@intentius/chant 0.124.26 → 0.124.28

package/src/__golden__/wave-loop/fan-out-gated.json

@@ -64,6 +64,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 of 3: net",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
       },
       "waves": [
@@ -136,6 +137,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 1 of 3: net",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
         }
       ],
@@ -234,6 +236,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 of 3: a, b",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
       },
       "waves": [
@@ -407,6 +410,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 2 of 3: a, b",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
         }
       ],
@@ -479,6 +483,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 of 3: net",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
       },
       "waves": [
@@ -553,6 +558,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 1 of 3: net",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
         }
       ],
@@ -625,6 +631,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-11T02:00:00.000Z",
         "description": "the release",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
       },
       "waves": [
@@ -697,6 +704,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-11T02:00:00.000Z",
           "description": "the release",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
         }
       ],

package/src/__golden__/wave-loop/fan-out-no-members.json

@@ -565,6 +565,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 of 3: net",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": ""
       },
       "waves": [
@@ -627,6 +628,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 1 of 3: net",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": ""
         }
       ],
@@ -725,6 +727,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 of 3: a, b",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
       },
       "waves": [
@@ -888,6 +891,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 2 of 3: a, b",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
         }
       ],

package/src/__golden__/wave-loop/fan-out-only.json

@@ -119,6 +119,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 of 3: net",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
       },
       "waves": [
@@ -191,6 +192,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 1 of 3: net",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:95bbd78ad48471cefeb1cb32a3f308abde40b2d299eac36ab86b0614f23bcccf"
         }
       ],
@@ -269,6 +271,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 of 3: a, b",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
       },
       "waves": [
@@ -351,6 +354,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 2 of 3: a, b",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:f56bc903abaf2bb2f593fcb6f83b48322c7079deed286c1439d2a4e0310e2bdd"
         }
       ],
@@ -432,6 +436,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 of 3: b",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:cdbfa0d8006aa5a0b18a4cd6ca51375882107ad8395f4f12e0f2ae19a95a5483"
       },
       "waves": [
@@ -504,6 +509,7 @@
           "timestamp": "2026-10-11T00:00:00.000Z",
           "expiresAt": "2026-10-13T00:00:00.000Z",
           "description": "wave 2 of 3: b",
+          "gitSha": "1111111111111111111111111111111111111111",
           "planDigest": "jcs1-sha256:cdbfa0d8006aa5a0b18a4cd6ca51375882107ad8395f4f12e0f2ae19a95a5483"
         }
       ],

package/src/__golden__/wave-loop/op-by-apply-hold.json

@@ -104,6 +104,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 1 run, gate never, approval ledger, held by before-apply hook lag (t1)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:bd002be383b5e5991600692d985c09fb3ff0bc3370a8264d1ea8f118518dcc1e"
           },
           "recorded": true,
@@ -122,6 +123,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 1 run, gate never, approval ledger, held by before-apply hook lag (t1)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:bd002be383b5e5991600692d985c09fb3ff0bc3370a8264d1ea8f118518dcc1e"
           }
         ],

package/src/__golden__/wave-loop/op-cost-member.json

@@ -53,6 +53,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (layer): 2 runs, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:138f28c4ef2e87abe7454a8f47db147636932e106e166a399866b5bf470a21af"
           },
           "recorded": true,
@@ -71,6 +72,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (layer): 2 runs, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:138f28c4ef2e87abe7454a8f47db147636932e106e166a399866b5bf470a21af"
           }
         ],
@@ -181,6 +183,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 (layer): 2 runs, gate always, approval ledger",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:138f28c4ef2e87abe7454a8f47db147636932e106e166a399866b5bf470a21af"
       },
       "recorded": true,

package/src/__golden__/wave-loop/op-held-on-before-apply.json

@@ -140,6 +140,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "move the queues",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "sha256:qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"
           }
         ],

package/src/__golden__/wave-loop/op-held-on.json

@@ -110,6 +110,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "move the queues",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "sha256:qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq"
           }
         ],
@@ -250,6 +251,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "move the topics",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "sha256:tttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttt"
           }
         ],

package/src/__golden__/wave-loop/op-hooks-held.json

@@ -112,6 +112,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by after-plan hook check (t2)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           },
           "recorded": true,
@@ -152,6 +153,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by after-plan hook check (t2)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           }
         ],

package/src/__golden__/wave-loop/op-hooks-hold-before-apply.json

@@ -95,6 +95,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by before-apply hook lag",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           },
           "recorded": true,
@@ -113,6 +114,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by before-apply hook lag",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           }
         ],

package/src/__golden__/wave-loop/op-hooks-refused-at-base.json

@@ -45,6 +45,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by the hooks at base cannot be run (waves.json at bbbbbbbbbbbb: `hooks.before.plan[0].command` must be a command as argv, a non-empty array of strings.)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           },
           "recorded": true,
@@ -63,6 +64,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by the hooks at base cannot be run (waves.json at bbbbbbbbbbbb: `hooks.before.plan[0].command` must be a command as argv, a non-empty array of strings.)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           }
         ],
@@ -138,6 +140,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by the hooks at base cannot be run (waves.json at bbbbbbbbbbbb: `hooks.before.plan[0].command` must be a command as argv, a non-empty array of strings.)",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
       },
       "recorded": true,

package/src/__golden__/wave-loop/op-hooks-share.json

@@ -113,6 +113,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by after-plan hook check (t2)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           },
           "recorded": true,
@@ -153,6 +154,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by after-plan hook check (t2)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           }
         ],
@@ -254,6 +256,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 1 (prod): 2 runs, gate never, approval ledger, held by after-plan hook check (t2)",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:52d1b04601e89971eab0e24094024707e878042be4b79ad476d6230ac5ef383f"
           },
           "recorded": true,

package/src/__golden__/wave-loop/op-per-run.json

@@ -80,6 +80,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -98,6 +99,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -146,6 +148,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -164,6 +167,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -257,6 +261,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -275,6 +280,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -508,6 +514,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 (staging): 1 run, gate always, approval ledger",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
       },
       "recorded": true,

package/src/__golden__/wave-loop/op-pr-review.json

@@ -56,6 +56,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -70,6 +71,7 @@
             "approver": {
               "kind": "human"
             },
+            "gitSha": "hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh",
             "note": "approved by the review of #7 at hhhhhhhhhhhh: github:erin",
             "url": "https://example.test/pr/7",
             "review": {
@@ -125,6 +127,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -149,6 +152,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -198,6 +202,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -225,6 +230,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -378,6 +384,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 (staging): 1 run, gate on-destructive, approval pr-review",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
       },
       "recorded": true,

package/src/__golden__/wave-loop/op-sealed.json

@@ -39,6 +39,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval sealed",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -57,6 +58,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval sealed",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -115,6 +117,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 2 (staging): 1 run, gate on-destructive, approval sealed",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
       },
       "recorded": true,

package/src/__golden__/wave-loop/op-spend.json

@@ -50,6 +50,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],
@@ -114,6 +115,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           },
           "recorded": true,
@@ -132,6 +134,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 2 (staging): 1 run, gate on-destructive, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:121fce9fb501cc2872d4239f620d465480edef5fcbe86d290f3b17c017231e8d"
           }
         ],

package/src/__golden__/wave-loop/op-wave-commands.json

@@ -82,6 +82,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           },
@@ -110,6 +111,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           }
@@ -299,6 +301,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           },
@@ -333,6 +336,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           }
@@ -743,6 +747,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           },
@@ -1150,6 +1155,7 @@
             "gate": "wave-1",
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
             "neverOverMcp": true
           },
@@ -1662,6 +1668,7 @@
         "gate": "wave-1",
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:e8c434b396fbbce2b501a5fb746548ad4db81a26543b4dc2c757ec148379f853",
         "neverOverMcp": true
       },

package/src/__golden__/wave-loop/op-wide-waiting.json

@@ -49,6 +49,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 3 (prod): 3 runs, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e"
           },
           "recorded": true,
@@ -67,6 +68,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 3 (prod): 3 runs, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e"
           }
         ],
@@ -125,6 +127,7 @@
             "timestamp": "2026-10-11T00:00:00.000Z",
             "expiresAt": "2026-10-13T00:00:00.000Z",
             "description": "wave 3 (prod): 3 runs, gate always, approval ledger",
+            "gitSha": "1111111111111111111111111111111111111111",
             "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e"
           },
           "recorded": true,
@@ -221,6 +224,7 @@
         "timestamp": "2026-10-11T00:00:00.000Z",
         "expiresAt": "2026-10-13T00:00:00.000Z",
         "description": "wave 3 (prod): 3 runs, gate always, approval ledger",
+        "gitSha": "1111111111111111111111111111111111111111",
         "planDigest": "jcs1-sha256:106d25f35ee6bc02e9aa253d0b2633a764396833c82e0c5ec5a4ad83a2a85b4e"
       },
       "recorded": true,

package/src/change-set-graph.test.ts

@@ -0,0 +1,72 @@
+/**
+ * Mapping a change set's entries onto graph node ids (#4022). The real-estate
+ * tests read the graph from `chant graph --format ir`: the five tofu roots in
+ * `lexicons/terraform/src/components/pr-loop.tofu.test.ts` and the aws
+ * workspace member in `lifecycle/gate-change-set.e2e.test.ts`. This holds the
+ * address rules and the digest.
+ */
+
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { describe, expect, test } from "vitest";
+import { composeChangeSet, lifecyclePlanPart, verifyChangeSetDigest, type ChangeSetEntry } from "./change-set";
+import { changeSetNodeCandidates, mapChangeSetToGraph, terraformBlockKey } from "./change-set-graph";
+import type { ChangeSet as LifecycleChangeSet } from "./lifecycle/change-set";
+
+const plan = JSON.parse(readFileSync(join(import.meta.dirname, "__fixtures__", "change-set", "lifecycle-plan.floci.json"), "utf8")) as LifecycleChangeSet;
+
+describe("terraformBlockKey", () => {
+  test("names the block the terraform lexicon keys, without the instance index", () => {
+    expect(terraformBlockKey("terraform_data.keep")).toBe("terraform_data.keep");
+    expect(terraformBlockKey("module.app.terraform_data.instance[0]")).toBe("module.app/terraform_data.instance");
+    expect(terraformBlockKey('module.cdn["eu"].module.bucket[1].aws_s3_bucket.this["a.b]"]')).toBe("module.cdn/module.bucket/aws_s3_bucket.this");
+    expect(terraformBlockKey("data.aws_iam_policy.boundary")).toBe("data.aws_iam_policy.boundary");
+    expect(terraformBlockKey("module.app.data.aws_ami.ubuntu")).toBe("module.app/data.aws_ami.ubuntu");
+  });
+
+  test("a terraform entry tries <root>/<block key>, then its address", () => {
+    expect(changeSetNodeCandidates({ member: "estate", planner: "tofu", address: "module.app.terraform_data.instance[1]" })).toEqual([
+      "estate/module.app/terraform_data.instance",
+      "module.app.terraform_data.instance[1]",
+    ]);
+    expect(changeSetNodeCandidates({ member: "delivery", planner: "chant", address: "jobs" })).toEqual(["jobs"]);
+    expect(changeSetNodeCandidates({ member: "org", planner: "warden", address: "team.platform" })).toEqual(["team.platform"]);
+  });
+});
+
+describe("mapChangeSetToGraph", () => {
+  const doc = composeChangeSet([lifecyclePlanPart({ member: "delivery", plan })]);
+
+  test("keeps the ids the graph holds, puts the member in front, and leaves the digest alone", () => {
+    const mapped = mapChangeSetToGraph(doc, { member: "delivery", at: "a".repeat(40), ids: ["jobs", "events", "dlq"] });
+    expect(mapped.entries.map((e) => [e.address, e.node])).toEqual([
+      ["alerts", null],
+      ["dlq", "delivery/dlq"],
+      ["events", "delivery/events"],
+      ["jobs", "delivery/jobs"],
+    ]);
+    expect(mapped.graph).toEqual({ member: "delivery", at: "a".repeat(40) });
+    expect(mapped.digest).toBe(doc.digest);
+    expect(verifyChangeSetDigest(mapped)).toBe(true);
+  });
+
+  test("outside a workspace the id is the member's own", () => {
+    const mapped = mapChangeSetToGraph(doc, { member: null, at: null, ids: ["jobs"] });
+    expect(mapped.entries.find((e) => e.address === "jobs")!.node).toBe("jobs");
+  });
+
+  test("no graph gives every entry a null node", () => {
+    const mapped = mapChangeSetToGraph(doc, null);
+    expect(mapped.graph).toBeNull();
+    expect(mapped.entries.every((e: ChangeSetEntry) => e.node === null)).toBe(true);
+    expect(verifyChangeSetDigest(mapped)).toBe(true);
+  });
+
+  test("a node is not hashed, and every other part of an entry still is", () => {
+    const mapped = mapChangeSetToGraph(doc, { member: null, at: null, ids: ["jobs"] });
+    const moved = { ...mapped, entries: mapped.entries.map((e) => ({ ...e, node: "elsewhere" })) };
+    expect(verifyChangeSetDigest(moved)).toBe(true);
+    const changed = { ...mapped, entries: mapped.entries.map((e, i) => (i === 0 ? { ...e, address: "other" } : e)) };
+    expect(verifyChangeSetDigest(changed)).toBe(false);
+  });
+});