@geonosis/release 2.4.3 → 2.5.0

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @geonosis/release
 
+## 2.5.0
+
+### Patch Changes
+
+- 6b095e8: Two smoke findings that were true sentences about the wrong thing. (#372) A phase whose own tail
+  is a git refusal inside a snapshot's run copy — its `.git` is a bare `ownRepository` init with no
+  commit, not the consumer's history — is now `unmeasurable` rather than a plain exit code, so a
+  gate that asks git is reported `NOT MEASURED` and never "already failing at their versions". (#373)
+  The baseline's install is now frozen to the consumer's own lockfile whenever nothing rewrote a
+  manifest under it, so it can no longer install a dependency the consumer never declared; a frozen
+  install that refuses exits 2 with the manager's own tail rather than silently installing a tree
+  the consumer does not have.
+
 ## 2.4.3
 
 ## 2.4.2

package/dist/{chunk-CACOG4I5.js → chunk-NNGZ47I5.js}

@@ -1995,6 +1995,11 @@ var INSTALL = {
   bun: ["install"],
   pnpm: ["install", "--no-frozen-lockfile"]
 };
+var FROZEN_INSTALL = {
+  bun: ["install", "--frozen-lockfile"],
+  pnpm: ["install", "--frozen-lockfile"]
+};
+var defaultInstallLine = (manager, frozen) => `${manager} ${(frozen ? FROZEN_INSTALL : INSTALL)[manager].join(" ")}`;
 var MANAGER_CONFIG = [".npmrc", "bunfig.toml", "pnpm-workspace.yaml"];
 var configBytesOf = (work) => Object.fromEntries(
   MANAGER_CONFIG.filter((file) => existsSync7(join7(work, file))).map((file) => [
@@ -2166,6 +2171,10 @@ var quotable = (output) => {
   return (named.length > 0 ? named : lines2.slice(-10)).slice(0, 20).map((one) => one.slice(0, 300));
 };
 var commandLine = (command, manager) => "run" in command ? `${manager} run ${command.run}` : "exec" in command ? command.exec : "";
+var GIT_REFUSAL = /fatal: not a git repository|Command failed: git |git .+ failed/;
+var looksLikeAGitRefusal = (output) => output.split("\n").some((line) => GIT_REFUSAL.test(line));
+var hasNoCommit = (dir) => spawnSync4("git", ["-C", dir, "rev-parse", "--verify", "-q", "HEAD"], { encoding: "utf8" }).status !== 0;
+var NOT_MEASURED_REASON = "this gate asks git and a snapshot has none";
 var runPhase = (phase, command, cwd, manager) => {
   if ("why" in command) return { phase, why: command.why };
   const line = commandLine(command, manager);
@@ -2174,6 +2183,9 @@ var runPhase = (phase, command, cwd, manager) => {
     PATH: `${join7(cwd, "node_modules/.bin")}:${process.env["PATH"] ?? ""}`
   };
   const { code, output } = shellRun(line, cwd, env);
+  if (code !== 0 && looksLikeAGitRefusal(output) && hasNoCommit(cwd)) {
+    return { command: line, phase, unmeasurable: NOT_MEASURED_REASON };
+  }
   return { code, command: line, lines: quotable(output), ok: code === 0, phase };
 };
 var commandsToRun = (record, declared) => Object.fromEntries(
@@ -2202,10 +2214,17 @@ var smokeOver = (input) => {
     );
   }
   overrideEveryCopy(work, record.manager, packed);
-  const install = input.install ?? `${record.manager} ${INSTALL[record.manager].join(" ")}`;
+  const frozen = input.rc === void 0;
+  const install = input.install ?? defaultInstallLine(record.manager, frozen);
   const configBefore = configBytesOf(work);
   const installed = shellRun(install, work, process.env);
   if (installed.code !== 0) {
+    if (frozen) {
+      throw new CannotRun(
+        `\`${install}\` exited ${installed.code} in the snapshot \u2014 the baseline is the consumer's own tree and their lockfile does not describe it \u2014 record it after they install:
+${quotable(installed.output).join("\n")}`
+      );
+    }
     throw new CannotRun(
       `\`${install}\` exited ${installed.code} in the snapshot \u2014 the release was never installed, so nothing below it was measured:
 ${quotable(installed.output).join("\n")}`
@@ -2269,6 +2288,7 @@ var compareToBaseline = (name, baseline, outcomes, findings) => {
       continue;
     }
     if ("why" in now) continue;
+    if ("unmeasurable" in now || "unmeasurable" in then) continue;
     if ("why" in then) {
       refused.push({
         phase: now.phase,
@@ -2424,9 +2444,16 @@ var sweepEnvelope = (sweep, durationMs) => {
     version: versionOf(import.meta.url)
   };
 };
-var outcomeLine = (outcome) => "why" in outcome ? `      ${outcome.phase}: nothing to run \u2014 ${outcome.why}
-` : `      ${outcome.phase}: \`${outcome.command}\` exited ${outcome.code}
+var outcomeLine = (outcome) => {
+  if ("why" in outcome) return `      ${outcome.phase}: nothing to run \u2014 ${outcome.why}
+`;
+  if ("unmeasurable" in outcome) {
+    return `      NOT MEASURED ${outcome.phase}: ${outcome.unmeasurable} (\`${outcome.command}\`)
 `;
+  }
+  return `      ${outcome.phase}: \`${outcome.command}\` exited ${outcome.code}
+`;
+};
 var headline = (comparison) => {
   if (comparison.ok) {
     return `OK    smoke ${comparison.name}: nothing this release changed reddened their tree
@@ -2470,13 +2497,16 @@ var SMOKE_TOOL = "release-smoke";
 var SMOKE_NEXT = "geonosis-release smoke run --snapshot <name> --json and read `outcomes` \u2014 every phase the snapshot named leaves by exactly one door: read, excused with the sentence saying there was nothing of theirs to run, or refused because this run and the baseline are not comparable";
 var smokeEnvelope = (comparison, durationMs) => {
   const refused = new Set(comparison.refused.map((one) => one.phase));
-  const excused = comparison.outcomes.filter(
-    (one) => "why" in one && !refused.has(one.phase)
-  );
+  const excused = comparison.outcomes.flatMap((one) => {
+    if (refused.has(one.phase)) return [];
+    if ("why" in one) return [{ path: one.phase, reason: one.why }];
+    if ("unmeasurable" in one) return [{ path: one.phase, reason: one.unmeasurable }];
+    return [];
+  });
   return {
     considered: comparison.outcomes.length,
     durationMs,
-    excused: excused.map((one) => ({ path: one.phase, reason: one.why })),
+    excused,
     findings: [
       ...comparison.broken.map((one) => ({ lines: one.lines, phase: one.phase })),
       ...comparison.findings.map((one) => ({ packed: one }))

package/dist/index.d.ts

@@ -524,6 +524,10 @@ type PhaseOutcome = {
     lines: string[];
     ok: boolean;
     phase: SmokePhase;
+} | {
+    command: string;
+    phase: SmokePhase;
+    unmeasurable: string;
 } | {
     phase: SmokePhase;
     why: string;

package/dist/index.js

@@ -74,7 +74,7 @@ import {
   statementsOf,
   sweepEnvelope,
   sweepSmoke
-} from "./chunk-CACOG4I5.js";
+} from "./chunk-NNGZ47I5.js";
 export {
   ADOPTION_NEXT,
   ADOPTION_TOOL,

package/dist/release-cli.js

@@ -40,7 +40,7 @@ import {
   sweepEnvelope,
   sweepSmoke,
   writeEnvelope
-} from "./chunk-CACOG4I5.js";
+} from "./chunk-NNGZ47I5.js";
 
 // src/release-cli.ts
 import { existsSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geonosis/release",
-  "version": "2.4.3",
+  "version": "2.5.0",
   "types": "./dist/index.d.ts",
   "description": "The release contract with its proofs: an expand-only migration gate over three dialects, a smoke that must name the version that answered it, and declared ≠ deployed.",
   "keywords": [
@@ -46,7 +46,7 @@
   },
   "devDependencies": {
     "squawk-cli": "2.63.0",
-    "@geonosis/ratchet": "2.4.3"
+    "@geonosis/ratchet": "2.5.0"
   },
   "engines": {
     "node": ">=22"