Exclude staged Notarius bundles from publish uploads

internal/stage/publish.go

@@ -573,19 +573,7 @@ func collectPublishRunFiles(runRoot, manifestPath string) ([]publishUploadFile,
 		if walkErr != nil {
 			return walkErr
 		}
-		if d.IsDir() {
-			if path == runRoot {
-				return nil
-			}
-			relDir, err := filepath.Rel(runRoot, path)
-			if err != nil {
-				return fmt.Errorf("relative dir from %q to %q: %w", runRoot, path, err)
-			}
-			relDir = filepath.ToSlash(relDir)
-			// Preserve existing behavior: audio is not uploaded in publish run record.
-			if relDir == "audio" || strings.HasPrefix(relDir, "audio/") {
-				return filepath.SkipDir
-			}
+		if path == runRoot {
 			return nil
 		}
 		rel, err := filepath.Rel(runRoot, path)
@@ -593,6 +581,15 @@ func collectPublishRunFiles(runRoot, manifestPath string) ([]publishUploadFile,
 			return fmt.Errorf("relative path from %q to %q: %w", runRoot, path, err)
 		}
 		rel = filepath.ToSlash(rel)
+		if publishRunPathExcluded(rel) {
+			if d.IsDir() {
+				return filepath.SkipDir
+			}
+			return nil
+		}
+		if d.IsDir() {
+			return nil
+		}
 		files = append(files, publishUploadFile{
 			RelativePath: rel,
 			LocalPath:    path,
@@ -632,6 +629,11 @@ func collectPublishRunFiles(runRoot, manifestPath string) ([]publishUploadFile,
 	return files, nil
 }
 
+func publishRunPathExcluded(rel string) bool {
+	return rel == "audio" || strings.HasPrefix(rel, "audio/") ||
+		rel == "extract/notarius-output" || strings.HasPrefix(rel, "extract/notarius-output/")
+}
+
 func collectPublishPreviousFiles(previousDir string) ([]publishUploadFile, error) {
 	previousDir = filepath.Clean(strings.TrimSpace(previousDir))
 	if previousDir == "" {