@intentius/chant 0.124.27 → 0.124.29

package/dist/workspace/status.d.ts

@@ -32,7 +32,10 @@
  */
 import type { CommandContext } from "../cli/registry.js";
 import { type ReleaseRecord } from "../lifecycle/release-ledger.js";
+import { type RevokedRelease } from "../lifecycle/release-revocation.js";
 import { type ReleasePlan } from "../lifecycle/plan-ledger.js";
+import { type DeployOutcome } from "../lifecycle/deploy-outcome.js";
+import { type MixedEnvironment } from "../lifecycle/mixed-environment.js";
 import { type WorkLeaseState } from "../lifecycle/work-lease.js";
 import { type CheckoutHead } from "./records-checkout.js";
 import { type ReplicationState } from "./wip.js";
@@ -41,6 +44,11 @@ import { type BoxIntent } from "./box-intent.js";
 import { type MemberFields } from "./kinds.js";
 import { type FactoryView, type ListingView, type Plantable } from "./box-factory.js";
 import { type ErrorLocation } from "./declaration.js";
+import type { FlagDecision, FlagValue } from "./flags.js";
+import type { OverlapReport } from "./overlap.js";
+import type { WorkLink } from "./work.js";
+import { type PromotionStep } from "./promotion-order.js";
+import { type ReleaseSignatureCheck } from "./identity-gate-rule.js";
 import { type GateLedgerReader, type StatusGate, type StatusGateLedger } from "./status-gates.js";
 import { readMemberStewards, type StatusSteward, type StewardReasonCode } from "./status-stewards.js";
 /** The version of the `status` output this chant writes. */
@@ -78,6 +86,18 @@ export interface StatusRelease {
     runId: string;
     timestamp: string;
     actor: string;
+    /** Who approved the change at its gate (#1035), when it had one. Null for an ungated release. */
+    approver: string | null;
+    /** The gate resolution that admitted the release (#4020): the gate and when it was resolved. Null for an ungated release and for one recorded before chant 0.124.28. */
+    admission: {
+        op: string;
+        gate: string;
+        resolvedAt: string;
+    } | null;
+    /** The release this deploy was made from (#4043): the `releaseDigest` of `_releases/<releaseDigest>.json`. Null for a deploy that named no release and for one recorded before chant 0.124.29. */
+    releaseDigest: string | null;
+    /** The label that release was cut with (#4043), or null when it has none, when no release is named, or when the cut can't be read. Chant 0.124.29 and newer write it. */
+    releaseLabel: string | null;
     /** Read flags, such as `legacy-digest` (#2514). */
     flags: string[];
     /**
@@ -89,6 +109,24 @@ export interface StatusRelease {
      * hasn't fetched yet.
      */
     plan: ReleasePlan | null;
+    /**
+     * Set when the deploy names a release (`releaseDigest` on its record) that
+     * was cut from a revoked commit (#4033, ws-105): the revoked tag on that
+     * commit, the release and its label, and the line that rolls the component
+     * back. Absent otherwise, and from chant older than 0.124.29.
+     */
+    revoked?: StatusRevokedRelease;
+}
+/** A release an environment runs that was cut from a revoked commit (#4033). */
+export interface StatusRevokedRelease extends RevokedRelease {
+    /**
+     * The command that rolls the environment back, run in the member's
+     * directory: `chant components rollback <env> --release <label|digest>`
+     * naming the newest release the environment ran before this one that is
+     * still kept and not revoked (#4035), or `chant components rollback <env>
+     * --component <component>` when there is none.
+     */
+    rollback: string;
 }
 export interface StatusLedger {
     /** `members` for `_members/<member>/<env>/releases.jsonl`, `flat` for `<env>/releases.jsonl`. */
@@ -107,6 +145,14 @@ export interface StatusEnvironment {
         code: StatusReasonCode;
         message: string;
     } | null;
+    /**
+     * Set when the environment runs a mix (#4035): a promote, rollback or
+     * redeploy left a component failed or gated and nothing has been recorded
+     * for it since, or its components' latest records name more than one
+     * release. Each component with what it runs, and the lines that settle it.
+     * Absent otherwise, and from chant older than 0.124.29.
+     */
+    mixed?: MixedEnvironment;
 }
 export type CompareState = "same" | "differs" | "only-env" | "only-compare";
 export interface StatusCompare {
@@ -149,6 +195,61 @@ export interface StatusMember {
         code: StewardReasonCode;
         message: string;
     }[];
+    /**
+     * The member's promotion order (#4030): the literal entries of the
+     * `environments` array in its chant.config.ts, in order, each with whether
+     * it is marked canary. A release moves from each step to the next. `[]`
+     * when the config declares no environments, null when it could not be read.
+     * Added in contract 1 by chant 0.124.28.
+     */
+    promotionOrder: PromotionStep[] | null;
+    /**
+     * The member's release cuts (#4026, ws-104), oldest first, each with
+     * whether its signature verifies for its actor against the signers at
+     * base and, when the declaration names a `release` gate with a class,
+     * whether the actor is in it (#4031). `[]` when none is cut, null when the
+     * cuts could not be read. Added in contract 1 by chant 0.124.28.
+     */
+    releaseCuts: StatusReleaseCut[] | null;
+    /**
+     * The member's feature flags (#4024): each record of a declared flag kind
+     * that names this member, with its value per environment and the work item
+     * it hides. Sorted by id. `[]` when none names it, null when the flag
+     * records could not be read. Called `featureFlags` because a release
+     * record's `flags` already means something else. Added in contract 1 by
+     * chant 0.124.29.
+     */
+    featureFlags: StatusFeatureFlag[] | null;
+}
+/** One feature flag of a member (#4024), as `status --json` lists it. */
+export interface StatusFeatureFlag {
+    /** The flag's name, its record's id. */
+    id: string;
+    /** The build parameter of the member the flag sets. */
+    param: string;
+    owner: string;
+    /** The value per environment, as the record writes it. An environment it leaves out builds with the parameter's default. */
+    values: Record<string, FlagValue>;
+    /** The work item the flag hides, with its state (null when no record has it), or null when the record names none. */
+    work: WorkLink | null;
+    /** Each decision the work item implements, with its state and whether it is confirmed. */
+    implements: FlagDecision[];
+    /** True when every decision the work item implements is confirmed: the flag is due for removal (check WSP118). */
+    stale: boolean;
+    /** The kind file and the record file, from the workspace root. */
+    kind: string;
+    path: string;
+}
+/** One cut of a member's release (#4031), as `status --json` lists it. */
+export interface StatusReleaseCut {
+    releaseDigest: string;
+    label: string | null;
+    /** The release's commit, or null when its release file can't be read. */
+    commit: string | null;
+    actor: string;
+    timestamp: string;
+    signature: string | null;
+    signatureCheck: ReleaseSignatureCheck;
 }
 /** The most paths `ship.pending.paths` lists; `files` still counts them all. */
 export declare const SHIP_PENDING_PATHS_MAX = 200;
@@ -275,6 +376,14 @@ export type StatusDocument = {
     acceptance: StatusAcceptance[];
     /** How far each ref the box's replicate policy names is from its remote (#3172), read locally; null when no box declares one. */
     replication: ReplicationState | null;
+    /**
+     * Overlap between in-flight work items (#4025): pairs of items whose
+     * linked commits touch the same files, or that both reach one entry of
+     * a change set a pending or approved gate binds. A report, never a
+     * lock. Null when no work kind is declared or the work records or
+     * history can't be read. Added in contract 1 by chant 0.124.29.
+     */
+    overlap: OverlapReport | null;
     summary: {
         members: number;
         released: number;
@@ -302,13 +411,21 @@ export interface StatusQuery {
     compareTo?: string;
     /** Reads one ledger; the lifecycle reader unless a test swaps it. */
     readLedger?: LedgerReader;
+    /** Reads the deploy outcomes beside one ledger (#4035), given the ledger's path; the lifecycle reader unless a test swaps it. */
+    readOutcomes?: OutcomeReader;
     /** Reads one member's gate ledger directory; git unless a test swaps it. */
     readGates?: GateLedgerReader;
     /** The instant a gate's expiry is measured against; now by default. */
     now?: string;
     /** Reads one member's stewards; the declaration and ledger reader unless a test swaps it. */
     readStewards?: typeof readMemberStewards;
+    /** Reads one member's promotion order from its directory; its chant.config.ts unless a test swaps it. */
+    readPromotionOrder?: (dir: string) => Promise<PromotionStep[] | null>;
 }
+/** Reads the deploy outcomes (#4035) in the directory of the ledger at `path`. */
+type OutcomeReader = (path: string, cwd: string) => Promise<DeployOutcome[]>;
+/** The per-component rollback line, for a component an environment runs from a revoked release when no earlier release can be named (#4033). */
+export declare function rollbackLine(env: string, component: string): string;
 export declare function compareEnvironments(a: StatusEnvironment, b: StatusEnvironment): StatusCompare;
 /** Find the workspace, read every member's ledger and build the document `--json` prints. */
 export declare function workspaceStatus(query: StatusQuery): Promise<StatusDocument>;

package/dist/workspace/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/workspace/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGtD,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAgC,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAE5E,OAAO,EAAgB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAyC,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAqD,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACtI,OAAO,EAA2G,KAAK,aAAa,EAAe,MAAM,eAAe,CAAC;AAIzK,OAAO,EAAsC,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnI,OAAO,EAAwB,kBAAkB,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAIzH,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,8EAA8E,CAAC;AAEnH,wCAAwC;AACxC,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C,gFAAgF;AAChF,eAAO,MAAM,WAAW,aAAa,CAAC;AAItC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,oDAKU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,iFAAoB,CAAC;AAE1D,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,kFAAuB,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,0NAYW,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,wHAAwH;AACxH,eAAO,MAAM,WAAW,QAAsC,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0GAA0G;IAC1G,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;;;OAOG;IACH,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,iGAAiG;IACjG,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAC3B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,+EAA+E;IAC/E,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CAC/G;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/B,yEAAyE;IACzE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,mCAAmC;IACnC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,4FAA4F;IAC5F,QAAQ,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,UAAU,EAAE,gBAAgB,CAAC;IAC7B,2GAA2G;IAC3G,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,6HAA6H;IAC7H,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB,4HAA4H;IAC5H,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,kEAAkE;IAClE,cAAc,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChE;AAED,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0IAA0I;IAC1I,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACxG;;;;;;OAMG;IACH,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,mEAAmE;AACnE,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACzE,kIAAkI;IAClI,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC;;;;;OAKG;IACH,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,0IAA0I;IAC1I,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,wHAAwH;IACxH,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,gIAAgI;IAChI,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,iHAAiH;IACjH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qIAAqI;IACrI,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,0IAA0I;IAC1I,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1F;AAED,yHAAyH;AACzH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC;IAC9D,wHAAwH;IACxH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GACtB;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClD,8HAA8H;IAC9H,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,mHAAmH;IACnH,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,mJAAmJ;IACnJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,6IAA6I;IAC7I,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,iIAAiI;IACjI,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9F,GACD;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAA;KAAE,CAAC;CACnF,CAAC;AAEN,KAAK,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5G,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,YAAY,CAAC,EAAE,OAAO,kBAAkB,CAAC;CAC1C;AA+ID,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAW7F;AAED,6FAA6F;AAC7F,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAsHjF;AA2BD,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC7E;AAeD,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,MAAM,CA2DvF"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/workspace/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAGtD,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAsF,KAAK,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAC1J,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAyD,KAAK,gBAAgB,EAAqB,MAAM,gCAAgC,CAAC;AACjJ,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAqC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAgC,KAAK,gBAAgB,EAAE,MAAM,OAAO,CAAC;AAE5E,OAAO,EAAgB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAyC,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AACnF,OAAO,EAAqD,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AACtI,OAAO,EAA2G,KAAK,aAAa,EAAe,MAAM,eAAe,CAAC;AAEzK,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAuB,aAAa,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEjF,OAAO,EAAiD,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEjH,OAAO,EAAsC,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACnI,OAAO,EAAwB,kBAAkB,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAIzH,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,8EAA8E,CAAC;AAEnH,wCAAwC;AACxC,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C,gFAAgF;AAChF,eAAO,MAAM,WAAW,aAAa,CAAC;AAItC;;;GAGG;AACH,eAAO,MAAM,mBAAmB,oDAKU,CAAC;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,iFAAoB,CAAC;AAE1D,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,kFAAuB,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,0NAYW,CAAC;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,wHAAwH;AACxH,eAAO,MAAM,WAAW,QAAsC,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0GAA0G;IAC1G,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,wKAAwK;IACxK,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnE,kMAAkM;IAClM,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yKAAyK;IACzK,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;;;;;OAOG;IACH,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,iGAAiG;IACjG,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC;IAC3B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,+EAA+E;IAC/E,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,MAAM,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC5B,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC;CAC/G;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/B,yEAAyE;IACzE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,mCAAmC;IACnC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,4FAA4F;IAC5F,QAAQ,EAAE,OAAO,CAAC;IAClB,iGAAiG;IACjG,UAAU,EAAE,gBAAgB,CAAC;IAC7B,2GAA2G;IAC3G,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,6HAA6H;IAC7H,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB,4HAA4H;IAC5H,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,kEAAkE;IAClE,cAAc,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/D;;;;;;OAMG;IACH,cAAc,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACvC;;;;;;OAMG;IACH,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACvC;;;;;;;OAOG;IACH,YAAY,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;CAC1C;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,4HAA4H;IAC5H,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,qHAAqH;IACrH,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,0FAA0F;IAC1F,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,kHAAkH;IAClH,KAAK,EAAE,OAAO,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,qBAAqB,CAAC;CACvC;AAED,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0IAA0I;IAC1I,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACxG;;;;;;OAMG;IACH,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CACpD;AAED,mEAAmE;AACnE,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IACzE,kIAAkI;IAClI,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC;;;;;OAKG;IACH,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,0IAA0I;IAC1I,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,wHAAwH;IACxH,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,gIAAgI;IAChI,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,iHAAiH;IACjH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qIAAqI;IACrI,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,0IAA0I;IAC1I,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1F;AAED,yHAAyH;AACzH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC;IAC9D,wHAAwH;IACxH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GACtB;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClD,8HAA8H;IAC9H,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,mHAAmH;IACnH,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,mJAAmJ;IACnJ,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,6IAA6I;IAC7I,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,iIAAiI;IACjI,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACrC;;;;;;OAMG;IACH,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC9F,GACD;IACE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAA;KAAE,CAAC;CACnF,CAAC;AAEN,KAAK,YAAY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5G,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,CAAC,EAAE,YAAY,CAAC;IAC1B,iIAAiI;IACjI,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,YAAY,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACzC,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC;CACvE;AA8FD,kFAAkF;AAClF,KAAK,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;AAO7E,gJAAgJ;AAChJ,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAqID,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,iBAAiB,GAAG,aAAa,CAW7F;AAED,6FAA6F;AAC7F,wBAAsB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CA4IjF;AAiFD,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC7E;AAeD,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,MAAM,CA0GvF"}

package/dist/workspace/status.js

@@ -37,7 +37,10 @@ import { formatError } from "../cli/format.js";
 import { GATES_DIR } from "../lifecycle/gate-ledger.js";
 import { readPathSha } from "../lifecycle/git.js";
 import { latestPerComponent, readReleaseLedger } from "../lifecycle/release-ledger.js";
+import { describeRevocation, revokedCommitsAt, revokedReleaseLookup } from "../lifecycle/release-revocation.js";
 import { readReleasePlan } from "../lifecycle/plan-ledger.js";
+import { readDeployOutcomes } from "../lifecycle/deploy-outcome.js";
+import { mixedEnvironment, releaseRollbackLine, rollbackTarget } from "../lifecycle/mixed-environment.js";
 import { listWorkLeases } from "../lifecycle/work-lease.js";
 import { readCheckoutHead, worktreeChanges } from "./records-checkout.js";
 import { policyView, replicationState } from "./wip.js";
@@ -47,7 +50,9 @@ import { resolveBoxIntents, unresolvedIntent } from "./box-intent.js";
 import { loadKindRegistry, resolveMemberFields } from "./kinds.js";
 import { factoryView, listingView, plantability, treeBytes } from "./box-factory.js";
 import { declaredRecordKinds, extensionsAt, readDeclaration, readerVersion, WorkspaceReadError } from "./declaration.js";
-import { gateAdmissionFrom } from "./identity.js";
+import { readMemberPromotionOrder } from "./promotion-order.js";
+import { gateAdmissionFrom, releaseRuleFrom } from "./identity.js";
+import { checkReleaseSignature } from "./identity-gate-rule.js";
 import { scopeSource } from "./write-scope.js";
 import { GATE_REASON_CODES, readMemberGates } from "./status-gates.js";
 import { STEWARD_REASON_CODES, readMemberStewards } from "./status-stewards.js";
@@ -185,7 +190,12 @@ async function shipView(member, cwd, read) {
     return view;
 }
 const defaultReader = (path, cwd) => readReleaseLedger(path.slice(0, -"/releases.jsonl".length), { cwd });
-async function readEnvironment(member, env, cwd, read) {
+const defaultOutcomeReader = (path, cwd) => readDeployOutcomes(path.slice(0, -"/releases.jsonl".length), { cwd }).catch(() => []);
+/** The per-component rollback line, for a component an environment runs from a revoked release when no earlier release can be named (#4033). */
+export function rollbackLine(env, component) {
+    return `chant components rollback ${env} --component ${component}`;
+}
+async function readEnvironment(member, env, cwd, read, revokedOf = async () => null, readOutcomes = defaultOutcomeReader) {
     const ledger = await ledgerFor(member, env, cwd);
     let records;
     let malformed;
@@ -208,6 +218,40 @@ async function readEnvironment(member, env, cwd, read) {
     // member (see plan-ledger.ts's readReleasePlan doc).
     const planPrefix = ledger.layout === "members" ? `${MEMBERS_DIR}/${member.name}/` : "";
     const latest = [...latestPerComponent(records).values()].sort((a, b) => (a.component < b.component ? -1 : a.component > b.component ? 1 : 0));
+    // #4043: a release item names the label of the release it was deployed from.
+    const memberDir = resolve(cwd, member.dir);
+    let labels = new Map();
+    let labelsRead = false;
+    const readLabels = async () => {
+        if (labelsRead)
+            return labels;
+        labelsRead = true;
+        try {
+            const { readCuts, labelsByDigest } = await import("../lifecycle/release-store.js");
+            labels = labelsByDigest((await readCuts({ cwd: memberDir })).cuts);
+        }
+        catch {
+            // The label is a convenience; the digest is the join key.
+        }
+        return labels;
+    };
+    if (latest.some((r) => r.releaseDigest !== undefined))
+        await readLabels();
+    // #4035: whether a release a rollback could go back to is kept and not revoked.
+    const checks = new Map();
+    const check = (digest) => {
+        let found = checks.get(digest);
+        if (!found) {
+            found = (async () => {
+                const { readRelease } = await import("../lifecycle/release-store.js");
+                const kept = (await readRelease(digest, { cwd: memberDir }).catch(() => null)) !== null;
+                return { kept, revoked: kept && (await revokedOf(digest)) !== null };
+            })();
+            checks.set(digest, found);
+        }
+        return found;
+    };
+    const back = { records, check, label: async (digest) => (await readLabels()).get(digest) };
     const releases = await Promise.all(latest.map(async (r) => ({
         component: r.component,
         digest: r.digest,
@@ -216,9 +260,15 @@ async function readEnvironment(member, env, cwd, read) {
         runId: r.runId,
         timestamp: r.timestamp,
         actor: r.actor,
+        approver: r.approver ?? null,
+        admission: r.admission ? { op: r.admission.op, gate: r.admission.gate, resolvedAt: r.admission.resolvedAt } : null,
+        releaseDigest: r.releaseDigest ?? null,
+        releaseLabel: (r.releaseDigest !== undefined ? labels.get(r.releaseDigest) : undefined) ?? null,
         flags: [...(r.flags ?? [])],
         plan: await readReleasePlan(r.digest, { cwd, prefix: planPrefix }),
+        ...(await revokedItem(r, env, revokedOf, back)),
     })));
+    const mixed = await mixedEnvironment({ env, records, outcomes: await readOutcomes(ledger.path, cwd), label: back.label, check });
     return {
         env,
         ledger: { ...ledger, shared: false },
@@ -226,8 +276,41 @@ async function readEnvironment(member, env, cwd, read) {
         reason: malformed > 0
             ? { code: "ledger-malformed", message: `${ledger.path}: ${malformed} line${malformed === 1 ? " is" : "s are"} not a release record and ${malformed === 1 ? "was" : "were"} skipped` }
             : null,
+        ...(mixed ? { mixed } : {}),
     };
 }
+/**
+ * `{ revoked }` when the record names a release cut from a revoked commit
+ * (#4033), else nothing. Its rollback line names the newest release the
+ * environment ran before this one that is kept and not revoked (#4035).
+ */
+async function revokedItem(r, env, revokedOf, back) {
+    if (r.releaseDigest === undefined)
+        return {};
+    const revoked = await revokedOf(r.releaseDigest);
+    if (!revoked)
+        return {};
+    const target = await rollbackTarget({ records: back.records, exclude: new Set([r.releaseDigest]), before: r.timestamp, check: back.check });
+    const rollback = target ? releaseRollbackLine(env, target, await back.label(target)) : rollbackLine(env, r.component);
+    return { revoked: { ...revoked, rollback } };
+}
+/**
+ * A release gate whose release was cut from a revoked commit is superseded
+ * (#4033): `chant approve` refuses it and the promote refuses the release, so
+ * neither an approval nor a pending fact will pass it. An expired gate stays
+ * expired. The gate carries the revocation.
+ */
+async function supersedeRevokedGates(gates, revokedOf) {
+    return Promise.all(gates.map(async (g) => {
+        if (g.releaseDigest === undefined)
+            return g;
+        const revoked = await revokedOf(g.releaseDigest);
+        if (!revoked)
+            return g;
+        const { releaseDigest: _d, label: _l, ...revocation } = revoked;
+        return { ...g, state: g.state === "expired" ? g.state : "superseded", revoked: revocation };
+    }));
+}
 /** The digest two environments are compared on: the input side when there is one. */
 const compareKey = (r) => r.inputDigest ?? r.digest;
 export function compareEnvironments(a, b) {
@@ -271,11 +354,19 @@ export async function workspaceStatus(query) {
         // #3163: the declaration's identity.gates at base, read once for every member's gates.
         const ruleSource = scopeSource(found.dir);
         const rules = (gate) => gateAdmissionFrom(ruleSource, gate);
+        const releaseRule = releaseRuleFrom(ruleSource).rule;
+        // #4033 (ws-105): revoked commits, read from local tags once and only when a release is met.
+        // Tags that can't be judged read as none revoked; workspace check reports the declaration.
+        let revokedCommits;
+        const revoked = () => (revokedCommits ?? (revokedCommits = revokedCommitsAt(top, ruleSource.declaration?.ci?.green ?? null).catch(() => new Map())));
+        // #4024: the flag records, read once for every member. Unreadable records list as null.
+        const flags = await readStatusFlags(declaration, found.dir);
         const members = [];
         for (const m of declaration.members) {
+            const revokedOf = revokedReleaseLookup(resolve(found.dir, m.dir), revoked);
             const environments = [];
             for (const env of envs)
-                environments.push(await readEnvironment(m, env, found.dir, read));
+                environments.push(await readEnvironment(m, env, found.dir, read, revokedOf, query.readOutcomes));
             const own = await hasMemberLedger(m, found.dir);
             const gates = await readMemberGates(own ? `${MEMBERS_DIR}/${m.name}/${GATES_DIR}` : GATES_DIR, own ? "members" : "flat", commit, envs, found.dir, now, query.readGates, rules);
             const stewards = await (query.readStewards ?? readMemberStewards)(resolve(found.dir, m.dir), query.env, now, m.kind, m.box);
@@ -292,7 +383,7 @@ export async function workspaceStatus(query) {
                 compare: query.compareTo === undefined ? null : compareEnvironments(environments[0], environments[environments.length - 1]),
                 readable: environments.every((e) => e.reason === null),
                 gateLedger: gates.ledger,
-                gates: gates.gates,
+                gates: await supersedeRevokedGates(gates.gates, revokedOf),
                 box: m.box === null
                     ? null
                     : {
@@ -318,6 +409,9 @@ export async function workspaceStatus(query) {
                     },
                 stewards: stewards.stewards,
                 stewardReasons: stewards.reasons,
+                promotionOrder: await (query.readPromotionOrder ?? readMemberPromotionOrder)(resolve(found.dir, m.dir)),
+                releaseCuts: await readReleaseCuts(resolve(found.dir, m.dir), releaseRule),
+                featureFlags: flags === null ? null : flags.filter((f) => f.member === m.name).map(({ member: _member, ...f }) => f),
                 ...x(m.pointer),
             });
         }
@@ -335,6 +429,17 @@ export async function workspaceStatus(query) {
             m.gateLedger.shared = m.gateLedger.layout === "flat" && flatGates > 1;
         const leases = await readWorkspaceLeases(declaration.members, found.dir, new Date(now));
         const acceptance = await readWorkspaceAcceptance(declaration, found.dir);
+        // #4025: the change sets still waiting to apply, the ones a pending or approved gate binds.
+        const pendingChangeSets = [];
+        for (const m of members) {
+            const own = m.gateLedger.layout === "members";
+            for (const g of m.gates) {
+                if (g.changeSet === undefined || (g.state !== "pending" && g.state !== "approved"))
+                    continue;
+                pendingChangeSets.push({ digest: g.changeSet, cwd: resolve(found.dir, m.dir), ledgerMember: own ? m.name : null, gitSha: g.gitSha ?? null });
+            }
+        }
+        const overlap = await readStatusOverlap(declaration, found.dir, top, pendingChangeSets);
         return {
             ...head,
             env: query.env,
@@ -347,6 +452,7 @@ export async function workspaceStatus(query) {
             leases,
             acceptance,
             replication: replicationOf(declaration, top),
+            overlap,
             summary: {
                 members: members.length,
                 released: members.filter((m) => m.environments[0].releases.length > 0).length,
@@ -365,6 +471,36 @@ export async function workspaceStatus(query) {
         throw err;
     }
 }
+/**
+ * A member's release cuts with their signatures judged (#4031), read from
+ * its ledger on the local `chant/lifecycle`. Null when they can't be read.
+ */
+async function readReleaseCuts(memberDir, rule) {
+    try {
+        const { readCuts, readRelease } = await import("../lifecycle/release-store.js");
+        const loc = { cwd: memberDir };
+        const { cuts } = await readCuts(loc);
+        const commits = new Map();
+        const out = [];
+        for (const c of cuts) {
+            if (!commits.has(c.releaseDigest))
+                commits.set(c.releaseDigest, (await readRelease(c.releaseDigest, loc))?.commit ?? null);
+            out.push({
+                releaseDigest: c.releaseDigest,
+                label: c.label,
+                commit: commits.get(c.releaseDigest) ?? null,
+                actor: c.actor,
+                timestamp: c.timestamp,
+                signature: c.signature,
+                signatureCheck: checkReleaseSignature(rule, c),
+            });
+        }
+        return out;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * The work leases of the flat ledger and of each member's (#2732). Leases are
  * env-independent, so the environment asked for doesn't narrow them. Never
@@ -382,6 +518,33 @@ async function readWorkspaceLeases(members, cwd, now) {
     }
     return out;
 }
+/** Every flag of the declared flag kinds (#4024), read in the working tree, sorted by id; null when they can't be read. */
+async function readStatusFlags(declaration, root) {
+    if (declaredRecordKinds(declaration).length === 0)
+        return [];
+    try {
+        const { readWorkspaceFlags } = await import("./flags-read.js");
+        const { flags } = await readWorkspaceFlags(root);
+        return flags
+            .map((f) => ({ id: f.id, member: f.member, param: f.param, owner: f.owner, values: f.values, work: f.work, implements: f.implements, stale: f.stale, kind: f.kind, path: f.path }))
+            .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));
+    }
+    catch {
+        return null;
+    }
+}
+/** The overlap report (#4025); null when no work kind is declared or it can't be read. */
+async function readStatusOverlap(declaration, root, top, changeSets) {
+    if (declaredRecordKinds(declaration).length === 0)
+        return null;
+    try {
+        const { readOverlap } = await import("./overlap.js");
+        return await readOverlap({ declaration, root, top, changeSets });
+    }
+    catch {
+        return null;
+    }
+}
 /** The acceptance counts of every declared work kind with criteria (#2772), read in the working tree. */
 async function readWorkspaceAcceptance(declaration, root) {
     if (declaredRecordKinds(declaration).length === 0)
@@ -467,6 +630,25 @@ export function formatStatus(doc) {
                     memberNotes.push(`  ${e.reason.code}: ${e.reason.message}`);
                 else if (e.ledger.shared && e.releases.length > 0)
                     memberNotes.push(`  ${e.env} is read from the shared flat ledger ${e.ledger.path}`);
+                // #4033: a component running a release cut from a revoked commit, and the way back.
+                for (const r of e.releases) {
+                    if (!r.revoked)
+                        continue;
+                    const name = r.revoked.label ?? r.revoked.releaseDigest;
+                    memberNotes.push(`  ${e.env}: ${r.component} runs release ${name}, revoked by ${r.revoked.tag} (${describeRevocation(r.revoked)}); roll back: ${r.revoked.rollback}`);
+                }
+                // #4035: an environment running a mix, what each component runs, and the lines that settle it.
+                if (e.mixed) {
+                    const what = e.mixed.components.map((c) => {
+                        const runs = c.releaseDigest ? `release ${c.releaseLabel ?? c.releaseDigest.slice(0, 24)}` : c.digest ? "no release" : "nothing recorded";
+                        return c.state === "settled" ? `${c.component} runs ${runs}` : `${c.component} ${c.state} (${c.attempt.verb} ${c.attempt.runId}), recorded ${runs}`;
+                    });
+                    memberNotes.push(`  ${e.env} is mixed: ${what.join("; ")}`);
+                    for (const line of e.mixed.redeploy)
+                        memberNotes.push(`    redeploy: ${line}`);
+                    if (e.mixed.rollback)
+                        memberNotes.push(`    roll back: ${e.mixed.rollback}`);
+                }
             }
             if (memberNotes.length > 0)
                 notes.set(rows.length - 1, memberNotes);
@@ -491,6 +673,38 @@ export function formatStatus(doc) {
             rows.push([a.member ? `${a.member}/${a.item}` : a.item, a.state ?? "-", `${a.met}/${a.total}`]);
         lines.push(...table(rows));
     }
+    const cut = doc.members.filter((m) => (m.releaseCuts ?? []).length > 0);
+    if (cut.length > 0) {
+        lines.push("");
+        const rows = [["MEMBER", "RELEASE", "COMMIT", "CUT BY", "SIGNATURE"]];
+        for (const m of cut) {
+            for (const c of m.releaseCuts)
+                rows.push([m.name, c.label ?? c.releaseDigest.slice(0, 24), c.commit?.slice(0, 12) ?? "-", c.actor, c.signatureCheck.status]);
+        }
+        lines.push(...table(rows));
+    }
+    const flagged = doc.members.filter((m) => (m.featureFlags ?? []).length > 0);
+    if (flagged.length > 0) {
+        lines.push("");
+        const rows = [["FLAG", "PARAM", doc.env.toUpperCase(), "WORK ITEM", ""]];
+        for (const m of flagged) {
+            for (const f of m.featureFlags) {
+                const value = f.values[doc.env];
+                rows.push([`${m.name}/${f.id}`, f.param, value === undefined ? "default" : JSON.stringify(value), f.work ? `${f.work.id} (${f.work.state ?? "unknown"})` : "-", f.stale ? "due for removal" : ""]);
+            }
+        }
+        lines.push(...table(rows));
+    }
+    // #4025: in-flight work items that changed the same thing.
+    if (doc.overlap && doc.overlap.pairs.length > 0) {
+        lines.push("");
+        const rows = [["OVERLAP", "FILES", "ADDRESSES"]];
+        for (const p of doc.overlap.pairs) {
+            const list = (xs) => (xs.length === 0 ? "-" : xs.length <= 2 ? xs.join(", ") : `${xs.slice(0, 2).join(", ")} and ${xs.length - 2} more`);
+            rows.push([`${p.items[0]} and ${p.items[1]}`, list(p.files), list([...new Set(p.addresses.map((x) => x.node ?? x.address))])]);
+        }
+        lines.push(...table(rows));
+    }
     const boxes = doc.members.filter((m) => m.box?.isolation);
     if (boxes.length > 0) {
         lines.push("");