@codedrifters/configulator 0.0.443 → 0.0.444

package/lib/index.d.mts

@@ -12599,11 +12599,12 @@ interface DeployWorkflowOptions {
      * account, so anything they share outside their own stacks — a parent hosted
      * zone, an account-level singleton — has to tolerate concurrent mutation.
      *
-     * Applies to the deploy job only. The `plan-apply` gate's apply job keeps the
-     * unsuffixed group: an apply is dispatched from whatever ref the operator
-     * happens to be on, which says nothing about the branch that was planned, so
-     * a branch key there would weaken the mutual exclusion rather than sharpen
-     * it.
+     * Applies to the deploy job and — when diff capture is on — to each target's
+     * diff job, which locks the same branch's stacks for the same reason. The
+     * `plan-apply` gate's apply job keeps the unsuffixed group: an apply is
+     * dispatched from whatever ref the operator happens to be on, which says
+     * nothing about the branch that was planned, so a branch key there would
+     * weaken the mutual exclusion rather than sharpen it.
      *
      * @see `docs/packages/@codedrifters/configulator/workflows/aws-deploy-workflow.md`
      * @default false - the group is the deployment target alone
@@ -12737,7 +12738,7 @@ declare class AwsDeployWorkflow extends Component {
      */
     readonly diffOptions: Required<DeployDiffOptions>;
     /**
-     * Whether each deploy job's concurrency group carries the branch.
+     * Whether each deploy and diff job's concurrency group carries the branch.
      */
     readonly branchScopedConcurrency: boolean;
     /**
@@ -12803,6 +12804,23 @@ declare class AwsDeployWorkflow extends Component {
      * jobs for one target sort next to each other in the run view.
      */
     private buildDiffJobName;
+    /**
+     * Build a diff job's `concurrency` setting from its job name.
+     *
+     * Always the object form, unlike {@link buildDeployConcurrency}: a diff job
+     * has no legacy bare-string shape to stay byte-identical with, and
+     * `cancel-in-progress` is load-bearing enough here to spell out. It must
+     * stay `false` — a superseded diff cancelled mid-`CreateChangeSet`
+     * leaves the fixed-name change set occupied for whichever run comes next,
+     * which is the failure the group exists to prevent.
+     *
+     * Carries the branch under
+     * {@link DeployWorkflowOptions.branchScopedConcurrency} for the same reason
+     * the deploy group does: when stack names are derived from the branch, two
+     * branches diff separate stacks and therefore separate change sets, so one
+     * repo-wide lock across all of them would queue for nothing.
+     */
+    private buildDiffConcurrency;
     /**
      * Build the slug that makes a target unique among every target in the plan
      * workflow, across every deploy component feeding it.

package/lib/index.d.ts

@@ -12648,11 +12648,12 @@ interface DeployWorkflowOptions {
      * account, so anything they share outside their own stacks — a parent hosted
      * zone, an account-level singleton — has to tolerate concurrent mutation.
      *
-     * Applies to the deploy job only. The `plan-apply` gate's apply job keeps the
-     * unsuffixed group: an apply is dispatched from whatever ref the operator
-     * happens to be on, which says nothing about the branch that was planned, so
-     * a branch key there would weaken the mutual exclusion rather than sharpen
-     * it.
+     * Applies to the deploy job and — when diff capture is on — to each target's
+     * diff job, which locks the same branch's stacks for the same reason. The
+     * `plan-apply` gate's apply job keeps the unsuffixed group: an apply is
+     * dispatched from whatever ref the operator happens to be on, which says
+     * nothing about the branch that was planned, so a branch key there would
+     * weaken the mutual exclusion rather than sharpen it.
      *
      * @see `docs/packages/@codedrifters/configulator/workflows/aws-deploy-workflow.md`
      * @default false - the group is the deployment target alone
@@ -12786,7 +12787,7 @@ declare class AwsDeployWorkflow extends Component {
      */
     readonly diffOptions: Required<DeployDiffOptions>;
     /**
-     * Whether each deploy job's concurrency group carries the branch.
+     * Whether each deploy and diff job's concurrency group carries the branch.
      */
     readonly branchScopedConcurrency: boolean;
     /**
@@ -12852,6 +12853,23 @@ declare class AwsDeployWorkflow extends Component {
      * jobs for one target sort next to each other in the run view.
      */
     private buildDiffJobName;
+    /**
+     * Build a diff job's `concurrency` setting from its job name.
+     *
+     * Always the object form, unlike {@link buildDeployConcurrency}: a diff job
+     * has no legacy bare-string shape to stay byte-identical with, and
+     * `cancel-in-progress` is load-bearing enough here to spell out. It must
+     * stay `false` — a superseded diff cancelled mid-`CreateChangeSet`
+     * leaves the fixed-name change set occupied for whichever run comes next,
+     * which is the failure the group exists to prevent.
+     *
+     * Carries the branch under
+     * {@link DeployWorkflowOptions.branchScopedConcurrency} for the same reason
+     * the deploy group does: when stack names are derived from the branch, two
+     * branches diff separate stacks and therefore separate change sets, so one
+     * repo-wide lock across all of them would queue for nothing.
+     */
+    private buildDiffConcurrency;
     /**
      * Build the slug that makes a target unique among every target in the plan
      * workflow, across every deploy component feeding it.

package/lib/index.js

@@ -43024,6 +43024,28 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen29.Compone
         target.region
       ].join("-");
     };
+    /**
+     * Build a diff job's `concurrency` setting from its job name.
+     *
+     * Always the object form, unlike {@link buildDeployConcurrency}: a diff job
+     * has no legacy bare-string shape to stay byte-identical with, and
+     * `cancel-in-progress` is load-bearing enough here to spell out. It must
+     * stay `false` — a superseded diff cancelled mid-`CreateChangeSet`
+     * leaves the fixed-name change set occupied for whichever run comes next,
+     * which is the failure the group exists to prevent.
+     *
+     * Carries the branch under
+     * {@link DeployWorkflowOptions.branchScopedConcurrency} for the same reason
+     * the deploy group does: when stack names are derived from the branch, two
+     * branches diff separate stacks and therefore separate change sets, so one
+     * repo-wide lock across all of them would queue for nothing.
+     */
+    this.buildDiffConcurrency = (diffJobName) => {
+      return {
+        group: this.branchScopedConcurrency ? `${diffJobName}-${BRANCH_NAME_EXPRESSION}` : diffJobName,
+        "cancel-in-progress": false
+      };
+    };
     /**
      * Build the slug that makes a target unique among every target in the plan
      * workflow, across every deploy component feeding it.
@@ -43656,6 +43678,7 @@ var AwsDeployWorkflow = class _AwsDeployWorkflow extends import_projen29.Compone
             contents: import_workflows_model7.JobPermission.READ,
             idToken: import_workflows_model7.JobPermission.WRITE
           },
+          concurrency: this.buildDiffConcurrency(diffJobName),
           if: jobCondition,
           steps: [...this.diffSteps(target)]
         });