@intentius/chant-lexicon-forgejo 0.124.56 → 0.124.57

package/dist/components/ci-jobs.js

@@ -63,7 +63,7 @@ export function forgejoWorkflowDoc(doc, dialect, header) {
         ...(doc.name ? { name: doc.name } : {}),
         on: forgejoize(doc.on, dialect),
         ...(doc.env ? { env: forgejoize(doc.env, dialect) } : {}),
-        concurrency: forgejoize(doc.concurrency, dialect),
+        ...(doc.concurrency ? { concurrency: forgejoize(doc.concurrency, dialect) } : {}),
         permissions: {},
         jobsDoc: forgejoize(withoutEnvironment(doc.jobsDoc), dialect),
         ...(doc.gatedNoticeDoc ? { gatedNoticeDoc: forgejoize(doc.gatedNoticeDoc, dialect) } : {}),

package/dist/components/generate-op-waves-pipeline.d.ts

@@ -25,6 +25,14 @@
  * The apply-job guard (#4624) starts each wave job as on GitHub, with the
  * forge set to Forgejo: it checks the ref and, for a `self-hosted` label,
  * the runner, and no forge environment, since Forgejo has none.
+ *
+ * Like GitHub's, the workflow carries no concurrency group (ruling for
+ * ci-products 2026-10-28, "Ledger lock"; Forgejo 16.0.5 has no job-level
+ * concurrency either). Two pushes run their waves side by side: a stock
+ * Pulumi stack or a Terraform root waits for its row on chant's ledger,
+ * oldest commit first, up to the job's `timeout-minutes`, and a plunge stack
+ * on the resource grain leases its resource rows and never waits on another
+ * stack.
  */
 import type { OpWavesSpec } from "@intentius/chant/op/op-waves";
 import type { OpWavesPipelineOptions, OpWavesPipelineResult } from "@intentius/chant/lexicon";

package/dist/components/generate-op-waves-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate-op-waves-pipeline.d.ts","sourceRoot":"","sources":["../../src/components/generate-op-waves-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,6EAA6E;AAC7E,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,sBAAsB,EAC/B,cAAc,GAAE,qBAA0B,GACzC,qBAAqB,CAiBvB"}
+{"version":3,"file":"generate-op-waves-pipeline.d.ts","sourceRoot":"","sources":["../../src/components/generate-op-waves-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGxD,6EAA6E;AAC7E,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,sBAAsB,EAC/B,cAAc,GAAE,qBAA0B,GACzC,qBAAqB,CAiBvB"}

package/dist/components/generate-op-waves-pipeline.js

@@ -25,6 +25,14 @@
  * The apply-job guard (#4624) starts each wave job as on GitHub, with the
  * forge set to Forgejo: it checks the ref and, for a `self-hosted` label,
  * the runner, and no forge environment, since Forgejo has none.
+ *
+ * Like GitHub's, the workflow carries no concurrency group (ruling for
+ * ci-products 2026-10-28, "Ledger lock"; Forgejo 16.0.5 has no job-level
+ * concurrency either). Two pushes run their waves side by side: a stock
+ * Pulumi stack or a Terraform root waits for its row on chant's ledger,
+ * oldest commit first, up to the job's `timeout-minutes`, and a plunge stack
+ * on the resource grain leases its resource rows and never waits on another
+ * stack.
  */
 import { buildGithubOpWavesDoc } from "@intentius/chant-lexicon-github/components/generate-op-waves-pipeline";
 import { emitOpPipelineYAML } from "@intentius/chant-lexicon-github/components/generate-op-pipeline";

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "d8927356783df4ae21c431e0a016299273a031fecc05ead9df07f900b57ed4c7",
+    "manifest.json": "4c4c5e8764f6844c5a23d70e6afa86d905c6627e01d04a2463e9a6f40d857e2c",
     "meta.json": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a",
     "types/index.d.ts": "66204549b2a864ab5489e3f02c1878e73ab4b3c9d938cfb480b66f71543a43de",
     "rules/delegate-to-github.ts": "1060cda40f4b73d6cca3ba3fa13b80b4886147d4034c88584c2d80c5510dbe5e",
@@ -9,5 +9,5 @@
     "rules/wfj011.ts": "fcb8bf6685d744af20ad804ce929488257995c74b9a3353b2eacae3768d1c83e",
     "skills/chant-forgejo.md": "f28d7fb69fb1cfd992496ef41fda0ea5ccd54a29b84ea1c501a44f6a3992c4d5"
   },
-  "composite": "7b0449ca0d3675a7e8c15a30fc85f3de807f6eb7eb538536867e77edd16ee133"
+  "composite": "4226c270f3ec6aed2feaee4293a384febb3a87163e9c1256fd58813717a46592"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "forgejo",
-  "version": "0.124.56",
+  "version": "0.124.57",
   "chantVersion": ">=0.1.0",
   "namespace": "Forgejo",
   "intrinsics": [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-forgejo",
-  "version": "0.124.56",
+  "version": "0.124.57",
   "description": "Forgejo / Codeberg / Gitea Actions lexicon for chant — a thin GitHub Actions dialect",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -54,8 +54,8 @@
   },
   "peerDependencies": {
     "zod": "^4.3.6",
-    "@intentius/chant": "^0.124.56",
-    "@intentius/chant-lexicon-github": "^0.124.56"
+    "@intentius/chant": "^0.124.57",
+    "@intentius/chant-lexicon-github": "^0.124.57"
   },
   "scripts": {
     "generate": "tsx src/codegen/generate-cli.ts",

package/src/components/__golden__/op-waves-jobs.yml

@@ -6,14 +6,13 @@ on:
       - main
   workflow_dispatch: {}
 
-concurrency:
-  group: migrations
-  cancel-in-progress: false
-
 jobs:
   wave-1-dev:
     runs-on: plan
     container: node:22
+    timeout-minutes: 180
+    env:
+      CHANT_LOCK_WAIT: '10500'
     steps:
       - name: Check the job runs where the spec set it to run
         env:
@@ -37,6 +36,9 @@ jobs:
       - wave-1-dev
     if: '!cancelled()'
     container: node:22
+    timeout-minutes: 180
+    env:
+      CHANT_LOCK_WAIT: '10500'
     steps:
       - name: Check the job runs where the spec set it to run
         env:
@@ -74,7 +76,9 @@ jobs:
     container: node:22
     permissions:
       id-token: write
+    timeout-minutes: 180
     env:
+      CHANT_LOCK_WAIT: '10500'
       REGION: us
       CLOUD_TOKEN_AUDIENCE: us.example
     steps:
@@ -108,6 +112,9 @@ jobs:
     needs:
       - wave-2-prod-decide
     container: node:22
+    timeout-minutes: 180
+    env:
+      CHANT_LOCK_WAIT: '10500'
     steps:
       - name: Check the job runs where the spec set it to run
         env:

package/src/components/ci-jobs.ts

@@ -72,7 +72,7 @@ export function forgejoWorkflowDoc(doc: GithubOpPipelineDoc, dialect: ForgejoDia
     ...(doc.name ? { name: doc.name } : {}),
     on: forgejoize(doc.on, dialect),
     ...(doc.env ? { env: forgejoize(doc.env, dialect) } : {}),
-    concurrency: forgejoize(doc.concurrency, dialect),
+    ...(doc.concurrency ? { concurrency: forgejoize(doc.concurrency, dialect) } : {}),
     permissions: {},
     jobsDoc: forgejoize(withoutEnvironment(doc.jobsDoc), dialect),
     ...(doc.gatedNoticeDoc ? { gatedNoticeDoc: forgejoize(doc.gatedNoticeDoc, dialect) } : {}),

package/src/components/generate-op-waves-pipeline.test.ts

@@ -90,8 +90,8 @@ describe("a runner per wave and job groups per wave (#3914)", () => {
     expect(jobs.map((j) => j.jobName)).toEqual(["wave-1-dev", "wave-2-prod-decide", "wave-2-prod-us", "wave-2-prod-eu"]);
     const yaml = files[0]!.yaml;
     expect(yaml).toMatch(/wave-1-dev:\n\s+runs-on: plan\n/);
-    expect(yaml).toMatch(/wave-2-prod-us:\n\s+runs-on:\n\s+- self-hosted\n\s+- us\n[\s\S]*?permissions:\n\s+id-token: write\n\s+env:\n\s+REGION: us\n\s+CLOUD_TOKEN_AUDIENCE: us.example\n/);
-    expect(yaml).toMatch(/wave-2-prod-eu:\n\s+runs-on: eu-apply\n\s+needs:\n\s+- wave-2-prod-decide\n\s+container: node:22\n\s+steps:/);
+    expect(yaml).toMatch(/wave-2-prod-us:\n\s+runs-on:\n\s+- self-hosted\n\s+- us\n[\s\S]*?permissions:\n\s+id-token: write\n\s+timeout-minutes: 180\n\s+env:\n\s+CHANT_LOCK_WAIT: '10500'\n\s+REGION: us\n\s+CLOUD_TOKEN_AUDIENCE: us.example\n/);
+    expect(yaml).toMatch(/wave-2-prod-eu:\n\s+runs-on: eu-apply\n\s+needs:\n\s+- wave-2-prod-decide\n\s+container: node:22\n\s+timeout-minutes: 180\n\s+env:\n\s+CHANT_LOCK_WAIT: '10500'\n\s+steps:/);
     expect(yaml).not.toContain("contents: write");
   });
 
@@ -138,3 +138,12 @@ describe("an Op wave's jobs by cloud identity (#4332)", () => {
     expect(jobs.every((j) => j.command[0] === "chant")).toBe(true);
   });
 });
+
+describe("the ledger lock (ruling for ci-products 2026-10-28)", () => {
+  test("the waves workflow carries no concurrency group, workflow or job; each wave job carries its timeout and the lock wait", () => {
+    const yaml = generateForgejoOpWavesPipeline(spec, { specFile: "waves.json" }).files[0]!.yaml;
+    expect(yaml).not.toContain("concurrency:");
+    expect(yaml.match(/timeout-minutes: 180\n/g)).toHaveLength(3);
+    expect(yaml.match(/CHANT_LOCK_WAIT: '10500'\n/g)).toHaveLength(3);
+  });
+});

package/src/components/generate-op-waves-pipeline.ts

@@ -25,6 +25,14 @@
  * The apply-job guard (#4624) starts each wave job as on GitHub, with the
  * forge set to Forgejo: it checks the ref and, for a `self-hosted` label,
  * the runner, and no forge environment, since Forgejo has none.
+ *
+ * Like GitHub's, the workflow carries no concurrency group (ruling for
+ * ci-products 2026-10-28, "Ledger lock"; Forgejo 16.0.5 has no job-level
+ * concurrency either). Two pushes run their waves side by side: a stock
+ * Pulumi stack or a Terraform root waits for its row on chant's ledger,
+ * oldest commit first, up to the job's `timeout-minutes`, and a plunge stack
+ * on the resource grain leases its resource rows and never waits on another
+ * stack.
  */
 
 import { buildGithubOpWavesDoc } from "@intentius/chant-lexicon-github/components/generate-op-waves-pipeline";

package/src/components/generate-pr-pipeline.locks.test.ts

@@ -22,6 +22,13 @@ describe("the Forgejo workflow with ci.locks: plan", () => {
     expect(doc.jobs.unlock!.steps.some((s) => s.run === 'chant unlock --pr "$PR_NUMBER"')).toBe(true);
   });
 
+  test("with plywood's words the lines run through its bin (plywood#22)", () => {
+    const words = { product: "plywood", bin: "npx --no-install plywood" };
+    const own = parseYAML(generateForgejoPipeline(ESTATE, { env: "prod", prLoop: { locks: "plan", words } }).yaml) as Doc;
+    expect(own.jobs.lock!.steps.some((s) => s.run?.startsWith("npx --no-install plywood lock --from-report ") && s.run.endsWith("--forge forgejo"))).toBe(true);
+    expect(own.jobs.unlock!.steps.some((s) => s.run === 'npx --no-install plywood unlock --pr "$PR_NUMBER"')).toBe(true);
+  });
+
   test("without ci.locks neither job is written", () => {
     const plain = parseYAML(generateForgejoPipeline(ESTATE, { env: "prod", prLoop: {} }).yaml) as Doc;
     expect(Object.keys(plain.jobs)).not.toContain("lock");