = check3.detail ? ` (${plain(check3.detail)})` : "";
-      out.line(`  Run ${run3.run}: ${plain(check3.name)}${detail}`);
-    }
-  }
-  if (test2.review) out.line(`  Its review: ${plain(test2.review.summary)}`);
-}
-async function testFootage(ctx, ref, options) {
-  requireToken(ctx.target);
-  const { out } = ctx;
-  const release3 = parseReleaseRef(ref);
-  const name = releaseName(release3);
-  const run3 = options.run === void 0 ? void 0 : positive(options.run, "--run");
-  const test2 = await newest(ctx, release3);
-  const { data } = await unwrap(
-    ctx.api.GET("/tests/{id}/footage", { params: { path: { id: test2.id }, query: { run: run3 } } })
-  );
-  const sheets = data.length ? await saveSheets(
-    data,
-    options.out ? resolve15(options.out) : await mkdtemp3(join18(tmpdir3(), "pch-footage-"))
-  ) : [];
-  const next = data.length ? reviewCommand(name) : nextStep(name, "testing", test2).command;
-  out.result({ test: test2.id, state: test2.state, data: sheets, next }, () => {
-    if (!sheets.length) {
-      out.line(`${import_picocolors21.default.bold(name)} has no footage yet: its test is ${test2.state.replace("_", " ")}.`);
-      for (const result of test2.results) {
-        if (result.footage_error) out.line(plain(result.footage_error));
-      }
-    }
-    for (const sheet of sheets) {
-      out.line(`Run ${sheet.run}, ${sheet.from} to ${sheet.to}: ${sheet.path}`);
-    }
-    if (next) {
-      if (sheets.length) out.line("Look at every one, then send your review, with what you saw:");
-      out.line(`Next: ${next}`);
-    }
-  });
-}
-var reviewCommand = (name) => `pch test review ${name} --verdict <pass|fail> --plays <yes|no> --harmful <yes|no> --summary "<what you saw>" --moment "<run> <mm:ss> <what you saw>" --moment "<run> <mm:ss> <what you saw>"`;
-async function saveSheets(sheets, folder) {
-  await mkdir9(folder, { recursive: true });
-  const saved = [];
-  for (const sheet of sheets) {
-    const answer = await fetch(sheet.url).catch(() => null);
-    const bytes = answer?.ok ? Buffer.from(await answer.arrayBuffer()) : null;
-    if (!bytes || createHash3("sha256").update(bytes).digest("hex") !== sheet.sha256) {
-      throw new CliError(
-        EXIT.error,
-        "download_failed",
-        `Run ${sheet.run}'s sheet ${sheet.index} didn't download intact. Try again.`
-      );
-    }
-    const path2 = join18(folder, `run-${sheet.run}-sheet-${sheet.index}.jpg`);
-    await writeFile12(path2, bytes);
-    const { url: _url2, ...kept } = sheet;
-    saved.push({ ...kept, path: path2 });
-  }
-  return saved;
-}
-async function testReview(ctx, ref, options) {
-  requireToken(ctx.target);
-  const release3 = parseReleaseRef(ref);
-  const moments = options.moment.map(parseMoment);
-  const test2 = await newest(ctx, release3);
-  const answer = await ctx.api.POST("/tests/{id}/review", {
-    params: { path: { id: test2.id } },
-    body: {
-      verdict: options.verdict,
-      plays: options.plays === "yes",
-      harmful: options.harmful === "yes",
-      summary: options.summary,
-      moments
-    }
-  });
-  if (answer.response.ok) return show3(ctx, release3, answer.data);
-  throw withNext(fromResponse(answer.response, answer.error), release3, test2);
-}
-function parseMoment(text) {
-  const match = /^(\d+)\s+(\d{1,3}:\d{2})\s+(\S.*)$/s.exec(text.trim());
-  if (!match) {
-    throw new CliError(
-      EXIT.usage,
-      "bad_moment",
-      `"${text}" isn't a moment. Write its run, the time on a frame and what you saw, such as "1 00:04 the title screen draws".`
-    );
-  }
-  return { run: Number(match[1]), at: match[2], saw: match[3] };
-}
-async function testCancel(ctx, ref) {
-  requireToken(ctx.target);
-  const release3 = parseReleaseRef(ref);
-  const name = releaseName(release3);
-  const test2 = await newest(ctx, release3);
-  const answer = await ctx.api.POST("/tests/{id}/cancel", { params: { path: { id: test2.id } } });
-  if (!answer.response.ok) {
-    throw withNext(fromResponse(answer.response, answer.error), release3, test2);
-  }
-  const next = `pch test start ${name}`;
-  ctx.out.result({ ...answer.data, next }, () => {
-    ctx.out.line(`Cancelled ${import_picocolors21.default.bold(name)}'s test. Start another: ${next}`);
-  });
-}
-function withNext(failure2, release3, test2) {
-  if (failure2.code !== "test_state") return failure2;
-  const next = nextStep(releaseName(release3), "testing", test2);
-  return new CliError(failure2.exitCode, failure2.code, `${failure2.message}. ${sayNext(next)}`, {
-    next: next.command
-  });
-}
-function positive(value, flag) {
-  if (/^[1-9]\d*$/.test(value)) return Number(value);
-  throw new CliError(EXIT.usage, "bad_usage", `${flag} takes a whole number, not "${value}".`);
-}
-async function testAutostart(ctx, state) {
-  requireToken(ctx.target);
-  if (state !== "on" && state !== "off") {
-    throw new CliError(EXIT.usage, "bad_value", `Say on or off, not "${state}"`);
-  }
-  const setting = await unwrap(
-    ctx.api.PUT("/me/test-settings", { body: { starts_own_tests: state === "on", by: "agent" } })
-  );
-  ctx.out.result(setting, () => {
-    ctx.out.line(
-      setting.starts_own_tests ? "Your tests of browser games and blocks now start in Patch Desktop by themselves, with a notice each time that lets the person stop them. Patch Desktop tells them you turned it on. A mod's test still waits for Start." : "Your tests wait for the person to press Start in Patch Desktop again."
-    );
-  });
-}
-
 // src/commands/search.ts
-var import_picocolors22 = __toESM(require_picocolors(), 1);
+var import_picocolors23 = __toESM(require_picocolors(), 1);
 init_guide_words();
 var filter = (values) => values?.flatMap((value) => value.split(",")).map((value) => value.trim()).filter(Boolean).join(",") || void 0;
 var licences = (values) => values.flatMap((value) => value.split(",")).map((value) => licenceId(value.trim()) ?? value.trim());
@@ -49124,13 +49291,13 @@ async function search(ctx, q, options) {
   out.result({ ...answer, ...aboutBlocks }, () => {
     if (!data.length) out.line("Nothing found.");
     for (const result of plain(data)) {
-      out.line(`${import_picocolors22.default.bold(result.handle)} ${import_picocolors22.default.dim(facts(result))}`);
+      out.line(`${import_picocolors23.default.bold(result.handle)} ${import_picocolors23.default.dim(facts(result))}`);
       if (result.summary) out.line(`  ${result.summary}`);
       if (result.demo) out.line(`  Live demo: ${ctx.target.origin}/${result.owner}/${result.slug}`);
-      out.line(import_picocolors22.default.dim(`  ${result.clone_url}`));
+      out.line(import_picocolors23.default.dim(`  ${result.clone_url}`));
     }
     if (blocks) out.line(BLOCK_WORDS);
-    if (cursor) out.line(import_picocolors22.default.dim("There are more; raise --limit."));
+    if (cursor) out.line(import_picocolors23.default.dim("There are more; raise --limit."));
   });
 }
 function facts(result) {
@@ -49155,21 +49322,21 @@ async function categories(ctx, options) {
     const width = Math.max(0, ...data.map((category) => category.id.length));
     for (const category of data) {
       ctx.out.line(
-        `${import_picocolors22.default.bold(category.id.padEnd(width))}  ${category.name} ${import_picocolors22.default.dim(`\xB7 ${category.for.join(", ")} \xB7 ${category.projects === 1 ? "1 project" : `${category.projects} projects`}`)}`
+        `${import_picocolors23.default.bold(category.id.padEnd(width))}  ${category.name} ${import_picocolors23.default.dim(`\xB7 ${category.for.join(", ")} \xB7 ${category.projects === 1 ? "1 project" : `${category.projects} projects`}`)}`
       );
     }
   });
 }
 
 // src/commands/update.ts
-var import_picocolors23 = __toESM(require_picocolors(), 1);
+var import_picocolors24 = __toESM(require_picocolors(), 1);
 var import_semver3 = __toESM(require_semver2(), 1);
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createHash as createHash4 } from "node:crypto";
 import { mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { chmod as chmod3, rename as rename2, rm as rm3, writeFile as writeFile13 } from "node:fs/promises";
-import { basename as basename8, dirname as dirname7, join as join19 } from "node:path";
-import { setTimeout as sleep10 } from "node:timers/promises";
+import { basename as basename8, dirname as dirname7, join as join20 } from "node:path";
+import { setTimeout as sleep11 } from "node:timers/promises";
 import { gunzipSync } from "node:zlib";
 init_errors();
 init_version();
@@ -49312,7 +49479,7 @@ async function whenFree(step, wait2 = 200) {
     } catch (error62) {
       const code = error62.code ?? "";
       if (attempt >= 10 || !["EBUSY", "EPERM", "EACCES"].includes(code)) throw error62;
-      await sleep10(attempt * wait2);
+      await sleep11(attempt * wait2);
     }
   }
 }
@@ -49322,7 +49489,7 @@ function removeOldExecutables(target = process.execPath) {
   const old = new RegExp(`^${basename8(target).replace(/\./g, "\\.")}\\.\\d+\\.old$`, "i");
   try {
     for (const name of readdirSync(folder)) {
-      if (old.test(name)) rmSync(join19(folder, name), { force: true });
+      if (old.test(name)) rmSync(join20(folder, name), { force: true });
     }
   } catch {
   }
@@ -49332,7 +49499,7 @@ function startUpdateNotice(ctx, command, now = Date.now()) {
   const releases = releasesUrl(ctx.target.env);
   if (!how || !releases || ctx.out.json || QUIET.has(command)) return null;
   if (!process.stderr.isTTY || process.env.CI) return null;
-  const stamp = join19(dirname7(configPath()), "update-check.json");
+  const stamp = join20(dirname7(configPath()), "update-check.json");
   try {
     const { checked_at } = JSON.parse(readFileSync(stamp, "utf8"));
     if (checked_at && now - Date.parse(checked_at) < DAY) return null;
@@ -49361,7 +49528,7 @@ function startUpdateNotice(ctx, command, now = Date.now()) {
       if (version2 && import_semver3.default.gt(version2, VERSION)) {
         process.stderr.write(
           `
-${import_picocolors23.default.dim("\u203A")} pch ${version2} is out (you have ${VERSION}). To update, run: ${how}
+${import_picocolors24.default.dim("\u203A")} pch ${version2} is out (you have ${VERSION}). To update, run: ${how}
 `
         );
       }
@@ -49370,7 +49537,7 @@ ${import_picocolors23.default.dim("\u203A")} pch ${version2} is out (you have ${
 }
 
 // src/commands/validate.ts
-var import_picocolors24 = __toESM(require_picocolors(), 1);
+var import_picocolors25 = __toESM(require_picocolors(), 1);
 init_errors();
 async function validate2(ctx, dir) {
   const project2 = await loadProject(dir);
@@ -49429,12 +49596,12 @@ async function validate2(ctx, dir) {
     notes
   };
   ctx.out.result(result, () => {
-    const mark = result.ok ? import_picocolors24.default.green("\u2713") : import_picocolors24.default.red("\u2717");
+    const mark = result.ok ? import_picocolors25.default.green("\u2713") : import_picocolors25.default.red("\u2717");
     ctx.out.line(
       `${mark} ${file2.project}@${file2.version} \xB7 ${project2.kind} \xB7 ${result.trust_tier} \xB7 ${project2.files.length} files, ${formatSize(total)}`
     );
-    for (const issue2 of issues) ctx.out.line(`  ${import_picocolors24.default.red(issue2.path || "\xB7")} ${issue2.message}`);
-    for (const note2 of notes) ctx.out.line(`  ${import_picocolors24.default.dim(note2)}`);
+    for (const issue2 of issues) ctx.out.line(`  ${import_picocolors25.default.red(issue2.path || "\xB7")} ${issue2.message}`);
+    for (const note2 of notes) ctx.out.line(`  ${import_picocolors25.default.dim(note2)}`);
   });
   return result.ok ? EXIT.ok : EXIT.usage;
 }
@@ -49469,8 +49636,7 @@ Start here:
   pch search "grappling hook"   find a block or game to start from, then pch remix or pch clone it, and change it
   pch assets search "crate" --type model   find a model, sound or texture, then pch assets add it
   pch new <you>/<game> --licence MIT    make a repo with a patch.json, or pch init in a folder you have
-  pch validate, then pch publish
-  pch test start <you>/<game>@<version>  a game, mod or block goes live only after passing a test in Patch Desktop
+  pch validate, then pch publish   upload, test on your PC, your review of the footage, then live
   pch media add, pch project update      the cover and the listing
 
 Add --json to any command for results an agent can read. Exit codes: 0 fine, 1 error, 2 bad usage,
@@ -49513,7 +49679,7 @@ function topLevel(command) {
 }
 var collect = (value, previous = []) => [...previous, value];
 program2.command("login").description(
-  "Sign in through the browser (device code), and sign git in with it. It waits for a person, which can take a few minutes, so don't run it under a short timeout"
+  "Sign in through the browser (device code), and sign git in with it. It waits for a person, which can take a few minutes, so don't run it under a short timeout. Agents: run it yourself, in the background, and give the person the link it prints, which has the code in it"
 ).option("--scope <scope>", "API key scope: read, publish, admin (repeatable)", collect).option("--no-browser", "print the link instead of opening a browser").action(action((ctx, options) => login(ctx, options)));
 program2.command("logout").description("Revoke and forget the active login, and sign git out").action(action((ctx) => logout(ctx)));
 program2.command("whoami").description("Who you're signed in as, and where").action(action((ctx) => whoami(ctx)));
@@ -49724,17 +49890,29 @@ program2.command("check [dir]").description(
     (ctx, dir, options) => check2(ctx, dir ?? ".", options)
   )
 );
-program2.command("publish [dir]").description(
-  "Hash, upload missing files and submit a release. A browser game or a mod Patch installs stays a private draft until pch test has passed it. If it stops partway, run it again: what's up already isn't sent again"
+program2.command("publish [target]").description(
+  "Publish from upload to live: uploads what Patch doesn't have, tests it on your PC, saves the footage for your review, then follows Patch's review until it's live. Running it is your yes. Give owner/slug@version instead of a folder to carry a release on, with --review once you've looked at its footage. Agents: run it yourself, wherever you run (WSL, Linux, a Mac or a server). The person's Patch Desktop takes the test through Patch, and pch says if they need to open it or press Start"
 ).addOption(
   new Option("--channel <channel>", `overrides patch.json. ${NOT_LOCKED_HELP}`).choices([
     "private",
     "unlisted",
     "public"
   ])
-).option("--changelog <text>", "what changed, shown as the update notes").action(
+).option("--changelog <text>", "what changed, shown as the update notes").addOption(
+  new Option("--review <verdict>", "your review of the footage: pass or fail").choices([
+    "pass",
+    "fail"
+  ])
+).option("--summary <text>", "with --review: what you saw, in a few lines").option(
+  "--moment <moment>",
+  'with --review: "<run> <mm:ss> <what you saw>", at least two, one per run (repeatable)',
+  collect
+).option("--harmful", "with --review: it does something harmful (fails it)").option("--test-again", "test it again after a test that couldn't run").option("--out <dir>", "where to save the footage").option(
+  "--wait <seconds>",
+  "how long to follow it (default: until it stops, at a terminal; 100 s otherwise)"
+).action(
   action(
-    (ctx, dir, options) => publish(ctx, dir ?? ".", options)
+    (ctx, target, options) => publish(ctx, target ?? ".", options)
   )
 );
 var project = program2.command("project").description("Projects, addressed owner/slug");