@intentius/chant 0.124.28 → 0.124.30

package/src/workspace/__fixtures__/older-records/older-records.json

@@ -0,0 +1,326 @@
+{
+  "$comment": "Ledger lines as chant 0.124.27 and older producers wrote them, before #4020 (gitSha and runOrigin on run records, gitSha and runId on gate lines, admission on deploy records), #4043 (releaseDigest on deploy records), #4045 (releaseDigest and empty on gate lines) and #4046 (implicit releases) added their fields. Data only: workspace/older-records.test.ts writes each file to the chant/lifecycle branch of a temp repo and reads it through the real readers (INTENTIUS/chant#4034). Every entry names the producer that wrote its shape and the source it was taken from. The values are made up. The keys, and which keys are present, are what each producer wrote.",
+  "files": {
+    "staging/releases.jsonl": [
+      {
+        "producer": "chant components release (a CI job)",
+        "source": "packages/core/src/cli/handlers/components.ts at 162e1602c^ (the appendReleaseRecord call in the release handler): component, env, digest, gitSha, runId, runOrigin from resolveRunId, timestamp, actor; no approver because none was passed",
+        "line": {
+          "version": 1,
+          "component": "api",
+          "env": "staging",
+          "digest": "sha256:47e0cbb98c01f4a49e3450e8686ca069f23c3c13c2d49cf50a4c3513f01b6ed3",
+          "gitSha": "2f22765d04931a078909145ca628d2264c852d7d",
+          "runId": "8431209934",
+          "runOrigin": { "forge": "github", "repo": "acme/shop", "url": "https://github.com/acme/shop/actions/runs/8431209934" },
+          "timestamp": "2026-09-08T14:02:11.482Z",
+          "actor": "ci-bot"
+        }
+      },
+      {
+        "producer": "chant components release --approver (a person at a terminal)",
+        "source": "the same call with args.approver set (#1035) and no CI env, so resolveRunId minted a local id",
+        "line": {
+          "version": 1,
+          "component": "worker",
+          "env": "staging",
+          "digest": "sha256:fc653e205472032353d140e5cd5543e7d3e3de8dc2013b1a43e2f068a4260198",
+          "gitSha": "6b1f53303a732ccc8c6aae6640399827c15250e3",
+          "runId": "local-1788901200000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-08T21:00:00.000Z",
+          "actor": "alice",
+          "approver": "bob"
+        }
+      },
+      {
+        "producer": "chant run --components (auto-release), a pinned helm deploy",
+        "source": "packages/core/src/components/auto-release.ts at 162e1602c^ (maybeRecordAutoRelease): the rendered digest in digest, the input-side digest in inputDigest (#1242, #1243); no approver and no admission, which run --components copied only from 0.124.28",
+        "line": {
+          "version": 1,
+          "component": "ingress",
+          "env": "staging",
+          "digest": "sha256:9ccd4fd27f728a7d88462fc94e6c8d901d1d2de3d5d0291ca99bccd462d8d3e4",
+          "gitSha": "a625406f6977d45c1391b078f4d3656e0b75bfcb",
+          "runId": "local-1788904800000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-08T22:00:00.000Z",
+          "actor": "alice",
+          "inputDigest": "sha256:bc227a21bd89c5c2e7e971e001e538da4dff21e972059a914b38595400418ca1"
+        }
+      },
+      {
+        "producer": "SQL Yodeler (yodel apply)",
+        "source": "INTENTIUS/sql-yodeler at 8dacbec, src/release/index.ts recordRelease: component is the project directory in its repository or schema, digest is schemaSha of the recorded schema (test/release.test.ts holds the call), runId and runOrigin from resolveRunId, approver when a gate approved",
+        "line": {
+          "version": 1,
+          "component": "schema",
+          "env": "staging",
+          "digest": "sha256:69c1a029277e628cfd0386e730d5d8decf9414b4fde67b37c77efe32b7550804",
+          "gitSha": "e4666a670f042877c67a84473a71675ee0950a08",
+          "runId": "8431977120",
+          "runOrigin": { "forge": "github", "repo": "acme/warehouse", "url": "https://github.com/acme/warehouse/actions/runs/8431977120" },
+          "timestamp": "2026-09-09T08:30:00.000Z",
+          "actor": "acme-deploy",
+          "approver": "alice"
+        }
+      }
+    ],
+    "prod/releases.jsonl": [
+      {
+        "producer": "chant components release",
+        "source": "as the first staging entry; the build api went to prod first",
+        "line": {
+          "version": 1,
+          "component": "api",
+          "env": "prod",
+          "digest": "sha256:db88ccee4ed09c4324d896b8a0db6dab0091c76f579eab51e54656c40517866f",
+          "gitSha": "8dc29fc58c0bd99068c2e5c752aa61521d4f11ce",
+          "runId": "8399000111",
+          "runOrigin": { "forge": "github", "repo": "acme/shop", "url": "https://github.com/acme/shop/actions/runs/8399000111" },
+          "timestamp": "2026-09-01T10:00:00.000Z",
+          "actor": "ci-bot"
+        }
+      },
+      {
+        "producer": "chant components promote",
+        "source": "packages/core/src/components/promote.ts at 162e1602c^ (sharedRecord plus promotedFrom, #2530): the artifact is the staging record's own, and promotedFrom names the staging record by env, runId and timestamp",
+        "line": {
+          "version": 1,
+          "component": "api",
+          "env": "prod",
+          "digest": "sha256:47e0cbb98c01f4a49e3450e8686ca069f23c3c13c2d49cf50a4c3513f01b6ed3",
+          "gitSha": "2f22765d04931a078909145ca628d2264c852d7d",
+          "runId": "local-1788987600000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-09T12:00:00.000Z",
+          "actor": "alice",
+          "approver": "bob",
+          "promotedFrom": { "env": "staging", "runId": "8431209934", "timestamp": "2026-09-08T14:02:11.482Z" }
+        }
+      },
+      {
+        "producer": "chant components rollback",
+        "source": "packages/core/src/op/activities/source-rollback.ts at 162e1602c^ and promote.ts rollbackRecord (#2531): the earlier release's digest again, with restores naming it",
+        "line": {
+          "version": 1,
+          "component": "api",
+          "env": "prod",
+          "digest": "sha256:db88ccee4ed09c4324d896b8a0db6dab0091c76f579eab51e54656c40517866f",
+          "gitSha": "8dc29fc58c0bd99068c2e5c752aa61521d4f11ce",
+          "runId": "local-1789074000000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-10T12:00:00.000Z",
+          "actor": "alice",
+          "restores": { "env": "prod", "runId": "8399000111", "timestamp": "2026-09-01T10:00:00.000Z" }
+        }
+      },
+      {
+        "producer": "chant components redeploy",
+        "source": "promote.ts redeployRecord (#2604): the digest the ledger recorded as current, deployed again, with redeploys naming that record",
+        "line": {
+          "version": 1,
+          "component": "api",
+          "env": "prod",
+          "digest": "sha256:db88ccee4ed09c4324d896b8a0db6dab0091c76f579eab51e54656c40517866f",
+          "gitSha": "8dc29fc58c0bd99068c2e5c752aa61521d4f11ce",
+          "runId": "local-1789077600000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-10T13:00:00.000Z",
+          "actor": "alice",
+          "redeploys": { "env": "prod", "runId": "local-1789074000000", "timestamp": "2026-09-10T12:00:00.000Z" }
+        }
+      },
+      {
+        "producer": "SQL Yodeler, a tenant",
+        "source": "recordRelease with env.tenant set: the component is schema/<tenant> and the ledger env is the tenant's env",
+        "line": {
+          "version": 1,
+          "component": "schema/acme",
+          "env": "prod",
+          "digest": "sha256:69c1a029277e628cfd0386e730d5d8decf9414b4fde67b37c77efe32b7550804",
+          "gitSha": "e4666a670f042877c67a84473a71675ee0950a08",
+          "runId": "8432100045",
+          "runOrigin": { "forge": "github", "repo": "acme/warehouse", "url": "https://github.com/acme/warehouse/actions/runs/8432100045" },
+          "timestamp": "2026-09-09T16:00:00.000Z",
+          "actor": "acme-deploy"
+        }
+      }
+    ],
+    "fly/releases.jsonl": [
+      {
+        "producer": "chud-studio (arugula-salad/studio), the release Op's Record phase",
+        "source": "template/delivery/ops/release.op.ts at studio 6e0e5d8 calls releaseRecord, chant's op/activities/source-release.ts, whose appendReleaseRecord call at 162e1602c^ wrote this shape: digest is the release plan's digest, gitSha the plan's, approver the gate's resolvedBy names",
+        "line": {
+          "version": 1,
+          "component": "app",
+          "env": "fly",
+          "digest": "sha256:65a540cde9fceddfc88c9a21750b256c99096ebe6ae31f4a8ff26e89712f67cf",
+          "gitSha": "2f22765d04931a078909145ca628d2264c852d7d",
+          "runId": "local-1788998400000",
+          "runOrigin": { "forge": "local" },
+          "timestamp": "2026-09-10T00:00:00.000Z",
+          "actor": "alex",
+          "approver": "alex"
+        }
+      }
+    ],
+    "fly/runs__release.jsonl": [
+      {
+        "producer": "chud-studio's release Op, first run, stopped at the ship gate",
+        "source": "packages/core/src/lifecycle/run-ledger.ts buildRunRecord at 162e1602c^ (OpRunRecord in op/runtime.ts): no gitSha and no runOrigin",
+        "line": {
+          "version": 1,
+          "id": "0b7d6a3e-5f1c-4c52-9a52-6f0d3f6f5a11",
+          "op": "release",
+          "env": "fly",
+          "started": "2026-09-09T23:50:00.000Z",
+          "ended": "2026-09-09T23:50:41.000Z",
+          "status": "gated",
+          "labels": { "Env": "fly" },
+          "outcomes": {},
+          "phases": [
+            { "name": "Check", "status": "ok", "durationMs": 20100, "steps": [{ "fn": "shell", "status": "ok", "durationMs": 20100 }] },
+            { "name": "Plan", "status": "ok", "durationMs": 900, "steps": [{ "fn": "releasePlan", "status": "ok", "durationMs": 900 }] },
+            { "name": "Gate", "status": "skipped", "steps": [{ "fn": "gate:ship", "status": "skipped", "durationMs": 0 }] }
+          ],
+          "gate": { "name": "ship", "since": "2026-09-09T23:50:40.000Z" }
+        }
+      },
+      {
+        "producer": "chud-studio's release Op, second run, after the approval",
+        "source": "as above; the Gate step carries approval { gate, resolvedBy, timestamp } (#2119)",
+        "line": {
+          "version": 1,
+          "id": "9c1e5b07-2d44-4f9a-8d0b-3a7f1c2b9e22",
+          "op": "release",
+          "env": "fly",
+          "started": "2026-09-10T00:00:00.000Z",
+          "ended": "2026-09-10T00:01:10.000Z",
+          "status": "ok",
+          "labels": { "Env": "fly" },
+          "outcomes": {},
+          "phases": [
+            { "name": "Check", "status": "ok", "durationMs": 20300, "steps": [{ "fn": "shell", "status": "ok", "durationMs": 20300 }] },
+            { "name": "Gate", "status": "ok", "durationMs": 5, "steps": [{ "fn": "gate:ship", "status": "ok", "durationMs": 5, "approval": { "gate": "ship", "resolvedBy": "alex", "timestamp": "2026-09-09T23:55:00.000Z" } }] },
+            { "name": "Ship", "status": "ok", "durationMs": 40100, "steps": [{ "fn": "flyRelease", "status": "ok", "durationMs": 40100 }] }
+          ]
+        }
+      }
+    ],
+    "_gates/api.jsonl": [
+      {
+        "producer": "chant run --components, a component gate (the pending fact)",
+        "source": "packages/core/src/lifecycle/gate-ledger.ts PendingGateRecord at 162e1602c^: environment and planDigest since #2574; no gitSha, runId, releaseDigest",
+        "line": {
+          "version": 1,
+          "kind": "pending",
+          "op": "api",
+          "gate": "deploy",
+          "environment": "prod",
+          "planDigest": "sha256:0c3c94bc645b25af58a4ed063bbd3c428cc9eeb119ed7c86f197c63c3c6b5000",
+          "timestamp": "2026-09-09T11:00:00.000Z",
+          "expiresAt": "2026-09-16T11:00:00.000Z"
+        }
+      },
+      {
+        "producer": "chant approve api deploy --env prod",
+        "source": "GateResolutionRecord at 162e1602c^, a line with no kind (the shape before #2119 stayed valid) and origin cli (#2384); no gitSha, runId, releaseDigest, empty",
+        "line": {
+          "version": 1,
+          "op": "api",
+          "gate": "deploy",
+          "resolvedBy": "bob",
+          "timestamp": "2026-09-09T11:30:00.000Z",
+          "planDigest": "sha256:0c3c94bc645b25af58a4ed063bbd3c428cc9eeb119ed7c86f197c63c3c6b5000",
+          "environment": "prod",
+          "origin": "cli"
+        }
+      }
+    ],
+    "_gates/release.jsonl": [
+      {
+        "producer": "chud-studio's release Op gate ship (the pending fact)",
+        "source": "a gate step of an authored Op (op/gate.ts at 162e1602c^): no environment, the plan digest from the releasePlan activity; the quorum block studio adds is left out",
+        "line": {
+          "version": 1,
+          "kind": "pending",
+          "op": "release",
+          "gate": "ship",
+          "description": "Ship app to fly",
+          "planDigest": "sha256:65a540cde9fceddfc88c9a21750b256c99096ebe6ae31f4a8ff26e89712f67cf",
+          "timestamp": "2026-09-09T23:50:40.000Z",
+          "expiresAt": "2026-09-16T23:50:40.000Z"
+        }
+      },
+      {
+        "producer": "chant approve release ship --plan <digest>",
+        "source": "GateResolutionRecord at 162e1602c^ with kind resolution (#2119) and the plan (#2300)",
+        "line": {
+          "version": 1,
+          "kind": "resolution",
+          "op": "release",
+          "gate": "ship",
+          "resolvedBy": "alex",
+          "timestamp": "2026-09-09T23:55:00.000Z",
+          "planDigest": "sha256:65a540cde9fceddfc88c9a21750b256c99096ebe6ae31f4a8ff26e89712f67cf",
+          "origin": "cli"
+        }
+      }
+    ],
+    "_gates/web.jsonl": [
+      {
+        "producer": "chant components pr-apply (the pending fact for a pull request's change set)",
+        "source": "pr-apply bound the change-set document's digest in planDigest from #4022 (984534ea9); the document is change-set-984534ea9.json beside this file: composeChangeSet and lifecyclePlanPart as they stood at 984534ea9, before #4045 added releaseDigest and environment, then mapChangeSetToGraph with no graph read, which is what storeGateChangeSet stores when the graph can't be read (every node null, graph null)",
+        "line": {
+          "version": 1,
+          "kind": "pending",
+          "op": "web",
+          "gate": "pr-apply",
+          "environment": "staging",
+          "planDigest": "jcs1-sha256:38ee3f4bfab616f181ff10ea6b2c75284e3b93a0f976907fc84954e6c0356f07",
+          "timestamp": "2026-09-09T09:00:00.000Z",
+          "expiresAt": "2026-09-16T09:00:00.000Z"
+        }
+      }
+    ],
+    "_gates/nightly.jsonl": [
+      {
+        "producer": "an Op gate that binds no plan (before #2300)",
+        "source": "PendingGateRecord with no planDigest and no environment, and a resolution with neither, the shape every gate had before #2300",
+        "line": {
+          "version": 1,
+          "kind": "pending",
+          "op": "nightly",
+          "gate": "confirm",
+          "timestamp": "2026-09-08T00:00:00.000Z",
+          "expiresAt": "2026-09-15T00:00:00.000Z"
+        }
+      },
+      {
+        "producer": "chant approve nightly confirm",
+        "source": "as above, written before #2119 so it has no kind",
+        "line": {
+          "version": 1,
+          "op": "nightly",
+          "gate": "confirm",
+          "resolvedBy": "dave",
+          "timestamp": "2026-09-08T01:00:00.000Z"
+        }
+      }
+    ]
+  },
+  "plans": {
+    "producer": "chud-studio's release Op, the releasePlan activity, persisted by releaseRecord (persistReleasePlan, plan-ledger.ts, ws-055)",
+    "source": "template/delivery/ops/release.op.ts at studio 6e0e5d8: component, env, gitSha and content { artifact, shipSkip }; the plan carries its own digest",
+    "digest": "sha256:65a540cde9fceddfc88c9a21750b256c99096ebe6ae31f4a8ff26e89712f67cf",
+    "plan": {
+      "digest": "sha256:65a540cde9fceddfc88c9a21750b256c99096ebe6ae31f4a8ff26e89712f67cf",
+      "component": "app",
+      "env": "fly",
+      "gitSha": "2f22765d04931a078909145ca628d2264c852d7d",
+      "artifact": { "kind": "source-tree", "digest": "sha256:6ce407d632d7e805de020f9d0a5d70fea814b67285ced915be1271255b4fb622", "dir": "app" },
+      "shipSkip": { "answer": "ship", "decider": "model" }
+    }
+  }
+}

package/src/workspace/change-set.schema.json

@@ -26,7 +26,7 @@
     "digest": {
       "type": "string",
       "pattern": "^(?:jcs1-)?sha256:[0-9a-f]{64}$",
-      "description": "computePlanDigest(\"change-set-document\", \u2026) over the set digest (computePlanDigest(\"change-set\", \u2026) over the members' { member, planDigest } pairs sorted by member), each member's member, status and holes, the entries without their node, the side effects, and on a release gate's document its releaseDigest and environment, provisional members and their entries left out. What a gate over the whole run binds."
+      "description": "computePlanDigest(\"change-set-document\", \u2026) over the set digest (computePlanDigest(\"change-set\", \u2026) over the members' { member, planDigest } pairs sorted by member), each member's member, status and holes, the entries without their node and source, the side effects, and on a release gate's document its releaseDigest and environment, provisional members and their entries left out. What a gate over the whole run binds."
     },
     "releaseDigest": {
       "type": "string",
@@ -271,6 +271,10 @@
         "node": {
           "type": ["string", "null"],
           "description": "Added in contract 1 by #4022, written by chant 0.124.28 and newer on a stored change set (chant change-set show). The graph node the entry changes, as chant graph --format ir names it, with the member in front (<member>/<id>) inside a workspace, as chant workspace graph names it. A chant entry's node is its address; a terraform-family entry's is <root>/<block key>, where the block key is each module call as module.<name>/ and then the block's address with no index. Null when the graph holds no node for the address, such as a delete of a block the source no longer declares. Absent on a document never mapped onto a graph. Not part of digest."
+        },
+        "source": {
+          "type": "string",
+          "description": "Added in contract 1 by #4025, written by chant 0.124.29 and newer on a stored change set. The source file that declares the entry's node, as a path from the repository root: the node's sourceLoc.file in the member's graph IR with the member's directory in front. Absent when node is null or the node has no source location, and on a change set stored by an older chant. workspace status attributes the entry to a work item through the commits linked to the item that changed this file. Not part of digest."
         }
       }
     },

package/src/workspace/check.schema.json

@@ -295,11 +295,12 @@
             "box-intent-unknown",
             "box-intent-unconstrained",
             "work-acceptance-unmet",
+            "flag-stale",
             "diagram-source-missing",
             "diagram-render-missing",
             "diagram-render-drift"
           ],
-          "description": "For WSP001: why the declaration can't be read. For WSP121 to WSP127, the box finding (#2726, #2727, #2780, #2850). For WSP117, work-acceptance-unmet (#2772). For WSP131 to WSP133, the diagram finding (#2764)."
+          "description": "For WSP001: why the declaration can't be read. For WSP121 to WSP127, the box finding (#2726, #2727, #2780, #2850). For WSP117, work-acceptance-unmet (#2772). For WSP118, flag-stale (#4024). For WSP131 to WSP133, the diagram finding (#2764)."
         }
       }
     },
@@ -373,11 +374,12 @@
             "box-intent-unknown",
             "box-intent-unconstrained",
             "work-acceptance-unmet",
+            "flag-stale",
             "diagram-source-missing",
             "diagram-render-missing",
             "diagram-render-drift"
           ],
-          "description": "For WSP001: why the declaration can't be read. For WSP121 to WSP127, the box finding (#2726, #2727, #2780, #2850). For WSP117, work-acceptance-unmet (#2772). For WSP131 to WSP133, the diagram finding (#2764)."
+          "description": "For WSP001: why the declaration can't be read. For WSP121 to WSP127, the box finding (#2726, #2727, #2780, #2850). For WSP117, work-acceptance-unmet (#2772). For WSP118, flag-stale (#4024). For WSP131 to WSP133, the diagram finding (#2764)."
         },
         "reason": {
           "type": "string"

package/src/workspace/checks/records.ts

@@ -16,10 +16,18 @@
  * | WSP115 | a record kind the declaration names is missing or does not load as one (fixed, #2680) |
  * | WSP116 | an answer kind's decision points file is missing or not valid (fixed, ws-058, #2738) |
  * | WSP117 | a done work item has an acceptance criterion no passing evidence meets (#2772) |
+ * | WSP118 | a feature flag whose work item's decisions are all confirmed, so it is due for removal (#4024) |
  *
  * WSP117 reads the records of every declared work kind with acceptance
  * criteria, in the working tree, and the records of `--kind`. It carries the
  * reason code `work-acceptance-unmet`.
+ *
+ * WSP118 reads the records of every declared flag kind (#4024), in the
+ * working tree. A flag is due for removal when the work item it hides
+ * implements at least one decision and every one is confirmed: closed in its
+ * kind and superseded by nothing. It is a warning by default, since a flag
+ * left on trunk breaks nothing; the declaration's `checks` can raise it. It
+ * carries the reason code `flag-stale`.
  */
 
 import type { WorkspaceCheck, WorkspaceDiagnostic } from "../checks";
@@ -27,7 +35,7 @@ import type { ReasonCode } from "../reason-codes";
 import type { ReadErrorCode, RecordEntry } from "../records";
 
 /** The read contract's codes the record checks carry as `code`: WSP117's (#2772). */
-export const RECORD_FINDING_CODES = ["work-acceptance-unmet"] as const satisfies readonly ReasonCode[];
+export const RECORD_FINDING_CODES = ["work-acceptance-unmet", "flag-stale"] as const satisfies readonly ReasonCode[];
 
 /** The records `check --kind` read, or why they could not be read. */
 export type RecordFacts =
@@ -171,4 +179,30 @@ export const RECORD_CHECKS: readonly WorkspaceCheck[] = [
       return out;
     },
   },
+  {
+    id: "WSP118",
+    name: "flag-stale",
+    description:
+      "No feature flag outlives its work: a flag whose work item implements decisions that are all confirmed (closed in their kind and superseded by nothing) is due for removal, with the parameter it backs (#4024).",
+    severity: "warning",
+    configurable: true,
+    check(ctx) {
+      const out: WorkspaceDiagnostic[] = [];
+      for (const k of ctx.facts?.declaredKinds ?? []) {
+        for (const f of k.flags ?? []) {
+          if (f.stale === null) continue;
+          out.push({
+            checkId: this.id,
+            severity: this.severity,
+            message: `flag ${f.flag} ${f.stale}; remove the flag record and the parameter it backs`,
+            ...(k.declared.member !== null ? { entity: k.declared.member } : {}),
+            pointer: "",
+            file: f.file,
+            code: "flag-stale",
+          });
+        }
+      }
+      return out;
+    },
+  },
 ];

package/src/workspace/checks.ts

@@ -30,6 +30,7 @@
  * | WSP115 | the record kinds the declaration names (#2680) |
  * | WSP116 | the decision points file of each declared answer kind (ws-058) |
  * | WSP117 | a done work item's acceptance criteria all met (#2772) |
+ * | WSP118 | no feature flag outlives its work: a flag whose work item's decisions are all confirmed is due for removal (#4024) |
  * | WSP121, WSP122 | boxes: no literal credential, every capability brokered (#2726) |
  * | WSP123, WSP124 | box isolation: no shared port, state path or cookie, no literal machine path (#2727) |
  * | WSP125 | boxes: a fountain Box declares the callback token fountain gives its sandbox (#2780) |
@@ -521,7 +522,7 @@ export async function runDeclarationChecks(
   const gathered = options.gather === false || options.tree ? {} : await gatherWorkspaceFacts(root, declaration, options);
   // The declared record kinds load from the working tree; under --at only whether each exists at the revision is checked (#2680).
   // A declared work kind's acceptance criteria are counted in the working tree too (#2772).
-  const declaredKinds = options.gather === false ? undefined : await loadDeclaredKinds(declaration, tree, root, { load: !options.tree, acceptance: !options.tree });
+  const declaredKinds = options.gather === false ? undefined : await loadDeclaredKinds(declaration, tree, root, { load: !options.tree, acceptance: !options.tree, flags: !options.tree });
   // A box's intent is read from the working tree's records, so not under --at (#2850).
   const boxIntents = declaredKinds && !options.tree ? await resolveBoxIntents(declaration, root, declaredKinds) : undefined;
   // A linked member's lexicons name its tables and columns as outputs (#3931); reading them folds its source, never runs it.

package/src/workspace/ci-green-forge.ts

@@ -37,6 +37,8 @@ export interface CheckRun {
    * time in milliseconds, which orders a re-run after the run it replaced.
    */
   opRun?: OpRunRef;
+  /** For a failed Op run, its record's `failure.code` (#4094), which a revoke note names. Absent otherwise. */
+  failureCode?: string;
 }
 
 /** The Op run a {@link CheckRun} stands for (#4044). */

package/src/workspace/ci-green.ts

@@ -117,6 +117,8 @@ export interface RunVerdict {
   verdict: Verdict;
   /** The Op run this is, when the source is chant runs (#4044). */
   opRun?: OpRunRef;
+  /** Why the Op run failed, its record's `failure.code` (#4094), when it says. */
+  failureCode?: string;
 }
 
 export interface PhaseVerdict {
@@ -144,7 +146,7 @@ export function evaluatePhase(phase: CiPhase, latest: readonly CheckRun[]): Phas
     if (matched.length === 0) unmatched.push(pattern);
     for (const r of matched) {
       if (runs.some((x) => x.name === r.name)) continue;
-      runs.push({ name: r.name, id: r.id, status: r.status, conclusion: r.conclusion, url: r.url, verdict: runVerdict(phase, r), ...(r.opRun ? { opRun: r.opRun } : {}) });
+      runs.push({ name: r.name, id: r.id, status: r.status, conclusion: r.conclusion, url: r.url, verdict: runVerdict(phase, r), ...(r.opRun ? { opRun: r.opRun } : {}), ...(r.failureCode ? { failureCode: r.failureCode } : {}) });
     }
   }
   const verdict: Verdict = runs.some((r) => r.verdict === "fail")
@@ -263,7 +265,8 @@ export function greenAnnotation(green: CiGreen, sha: string, verdict: CommitVerd
 /** The annotation of a revoked tag: the phase and the run that failed, and the time, signed when `signer` is given (#4031). */
 export function revokedAnnotation(green: CiGreen, sha: string, failure: NonNullable<CommitVerdict["failure"]>, at: Date, signer?: CiTagSigner): string {
   const record: CiTagRecord = { schema: 1, tag: "revoked", commit: sha, branch: green.branch, at: iso(at), ...sourceField(green), phase: failure.phase, run: runRecord(failure.run) };
-  return `ci: phase ${failure.phase} failed in ${failure.run.name} (${failure.run.conclusion ?? failure.run.status})\n\n${recordJson(record, signer)}\n`;
+  const code = failure.run.failureCode ? `, ${failure.run.failureCode}` : "";
+  return `ci: phase ${failure.phase} failed in ${failure.run.name} (${failure.run.conclusion ?? failure.run.status}${code})\n\n${recordJson(record, signer)}\n`;
 }
 
 /**
@@ -627,6 +630,7 @@ export function opRunCheckRun(record: OpRunRecord, signer: string): CheckRun {
     completedAt: settled ? record.ended : null,
     url: record.runOrigin?.url ?? null,
     opRun: { id: record.id, env: record.env, signer, statement: record.statement! },
+    ...(record.status === "fail" && record.failure ? { failureCode: record.failure.code } : {}),
   };
 }
 
@@ -895,6 +899,18 @@ const asRun = (r: unknown): CiListRun | null => {
   return { name: o.name, id: typeof o.id === "number" ? o.id : null, conclusion: typeof o.conclusion === "string" ? o.conclusion : null, url: typeof o.url === "string" ? o.url : null, ...opRun };
 };
 
+/** The revoked tag on a commit as `ci list` shows it, which the release reads of #4033 (ws-105) reuse. */
+export type RevokedTagView = NonNullable<CiListCommit["revoked"]>;
+
+/**
+ * A counted revoked tag as `ci list` shows it: its name and time, the phase
+ * and run its annotation names, and its signer. A tag made from chant runs
+ * (#4044) names its run with `id: null` and the Op run in `opRun`.
+ */
+export function revokedTagView(sha: string, r: CountedCiTag): RevokedTagView {
+  return { tag: `${CI_REVOKED_TAG_PREFIX}${sha}`, tagged: r.tagged, phase: typeof r.record?.phase === "string" ? r.record.phase : null, run: asRun(r.record?.run), signer: r.signer };
+}
+
 /** A judged run as `ci list` shows it. */
 const listRun = (r: RunVerdict): CiListRun => ({ name: r.name, id: r.opRun ? null : r.id, conclusion: r.conclusion, url: r.url, ...(r.opRun ? { opRun: { id: r.opRun.id, env: r.opRun.env, signer: r.opRun.signer } } : {}) });
 
@@ -966,9 +982,8 @@ export async function ciList(req: ListRequest): Promise<CiListDocument> {
       let phases = green.require.map((name) => recordedPhase(g, name));
       let revoked: CiListCommit["revoked"] = null;
       if (r) {
-        const phase = typeof r.record?.phase === "string" ? r.record.phase : null;
-        const run = asRun(r.record?.run);
-        revoked = { tag: `${CI_REVOKED_TAG_PREFIX}${c.sha}`, tagged: r.tagged, phase, run, signer: r.signer };
+        revoked = revokedTagView(c.sha, r);
+        const { phase, run } = revoked;
         phases = phases.map((p) => (p.phase === phase ? { phase: p.phase, result: "fail", runs: run ? [run] : [] } : p));
       } else if (!g && (runs || req.forge)) {
         const verdict = evaluateCommit(green, runs ? runs.checkRuns(c.sha) : await req.forge!.checkRuns(c.sha));