@intentius/chant 0.124.52 → 0.124.54

package/dist/components/promote.js

@@ -40,7 +40,8 @@
 import { parseWiringRef } from "../lint/rules/comp/support.js";
 import { isApplyRecord, latestPerComponent } from "../lifecycle/release-ledger.js";
 import { CapabilityRegistry } from "./capability.js";
-import { runInterpretDriver, DriverRunFailure, } from "./driver.js";
+import { runInterpretDriver, DriverRunFailure, deployContext, } from "./driver.js";
+import { planAndRunComponentGroup, runComponentGroup } from "./groups.js";
 /**
  * Step kinds that produce an artifact at build time: the build family, and the
  * SBOM steps that read the freshly built archive. A promote removes them.
@@ -532,6 +533,11 @@ export function checkPublishedDigest(registry, expected) {
     }
     return checked;
 }
+/** The run in `runs` that plans exactly the members of `group`. */
+function approvedRunOf(runs, group) {
+    const want = [...group.components].sort().join("\n");
+    return runs?.find((r) => Object.keys(r.plans).sort().join("\n") === want);
+}
 /**
  * Deploy the plan's components to `plan.to`, in dependency order. A
  * `dependsOn` edge to a component outside the promotion is dropped, the same
@@ -546,18 +552,42 @@ export async function runPromotion(options) {
         .filter((c) => names.has(c.name))
         .map((c) => ({ ...c, dependsOn: (c.dependsOn ?? []).filter((d) => names.has(d)) }));
     const expected = new Map(plan.items.map((i) => [i.component, i.digest]));
+    const registry = checkPublishedDigest(options.registry, expected);
+    const releaseIdentity = (component) => {
+        const item = plan.items.find((i) => i.component === component);
+        return item ? { version: item.digest, revision: item.source.gitSha } : undefined;
+    };
+    // ws-107 (#4465): a group applies as one, through its approved plan.
+    const grouped = options.grouped?.groups?.length ? options.grouped : undefined;
+    const byName = new Map(targets.map((c) => [c.name, c]));
+    const groups = grouped
+        ? {
+            waves: grouped.waves,
+            groups: grouped.groups,
+            run: (group, componentOutputs) => {
+                const each = {
+                    group,
+                    components: byName,
+                    registry,
+                    env: plan.to,
+                    ctxOf: (name) => deployContext({ env: plan.to, releaseIdentity }, name),
+                    componentOutputs,
+                };
+                const approved = approvedRunOf(options.groupRuns, group);
+                return approved === undefined && options.planGroupsAtWave ? planAndRunComponentGroup(each) : runComponentGroup({ ...each, run: approved });
+            },
+        }
+        : undefined;
     try {
-        return await runInterpretDriver(targets, checkPublishedDigest(options.registry, expected), {
+        return await runInterpretDriver(targets, registry, {
             env: plan.to,
             componentOutputs: options.componentOutputs ?? {},
             // #2574: a gate approval for this promote or rollback is bound to the
             // release it deploys, as well as the environment and composition.
             releases: expected,
             // #3061: the workload's service.version and vcs.ref.head.revision are the earlier release's own.
-            releaseIdentity: (component) => {
-                const item = plan.items.find((i) => i.component === component);
-                return item ? { version: item.digest, revision: item.source.gitSha } : undefined;
-            },
+            releaseIdentity,
+            ...(groups ? { groups } : {}),
             ...(options.onProgress ? { onProgress: options.onProgress } : {}),
             ...(options.onRunEvent ? { onRunEvent: options.onRunEvent } : {}),
             ...(options.gates ? { gates: options.gates } : {}),

package/dist/components/release-gate.d.ts

@@ -59,7 +59,8 @@
  * component a promote, rollback or redeploy left failed or gated with nothing
  * recorded since (#4035): its record names what ran before that run.
  */
-import type { CapabilityRegistry } from "./capability.js";
+import type { CapabilityRegistry, GroupRun } from "./capability.js";
+import type { FanOutGroup, FanOutGroupFallback, FanOutPlan } from "./fan-out.js";
 import { type DriverComponent } from "./driver.js";
 import { RELEASE_GATE_OP } from "../op/gate-name.js";
 import { type ChangeSetDocument, type ChangeSetPart } from "../change-set.js";
@@ -105,6 +106,23 @@ export interface ReleaseChangeSetInput {
      * `seededOutputs`, which then holds what the run left. Default: every one.
      */
     only?: ReadonlySet<string>;
+    /**
+     * The promote's grouped fan-out (ws-107, #4465, `formRunGroups`). Each of
+     * its groups plans with one `planGroup` call in the wave it places it in,
+     * and the group digest is folded into each member's part, so the release
+     * gate's digest binds the composition. Absent, or without `groups`: every
+     * component plans by itself, wave by wave.
+     */
+    grouped?: FanOutPlan;
+}
+/** A group the release gate's plan planned as one (ws-107, #4465). */
+export interface ReleasePlanGroup extends FanOutGroup {
+    /** The group digest folded into each member's `planDigest`; `null` when the group failed to plan. */
+    digest: string | null;
+    /** Why the group failed to plan. Every member is then a failed member. */
+    error?: string;
+    /** What `runGroup` gets back. It lives in the process that planned, as the promote that applies it is. */
+    run?: GroupRun;
 }
 /** A release's change set for an environment, and what each component was planned against. */
 export interface ReleasePlan {
@@ -115,6 +133,10 @@ export interface ReleasePlan {
     plannedOutputs?: Record<string, string[]>;
     /** Per component, the references to a promoted upstream that no value stands for until it applies, sorted. Absent when none. */
     unknownInputs?: Record<string, string[]>;
+    /** The groups planned as one (#4465), in the order they planned. Absent when none. */
+    groups?: ReleasePlanGroup[];
+    /** The components that could have grouped and did not, with why: `grouped.fallbacks`. Absent when none. */
+    fallbacks?: FanOutGroupFallback[];
 }
 /**
  * A component no capability plans, as a `chant` member: what the release

package/dist/components/release-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release-gate.d.ts","sourceRoot":"","sources":["../../src/components/release-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAsF,KAAK,eAAe,EAAsD,MAAM,UAAU,CAAC;AAExL,OAAO,EAAY,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,4GAA4G;AAC5G,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,oBAAoB,CAAC;AAU9D,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CAU5E;AAED,sIAAsI;AACtI,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,iGAAiG;IACjG,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IACvC,yDAAyD;IACzD,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,kGAAkG;IAClG,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C;;;;OAIG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC5B;AAED,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,iBAAiB,CAAC;IACvB,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,4GAA4G;IAC5G,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,gIAAgI;IAChI,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC1C;AA0BD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,aAAa,CAsEhB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAEnG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2FvF;AAED,yHAAyH;AACzH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,EACtD,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtD,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUtC;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAkBtB"}
+{"version":3,"file":"release-gate.d.ts","sourceRoot":"","sources":["../../src/components/release-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAkB,MAAM,cAAc,CAAC;AACjF,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE9E,OAAO,EAAsF,KAAK,eAAe,EAAsD,MAAM,UAAU,CAAC;AAExL,OAAO,EAAY,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAIL,KAAK,iBAAiB,EACtB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,4GAA4G;AAC5G,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,6DAA6D;AAC7D,eAAO,MAAM,4BAA4B,oBAAoB,CAAC;AAU9D,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CAU5E;AAED,sIAAsI;AACtI,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,iGAAiG;IACjG,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IACvC,yDAAyD;IACzD,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,kGAAkG;IAClG,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC5C;;;;OAIG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0GAA0G;IAC1G,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,iBAAiB,CAAC;IACvB,oFAAoF;IACpF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,4GAA4G;IAC5G,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,gIAAgI;IAChI,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,sFAAsF;IACtF,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC5B,2GAA2G;IAC3G,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACnC;AA0BD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,aAAa,CAsEhB;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAEnG;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwJvF;AAED,yHAAyH;AACzH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,EACtD,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtD,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUtC;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,iBAAiB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,mBAAmB,CAkBtB"}

package/dist/components/release-gate.js

@@ -59,6 +59,7 @@
  * component a promote, rollback or redeploy left failed or gated with nothing
  * recorded since (#4035): its record names what ran before that run.
  */
+import { groupsByComponent, planComponentGroup } from "./groups.js";
 import { deployContext, resolveComponentGraph, resolveStepInput, unresolvedWiringReferences } from "./driver.js";
 import { componentPlanDigest } from "./gate-plan.js";
 import { gateName, RELEASE_GATE_OP } from "../op/gate-name.js";
@@ -215,10 +216,100 @@ export async function planReleaseSet(input) {
     const reads = {};
     const inPlan = (name) => input.only === undefined || input.only.has(name);
     const isPlannable = (c) => capabilitySteps(c.deploy).some((s) => registry.has(s.kind) && registry.resolve(s.kind).plan !== undefined);
-    const { waves } = resolveComponentGraph(components.map((c) => ({ ...c, dependsOn: (c.dependsOn ?? []).filter((d) => byName.has(d)) })));
+    const failedPart = (member, err) => ({
+        member: {
+            member,
+            lexicon: "chant",
+            planner: "chant",
+            status: "failed",
+            error: err instanceof Error ? err.message : String(err),
+            planDigest: null,
+            holes: [],
+        },
+        entries: [],
+    });
+    /** Read each dependency of `component` once, leaving out `mates`, its own group (#4465), and keep what it read. */
+    const readDependencies = async (component, mates) => {
+        for (const dep of component.dependsOn ?? []) {
+            if (mates.has(dep) || read.has(dep) || !byName.has(dep))
+                continue;
+            read.add(dep);
+            // A dependency this promote plans exposes what its plan says (#3999).
+            if (plannedBy.has(dep) && isPlannable(byName.get(dep))) {
+                const known = plannedBy.get(dep)?.known ?? {};
+                outputs[dep] = { ...known };
+                planned[dep] = Object.keys(known).sort();
+                continue;
+            }
+            const found = await readComponentOutputs(byName.get(dep), registry, deployContext({ env }, dep), outputs);
+            if (found)
+                outputs[dep] = found;
+        }
+        reads[component.name] = Object.fromEntries((component.dependsOn ?? []).filter((d) => !mates.has(d) && d in outputs).map((d) => [d, structuredClone(outputs[d])]));
+    };
+    /** The references of `component`'s plannable steps to a promoted upstream outside `mates` that its plan can't say yet. */
+    const unknownOf = (component, mates) => {
+        const unknown = new Set();
+        for (const step of capabilitySteps(component.deploy)) {
+            if (!registry.has(step.kind) || registry.resolve(step.kind).plan === undefined)
+                continue;
+            const { kind: _kind, ...rest } = step;
+            for (const r of unresolvedWiringReferences(rest, outputs))
+                if (plannedBy.has(r.source) && !r.publish && !mates.has(r.source))
+                    unknown.add(r.ref);
+        }
+        return unknown;
+    };
+    // ws-107 (#4465): a group plans once, in the wave the grouped fan-out places it in.
+    const grouped = input.grouped?.groups?.length ? input.grouped : undefined;
+    const groupOf = grouped ? groupsByComponent(grouped) : new Map();
+    const groups = [];
+    const planGroupAt = async (group) => {
+        const mates = new Set(group.components);
+        try {
+            for (const name of group.components)
+                await readDependencies(byName.get(name), mates);
+        }
+        catch (err) {
+            for (const name of group.components) {
+                plannedBy.set(name, undefined);
+                parts.push(failedPart(name, err));
+            }
+            groups.push({ ...group, digest: null, error: err instanceof Error ? err.message : String(err) });
+            return;
+        }
+        const g = await planComponentGroup({ group, components: byName, registry, env, ctxOf: (name) => deployContext({ env }, name), outputs });
+        const error = g.plans.find((p) => "error" in p)?.error;
+        groups.push({ ...group, digest: g.digest ?? null, ...(error !== undefined ? { error } : {}), ...(g.run ? { run: g.run } : {}) });
+        for (const p of g.plans) {
+            if ("error" in p) {
+                plannedBy.set(p.component, undefined);
+                parts.push(failedPart(p.component, p.error));
+                continue;
+            }
+            plannedBy.set(p.component, p.outputs);
+            parts.push(...p.parts);
+            const unknown = unknownOf(byName.get(p.component), mates);
+            if (unknown.size > 0)
+                unknownInputs[p.component] = [...unknown].sort();
+        }
+    };
+    const waves = grouped
+        ? grouped.waves.map((w) => w.filter((name) => byName.has(name)))
+        : resolveComponentGraph(components.map((c) => ({ ...c, dependsOn: (c.dependsOn ?? []).filter((d) => byName.has(d)) }))).waves;
     for (const wave of waves) {
         const planning = wave.filter(inPlan);
+        const inWave = new Set(planning);
+        // What is left of a group in this plan; one member alone plans by itself.
+        const groupsHere = [...new Set(planning.map((name) => groupOf.get(name)).filter((g) => g !== undefined))]
+            .map((g) => ({ ...g, components: g.components.filter((c) => inWave.has(c)) }))
+            .filter((g) => g.components.length > 1);
+        const grouping = new Set(groupsHere.flatMap((g) => g.components));
+        for (const group of groupsHere)
+            await planGroupAt(group);
         for (const name of planning) {
+            if (grouping.has(name))
+                continue;
             const component = byName.get(name);
             const digest = input.digests.get(name) ?? "";
             const plannable = capabilitySteps(component.deploy).filter((s) => registry.has(s.kind) && registry.resolve(s.kind).plan !== undefined);
@@ -228,29 +319,11 @@ export async function planReleaseSet(input) {
             }
             const ctx = deployContext({ env }, name);
             try {
-                for (const dep of component.dependsOn ?? []) {
-                    if (read.has(dep) || !byName.has(dep))
-                        continue;
-                    read.add(dep);
-                    // A dependency this promote plans exposes what its plan says (#3999).
-                    if (plannedBy.has(dep) && isPlannable(byName.get(dep))) {
-                        const known = plannedBy.get(dep)?.known ?? {};
-                        outputs[dep] = { ...known };
-                        planned[dep] = Object.keys(known).sort();
-                        continue;
-                    }
-                    const found = await readComponentOutputs(byName.get(dep), registry, deployContext({ env }, dep), outputs);
-                    if (found)
-                        outputs[dep] = found;
-                }
-                reads[name] = Object.fromEntries((component.dependsOn ?? []).filter((d) => d in outputs).map((d) => [d, structuredClone(outputs[d])]));
-                const unknown = new Set();
+                await readDependencies(component, new Set());
+                const unknown = unknownOf(component, new Set());
                 let exposes;
                 for (const step of plannable) {
                     const { kind, ...rest } = step;
-                    for (const r of unresolvedWiringReferences(rest, outputs))
-                        if (plannedBy.has(r.source) && !r.publish)
-                            unknown.add(r.ref);
                     const result = await registry.resolve(kind).plan(planContext(ctx, rest, outputs), resolveStepInput(rest, {}, outputs));
                     if (result.outputs)
                         exposes = { known: { ...(exposes?.known ?? {}), ...result.outputs.known }, unknown: [...new Set([...(exposes?.unknown ?? []), ...result.outputs.unknown])].sort() };
@@ -272,18 +345,7 @@ export async function planReleaseSet(input) {
             }
             catch (err) {
                 plannedBy.set(name, undefined);
-                parts.push({
-                    member: {
-                        member: name,
-                        lexicon: "chant",
-                        planner: "chant",
-                        status: "failed",
-                        error: err instanceof Error ? err.message : String(err),
-                        planDigest: null,
-                        holes: [],
-                    },
-                    entries: [],
-                });
+                parts.push(failedPart(name, err));
             }
         }
     }
@@ -296,6 +358,8 @@ export async function planReleaseSet(input) {
         reads,
         ...(Object.keys(planned).length > 0 ? { plannedOutputs: planned } : {}),
         ...(Object.keys(unknownInputs).length > 0 ? { unknownInputs } : {}),
+        ...(groups.length > 0 ? { groups } : {}),
+        ...(input.grouped?.fallbacks?.length ? { fallbacks: input.grouped.fallbacks } : {}),
     };
 }
 /** The members a release gate refuses: provisional ones, which no approval of the document covers (`change-set.mdx`). */

package/dist/components/run-groups.d.ts

@@ -0,0 +1,58 @@
+/**
+ * What a promote under a release, `components fan-out` and `run --components`
+ * say about the groups they applied as one (ws-107, #4465), as `pr-report`
+ * says it for a pull request since #4446: each group with its members, the
+ * wave it ran in, its digest and the reads its apply computes, how each
+ * member ended, and why each component that could have grouped did not.
+ */
+import type { ChangeSetDocument } from "../change-set.js";
+import type { GroupMemberStatus } from "./capability.js";
+import type { FanOutGroup, FanOutGroupFallback, FanOutPlan } from "./fan-out.js";
+/** One group a run applied as one. */
+export interface RunGroupReport {
+    /** The kind of the capability every member's one step names. */
+    capability: string;
+    /** The members, in apply order: upstreams first. */
+    components: string[];
+    /** The 1-based wave of the grouped fan-out it ran in. */
+    wave: number;
+    /** The group digest folded into each member's `planDigest`; `null` when it failed to plan. Absent when the run planned it in its wave. */
+    digest?: string | null;
+    /** Why the group failed to plan. */
+    error?: string;
+    /** Each read of another member its plan did not know, by change-set member, which the group's apply computes. Absent when none. */
+    reads?: Array<{
+        member: string;
+        ref: string;
+    }>;
+    /** How each member's part ended, as the capability said. Absent when the group did not run. */
+    outcomes?: Record<string, GroupMemberStatus>;
+}
+export interface RunGroupsReport {
+    groups?: RunGroupReport[];
+    fallbacks?: FanOutGroupFallback[];
+}
+/**
+ * The report of `grouped`'s groups. `planned` are the groups a release gate's
+ * plan planned (`ReleasePlan.groups`), with their digests; `doc` is the
+ * change set they are in, which names each member's reads; `outcomes` is the
+ * run's `groupOutcomes`.
+ */
+export declare function runGroupsReport(input: {
+    grouped: FanOutPlan | undefined;
+    planned?: ReadonlyArray<FanOutGroup & {
+        digest: string | null;
+        error?: string;
+    }>;
+    doc?: ChangeSetDocument;
+    outcomes?: Record<string, GroupMemberStatus>;
+}): RunGroupsReport;
+/**
+ * The report as lines for a person: one per group naming its members, wave,
+ * digest and the reads its apply computes, then how each member ended, and,
+ * when the apply stopped part way, what `again` (the command to run again)
+ * plans next. Then why the components that could have grouped did not; a
+ * fallback of kind `off` is not printed.
+ */
+export declare function renderRunGroups(report: RunGroupsReport, again: string): string[];
+//# sourceMappingURL=run-groups.d.ts.map

package/dist/components/run-groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-groups.d.ts","sourceRoot":"","sources":["../../src/components/run-groups.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE9E,sCAAsC;AACtC,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,0IAA0I;IAC1I,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mIAAmI;IACnI,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,OAAO,CAAC,EAAE,aAAa,CAAC,WAAW,GAAG;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC9C,GAAG,eAAe,CAqBlB;AAaD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAyBhF"}

package/dist/components/run-groups.js

@@ -0,0 +1,78 @@
+/**
+ * What a promote under a release, `components fan-out` and `run --components`
+ * say about the groups they applied as one (ws-107, #4465), as `pr-report`
+ * says it for a pull request since #4446: each group with its members, the
+ * wave it ran in, its digest and the reads its apply computes, how each
+ * member ended, and why each component that could have grouped did not.
+ */
+/**
+ * The report of `grouped`'s groups. `planned` are the groups a release gate's
+ * plan planned (`ReleasePlan.groups`), with their digests; `doc` is the
+ * change set they are in, which names each member's reads; `outcomes` is the
+ * run's `groupOutcomes`.
+ */
+export function runGroupsReport(input) {
+    const waves = input.grouped?.waves ?? [];
+    const waveOf = new Map(waves.flatMap((w, i) => w.map((name) => [name, i + 1])));
+    const groups = input.planned?.length ? [...input.planned] : [...(input.grouped?.groups ?? [])];
+    const out = groups.map((g) => {
+        const reads = g.digest
+            ? (input.doc?.members ?? []).filter((m) => m.group?.digest === g.digest).flatMap((m) => m.group.reads.map((ref) => ({ member: m.member, ref })))
+            : [];
+        const outcomes = Object.fromEntries(g.components.filter((c) => input.outcomes?.[c] !== undefined).map((c) => [c, input.outcomes[c]]));
+        return {
+            capability: g.capability,
+            components: [...g.components],
+            wave: waveOf.get(g.components[0]) ?? 0,
+            ...(g.digest !== undefined ? { digest: g.digest } : {}),
+            ...(g.error !== undefined ? { error: g.error } : {}),
+            ...(reads.length > 0 ? { reads } : {}),
+            ...(Object.keys(outcomes).length > 0 ? { outcomes } : {}),
+        };
+    });
+    const fallbacks = input.grouped?.fallbacks ?? [];
+    return { ...(out.length > 0 ? { groups: out } : {}), ...(fallbacks.length > 0 ? { fallbacks: [...fallbacks] } : {}) };
+}
+/** `a`, `b` and `c`. */
+const listed = (items) => (items.length > 1 ? `${items.slice(0, -1).join(", ")} and ${items.at(-1)}` : (items[0] ?? ""));
+const OUTCOME_WORDS = {
+    applied: "applied",
+    "no-changes": "had no changes",
+    partial: "applied in part, and what applied stays",
+    failed: "failed",
+    "not-started": "did not start",
+};
+/**
+ * The report as lines for a person: one per group naming its members, wave,
+ * digest and the reads its apply computes, then how each member ended, and,
+ * when the apply stopped part way, what `again` (the command to run again)
+ * plans next. Then why the components that could have grouped did not; a
+ * fallback of kind `off` is not printed.
+ */
+export function renderRunGroups(report, again) {
+    const out = [];
+    for (const g of report.groups ?? []) {
+        const reads = (g.reads ?? []).map((r) => `${r.member} reads ${r.ref}`);
+        out.push(`${listed(g.components)} plan and apply as one (${g.capability}, wave ${g.wave}${g.digest ? `, group ${g.digest}` : ""})` +
+            (g.error ? `; the group failed to plan, so nothing of it applied: ${g.error}` : reads.length > 0 ? `; ${listed(reads)}, known when the group applies` : ""));
+        const outcomes = g.outcomes ?? {};
+        const ran = g.components.filter((c) => outcomes[c] !== undefined);
+        if (ran.length === 0)
+            continue;
+        out.push(`  ${ran.map((c) => `${c} ${OUTCOME_WORDS[outcomes[c]]}`).join("; ")}`);
+        const left = ran.filter((c) => outcomes[c] !== "applied" && outcomes[c] !== "no-changes");
+        if (left.length > 0) {
+            out.push(`  the group's apply stopped part way and nothing that applied is undone; ${again} plans ${listed(left)} again, as one group where they still join`);
+        }
+    }
+    const byWhy = new Map();
+    for (const f of report.fallbacks ?? []) {
+        if (f.kind === "off")
+            continue;
+        const why = `(${f.kind}): ${f.reason}`;
+        byWhy.set(why, [...(byWhy.get(why) ?? []), f.component]);
+    }
+    for (const [why, names] of byWhy)
+        out.push(`planned one by one, not as a group: ${names.join(", ")} ${why}`);
+    return out;
+}

package/dist/components/starter-plugin.d.ts

@@ -44,6 +44,7 @@ export declare const STARTER_VERB_FAMILIES: {
     readonly secrets: readonly ["ensure-secret"];
     readonly escapeHatch: readonly ["shell"];
     readonly cloudflare: readonly ["wrangler-deploy", "wrangler-versions-promote", "r2-sync"];
+    readonly engineOutputs: readonly ["member-outputs"];
 };
 /**
  * The built-in capability plugin carrying the entire Phase 1 starter verb

package/dist/components/starter-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"starter-plugin.d.ts","sourceRoot":"","sources":["../../src/components/starter-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAwBH,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;aAChC,KAAK,YAAG,cAAc,EAAE,aAAa,EAAE,WAAW;aAIlD,IAAI,YAAG,eAAe;aAEtB,OAAO,YAAG,eAAe,EAAE,kBAAkB;aAC7C,mBAAmB,YAAG,MAAM,EAAE,mBAAmB,EAAE,QAAQ;aAC3D,iBAAiB,YAAG,sBAAsB,EAAE,WAAW;aAIvD,UAAU,YAAG,sBAAsB,EAAE,eAAe,EAAE,aAAa;aAGnE,OAAO,YAAG,eAAe;aACzB,WAAW,YAAG,OAAO;aAMrB,UAAU,YAAG,iBAAiB,EAAE,2BAA2B,EAAE,SAAS;CAC9D,CAAC;AAiCX;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBAUrC,CAAC"}
+{"version":3,"file":"starter-plugin.d.ts","sourceRoot":"","sources":["../../src/components/starter-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAyBH,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/E;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;aAChC,KAAK,YAAG,cAAc,EAAE,aAAa,EAAE,WAAW;aAIlD,IAAI,YAAG,eAAe;aAEtB,OAAO,YAAG,eAAe,EAAE,kBAAkB;aAC7C,mBAAmB,YAAG,MAAM,EAAE,mBAAmB,EAAE,QAAQ;aAC3D,iBAAiB,YAAG,sBAAsB,EAAE,WAAW;aAIvD,UAAU,YAAG,sBAAsB,EAAE,eAAe,EAAE,aAAa;aAGnE,OAAO,YAAG,eAAe;aACzB,WAAW,YAAG,OAAO;aAMrB,UAAU,YAAG,iBAAiB,EAAE,2BAA2B,EAAE,SAAS;aAItE,aAAa,YAAG,gBAAgB;CACxB,CAAC;AAkCX;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,gBAUrC,CAAC"}

package/dist/components/starter-plugin.js

@@ -25,7 +25,7 @@
  *    from verb modules, so neither needed to change for this migration —
  *    the compatibility guarantee #559 asks for.
  */
-import { dockerBuildCapability, zipPackageCapability, jvmBuildCapability, generateSbomCapability, publishImageCapability, publishArtifactCapability, signCapability, attestProvenanceCapability, verifyCapability, scanVulnerabilitiesCapability, vulnGateCapability, waitClusterHealthyCapability, waitEndpointCapability, healthGateCapability, shellCapability, ensureSecretCapability, wranglerDeployCapability, wranglerVersionsPromoteCapability, r2SyncCapability, } from "./verbs/index.js";
+import { dockerBuildCapability, zipPackageCapability, jvmBuildCapability, generateSbomCapability, publishImageCapability, publishArtifactCapability, signCapability, attestProvenanceCapability, verifyCapability, scanVulnerabilitiesCapability, vulnGateCapability, waitClusterHealthyCapability, waitEndpointCapability, healthGateCapability, shellCapability, ensureSecretCapability, wranglerDeployCapability, wranglerVersionsPromoteCapability, r2SyncCapability, memberOutputsStarterCapability, } from "./verbs/index.js";
 import { ownPackageVersion } from "./capability-plugin.js";
 /**
  * Every `kind` in the starter verb set, grouped by family, per epic #551 and
@@ -59,6 +59,10 @@ export const STARTER_VERB_FAMILIES = {
     // there is no cloudflare lexicon for these three verbs to live in. Revisit
     // if/when the zone-plane lexicon (#1294) lands.
     cloudflare: ["wrangler-deploy", "wrangler-versions-promote", "r2-sync"],
+    // Another workspace member's outputs, read through the engine it runs on
+    // (#4455). One agnostic verb; each engine's lexicon contributes a source
+    // (`CapabilityPlugin.engineOutputSources`).
+    engineOutputs: ["member-outputs"],
 };
 /**
  * Every starter-set verb, in the same registration order Phase 1's
@@ -88,6 +92,7 @@ function starterCapabilities() {
         wranglerDeployCapability,
         wranglerVersionsPromoteCapability,
         r2SyncCapability,
+        memberOutputsStarterCapability,
     ];
 }
 /**

package/dist/components/verbs/index.d.ts

@@ -52,6 +52,7 @@ export * from "./verify.js";
 export * from "./run-agent.js";
 export * from "./wrangler.js";
 export * from "./r2-sync.js";
+export * from "./member-outputs.js";
 export * from "./vuln-scan.js";
 export * from "./vex.js";
 export * from "./license-policy.js";

package/dist/components/verbs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/verbs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,cAAc,iBAAiB,CAAC;AAChC,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/components/verbs/index.js

@@ -52,6 +52,7 @@ export * from "./verify.js";
 export * from "./run-agent.js";
 export * from "./wrangler.js";
 export * from "./r2-sync.js";
+export * from "./member-outputs.js";
 export * from "./vuln-scan.js";
 export * from "./vex.js";
 export * from "./license-policy.js";