@intentius/chant 0.124.27 → 0.124.28

package/dist/workspace/__fixtures__/run-event-check.d.ts

@@ -0,0 +1,19 @@
+/**
+ * What every emitter's test checks about a run's stream (#4041): each line
+ * passes `run-event.schema.json`, the stream opens with `run-start` and ends
+ * with one `run-settle`, `seq` counts from 0, every line names the same run,
+ * and every step that starts settles after its start, under the same step id.
+ */
+import type { RunEvent } from "../../run-event.js";
+/** A step's id in the stream: its component, phase, name and place. */
+export declare function stepKey(e: {
+    component: string | null;
+    phase: string;
+    step: string;
+    index?: number;
+}): string;
+/** Check a stream's lines and hand back its events. */
+export declare function checkRunEventLines(lines: string[]): RunEvent[];
+/** The step events of a stream, as `[type, step, status]`, for a compact assertion. */
+export declare function stepTrail(events: RunEvent[]): Array<[string, string, string?]>;
+//# sourceMappingURL=run-event-check.d.ts.map

package/dist/workspace/__fixtures__/run-event-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-event-check.d.ts","sourceRoot":"","sources":["../../../src/workspace/__fixtures__/run-event-check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,uEAAuE;AACvE,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAE5G;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CA0B9D;AAED,uFAAuF;AACvF,wBAAgB,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAQ9E"}

package/dist/workspace/__fixtures__/run-event-check.js

@@ -0,0 +1,59 @@
+/**
+ * What every emitter's test checks about a run's stream (#4041): each line
+ * passes `run-event.schema.json`, the stream opens with `run-start` and ends
+ * with one `run-settle`, `seq` counts from 0, every line names the same run,
+ * and every step that starts settles after its start, under the same step id.
+ */
+import { expect } from "vitest";
+import { contract } from "./contract-repo.js";
+import schema from "../run-event.schema.json";
+const { expectValid } = contract(schema);
+/** A step's id in the stream: its component, phase, name and place. */
+export function stepKey(e) {
+    return JSON.stringify([e.component, e.phase, e.step, e.index ?? null]);
+}
+/** Check a stream's lines and hand back its events. */
+export function checkRunEventLines(lines) {
+    for (const line of lines)
+        expect(line.endsWith("\n")).toBe(true);
+    const events = lines.map((l) => JSON.parse(l));
+    for (const event of events)
+        expectValid(event);
+    expect(events.map((e) => e.seq)).toEqual(events.map((_, i) => i));
+    expect(events[0]?.type).toBe("run-start");
+    expect(events.at(-1)?.type).toBe("run-settle");
+    expect(events.filter((e) => e.type === "run-settle")).toHaveLength(1);
+    const runs = new Set(events.map((e) => JSON.stringify([e.runId, e.kind, e.name, e.gitSha, e.runtime, e.runOrigin])));
+    expect(runs.size).toBe(1);
+    const open = new Map();
+    for (const e of events) {
+        if (e.type === "step-start") {
+            const key = stepKey(e);
+            expect(open.has(key), `${key} started twice`).toBe(false);
+            open.set(key, e.seq);
+        }
+        else if (e.type === "step-settle") {
+            const key = stepKey(e);
+            if (open.has(key))
+                open.delete(key);
+            // Only a step that never ran settles without a start.
+            else
+                expect(e.status, `${key} settled ${e.status} with no step-start`).toBe("skipped");
+        }
+    }
+    expect([...open.keys()], "steps that started and never settled").toEqual([]);
+    return events;
+}
+/** The step events of a stream, as `[type, step, status]`, for a compact assertion. */
+export function stepTrail(events) {
+    const out = [];
+    for (const e of events) {
+        if (e.type === "step-start")
+            out.push([e.type, e.step]);
+        else if (e.type === "step-settle")
+            out.push([e.type, e.step, e.skip ? `${e.status}:${e.skip}` : e.status]);
+        else if (e.type === "gate-waiting" || e.type === "gate-resolved")
+            out.push([e.type, e.step]);
+    }
+    return out;
+}

package/dist/workspace/change-set-show.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The stored change-set read (#4022): `chant change-set show <digest> --json`.
+ *
+ * Prints the change-set document a gate bound, as `components pr-apply`
+ * stored it, or as a release gate stores it with #4045
+ * (`../lifecycle/change-set-store.ts`). Each entry carries the graph `node`
+ * it changes, as `chant workspace graph` names nodes. It reads the local
+ * `chant/lifecycle` branch and never fetches.
+ *
+ * A digest with nothing stored under it is a result with `changeSet: null`,
+ * since a component gate binds a lifecycle-plan digest and stores no
+ * document. A stored file that is not the document its digest names is also
+ * `changeSet: null`, with the reason `ledger-malformed`. A read that fails
+ * outright is the failure `ledger-unreadable`.
+ */
+import type { ChangeSetDocument } from "../change-set.js";
+export declare const CHANGE_SET_SHOW_CONTRACT_VERSION = 1;
+export declare const CHANGE_SET_SHOW_SCHEMA_ID = "https://intentius.io/chant/schemas/workspace/change-set-show/v1/change-set-show.schema.json";
+/** Why the read stopped. Closed; each code is in `reason-codes.ts`. */
+export declare const CHANGE_SET_SHOW_ERROR_CODES: readonly ["not-a-git-repository", "ledger-unreadable"];
+/** Why a stored file was not shown. */
+export declare const CHANGE_SET_SHOW_REASON_CODES: readonly ["ledger-malformed"];
+/** What a change-set digest looks like: a plan digest's form. */
+export declare const CHANGE_SET_DIGEST_PATTERN: RegExp;
+export type ChangeSetShowDocument = {
+    $schema: string;
+    contract: number;
+    chant: string;
+    /** The member whose ledger was read, its path of names joined with `/`, or null outside a workspace. */
+    member: string | null;
+    digest: string;
+    /** The stored document, or null when none is stored under the digest. */
+    changeSet: ChangeSetDocument | null;
+    reason: {
+        code: (typeof CHANGE_SET_SHOW_REASON_CODES)[number];
+        message: string;
+    } | null;
+} | {
+    $schema: string;
+    contract: number;
+    chant: string;
+    error: {
+        code: (typeof CHANGE_SET_SHOW_ERROR_CODES)[number];
+        message: string;
+    };
+};
+/**
+ * Read the change set stored under `digest` in the ledger of the member at
+ * `cwd`, or of `member` (its path of names, outermost first) when given.
+ */
+export declare function changeSetShowDocument(req: {
+    cwd: string;
+    digest: string;
+    member?: readonly string[];
+}): Promise<ChangeSetShowDocument>;
+//# sourceMappingURL=change-set-show.d.ts.map

package/dist/workspace/change-set-show.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-set-show.d.ts","sourceRoot":"","sources":["../../src/workspace/change-set-show.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAKvD,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,yBAAyB,gGAAgG,CAAC;AAEvI,uEAAuE;AACvE,eAAO,MAAM,2BAA2B,YAAI,sBAAsB,EAAE,mBAAmB,CAAU,CAAC;AAClG,uCAAuC;AACvC,eAAO,MAAM,4BAA4B,YAAI,kBAAkB,CAAU,CAAC;AAE1E,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,QAAoC,CAAC;AAE3E,MAAM,MAAM,qBAAqB,GAC7B;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,wGAAwG;IACxG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,MAAM,EAAE;QAAE,IAAI,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACzF,GACD;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAEzI;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAoB5I"}

package/dist/workspace/change-set-show.js

@@ -0,0 +1,54 @@
+/**
+ * The stored change-set read (#4022): `chant change-set show <digest> --json`.
+ *
+ * Prints the change-set document a gate bound, as `components pr-apply`
+ * stored it, or as a release gate stores it with #4045
+ * (`../lifecycle/change-set-store.ts`). Each entry carries the graph `node`
+ * it changes, as `chant workspace graph` names nodes. It reads the local
+ * `chant/lifecycle` branch and never fetches.
+ *
+ * A digest with nothing stored under it is a result with `changeSet: null`,
+ * since a component gate binds a lifecycle-plan digest and stores no
+ * document. A stored file that is not the document its digest names is also
+ * `changeSet: null`, with the reason `ledger-malformed`. A read that fails
+ * outright is the failure `ledger-unreadable`.
+ */
+import { execFileSync } from "node:child_process";
+import { readStoredChangeSet } from "../lifecycle/change-set-store.js";
+import { resolveMemberLedger } from "../lifecycle/member-ledger.js";
+import { readerVersion } from "./declaration.js";
+export const CHANGE_SET_SHOW_CONTRACT_VERSION = 1;
+export const CHANGE_SET_SHOW_SCHEMA_ID = "https://intentius.io/chant/schemas/workspace/change-set-show/v1/change-set-show.schema.json";
+/** Why the read stopped. Closed; each code is in `reason-codes.ts`. */
+export const CHANGE_SET_SHOW_ERROR_CODES = ["not-a-git-repository", "ledger-unreadable"];
+/** Why a stored file was not shown. */
+export const CHANGE_SET_SHOW_REASON_CODES = ["ledger-malformed"];
+/** What a change-set digest looks like: a plan digest's form. */
+export const CHANGE_SET_DIGEST_PATTERN = /^(?:jcs1-)?sha256:[0-9a-f]{64}$/;
+/**
+ * Read the change set stored under `digest` in the ledger of the member at
+ * `cwd`, or of `member` (its path of names, outermost first) when given.
+ */
+export async function changeSetShowDocument(req) {
+    const head = { $schema: CHANGE_SET_SHOW_SCHEMA_ID, contract: CHANGE_SET_SHOW_CONTRACT_VERSION, chant: readerVersion() };
+    try {
+        execFileSync("git", ["rev-parse", "--git-dir"], { cwd: req.cwd, stdio: "ignore" });
+    }
+    catch {
+        return { ...head, error: { code: "not-a-git-repository", message: "change sets are read from the chant/lifecycle branch, and this directory is not in a git repository" } };
+    }
+    try {
+        const members = req.member ? [...req.member] : (await resolveMemberLedger(req.cwd)).members;
+        const read = await readStoredChangeSet(req.digest, { cwd: req.cwd, member: members });
+        return {
+            ...head,
+            member: members.length > 0 ? members.join("/") : null,
+            digest: req.digest,
+            changeSet: read.status === "found" ? read.document : null,
+            reason: read.status === "malformed" ? { code: "ledger-malformed", message: read.message } : null,
+        };
+    }
+    catch (err) {
+        return { ...head, error: { code: "ledger-unreadable", message: `reading the change set failed: ${err instanceof Error ? err.message : String(err)}` } };
+    }
+}

package/dist/workspace/change-set-show.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://intentius.io/chant/schemas/workspace/change-set-show/v1/change-set-show.schema.json",
+  "title": "chant change-set show output",
+  "description": "What `chant change-set show <digest> --json` prints (#4022): the change-set document a gate bound, stored on chant/lifecycle under its digest (_change-sets/<digest>.json, under _members/<member>/ for a workspace member). A pull-request gate's apply stores it, and chant components promote --release stores a release gate's (#4045), which names the release and environment it was planned for. Each entry carries the graph node it changes. It reads the local chant/lifecycle branch and never fetches. Version 1 of the read contract. Readers ignore fields they do not know; a field is only ever added within a version. The codes are a closed list, each in the one closed list of `reason-codes.ts`. Contract version 1 of this document is written by chant 0.124.28 and newer; the read contract as a whole by chant 0.81.0 and newer.",
+  "oneOf": [{ "$ref": "#/$defs/result" }, { "$ref": "#/$defs/failure" }],
+  "$defs": {
+    "result": {
+      "type": "object",
+      "description": "The ledger was read. Exit code 0 when a change set is shown, 1 when changeSet is null.",
+      "required": ["$schema", "contract", "chant", "member", "digest", "changeSet", "reason"],
+      "properties": {
+        "$schema": { "const": "https://intentius.io/chant/schemas/workspace/change-set-show/v1/change-set-show.schema.json" },
+        "contract": { "const": 1 },
+        "chant": { "type": "string" },
+        "error": false,
+        "member": {
+          "type": ["string", "null"],
+          "description": "The member whose ledger was read, its path of names joined with / when nested, or null for a project outside a workspace."
+        },
+        "digest": {
+          "type": "string",
+          "pattern": "^(?:jcs1-)?sha256:[0-9a-f]{64}$",
+          "description": "The digest asked for: a gate's planDigest."
+        },
+        "changeSet": {
+          "description": "The stored change-set document (change-set.schema.json), whose digest equals digest. Each entry has node, the graph node it changes as chant workspace graph names it (<member>/<id> in a workspace), or null when the graph holds no node for its address. Its graph says which member's graph that was and the commit it was read at, or is null when no graph could be read. Null when nothing is stored under digest, as for a component gate, which binds a lifecycle-plan digest, and when reason is ledger-malformed.",
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "required": ["$schema", "contract", "digest", "members", "entries", "summary"],
+              "properties": {
+                "$schema": { "const": "https://intentius.io/chant/schemas/workspace/change-set/v1/change-set.schema.json" },
+                "contract": { "const": 1 },
+                "digest": { "type": "string" },
+                "releaseDigest": { "type": "string", "description": "Added in contract 1 by #4045, written by chant 0.124.28 and newer: the release a release gate's change set was planned for. Absent on a pull request's." },
+                "environment": { "type": "string", "description": "Added in contract 1 by #4045, written by chant 0.124.28 and newer: the environment a release gate's change set was planned for. Absent on a pull request's." },
+                "members": { "type": "array" },
+                "entries": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "required": ["member", "address", "action", "node"],
+                    "properties": {
+                      "node": { "type": ["string", "null"] }
+                    }
+                  }
+                },
+                "graph": {
+                  "oneOf": [
+                    { "type": "null" },
+                    {
+                      "type": "object",
+                      "required": ["member", "at"],
+                      "properties": {
+                        "member": { "type": ["string", "null"] },
+                        "at": { "type": ["string", "null"] }
+                      }
+                    }
+                  ]
+                }
+              }
+            }
+          ]
+        },
+        "reason": {
+          "description": "Null when the file was read, or when none is stored. ledger-malformed when a file is stored under digest and it is not a change-set document whose content hashes to digest.",
+          "oneOf": [
+            { "type": "null" },
+            {
+              "type": "object",
+              "required": ["code", "message"],
+              "properties": {
+                "code": { "enum": ["ledger-malformed"] },
+                "message": { "type": "string" }
+              }
+            }
+          ]
+        }
+      }
+    },
+    "failure": {
+      "type": "object",
+      "description": "Nothing was read. Exit code 1.",
+      "required": ["$schema", "contract", "chant", "error"],
+      "properties": {
+        "$schema": { "const": "https://intentius.io/chant/schemas/workspace/change-set-show/v1/change-set-show.schema.json" },
+        "contract": { "const": 1 },
+        "chant": { "type": "string" },
+        "error": {
+          "type": "object",
+          "required": ["code", "message"],
+          "properties": {
+            "code": { "enum": ["not-a-git-repository", "ledger-unreadable"] },
+            "message": { "type": "string" }
+          }
+        }
+      }
+    }
+  }
+}

package/dist/workspace/change-set.schema.json

@@ -26,7 +26,16 @@
     "digest": {
       "type": "string",
       "pattern": "^(?:jcs1-)?sha256:[0-9a-f]{64}$",
-      "description": "computePlanDigest(\"change-set-document\", \u2026) over the set digest (computePlanDigest(\"change-set\", \u2026) over the members' { member, planDigest } pairs sorted by member), each member's member, status and holes, the entries and the side effects, provisional members and their entries left out. What a gate over the whole run binds."
+      "description": "computePlanDigest(\"change-set-document\", \u2026) over the set digest (computePlanDigest(\"change-set\", \u2026) over the members' { member, planDigest } pairs sorted by member), each member's member, status and holes, the entries without their node, the side effects, and on a release gate's document its releaseDigest and environment, provisional members and their entries left out. What a gate over the whole run binds."
+    },
+    "releaseDigest": {
+      "type": "string",
+      "pattern": "^(?:jcs1-)?sha256:[0-9a-f]{64}$",
+      "description": "Added in contract 1 by #4045, written by chant 0.124.28 and newer. The release a release gate's change set was planned for: the releaseDigest of the release chant components promote --release deploys. Set with environment, and absent on every other change set. Part of digest, so a stored change set names the one release its gate bound."
+    },
+    "environment": {
+      "type": "string",
+      "description": "Added in contract 1 by #4045, written by chant 0.124.28 and newer. The environment a release gate's change set was planned for, set with releaseDigest. Part of digest."
     },
     "members": {
       "type": "array",
@@ -59,6 +68,20 @@
     },
     "summary": {
       "$ref": "#/$defs/summary"
+    },
+    "graph": {
+      "description": "Added in contract 1 by #4022, written by chant 0.124.28 and newer on a stored change set. The graph the entries' node ids come from: the workspace member whose graph it is (null outside a workspace) and the commit it was read at (null when unknown). Null when no graph could be read, so every node is null. Absent on a document never mapped. Not part of digest.",
+      "oneOf": [
+        { "type": "null" },
+        {
+          "type": "object",
+          "required": ["member", "at"],
+          "properties": {
+            "member": { "type": ["string", "null"] },
+            "at": { "type": ["string", "null"] }
+          }
+        }
+      ]
     }
   },
   "$defs": {
@@ -244,6 +267,10 @@
           "items": {
             "$ref": "#/$defs/attribute"
           }
+        },
+        "node": {
+          "type": ["string", "null"],
+          "description": "Added in contract 1 by #4022, written by chant 0.124.28 and newer on a stored change set (chant change-set show). The graph node the entry changes, as chant graph --format ir names it, with the member in front (<member>/<id>) inside a workspace, as chant workspace graph names it. A chant entry's node is its address; a terraform-family entry's is <root>/<block key>, where the block key is each module call as module.<name>/ and then the block's address with no index. Null when the graph holds no node for the address, such as a delete of a block the source no longer declares. Absent on a document never mapped onto a graph. Not part of digest."
         }
       }
     },

package/dist/workspace/changes-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changes-cli.d.ts","sourceRoot":"","sources":["../../src/workspace/changes-cli.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAKlF,KAAK,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAE3D,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAwBjD;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB3F"}
+{"version":3,"file":"changes-cli.d.ts","sourceRoot":"","sources":["../../src/workspace/changes-cli.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AAKlF,KAAK,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAE3D,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiCjD;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgB3F"}

package/dist/workspace/changes-cli.js

@@ -25,6 +25,15 @@ export function formatChanges(doc) {
     }
     for (const f of doc.findings)
         out.push(`${f.severity === "fail" ? "error  " : "warning"}   ${f.code}: ${f.message}`);
+    if (doc.links) {
+        const l = doc.links;
+        const n = (state) => l.commits.filter((c) => c.state === state).length;
+        out.push(`links     ${l.commits.length} commits: ${n("linked")} name a work item, ${n("unlinked")} do not, ${n("wrong")} name one that is not there; work kinds: ${l.kinds.join(", ")}`);
+        for (const f of l.findings) {
+            out.push(`${f.severity === "fail" ? "error  " : "warning"}   ${f.code}: ${f.message}`);
+            out.push(`          fix: ${f.fix}`);
+        }
+    }
     if (doc.scope) {
         const sc = doc.scope;
         out.push(`scope     ${sc.commits.length} commits judged against the declaration at ${sc.base.slice(0, 8)}; restricted: ${sc.restricted.join(", ") || "none"}`);
@@ -32,7 +41,7 @@ export function formatChanges(doc) {
             out.push(`error     ${f.code}: ${f.message}`);
     }
     const s = doc.summary;
-    out.push(`${s.paths} changed paths: ${s.covered} covered, ${s.uncovered} uncovered, ${s.outOfScope} out of scope, ${s.ignored} ignored, ${s.records} records; ${doc.findings.length} findings`);
+    out.push(`${s.paths} changed paths: ${s.covered} covered, ${s.uncovered} uncovered, ${s.outOfScope} out of scope, ${s.ignored} ignored, ${s.records} records; ${doc.findings.length} findings${doc.links ? `, ${doc.links.findings.length} commit link findings` : ""}`);
     return out.join("\n");
 }
 export async function runWorkspaceChanges(ctx, cwd) {

package/dist/workspace/changes.d.ts

@@ -36,6 +36,7 @@
  * network.
  */
 import { type ChangeSeverity } from "./declaration.js";
+import { type CommitLink } from "./commit-links.js";
 import { type ScopeReport } from "./write-scope.js";
 /** The version of the `changes` document this chant writes. */
 export declare const CHANGES_CONTRACT_VERSION = 1;
@@ -44,6 +45,36 @@ export declare const CHANGES_OUTPUT_SCHEMA_ID = "https://intentius.io/chant/sche
 /** The finding codes. Closed: a reader may switch on them. */
 export declare const CHANGES_FINDING_CODES: readonly ["change-uncovered", "change-out-of-scope"];
 export type ChangesFindingCode = (typeof CHANGES_FINDING_CODES)[number];
+/** The codes of a finding on a commit rather than a path (#4029). Closed. */
+export declare const COMMIT_LINK_FINDING_CODES: readonly ["commit-unlinked", "commit-wrongly-linked"];
+export type CommitLinkFindingCode = (typeof COMMIT_LINK_FINDING_CODES)[number];
+/** One non-merge first-parent commit of the range, with whether it names a work item. */
+export interface LinkCommit {
+    commit: string;
+    subject: string;
+    state: Exclude<CommitLink["state"], "merge">;
+    /** The work records its trailers name, as `<kind>:<id>`. */
+    ids: string[];
+    /** The trailers that do not link it, when `state` is `wrong`. */
+    problems: CommitLink["problems"];
+}
+export interface LinkFinding {
+    /** `finding:<code>:<commit>`. */
+    id: string;
+    code: CommitLinkFindingCode;
+    commit: string;
+    message: string;
+    /** What to change so the commit names its work item. */
+    fix: string;
+    severity: "warn" | "fail";
+}
+/** Whether the range's commits name their work items (#4029). */
+export interface LinkReport {
+    /** The work kinds read, by name. */
+    kinds: string[];
+    commits: LinkCommit[];
+    findings: LinkFinding[];
+}
 /** Why the check failed as a whole: the declaration's codes, the record kind's, or a `--work` item no record has. */
 export declare const CHANGES_ERROR_CODES: readonly ["declaration-missing", "declaration-ambiguous", "declaration-unparseable", "declaration-invalid", "placement-invalid", "reader-too-old", "root-chant-required", "not-a-git-repository", "revision-unknown", "kind-unreadable", "kind-invalid", "schema-unreadable", "schema-id-mismatch", "schema-invalid", "location-missing", "work-item-unknown"];
 export type ChangesErrorCode = (typeof CHANGES_ERROR_CODES)[number];
@@ -152,6 +183,12 @@ export type ChangesDocument = (Head & {
      * or null when that declaration restricts no one.
      */
     scope: ScopeReport | null;
+    /**
+     * Whether each trunk commit of the range names the work item it belongs
+     * to (#4029), or null when no work kind was read. Findings follow the
+     * severity, like `findings`.
+     */
+    links: LinkReport | null;
     /** False when severity is fail and there are findings, or when a commit writes outside its writer's scope. */
     ok: boolean;
 }) | (Head & {

package/dist/workspace/changes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../../src/workspace/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAMH,OAAO,EAAkG,KAAK,cAAc,EAAoB,MAAM,eAAe,CAAC;AAYtK,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAElF,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,gFAAgF,CAAC;AAEtH,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,sDAKQ,CAAC;AAC3C,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,qHAAqH;AACrH,eAAO,MAAM,mBAAmB,gWASU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB,kCAAuE,CAAC;AActG,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3F,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,6CAA6C;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,sGAAsG;IACtG,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,4EAA4E;IAC5E,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,0DAA0D;IAC1D,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,kBAAkB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,oHAAoH;IACpH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yFAAyF;IACzF,MAAM,EAAE;QAAE,OAAO,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4HAA4H;IAC5H,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CAC1D;AAED,8GAA8G;AAC9G,MAAM,MAAM,yBAAyB,GAAG;IACtC,cAAc,EAAE,kBAAkB,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,UAAU,IAAI;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GACvB,CAAC,IAAI,GAAG;IACN,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,qDAAqD;IACrD,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IAC7E,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrH;;;;OAIG;IACH,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,8GAA8G;IAC9G,EAAE,EAAE,OAAO,CAAC;CACb,CAAC,GACF,CAAC,IAAI,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,+FAA+F;IAC/F,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,eAAe,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mJAAmJ;AACnJ,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAElI;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC,EACvE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC,GACvD,yBAAyB,CAU3B;AA+ED,kHAAkH;AAClH,wBAAsB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAW9E;AA4ND;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmB1F"}
+{"version":3,"file":"changes.d.ts","sourceRoot":"","sources":["../../src/workspace/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAMH,OAAO,EAAkG,KAAK,cAAc,EAAoB,MAAM,eAAe,CAAC;AAEtK,OAAO,EAAmE,KAAK,UAAU,EAAkB,MAAM,gBAAgB,CAAC;AAWlI,OAAO,EAAmC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAElF,+DAA+D;AAC/D,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,gFAAgF,CAAC;AAEtH,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,sDAKQ,CAAC;AAC3C,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,uDAKI,CAAC;AAC3C,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7C,4DAA4D;IAC5D,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,iEAAiE;IACjE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;CAC3B;AAED,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,oCAAoC;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,qHAAqH;AACrH,eAAO,MAAM,mBAAmB,gWASU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,iBAAiB,kCAAuE,CAAC;AActG,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3F,MAAM,WAAW,WAAW;IAC1B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,6CAA6C;IAC7C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,sGAAsG;IACtG,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,4EAA4E;IAC5E,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,0DAA0D;IAC1D,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,2DAA2D;IAC3D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,kBAAkB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,oHAAoH;IACpH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yFAAyF;IACzF,MAAM,EAAE;QAAE,OAAO,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4HAA4H;IAC5H,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CAC1D;AAED,8GAA8G;AAC9G,MAAM,MAAM,yBAAyB,GAAG;IACtC,cAAc,EAAE,kBAAkB,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,UAAU,IAAI;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GACvB,CAAC,IAAI,GAAG;IACN,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,qDAAqD;IACrD,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACtD,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,EAAE,CAAC;IAC7E,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrH;;;;OAIG;IACH,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B;;;;OAIG;IACH,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,8GAA8G;IAC9G,EAAE,EAAE,OAAO,CAAC;CACb,CAAC,GACF,CAAC,IAAI,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,CAAC;AAEpE,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,+FAA+F;IAC/F,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,eAAe,CAAC;IACrB,mEAAmE;IACnE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,mJAAmJ;AACnJ,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG;IAAE,OAAO,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAElI;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,CAAC,EACvE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC,GACvD,yBAAyB,CAU3B;AA+ED,kHAAkH;AAClH,wBAAsB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAW9E;AAgQD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAmB1F"}

package/dist/workspace/changes.js

@@ -41,8 +41,9 @@ import { relative, resolve, sep } from "node:path";
 import picomatch from "picomatch";
 import { declaredRecordKinds, readDeclaration, readerVersion, WORKSPACE_ERROR_CODES, WorkspaceReadError } from "./declaration.js";
 import { declaredKindFile } from "./declared-kinds.js";
+import { COMMIT_UNLINKED_FIX, hasLeaseLedger, judgeCommits, mergeCommits } from "./commit-links.js";
 import { isGeneratedPath } from "./generated-files.js";
-import { parseRegion } from "./intent.js";
+import { commitDetails, parseRegion } from "./intent.js";
 import { loadClassRegistry } from "./principal-classes.js";
 import { constraintCovers, isWorkspacePath, memberHolding } from "./record-assets.js";
 import { loadRecordKind, RecordReadError } from "./records.js";
@@ -62,6 +63,13 @@ export const CHANGES_FINDING_CODES = [
     /** A record in hand for the change lists a changed path in its out_of_scope. */
     "change-out-of-scope",
 ];
+/** The codes of a finding on a commit rather than a path (#4029). Closed. */
+export const COMMIT_LINK_FINDING_CODES = [
+    /** A trunk commit in the range names no work item: no Chant-Record of a work kind and no Chant-Lease. */
+    "commit-unlinked",
+    /** A trunk commit in the range names a work item that is not there: a record id no work kind has, a record of another kind, or a lease that resolves to nothing. */
+    "commit-wrongly-linked",
+];
 /** Why the check failed as a whole: the declaration's codes, the record kind's, or a `--work` item no record has. */
 export const CHANGES_ERROR_CODES = [
     ...WORKSPACE_ERROR_CODES,
@@ -345,6 +353,7 @@ async function run(query, head) {
     }
     const count = (s) => paths.filter((p) => p.status === s).length;
     const scope = await writeScopeAtBase(query, top, range, workspacePrefix);
+    const links = commitLinks(top, range, kinds, severity);
     return {
         ...head,
         workspace: { name: declaration.name, root: located.root },
@@ -357,9 +366,47 @@ async function run(query, head) {
         findings,
         summary: { paths: paths.length, covered: count("covered"), uncovered: count("uncovered"), outOfScope: count("out-of-scope"), ignored: count("ignored"), records: count("record") },
         scope,
-        ok: !(severity === "fail" && findings.length > 0) && (scope === null || scope.findings.length === 0),
+        links,
+        ok: !(severity === "fail" && (findings.length > 0 || (links?.findings.length ?? 0) > 0)) && (scope === null || scope.findings.length === 0),
     };
 }
+/**
+ * Whether each trunk commit of the range, first-parent and merges left out,
+ * names a work item (#4029). Records are read at the head, as the paths are.
+ * Null when no work kind was read.
+ */
+function commitLinks(top, range, kinds, severity) {
+    const work = kinds.filter((k) => k.role === "work");
+    if (work.length === 0)
+        return null;
+    const index = {
+        kinds: new Map(work.map((k) => [k.loaded.kind.name, new Set(k.records.flatMap((r) => (r.id === null ? [] : [r.id])))])),
+        ledger: hasLeaseLedger(top),
+    };
+    const shas = git(top, ["rev-list", "--first-parent", "--reverse", `${range.base}..${range.head}`]).split("\n").filter(Boolean);
+    const judged = judgeCommits(top, shas, index, mergeCommits(top, shas));
+    const details = commitDetails(top, shas);
+    const commits = [];
+    const findings = [];
+    for (const sha of shas) {
+        const link = judged.get(sha);
+        if (link.state === "merge")
+            continue;
+        const subject = details.get(sha)?.subject ?? "";
+        commits.push({ commit: sha, subject, state: link.state, ids: link.ids, problems: link.problems });
+        if (link.state === "linked" || severity === "off")
+            continue;
+        const short = sha.slice(0, 8);
+        if (link.state === "unlinked") {
+            findings.push({ id: `finding:commit-unlinked:${sha}`, code: "commit-unlinked", commit: sha, severity, message: `${short} "${subject}" carries no Chant-Record trailer of a work kind and no Chant-Lease trailer, so it names no work item`, fix: COMMIT_UNLINKED_FIX });
+        }
+        else {
+            const named = link.problems.map((p) => `${p.trailer} (${p.message})`).join("; ");
+            findings.push({ id: `finding:commit-wrongly-linked:${sha}`, code: "commit-wrongly-linked", commit: sha, severity, message: `${short} "${subject}" names no work item that exists: ${named}`, fix: `correct the trailer to name an existing work record, \`Chant-Record: ${[...index.kinds.keys()][0]}:<id>\`, or a lease taken on one` });
+        }
+    }
+    return { kinds: [...index.kinds.keys()], commits, findings };
+}
 /**
  * The write scope check over the range (#2548), with the declaration, its
  * record kinds and the trust policy read at the range's base, so a change