@intentius/chant 0.124.27 → 0.124.29

package/dist/cli/handlers/pr.js

@@ -29,6 +29,20 @@
  *
  * Every run writes `pr-plan.json` or `pr-apply.json` (`pr-report.schema.json`),
  * `change-set.json` and `pr-note.md` under `--output` (default `.chant/pr`). *
+ * `--events-json` (#4041, #4007) streams the stage's run events to stdout,
+ * one `run-event.schema.json` line each: the planning as a `plan` phase with
+ * a step per component, the gate's decision as a `gate` phase, and on
+ * pr-apply the apply's waves and components as `chant run --components`
+ * streams them. A component the apply does not start settles too, `blocked`
+ * behind a failed dependency or `already-applied` on a resumed apply.
+ * With or without it, pr-apply prints a line on stderr as each wave starts
+ * and as each component settles, so a job log shows the waves in order.
+ *
+ * `--report-url <s3 or file URL>` (#4007) copies `pr-<stage>.json`,
+ * `change-set.json` and, with `--events-json`, the events to
+ * `<url>/<pr>/<commit>/`, the events again as each wave and component
+ * settles (`../../pr-report-url.ts`).
+ *
  * `--member <name>` (#3465) runs a workspace member's loop: the member's
  * generated pipeline passes it from the member's directory. The gate is
  * recorded under `pr-<n>-<member>`, and the note and the statuses carry the
@@ -42,8 +56,12 @@ import { resolveCommit, resolveMergeBase } from "../../components/changed-files.
 import { deriveFanOut, fanOutRegistry } from "../../components/fan-out-support.js";
 import { applyPrSet, approvalOf, approversWithoutReview, decidePrGate, planPrSet, prReport, readOnlyLedger, resumePrSet, } from "../../components/pr-run.js";
 import { readFanOutAttempt, writeFanOutAttempt } from "../../components/fan-out-record.js";
+import { componentInputDigests, progressThatCarries } from "../../components/fan-out-inputs.js";
 import { samePlanDigest } from "../../lifecycle/plan-digest.js";
 import { gitGateLedgerPort } from "../../op/gate.js";
+import { emitGateStep, gateEventsOf, GATE_PHASE } from "../../run-event-stream.js";
+import { openCliRunEvents, refusesEventsWithJson } from "../run-events.js";
+import { openPrReportUpload, parseReportUrl, reportKey } from "../../pr-report-url.js";
 import { describePlanChanged, PR_APPLY_GATE, prApproveCommand, prNoteMarker, prOp, prStatusDescription, prStatusContext, prStatusState, renderPrNote, } from "../../pr-loop.js";
 import { FORGE_KINDS, forgeFromEnv, forgePrincipalOf } from "../../pr-forge.js";
 import { GITHUB_COMMENT_LIMIT, GITLAB_NOTE_LIMIT } from "../../plan-summary.js";
@@ -51,7 +69,7 @@ import { resolveCliBuildParams, parseParamFlags } from "../build-params-cli.js";
 import { formatError, formatInfo, formatSuccess, formatWarning } from "../format.js";
 import { findWorkspaceRoot } from "../../project-root.js";
 import { resolveChangedUnits } from "./fan-out.js";
-import { GATED_EXIT_CODE, recordAutoReleasesForRun } from "./run.js";
+import { GATED_EXIT_CODE, autoReleaseRun, recordAutoReleasesForRun } from "./run.js";
 /** Where the reports land unless `--output` says. */
 export const PR_REPORT_DIR = ".chant/pr";
 const fail = (message, hint) => {
@@ -179,15 +197,44 @@ async function checkMember(projectPath, names) {
     return name;
 }
 /** Plan every member the derivation selects. */
-function planAll(p) {
-    return planPrSet({ components: p.components, plan: p.plan, registry: p.registry, env: p.env, seededOutputs: p.seededOutputs });
+function planAll(p, onRunEvent) {
+    return planPrSet({
+        components: p.components,
+        plan: p.plan,
+        registry: p.registry,
+        env: p.env,
+        seededOutputs: p.seededOutputs,
+        ...(onRunEvent ? { onRunEvent } : {}),
+    });
+}
+/**
+ * How a stage's report settles its run's events (#4041): a refusal waits on
+ * a person, as a gate does, and exits the same way.
+ */
+function settleOf(status) {
+    switch (status) {
+        case "nothing":
+        case "planned":
+        case "applied":
+            return "ok";
+        case "refused":
+            return "gated";
+        default:
+            return "failed";
+    }
 }
-/** Write the report, the change set and the note; print the note's path. */
-function writeOutputs(ctx, report, note) {
+/** Write the report, the change set and the note, and hand the first two to `--report-url`'s upload. */
+function writeOutputs(ctx, report, note, upload) {
     const dir = resolve(ctx.args.output ?? PR_REPORT_DIR);
     mkdirSync(dir, { recursive: true });
-    writeFileSync(join(dir, `pr-${report.stage}.json`), JSON.stringify(report, null, 2) + "\n");
-    writeFileSync(join(dir, "change-set.json"), JSON.stringify(report.changeSet, null, 2) + "\n");
+    const files = [
+        [`pr-${report.stage}.json`, JSON.stringify(report, null, 2) + "\n"],
+        ["change-set.json", JSON.stringify(report.changeSet, null, 2) + "\n"],
+    ];
+    for (const [name, body] of files) {
+        writeFileSync(join(dir, name), body);
+        upload?.file(name, body);
+    }
     writeFileSync(join(dir, "pr-note.md"), note);
 }
 /** Post the note and the stage's status. A forge that refuses is a warning: the stage's outcome stands. */
@@ -231,27 +278,77 @@ function printMembers(report) {
         console.error(`  ${m.member.padEnd(20)} ${m.status.padEnd(12)} create ${c.create} update ${c.update} replace ${c.replace} delete ${c.delete}${m.error ? `  ${m.error}` : ""}`);
     }
 }
-async function finish(ctx, p, report) {
+async function finish(ctx, p, report, upload) {
     const note = noteFor(report, p.forge);
-    writeOutputs(ctx, report, note);
+    writeOutputs(ctx, report, note, upload);
     await publish(p.forge, report, note);
     if (ctx.args.json)
         console.log(JSON.stringify(report, null, 2));
 }
-/** chant components pr-plan --base <ref> --pr <n> [--env <env>] [--gate <name>] [--forge <kind>] [--output <dir>] [--json] */
-export async function runComponentsPrPlan(ctx) {
+/** Run a stage, end its stream as `failed` when the stage did not settle it, and finish its upload. */
+async function withStageEvents(stage, ctx, run) {
+    const events = {};
+    if (ctx.args.reportUrl !== undefined) {
+        const target = parseReportUrl(ctx.args.reportUrl);
+        if ("error" in target)
+            return fail(target.error);
+        events.target = target;
+    }
+    try {
+        return await run(events);
+    }
+    catch (err) {
+        events.stream?.settle("failed", err instanceof Error ? err.message : String(err));
+        throw err;
+    }
+    finally {
+        events.stream?.settle("failed", `${stage} stopped before it finished`);
+        if (events.upload) {
+            await events.upload.close();
+            console.error(formatInfo(`report  : ${events.upload.where}/`));
+        }
+    }
+}
+/**
+ * Open the stage's `--report-url` upload under its pull request and commit,
+ * when the flag was given. Its events are the lines `openCliRunEvents` writes.
+ */
+function openUpload(events, stage, pr, p) {
+    if (!events.target)
+        return undefined;
+    events.upload = openPrReportUpload({
+        target: events.target,
+        key: reportKey(pr, p.head, p.member),
+        stage,
+        warn: (message) => console.error(formatWarning({ message })),
+    });
+    return events.upload;
+}
+/** chant components pr-plan --base <ref> --pr <n> [--env <env>] [--gate <name>] [--forge <kind>] [--output <dir>] [--json] [--events-json] [--report-url <url>] */
+export function runComponentsPrPlan(ctx) {
+    if (refusesEventsWithJson(ctx.args, "the stage's report"))
+        return Promise.resolve(1);
+    return withStageEvents("pr-plan", ctx, (events) => prPlan(ctx, events));
+}
+async function prPlan(ctx, stage) {
     if (ctx.args.pr === undefined) {
         return fail("pr-plan needs the pull or merge request: --pr <n>", "Its approval is recorded under op pr-<n>, so one pull request's approval never answers another's.");
     }
     const p = await prepare(ctx, "plan");
     if (typeof p === "number")
         return p;
-    const set = await planAll(p);
     const op = prOp(ctx.args.pr, p.member);
+    const upload = openUpload(stage, "plan", ctx.args.pr, p);
+    // `--events-json` (#4041): planning, then where the approval stands.
+    const events = await openCliRunEvents(ctx.args, { kind: "component", name: `pr-plan ${op}`, cwd: resolve(".") }, upload?.line);
+    stage.stream = events;
+    events?.emit({ type: "run-start", waves: p.plan.waves });
+    const set = await planAll(p, events?.emit);
     let approval = { status: "pending" };
     if (p.plan.order.length > 0) {
         try {
-            approval = approvalOf(await decidePrGate(readOnlyLedger(gitGateLedgerPort()), { op, gate: p.gate, digest: set.doc.digest }));
+            const check = await emitGateStep(events?.emit, { op, gate: p.gate }, () => decidePrGate(readOnlyLedger(gitGateLedgerPort()), { op, gate: p.gate, digest: set.doc.digest }));
+            approval = approvalOf(check);
         }
         catch (err) {
             console.error(formatWarning({ message: `could not read the gate ledger, so the approval reads as pending: ${err instanceof Error ? err.message : String(err)}` }));
@@ -273,7 +370,9 @@ export async function runComponentsPrPlan(ctx) {
         approval,
         status,
     });
-    await finish(ctx, p, report);
+    await finish(ctx, p, report, upload);
+    // The plan stage settles on its planning: an approval still to come is what it reports, not a stop.
+    events?.settle(settleOf(status), status === "plan-failed" ? "a member failed to plan" : undefined);
     console.error(formatInfo(`pr-plan: ${report.members.length} member(s), ${status}`));
     printMembers(report);
     if (status === "planned") {
@@ -282,8 +381,13 @@ export async function runComponentsPrPlan(ctx) {
     }
     return status === "plan-failed" ? 1 : 0;
 }
-/** chant components pr-apply --base <ref> [--pr <n>] [--env <env>] [--gate <name>] [--forge <kind>] [--require-review] [--output <dir>] [--json] */
-export async function runComponentsPrApply(ctx) {
+/** chant components pr-apply --base <ref> [--pr <n>] [--env <env>] [--gate <name>] [--forge <kind>] [--require-review] [--output <dir>] [--json] [--events-json] [--report-url <url>] */
+export function runComponentsPrApply(ctx) {
+    if (refusesEventsWithJson(ctx.args, "the stage's report"))
+        return Promise.resolve(1);
+    return withStageEvents("pr-apply", ctx, (events) => prApply(ctx, events));
+}
+async function prApply(ctx, stage) {
     const { args } = ctx;
     if (args.requireReview && !args.forge)
         return fail("--require-review reads the pull request's reviews, so it needs --forge <kind>");
@@ -300,6 +404,13 @@ export async function runComponentsPrApply(ctx) {
         }
     }
     const op = pr === null ? "pr-unknown" : prOp(pr, p.member);
+    // The run id the release records carry, chosen before the run so that
+    // `--events-json` (#4041, #4007) names the run by it too.
+    const release = autoReleaseRun(`${op}-${Date.now()}`);
+    const upload = openUpload(stage, "apply", pr, p);
+    const events = await openCliRunEvents(args, { kind: "component", name: `pr-apply ${op}`, runId: release.runId, cwd: resolve(".") }, upload?.line);
+    stage.stream = events;
+    events?.emit({ type: "run-start", waves: p.plan.waves });
     // `--resume` (#3464): an earlier attempt at this change on this commit
     // applied part of an approved set. When the members left are covered by
     // it and its approval still stands, finish it under that approval.
@@ -313,11 +424,26 @@ export async function runComponentsPrApply(ctx) {
             return fail(`--resume: could not read "${args.resume}": ${err instanceof Error ? err.message : String(err)}`);
         }
     }
-    const resumed = pr !== null && p.plan.order.length > 0 && attempt ? await tryResume(p, attempt, args.resume, op) : undefined;
-    const set = resumed?.set ?? (await planAll(p));
+    // What each component would apply now (#4081): progress carries only where it is unchanged.
+    const inputsNow = resumePath ? componentInputDigests(p.components, { projectRoot: resolve("."), env: p.env }) : {};
+    const resumed = pr !== null && p.plan.order.length > 0 && attempt ? await tryResume(p, attempt, args.resume, op, inputsNow) : undefined;
+    // The components an earlier attempt applied settle first (#4007), each in
+    // the wave the derivation gave it, which is the run-start's.
+    const log = applyLog();
+    if (resumed) {
+        const waveOf = new Map(p.plan.waves.flatMap((wave, i) => wave.map((name) => [name, i + 1])));
+        for (const component of p.plan.order.filter((name) => resumed.completed.includes(name))) {
+            const body = { type: "component-settle", wave: waveOf.get(component), component, status: "already-applied" };
+            events?.emit(body);
+            log(body);
+        }
+        emitResumedGate(events, op, p.gate, resumed.check);
+    }
+    const set = resumed?.set ?? (await planAll(p, events?.emit));
     const base = { stage: "apply", pr, env: p.env, ...(p.member ? { member: p.member } : {}), base: p.base, head: p.head, op, gate: p.gate, plan: p.plan, signal: p.signal, set };
-    const stop = async (report, code) => {
-        await finish(ctx, p, report);
+    const stop = async (report, code, settle) => {
+        events?.settle(settle ?? settleOf(report.status), report.status === "plan-failed" || report.status === "failed" ? report.message ?? `pr-apply ${report.status}` : undefined);
+        await finish(ctx, p, report, upload);
         console.error((code === 0 ? formatInfo : (m) => formatWarning({ message: m }))(`pr-apply: ${report.status}${report.refusal ? ` (${report.refusal})` : ""}`));
         if (report.message)
             console.error(report.message);
@@ -344,16 +470,25 @@ export async function runComponentsPrApply(ctx) {
             message: "A member failed to plan, so there is no plan to compare with the approved one. Nothing was applied.",
         }), 1);
     }
+    // #4022: keep the change set the gate binds on chant/lifecycle under its
+    // digest before deciding the gate, so the plan an approval bound, or the
+    // one a pending fact waits on, can be read once this job is gone.
+    await storeChangeSetForGate(ctx, p, set.doc);
     let approval;
     if (resumed) {
         approval = resumed.approval;
     }
     else {
-        const check = await decidePrGate(gitGateLedgerPort(), {
+        const check = await emitGateStep(events?.emit, { op, gate: p.gate }, () => decidePrGate(gitGateLedgerPort(), {
             op,
             gate: p.gate,
             digest: set.doc.digest,
             description: `pull request #${pr}: ${p.plan.order.join(", ")}`,
+        }), (unapproved) => {
+            const a = approvalOf(unapproved);
+            return a.status === "changed"
+                ? describePlanChanged({ op, gate: p.gate, digest: set.doc.digest, approval: a })
+                : `No approval stands for this plan. Approve it: ${prApproveCommand({ op, gate: p.gate, digest: set.doc.digest })}`;
         });
         approval = approvalOf(check);
         if (!check.satisfied) {
@@ -378,21 +513,18 @@ export async function runComponentsPrApply(ctx) {
         }
         const strangers = approversWithoutReview(approval.approvedBy ?? [], reviewers);
         if (strangers.length > 0) {
-            return stop(prReport({
-                ...base,
-                approval,
-                status: "refused",
-                refusal: "not-a-reviewer",
-                message: `The plan is approved by ${strangers.join(", ")}, who ${strangers.length === 1 ? "has" : "have"} no approving review on #${pr}` +
-                    ` (approving reviews: ${reviewers.join(", ") || "none"}). Nothing was applied. ` +
-                    `An approval counts when it names the reviewer the way the forge does: ${p.forge.principalOf("<login>")}.`,
-            }), GATED_EXIT_CODE);
+            const message = `The plan is approved by ${strangers.join(", ")}, who ${strangers.length === 1 ? "has" : "have"} no approving review on #${pr}` +
+                ` (approving reviews: ${reviewers.join(", ") || "none"}). Nothing was applied. ` +
+                `An approval counts when it names the reviewer the way the forge does: ${p.forge.principalOf("<login>")}.`;
+            emitReviewStop(events, message);
+            return stop(prReport({ ...base, approval, status: "refused", refusal: "not-a-reviewer", message }), GATED_EXIT_CODE);
         }
     }
     // The record is written before the first component runs and again as each
     // one settles, so a run killed partway still knows what applied.
     const prior = resumed ? { completed: resumed.completed, outputs: resumed.outputs } : { completed: [], outputs: {} };
     const completedSoFar = new Set(prior.completed);
+    const inputsSoFar = Object.fromEntries(prior.completed.filter((name) => inputsNow[name] !== undefined).map((name) => [name, inputsNow[name]]));
     const failedSoFar = [];
     const outputsSoFar = { ...prior.outputs };
     const record = {
@@ -413,6 +545,7 @@ export async function runComponentsPrApply(ctx) {
             completed: [...completedSoFar].sort(),
             failed: [...failedSoFar].sort(),
             outputs: outputsSoFar,
+            inputs: Object.fromEntries(Object.entries(inputsSoFar).sort(([a], [b]) => a.localeCompare(b))),
             prApply: record,
         });
     };
@@ -424,11 +557,19 @@ export async function runComponentsPrApply(ctx) {
         env: p.env,
         set,
         ...(resumed ? { resumed: prior } : {}),
+        // The apply is this run's waves, so the fan-out's own run framing is
+        // dropped. The log's lines go to stderr with or without --events-json.
+        onRunEvent: (body) => {
+            events?.nested(body);
+            log(body);
+        },
         ...(resumePath
             ? {
                 onComponentSettled: (settled, outputs) => {
                     if (settled.status === "ok") {
                         completedSoFar.add(settled.component);
+                        if (inputsNow[settled.component] !== undefined)
+                            inputsSoFar[settled.component] = inputsNow[settled.component];
                         if (outputs)
                             outputsSoFar[settled.component] = outputs;
                     }
@@ -441,7 +582,7 @@ export async function runComponentsPrApply(ctx) {
             : {}),
     });
     recordAttempt();
-    await recordAutoReleasesForRun(applied.run.results, p.env, `${op}-${Date.now()}`, resolveAutoReleaseDisabled(p.config, args.noReleaseRecord));
+    await recordAutoReleasesForRun(applied.run.results, p.env, release.runId, resolveAutoReleaseDisabled(p.config, args.noReleaseRecord), release.runOrigin);
     const report = prReport({
         ...base,
         approval,
@@ -449,19 +590,102 @@ export async function runComponentsPrApply(ctx) {
         members: applied.members,
         ...(resumed ? { resumed: resumed.completed } : {}),
     });
-    const code = await stop(report, applied.status === "applied" ? 0 : 1);
+    // A component that stopped at a gate of its own leaves the apply waiting on a person.
+    const code = await stop(report, applied.status === "applied" ? 0 : 1, applied.run.status === "gated" ? "gated" : undefined);
     if (applied.status === "applied")
         console.error(formatSuccess(`applied the plan ${report.digest} approved by ${(approval.approvedBy ?? []).join(", ")}`));
     return code;
 }
+/** What a component's settle says in the job log. */
+function settleWords(body) {
+    switch (body.status) {
+        case "ok":
+            return "applied";
+        case "failed":
+            return "failed";
+        case "gated":
+            return "stopped at its own gate";
+        case "waiting":
+            return "waiting on a decision";
+        case "blocked":
+            return `blocked by ${body.blockedBy ?? "a dependency"}, not run`;
+        case "already-applied":
+            return "already applied in an earlier attempt";
+    }
+}
+/**
+ * pr-apply's job log (#4007): a line on stderr as each wave starts and as
+ * each component settles, so the log shows the waves in order while they run.
+ */
+function applyLog() {
+    let waves = 0;
+    return (body) => {
+        if (body.type === "run-start")
+            waves = body.waves?.length ?? 0;
+        else if (body.type === "wave-start")
+            console.error(formatInfo(`wave ${body.wave}${waves ? `/${waves}` : ""}: ${body.components.join(", ")}`));
+        else if (body.type === "component-settle")
+            console.error(formatInfo(`  ${body.component}: ${settleWords(body)}`));
+    };
+}
+/** A resumed apply's gate (#3464), decided against the approved digest, as the run's `gate` phase. */
+function emitResumedGate(events, op, gate, check) {
+    if (!events)
+        return;
+    const where = { component: null, phase: GATE_PHASE, step: `gate:${gate}` };
+    events.emit({ type: "phase-start", component: null, phase: GATE_PHASE });
+    events.emit({ type: "step-start", ...where });
+    for (const body of gateEventsOf(check, { ...where, op, gate }, { durationMs: null }))
+        events.emit(body);
+    events.emit({ type: "phase-settle", component: null, phase: GATE_PHASE, status: check.satisfied ? "ok" : "gated" });
+}
+/** An approval by someone with no approving review (#3183) stops the apply: a `review` phase that settles `gated`. */
+function emitReviewStop(events, message) {
+    if (!events)
+        return;
+    events.emit({ type: "phase-start", component: null, phase: "review" });
+    events.emit({ type: "step-start", component: null, phase: "review", step: "review" });
+    events.emit({ type: "step-settle", component: null, phase: "review", step: "review", status: "gated", durationMs: null, message });
+    events.emit({ type: "phase-settle", component: null, phase: "review", status: "gated" });
+}
+/**
+ * Store `doc` under its digest with its entries mapped onto the member's
+ * graph (`storeGateChangeSet`), and push. A failure is a warning: the gate
+ * decides the same either way.
+ */
+async function storeChangeSetForGate(ctx, p, doc) {
+    const { storeGateChangeSet, gateGraphReader } = await import("../../lifecycle/gate-change-set.js");
+    const { pushLifecycleReport } = await import("../../lifecycle/git.js");
+    const graphArgs = [
+        ...(ctx.args.param ?? []).flatMap((kv) => ["--param", kv]),
+        ...(ctx.args.paramsFile ? ["--params-file", ctx.args.paramsFile] : []),
+    ];
+    try {
+        const stored = await storeGateChangeSet({ doc, cwd: resolve("."), at: p.head, readGraph: gateGraphReader(graphArgs) });
+        if (stored.warning)
+            console.error(formatWarning({ message: stored.warning }));
+        // The push's own outcome is said by the gate's pending fact, or by the
+        // release records the apply writes, which push the same branch.
+        if (stored.written)
+            await pushLifecycleReport();
+    }
+    catch (err) {
+        console.error(formatWarning({ message: `could not store the change set ${doc.digest}: ${err instanceof Error ? err.message : String(err)}` }));
+    }
+}
 /**
  * Whether `attempt` finishes here (#3464). It carries only when it was made
  * by an apply of this pull request's gate, on this commit, for this
  * derivation; when its approval still stands; and when every member left is
  * covered by the approved set. Otherwise it says why on stderr and the apply
  * runs as it would with no record.
+ *
+ * Of the components it applied, only those whose input digest is the same
+ * now carry (#4081), as in `components fan-out --resume`. One that changed
+ * runs again, under the same approval when the approved set covers its new
+ * plan. A record without input digests carries nothing.
  */
-async function tryResume(p, attempt, file, op) {
+async function tryResume(p, attempt, file, op, inputsNow) {
     const skip = (why) => {
         console.error(formatWarning({ message: `--resume: "${file}" does not carry: ${why}`, hint: "Every member is planned again, and the plan needs an approval of its own." }));
         return undefined;
@@ -477,6 +701,14 @@ async function tryResume(p, attempt, file, op) {
         return skip("the change selects other components than it did");
     if (attempt.completed.length === 0)
         return undefined;
+    const split = progressThatCarries(attempt, inputsNow);
+    if (split.unrecorded)
+        return skip("it does not record what each component applied, since it was written before chant recorded component inputs");
+    for (const name of split.changed)
+        console.error(formatInfo(`${name}: changed since the earlier attempt, so it runs again`));
+    if (split.carried.length === 0)
+        return undefined;
+    const completed = split.carried;
     let check;
     try {
         check = await decidePrGate(readOnlyLedger(gitGateLedgerPort()), { op, gate: p.gate, digest: record.digest });
@@ -486,7 +718,7 @@ async function tryResume(p, attempt, file, op) {
     }
     if (!check.satisfied)
         return skip(`no approval stands for the plan it applied (${record.digest}) any more`);
-    const outputs = Object.fromEntries(Object.entries(attempt.outputs).filter(([name]) => attempt.completed.includes(name)));
+    const outputs = Object.fromEntries(Object.entries(attempt.outputs).filter(([name]) => completed.includes(name)));
     const resumed = await resumePrSet({
         components: p.components,
         plan: p.plan,
@@ -494,10 +726,10 @@ async function tryResume(p, attempt, file, op) {
         env: p.env,
         seededOutputs: p.seededOutputs,
         record,
-        completed: attempt.completed,
+        completed,
     });
     if (!resumed.ok)
         return skip(`what is left is not what was approved. ${resumed.reasons.join("; ")}`);
-    console.error(formatInfo(`resume  : ${attempt.completed.join(", ")} applied in an earlier attempt; applying ${resumed.plan.order.join(", ") || "nothing more"} under the approval of ${record.digest}`));
-    return { plan: resumed.plan, set: resumed.set, approval: approvalOf(check), completed: attempt.completed, outputs };
+    console.error(formatInfo(`resume  : ${completed.join(", ")} applied in an earlier attempt; applying ${resumed.plan.order.join(", ") || "nothing more"} under the approval of ${record.digest}`));
+    return { plan: resumed.plan, set: resumed.set, check, approval: approvalOf(check), completed, outputs };
 }

package/dist/cli/handlers/promote.d.ts

@@ -12,6 +12,13 @@
  * failed or stopped at a gate, so the ledger never misses a deploy that
  * happened. Unlike an auto-recorded release, the record is what these
  * commands are for, so a failed write is an error rather than a warning.
+ * A run that applied partly, or failed, also appends a deploy outcome
+ * (#4035, ../../lifecycle/deploy-outcome.ts) naming what it did to each
+ * component, so `workspace status` reads the environment as mixed.
+ *
+ * `rollback --release` (#4035) is a promote of an earlier release into the
+ * environment: every component of the release at the digest the environment
+ * ran from it, through the release gate `promote --release` binds (#4045).
  */
 import type { CommandContext } from "../registry.js";
 export declare function runComponentsPromote(ctx: CommandContext): Promise<number>;

package/dist/cli/handlers/promote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAuCH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAmPlD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA8C/E;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BhF;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BhF"}
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA+CH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAukBlD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2E/E;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsChF;AAsCD,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BhF"}