muse-crew 0.13.3 → 0.14.0

package/workflows/standard.js

@@ -440,6 +440,7 @@ async function recordPublishLedger(entry, rework) {
       attempt: entry.attempt || null,
       agent_id: entry.agent_id || null,
       applied_report: entry.applied_report || null,
+      manifest_before: entry.manifest_before || null,
       outcome: entry.outcome,
       detail: entry.detail || ""
     });
@@ -1442,20 +1443,36 @@ while (i < STEPS.length) {
         // See docs/decisions/publish-path.md#durable-evidence-snapshot: snapshot the audit-dir listing BEFORE the trigger; fallback diffs before/after.
         var auditDirsBeforeTrigger = [];
         var auditBeforeOk = false;
+        // Pre-trigger baselines (design §1.9): the audit-dir listing and the
+        // manifest snapshot. The verified-path freshness check compares the
+        // post-trigger manifest against the baseline (built_at advance +
+        // content_sha256 change). Best-effort, never gates — a missing
+        // manifest baseline fails the verified path closed.
+        var preTriggerManifest = null;
         try {
           var auditBefore = await agent(
-            "List the artifact audit directories for slug \"" + PUBLISH_SLUG + "\" (best-effort snapshot, never a gate).\n" +
-            "Run: ls -1 ~/workspace/ts-spaces/" + PUBLISH_SLUG + "/audits/ 2>/dev/null\n" +
-            "Return JSON { \"dirs\": \"<newline-separated names, empty string when the audits directory does not exist or is empty>\" } and nothing else.",
-            { key: attemptKey("publish-audit-before-" + taskId, totalReworkCount), label: "Snapshotting audit dirs before rebuild trigger",
-              schema: { type: "object", properties: { dirs: { type: "string" } }, required: ["dirs"] } }
+            "Capture pre-trigger baselines for slug \"" + PUBLISH_SLUG + "\" (best-effort snapshots, never gates).\n" +
+            "Run: ls -1 ~/workspace/ts-spaces/" + PUBLISH_SLUG + "/audits/ 2>/dev/null; echo ---MANIFEST---; cat ~/workspace/ts-spaces/" + PUBLISH_SLUG + "/.space-build/manifest.json 2>/dev/null\n" +
+            "Return JSON { \"dirs\": \"<newline-separated names, empty string when missing>\", \"manifest\": \"<the manifest's full text, or empty string when missing/unreadable>\" } and nothing else.",
+            { key: attemptKey("publish-baseline-before-" + taskId, totalReworkCount), label: "Snapshotting baselines before rebuild trigger",
+              schema: { type: "object", properties: { dirs: { type: "string" }, manifest: { type: "string" } }, required: ["dirs", "manifest"] } }
           );
           auditDirsBeforeTrigger = String((auditBefore && auditBefore.dirs) || "").split("\n").map(function (s) { return s.trim(); }).filter(function (s) { return s.length > 0; });
+          var manifestText = String((auditBefore && auditBefore.manifest) || "").trim();
+          if (manifestText) {
+            var manifestJson = JSON.parse(manifestText);
+            preTriggerManifest = {
+              built_at: typeof manifestJson.built_at === "string" ? manifestJson.built_at : null,
+              content_sha256: typeof manifestJson.content_sha256 === "string" ? manifestJson.content_sha256 : null,
+            };
+          }
+          // Arm only after both baselines parse.
           auditBeforeOk = true;
-          log("Publish audit-dir snapshot before trigger for task " + taskId + ": " + auditDirsBeforeTrigger.length + " entries");
+          log("Publish pre-trigger baselines for task " + taskId + ": " + auditDirsBeforeTrigger.length + " audit dirs, manifest " + (preTriggerManifest ? "built_at=" + preTriggerManifest.built_at : "none"));
         } catch (auditBeforeErr) {
-          log("Publish audit-dir snapshot before trigger failed for task " + taskId + " (non-fatal): audit fallback DISABLED for this attempt — without a baseline, historical dirs would look new: " + (auditBeforeErr && auditBeforeErr.message ? auditBeforeErr.message : auditBeforeErr));
+          log("Publish pre-trigger baselines failed for task " + taskId + " (non-fatal): audit fallback DISABLED for this attempt — without a baseline, historical dirs would look new: " + (auditBeforeErr && auditBeforeErr.message ? auditBeforeErr.message : auditBeforeErr));
         }
+
         // See docs/decisions/publish-path.md#fire-and-forget-trigger: the trigger child returns immediately; the workflow owns observation and verdict.
         var publishToolsOk = false;
         var publishToolsMissing = false;
@@ -1660,6 +1677,7 @@ while (i < STEPS.length) {
             attempt: rebuildAttemptKey,
             agent_id: rebuildAgentId,
             applied_report: publishAppliedObservation,
+            manifest_before: preTriggerManifest,
             outcome: "submitted",
             detail: "fire-and-forget trigger; build receipt captured by workflow-owned build-state observation (pre/post-trigger diff)"
           }, totalReworkCount);
@@ -1730,7 +1748,8 @@ while (i < STEPS.length) {
                 attempt: rebuildAttemptKey,
                 agent_id: null,
                 applied_report: publishAppliedObservation,
-                outcome: "submitted",
+                manifest_before: preTriggerManifest,
+            outcome: "build-observed",
                 detail: "durable audit evidence shows a build completed during the attempt window (no receipt agent_id — attribution by window, not identity; receipt poll bypassed (verdict decided), routed to parent verification)"
               }, totalReworkCount);
               log("Publish verdict LANDED for task " + taskId + ": a completed build was observed during the attempt window — receipt poll bypassed (verdict decided, no receipt to chain to), routing directly to parent verification.");
@@ -2002,7 +2021,8 @@ while (i < STEPS.length) {
                 attempt: rebuildAttemptKey,
                 agent_id: rebuildAgentId,
                 applied_report: publishAppliedObservation,
-                outcome: "submitted",
+                manifest_before: preTriggerManifest,
+            outcome: "build-observed",
                 detail: "durable audit evidence shows a build completed during the attempt window (audit dir " + newestAuditDirAfterPoll + ", report ok=true); routed to parent verification"
               }, totalReworkCount);
             } else if (auditOkAfterPoll === false) {
@@ -2740,6 +2760,7 @@ while (i < STEPS.length) {
     // means the parent's independent read-back has not happened yet; this
     // park is NOT proof the content is correct.
     return await parkTask("publish: verification-requested " + mergeCommitForPublish +
+      " attempt=" + rebuildAttemptKey +
       " Do NOT republish: a duplicate build would re-publish the same change. " +
       "Artifact build landed, post-deploy finalized, provenance not stamped — the crew has not yet independently confirmed the live artifact contains exactly the change; waiting on the manual read-back in docs/publish-verification.md. " +
       "Appendix: build=" + (rebuildAgentId || "agent_id unobserved") + "; provenance=unstamped; content_check=pending.");

package/workflows/upgrade.js

@@ -104,7 +104,7 @@ let telemetryBuffer = [];
 async function telemetryStart(workflowName) {
   try {
     const out = await agent(crewCmd("record-run-start", {
-      task_id: taskId, workflow: workflowName, launched_by: "cron"
+      task_id: taskId, workflow: workflowName, launched_by: inputs.launched_by
     }), { key: "telemetry-start", label: "Recording run start" });
     const parsed = typeof out === "string" ? JSON.parse(out) : out;
     if (parsed && parsed.run_id) telemetryRunId = parsed.run_id;