@catladder/cli 0.0.0-next-dccc0a36 → 0.0.0-next-89bce6d0

package/dist/apps/cli/src/catci.js

@@ -17,6 +17,7 @@ const evaluateSecurityAudit_1 = require("./security/evaluateSecurityAudit");
 const createSecurityAuditMergeRequest_1 = require("./security/createSecurityAuditMergeRequest");
 const changesetsReleaseJob_1 = require("./release/changesetsReleaseJob");
 const changesetCheckJob_1 = require("./release/changesetCheckJob");
+const githubQueuedRelease_1 = require("./release/githubQueuedRelease");
 const npmPublishJob_1 = require("./publish/npmPublishJob");
 const GITLAB_HOST = "https://git.panter.ch";
 const USAGE = `catci — catladder CI companion
@@ -46,6 +47,18 @@ usage:
       github only: dispatches the generated taggedRelease workflow for
       the tag (tags pushed with the job token don't trigger it)
 
+  catci release github-queue-check
+      github only, first step of the manual create-release task:
+      releases right away when the main workflow run for HEAD is green
+      (queued=false step output), queues the release when it is still
+      running (queued=true, marker ref for the release-on-green
+      workflow), fails when it concluded red
+
+  catci release github-queued-guard <head-sha> <conclusion>
+      github only, guard of the release-on-green workflow: consumes the
+      queue marker when it matches the completed main run and decides
+      whether the release step runs (release=true step output)
+
   catci publish npm --dir <dir> --env-type <envType> [--access <access>] [--registry <url>] [--dist-tag <tag>]
       npmPackage deploy job: derives version + dist-tag from the
       pipeline trigger (tagged release -> tag version @latest; branch/MR
@@ -126,6 +139,16 @@ const main = async () => {
         args.length === 1) {
         return (0, changesetsReleaseJob_1.dispatchTaggedReleaseWorkflow)(args[0]);
     }
+    if (group === "release" &&
+        command === "github-queue-check" &&
+        args.length === 0) {
+        return (0, githubQueuedRelease_1.githubQueueCheckJob)();
+    }
+    if (group === "release" &&
+        command === "github-queued-guard" &&
+        args.length === 2) {
+        return (0, githubQueuedRelease_1.githubQueuedGuardJob)(args[0], args[1]);
+    }
     if (group === "publish" && command === "npm") {
         const options = (0, npmPublishJob_1.parseNpmPublishArgs)(args);
         if (options) {

package/dist/apps/cli/src/catci.js.map

@@ -1 +1 @@
-{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../../src/catci.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,0CAAyC;AACzC,4EAG0C;AAC1C,gGAGoD;AACpD,yEAGwC;AACxC,mEAAgE;AAChE,2DAA6E;AAE7E,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,MAAM,KAAK,GAAG;;;;kBAII,0DAAwB;;;;kBAIxB,0DAAwB;;;;;;;;;;;;;;;;;;;;;;;;;CAyBzC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,yCAAyC;YACvC,oCAAoC,0DAAwB,4DAA4D,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,sBAAsB,0DAAwB,IAAI;YAChD,gBAAgB,0DAAwB,6CAA6C;YACrF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;QAC/C,GAAG;QACH,UAAU;QACV,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CACF,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,oCAAoC,0DAAwB,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACpF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1D,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAA,2CAAoB,GAAE,CAAC;IAChC,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,iBAAiB;QAC7B,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,qCAAiB,GAAE,CAAC;IAC7B,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,0BAA0B;QACtC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,oDAA6B,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAA,6BAAa,EAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}
+{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../../src/catci.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,0CAAyC;AACzC,4EAG0C;AAC1C,gGAGoD;AACpD,yEAGwC;AACxC,mEAAgE;AAChE,uEAGuC;AACvC,2DAA6E;AAE7E,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,MAAM,KAAK,GAAG;;;;kBAII,0DAAwB;;;;kBAIxB,0DAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCzC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,yCAAyC;YACvC,oCAAoC,0DAAwB,4DAA4D,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,sBAAsB,0DAAwB,IAAI;YAChD,gBAAgB,0DAAwB,6CAA6C;YACrF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;QAC/C,GAAG;QACH,UAAU;QACV,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CACF,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,oCAAoC,0DAAwB,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACpF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1D,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAA,2CAAoB,GAAE,CAAC;IAChC,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,iBAAiB;QAC7B,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,qCAAiB,GAAE,CAAC;IAC7B,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,0BAA0B;QACtC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,oDAA6B,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,oBAAoB;QAChC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,yCAAmB,GAAE,CAAC;IAC/B,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,qBAAqB;QACjC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,0CAAoB,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAA,6BAAa,EAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/apps/cli/src/release/githubQueuedRelease.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `catci release github-queue-check` — first step of the manual
+ * create-release dispatch job. Decides between releasing right away
+ * (queued=false) and queueing for the running main workflow
+ * (queued=true).
+ */
+export declare const githubQueueCheckJob: () => Promise<void>;
+/**
+ * `catci release github-queued-guard <head-sha> <conclusion>` — guard
+ * step of the release-on-green workflow, running on every completed
+ * main workflow run. Consumes the marker when it matches the run and
+ * decides whether the release step runs (release=true).
+ */
+export declare const githubQueuedGuardJob: (headSha: string, conclusion: string) => Promise<void>;

package/dist/apps/cli/src/release/githubQueuedRelease.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.githubQueuedGuardJob = exports.githubQueueCheckJob = void 0;
+/**
+ * "release once the pipeline succeeds" on github.
+ *
+ * gitlab expresses this natively inside the pipeline (the `create
+ * release` button job plus an executor with `needs` on the whole
+ * pipeline); github has no cross-workflow needs, so catladder uses a
+ * marker ref plus a workflow_run-triggered workflow instead:
+ *
+ * - the manual `create-release` dispatch runs `github-queue-check`:
+ *   - the main workflow run for HEAD completed green (or never ran) →
+ *     release right away (queued=false, the job's release step runs)
+ *   - still running → push the marker ref and stop (queued=true skips
+ *     the release step); the release-on-green workflow takes over
+ *   - completed red → fail with a pointer to the force task
+ * - the release-on-green workflow (`on: workflow_run` of the main
+ *   workflow) runs `github-queued-guard` on every completed main run:
+ *   it consumes the marker when it matches the run's head sha and
+ *   releases only when the run concluded green
+ */
+const fs_1 = require("fs");
+const releaseGit_1 = require("./releaseGit");
+/**
+ * the generated main-branch workflow whose runs gate a queued release.
+ * Keep in sync with `workflowFileName` / GENERATED_FILE_PREFIX in
+ * pipeline/src/backends/github/GithubBackend.ts.
+ */
+const GITHUB_MAIN_WORKFLOW = "catladder-main.yml";
+/**
+ * where a queued release is recorded: a ref outside refs/heads and
+ * refs/tags, pointing at the commit the release was queued for.
+ * Writable with the job token (`permissions: contents: write`).
+ */
+const QUEUE_MARKER_REF = "refs/catladder/release-queued";
+/**
+ * github container jobs: the workspace volume is owned by the host
+ * runner user while catci runs as the container user — git refuses the
+ * repo ("dubious ownership") without a safe.directory entry. The
+ * release entrypoint scripts do the same, but the queue commands run
+ * before them.
+ */
+const ensureGitSafeDirectory = async () => {
+    await (0, releaseGit_1.git)("config", "--global", "--add", "safe.directory", process.cwd());
+};
+const requireEnv = (name) => {
+    const value = process.env[name];
+    if (!value) {
+        throw new Error(`${name} is not set`);
+    }
+    return value;
+};
+const fail = (message) => {
+    console.error(message);
+    process.exit(1);
+};
+/**
+ * step outputs of the github-actions step running the command
+ * (`$GITHUB_OUTPUT` is always set in workflow steps)
+ */
+const setStepOutput = (name, value) => {
+    const file = process.env.GITHUB_OUTPUT;
+    if (!file) {
+        return;
+    }
+    (0, fs_1.appendFileSync)(file, `${name}=${value}\n`);
+};
+const getMainWorkflowRun = async (sha) => {
+    var _a, _b, _c;
+    const apiUrl = (_a = process.env.GITHUB_API_URL) !== null && _a !== void 0 ? _a : "https://api.github.com";
+    const repository = requireEnv("GITHUB_REPOSITORY");
+    const token = requireEnv("GITHUB_TOKEN");
+    const response = await fetch(`${apiUrl}/repos/${repository}/actions/workflows/${GITHUB_MAIN_WORKFLOW}/runs?head_sha=${sha}&per_page=5`, {
+        headers: {
+            authorization: `Bearer ${token}`,
+            accept: "application/vnd.github+json",
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`listing ${GITHUB_MAIN_WORKFLOW} runs failed: ${response.status} ${await response.text()}`);
+    }
+    const data = (await response.json());
+    // newest first — re-runs replace older attempts
+    return (_c = (_b = data.workflow_runs) === null || _b === void 0 ? void 0 : _b[0]) !== null && _c !== void 0 ? _c : null;
+};
+/**
+ * `catci release github-queue-check` — first step of the manual
+ * create-release dispatch job. Decides between releasing right away
+ * (queued=false) and queueing for the running main workflow
+ * (queued=true).
+ */
+const githubQueueCheckJob = async () => {
+    await ensureGitSafeDirectory();
+    const sha = await (0, releaseGit_1.git)("rev-parse", "HEAD");
+    const run = await getMainWorkflowRun(sha);
+    if (!run) {
+        console.log(`no main workflow run found for ${sha} — releasing right away`);
+        setStepOutput("queued", "false");
+        return;
+    }
+    if (run.status === "completed") {
+        if (run.conclusion === "success") {
+            console.log(`main workflow for ${sha} succeeded — releasing right away`);
+            setStepOutput("queued", "false");
+            return;
+        }
+        fail(`the main workflow for ${sha} concluded '${run.conclusion}' — ` +
+            `fix the pipeline, or use the force-create-release task to release anyway`);
+    }
+    // queued / in_progress / waiting: record the intent and let the
+    // release-on-green workflow do the release. Force-push: a re-queue
+    // (or a stale marker of an older commit) just moves the marker.
+    await (0, releaseGit_1.git)("push", "origin", `+${sha}:${QUEUE_MARKER_REF}`);
+    console.log(`main workflow for ${sha} is ${run.status} — release queued: ` +
+        `the 'release on green' workflow creates the release as soon as the run succeeds`);
+    setStepOutput("queued", "true");
+};
+exports.githubQueueCheckJob = githubQueueCheckJob;
+/**
+ * `catci release github-queued-guard <head-sha> <conclusion>` — guard
+ * step of the release-on-green workflow, running on every completed
+ * main workflow run. Consumes the marker when it matches the run and
+ * decides whether the release step runs (release=true).
+ */
+const githubQueuedGuardJob = async (headSha, conclusion) => {
+    var _a;
+    await ensureGitSafeDirectory();
+    const markerLine = await (0, releaseGit_1.git)("ls-remote", "origin", QUEUE_MARKER_REF);
+    const marker = (_a = markerLine.split(/\s+/)[0]) !== null && _a !== void 0 ? _a : "";
+    if (!marker) {
+        console.log("no release queued — nothing to do");
+        setStepOutput("release", "false");
+        return;
+    }
+    if (marker !== headSha) {
+        console.log(`queued release is for ${marker}, this run is for ${headSha} — leaving the queue untouched`);
+        setStepOutput("release", "false");
+        return;
+    }
+    // consume the marker either way: the queued intent applied to exactly
+    // this run, whatever its outcome
+    await (0, releaseGit_1.git)("push", "origin", `:${QUEUE_MARKER_REF}`);
+    if (conclusion !== "success") {
+        fail(`queued release not executed: the main workflow concluded '${conclusion}' — ` +
+            `fix the pipeline and queue again (create-release task)`);
+    }
+    console.log(`main workflow for ${headSha} succeeded — releasing`);
+    setStepOutput("release", "true");
+};
+exports.githubQueuedGuardJob = githubQueuedGuardJob;
+//# sourceMappingURL=githubQueuedRelease.js.map

package/dist/apps/cli/src/release/githubQueuedRelease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"githubQueuedRelease.js","sourceRoot":"","sources":["../../../../../src/release/githubQueuedRelease.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,2BAAoC;AACpC,6CAAmC;AAEnC;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,KAAK,IAAI,EAAE;IACxC,MAAM,IAAA,gBAAG,EAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAA,mBAAc,EAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,GAAW,EACoD,EAAE;;IACjE,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,cAAc,mCAAI,wBAAwB,CAAC;IACtE,MAAM,UAAU,GAAG,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,MAAM,UAAU,UAAU,sBAAsB,oBAAoB,kBAAkB,GAAG,aAAa,EACzG;QACE,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,6BAA6B;SACtC;KACF,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,WAAW,oBAAoB,iBAAiB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IACF,gDAAgD;IAChD,OAAO,MAAA,MAAA,IAAI,CAAC,aAAa,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAC;AACzC,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,mBAAmB,GAAG,KAAK,IAAI,EAAE;IAC5C,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAG,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,kCAAkC,GAAG,yBAAyB,CAAC,CAAC;QAC5E,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,mCAAmC,CAAC,CAAC;YACzE,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CACF,yBAAyB,GAAG,eAAe,GAAG,CAAC,UAAU,MAAM;YAC7D,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,gEAAgE;IAChE,mEAAmE;IACnE,gEAAgE;IAChE,MAAM,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,qBAAqB,GAAG,OAAO,GAAG,CAAC,MAAM,qBAAqB;QAC5D,iFAAiF,CACpF,CAAC;IACF,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC,CAAC;AA7BW,QAAA,mBAAmB,uBA6B9B;AAEF;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,KAAK,EACvC,OAAe,EACf,UAAkB,EAClB,EAAE;;IACF,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,IAAA,gBAAG,EAAC,WAAW,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,MAAA,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,yBAAyB,MAAM,qBAAqB,OAAO,gCAAgC,CAC5F,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,sEAAsE;IACtE,iCAAiC;IACjC,MAAM,IAAA,gBAAG,EAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CACF,6DAA6D,UAAU,MAAM;YAC3E,wDAAwD,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,wBAAwB,CAAC,CAAC;IAClE,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC,CAAC;AA9BW,QAAA,oBAAoB,wBA8B/B"}