@intentius/chant 0.124.27 → 0.124.29

package/dist/components/promote.d.ts

@@ -37,11 +37,13 @@
  * The driver stays capability-agnostic. The two kind lists below are data, in
  * the same spirit as `DEPLOY_UNIT_RULES` (./deploy-units.ts).
  */
-import { type ReleaseRecord, type ReleaseRecordInput, type RunOrigin } from "../lifecycle/release-ledger.js";
+import { type ReleaseRecord, type ReleaseRecordInput, type ReleaseAdmission, type RunOrigin } from "../lifecycle/release-ledger.js";
 import { CapabilityRegistry, type Capability } from "./capability.js";
-import { type DriverComponent, type DriverComponentResult, type DriverRunResult } from "./driver.js";
+import { type DriverComponent, type DriverComponentResult, type ReleaseGateBinding, type DriverRunResult } from "./driver.js";
 import type { GateLedgerPort } from "../op/gate.js";
+import type { Release } from "../lifecycle/release-store.js";
 import type { RunProgressEvent } from "./run-progress.js";
+import type { RunEventSink } from "../run-event-stream.js";
 /**
  * Step kinds that produce an artifact at build time: the build family, and the
  * SBOM steps that read the freshly built archive. A promote removes them.
@@ -131,6 +133,28 @@ export declare function planRollback(input: {
 }): PromotionPlan | {
     error: string;
 };
+/**
+ * Decide what a rollback to a release restores (#4035): every component of
+ * `release`, each at the newest record in `env`'s ledger that names the
+ * release, so the digest restored is the one the environment ran from it. A
+ * component of the release this checkout does not declare is reported and
+ * left alone. One the environment never ran from the release has no recorded
+ * digest, and is refused. So is a release the environment already runs,
+ * unless one of its components is `unsettled` (a run left it failed or gated):
+ * then the rollback is what puts that component back too.
+ */
+export declare function planReleaseRollback(input: {
+    env: string;
+    records: ReleaseRecord[];
+    declared: string[];
+    release: Pick<Release, "releaseDigest" | "artifactDigests" | "targets">;
+    /** The release's label, or null; used in messages. */
+    label: string | null;
+    /** Components a run left failed or gated in `env` (../lifecycle/mixed-environment.ts). */
+    unsettled?: ReadonlySet<string>;
+}): PromotionPlan | {
+    error: string;
+};
 /**
  * Decide what a redeploy deploys: the release of `component` the ledger in
  * `env` records as current. A deploy that fails partway records nothing, so
@@ -220,8 +244,12 @@ export interface RunPromotionOptions {
     registry: CapabilityRegistry;
     componentOutputs?: Record<string, Record<string, unknown>>;
     gates?: GateLedgerPort;
+    /** A promote under a release (#4045): what every gate it reaches binds. */
+    releaseGate?: ReleaseGateBinding;
     now?: string;
     onProgress?: (event: RunProgressEvent) => void;
+    /** Where the run's events go (#4041, `--events-json`). */
+    onRunEvent?: RunEventSink;
 }
 /**
  * Deploy the plan's components to `plan.to`, in dependency order. A
@@ -233,6 +261,12 @@ export interface RunPromotionOptions {
 export declare function runPromotion(options: RunPromotionOptions): Promise<DriverRunResult>;
 /** Who approved the last gate a component passed in this run, if any. */
 export declare function gateApprover(result: DriverComponentResult | undefined): string | undefined;
+/**
+ * The gate resolution that admitted a component's last gate in this run (#4020):
+ * which gate, in the component's gate ledger, and when the resolution was
+ * recorded. Undefined for a component that passed no gate.
+ */
+export declare function gateAdmission(result: DriverComponentResult | undefined): ReleaseAdmission | undefined;
 /** What a promote, rollback or redeploy knows about its own run, for the records it writes. */
 export interface DeployRunInfo {
     runId: string;
@@ -240,6 +274,8 @@ export interface DeployRunInfo {
     actor: string;
     timestamp: string;
     approver?: string;
+    /** The gate resolution that admitted the deploy (#4020), from {@link gateAdmission}. */
+    admission?: ReleaseAdmission;
 }
 /**
  * The release record a successful promotion appends to the target ledger.

package/dist/components/promote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/components/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,EAAsB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC9H,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAG1B,KAAK,eAAe,EAErB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAM7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAK/C,CAAC;AAEF,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,gEAAgE;IAChE,WAAW,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,GACd;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAY/C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAiBtG;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAyCpC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAyBpC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAcpC;AAUD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAiD,CAAC;AAElG;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CAqBxE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAIlE;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,eAAe,CAAC;IAC3B,+CAA+C;IAC/C,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAMvF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,eAAe,EAC1B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,mBAAmB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsFzC;AAmBD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,kBAAkB,CAuCpB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,aAAa,CAAC;IACpB,sFAAsF;IACtF,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAChD;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CA2BzF;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAM1F;AAED,+FAA+F;AAC/F,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAyBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG"}
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../src/components/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,EAAsB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACrJ,OAAO,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAE1B,KAAK,kBAAkB,EAEvB,KAAK,eAAe,EAErB,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAM7C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAK/C,CAAC;AAEF,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,4DAA4D;AAC5D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,gEAAgE;IAChE,WAAW,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,MAAM,GACd;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAY/C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAiBtG;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAyCpC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAyBpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,GAAG,SAAS,CAAC,CAAC;IACxE,sDAAsD;IACtD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACjC,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAuCpC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,aAAa,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAcpC;AAUD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAAiD,CAAC;AAElG;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CAqBxE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAIlE;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,eAAe,CAAC;IAC3B,+CAA+C;IAC/C,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,0DAA0D;AAC1D,eAAO,MAAM,wBAAwB,EAAE,UAAU,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAMvF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,eAAe,EAC1B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,mBAAmB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAsFzC;AAmBD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,kBAAkB,CAuCpB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,aAAa,CAAC;IACpB,sFAAsF;IACtF,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC/C,0DAA0D;IAC1D,UAAU,CAAC,EAAE,YAAY,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CA6BzF;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAM1F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,qBAAqB,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAOrG;AAED,+FAA+F;AAC/F,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AA+BD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,kBAAkB,CAEvG"}

package/dist/components/promote.js

@@ -198,6 +198,60 @@ export function planRollback(input) {
     }
     return { from: env, to: env, items: [{ component, digest: target.digest, source: target }], notPromoted: [] };
 }
+/**
+ * Decide what a rollback to a release restores (#4035): every component of
+ * `release`, each at the newest record in `env`'s ledger that names the
+ * release, so the digest restored is the one the environment ran from it. A
+ * component of the release this checkout does not declare is reported and
+ * left alone. One the environment never ran from the release has no recorded
+ * digest, and is refused. So is a release the environment already runs,
+ * unless one of its components is `unsettled` (a run left it failed or gated):
+ * then the rollback is what puts that component back too.
+ */
+export function planReleaseRollback(input) {
+    const { env, records, declared, release } = input;
+    const name = input.label ?? release.releaseDigest;
+    const target = release.targets.find((t) => t.env === env);
+    const inRelease = new Set();
+    for (const t of target?.templates ?? [])
+        if (t.component !== null)
+            inRelease.add(t.component);
+    for (const a of release.artifactDigests)
+        inRelease.add(a.component);
+    const items = [];
+    const notPromoted = [];
+    const neverRan = [];
+    for (const component of [...inRelease].sort()) {
+        if (!declared.includes(component)) {
+            notPromoted.push({ component, reason: `in release ${name} but not declared in this checkout` });
+            continue;
+        }
+        const ran = records.filter((r) => r.component === component && r.releaseDigest === release.releaseDigest);
+        if (ran.length === 0) {
+            neverRan.push(component);
+            continue;
+        }
+        const record = latestPerComponent(ran).get(component);
+        items.push({ component, digest: record.digest, source: record });
+    }
+    if (neverRan.length > 0) {
+        return {
+            error: `release ${name} never deployed ${neverRan.map((c) => `"${c}"`).join(", ")} to "${env}", so no recorded digest can be restored; ` +
+                `promote it instead: chant components promote --to ${env} --release ${name}`,
+        };
+    }
+    if (items.length === 0)
+        return { error: `release ${name} has no component declared in this checkout` };
+    const current = latestPerComponent(records);
+    const already = items.every((i) => {
+        const now = current.get(i.component);
+        return now !== undefined && now.releaseDigest === release.releaseDigest && now.digest === i.digest && !input.unsettled?.has(i.component);
+    });
+    if (already) {
+        return { error: `"${env}" already runs release ${name}; nothing to roll back. After a deploy that failed partway, chant components redeploy puts a component's release back` };
+    }
+    return { from: env, to: env, items, notPromoted };
+}
 /**
  * Decide what a redeploy deploys: the release of `component` the ledger in
  * `env` records as current. A deploy that fails partway records nothing, so
@@ -481,7 +535,9 @@ export async function runPromotion(options) {
                 return item ? { version: item.digest, revision: item.source.gitSha } : undefined;
             },
             ...(options.onProgress ? { onProgress: options.onProgress } : {}),
+            ...(options.onRunEvent ? { onRunEvent: options.onRunEvent } : {}),
             ...(options.gates ? { gates: options.gates } : {}),
+            ...(options.releaseGate ? { releaseGate: options.releaseGate } : {}),
             ...(options.now ? { now: options.now } : {}),
         });
     }
@@ -500,6 +556,20 @@ export function gateApprover(result) {
     }
     return approver;
 }
+/**
+ * The gate resolution that admitted a component's last gate in this run (#4020):
+ * which gate, in the component's gate ledger, and when the resolution was
+ * recorded. Undefined for a component that passed no gate.
+ */
+export function gateAdmission(result) {
+    let admission;
+    for (const record of result?.records ?? []) {
+        // #4045: a release gate's resolution is in the release gate's ledger, not the component's.
+        if (record.approval)
+            admission = { op: record.approval.op ?? result.component, gate: record.approval.gate, resolvedAt: record.approval.timestamp };
+    }
+    return admission;
+}
 /** The fields a promote, a rollback and a redeploy record share: the artifact is the earlier release's own. */
 function sharedRecord(item, env, run) {
     const { source } = item;
@@ -513,6 +583,7 @@ function sharedRecord(item, env, run) {
         timestamp: run.timestamp,
         actor: run.actor,
         ...(run.approver ? { approver: run.approver } : {}),
+        ...(run.admission ? { admission: run.admission } : {}),
         ...(source.manifestDigest ? { manifestDigest: source.manifestDigest } : {}),
         ...(source.inputDigest ? { inputDigest: source.inputDigest } : {}),
     };
@@ -521,6 +592,10 @@ function sharedRecord(item, env, run) {
 function refTo(record) {
     return { env: record.env, runId: record.runId, timestamp: record.timestamp };
 }
+/** A rollback and a redeploy put an earlier deploy back, so they name the release it came from (#4043). */
+function releaseOf(source) {
+    return source.releaseDigest !== undefined ? { releaseDigest: source.releaseDigest } : {};
+}
 /**
  * The release record a successful promotion appends to the target ledger.
  * The digest, git sha and archive identities are the source release's own,
@@ -536,7 +611,7 @@ export function promotionRecord(item, to, run) {
  * release.
  */
 export function rollbackRecord(item, env, run) {
-    return { ...sharedRecord(item, env, run), restores: refTo(item.source) };
+    return { ...sharedRecord(item, env, run), restores: refTo(item.source), ...releaseOf(item.source) };
 }
 /**
  * The release record a successful redeploy appends. It carries the current
@@ -545,5 +620,5 @@ export function rollbackRecord(item, env, run) {
  * change, and the record says when it was last put back.
  */
 export function redeployRecord(item, env, run) {
-    return { ...sharedRecord(item, env, run), redeploys: refTo(item.source) };
+    return { ...sharedRecord(item, env, run), redeploys: refTo(item.source), ...releaseOf(item.source) };
 }

package/dist/components/release-compile.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Compiling a release (#4026, ws-104 question 5): what one environment
+ * compiles to, and the artifacts built once.
+ *
+ * A template is synthesized for one environment per invocation: `--env` sets
+ * `CHANT_ENV` before the project is imported, and `*.component.ts` files are
+ * imported with a plain `import()`, which caches the module. So each
+ * environment is compiled in a child process of its own
+ * ({@link spawnTargetCompiler}), running `chant release compile --env <env>`,
+ * which calls {@link compileEnvironment} in that process and prints the
+ * result as JSON. The artifacts are built in one more child, for the first
+ * environment in which each component is enabled ({@link buildReleaseArtifacts}).
+ *
+ * What counts as a template is data, as the build and publish kinds are in
+ * ./promote.ts: a literal path in a deploy step's `template`, `manifest` or
+ * `values` field ({@link TEMPLATE_FIELDS}), read after the environment's build
+ * command has run. A path with the `archive:` prefix names the file after it.
+ * A path that names a directory, such as a chart, is not a template.
+ *
+ * A project with no components (#4046) is compiled the way `chant build --env
+ * <env> -o <output>` builds it ({@link compileBuildOutput}): every file that
+ * build writes is a template with `component: null`, and the target's params
+ * are the build's `buildParams`. The files are kept in memory rather than read
+ * back from disk, so a file an earlier build left behind is never recorded.
+ */
+import { type ChantConfig } from "../config.js";
+import { type DriverComponent, type DriverStep } from "./driver.js";
+import type { CapabilityRegistry } from "./capability.js";
+import type { ReleaseArtifact, ReleaseParam } from "../lifecycle/release-store.js";
+/** The deploy step fields whose literal file paths are a component's templates. */
+export declare const TEMPLATE_FIELDS: readonly string[];
+/** One template a component's deploy reads, as the step names it. */
+export interface TemplateRef {
+    component: string;
+    phase: string;
+    kind: string;
+    field: string;
+    /** The value as written in the step. */
+    value: string;
+    /** The file it names, relative to the member's directory as written (the `archive:` prefix removed). */
+    path: string;
+}
+/** A compiled template: its path and its bytes. */
+export interface CompiledTemplate {
+    component: string | null;
+    path: string;
+    content: string;
+}
+/** What one environment compiles to. */
+export interface CompiledTarget {
+    env: string;
+    params: ReleaseParam[];
+    /** The components enabled in this environment, by name. */
+    components: string[];
+    /** Each component's build-time steps, as declared for this environment, in composition order. */
+    buildSteps: Record<string, unknown[]>;
+    /**
+     * Each component's publish steps (`PUBLISH_STEP_KINDS`), as declared for
+     * this environment, in composition order (#4027). The cut's dry run shows
+     * them as what each environment's deploy publishes. Absent from a compiler
+     * that does not report them.
+     */
+    publishSteps?: Record<string, unknown[]>;
+    /** For each component, the files its build steps read, relative to the member's directory. Used to tell whether an artifact's source changed. */
+    buildInputs: Record<string, string[]>;
+    /** For each component, the file that declares it, relative to the member's directory. */
+    componentFiles: Record<string, string>;
+    templates: CompiledTemplate[];
+}
+/** Compiles a member for one environment, and builds its artifacts. The cut talks to a compiler only, so a test can hand it fixtures. */
+export interface TargetCompiler {
+    compile(env: string): Promise<CompiledTarget>;
+    buildArtifacts(env: string, components: readonly string[]): Promise<ReleaseArtifact[]>;
+}
+/** The templates a component's deploy reads: literal paths in {@link TEMPLATE_FIELDS} of its steps other than build and publish steps. */
+export declare function templateRefs(component: DriverComponent): TemplateRef[];
+/** A component's build-time steps ({@link BUILD_STEP_KINDS}), each as declared, in composition order. */
+export declare function buildStepsOf(component: DriverComponent): DriverStep[];
+/** A component's publish steps ({@link PUBLISH_STEP_KINDS}), each as declared, in composition order. */
+export declare function publishStepsOf(component: DriverComponent): DriverStep[];
+/** The literal paths a component's archive steps read: `docker-build`'s `context` and `dockerfile`, `zip-package`'s `source`, `jvm-build`'s `path`. */
+export declare function buildInputPaths(component: DriverComponent): string[];
+/** A component's composition with only its archive steps ({@link ARCHIVE_STEP_KINDS}) left, gates and every other step taken out. */
+export declare function withOnlyArchiveSteps(component: DriverComponent): DriverComponent | undefined;
+/** How one environment is compiled: the build command, and the parameter inputs `chant build` takes. */
+export interface CompileInputs {
+    /** The member's directory. */
+    projectDir: string;
+    /** A shell command run in the member's directory before the templates are read, with `CHANT_ENV` set to the environment. */
+    buildCommand?: string;
+    /** `--param name=value` values, the same for every environment. */
+    params?: Record<string, string>;
+    /** `--params-file`, with `{env}` replaced by the environment's name. */
+    paramsFile?: string;
+    /** For a project with no components: the build root, relative to the member's directory. Defaults to `chant.config.ts` `sourceDir`, then the member's directory, as `chant lifecycle` resolves it. */
+    src?: string;
+    /** For a project with no components: the build's output file, relative to the member's directory, as `chant build -o` takes it. Defaults to {@link DEFAULT_BUILD_OUTPUT}. */
+    output?: string;
+    /** For a project with no components: build only this lexicon, as `chant build --lexicon` does. */
+    lexicon?: string;
+}
+/**
+ * Where a project with no components writes its build output when the cut
+ * names no `-o`. YAML, since the k8s and helm serializers write YAML whatever
+ * the extension, and a JSON output converts to it.
+ */
+export declare const DEFAULT_BUILD_OUTPUT = "dist/build.yaml";
+/** Thrown when an environment can't be compiled. */
+export declare class ReleaseCompileError extends Error {
+    constructor(message: string);
+}
+/**
+ * Compile the member for `env` in this process: run the build command, resolve
+ * the build parameters, discover the components enabled under them, and read
+ * the templates their deploys name. Call it once per process, with
+ * `CHANT_ENV` already set to `env`, since component modules are cached.
+ */
+export declare function compileEnvironment(inputs: CompileInputs, env: string): Promise<CompiledTarget>;
+/**
+ * Compile a project with no components for `env` (#4046, ws-104 question 5):
+ * build it as `chant build <src> --env <env> -o <output>` would, and record
+ * each file that build writes as a template with `component: null`, by its
+ * path relative to the member's directory. The params are the build's own
+ * `buildParams`. Nothing is written to disk.
+ */
+export declare function compileBuildOutput(inputs: CompileInputs, env: string, config: ChantConfig): Promise<CompiledTarget>;
+/**
+ * Build the artifacts of `names` once, for `env`: run each component's archive
+ * steps, and nothing else, through the driver. `docker-build` gives an `image`
+ * entry, `zip-package` and `jvm-build` an `asset` entry, each with the path it
+ * wrote and its digest.
+ */
+export declare function buildReleaseArtifacts(inputs: CompileInputs, env: string, names: readonly string[], registry?: CapabilityRegistry): Promise<ReleaseArtifact[]>;
+/** How {@link spawnTargetCompiler} starts this chant. */
+export declare function ownChantCommand(): string[];
+/**
+ * The compiler the CLI uses: each environment in a child process of this same
+ * chant (`chant release compile --env <env> --json`), with `CHANT_ENV` set to
+ * that environment before anything imports the project.
+ */
+export declare function spawnTargetCompiler(inputs: CompileInputs, command?: readonly string[]): TargetCompiler;
+//# sourceMappingURL=release-compile.d.ts.map

package/dist/components/release-compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-compile.d.ts","sourceRoot":"","sources":["../../src/components/release-compile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAO9D,OAAO,EAAwC,KAAK,eAAe,EAAqC,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAC1I,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAEhF,mFAAmF;AACnF,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAuC,CAAC;AAKrF,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,wGAAwG;IACxG,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,2DAA2D;IAC3D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,iGAAiG;IACjG,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACtC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,iJAAiJ;IACjJ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,yIAAyI;AACzI,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CACxF;AA0BD,0IAA0I;AAC1I,wBAAgB,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,WAAW,EAAE,CAetE;AAED,yGAAyG;AACzG,wBAAgB,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,UAAU,EAAE,CAErE;AAED,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,UAAU,EAAE,CAEvE;AAED,uJAAuJ;AACvJ,wBAAgB,eAAe,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CAYpE;AAED,qIAAqI;AACrI,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,eAAe,GAAG,eAAe,GAAG,SAAS,CAa5F;AAED,wGAAwG;AACxG,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,4HAA4H;IAC5H,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sMAAsM;IACtM,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6KAA6K;IAC7K,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD,oDAAoD;AACpD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAgCD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAyCpG;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CA6DzH;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,QAAQ,CAAC,EAAE,kBAAkB,GAC5B,OAAO,CAAC,eAAe,EAAE,CAAC,CAgC5B;AAED,yDAAyD;AACzD,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAG1C;AAkBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,SAAS,MAAM,EAAsB,GAAG,cAAc,CA2BzH"}