muse-crew 0.13.2 → 0.14.0

package/lib/crew-release.sh

@@ -73,9 +73,12 @@ cmd_init() {
   echo "CURRENT: $cur"
 }
 
-# ── workflow syntax validation ──────────────────────────────────────
-# Every workflow script must parse before a release can install.
+# ── workflow validation ─────────────────────────────────────────────
+# Every workflow script must (a) parse under the workflow-loader emulation
+# and (b) fit the launch budget before a release can install.
+# Exit codes: 10 = parse check failed, 20 = size check failed (0 = pass).
 _validate_workflows() {
+  # --- Parse gate (restored 2026-09-18, finding B2) ---
   # The workflow runtime accepts top-level `export`, `return`, and `await`
   # (it wraps scripts in an async function), so neither `node --check` on the
   # raw .js (vacuous for ESM — exits 0 even on blatant syntax errors) nor a
@@ -83,8 +86,23 @@ _validate_workflows() {
   # Emulate the runtime instead: strip `export`, wrap the script in an async
   # function, then node --check the result. Tokenizer errors (e.g. an
   # unterminated string literal) still fail under the wrap.
+  #
+  # HONESTY NOTE: this is a provisional emulation, not a verification. The
+  # platform's actual loading mechanism was never verified (probe blocked,
+  # 2026-09-18), so this check cannot prove how the platform loads the
+  # workflows. What it DOES prove: the file is syntactically well-formed JS
+  # when read the way the runtime claims to read it (strip export, run as one
+  # async function body). What it does NOT prove: that the platform actually
+  # loads it that way, or that the code runs correctly. The export-strip +
+  # async-wrap transform exists precisely because raw `node --check` on ESM
+  # `.js` is unreliable — it silently exits 0 on some malformed input — so
+  # the transform is what makes the check actually parse.
+  # A failure here is a signal to INSPECT THE CODE, never to delete the
+  # check: this gate was once removed on a misdiagnosis ("the check
+  # false-positives"), and the workflows it rejected turned out to be
+  # genuinely broken (2026-09-18, Gate 1 H2 — a true positive).
   local dir="$1"
-  local f tmp base
+  local f tmp base size
   tmp="$(mktemp -d)"
   for f in "$dir"/workflows/*.js; do
     [ -f "$f" ] || continue
@@ -96,13 +114,28 @@ _validate_workflows() {
     } > "$tmp/$base.js"
     if ! node --check "$tmp/$base.js" 2>"$tmp/$base.err"; then
       cat "$tmp/$base.err" >&2
-      echo "VALIDATION FAILED: $f does not parse" >&2
+      echo "VALIDATION FAILED [parse]: $f does not parse under the workflow-loader emulation" >&2
       rm -rf "$tmp"
-      return 1
+      return 10
     fi
   done
   rm -rf "$tmp"
-  echo "VALIDATED: workflow scripts parse"
+
+  # --- Size gate (H5, 2026-09-18) ---
+  # The platform reads the full workflow file on launch; the platform hard
+  # maximum is 262144 bytes (256 KiB) and 245760 bytes (240 KiB) is the
+  # project's safety target. The release fails closed if any launchable
+  # workflow hits the safety target.
+  for f in "$dir"/workflows/*.js; do
+    [ -f "$f" ] || continue
+    size="$(wc -c < "$f")"
+    if [ "$size" -ge 245760 ]; then
+      echo "VALIDATION FAILED [size]: $f is $size bytes (>= 245760 byte launch budget)" >&2
+      return 20
+    fi
+  done
+
+  echo "VALIDATED: workflow scripts parse and fit the launch budget"
 }
 
 # ── workflow doc sync ───────────────────────────────────────────────
@@ -255,10 +288,19 @@ cmd_deploy() {
       rm -rf "$staging_dir"
       die "release $hash rejected: registry build failed"
     fi
-    # Gate: refuse to install a release whose workflow scripts don't parse.
-    if ! _validate_workflows "$staging_dir"; then
+    # Gate: refuse to install a release whose workflow scripts fail the
+    # parse or size checks. _validate_workflows returns 10 on a parse
+    # failure, 20 on a size-budget failure; the rejection names the check
+    # that failed so the message is never misleading.
+    _vw_status=0
+    _validate_workflows "$staging_dir" || _vw_status=$?
+    if [ "$_vw_status" -ne 0 ]; then
       rm -rf "$staging_dir"
-      die "release $hash rejected: workflow syntax validation failed"
+      case "$_vw_status" in
+        10) die "release $hash rejected: workflow parse check failed" ;;
+        20) die "release $hash rejected: workflow size-budget check failed" ;;
+        *)  die "release $hash rejected: workflow validation failed (unexpected exit $_vw_status)" ;;
+      esac
     fi
     # Atomic rename into place
     mv "$staging_dir" "$release_dir"

package/lib/publish-content.js

@@ -0,0 +1,154 @@
+// publish-content.js — shared deterministic content-judgment primitives.
+//
+// Parent publish verification (lib/verify-publish.js) and unknown-recovery
+// classification (lib/classify-publish-absence.js) both judge the same
+// question — "does the on-disk source contain the publish commit's diff?" —
+// against the same diff parser, findings parser, and collision-exemption
+// rules. Two copies of the collision logic already diverged once (2026-09-15,
+// task 00bca4b8); this module is the single source of truth.
+//
+// ESM (imported by verify-publish.js and classify-publish-absence.js).
+// Pure and deterministic: no wall-clock reads, no randomness, no I/O except
+// the git subprocesses in makeOldCounter (read-only).
+
+import { execFileSync } from "node:child_process";
+
+export const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+
+// Parse `git diff base commit` into per-file added/removed lines.
+// Byte-identical split to build-readback-request.js and the old
+// verify-publish.js inline parser (the verifier looks raw lines up
+// verbatim, so all consumers must agree on the split).
+export function parseDiff(diffText) {
+  const expected = new Map(); // path -> { added: [], removed: [], isBinary: bool }
+  let curFile = null;
+  for (const line of diffText.split("\n")) {
+    if (line.startsWith("diff --git")) {
+      const m = line.match(/^diff --git a\/(.+) b\/(.+)$/);
+      curFile = m ? m[2] : "unknown";
+      expected.set(curFile, { added: [], removed: [], isBinary: false });
+    } else if (curFile && line.startsWith("Binary files ")) {
+      expected.get(curFile).isBinary = true;
+    } else if (curFile && line.startsWith("+") && !line.startsWith("+++")) {
+      expected.get(curFile).added.push(line.slice(1));
+    } else if (curFile && line.startsWith("-") && !line.startsWith("---")) {
+      expected.get(curFile).removed.push(line.slice(1));
+    }
+  }
+  return expected;
+}
+
+// Parse the machine-readable findings block:
+//   FILE: <path>
+//   ADDED: <line> :: PRESENT|ABSENT
+//   REMOVED: <line> :: PRESENT|ABSENT
+//   END_FILE
+export function parseFindings(text) {
+  const findings = new Map(); // path -> { added: Map(line->verdict), removed: Map(line->verdict) }
+  let cur = null;
+  let malformed = null;
+  for (const rawLine of text.split("\n")) {
+    const line = rawLine.trimEnd();
+    if (line.startsWith("FILE: ")) {
+      cur = { added: new Map(), removed: new Map() };
+      findings.set(line.slice(6).trim(), cur);
+    } else if (line === "END_FILE") {
+      cur = null;
+    } else if (cur && (line.startsWith("ADDED: ") || line.startsWith("REMOVED: "))) {
+      const kind = line.startsWith("ADDED: ") ? "added" : "removed";
+      const rest = line.slice(kind === "added" ? 7 : 9);
+      const sep = rest.lastIndexOf(" :: ");
+      if (sep < 0) { malformed = `malformed finding line: ${line.slice(0, 80)}`; break; }
+      const content = rest.slice(0, sep);
+      const verdict = rest.slice(sep + 4).trim();
+      if (verdict !== "PRESENT" && verdict !== "ABSENT") {
+        malformed = `bad verdict: ${verdict}`;
+        break;
+      }
+      cur[kind].set(content, verdict);
+    }
+  }
+  return { findings, malformed };
+}
+
+// Whole-line occurrence counts of a file's content at <base>.
+// [] when the base is the empty tree or the file did not exist there.
+function oldTreeLines(repoPath, base, path) {
+  if (base === EMPTY_TREE) return [];
+  let text;
+  try {
+    text = execFileSync("git", ["-C", repoPath, "show", `${base}:${path}`], {
+      encoding: "utf8", maxBuffer: 4 * 1024 * 1024,
+    });
+  } catch {
+    return [];
+  }
+  if (text === "") return [];
+  const lines = text.split("\n");
+  if (lines[lines.length - 1] === "") lines.pop(); // drop the trailing-newline artifact
+  return lines;
+}
+
+// Returns (path, line) => occurrences of line in path's old tree.
+// Cached per path. Read-only git subprocesses.
+export function makeOldCounter(repoPath, base) {
+  const cache = new Map(); // path -> Map(line -> count)
+  return (path, line) => {
+    let counts = cache.get(path);
+    if (counts === undefined) {
+      counts = new Map();
+      for (const l of oldTreeLines(repoPath, base, path)) {
+        counts.set(l, (counts.get(l) || 0) + 1);
+      }
+      cache.set(path, counts);
+    }
+    return counts.get(line) || 0;
+  };
+}
+
+// Split each file's diff lines into discriminating vs non-discriminating.
+//
+// A line has zero discriminating power when its presence/absence cannot
+// tell "hunk landed" from "hunk dropped":
+//   - added line already in the old tree (colliding pre-existing line):
+//     PRESENT whether or not the hunk landed.
+//   - removed line occurring in the old tree strictly more times than the
+//     diff removes it: PRESENT whether or not the removal happened.
+//
+// Returns Map(path -> {
+//   addedDisc: [...], removedDisc: [...],   // discriminating lines
+//   unjudgeable: null | "binary-or-mode-or-rename" | "fully-colliding-added"
+// }).
+// unjudgeable marks files the line-based judge cannot certify at all:
+// a diff with no content lines (binary, mode-only, rename), or added
+// lines that ALL collide (their PRESENT findings prove nothing).
+export function discriminatingLines(diffMap, oldCount) {
+  const out = new Map();
+  for (const [path, exp] of diffMap) {
+    const entry = { addedDisc: [], removedDisc: [], unjudgeable: null };
+    if (exp.added.length === 0 && exp.removed.length === 0) {
+      entry.unjudgeable = "binary-or-mode-or-rename";
+      out.set(path, entry);
+      continue;
+    }
+    for (const line of exp.added) {
+      if (oldCount(path, line) === 0) entry.addedDisc.push(line);
+    }
+    // The diff may remove the same line more than once; the old tree must
+    // account for every removal before a line counts as colliding.
+    const removedBudget = new Map();
+    for (const line of exp.removed) {
+      removedBudget.set(line, (removedBudget.get(line) || 0) + 1);
+    }
+    for (const line of exp.removed) {
+      if (oldCount(path, line) <= removedBudget.get(line)) {
+        entry.removedDisc.push(line);
+      }
+    }
+    if (exp.added.length > 0 && entry.addedDisc.length === 0) {
+      entry.unjudgeable = "fully-colliding-added";
+    }
+    out.set(path, entry);
+  }
+  return out;
+}

package/lib/retry-publish.js

@@ -0,0 +1,370 @@
+#!/usr/bin/env node
+// retry-publish.js — Deterministic unknown-recovery retry protocol (2026-09-18, should-fix 5).
+//
+// The cron Step 4.4 retry protocol was prose-owned: the cron agent performed
+// lock handling, journaling, diff generation, ledger writes, mirroring, and
+// cleanup by following template instructions. A missed step (or a tick dying
+// mid-protocol) left the lock held or the state inconsistent.
+//
+// This command owns all deterministic transitions with try/finally lock
+// release. Only the unavoidable `artifact_edit` tool call remains
+// agent-mediated (it requires the artifact namespace, which this process
+// cannot load).
+//
+// Two phases:
+//   Phase 1 (prepare): acquire merge lock, re-check HEAD, re-classify,
+//     journal intent, generate diff. Outputs JSON with the diff path/sha
+//     for the agent to feed to artifact_edit. The lock is HELD on success
+//     (the agent must call phase 2 to release it).
+//   Phase 2 (complete): given the artifact_edit outcome (accepted/refused),
+//     write the outcome notes, append the ledger entry, mirror verification,
+//     and RELEASE the lock in a finally block.
+//
+// Crash safety: if the agent dies between phases, the lock expires after
+// 600s and the note journal (`publish: retry-intended` without
+// `publish: retry-issued`) lets the next scan mirror verification-requested
+// without re-triggering — exactly one retry, enforced from notes.
+//
+// Usage:
+//   node retry-publish.js --crew-home <path> --task-id <uuid> --phase prepare
+//   node retry-publish.js --crew-home <path> --task-id <uuid> --phase complete --edit-outcome <accepted|refused> [--refusal-text <text>]
+//
+// Exit codes: 0 = success, 1 = terminal stop (no retry), 2 = usage error.
+
+import { readFileSync, writeFileSync, appendFileSync, existsSync } from "fs";
+import { join } from "path";
+import { execFileSync } from "child_process";
+import { randomUUID as uuid } from "crypto";
+
+const args = process.argv.slice(2);
+function arg(name, required = true, def = undefined) {
+  const i = args.indexOf(name);
+  if (i === -1 || i + 1 >= args.length) {
+    if (required) { console.error(`missing required arg ${name}`); process.exit(2); }
+    return def;
+  }
+  return args[i + 1];
+}
+function fail(code, msg, exitCode = 1) {
+  process.stdout.write(JSON.stringify({ ok: false, code, message: msg }) + "\n");
+  process.exit(exitCode);
+}
+
+const crewHome = arg("--crew-home");
+const taskId = arg("--task-id");
+const phase = arg("--phase");
+
+if (!["prepare", "complete"].includes(phase)) {
+  console.error("phase must be 'prepare' or 'complete'");
+  process.exit(2);
+}
+
+// --- Shared helpers ---------------------------------------------------------
+
+function nowISO() { return new Date().toISOString(); }
+
+function writePublishNote(db, taskId, message) {
+  db.prepare(
+    `INSERT INTO events (id, type, task_id, identity, message, timestamp)
+     VALUES (?, 'note', ?, NULL, ?, ?)`
+  ).run(uuid(), taskId, message, nowISO());
+}
+
+// Load the crew DB. We use better-sqlite3 via the crew-api's own dependency
+// resolution — fall back to a clear error if unavailable.
+let Database;
+try {
+  Database = (await import("better-sqlite3")).default;
+} catch {
+  fail("db-unavailable", "better-sqlite3 is not available to retry-publish.js");
+}
+const dbPath = join(crewHome, "crew.db");
+if (!existsSync(dbPath)) fail("no-db", `crew database not found at ${dbPath}`);
+const db = new Database(dbPath);
+
+const EMPTY_TREE = "4b825dc642cb6eb9a060e54bf8d69288fbee4904";
+
+function runMergeLock(action) {
+  const lockScript = join(crewHome, "lib", "merge-lock.sh");
+  try {
+    execFileSync(lockScript, [action, taskId], {
+      env: { ...process.env, CREW_HOME: crewHome },
+      encoding: "utf8",
+      timeout: 30000,
+    });
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, error: (e.stderr || e.message || "").slice(0, 300) };
+  }
+}
+
+// --- Phase 1: prepare --------------------------------------------------------
+// Acquires the lock, re-checks HEAD, re-classifies, journals intent,
+// generates the diff. On success the lock is HELD and the output carries
+// the diff path/sha for the agent's artifact_edit child.
+
+if (phase === "prepare") {
+  // Derive the unknown attempt (same derivation as scan-publish-unknown).
+  const task = db.prepare("SELECT id, state, project FROM tasks WHERE id = ?").get(taskId);
+  if (!task) fail("unknown-task", `task ${taskId} not found`);
+  if (task.state !== "parked") fail("not-parked", `task is not parked (state=${task.state})`);
+
+  const project = db.prepare("SELECT id, deploy_slug, repo_path FROM projects WHERE id = ?").get(task.project);
+  const slug = project && project.deploy_slug;
+  if (!slug) fail("no-slug", "project has no deploy_slug");
+  const repoPath = (project && project.repo_path) || null;
+
+  const ledgerPath = join(crewHome, ".publish-ledger", slug + ".jsonl");
+  let entries = [];
+  try {
+    entries = readFileSync(ledgerPath, "utf8").split("\n")
+      .filter((l) => l.trim().length > 0)
+      .map((l) => JSON.parse(l))
+      .filter((e) => e.task_id === taskId);
+  } catch (e) {
+    fail("ledger-unreadable", `cannot read publish ledger: ${e.message}`);
+  }
+  const unknownEntry = entries[entries.length - 1];
+  if (!unknownEntry || unknownEntry.outcome !== "unknown") {
+    fail("not-unknown", "latest ledger entry is not unknown — nothing to retry");
+  }
+  const commit = unknownEntry.commit;
+  const attempt = unknownEntry.attempt || null;
+  if (!commit || !/^[0-9a-f]{40}$/.test(commit)) {
+    fail("bad-commit", "unknown ledger entry carries no usable commit hash");
+  }
+
+  // 1. Re-check HEAD: must still be the retry target.
+  let head;
+  try {
+    head = execFileSync("git", ["-C", repoPath, "rev-parse", "HEAD"], { encoding: "utf8" }).trim();
+  } catch (e) {
+    fail("head-unreadable", `git rev-parse HEAD failed: ${e.message}`);
+  }
+  if (head !== commit) {
+    writePublishNote(db, taskId,
+      `publish: retry-superseded ${commit} — HEAD is ${head}; the retry target moved. Recovery aborted.`);
+    process.stdout.write(JSON.stringify({ ok: true, phase: "prepare", outcome: "superseded", commit, head }) + "\n");
+    process.exit(0);
+  }
+
+  // 2. Acquire the merge lock.
+  const lock = runMergeLock("acquire");
+  if (!lock.ok) {
+    process.stdout.write(JSON.stringify({
+      ok: true, phase: "prepare", outcome: "lock-held",
+      message: `merge lock held for ${taskId}; the drop note is still latest, so the next tick retries`,
+    }) + "\n");
+    process.exit(0);
+  }
+
+  // From here to the end of phase 1, the lock is held. Any failure must
+  // release it — try/finally.
+  let lockHeld = true;
+  const releaseLock = () => {
+    if (lockHeld) {
+      runMergeLock("release");
+      lockHeld = false;
+    }
+  };
+
+  try {
+    // 3. Inside the lock, re-classify.
+    let base = EMPTY_TREE;
+    try {
+      const prov = db.prepare("SELECT provenance_source_commit FROM projects WHERE id = ?").get(project.id);
+      if (prov && /^[0-9a-f]{40}$/.test(prov.provenance_source_commit)) base = prov.provenance_source_commit;
+    } catch (e) {
+      releaseLock();
+      fail("provenance-query-failed", `provenance lookup failed: ${e.message} — failing closed`);
+    }
+
+    const classifierPath = join(crewHome, "lib", "classify-publish-absence.js");
+    // Find the trigger entry for the manifest baseline.
+    const trigger = [...entries].reverse().find((e) =>
+      e.outcome === "submitted" && e.commit === commit && (attempt == null || e.attempt === attempt));
+    const manifestBefore = trigger && trigger.manifest_before ? JSON.stringify(trigger.manifest_before) : null;
+
+    // Find the park note timestamp for quiesce calculation.
+    const parkNote = db.prepare(
+      `SELECT message, timestamp FROM events WHERE task_id = ? AND type = 'note'
+       AND (message LIKE '%publish: dropped%' OR message LIKE '%publish outcome unknown%')
+       ORDER BY timestamp DESC LIMIT 1`
+    ).get(taskId);
+    if (!parkNote) {
+      releaseLock();
+      fail("no-park-note", "no dropped/unknown park note found — cannot determine quiesce window");
+    }
+
+    const classifierArgs = [
+      classifierPath,
+      "--slug", slug,
+      "--commit", commit,
+      "--base", base,
+      "--trigger-ts", trigger ? trigger.ts : parkNote.timestamp,
+      "--park-ts", parkNote.timestamp,
+      "--repo-path", repoPath,
+    ];
+    if (manifestBefore) classifierArgs.push("--manifest-before", manifestBefore);
+
+    let classification;
+    try {
+      const out = execFileSync("node", classifierArgs, { encoding: "utf8", maxBuffer: 4 * 1024 * 1024 });
+      classification = JSON.parse(out);
+    } catch (e) {
+      releaseLock();
+      fail("classifier-failed", `classify-publish-absence.js failed: ${(e.stderr || e.message).slice(0, 300)}`);
+    }
+
+    if (!classification.ok || classification.decision !== "provably-dropped") {
+      // Not dropped — release the lock and route via the existing
+      // record-retry-recheck path (the code owns the routing).
+      releaseLock();
+      process.stdout.write(JSON.stringify({
+        ok: true, phase: "prepare", outcome: "not-dropped",
+        decision: classification.decision,
+        message: "re-classification is not provably-dropped; the tick routes via record-retry-recheck",
+        classification,
+      }) + "\n");
+      process.exit(0);
+    }
+
+    // 3b. Capture the pre-retry manifest baseline (inside the lock).
+    let retryBaseline = null;
+    try {
+      const m = JSON.parse(readFileSync(join(process.env.HOME, "workspace", "ts-spaces", slug, ".space-build", "manifest.json"), "utf8"));
+      if (m && typeof m.built_at === "string" && typeof m.content_sha256 === "string") {
+        retryBaseline = { built_at: m.built_at, content_sha256: m.content_sha256 };
+      }
+    } catch { /* missing/unparsable → null; the verifier fails closed without a baseline */ }
+
+    // 4. Journal the intent BEFORE the trigger.
+    writePublishNote(db, taskId,
+      `publish: retry-intended ${commit} ${nowISO()} — re-issuing the dropped edit once; if this tick dies before the trigger returns, the next scan mirrors verification-requested rather than re-triggering.`);
+
+    // 5. Regenerate the diff deterministically.
+    const diffPath = `/tmp/retry-diff-${taskId}.txt`;
+    let diffMeta;
+    try {
+      const out = execFileSync("node", [
+        join(crewHome, "lib", "compute-publish-diff.js"),
+        "--repo-path", repoPath,
+        "--base", base,
+        "--out", diffPath,
+      ], { encoding: "utf8" });
+      diffMeta = JSON.parse(out);
+    } catch (e) {
+      releaseLock();
+      fail("diff-failed", `compute-publish-diff.js failed: ${(e.stderr || e.message).slice(0, 300)} — intent note stands; next tick mirrors verification-requested`);
+    }
+    if (!diffMeta.ok) {
+      releaseLock();
+      fail("diff-not-ok", `compute-publish-diff.js returned ok:false — intent note stands; next tick mirrors verification-requested`);
+    }
+
+    // Success: lock remains HELD. The agent spawns the artifact_edit child
+    // with the diff, then calls phase 2 (complete) to finish.
+    // Persist the phase-1 state for phase 2 (crash recovery reads the notes,
+    // but phase 2 needs the exact commit/attempt/baseline/ledger path).
+    const statePath = `/tmp/retry-publish-${taskId}.json`;
+    writeFileSync(statePath, JSON.stringify({
+      task_id: taskId, commit, attempt, slug, repoPath,
+      project_id: project.id, ledger_path: ledgerPath,
+      retry_baseline: retryBaseline,
+      diff_path: diffPath, diff_sha256: diffMeta.sha256,
+      prepared_at: nowISO(),
+    }));
+
+    process.stdout.write(JSON.stringify({
+      ok: true, phase: "prepare", outcome: "ready",
+      task_id: taskId, commit, attempt,
+      diff_path: diffPath, diff_sha256: diffMeta.sha256,
+      slug,
+      message: "lock held; spawn the artifact_edit child with the diff, then call phase 2 (complete)",
+    }) + "\n");
+    process.exit(0);
+  } catch (e) {
+    releaseLock();
+    throw e;
+  }
+}
+
+// --- Phase 2: complete -------------------------------------------------------
+// Given the artifact_edit outcome, write the outcome notes, append the
+// ledger entry, mirror verification, and RELEASE the lock (finally).
+
+if (phase === "complete") {
+  const editOutcome = arg("--edit-outcome");
+  if (!["accepted", "refused"].includes(editOutcome)) {
+    console.error("--edit-outcome must be 'accepted' or 'refused'");
+    process.exit(2);
+  }
+  const refusalText = arg("--refusal-text", false, "");
+
+  const statePath = `/tmp/retry-publish-${taskId}.json`;
+  if (!existsSync(statePath)) {
+    fail("no-prepare-state", `no phase-1 state at ${statePath} — the prepare phase did not complete or the state was cleaned`);
+  }
+  const state = JSON.parse(readFileSync(statePath, "utf8"));
+  const { commit, attempt, slug, ledger_path: ledgerPath, retry_baseline: retryBaseline } = state;
+
+  let lockHeld = true;
+  const releaseLock = () => {
+    if (lockHeld) {
+      runMergeLock("release");
+      lockHeld = false;
+    }
+  };
+
+  try {
+    if (editOutcome === "refused") {
+      // Conclusive negative: rejected, not unknown. Terminal.
+      writePublishNote(db, taskId,
+        `publish: retry-refused ${commit} — the platform refused the re-issued edit (${refusalText.split("\n")[0].slice(0, 200)}); not retrying again.`);
+      process.stdout.write(JSON.stringify({ ok: true, phase: "complete", outcome: "refused", commit }) + "\n");
+      return;
+    }
+
+    // The child ended after the edit call with no explicit refusal —
+    // fire-and-forget, same shape as the first attempt.
+    writePublishNote(db, taskId,
+      `publish: retry-issued ${commit} — the dropped edit was re-issued once; no explicit refusal was observed.`);
+
+    // Mirror verification with a settle window.
+    const notBefore = new Date(Date.now() + 20 * 60 * 1000).toISOString();
+    const retryAttempt = attempt ? `${attempt}-retry1` : "retry1";
+    writePublishNote(db, taskId,
+      `publish: verification-requested ${commit} attempt=${retryAttempt} not-before=${notBefore} — unknown-recovery retried the dropped edit once; content verification is the arbiter. Waiting on the manual read-back in docs/publish-verification.md.`);
+
+    // Append the -retry1 ledger entry with the pre-retry baseline (required).
+    const ledgerEntry = {
+      ts: nowISO(),
+      task_id: taskId,
+      workflow: "unknown-recovery",
+      slug,
+      commit,
+      attempt: retryAttempt,
+      agent_id: null,
+      applied_report: null,
+      outcome: "submitted",
+      manifest_before: retryBaseline,
+      detail: "retry trigger re-issued after provably-dropped classification",
+    };
+    try {
+      appendFileSync(ledgerPath, JSON.stringify(ledgerEntry) + "\n");
+    } catch (e) {
+      // Best-effort: the note journal is the source of truth, not the ledger.
+      console.error(`ledger append failed (non-fatal): ${e.message}`);
+    }
+
+    process.stdout.write(JSON.stringify({
+      ok: true, phase: "complete", outcome: "issued",
+      commit, attempt: retryAttempt, not_before: notBefore,
+    }) + "\n");
+  } finally {
+    releaseLock();
+    // Clean up the phase-1 state file (best-effort).
+    try { (await import("fs")).unlinkSync(statePath); } catch {}
+  }
+  process.exit(0);
+}