@intentius/chant 0.124.27 → 0.124.29

package/dist/lifecycle/retention.js

@@ -0,0 +1,400 @@
+/**
+ * Garbage collection of stored change sets, releases and run events by the
+ * retention policy (#4036). `chant lifecycle gc` runs it.
+ *
+ * What it prunes on `chant/lifecycle`, in every member's ledger at once:
+ *
+ *   _change-sets/<digest>.json          a stored change set (#4022)
+ *   _releases/<digest>.json             a release (#4026)
+ *   _releases/templates/<digest>.txt    template bytes no kept release names
+ *
+ * A prune is one new commit on the local branch that removes those files. It
+ * never rewrites or force-pushes history: other clones and tools read the
+ * branch, and every pruned file stays reachable in the commits before the
+ * prune. So a prune bounds the tree a reader walks at the tip, and the
+ * repository's history keeps growing by what is written. `git log -- <path>`
+ * on the branch still finds a pruned file.
+ *
+ * What it never touches: the ledgers. `_releases/cuts.jsonl`,
+ * `<env>/releases.jsonl`, `_gates/<op>.jsonl`, the run ledgers and every other
+ * `.jsonl` on the branch are append-only and are not edited (#4034), and a
+ * whole ledger file is not removed either: the latest deploy record of an
+ * environment, a gate's standing fact and a release's label all live in them,
+ * and they are small next to what they index (one line per fact). Nor does it
+ * touch snapshots, `_plans/`, `_builds/` or checkpoints, which have no policy
+ * yet. A cut line whose release was pruned stays, so its label keeps naming
+ * that digest and can't be given to another release.
+ *
+ * What is never pruned, whatever its age:
+ *
+ * 1. A release an environment runs: the release the latest deploy record of
+ *    each component in each environment names, by its `releaseDigest` or the
+ *    release gate resolution its admission names (`releaseOfDeploy`, #4043),
+ *    and that release's templates. A promotion picks up what the step before
+ *    runs (#4030), so this also keeps every release a promotion can take by
+ *    default.
+ * 2. What a pending gate binds: the change set (`planDigest`) and release
+ *    (`releaseDigest`) of every pending fact that has not expired.
+ * 3. A release still promotable: one whose commit has no `ci/revoked` tag and
+ *    that was cut within `releases.days`, or is among the newest
+ *    `releases.keep` releases of its member.
+ * 4. A change set a gate fact (an approval, an `empty` resolution or a
+ *    pending fact) names together with a release that is kept.
+ *
+ * Anything else is pruned once it is older than its kind's window: a change
+ * set `changeSets.days` after it was stored or last named by a gate fact,
+ * whichever is later. A file that can't be read as a release is kept.
+ *
+ * Run events are local files under `<git-common-dir>/chant/run-events/`
+ * (`../run-event-store.ts`) and are deleted outright.
+ */
+import { execFileSync } from "node:child_process";
+import { RefCASConflictError, writeLedgerFiles, pushLifecycleReport } from "./git.js";
+import { MEMBERS_DIR } from "./member-ledger.js";
+import { CHANGE_SETS_DIR } from "./change-set-store.js";
+import { CUTS_FILE, RELEASES_DIR, TEMPLATES_SUBDIR, parseCuts, parseRelease } from "./release-store.js";
+import { parseGateLedger } from "./gate-ledger.js";
+import { parseReleaseLedger, releaseLedgerLines } from "./release-read.js";
+import { latestPerComponent } from "./release-ledger.js";
+import { releaseOfDeploy } from "./release-join.js";
+import { RELEASE_GATE_OP } from "../op/gate-name.js";
+import { planRunEventPrune, pruneRunEvents } from "../run-event-store.js";
+const STATE_BRANCH = "chant/lifecycle";
+const DAY_MS = 86400000;
+function git(cwd, args, input) {
+    return execFileSync("git", args, { cwd, input, maxBuffer: 1024 * 1024 * 1024, stdio: ["pipe", "pipe", "pipe"] });
+}
+function branchTip(cwd) {
+    try {
+        return git(cwd, ["rev-parse", "--verify", "--quiet", `refs/heads/${STATE_BRANCH}`]).toString().trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+function listTree(cwd, tip) {
+    const out = [];
+    for (const line of git(cwd, ["ls-tree", "-r", "-l", "--full-tree", tip]).toString().split("\n")) {
+        const m = line.match(/^\d+ blob ([0-9a-f]+)\s+(\d+)\t(.+)$/);
+        if (m)
+            out.push({ sha: m[1], bytes: Number(m[2]), path: m[3] });
+    }
+    return out;
+}
+/** The text of each blob, read in one `git cat-file --batch`. */
+function readBlobs(cwd, shas) {
+    const out = new Map();
+    const unique = [...new Set(shas)];
+    if (unique.length === 0)
+        return out;
+    const buf = git(cwd, ["cat-file", "--batch"], `${unique.join("\n")}\n`);
+    let at = 0;
+    while (at < buf.length) {
+        const nl = buf.indexOf(0x0a, at);
+        if (nl < 0)
+            break;
+        const header = buf.subarray(at, nl).toString().split(" ");
+        at = nl + 1;
+        if (header[1] === "missing" || header.length < 3)
+            continue;
+        const size = Number(header[2]);
+        out.set(header[0], buf.subarray(at, at + size).toString("utf8"));
+        at += size + 1;
+    }
+    return out;
+}
+/** When each change set and release file was last added on the branch, newest add first, in one `git log`. */
+function storedTimes(cwd, tip) {
+    const out = new Map();
+    const text = git(cwd, [
+        "log", "--format=%x00%cI", "--name-only", "--diff-filter=A", tip, "--",
+        `:(top,glob)**/${CHANGE_SETS_DIR}/*.json`, `:(top,glob)**/${RELEASES_DIR}/*.json`,
+    ]).toString();
+    for (const chunk of text.split("\0")) {
+        const lines = chunk.split("\n").filter(Boolean);
+        const when = lines.shift();
+        if (!when)
+            continue;
+        for (const path of lines)
+            if (!out.has(path))
+                out.set(path, when);
+    }
+    return out;
+}
+/** Split a branch path into the member prefix (`_members/<a>/_members/<b>/`) and the rest. */
+export function splitLedgerPath(path) {
+    const segs = path.split("/");
+    const names = [];
+    let i = 0;
+    while (segs[i] === MEMBERS_DIR && i + 2 < segs.length) {
+        names.push(segs[i + 1]);
+        i += 2;
+    }
+    return { prefix: segs.slice(0, i).map((s) => `${s}/`).join(""), member: names.length > 0 ? names.join("/") : null, rest: segs.slice(i).join("/") };
+}
+/**
+ * The key a digest is matched by: its hex. A plan digest written `sha256:<hex>`
+ * names the same plan as `jcs1-sha256:<hex>` (`samePlanDigest`), and a file
+ * name writes `:` as `_`, so both sides are reduced to the hex.
+ */
+export function digestKey(digestOrStem) {
+    const hex = digestOrStem.match(/[0-9a-f]{64}$/);
+    return hex ? hex[0] : digestOrStem.replace(/:/g, "_");
+}
+const stemOf = (name, ext) => name.slice(0, -ext.length);
+const fileDigest = (name, ext) => stemOf(name, ext).replace(/_/g, ":");
+function emptySize() {
+    const z = () => ({ files: 0, bytes: 0 });
+    return { files: 0, bytes: 0, changeSets: z(), releases: z(), templates: z(), ledgers: z(), other: z() };
+}
+function sizeOf(files, kinds) {
+    const s = emptySize();
+    for (const f of files) {
+        s.files++;
+        s.bytes += f.bytes;
+        const kind = kinds.get(f.path);
+        const slot = kind === "change-set" ? s.changeSets : kind === "release" ? s.releases : kind === "template" ? s.templates : f.path.endsWith(".jsonl") ? s.ledgers : s.other;
+        slot.files++;
+        slot.bytes += f.bytes;
+    }
+    return s;
+}
+/**
+ * Decide what a prune of `chant/lifecycle` removes and keeps, by the rules at
+ * the top of this file. Reads the branch at its local tip and writes nothing.
+ */
+export function planLifecycleGc(input) {
+    const { cwd, policy, now } = input;
+    const revoked = input.revokedCommits ?? new Set();
+    const tip = branchTip(cwd);
+    if (!tip)
+        return { tip: null, remove: [], keep: [], before: emptySize(), after: emptySize() };
+    const files = listTree(cwd, tip);
+    const stored = storedTimes(cwd, tip);
+    const members = new Map();
+    const kinds = new Map();
+    const ledgerOf = (prefix, member) => {
+        let m = members.get(prefix);
+        if (!m) {
+            m = { prefix, member, changeSets: new Map(), releases: new Map(), templates: new Map(), cuts: null, gates: [], deploys: [] };
+            members.set(prefix, m);
+        }
+        return m;
+    };
+    for (const f of files) {
+        const { prefix, member, rest } = splitLedgerPath(f.path);
+        const segs = rest.split("/");
+        const name = segs.at(-1);
+        const entry = (kind, digest) => {
+            kinds.set(f.path, kind);
+            return { kind, member, path: f.path, digest, bytes: f.bytes, sha: f.sha, storedAt: stored.get(f.path) ?? null };
+        };
+        if (segs.length === 2 && segs[0] === CHANGE_SETS_DIR && name.endsWith(".json")) {
+            const e = entry("change-set", fileDigest(name, ".json"));
+            ledgerOf(prefix, member).changeSets.set(digestKey(stemOf(name, ".json")), e);
+        }
+        else if (segs.length === 2 && segs[0] === RELEASES_DIR && name.endsWith(".json")) {
+            const e = entry("release", fileDigest(name, ".json"));
+            ledgerOf(prefix, member).releases.set(digestKey(stemOf(name, ".json")), e);
+        }
+        else if (segs.length === 3 && segs[0] === RELEASES_DIR && segs[1] === TEMPLATES_SUBDIR && name.endsWith(".txt")) {
+            const e = entry("template", fileDigest(name, ".txt"));
+            ledgerOf(prefix, member).templates.set(digestKey(stemOf(name, ".txt")), e);
+        }
+        else if (segs.length === 2 && segs[0] === RELEASES_DIR && name === CUTS_FILE) {
+            ledgerOf(prefix, member).cuts = f;
+        }
+        else if (segs.length === 2 && segs[0] === "_gates" && name.endsWith(".jsonl")) {
+            ledgerOf(prefix, member).gates.push(f);
+        }
+        else if (segs.length === 2 && name === "releases.jsonl" && !segs[0].startsWith("_")) {
+            ledgerOf(prefix, member).deploys.push({ env: segs[0], file: f });
+        }
+    }
+    const blobs = readBlobs(cwd, [...members.values()].flatMap((m) => [...m.releases.values()].map((r) => r.sha).concat(m.cuts ? [m.cuts.sha] : [], m.gates.map((g) => g.sha), m.deploys.map((d) => d.file.sha))));
+    const keep = [];
+    const remove = [];
+    const nowMs = now.getTime();
+    for (const m of members.values()) {
+        const reasons = new Map();
+        const keepFile = (f, reason) => {
+            if (!f)
+                return;
+            reasons.set(f, [...(reasons.get(f) ?? []), reason]);
+        };
+        // The gate facts of every op in the member.
+        const pending = [];
+        const resolutions = [];
+        let releaseGateResolutions = [];
+        for (const g of m.gates) {
+            const parsed = parseGateLedger(blobs.get(g.sha) ?? "");
+            pending.push(...parsed.pending);
+            resolutions.push(...parsed.resolutions);
+            if (g.path.endsWith(`/${RELEASE_GATE_OP}.jsonl`) || g.path === `_gates/${RELEASE_GATE_OP}.jsonl`)
+                releaseGateResolutions = parsed.resolutions;
+        }
+        // Releases, parsed.
+        const parsed = new Map();
+        for (const r of m.releases.values()) {
+            const release = parseRelease(blobs.get(r.sha) ?? "");
+            parsed.set(r, release && digestKey(release.releaseDigest) === digestKey(r.digest) ? release : null);
+        }
+        // Rule 1: what each environment runs.
+        for (const { env, file } of m.deploys) {
+            const { records } = parseReleaseLedger(releaseLedgerLines(blobs.get(file.sha) ?? null));
+            for (const record of latestPerComponent(records).values()) {
+                const digest = releaseOfDeploy(record, releaseGateResolutions);
+                if (digest !== undefined)
+                    keepFile(m.releases.get(digestKey(digest)), { code: "deployed", detail: `${env}/${record.component}` });
+            }
+        }
+        // Rule 2: what a pending gate binds, until its fact expires.
+        for (const p of pending) {
+            if (new Date(p.expiresAt).getTime() <= nowMs)
+                continue;
+            const detail = `${p.op}/${p.gate}${p.environment ? ` in ${p.environment}` : ""}`;
+            if (p.planDigest)
+                keepFile(m.changeSets.get(digestKey(p.planDigest)), { code: "pending-gate", detail });
+            if (p.releaseDigest)
+                keepFile(m.releases.get(digestKey(p.releaseDigest)), { code: "pending-gate", detail });
+        }
+        // Rule 3: a release still promotable.
+        const { cuts } = parseCuts(m.cuts ? (blobs.get(m.cuts.sha) ?? null) : null);
+        const cutAt = new Map();
+        for (const c of cuts) {
+            const k = digestKey(c.releaseDigest);
+            if (!cutAt.has(k) || c.timestamp > cutAt.get(k))
+                cutAt.set(k, c.timestamp);
+        }
+        const releaseCutoff = nowMs - policy.releases.days * DAY_MS;
+        const promotable = [];
+        for (const [k, file] of m.releases) {
+            const release = parsed.get(file);
+            if (!release) {
+                keepFile(file, { code: "unreadable" });
+                continue;
+            }
+            if (revoked.has(release.commit))
+                continue;
+            const when = cutAt.get(k) ?? file.storedAt;
+            promotable.push({ file, at: when ? new Date(when).getTime() : Number.POSITIVE_INFINITY });
+        }
+        promotable.sort((a, b) => b.at - a.at || (a.file.path < b.file.path ? -1 : 1));
+        promotable.forEach(({ file, at }, i) => {
+            if (i < policy.releases.keep)
+                keepFile(file, { code: "newest" });
+            if (at >= releaseCutoff)
+                keepFile(file, { code: "within-window" });
+        });
+        const keptReleases = new Set([...m.releases.values()].filter((r) => reasons.has(r)));
+        const keptKeys = new Set([...keptReleases].map((r) => digestKey(r.digest)));
+        // Templates follow the releases that name them.
+        const unreadableKept = [...keptReleases].some((r) => parsed.get(r) === null);
+        for (const r of keptReleases) {
+            const release = parsed.get(r);
+            if (!release)
+                continue;
+            for (const t of release.targets)
+                for (const tpl of t.templates)
+                    keepFile(m.templates.get(digestKey(tpl.digest)), { code: "kept-release", detail: r.digest });
+        }
+        if (unreadableKept)
+            for (const t of m.templates.values())
+                keepFile(t, { code: "unreadable", detail: "a release file of this member can't be read" });
+        // Rule 4, and the change-set window.
+        const lastNamed = new Map();
+        for (const fact of [...pending, ...resolutions]) {
+            if (!fact.planDigest)
+                continue;
+            const k = digestKey(fact.planDigest);
+            const t = new Date(fact.timestamp).getTime();
+            if (!lastNamed.has(k) || t > lastNamed.get(k))
+                lastNamed.set(k, t);
+            if (fact.releaseDigest && keptKeys.has(digestKey(fact.releaseDigest)))
+                keepFile(m.changeSets.get(k), { code: "kept-release", detail: fact.releaseDigest });
+        }
+        const changeSetCutoff = nowMs - policy.changeSets.days * DAY_MS;
+        for (const [k, file] of m.changeSets) {
+            const storedMs = file.storedAt ? new Date(file.storedAt).getTime() : Number.POSITIVE_INFINITY;
+            const last = Math.max(storedMs, lastNamed.get(k) ?? Number.NEGATIVE_INFINITY);
+            if (last >= changeSetCutoff)
+                keepFile(file, { code: "within-window" });
+        }
+        for (const f of [...m.changeSets.values(), ...m.releases.values(), ...m.templates.values()]) {
+            const why = reasons.get(f);
+            if (why)
+                keep.push({ ...f, reasons: dedupe(why) });
+            else
+                remove.push(f);
+        }
+    }
+    const byPath = (a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+    remove.sort(byPath);
+    keep.sort(byPath);
+    const removed = new Set(remove.map((f) => f.path));
+    return { tip, remove, keep, before: sizeOf(files, kinds), after: sizeOf(files.filter((f) => !removed.has(f.path)), kinds) };
+}
+function dedupe(reasons) {
+    const seen = new Set();
+    return reasons.filter((r) => {
+        const k = `${r.code}\0${r.detail ?? ""}`;
+        if (seen.has(k))
+            return false;
+        seen.add(k);
+        return true;
+    });
+}
+/** The commit message of a prune. */
+export function pruneMessage(remove) {
+    const n = (kind) => remove.filter((f) => f.kind === kind).length;
+    return `Retention: remove ${n("change-set")} change set(s), ${n("release")} release(s) and ${n("template")} template(s)`;
+}
+const PRUNE_ATTEMPTS = 5;
+/**
+ * Plan and, unless `dryRun`, carry out a prune: one commit on the local
+ * `chant/lifecycle` that removes what the plan lets go, and the run event
+ * files it lets go deleted. The commit is planned against the tip it is
+ * written on: if the branch moved in between, the plan is made again. It is
+ * pushed only when `push` is set.
+ */
+export async function runLifecycleGc(input) {
+    let plan = planLifecycleGc(input);
+    let commit = null;
+    if (!input.dryRun && plan.tip && plan.remove.length > 0) {
+        for (let attempt = 1;; attempt++) {
+            const removals = plan.remove.map((f) => ({ path: f.path, remove: true, expectPriorSha: f.sha }));
+            try {
+                commit = await writeLedgerFiles(removals, pruneMessage(plan.remove), { cwd: input.cwd, expectTip: plan.tip });
+                break;
+            }
+            catch (err) {
+                if (!(err instanceof RefCASConflictError) || attempt >= PRUNE_ATTEMPTS)
+                    throw err;
+                plan = planLifecycleGc(input);
+                if (!plan.tip || plan.remove.length === 0)
+                    break;
+            }
+        }
+    }
+    let pushed = false;
+    let pushWarning;
+    if (commit && input.push) {
+        const r = await pushLifecycleReport({ cwd: input.cwd });
+        pushed = r.pushed;
+        pushWarning = r.pushWarning;
+    }
+    const events = await planRunEventPrune(input.cwd, input.policy.runEvents, input.now);
+    const deleted = input.dryRun ? 0 : pruneRunEvents(events);
+    return {
+        now: input.now.toISOString(),
+        policy: input.policy,
+        dryRun: input.dryRun,
+        lifecycle: { ...plan, commit, pushed, ...(pushWarning ? { pushWarning } : {}) },
+        runEvents: {
+            dir: events.dir,
+            remove: events.remove,
+            kept: { files: events.keep.length, bytes: events.keep.reduce((n, f) => n + f.bytes, 0) },
+            deleted,
+        },
+    };
+}

package/dist/lifecycle/run-ledger.d.ts

@@ -26,6 +26,10 @@ export declare function buildRunRecord(config: Pick<OpConfig, "name" | "labels">
     steward?: string;
     /** The gate the run resumed at, for a run that resumed (#3947). */
     resumed?: OpRunRecord["resumed"];
+    /** The commit the run built from (#4020). */
+    gitSha?: string;
+    /** The CI run the Op ran in (#4020), when it ran in CI. */
+    runOrigin?: OpRunRecord["runOrigin"];
     /** Each phase's wall-clock time, by name, as the executor measured it. */
     phaseDurations?: Record<string, number>;
 }): OpRunRecordInput;

package/dist/lifecycle/run-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/run-ledger.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,eAAe,CAAC;AAStG,0EAA0E;AAC1E,eAAO,MAAM,eAAe,UAAU,CAAC;AAMvC,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAEjE;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,EACzC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GACA,gBAAgB,CA+ClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAsBlD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA4BxD"}
+{"version":3,"file":"run-ledger.d.ts","sourceRoot":"","sources":["../../src/lifecycle/run-ledger.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAqC,MAAM,eAAe,CAAC;AAStG,0EAA0E;AAC1E,eAAO,MAAM,eAAe,UAAU,CAAC;AAMvC,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,MAAM,CAEjE;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,EACzC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACjC,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC,GACA,gBAAgB,CAiDlB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC,CAsBlD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA4BxD"}

package/dist/lifecycle/run-ledger.js

@@ -114,6 +114,8 @@ export function buildRunRecord(config, records, times) {
         ...(times.point ? { point: times.point } : {}),
         ...(times.steward ? { steward: times.steward } : {}),
         ...(times.resumed ? { resumed: times.resumed } : {}),
+        ...(times.gitSha ? { gitSha: times.gitSha } : {}),
+        ...(times.runOrigin ? { runOrigin: times.runOrigin } : {}),
     };
 }
 /**

package/dist/op/activities/change-coverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"change-coverage.d.ts","sourceRoot":"","sources":["../../../src/op/activities/change-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC;CAClE;AAED,wBAAsB,cAAc,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAmBjG"}
+{"version":3,"file":"change-coverage.d.ts","sourceRoot":"","sources":["../../../src/op/activities/change-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC;IACjG,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC,SAAS,CAAC,CAAC;CAClE;AAED,wBAAsB,cAAc,CAAC,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsBjG"}

package/dist/op/activities/change-coverage.js

@@ -34,7 +34,9 @@ export async function changeCoverage(args = {}) {
         findings: doc.findings.map(({ code, path, message, severity, records, triage }) => ({ code, path, message, severity, records, triage })),
         summary: doc.summary,
     };
-    if (!doc.ok)
-        throw new Error(`changeCoverage: ${doc.findings.length} change ${doc.findings.length === 1 ? "finding" : "findings"} at severity fail: ${doc.findings.map((f) => `${f.code} ${f.path}`).join(", ")}`);
+    if (!doc.ok) {
+        const all = [...doc.findings.map((f) => `${f.code} ${f.path}`), ...(doc.links?.findings ?? []).map((f) => `${f.code} ${f.commit.slice(0, 8)}`)];
+        throw new Error(`changeCoverage: ${all.length} change ${all.length === 1 ? "finding" : "findings"} at severity fail: ${all.join(", ")}`);
+    }
     return result;
 }

package/dist/op/activities/source-release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-release.d.ts","sourceRoot":"","sources":["../../../src/op/activities/source-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIxF,MAAM,WAAW,iBAAiB;IAChC,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEhD,gFAAgF;AAChF,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEzF;AAID,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGvE;AAED,qDAAqD;AACrD,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CASnF;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAM3G;AAID,MAAM,WAAW,iBAAiB;IAChC,wGAAwG;IACxG,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mEAAmE;AACnE,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+CzF"}
+{"version":3,"file":"source-release.d.ts","sourceRoot":"","sources":["../../../src/op/activities/source-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAMH,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIxF,MAAM,WAAW,iBAAiB;IAChC,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEhD,gFAAgF;AAChF,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEzF;AAID,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAGvE;AAED,qDAAqD;AACrD,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CASnF;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAM3G;AAID,MAAM,WAAW,iBAAiB;IAChC,wGAAwG;IACxG,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,mEAAmE;AACnE,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmDzF"}

package/dist/op/activities/source-release.js

@@ -60,15 +60,18 @@ export async function releaseRecord(args) {
     const component = plan.component;
     const env = plan.env;
     const gitSha = plan.gitSha;
-    const { readReleaseLedger, latestPerComponent, appendReleaseRecord, resolveRunId } = await import("../../lifecycle/release-ledger.js");
+    const { readReleaseLedger, latestPerComponent, appendReleaseRecord, resolveRunId, admissionOf } = await import("../../lifecycle/release-ledger.js");
     const { persistReleasePlan } = await import("../../lifecycle/plan-ledger.js");
     const { pushLifecycle } = await import("../../lifecycle/git.js");
     let approver = null;
+    let admission;
     if (args.approval) {
         const { readGateLedger } = await import("../../lifecycle/gate-ledger.js");
         const { resolutions } = await readGateLedger(args.approval.op, opts);
-        const bound = resolutions.filter((r) => r.gate === args.approval.gate && r.planDigest === plan.digest);
-        approver = bound.length > 0 ? [...new Set(bound.map((r) => r.resolvedBy))].join(", ") : null;
+        // #4020: the approver and the gate resolution that admitted the release.
+        const admitted = admissionOf(resolutions, { ...args.approval, planDigest: plan.digest });
+        approver = admitted?.approver ?? null;
+        admission = admitted?.admission;
     }
     const latest = latestPerComponent((await readReleaseLedger(env, opts)).records).get(component);
     if (latest?.digest === plan.digest && latest.gitSha === gitSha) {
@@ -91,6 +94,7 @@ export async function releaseRecord(args) {
         timestamp: new Date().toISOString(),
         actor,
         ...(approver ? { approver } : {}),
+        ...(admission ? { admission } : {}),
     }, opts);
     await pushLifecycle(opts);
     return { recorded: true, digest: plan.digest, env, component, approver };

package/dist/op/activities/source-rollback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-rollback.d.ts","sourceRoot":"","sources":["../../../src/op/activities/source-rollback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,gCAAgC,CAAC;AAMhF,MAAM,WAAW,uBAAuB;IACtC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,2GAA2G;IAC3G,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,iHAAiH;IACjH,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;CACb;AAKD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,EAAE,CAAC,EAAE,MAAM,GACV;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBxE;AAED,kIAAkI;AAClI,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA0D3G;AAID,MAAM,WAAW,yBAAyB;IACxC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B;IAC1C,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,qDAAqD;AACrD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA8CjH"}
+{"version":3,"file":"source-rollback.d.ts","sourceRoot":"","sources":["../../../src/op/activities/source-rollback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAAoB,aAAa,EAAc,MAAM,gCAAgC,CAAC;AAMlG,MAAM,WAAW,uBAAuB;IACtC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,2GAA2G;IAC3G,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,iHAAiH;IACjH,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;CACb;AAKD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,EAAE,EACxB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,EAAE,CAAC,EAAE,MAAM,GACV;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAmBxE;AAED,kIAAkI;AAClI,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA0D3G;AAID,MAAM,WAAW,yBAAyB;IACxC,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,2BAA2B;IAC1C,4DAA4D;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,qDAAqD;AACrD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAkDjH"}

package/dist/op/activities/source-rollback.js

@@ -131,14 +131,17 @@ export async function releaseRollbackRecord(args) {
     const component = plan.component;
     const env = plan.env;
     const gitSha = plan.gitSha;
-    const { readReleaseLedger, latestPerComponent, appendReleaseRecord, resolveRunId } = await import("../../lifecycle/release-ledger.js");
+    const { readReleaseLedger, latestPerComponent, appendReleaseRecord, resolveRunId, admissionOf } = await import("../../lifecycle/release-ledger.js");
     const { pushLifecycle } = await import("../../lifecycle/git.js");
     let approver = null;
+    let admission;
     if (args.approval) {
         const { readGateLedger } = await import("../../lifecycle/gate-ledger.js");
         const { resolutions } = await readGateLedger(args.approval.op, opts);
-        const bound = resolutions.filter((r) => r.gate === args.approval.gate && r.planDigest === plan.digest);
-        approver = bound.length > 0 ? [...new Set(bound.map((r) => r.resolvedBy))].join(", ") : null;
+        // #4020: the approver and the gate resolution that admitted the release.
+        const admitted = admissionOf(resolutions, { ...args.approval, planDigest: plan.digest });
+        approver = admitted?.approver ?? null;
+        admission = admitted?.admission;
     }
     const latest = latestPerComponent((await readReleaseLedger(env, opts)).records.filter((r) => r.component === component)).get(component);
     if (latest?.digest === rollback.to && latest.restores?.runId === rollback.restores.runId && latest.restores.timestamp === rollback.restores.timestamp) {
@@ -158,6 +161,7 @@ export async function releaseRollbackRecord(args) {
         timestamp: new Date().toISOString(),
         actor,
         ...(approver ? { approver } : {}),
+        ...(admission ? { admission } : {}),
         restores: rollback.restores,
     }, opts);
     await pushLifecycle(opts);

package/dist/op/gate-name.d.ts

@@ -39,11 +39,20 @@ export declare const WORKSPACE_UPGRADE_GATE_OP = "workspace-upgrade";
  * fan-out it has no `*.op.ts`, and an override is a person's, never a model's.
  */
 export declare const OVERRIDE_GATE_OP = "policy-override";
+/**
+ * The op name every release gate is recorded under (#4045): the gates
+ * `chant components promote --release` reaches, `_gates/release.jsonl`, each
+ * named as its composition names it and bound to a release, an environment
+ * and the release's change set. Like a fan-out, it has no `*.op.ts`, and like
+ * the pull-request gate it approves a change to an environment, so it is
+ * never resolved over MCP or ACP.
+ */
+export declare const RELEASE_GATE_OP = "release";
 /**
  * Whether gates recorded under this op name are never resolved over MCP or ACP
  * (chant#3485, chant#3513). These are the gate-only names MCP cannot discover:
- * `fan-out`, `workspace-upgrade`, `policy-override` (#3760) and the
- * pull-request gate `pr-<number>`. With
+ * `fan-out`, `workspace-upgrade`, `policy-override` (#3760), `release`
+ * (#4045) and the pull-request gate `pr-<number>`. With
  * no Op config to read `neverOverMcp` from, the pending record carries it.
  */
 export declare function isNeverOverMcpGateOp(op: string): boolean;

package/dist/op/gate-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-name.d.ts","sourceRoot":"","sources":["../../src/op/gate-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAmC,MAAM,SAAS,CAAC;AAEzE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AASlD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,8FAA8F;AAC9F,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEhD;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAE9D;AAED,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,QAE0B,CAAC;AAEnE;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CASjE"}
+{"version":3,"file":"gate-name.d.ts","sourceRoot":"","sources":["../../src/op/gate-name.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAmC,MAAM,SAAS,CAAC;AAEzE;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AAE7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAElD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AASzC;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,8FAA8F;AAC9F,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAEhD;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAE9D;AAED,kFAAkF;AAClF,eAAO,MAAM,2BAA2B,QAE0B,CAAC;AAEnE;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CASjE"}

package/dist/op/gate-name.js

@@ -38,6 +38,15 @@ export const WORKSPACE_UPGRADE_GATE_OP = "workspace-upgrade";
  * fan-out it has no `*.op.ts`, and an override is a person's, never a model's.
  */
 export const OVERRIDE_GATE_OP = "policy-override";
+/**
+ * The op name every release gate is recorded under (#4045): the gates
+ * `chant components promote --release` reaches, `_gates/release.jsonl`, each
+ * named as its composition names it and bound to a release, an environment
+ * and the release's change set. Like a fan-out, it has no `*.op.ts`, and like
+ * the pull-request gate it approves a change to an environment, so it is
+ * never resolved over MCP or ACP.
+ */
+export const RELEASE_GATE_OP = "release";
 /**
  * The pull-request loop records its gate under `pr-<number>`, or
  * `pr-<number>-<member>` in a workspace member (`prOp` in `pr-loop.ts`), and
@@ -47,12 +56,12 @@ const PR_GATE_OP = /^pr-\d+(?:-[a-z0-9][a-z0-9-]*)?$/;
 /**
  * Whether gates recorded under this op name are never resolved over MCP or ACP
  * (chant#3485, chant#3513). These are the gate-only names MCP cannot discover:
- * `fan-out`, `workspace-upgrade`, `policy-override` (#3760) and the
- * pull-request gate `pr-<number>`. With
+ * `fan-out`, `workspace-upgrade`, `policy-override` (#3760), `release`
+ * (#4045) and the pull-request gate `pr-<number>`. With
  * no Op config to read `neverOverMcp` from, the pending record carries it.
  */
 export function isNeverOverMcpGateOp(op) {
-    return op === FAN_OUT_GATE_OP || op === WORKSPACE_UPGRADE_GATE_OP || op === OVERRIDE_GATE_OP || PR_GATE_OP.test(op);
+    return op === FAN_OUT_GATE_OP || op === WORKSPACE_UPGRADE_GATE_OP || op === OVERRIDE_GATE_OP || op === RELEASE_GATE_OP || PR_GATE_OP.test(op);
 }
 /**
  * The gate's name, from whichever key carries it. One place reads the old key,

package/dist/op/gate-run-locator.d.ts

@@ -6,6 +6,7 @@
  * fact of a gate that asks a decision point too (#3835).
  */
 import type { ForgeKind } from "../pr-forge.js";
+import type { RunOrigin } from "../lifecycle/release-ledger.js";
 /** Where the job that recorded a pending fact runs, and what its forge needs to start it again. */
 export interface GateRunLocator {
     forge: ForgeKind;
@@ -37,4 +38,25 @@ export interface GateRunLocator {
 export declare function resolveGateRunLocator(env?: Record<string, string | undefined>): GateRunLocator | undefined;
 /** Whether `value` is a {@link GateRunLocator} a resume can use. */
 export declare function isGateRunLocator(value: unknown): value is GateRunLocator;
+/**
+ * The CI run a {@link GateRunLocator} names, in the shape a run and a deploy
+ * record carry (#4020). `runId` is the locator's `run`. Forge `github` and
+ * `forgejo` both become `github`, as `RunOrigin.forge` documents (the `url`
+ * names the host), and `gitlab` stays `gitlab`. `repo` and `url` carry over.
+ * The API base, attempt, job and workflow fields stay on the locator, which
+ * exists to start the job again.
+ */
+export declare function runOriginOfLocator(locator: GateRunLocator): {
+    runId: string;
+    runOrigin: RunOrigin;
+};
+/**
+ * The id of the CI run this process is in, or undefined outside CI: the
+ * GitHub (and Forgejo) run id, else the GitLab pipeline id. The same
+ * precedence `resolveRunId` (../lifecycle/release-ledger.ts) uses for a
+ * deploy record, so a gate and a deploy name the run alike.
+ */
+export declare function ciRunIdFromEnv(env?: Record<string, string | undefined>): string | undefined;
+/** The commit the CI job was started for: `GITHUB_SHA` (GitHub and Forgejo) or `CI_COMMIT_SHA` (GitLab). Undefined outside CI. */
+export declare function ciCommitFromEnv(env?: Record<string, string | undefined>): string | undefined;
 //# sourceMappingURL=gate-run-locator.d.ts.map

package/dist/op/gate-run-locator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-run-locator.d.ts","sourceRoot":"","sources":["../../src/op/gate-run-locator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,cAAc,GAAG,SAAS,CAwCvH;AAcD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE"}
+{"version":3,"file":"gate-run-locator.d.ts","sourceRoot":"","sources":["../../src/op/gate-run-locator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,cAAc,GAAG,SAAS,CAwCvH;AAcD,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAQxE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CASnG;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,GAAG,SAAS,CAExG;AAED,kIAAkI;AAClI,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,GAAG,SAAS,CAEzG"}