@intentius/chant 0.124.34 → 0.124.35

package/dist/cli/handlers/graph.js

@@ -406,7 +406,7 @@ async function runGraphLive(ctx, format) {
         // no stack carries a `src`.
         const scopedStacks = stacks.filter((s) => s.src);
         if (scopedStacks.length > 0) {
-            const declaredIr = await buildDeclaredPerStack(scopedStacks, projectPath);
+            const declaredIr = await buildDeclaredPerStack(scopedStacks, projectPath, (g, entities) => withLexiconEdges(g, plugins, entities));
             ir =
                 args.overlayAnchor === "live"
                     ? overlayGraphs(ir, declaredIr, overlayOpts)
@@ -432,7 +432,7 @@ async function runGraphLive(ctx, format) {
             }
             else {
                 await mergeGraphOps(declared.entities, declared.sourceFiles, projectPath);
-                const declaredIr = buildGraphIr(declared.entities, projectPath);
+                const declaredIr = withLexiconEdges(buildGraphIr(declared.entities, projectPath), plugins, declared.entities);
                 ir =
                     args.overlayAnchor === "live"
                         ? overlayGraphs(ir, declaredIr, overlayOpts)

package/dist/cli/handlers/pr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAuDH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAMlD,qDAAqD;AACrD,eAAO,MAAM,aAAa,cAAc,CAAC;AAqSzC,mKAAmK;AACnK,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAyDD,yLAAyL;AACzL,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAGzE;AAuPD,uKAAuK;AACvK,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1E"}
+{"version":3,"file":"pr.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAwDH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAMlD,qDAAqD;AACrD,eAAO,MAAM,aAAa,cAAc,CAAC;AAqSzC,mKAAmK;AACnK,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAyDD,yLAAyL;AACzL,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAGzE;AAwOD,uKAAuK;AACvK,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1E"}

package/dist/cli/handlers/pr.js

@@ -86,6 +86,7 @@ import { formatError, formatInfo, formatSuccess, formatWarning } from "../format
 import { reportUninstalledDependencies } from "../dependencies.js";
 import { findWorkspaceRoot } from "../../project-root.js";
 import { resolveChangedUnits } from "./fan-out.js";
+import { coverByMerges, greenOp } from "../../components/green-cover.js";
 import { GATED_EXIT_CODE, autoReleaseRun, recordAutoReleasesForRun } from "./run.js";
 import { failedRunExitCode } from "../../components/driver.js";
 /** Where the reports land unless `--output` says. */
@@ -430,11 +431,20 @@ async function prApply(ctx, stage) {
         return fail("--wave runs one wave of a --wave-gate apply, so it needs --wave-gate <name>");
     if (args.wave !== undefined && args.wave < 1)
         return fail(`--wave counts from 1, not ${args.wave}`);
+    // #4168 step 9: apply on merge applies a green commit, measured from the one applied before it.
+    let green;
+    if (args.green) {
+        const target = await greenTargetOf(ctx);
+        if (typeof target === "number")
+            return target;
+        green = target;
+        ctx = { ...ctx, args: { ...ctx.args, base: green.base, head: green.commit } };
+    }
     const p = await prepare(ctx, "apply");
     if (typeof p === "number")
         return p;
     let pr = args.pr ?? null;
-    if (pr === null && p.forge && p.plan.order.length > 0) {
+    if (pr === null && !green && p.forge && p.plan.order.length > 0) {
         try {
             pr = await p.forge.pullRequestFor(p.head);
         }
@@ -442,7 +452,7 @@ async function prApply(ctx, stage) {
             return fail(`could not ask ${p.forge.kind} which pull request merged ${p.head}: ${err instanceof Error ? err.message : String(err)}`);
         }
     }
-    const op = pr === null ? "pr-unknown" : prOp(pr, p.member);
+    const op = green ? greenOp(green.commit, p.member) : pr === null ? "pr-unknown" : prOp(pr, p.member);
     // The run id the release records carry, chosen before the run so that
     // `--events-json` (#4041, #4007) names the run by it too.
     const release = autoReleaseRun(`${op}-${Date.now()}`);
@@ -451,7 +461,7 @@ async function prApply(ctx, stage) {
     stage.stream = events;
     events?.emit({ type: "run-start", waves: p.plan.waves });
     if (args.waveGate)
-        return prApplyWaves(ctx, p, { pr, op, release, upload, events });
+        return prApplyWaves(ctx, p, { pr, op, release, upload, events, ...(green ? { green } : {}) });
     // `--resume` (#3464): an earlier attempt at this change on this commit
     // applied part of an approved set. When the members left are covered by
     // it and its approval still stands, finish it under that approval.
@@ -486,7 +496,7 @@ async function prApply(ctx, stage) {
     if (p.plan.order.length === 0) {
         return stop(prReport({ ...base, approval: { status: "pending" }, status: "nothing" }), 0);
     }
-    if (pr === null) {
+    if (pr === null && !green) {
         return stop(prReport({
             ...base,
             approval: { status: "pending" },
@@ -508,35 +518,18 @@ async function prApply(ctx, stage) {
     // one a pending fact waits on, can be read once this job is gone.
     await storeChangeSetForGate(ctx, p, set.doc);
     let approval;
+    let via = "gate";
     if (resumed) {
         approval = resumed.approval;
     }
     else {
-        const check = await emitGateStep(events?.emit, { op, gate: p.gate }, () => decidePrGate(gitGateLedgerPort(), {
-            op,
-            gate: p.gate,
-            digest: set.doc.digest,
-            description: `pull request #${pr}: ${p.plan.order.join(", ")}`,
-        }), (unapproved) => {
-            const a = approvalOf(unapproved);
-            return a.status === "changed"
-                ? describePlanChanged({ op, gate: p.gate, digest: set.doc.digest, approval: a })
-                : `No approval stands for this plan. Approve it: ${prApproveCommand({ op, gate: p.gate, digest: set.doc.digest })}`;
-        });
-        approval = approvalOf(check);
-        if (!check.satisfied) {
-            const partial = { ...base, approval, status: "refused" };
-            const report = approval.status === "changed"
-                ? prReport({ ...partial, refusal: "plan-changed", message: describePlanChanged({ op, gate: p.gate, digest: set.doc.digest, approval }) })
-                : prReport({
-                    ...partial,
-                    refusal: "not-approved",
-                    message: `No approval stands for this plan, so nothing was applied. Approve it: ${prApproveCommand({ op, gate: p.gate, digest: set.doc.digest })}; then run the apply again.`,
-                });
-            return stop(report, GATED_EXIT_CODE);
-        }
+        const decided = await decideApplyGate(p, { op, pr, set, events, ...(green ? { green } : {}) });
+        approval = decided.approval;
+        if (!decided.satisfied)
+            return stop(prReport({ ...base, approval, status: "refused", refusal: decided.refusal, message: decided.message }), GATED_EXIT_CODE);
+        via = decided.via;
     }
-    const reviewOf = reviewCheck(args, p, pr);
+    const reviewOf = reviewFor(args, p, pr, green);
     const review = await reviewOf(approval.approvedBy ?? [], "The plan");
     if (review && "error" in review)
         return fail(review.error);
@@ -584,7 +577,7 @@ async function prApply(ctx, stage) {
             ...roundLedger,
             ...(roundLedger.approvalRule ? { approvalRule: (g, at) => roundLedger.approvalRule(g === gate ? p.gate : g, at) } : {}),
         };
-        const check = await emitGateStep(events?.emit, { op, gate }, () => decidePrGate(port, { op, gate, digest: planned.doc.digest, description: `pull request #${pr}, round ${round}: planned again after an upstream applied` }));
+        const check = await emitGateStep(events?.emit, { op, gate }, () => decidePrGate(port, { op, gate, digest: planned.doc.digest, description: `${changeLabel(pr, green)}, round ${round}: planned again after an upstream applied` }));
         const roundApproval = approvalOf(check);
         if (!check.satisfied)
             return { satisfied: false, approval: roundApproval };
@@ -644,6 +637,8 @@ async function prApply(ctx, stage) {
     // a person. A step that refused its plan because the target moved since
     // the approval exits 3, as a moved digest does before anything applies (#3997).
     const exit = applied.status === "applied" ? 0 : applied.status === "waiting" ? GATED_EXIT_CODE : failedRunExitCode(applied.run.results);
+    if (green && applied.status === "applied")
+        await recordGreenApplied(p, green, set.doc.digest, approval, via);
     const code = await stop(report, exit, applied.run.status === "gated" ? "gated" : undefined);
     if (applied.status === "applied")
         console.error(formatSuccess(`applied the plan ${report.digest} approved by ${(approval.approvedBy ?? []).join(", ")}`));
@@ -763,6 +758,115 @@ async function prRecord(ctx, stage) {
     const stop = stopper(ctx, p, events, upload);
     return stop(report, status === "plan-failed" ? 1 : 0);
 }
+/** What a gate's description and messages call the change: the pull request, or the green commit (#4168 step 9). */
+function changeLabel(pr, green) {
+    return green ? `green ${green.commit.slice(0, 12)}` : `pull request #${pr}`;
+}
+/**
+ * `pr-apply --green` (#4168 step 9): the green commit at HEAD, the last one
+ * applied to the environment, and the merges between with their approvals.
+ * Exits 0 when HEAD is the green commit last applied.
+ */
+async function greenTargetOf(ctx) {
+    const { args } = ctx;
+    if (args.pr !== undefined)
+        return fail("--green applies a green commit and every merge since the last one applied, so it takes no --pr; the merge records name the pull requests");
+    const { resolveGreenTarget } = await import("../../components/green-cover.js");
+    const env = args.env ?? "local";
+    const resolved = await resolveGreenTarget({ cwd: resolve("."), env, ...(args.base ? { base: args.base } : {}), gate: args.gate ?? PR_APPLY_GATE });
+    if (resolved.status === "error")
+        return fail(resolved.message, resolved.hint);
+    if (resolved.status === "applied") {
+        console.error(formatInfo(`${resolved.commit.slice(0, 12)} is the green commit last applied to ${env}, so there is nothing to apply`));
+        return 0;
+    }
+    const t = resolved.target;
+    const from = { applied: "the green commit last applied", flag: "--base", "previous-green": "the green commit before it", parent: "its parent" }[t.baseFrom];
+    console.error(formatInfo(`applying green ${t.commit.slice(0, 12)}, measured from ${t.base.slice(0, 12)} (${from}): ${t.merges.length} commit${t.merges.length === 1 ? "" : "s"}, ${t.approved.length} with an approved plan`));
+    return t;
+}
+/**
+ * The first plan's gate. For one pull request, its gate on the plan's digest.
+ * For a green commit (#4168 step 9), the approved plans of the merges since
+ * the last applied green commit when they cover every member, and otherwise
+ * a gate of the green commit's own on the combined digest.
+ */
+async function decideApplyGate(p, at) {
+    const { op, pr, set, events, green } = at;
+    let uncovered = [];
+    if (green) {
+        const cover = coverByMerges(set.doc, green.approved);
+        if (cover.covered) {
+            console.error(formatInfo(`the approved plans of ${cover.coveredBy.length} merge${cover.coveredBy.length === 1 ? "" : "s"} cover the plan at ${green.commit.slice(0, 12)}, so it applies under them`));
+            return { approval: { status: "approved", approvedBy: cover.approvedBy }, satisfied: true, via: "merges" };
+        }
+        uncovered = cover.uncovered;
+        console.error(formatInfo(`the merged changes' approvals do not cover the plan at ${green.commit.slice(0, 12)}: ${uncovered.join("; ")}`));
+    }
+    const digest = set.doc.digest;
+    const check = await emitGateStep(events?.emit, { op, gate: p.gate }, () => decidePrGate(gitGateLedgerPort(), { op, gate: p.gate, digest, description: `${changeLabel(pr, green)}: ${p.plan.order.join(", ")}` }), (unapproved) => {
+        const a = approvalOf(unapproved);
+        return a.status === "changed"
+            ? describePlanChanged({ op, gate: p.gate, digest, approval: a })
+            : `No approval stands for this plan. Approve it: ${prApproveCommand({ op, gate: p.gate, digest })}`;
+    });
+    const approval = approvalOf(check);
+    if (check.satisfied)
+        return { approval, satisfied: true, via: "gate" };
+    if (approval.status === "changed")
+        return { approval, satisfied: false, refusal: "plan-changed", message: describePlanChanged({ op, gate: p.gate, digest, approval }) };
+    const why = uncovered.length > 0 ? ` The approvals of the merges since the last applied green commit do not cover it: ${uncovered.join("; ")}.` : "";
+    return {
+        approval,
+        satisfied: false,
+        refusal: "not-approved",
+        message: `No approval stands for this plan, so nothing was applied.${why} Approve it: ${prApproveCommand({ op, gate: p.gate, digest })}; then run the apply again.`,
+    };
+}
+/**
+ * The `--require-review` check for the apply. A green commit (#4168 step 9)
+ * has no pull request of its own, so its approvers are checked against every
+ * pull request merged since the last applied green commit for authorship
+ * only: whoever wrote one of them never counts.
+ */
+function reviewFor(args, p, pr, green) {
+    if (!green)
+        return reviewCheck(args, p, pr);
+    const checks = green.prs.map((n) => reviewCheck(args, p, n, true));
+    return async (approvedBy, what) => {
+        for (const check of checks) {
+            const stop = await check(approvedBy, what);
+            if (stop)
+                return stop;
+        }
+        return undefined;
+    };
+}
+/** Record the green commit as applied to the environment (#4168 step 9), and push `chant/lifecycle`. A failure warns. */
+async function recordGreenApplied(p, green, digest, approval, via) {
+    const { writeGreenApply, GREEN_APPLY_CONTRACT } = await import("../../lifecycle/green-apply.js");
+    const { pushLifecycleReport } = await import("../../lifecycle/git.js");
+    try {
+        await writeGreenApply({
+            contract: GREEN_APPLY_CONTRACT,
+            env: p.env,
+            ...(p.member ? { member: p.member } : {}),
+            commit: green.commit,
+            base: green.base,
+            digest,
+            approval: via,
+            approvedBy: approval.approvedBy ?? [],
+            merges: green.merges,
+            appliedAt: new Date().toISOString(),
+        });
+        const pushed = await pushLifecycleReport();
+        if (pushed.pushWarning)
+            console.error(formatWarning({ message: pushed.pushWarning }));
+    }
+    catch (err) {
+        console.error(formatWarning({ message: `could not record ${green.commit.slice(0, 12)} as applied to ${p.env}: ${err instanceof Error ? err.message : String(err)}` }));
+    }
+}
 /** How a stage stops: settle its events, write and publish the report, say how it ended, and return `code`. */
 function stopper(ctx, p, events, upload) {
     return async (report, code, settle) => {
@@ -781,7 +885,7 @@ function stopper(ctx, p, events, upload) {
  * authors are read once, at the first call. Without `--require-review` every
  * approval counts.
  */
-function reviewCheck(args, p, pr) {
+function reviewCheck(args, p, pr, authorsOnly = false) {
     let read;
     return async (approvedBy, what) => {
         const forge = p.forge;
@@ -810,7 +914,7 @@ function reviewCheck(args, p, pr) {
                     `Have someone else approve the pull request and the plan, then run the apply again.`,
             };
         }
-        const strangers = approversWithoutReview(approvedBy, reviewers);
+        const strangers = authorsOnly ? [] : approversWithoutReview(approvedBy, reviewers);
         if (strangers.length > 0) {
             return {
                 refusal: "not-a-reviewer",
@@ -1035,7 +1139,7 @@ function inWave(body, wave) {
  */
 async function prApplyWaves(ctx, p, at) {
     const { args } = ctx;
-    const { pr, op, events, upload } = at;
+    const { pr, op, events, upload, green } = at;
     const waveGate = args.waveGate;
     const only = args.wave;
     const total = p.plan.waves.length;
@@ -1043,7 +1147,7 @@ async function prApplyWaves(ctx, p, at) {
     const log = applyLog();
     log({ type: "run-start", waves: p.plan.waves });
     const reportBase = { stage: "apply", pr, env: p.env, ...(p.member ? { member: p.member } : {}), base: p.base, head: p.head, op, gate: p.gate, plan: p.plan, signal: p.signal, waveGate };
-    if (p.plan.order.length === 0 || pr === null) {
+    if (p.plan.order.length === 0 || (pr === null && !green)) {
         const set = await planAll(p, events?.emit);
         if (p.plan.order.length === 0)
             return stop(prReport({ ...reportBase, set, approval: { status: "pending" }, status: "nothing" }), 0);
@@ -1081,6 +1185,7 @@ async function prApplyWaves(ctx, p, at) {
         ? { doc: carry.record.changeSet, members: carry.record.members, plans: {}, outputs: carry.record.planOutputs, failed: false }
         : undefined;
     let approval = carry?.approval ?? { status: "pending" };
+    let via = "gate";
     const report = (input) => {
         const set = approved ?? { doc: composeChangeSet([]), members: [], plans: {}, outputs: {}, failed: false };
         const members = set.members.map((m) => {
@@ -1120,26 +1225,15 @@ async function prApplyWaves(ctx, p, at) {
             return stop(report({ status: "plan-failed", message: "A member failed to plan, so there is no plan to compare with the approved one. Nothing was applied." }), 1);
         }
         await storeChangeSetForGate(ctx, p, set.doc);
-        const check = await emitGateStep(events?.emit, { op, gate: p.gate }, () => decidePrGate(gitGateLedgerPort(), { op, gate: p.gate, digest: set.doc.digest, description: `pull request #${pr}: ${p.plan.order.join(", ")}` }), (unapproved) => {
-            const a = approvalOf(unapproved);
-            return a.status === "changed"
-                ? describePlanChanged({ op, gate: p.gate, digest: set.doc.digest, approval: a })
-                : `No approval stands for this plan. Approve it: ${prApproveCommand({ op, gate: p.gate, digest: set.doc.digest })}`;
-        });
-        approval = approvalOf(check);
-        if (!check.satisfied) {
-            return stop(approval.status === "changed"
-                ? report({ status: "refused", refusal: "plan-changed", message: describePlanChanged({ op, gate: p.gate, digest: set.doc.digest, approval }) })
-                : report({
-                    status: "refused",
-                    refusal: "not-approved",
-                    message: `No approval stands for this plan, so nothing was applied. Approve it: ${prApproveCommand({ op, gate: p.gate, digest: set.doc.digest })}; then run the apply again.`,
-                }), GATED_EXIT_CODE);
-        }
+        const decided = await decideApplyGate(p, { op, pr, set, events, ...(green ? { green } : {}) });
+        approval = decided.approval;
+        if (!decided.satisfied)
+            return stop(report({ status: "refused", refusal: decided.refusal, message: decided.message }), GATED_EXIT_CODE);
+        via = decided.via;
         planned = set;
     }
     const approvedSet = approved;
-    const review = reviewCheck(args, p, pr);
+    const review = reviewFor(args, p, pr, green);
     const prReview = await review(approval.approvedBy ?? [], "The plan");
     if (prReview && "error" in prReview)
         return fail(prReview.error);
@@ -1223,7 +1317,7 @@ async function prApplyWaves(ctx, p, at) {
                 await storeChangeSetForGate(ctx, p, fresh.doc);
                 writeWaveChangeSet(ctx, k, fresh.doc, upload);
                 const approveLine = prApproveCommand({ op, gate, digest });
-                const check = await emitGateStep(events?.emit, { op, gate }, () => decidePrGate(gitGateLedgerPort(), { op, gate, digest, description: `pull request #${pr}, wave ${k} of ${total}: ${wavePlan.order.join(", ")}` }), (unapproved) => unapproved.mismatch
+                const check = await emitGateStep(events?.emit, { op, gate }, () => decidePrGate(gitGateLedgerPort(), { op, gate, digest, description: `${changeLabel(pr, green)}, wave ${k} of ${total}: ${wavePlan.order.join(", ")}` }), (unapproved) => unapproved.mismatch
                     ? `wave ${k}'s plan changed after its approval. Approve the plan now: ${approveLine}`
                     : `wave ${k}'s plan is not the one the pull request approved. Approve it: ${approveLine}`);
                 const waveApproval = approvalOf(check);
@@ -1300,6 +1394,8 @@ async function prApplyWaves(ctx, p, at) {
         console.error(formatSuccess(`applied wave ${k} of ${total} under ${entry.approval === "pull-request" ? `the pull request's approval of ${approvedSet.doc.digest}` : `${entry.gate}, approved for ${entry.digest}`} by ${(entry.approvedBy ?? []).join(", ")}`));
     }
     const done = p.plan.order.every((name) => completed.has(name));
+    if (green && done)
+        await recordGreenApplied(p, green, approvedSet.doc.digest, approval, via);
     return stop(report({ status: done ? "applied" : "wave-applied" }), 0);
 }
 /** A wave's new plan (#4003), beside the report as `change-set-wave-<k>.json`, for whoever approves its gate. */

package/dist/cli/handlers/promote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA+CH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA4xBlD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2E/E;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsChF;AAsCD,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BhF"}
+{"version":3,"file":"promote.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/promote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAgDH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAyyBlD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2E/E;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsChF;AAsCD,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BhF"}

package/dist/cli/handlers/promote.js

@@ -20,6 +20,7 @@
  * environment: every component of the release at the digest the environment
  * ran from it, through the release gate `promote --release` binds (#4045).
  */
+import { ENV_VAR } from "../../env.js";
 import { dirname, join, resolve } from "node:path";
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { loadChantConfig } from "../../config.js";
@@ -73,9 +74,16 @@ function planJson(plan, removed) {
 function resolveActor(ctx) {
     return ctx.args.actor ?? process.env.GITHUB_ACTOR ?? process.env.GITLAB_USER_LOGIN ?? process.env.USER;
 }
-/** Config, params and the declared components, or the exit code of a refusal already printed. */
-async function loadProject(ctx, selector) {
+/**
+ * Config, params and the declared components, or the exit code of a refusal
+ * already printed. `env` is the environment being deployed: it is set as
+ * `CHANT_ENV` before the components load, as `--env` sets it for `chant run`
+ * (../main.ts), so a component that reads it (a stack name per environment)
+ * deploys to that environment and not to the one it was promoted from (#4222).
+ */
+async function loadProject(ctx, selector, env) {
     const { args } = ctx;
+    process.env[ENV_VAR] = env;
     const projectPath = resolve(".");
     const { config } = await loadChantConfig(projectPath).catch(() => ({ config: {} }));
     const paramsResolution = resolveCliBuildParams(config.buildParams, {
@@ -315,15 +323,21 @@ async function deployPlan(ctx, verb, plan, project, actor, record, under) {
     const prepared = [];
     const removed = new Map();
     const refusals = [];
+    // #4222: a component with no artifact, deployed from the templates the release records, and its record's digest.
+    const templateDigests = new Map();
+    const { releaseTemplatesDigest } = await import("../../components/release-promote.js");
     for (const item of plan.items) {
+        const templates = under ? releaseTemplatesDigest(under.target, item.component) : null;
         // A rollback and a redeploy deploy a release this environment already
         // received, so neither runs the publish step.
-        const result = withoutBuildSteps(byName.get(item.component), verb === "promote" ? {} : { pinDigest: item.digest, verb: `a ${verb}` });
+        const result = withoutBuildSteps(byName.get(item.component), { ...(verb === "promote" ? {} : { pinDigest: item.digest, verb: `a ${verb}` }), templatesPinned: templates !== null });
         if ("error" in result)
             refusals.push(result.error);
         else {
             prepared.push(result.component);
             removed.set(item.component, result.removed);
+            if (result.templateOnly && templates !== null)
+                templateDigests.set(item.component, templates);
         }
     }
     if (refusals.length > 0) {
@@ -573,7 +587,8 @@ async function deployPlan(ctx, verb, plan, project, actor, record, under) {
                 const approver = gateApprover(result);
                 const admission = gateAdmission(result);
                 const input = record(item, plan.to, { runId, ...(runOrigin ? { runOrigin } : {}), actor: actor, timestamp, ...(approver ? { approver } : {}), ...(admission ? { admission } : {}) });
-                const { record: written } = await appendReleaseRecord(under ? { ...input, releaseDigest: under.release.releaseDigest } : input);
+                const templates = templateDigests.get(item.component);
+                const { record: written } = await appendReleaseRecord(under ? { ...input, ...(templates ? { digest: templates } : {}), releaseDigest: under.release.releaseDigest } : input);
                 recorded.push(written);
             }
             if (outcome)
@@ -792,7 +807,7 @@ export async function runComponentsPromote(ctx) {
     const who = actorOrRefuse(ctx);
     if (typeof who === "number")
         return who;
-    const project = await loadProject(ctx, args.component ?? "all");
+    const project = await loadProject(ctx, args.component ?? "all", to);
     if (typeof project === "number")
         return project;
     // The member's `environments` array is its promotion order (#4030). It
@@ -874,7 +889,7 @@ export async function runComponentsRollback(ctx) {
         return who;
     if (args.release)
         return runReleaseRollback(ctx, env, args.release, who.actor);
-    const project = await loadProject(ctx, args.component);
+    const project = await loadProject(ctx, args.component, env);
     if (typeof project === "number")
         return project;
     await fetchLifecycle().catch(() => false);
@@ -904,7 +919,7 @@ export async function runComponentsRollback(ctx) {
  * runs now, as `promote --release` binds them (#4045).
  */
 async function runReleaseRollback(ctx, env, ref, actor) {
-    const project = await loadProject(ctx, "all");
+    const project = await loadProject(ctx, "all", env);
     if (typeof project === "number")
         return project;
     await fetchLifecycle().catch(() => false);
@@ -942,7 +957,7 @@ export async function runComponentsRedeploy(ctx) {
     const who = actorOrRefuse(ctx);
     if (typeof who === "number")
         return who;
-    const project = await loadProject(ctx, args.component);
+    const project = await loadProject(ctx, args.component, env);
     if (typeof project === "number")
         return project;
     await fetchLifecycle().catch(() => false);

package/dist/cli/handlers/release.d.ts

@@ -20,6 +20,11 @@
  *   release candidates [--env <env>] [--json]
  *       the green commits of trunk a release can be cut from, each with what it
  *       would ship, and what each environment runs (#4168 4.2)
+ *   release compose <name> [--base <label|sha>] (--pr <n> | --work <id>)... [--yes] [--json]
+ *       pick chosen trunk changes onto a base, each with a Chant-Composed-From
+ *       trailer, on the pushed branch chant/compose/<name> (#4168 4.3); a dry
+ *       run unless --yes. `release cut` takes a green commit of that branch,
+ *       and `--channel <tag>` makes its publish move that tag, not latest
  *   release list [--json]
  *       every release of this member with its targets, its cuts and where it runs;
  *       `--json` prints the read contract's `releases` document
@@ -103,4 +108,11 @@ export declare function runReleaseExport(ctx: CommandContext): Promise<number>;
 /** Internal: compile one environment, or build artifacts, in this process, and print the JSON the cut reads. */
 export declare function runReleaseCompile(ctx: CommandContext): Promise<number>;
 export declare function runReleaseUnknown(ctx: CommandContext): Promise<number>;
+/**
+ * `release compose <name> [--base <label|sha>] (--pr <n> | --work <id>)... [--yes] [--json]`
+ * (#4168 4.3): pick the chosen trunk changes onto a base, on
+ * `chant/compose/<name>` (../../lifecycle/release-compose.ts). A dry run
+ * unless `--yes`, which moves the branch and pushes it so CI builds it.
+ */
+export declare function runReleaseCompose(ctx: CommandContext): Promise<number>;
 //# sourceMappingURL=release.d.ts.map

package/dist/cli/handlers/release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAyBlD,0HAA0H;AAC1H,wBAAgB,YAAY,CAAC,GAAG,EAAE;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uFAAuF;IACvF,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,MAAM,EAAE,CASX;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAG3D;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAwNxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA2G5E;AAQD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAkC3E;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAiC/E;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BzE;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAyC3E;AAED,gHAAgH;AAChH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E"}
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../../src/cli/handlers/release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAOH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAyBlD,0HAA0H;AAC1H,wBAAgB,YAAY,CAAC,GAAG,EAAE;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,uFAAuF;IACvF,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,MAAM,EAAE,CASX;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAG3D;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAqPxE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA4G5E;AAQD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAkC3E;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsC/E;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BzE;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAyC3E;AAED,gHAAgH;AAChH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsD5E"}