@intentius/chant 0.124.28 → 0.124.29

package/dist/lifecycle/git.d.ts

@@ -61,6 +61,18 @@ export interface LedgerFileWrite {
      */
     expectPriorSha?: string | null;
 }
+/**
+ * One file for {@link writeLedgerFiles} to remove (#4036): retention's
+ * garbage collection takes a stored change set, release or template out of
+ * the tree in a new commit. The history keeps it.
+ */
+export interface LedgerFileRemoval {
+    /** The file's full path on the branch. No prefix is added. */
+    path: string;
+    remove: true;
+    /** The blob sha the caller saw at the path; a different sha, or no file, is a conflict. */
+    expectPriorSha?: string | null;
+}
 /**
  * Write several files to the branch in one commit (#2538). Paths are full
  * branch paths, so one commit can write the ledgers of several members, for
@@ -74,8 +86,15 @@ export interface LedgerFileWrite {
  * Every entry the write does not touch is carried over as it is, so the tree
  * of an unchanged directory keeps its sha.
  */
-export declare function writeLedgerFiles(files: LedgerFileWrite[], commitMessage: string, opts?: {
+export declare function writeLedgerFiles(files: Array<LedgerFileWrite | LedgerFileRemoval>, commitMessage: string, opts?: {
     cwd?: string;
+    /**
+     * The branch tip the caller read before deciding what to write (#4036).
+     * A different tip is a conflict, thrown at once and never retried here,
+     * so a caller whose choice depends on files it does not write (garbage
+     * collection reading the gate ledgers) reads again.
+     */
+    expectTip?: string;
 }): Promise<string>;
 /**
  * Read a blob from an arbitrary `<environment>/<filename>` path on the orphan
@@ -162,6 +181,16 @@ export declare function readSnapshotAt(environment: string, lexicon: string, ref
 export declare function appendReleaseRecordLine(environment: string, recordJson: string, opts?: {
     cwd?: string;
 }): Promise<string>;
+/**
+ * Append one line to `<environment>/<filename>` on the orphan branch, with
+ * the same read, append and compare-and-swap retry as
+ * {@link appendReleaseRecordLine}. The deploy outcomes of
+ * ../lifecycle/deploy-outcome.ts (#4035) are appended through here, beside
+ * the environment's `releases.jsonl`.
+ */
+export declare function appendLedgerLine(environment: string, filename: string, recordJson: string, commitMessage: string, opts?: {
+    cwd?: string;
+}): Promise<string>;
 /**
  * Read every release record line for `environment` from the orphan branch,
  * oldest first, as raw JSON strings. Returns `[]` when no ledger exists yet

package/dist/lifecycle/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/lifecycle/git.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnF;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yHAAyH;IACzH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACpC,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmFD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1D,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,0GAA0G;IAC1G,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EAAE,EACxB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CA2LjB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAExB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAInB;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrF;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqB9E;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAW1F;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsB9B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAoBnE;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAQlD;CACF;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,2HAA2H;GACzH;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwBzD;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkC/F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAI7E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAchF;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBrH;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAE9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA2C9D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+CjG;AAED;;;GAGG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;aAErC,MAAM,EAAE,aAAa,GAAG,UAAU;aAClC,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;IAHhC,YACkB,MAAM,EAAE,aAAa,GAAG,UAAU,EAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAC9B,MAAM,EAAE,MAAM,EAcf;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBnF;AAgBD;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,GAAG,EAAE,MAAM;aACX,QAAQ,EAAE,MAAM,GAAG,IAAI;IAFzC,YACkB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvC,MAAM,EAAE,MAAM,EAOf;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAErB,GAAG,EAAE,MAAM;aACX,QAAQ,EAAE,MAAM;IAFlC,YACkB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChC,MAAM,EAAE,MAAM,EAQf;CACF;AAKD,+HAA+H;AAC/H,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAK7F;AAsCD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAKzF;AAED,6IAA6I;AAC7I,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKhG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAE5G;AAED,6GAA6G;AAC7G,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BxH;AAED,mIAAmI;AACnI,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAErF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAO5E;AAyBD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AA0DD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAMvE"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/lifecycle/git.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnF;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yHAAyH;IACzH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;IACpC,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmFD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC1D,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,0GAA0G;IAC1G,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAID;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,KAAK,CAAC,eAAe,GAAG,iBAAiB,CAAC,EACjD,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IACL,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,MAAM,CAAC,CAyMjB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAExB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAInB;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrF;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqB9E;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAW1F;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAsB9B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAoBnE;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAQlD;CACF;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,2HAA2H;GACzH;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwBzD;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkC/F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAI7E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAchF;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBrH;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAE9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA2C9D;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+CjG;AAED;;;GAGG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;aAErC,MAAM,EAAE,aAAa,GAAG,UAAU;aAClC,MAAM,EAAE,MAAM;aACd,MAAM,EAAE,MAAM;IAHhC,YACkB,MAAM,EAAE,aAAa,GAAG,UAAU,EAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EAC9B,MAAM,EAAE,MAAM,EAcf;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBnF;AAgBD;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,GAAG,EAAE,MAAM;aACX,QAAQ,EAAE,MAAM,GAAG,IAAI;IAFzC,YACkB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvC,MAAM,EAAE,MAAM,EAOf;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAErB,GAAG,EAAE,MAAM;aACX,QAAQ,EAAE,MAAM;IAFlC,YACkB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChC,MAAM,EAAE,MAAM,EAQf;CACF;AAKD,+HAA+H;AAC/H,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAK7F;AAsCD;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAKzF;AAED,6IAA6I;AAC7I,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKhG;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAE5G;AAED,6GAA6G;AAC7G,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAEhE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BxH;AAED,mIAAmI;AACnI,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE5E;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAErF;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAO5E;AAyBD;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AA0DD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAMvE"}

package/dist/lifecycle/git.js

@@ -125,6 +125,7 @@ export async function writeBlobToPath(environment, filename, content, commitMess
     const dir = await ledgerDir(environment, opts);
     return writeLedgerFiles([{ path: `${dir}/${filename}`, content, ...(opts?.expectPriorPathSha !== undefined ? { expectPriorSha: opts.expectPriorPathSha } : {}) }], commitMessage, opts);
 }
+const isRemoval = (f) => f.remove === true;
 /**
  * Write several files to the branch in one commit (#2538). Paths are full
  * branch paths, so one commit can write the ledgers of several members, for
@@ -158,8 +159,13 @@ export async function writeLedgerFiles(files, commitMessage, opts) {
     // kubectl.kubernetes.io/last-applied-configuration annotation) and no
     // shell-quoting dance around embedded single quotes. Content-addressed
     // and idempotent, so this stays outside the retry loop below.
+    // A removal has no blob: its sha is null, and step 3 deletes the entry.
     const blobs = [];
     for (const f of files) {
+        if (isRemoval(f)) {
+            blobs.push({ path: f.path, sha: null });
+            continue;
+        }
         const blobResult = await rt.spawn(["git", "hash-object", "-w", "--stdin"], { cwd, stdin: f.content });
         if (blobResult.exitCode !== 0) {
             throw ledgerWriteError("git hash-object", f.path, blobResult.stderr);
@@ -230,6 +236,9 @@ export async function writeLedgerFiles(files, commitMessage, opts) {
         // there instead can observe a newer tip than the listings reflect, which
         // makes the CAS succeed against a tree built from a stale read.
         const tip = await getStateBranchTip(cwd);
+        if (opts?.expectTip !== undefined && tip !== opts.expectTip) {
+            throw new RefCASConflictError(`refs/heads/${STATE_BRANCH}`, opts.expectTip, `the branch moved to ${tip ?? "(none)"} since it was read`);
+        }
         const trees = new Map();
         const listing = async (dir) => {
             let entries = trees.get(dir);
@@ -257,16 +266,24 @@ export async function writeLedgerFiles(files, commitMessage, opts) {
         // rebuild below has each parent in hand.
         for (const b of blobs) {
             const { dir, name } = splitPath(b.path);
-            (await listing(dir)).set(name, { mode: "100644", type: "blob", sha: b.sha });
+            if (b.sha === null)
+                (await listing(dir)).delete(name);
+            else
+                (await listing(dir)).set(name, { mode: "100644", type: "blob", sha: b.sha });
             for (let d = dir; d !== ""; d = parentDir(d))
                 await listing(parentDir(d));
         }
-        // 4. Rebuild the touched trees, deepest first, then the root.
+        // 4. Rebuild the touched trees, deepest first, then the root. A directory
+        // a removal left empty is dropped from its parent, as git itself would.
         const touched = [...trees.keys()].sort((a, b) => depth(b) - depth(a) || (a < b ? -1 : 1));
         let rootTreeSha = "";
         for (const dir of touched) {
+            if (dir !== "" && trees.get(dir).size === 0) {
+                trees.get(parentDir(dir)).delete(baseName(dir));
+                continue;
+            }
             const lines = [...trees.get(dir)].map(([name, e]) => `${e.mode} ${e.type} ${e.sha}\t${name}`).join("\n");
-            const result = await rt.spawn(["git", "mktree"], { cwd, stdin: `${lines}\n` });
+            const result = await rt.spawn(["git", "mktree"], { cwd, stdin: lines === "" ? "" : `${lines}\n` });
             if (result.exitCode !== 0) {
                 throw ledgerWriteError(`git mktree (${dir === "" ? "root" : dir})`, path, result.stderr);
             }
@@ -422,14 +439,23 @@ export async function readSnapshotAt(environment, lexicon, ref, opts) {
  * `expectPriorPathSha`. See `writeBlobToPath` for the race that closes.
  */
 export async function appendReleaseRecordLine(environment, recordJson, opts) {
-    const filename = "releases.jsonl";
+    return appendLedgerLine(environment, "releases.jsonl", recordJson, "Release record", opts);
+}
+/**
+ * Append one line to `<environment>/<filename>` on the orphan branch, with
+ * the same read, append and compare-and-swap retry as
+ * {@link appendReleaseRecordLine}. The deploy outcomes of
+ * ../lifecycle/deploy-outcome.ts (#4035) are appended through here, beside
+ * the environment's `releases.jsonl`.
+ */
+export async function appendLedgerLine(environment, filename, recordJson, commitMessage, opts) {
     let lastErr;
     for (let attempt = 1; attempt <= WRITE_BLOB_RETRY_ATTEMPTS; attempt++) {
         try {
             const priorSha = await readPathSha(environment, filename, opts);
             const existing = priorSha ? await readBlobBySha(priorSha, opts) : null;
             const content = `${existing ? `${existing.replace(/\n$/, "")}\n` : ""}${recordJson}\n`;
-            return await writeBlobToPath(environment, filename, content, "Release record", {
+            return await writeBlobToPath(environment, filename, content, commitMessage, {
                 ...opts,
                 expectPriorPathSha: priorSha,
             });

package/dist/lifecycle/index.d.ts

@@ -12,6 +12,10 @@ export * from "./unobserved-gate.js";
 export * from "./receipt-plan.js";
 export * from "./affected.js";
 export * from "./release-ledger.js";
+export * from "./release-join.js";
+export * from "./retention-policy.js";
+export * from "./delivery-metrics.js";
+export { planLifecycleGc, runLifecycleGc, type GcFile, type GcKept, type GcKeepCode, type GcKeepReason, type GcKind, type GcReport, type LifecycleGcPlan } from "./retention.js";
 export * from "./build-ledger.js";
 export * from "./build-ledger-store.js";
 export * from "./oras-referrer-lookup.js";

package/dist/lifecycle/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lifecycle/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lifecycle/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,MAAM,EAAE,KAAK,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9K,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/lifecycle/index.js

@@ -12,6 +12,10 @@ export * from "./unobserved-gate.js";
 export * from "./receipt-plan.js";
 export * from "./affected.js";
 export * from "./release-ledger.js";
+export * from "./release-join.js";
+export * from "./retention-policy.js";
+export * from "./delivery-metrics.js";
+export { planLifecycleGc, runLifecycleGc } from "./retention.js";
 export * from "./build-ledger.js";
 export * from "./build-ledger-store.js";
 export * from "./oras-referrer-lookup.js";

package/dist/lifecycle/mixed-environment.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Whether an environment runs a mix of releases, and the lines that settle
+ * it (#4035). Derived when read, from the environment's release ledger and
+ * its deploy outcomes (./deploy-outcome.ts); nothing here is written.
+ *
+ * Two things make an environment mixed:
+ *
+ * - a component is unsettled: the newest promote, rollback or redeploy that
+ *   named it left it `failed` or `gated`, and the release ledger has no
+ *   record of it newer than that run, so what it runs is not known;
+ * - the latest records of its components name more than one release, a
+ *   record of no release counting as one value, and at least one names a
+ *   release.
+ *
+ * The ledger already says per component what deployed, and with which
+ * release, so the second needs no record of its own. Only the first needs
+ * the outcome: a failed deploy writes no release record, by design, so the
+ * ledger alone can't tell a component that failed partway from one that was
+ * never touched.
+ */
+import type { ReleaseRecord } from "./release-ledger.js";
+import type { DeployOutcome } from "./deploy-outcome.js";
+/** One component of a mixed environment. */
+export interface MixedComponent {
+    component: string;
+    /** The digest the release ledger records the component running, or null when it has no record in the environment. */
+    digest: string | null;
+    /** The release that record names, or null. */
+    releaseDigest: string | null;
+    releaseLabel: string | null;
+    /** `settled` when the ledger's record is what it runs; `failed` or `gated` when the newest run that named it left it so. */
+    state: "settled" | "failed" | "gated";
+    /** For an unsettled component, the run that left it so and what that run was deploying. Null when settled. */
+    attempt: {
+        verb: DeployOutcome["verb"];
+        runId: string;
+        timestamp: string;
+        digest: string;
+        releaseDigest: string | null;
+        releaseLabel: string | null;
+    } | null;
+}
+export interface MixedEnvironment {
+    /** Every component the ledger records or a run left unsettled, sorted by name. */
+    components: MixedComponent[];
+    /** `chant components redeploy <env> --component <c>` for each unsettled component the ledger records, which puts its recorded release back. */
+    redeploy: string[];
+    /** `chant components rollback <env> --release <label|digest>`, naming the release to go back to, or null when there is none to name. */
+    rollback: string | null;
+}
+/** What a reader knows about a release a rollback could go back to. */
+export interface ReleaseCheck {
+    /** Its release file can still be read, so its templates can be deployed. */
+    kept: boolean;
+    /** Its commit is revoked (#4033), so it is refused. */
+    revoked: boolean;
+}
+/**
+ * The components a run left unsettled: for each, the newest outcome naming it
+ * `failed` or `gated` that no release record of it is newer than.
+ */
+export declare function unsettledComponents(records: readonly ReleaseRecord[], outcomes: readonly DeployOutcome[]): Map<string, {
+    outcome: DeployOutcome;
+    state: "failed" | "gated";
+    digest: string;
+    releaseDigest: string | null;
+}>;
+/**
+ * The newest release the environment's ledger names that a rollback can go
+ * back to: not in `exclude`, still kept, and not revoked. With `before`, only
+ * records older than that time count. Null when there is none.
+ */
+export declare function rollbackTarget(input: {
+    records: readonly ReleaseRecord[];
+    exclude: ReadonlySet<string>;
+    before?: string;
+    check: (releaseDigest: string) => Promise<ReleaseCheck>;
+}): Promise<string | null>;
+/** The line that rolls `env` back to a release, by its label when it has one. */
+export declare function releaseRollbackLine(env: string, releaseDigest: string, label: string | null | undefined): string;
+/** The line that redeploys one component's recorded release in `env`. */
+export declare function redeployLine(env: string, component: string): string;
+/**
+ * The environment's mixed state, or null when it runs one release (or no
+ * release at all) and no component is unsettled.
+ */
+export declare function mixedEnvironment(input: {
+    env: string;
+    records: readonly ReleaseRecord[];
+    outcomes: readonly DeployOutcome[];
+    /** A release's label, or undefined. */
+    label: (releaseDigest: string) => Promise<string | undefined>;
+    check: (releaseDigest: string) => Promise<ReleaseCheck>;
+}): Promise<MixedEnvironment | null>;
+//# sourceMappingURL=mixed-environment.d.ts.map

package/dist/lifecycle/mixed-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixed-environment.d.ts","sourceRoot":"","sources":["../../src/lifecycle/mixed-environment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,qHAAqH;IACrH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4HAA4H;IAC5H,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IACtC,8GAA8G;IAC9G,OAAO,EAAE;QACP,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,+IAA+I;IAC/I,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wIAAwI;IACxI,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,IAAI,EAAE,OAAO,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;CAClB;AAWD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,QAAQ,EAAE,SAAS,aAAa,EAAE,GACjC,GAAG,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAiBlH;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACzD,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAczB;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAEhH;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC,uCAAuC;IACvC,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,KAAK,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACzD,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA2DnC"}

package/dist/lifecycle/mixed-environment.js

@@ -0,0 +1,154 @@
+/**
+ * Whether an environment runs a mix of releases, and the lines that settle
+ * it (#4035). Derived when read, from the environment's release ledger and
+ * its deploy outcomes (./deploy-outcome.ts); nothing here is written.
+ *
+ * Two things make an environment mixed:
+ *
+ * - a component is unsettled: the newest promote, rollback or redeploy that
+ *   named it left it `failed` or `gated`, and the release ledger has no
+ *   record of it newer than that run, so what it runs is not known;
+ * - the latest records of its components name more than one release, a
+ *   record of no release counting as one value, and at least one names a
+ *   release.
+ *
+ * The ledger already says per component what deployed, and with which
+ * release, so the second needs no record of its own. Only the first needs
+ * the outcome: a failed deploy writes no release record, by design, so the
+ * ledger alone can't tell a component that failed partway from one that was
+ * never touched.
+ */
+function latest(records) {
+    const out = new Map();
+    for (const r of records) {
+        const current = out.get(r.component);
+        if (!current || r.timestamp >= current.timestamp)
+            out.set(r.component, r);
+    }
+    return out;
+}
+/**
+ * The components a run left unsettled: for each, the newest outcome naming it
+ * `failed` or `gated` that no release record of it is newer than.
+ */
+export function unsettledComponents(records, outcomes) {
+    const newest = new Map();
+    for (const outcome of outcomes) {
+        for (const c of outcome.components) {
+            if (c.outcome !== "failed" && c.outcome !== "gated")
+                continue;
+            const seen = newest.get(c.component);
+            if (!seen || outcome.timestamp >= seen.outcome.timestamp) {
+                newest.set(c.component, { outcome, state: c.outcome, digest: c.digest, releaseDigest: c.releaseDigest });
+            }
+        }
+    }
+    const recorded = latest(records);
+    for (const [component, u] of newest) {
+        const r = recorded.get(component);
+        if (r && r.timestamp > u.outcome.timestamp)
+            newest.delete(component);
+    }
+    return newest;
+}
+/**
+ * The newest release the environment's ledger names that a rollback can go
+ * back to: not in `exclude`, still kept, and not revoked. With `before`, only
+ * records older than that time count. Null when there is none.
+ */
+export async function rollbackTarget(input) {
+    const ordered = input.records
+        .map((r, i) => ({ r, i }))
+        .filter(({ r }) => r.releaseDigest !== undefined && (input.before === undefined || r.timestamp < input.before))
+        .sort((a, b) => (a.r.timestamp === b.r.timestamp ? b.i - a.i : a.r.timestamp < b.r.timestamp ? 1 : -1));
+    const seen = new Set();
+    for (const { r } of ordered) {
+        const digest = r.releaseDigest;
+        if (seen.has(digest) || input.exclude.has(digest))
+            continue;
+        seen.add(digest);
+        const check = await input.check(digest);
+        if (check.kept && !check.revoked)
+            return digest;
+    }
+    return null;
+}
+/** The line that rolls `env` back to a release, by its label when it has one. */
+export function releaseRollbackLine(env, releaseDigest, label) {
+    return `chant components rollback ${env} --release ${label ?? releaseDigest}`;
+}
+/** The line that redeploys one component's recorded release in `env`. */
+export function redeployLine(env, component) {
+    return `chant components redeploy ${env} --component ${component}`;
+}
+/**
+ * The environment's mixed state, or null when it runs one release (or no
+ * release at all) and no component is unsettled.
+ */
+export async function mixedEnvironment(input) {
+    const { env, records } = input;
+    const recorded = latest(records);
+    const unsettled = unsettledComponents(records, input.outcomes);
+    const releases = new Set([...recorded.values()].map((r) => r.releaseDigest ?? null));
+    const divergent = releases.size > 1 && [...releases].some((d) => d !== null);
+    if (unsettled.size === 0 && !divergent)
+        return null;
+    const labelOf = async (digest) => (digest ? ((await input.label(digest)) ?? null) : null);
+    const names = [...new Set([...recorded.keys(), ...unsettled.keys()])].sort();
+    const components = [];
+    for (const component of names) {
+        const r = recorded.get(component);
+        const u = unsettled.get(component);
+        components.push({
+            component,
+            digest: r?.digest ?? null,
+            releaseDigest: r?.releaseDigest ?? null,
+            releaseLabel: await labelOf(r?.releaseDigest),
+            state: u ? u.state : "settled",
+            attempt: u
+                ? {
+                    verb: u.outcome.verb,
+                    runId: u.outcome.runId,
+                    timestamp: u.outcome.timestamp,
+                    digest: u.digest,
+                    releaseDigest: u.releaseDigest,
+                    releaseLabel: await labelOf(u.releaseDigest),
+                }
+                : null,
+        });
+    }
+    // The release the environment was moving to is not one to go back to: the
+    // one a run left components unsettled on, else, of the releases its
+    // components run, the one that reached the environment last.
+    const exclude = new Set();
+    if (unsettled.size > 0) {
+        for (const u of unsettled.values())
+            if (u.releaseDigest)
+                exclude.add(u.releaseDigest);
+    }
+    else {
+        const firstSeen = new Map();
+        for (const r of records) {
+            if (r.releaseDigest === undefined)
+                continue;
+            const seen = firstSeen.get(r.releaseDigest);
+            if (seen === undefined || r.timestamp < seen)
+                firstSeen.set(r.releaseDigest, r.timestamp);
+        }
+        let arrived;
+        for (const d of releases) {
+            if (d === null)
+                continue;
+            if (arrived === undefined || firstSeen.get(d) > firstSeen.get(arrived))
+                arrived = d;
+        }
+        if (arrived !== undefined)
+            exclude.add(arrived);
+    }
+    const target = await rollbackTarget({ records, exclude, check: input.check });
+    return {
+        components,
+        redeploy: components.filter((c) => c.state !== "settled" && c.digest !== null).map((c) => redeployLine(env, c.component)),
+        rollback: target ? releaseRollbackLine(env, target, await labelOf(target)) : null,
+    };
+}

package/dist/lifecycle/publish-attachments.d.ts

@@ -0,0 +1,79 @@
+/**
+ * What a publish attaches to what it publishes (#4049): an SBOM and the
+ * release's provenance statement.
+ *
+ * The provenance statement is an in-toto Statement v1 whose predicate
+ * (`https://intentius.io/chant/release/v1`) names the release, its commit,
+ * and the cut that signed it, with the cut's ssh signature in the
+ * `chant-release` namespace. Anyone holding the repository checks that
+ * signature offline with `chant release verify`, against
+ * `.chant/allowed_signers` at the release's commit. The predicate also says
+ * whether the run had an OIDC token: in CI, the provenance a registry records
+ * (npm's `--provenance`) is signed with it, and from a workstation the
+ * release's signature is the only provenance there is.
+ *
+ * The SBOM is an SPDX or CycloneDX JSON document. A target attaches the file
+ * its declaration's `sbom` names; with none named, the OCI and forge targets
+ * write one from the member's `package-lock.json` or `pom.xml` with the
+ * hermetic writer `generate-sbom` uses (../components/verbs/bom-writer.ts),
+ * dated with the cut's time, so a publish run again writes the same bytes.
+ * `sbom: false` publishes without one. The npm target carries its SBOM in
+ * each package instead, since a registry keeps no file beside a package
+ * (./publish-npm.ts).
+ *
+ * Both are written as sorted JSON, so the same release attaches the same
+ * bytes on every run, and a resumed stage finds what an earlier run sent.
+ */
+import { type PublishContext } from "./release-publish.js";
+/** The in-toto statement type the provenance statement is. */
+export declare const IN_TOTO_STATEMENT_TYPE = "https://in-toto.io/Statement/v1";
+/** The predicate type of chant's release provenance. */
+export declare const RELEASE_PREDICATE_TYPE = "https://intentius.io/chant/release/v1";
+/** The media type an in-toto statement is attached under. */
+export declare const IN_TOTO_MEDIA_TYPE = "application/vnd.in-toto+json";
+/** The file name the provenance statement is attached under. */
+export declare const PROVENANCE_FILE = "release.intoto.json";
+/** The file name of an SBOM chant writes from a lockfile. */
+export declare const GENERATED_SBOM_FILE = "sbom.spdx.json";
+/** The names an npm package's own SBOM is looked for under, at its root, when the declaration names none. */
+export declare const PACKAGE_SBOM_FILES: readonly ["sbom.spdx.json", "sbom.cdx.json", "sbom.cyclonedx.json"];
+/** One file attached to what a target publishes. */
+export interface Attachment {
+    kind: "sbom" | "provenance";
+    /** The file name it is attached under. */
+    name: string;
+    mediaType: string;
+    bytes: Uint8Array;
+    digest: string;
+}
+/**
+ * The provenance statement for `subjects`, the digests of what the target
+ * publishes. Every value in it comes from the release, its cut and the run's
+ * OIDC check, never from the clock, so it is the same bytes on every run.
+ */
+export declare function releaseProvenance(ctx: PublishContext, subjects: ReadonlyArray<{
+    name: string;
+    digest: string;
+}>): Attachment;
+/** The media type of an SBOM document, or null when `bytes` is neither SPDX nor CycloneDX JSON. */
+export declare function sbomMediaType(bytes: Uint8Array): string | null;
+/**
+ * The SBOM a target attaches, for an OCI image or a forge release: the file
+ * `declared` names (relative to the member, checked against the release's
+ * digest when the release records it), else one written from the member's
+ * lockfile for `subject`. Null when `declared` is `false`. Throws
+ * `publish-sbom-missing` when there is neither.
+ */
+export declare function memberSbom(ctx: PublishContext, declared: string | false | undefined, subject: string, target: string): Attachment | null;
+/**
+ * The SBOM an npm package carries at its root: the file `declared` names, else
+ * the first of {@link PACKAGE_SBOM_FILES} it holds, in a package directory or
+ * under `package/` in a packed `.tgz`. Null when `declared` is `false`.
+ * Throws `publish-sbom-missing` when the package has none, and
+ * `publish-sbom-invalid` when it is not SPDX or CycloneDX JSON.
+ */
+export declare function packageSbom(abs: string, isDirectory: boolean, path: string, name: string, declared: string | false | undefined): {
+    file: string;
+    digest: string;
+} | null;
+//# sourceMappingURL=publish-attachments.d.ts.map

package/dist/lifecycle/publish-attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-attachments.d.ts","sourceRoot":"","sources":["../../src/lifecycle/publish-attachments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAUH,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG5E,8DAA8D;AAC9D,eAAO,MAAM,sBAAsB,oCAAoC,CAAC;AACxE,wDAAwD;AACxD,eAAO,MAAM,sBAAsB,0CAA0C,CAAC;AAC9E,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,iCAAiC,CAAC;AACjE,gEAAgE;AAChE,eAAO,MAAM,eAAe,wBAAwB,CAAC;AACrD,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AACpD,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,YAAI,gBAAgB,EAAE,eAAe,EAAE,qBAAqB,CAAU,CAAC;AAEtG,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IAC5B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,UAAU,CAgB5H;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAW9D;AAyBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA2BxI;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA2BxK"}