@intentius/chant 0.124.32 → 0.124.33

package/dist/workspace/ci-builds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-builds.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-builds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAmC,KAAK,WAAW,EAAqB,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAEjI,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAC/C,wEAAwE;AACxE,eAAO,MAAM,cAAc,QAAQ,CAAC;AAGpC,yFAAyF;AACzF,eAAO,MAAM,oBAAoB,QAAgB,CAAC;AAClD,2EAA2E;AAC3E,eAAO,MAAM,YAAY,UAAY,CAAC;AACtC,qHAAqH;AACrH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;AAElE,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,CAAC,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,KAAK,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;IAC/C,kGAAkG;IAClG,EAAE,EAAE,MAAM,CAAC;IACX,6CAA6C;IAC7C,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtC,gFAAgF;IAChF,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,WAAW,CAAA;KAAE,CAAC;IAC9C,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,mEAAmE;IACnE,OAAO,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,IAAI,CAAA;KAAE,CAAC;CACxG;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAID,iGAAiG;AACjG,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,sDAAsD;IACtD,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,6CAA6C;IAC7C,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC/C,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,GAAG,EAAE,IAAI,CAAC;IACV,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,mEAAmE;IACnE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAC;IAC1C,uGAAuG;IACvG,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAeD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,CAuGzD;AAUD,sFAAsF;AACtF,wBAAgB,QAAQ,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,QAAQ,CAAA;KAAE,EAAE,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAAC,GAAG,EAAE,IAAI,CAAA;CAAE,GAAG,QAAQ,CAqCjN;AAED,6GAA6G;AAC7G,wBAAgB,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,GAAG,QAAQ,CAI7D;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAKxE;AAED,eAAO,MAAM,UAAU,QAAS,MAAM,WAAoC,CAAC;AAoB3E,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE3E;AAED,iHAAiH;AACjH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAWhE;AAID,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAgBxE;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAE9D;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,GAAG,YAAY,CAEjH"}

package/dist/workspace/ci-builds.js

@@ -0,0 +1,315 @@
+/**
+ * Which commits get built, and what each one ends with (#4169).
+ *
+ * A `ci.green` phase declares `build: "every"` (the default) or
+ * `build: "newest"`. Under `newest` the phase's workflow keeps one run
+ * waiting and drops the rest, so only the newest commit is built when a
+ * runner frees. This module does the tick's part of that, given the
+ * verdicts {@link planTick} (./ci-green.ts) judged:
+ *
+ * - Superseded. A commit with no run of a `newest` phase, below a newer
+ *   commit that has one, is `unbuilt` for that phase, covered by the newer
+ *   commit. A cancelled run makes any phase `unbuilt` (`phaseVerdictOf`).
+ * - Retry. A failed run with one attempt is run again once before the
+ *   commit counts red: through the forge's re-run (`CiForge.rerun`) for
+ *   check runs, or a build request for chant runs. A retry that has not
+ *   started an hour on counts as the failure it was.
+ * - Bisect. When the newest built commit of a `newest` phase is red, the
+ *   unbuilt commits back to the last one the phase passed on are built, one
+ *   request per tick: the commit halfway when more than four are left, else
+ *   the one just below the red. The first red commit found is the culprit,
+ *   and it and every commit after it name it.
+ * - Requests. A build is asked for with an annotated tag,
+ *   `ci/build/<sha>`, whose record names the phases and why. The tick
+ *   starts a workflow at that tag on GitHub (`CiForge.dispatch`), and `ci
+ *   serve --build-command` serves it for chant runs. A phase a request
+ *   waits on is `pending`. A request no runner served in six hours leaves
+ *   the phase `unbuilt`, and once its phases are decided the tick deletes
+ *   the tag.
+ * - Records. Every first-parent commit the tick judged gets
+ *   `_ci/<sha>.json` on `chant/lifecycle`, rewritten only when what it says
+ *   changes: `green`, `red`, `unbuilt` or `pending`, with each required
+ *   phase's verdict, runs, reason, the commit that covers it and the culprit.
+ *   A commit that leaves the window still `pending` is rewritten `unbuilt`,
+ *   for the reason `aged-out`. The `ci/green` and `ci/revoked` tags stay
+ *   what decides a release; the records say what happened to the rest.
+ */
+import { execFileSync } from "node:child_process";
+import { commitVerdictOf, phaseVerdictOf } from "./ci-green.js";
+export const CI_BUILD_TAG_PREFIX = "ci/build/";
+/** The directory on `chant/lifecycle` holding one record per commit. */
+export const CI_RECORDS_DIR = "_ci";
+const LEDGER_REF = "refs/heads/chant/lifecycle";
+/** How long a build request may wait for a runner before its phases count as unbuilt. */
+export const BUILD_REQUEST_TTL_MS = 6 * 3600000;
+/** How long a retry may take to start before the failure it was counts. */
+export const RETRY_TTL_MS = 3600000;
+/** Above this many unbuilt commits a bisect halves the range; at or below it, it steps back one commit at a time. */
+export const BISECT_HALVE_ABOVE = 4;
+const iso = (d) => d.toISOString().replace(/\.\d{3}Z$/, "Z");
+const phaseOf = (green, name) => green.phases.find((p) => p.name === name);
+const buildOf = (green, name) => phaseOf(green, name).build ?? "every";
+const decided = (v) => v === "pass" || v === "fail";
+const age = (at, now) => now.getTime() - Date.parse(at);
+function setPhase(c, phase, fn) {
+    const v = c.verdict;
+    if (!v)
+        return;
+    c.verdict = commitVerdictOf(v.phases.map((p) => (p.phase === phase ? fn(p) : p)));
+}
+const phaseIn = (c, phase) => c.verdict?.phases.find((p) => p.phase === phase);
+/**
+ * Apply supersession, retries, requests and bisection to the judged commits,
+ * in place, and say what the tick has to ask for. Pure: it reads and writes
+ * nothing but its input.
+ */
+export function planBuilds(input) {
+    const { green, commits, now } = input;
+    const plan = { requests: [], retries: [], resolved: [] };
+    const inWindow = new Set(commits.map((c) => c.sha));
+    const live = (sha, phase) => {
+        const r = input.requests.get(sha);
+        return r && r.phases.includes(phase) && age(r.at, now) < BUILD_REQUEST_TTL_MS ? r : undefined;
+    };
+    // A request waits on a phase with no run yet; one no runner served in time leaves it unbuilt.
+    for (const c of commits) {
+        const r = input.requests.get(c.sha);
+        if (!r || !c.verdict)
+            continue;
+        for (const name of r.phases) {
+            const p = phaseIn(c, name);
+            if (!p || p.runs.length > 0)
+                continue;
+            setPhase(c, name, (q) => (live(c.sha, name) ? { ...q, verdict: "pending", reason: "requested" } : { ...q, verdict: "unbuilt", reason: "request-unserved" }));
+        }
+    }
+    // Superseded: newest first, a newest phase with no run below a commit with one.
+    for (const name of green.require) {
+        if (buildOf(green, name) !== "newest")
+            continue;
+        let cover;
+        for (const c of commits) {
+            const p = phaseIn(c, name);
+            if (!p)
+                continue;
+            if (p.runs.length > 0) {
+                cover = c.sha;
+                continue;
+            }
+            if (cover && p.reason !== "requested" && p.reason !== "request-unserved")
+                setPhase(c, name, (q) => ({ ...q, verdict: "unbuilt", reason: "superseded", coveredBy: cover }));
+        }
+    }
+    // Retry once: a commit with no tag whose failed run has one attempt.
+    if (input.retryVia) {
+        for (const c of commits) {
+            if (c.before !== "none" || c.verdict?.verdict !== "fail")
+                continue;
+            const all = input.runs.get(c.sha) ?? [];
+            const retried = input.records.get(c.sha)?.retried ?? {};
+            for (const p of c.verdict.phases) {
+                for (const run of p.runs.filter((r) => r.verdict === "fail")) {
+                    if (all.filter((r) => r.name === run.name).length > 1)
+                        continue;
+                    const asked = retried[run.name];
+                    if (asked && asked.run === run.id && age(asked.at, now) >= RETRY_TTL_MS)
+                        continue;
+                    if (!asked || asked.run !== run.id) {
+                        const checkRun = all.find((r) => r.name === run.name && r.id === run.id);
+                        if (input.retryVia === "forge")
+                            plan.retries.push({ sha: c.sha, run: checkRun });
+                        else if (!input.requests.has(c.sha) && !plan.requests.some((q) => q.commit === c.sha))
+                            plan.requests.push(request(green, c.sha, [p.phase], "retry", now));
+                    }
+                    setPhase(c, p.phase, (q) => {
+                        const runs = q.runs.map((r) => (r.name === run.name && r.id === run.id ? { ...r, verdict: "pending" } : r));
+                        return { ...q, runs, ...phaseVerdictOf(runs, q.unmatched), reason: "retrying" };
+                    });
+                }
+            }
+        }
+    }
+    // Culprits for every phase, and a bisect request for a newest one.
+    for (const name of green.require) {
+        const verdicts = commits.map((c) => phaseIn(c, name));
+        const top = verdicts.findIndex((p) => decided(p?.verdict));
+        if (top < 0 || verdicts[top].verdict !== "fail")
+            continue;
+        let oldestRed = top;
+        let between = [];
+        let passed = -1;
+        for (let i = top + 1; i < commits.length; i++) {
+            const v = verdicts[i]?.verdict;
+            if (v === "fail") {
+                oldestRed = i;
+                between = [];
+            }
+            else if (v === "pass") {
+                passed = i;
+                break;
+            }
+            else if (v !== undefined)
+                between.push(i);
+        }
+        if (between.length === 0) {
+            if (passed < 0)
+                continue;
+            const culprit = commits[oldestRed].sha;
+            for (let i = oldestRed; i >= 0; i--) {
+                if (verdicts[i]?.verdict === "pass")
+                    break;
+                if (verdicts[i])
+                    setPhase(commits[i], name, (q) => ({ ...q, culprit }));
+            }
+            continue;
+        }
+        if (buildOf(green, name) !== "newest")
+            continue;
+        if (between.some((i) => live(commits[i].sha, name)))
+            continue;
+        const pick = between.length > BISECT_HALVE_ABOVE ? between[Math.floor(between.length / 2)] : between[0];
+        const sha = commits[pick].sha;
+        if (input.requests.has(sha) || plan.requests.some((q) => q.commit === sha))
+            continue;
+        plan.requests.push(request(green, sha, [name], "bisect", now));
+        setPhase(commits[pick], name, (q) => ({ ...q, verdict: "pending", reason: "requested", coveredBy: undefined }));
+    }
+    // A request is done once its phases are decided, it has waited too long, or its commit left the window.
+    for (const [sha, r] of input.requests) {
+        const c = commits.find((x) => x.sha === sha);
+        const done = !inWindow.has(sha) || age(r.at, now) >= BUILD_REQUEST_TTL_MS || (c !== undefined && (c.before === "revoked" || r.phases.every((name) => decided(phaseIn(c, name)?.verdict))));
+        if (done)
+            plan.resolved.push(r.tag);
+    }
+    return plan;
+}
+function request(green, commit, phases, reason, now) {
+    return { schema: 1, tag: `${CI_BUILD_TAG_PREFIX}${commit}`, commit, branch: green.branch, phases, reason, at: iso(now) };
+}
+// ── Records ──────────────────────────────────────────────────────────────────
+const recordRun = (r) => ({ name: r.name, id: r.opRun ? null : r.id, conclusion: r.conclusion, url: r.url });
+/** The record a judged commit gets, carrying the retries asked for before and now. */
+export function recordOf(input) {
+    const { green, commit: c, previous, now } = input;
+    const retried = { ...(previous?.retried ?? {}) };
+    for (const r of input.retries)
+        if (r.sha === c.sha)
+            retried[r.run.name] = { run: r.run.id, at: iso(now) };
+    const req = input.requests.get(c.sha);
+    const extras = {
+        ...(Object.keys(retried).length > 0 ? { retried } : {}),
+        ...(req ? { request: { tag: req.tag, reason: req.reason, phases: req.phases, at: req.at } } : {}),
+    };
+    if (c.before === "revoked" || !c.verdict) {
+        return { schema: 1, commit: c.sha, branch: green.branch, state: "red", at: iso(now), revoked: true, phases: previous?.phases ?? {}, ...(previous?.failure ? { failure: previous.failure } : {}), ...extras };
+    }
+    const v = c.verdict;
+    // A pass whose tag an ignored tag blocks (#4031) is not green until a person clears the name.
+    const state = c.before === "green" ? (v.verdict === "fail" ? "red" : "green") : v.verdict === "pass" ? (c.made ? "green" : "pending") : v.verdict === "fail" ? "red" : v.verdict;
+    const phases = {};
+    for (const p of v.phases) {
+        phases[p.phase] = {
+            verdict: p.verdict,
+            build: buildOf(green, p.phase),
+            runs: p.runs.map(recordRun),
+            ...(p.reason ? { reason: p.reason } : {}),
+            ...(p.coveredBy ? { coveredBy: p.coveredBy } : {}),
+            ...(p.culprit ? { culprit: p.culprit } : {}),
+        };
+    }
+    return {
+        schema: 1,
+        commit: c.sha,
+        branch: green.branch,
+        state,
+        at: iso(now),
+        phases,
+        ...(v.failure ? { failure: { phase: v.failure.phase, run: recordRun(v.failure.run) } } : {}),
+        ...extras,
+    };
+}
+/** The record a commit that left the window still pending gets: each pending phase `unbuilt`, `aged-out`. */
+export function agedOut(record, now) {
+    const phases = Object.fromEntries(Object.entries(record.phases).map(([k, p]) => [k, p.verdict === "pending" ? { ...p, verdict: "unbuilt", reason: "aged-out" } : p]));
+    const { request: _request, ...rest } = record;
+    return { ...rest, state: "unbuilt", at: iso(now), phases };
+}
+/** Whether two records say the same thing, the time each was written aside. */
+export function sameRecord(a, b) {
+    if (!a)
+        return false;
+    const { at: _a, ...x } = a;
+    const { at: _b, ...y } = b;
+    return JSON.stringify(x) === JSON.stringify(y);
+}
+export const recordPath = (sha) => `${CI_RECORDS_DIR}/${sha}.json`;
+function tryGit(top, args) {
+    try {
+        return execFileSync("git", args, { cwd: top, encoding: "utf-8", stdio: ["ignore", "pipe", "pipe"], maxBuffer: 256 * 1024 * 1024 }).trimEnd();
+    }
+    catch {
+        return null;
+    }
+}
+function parseRecord(text) {
+    if (!text)
+        return undefined;
+    try {
+        const r = JSON.parse(text);
+        return r && r.schema === 1 && typeof r.commit === "string" && typeof r.state === "string" ? r : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** One commit's record, from the local `chant/lifecycle`. */
+export function readCiRecord(top, sha) {
+    return parseRecord(tryGit(top, ["show", `${LEDGER_REF}:${recordPath(sha)}`]));
+}
+/** Every record on the local `chant/lifecycle`, by commit. Empty when the branch or the directory is missing. */
+export function readCiRecords(top) {
+    const out = new Map();
+    const names = tryGit(top, ["ls-tree", "--name-only", `${LEDGER_REF}:${CI_RECORDS_DIR}`]);
+    if (!names)
+        return out;
+    for (const name of names.split("\n")) {
+        const m = /^([0-9a-f]{40,64})\.json$/.exec(name);
+        if (!m)
+            continue;
+        const r = readCiRecord(top, m[1]);
+        if (r)
+            out.set(m[1], r);
+    }
+    return out;
+}
+// ── Requests ─────────────────────────────────────────────────────────────────
+/** Every `ci/build/<sha>` tag with a record this reads, from local refs, by commit. */
+export function readBuildRequests(top) {
+    const out = new Map();
+    const raw = tryGit(top, ["for-each-ref", "--format=%(refname:lstrip=2)%00%(objecttype)%00%(contents)%01", `refs/tags/${CI_BUILD_TAG_PREFIX}`]);
+    if (!raw)
+        return out;
+    for (const entry of raw.split("\u0001")) {
+        const [tag, type, contents] = entry.replace(/^\n/, "").split("\u0000");
+        if (!tag || type !== "tag" || !contents?.includes("{"))
+            continue;
+        try {
+            const r = JSON.parse(contents.slice(contents.indexOf("{")));
+            const sha = tag.slice(CI_BUILD_TAG_PREFIX.length);
+            if (r.schema === 1 && r.commit === sha && Array.isArray(r.phases) && typeof r.at === "string")
+                out.set(sha, { ...r, tag });
+        }
+        catch {
+            // A tag whose record does not parse asks for nothing.
+        }
+    }
+    return out;
+}
+/** The annotation of a request tag: a subject line, then the record. */
+export function buildRequestAnnotation(r) {
+    return `ci: build ${r.phases.join(", ")} at this commit (${r.reason})\n\n${JSON.stringify(r, null, 2)}\n`;
+}
+/** A request for `ci run --at <sha>`: every required phase, asked for by a person. */
+export function requestedBuild(green, commit, phases, now) {
+    return request(green, commit, [...phases], "requested", now);
+}

package/dist/workspace/ci-green-cli.d.ts

@@ -8,7 +8,8 @@
  *                                        tag the commits that turned green, revoke the ones that turned red
  *   ci workflow [--workflow <name>]... [--output <file>] [--chant <command>] [--install <command>]
  *               [--token-secret <NAME> | --app-id-var <VAR> --app-key-secret <NAME>] [--runner-key-secret <NAME>]
- *                                        write the root CI file that runs the tick
+ *                                        write the root CI file that runs the tick, and the triggers and
+ *                                        concurrency of the workflows holding a phase that sets build (#4169)
  *
  * The tick signs its tags with a runner key (#4031) from `--key <file>` or
  * the PEM in `CHANT_RUNNER_KEY`, which the generated workflow sets from the

package/dist/workspace/ci-green-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-green-cli.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAmE,cAAc,EAAE,MAAM,YAAY,CAAC;AAW7G,OAAO,EAAE,cAAc,EAAE,CAAC;AAe1B,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBzE;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBpE;AAID,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAapE;AAeD,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAkDxE"}
+{"version":3,"file":"ci-green-cli.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAmE,cAAc,EAAE,MAAM,YAAY,CAAC;AAW7G,OAAO,EAAE,cAAc,EAAE,CAAC;AAe1B,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBzE;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBpE;AAID,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBpE;AAeD,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA+DxE"}

package/dist/workspace/ci-green-cli.js

@@ -8,7 +8,8 @@
  *                                        tag the commits that turned green, revoke the ones that turned red
  *   ci workflow [--workflow <name>]... [--output <file>] [--chant <command>] [--install <command>]
  *               [--token-secret <NAME> | --app-id-var <VAR> --app-key-secret <NAME>] [--runner-key-secret <NAME>]
- *                                        write the root CI file that runs the tick
+ *                                        write the root CI file that runs the tick, and the triggers and
+ *                                        concurrency of the workflows holding a phase that sets build (#4169)
  *
  * The tick signs its tags with a runner key (#4031) from `--key <file>` or
  * the PEM in `CHANT_RUNNER_KEY`, which the generated workflow sets from the
@@ -28,7 +29,7 @@ import { formatError } from "../cli/format.js";
 import { findWorkspaceRoot } from "../project-root.js";
 import { ciList, ciTick, CiGreenError, formatList, formatTick, lastGreen, RUNNER_KEY_ENV } from "./ci-green.js";
 import { ciForgeFromEnv } from "./ci-green-forge.js";
-import { ACTIONS_NAME, CI_GREEN_WORKFLOW_FILE, ciGreenHeader, readWorkflowSources, renderCiGreenWorkflow, workflowsHolding, writeWorkflowFile } from "./ci-green-workflow.js";
+import { ACTIONS_NAME, buildTriggerEdits, CI_GREEN_WORKFLOW_FILE, ciGreenHeader, readWorkflowSources, renderCiGreenWorkflow, workflowsHolding, writeWorkflowFile } from "./ci-green-workflow.js";
 import { readDeclaration, readerVersion, WorkspaceReadError } from "./declaration.js";
 import { recordGeneratedFiles, resolveMemberContext, shellArg } from "./member-pipeline.js";
 import { gitTop, workingTree } from "./tree.js";
@@ -99,6 +100,13 @@ export async function runCiTick(ctx) {
         // The forge is made only when the source is check runs, so a tick from chant runs needs no forge token.
         const forge = () => ciForgeFromEnv(ctx.args.forge ?? "github");
         const runnerKey = ctx.args.key !== undefined ? readFileSync(resolve(ctx.args.key), "utf-8") : process.env[RUNNER_KEY_ENV] || undefined;
+        // #4168: under who-ran-it every tag the tick makes is signed, so a tick without a key makes none.
+        if (runnerKey === undefined && ctx.args.dryRun !== true) {
+            const { securityGroupsAt } = await import("./security.js");
+            if (securityGroupsAt(process.cwd()).has("who-ran-it")) {
+                throw new Error(`the workspace opts into who-ran-it, so the tick signs every tag it makes and needs a runner key; pass --key <runner key.pem> or set ${RUNNER_KEY_ENV}`);
+            }
+        }
         const result = await ciTick({ cwd: process.cwd(), forge, dryRun: ctx.args.dryRun === true, ...(source ? { source } : {}), ...(runnerKey !== undefined ? { runnerKey } : {}) });
         console.log(formatTick(result, ctx.args.dryRun === true));
         return 0;
@@ -142,7 +150,10 @@ export async function runCiWorkflow(ctx) {
         const member = resolveMemberContext(cwd, found);
         const target = ctx.args.output ? resolve(realpathSync(cwd), ctx.args.output) : join(repoRoot, CI_GREEN_WORKFLOW_FILE);
         const fromRepo = relative(repoRoot, target).split(sep).join("/");
-        const scan = workflowsHolding(green, readWorkflowSources(repoRoot, fromRepo));
+        const sources = readWorkflowSources(repoRoot, fromRepo);
+        const scan = workflowsHolding(green, sources);
+        // #4169: the triggers and concurrency of the workflows holding a phase that sets build. Refused before anything is written.
+        const edits = buildTriggerEdits(green, sources);
         const extra = ctx.args.ciWorkflows ?? [];
         const workflows = [...new Set([...scan.workflows, ...extra])].sort();
         for (const f of scan.unreadable)
@@ -167,8 +178,9 @@ export async function runCiWorkflow(ctx) {
         const runnerKeySecret = ctx.args.ciRunnerKeySecret;
         if (runnerKeySecret)
             parts.push("--runner-key-secret", runnerKeySecret);
-        if (green.signedSince && !runnerKeySecret) {
-            console.error(`warning: ci.green.signedSince is set, so the tick needs a runner key; pass --runner-key-secret <NAME> naming the repository secret that holds it, or every tick will fail`);
+        const { securityGroupsAt } = await import("./security.js");
+        if ((green.signedSince || securityGroupsAt(root).has("who-ran-it")) && !runnerKeySecret) {
+            console.error(`warning: ci.green.signedSince is set or the workspace opts into who-ran-it, so the tick needs a runner key; pass --runner-key-secret <NAME> naming the repository secret that holds it, or every tick will fail`);
         }
         const command = parts.map(shellArg).join(" ");
         const workspaceRoot = relative(repoRoot, root).split(sep).join("/") || ".";
@@ -179,6 +191,14 @@ export async function runCiWorkflow(ctx) {
         if (member)
             recordGeneratedFiles(member.memberRoot, [{ path: fromRepo, command }]);
         console.log(`Wrote ${written}: ticks when ${workflows.join(", ")} complete${workflows.length === 1 ? "s" : ""} on ${green.branch}, and every 15 minutes.`);
+        for (const e of edits) {
+            if (!e.changed)
+                continue;
+            const path = writeWorkflowFile(join(repoRoot, e.path), e.text);
+            console.log(e.build === "newest"
+                ? `Wrote ${path}'s triggers and concurrency: ${e.phases.join(", ")} build${e.phases.length === 1 ? "s" : ""} the newest commit on ${green.branch} when a run ends, and a ci/build/<sha> tag by hand.`
+                : `Wrote ${path}'s concurrency: ${e.phases.join(", ")} build${e.phases.length === 1 ? "s" : ""} every commit on ${green.branch}, none cancelled.`);
+        }
         return 0;
     }
     catch (err) {

package/dist/workspace/ci-green-forge.d.ts

@@ -51,6 +51,18 @@ export interface CiForge {
     kind: ForgeKind;
     /** Every check run on `sha`, every attempt. */
     checkRuns(sha: string): Promise<CheckRun[]>;
+    /**
+     * Run a failed check run's job again (#4169), so a flake costs one more
+     * run before the commit counts red. Absent on a forge chant can't ask.
+     */
+    rerun?(run: CheckRun): Promise<void>;
+    /**
+     * Start a workflow at a ref (#4169), for a build the tick asks for: a
+     * bisect step, or `chant ci run --at`. `workflow` is the file's name in
+     * `.github/workflows/`, and `ref` a branch or tag. Absent on a forge chant
+     * can't ask.
+     */
+    dispatch?(workflow: string, ref: string): Promise<void>;
 }
 export interface GithubCiForgeOptions {
     /** `$GITHUB_API_URL`: `https://api.github.com` or `<host>/api/v3`. */

package/dist/workspace/ci-green-forge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-green-forge.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-forge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAwC,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,6GAA6G;IAC7G,MAAM,EAAE,MAAM,CAAC;IACf,8HAA8H;IAC9H,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,6GAA6G;IAC7G,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,gJAAgJ;IAChJ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAKD,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAkCjE;AAED,0EAA0E;AAC1E,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,IAAI,EAAE,MAAM,EAKvB;CACF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAiB,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EAAE,SAAS,CAAC,EAAE,UAAU,GAAG,OAAO,CAW9I"}
+{"version":3,"file":"ci-green-forge.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-forge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAwC,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,6GAA6G;IAC7G,MAAM,EAAE,MAAM,CAAC;IACf,8HAA8H;IAC9H,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,6GAA6G;IAC7G,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,gJAAgJ;IAChJ,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,+CAA+C;IAC/C,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C;;;OAGG;IACH,KAAK,CAAC,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAKD,+GAA+G;AAC/G,wBAAgB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CA8CjE;AAED,0EAA0E;AAC1E,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,IAAI,EAAE,MAAM,EAKvB;CACF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAiB,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EAAE,SAAS,CAAC,EAAE,UAAU,GAAG,OAAO,CAW9I"}

package/dist/workspace/ci-green-forge.js

@@ -55,7 +55,19 @@ export function githubCiForge(opts) {
             }
             return out;
         },
+        // An Actions job's check run has the job's id, so the job is re-run by it. Both need `actions: write`.
+        async rerun(run) {
+            await post(`${root}/repos/${opts.repo}/actions/jobs/${run.id}/rerun`, {});
+        },
+        async dispatch(workflow, ref) {
+            await post(`${root}/repos/${opts.repo}/actions/workflows/${encodeURIComponent(workflow)}/dispatches`, { ref });
+        },
     };
+    async function post(url, body) {
+        const res = await fetchImpl(url, { method: "POST", headers: { ...headers, "Content-Type": "application/json" }, body: JSON.stringify(body) });
+        if (!res.ok)
+            throw new ForgeApiError("POST", url, res.status, await res.text());
+    }
 }
 /** Thrown for a forge `chant ci tick` has no check-run client for yet. */
 export class CiForgeUnsupportedError extends Error {

package/dist/workspace/ci-green-workflow.d.ts

@@ -44,7 +44,7 @@
  * the command runs in records it in its generated-file record, so `WSP081`
  * allows one declarer.
  */
-import type { CiGreen } from "./declaration.js";
+import type { CiBuild, CiGreen } from "./declaration.js";
 /** Where the workflow goes, relative to the repository root. */
 export declare const CI_GREEN_WORKFLOW_FILE = ".github/workflows/chant-ci-green.yml";
 export declare const CI_GREEN_WORKFLOW_NAME = "chant-ci-green";
@@ -69,6 +69,15 @@ export interface WorkflowScan {
 }
 /** Find the workflows that hold the required phases' check runs. */
 export declare function workflowsHolding(green: CiGreen, sources: readonly WorkflowSource[]): WorkflowScan;
+/**
+ * The workflow files that hold a check run of one of `phases` and can be
+ * started by hand (`workflow_dispatch`), by file name, for a build the tick
+ * asks for (#4169). Files that can't be parsed are left out.
+ */
+export declare function dispatchableWorkflows(green: CiGreen, phases: readonly string[], sources: readonly WorkflowSource[]): {
+    dispatchable: string[];
+    without: string[];
+};
 /** The repository's GitHub workflow files, other than `skip`. */
 export declare function readWorkflowSources(repoRoot: string, skip: string): WorkflowSource[];
 export interface WorkflowInput {
@@ -113,6 +122,51 @@ export type PushToken = {
 export declare const ACTIONS_NAME: RegExp;
 /** The workflow's YAML, without the generated-file header. Deterministic: the same input writes the same bytes. */
 export declare function renderCiGreenWorkflow(input: WorkflowInput): string;
+/** Whether any phase sets `build` (#4169): then the tick may re-run jobs and start workflows. */
+export declare const declaresBuild: (green: CiGreen) => boolean;
+/** Whether a required phase builds only the newest commit (#4169). */
+export declare const newestPhases: (green: CiGreen) => boolean;
+/** The comment line above each top-level block `ci workflow` writes into a phase's workflow. */
+export declare const BUILD_BLOCK_MARKER = "# Written by chant ci workflow from ci.green's build (#4169); edit ci.green and run it again.";
+/** What `ci workflow` writes into one workflow holding a phase that sets `build`. */
+export interface BuildTriggerEdit {
+    /** Relative to the repository root. */
+    path: string;
+    build: CiBuild;
+    phases: string[];
+    /** The file with its triggers and concurrency written. */
+    text: string;
+    changed: boolean;
+}
+/**
+ * The workflows holding the check runs of phases that set `build`, each with
+ * its triggers and concurrency written for that build (#4169):
+ *
+ * - `newest`: on pushes to the branch, and by hand (`workflow_dispatch`),
+ *   which is how the tick starts a bisect step or a requested build at a
+ *   `ci/build/<sha>` tag. A `schedule` goes: a runner freeing up, not a
+ *   clock, picks the commit. Other triggers stay. One concurrency group per
+ *   ref that never cancels a run in progress, so GitHub keeps the newest
+ *   push waiting and drops the ones between, and each tag's build runs in a
+ *   group of its own.
+ * - `every`: the triggers stay, and the group is the commit itself on the
+ *   branch, so no push cancels or replaces another's run; elsewhere, such as
+ *   a pull request, a new push cancels the run it supersedes.
+ *
+ * Only the top-level `on:` (for `newest`) and `concurrency:` blocks change,
+ * each under {@link BUILD_BLOCK_MARKER}; the rest of the file is kept as it
+ * is. Throws when one workflow holds a phase of each build, which no one
+ * concurrency group can serve.
+ */
+export declare function buildTriggerEdits(green: CiGreen, sources: readonly WorkflowSource[]): BuildTriggerEdit[];
+/**
+ * Replace the top-level `key:` block of a YAML file with `value` (or with
+ * `value`'s lines, the key's own line first), under
+ * {@link BUILD_BLOCK_MARKER}, or add it before `permissions:` or `jobs:`
+ * when the file has none. The block runs from its key's line to the next
+ * line at column 0 that is not blank; comments above the key stay.
+ */
+export declare function writeTopLevel(text: string, key: string, value: Record<string, unknown> | string[]): string;
 /** The header line naming the command that regenerates the file, and where to run it. */
 export declare function ciGreenHeader(command: string, where: "member" | "root"): string;
 /** Write the file, creating its directory. Returns the path relative to the current directory. */

package/dist/workspace/ci-green-workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-green-workflow.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAI7C,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAYnD;AAYD,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sDAAsD;IACtD,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,YAAY,CAyBjG;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CASpF;AAID,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,sDAAsD;IACtD,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,4GAA4G;AAC5G,eAAO,MAAM,YAAY,QAA6B,CAAC;AAEvD,mHAAmH;AACnH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAsElE;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAE/E;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAItE"}
+{"version":3,"file":"ci-green-workflow.d.ts","sourceRoot":"","sources":["../../src/workspace/ci-green-workflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAItD,gEAAgE;AAChE,eAAO,MAAM,sBAAsB,yCAAyC,CAAC;AAC7E,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAYnD;AAYD,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sDAAsD;IACtD,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,YAAY,CAyBjG;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG;IAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkBlK;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CASpF;AAID,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,sDAAsD;IACtD,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,4GAA4G;AAC5G,eAAO,MAAM,YAAY,QAA6B,CAAC;AAEvD,mHAAmH;AACnH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CA0ElE;AAED,iGAAiG;AACjG,eAAO,MAAM,aAAa,UAAW,OAAO,YAAoD,CAAC;AACjG,sEAAsE;AACtE,eAAO,MAAM,YAAY,UAAW,OAAO,YAAqF,CAAC;AAIjI,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,kGAAkG,CAAC;AAElI,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,gBAAgB,EAAE,CAyCxG;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAe1G;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAE/E;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAItE"}