@intentius/plywood 0.3.0 → 0.3.1

package/dist/plywood.mjs

@@ -260,13 +260,16 @@ function approvalOf(doc) {
 function gateOf(doc) {
   return typeof doc.gate === "string" && GATES.includes(doc.gate) ? doc.gate : DEFAULT_GATE;
 }
+function previewOf(doc) {
+  return doc.preview === true;
+}
 function quorumOf(rules) {
   return Object.entries(rules).map(([glob, r]) => {
     const roles = [...r.role !== void 0 ? [r.role] : [], ...r.roles ?? []];
     return { targets: [glob], count: r.quorum ?? 1, ...roles.length ? { roles } : {}, notAuthor: true };
   });
 }
-var GATES, DEFAULT_GATE, APPROVALS, DEFAULT_APPROVAL, APPROVAL_RULE_KEYS, approval;
+var GATES, DEFAULT_GATE, APPROVALS, DEFAULT_APPROVAL, DEFAULT_PREVIEW, APPROVAL_RULE_KEYS, approval;
 var init_approval = __esm({
   "src/config/approval.ts"() {
     "use strict";
@@ -275,13 +278,19 @@ var init_approval = __esm({
     DEFAULT_GATE = "on-destructive";
     APPROVALS = ["ledger", "sealed", "pr-review"];
     DEFAULT_APPROVAL = "ledger";
+    DEFAULT_PREVIEW = false;
     APPROVAL_RULE_KEYS = ["role", "roles", "quorum"];
     approval = {
       name: "approval",
-      keys: ["gate", "approval", "approval_rules"],
+      keys: ["gate", "approval", "approval_rules", "preview"],
       schema: {
         gate: { type: "string", enum: [...GATES], default: DEFAULT_GATE, description: "always, on-destructive or never." },
         approval: { type: "string", enum: [...APPROVALS], default: DEFAULT_APPROVAL, description: "ledger, sealed or pr-review." },
+        preview: {
+          type: "boolean",
+          default: DEFAULT_PREVIEW,
+          description: "true: plywood init sets approvals.preview in the waves spec, so a merged wave applies only the plans its pull request previewed, or exits 4. Known limits: plywood#55 (the second of two disjoint merges is refused) and plywood#56 (a pull request that creates an autonamed resource is refused)."
+        },
         approval_rules: {
           type: "object",
           description: "Role and quorum per stack glob. Read at base.",
@@ -298,6 +307,7 @@ var init_approval = __esm({
       },
       check(doc) {
         const out = [...oneOf(doc.gate, GATES, "gate"), ...oneOf(doc.approval, APPROVALS, "approval")];
+        if (doc.preview !== void 0 && typeof doc.preview !== "boolean") out.push(error("preview", "must be true or false"));
         const rules = doc.approval_rules;
         if (rules === void 0) return out;
         if (!isObject(rules)) return [...out, error("approval_rules", "must map a stack glob to { role, quorum }")];
@@ -587,7 +597,7 @@ var init_control = __esm({
 var version, dependencies;
 var init_package = __esm({
   "package.json"() {
-    version = "0.3.0";
+    version = "0.3.1";
     dependencies = {
       "@intentius/chant": "0.124.59",
       "@intentius/chant-lexicon-forgejo": "0.124.59",
@@ -603,8 +613,8 @@ var image_digests_default;
 var init_image_digests = __esm({
   "src/image-digests.json"() {
     image_digests_default = {
-      "ghcr.io/intentius/plywood-pulumi:0.3.0-pulumi3.272.0": "sha256:39fc85f67be6a281aa5f01b02239aa1f02c492f40f1fb0d145c848cc608aaecd",
-      "ghcr.io/intentius/plywood-plunge:0.3.0-plunge0.2.0": "sha256:6647f67defb1719395b29d1a6c9d977b6900e228547c4569563962e4234847e3"
+      "ghcr.io/intentius/plywood-pulumi:0.3.1-pulumi3.272.0": "sha256:acdadb5000ade3afea20ab2f555946312281066e1df288b1007bff096514ebfd",
+      "ghcr.io/intentius/plywood-plunge:0.3.1-plunge0.2.0": "sha256:adc42bc97564ecb2074b3ee4d97f84ddb986e0f30f6a26f35b8721106c177456"
     };
   }
 });
@@ -5729,7 +5739,7 @@ async function runInit(opts, table, io) {
   if (opts.bucketCheck) notes.push(...await bucketStep(detected2, doc, io.env, buckets));
   adopt.push(...await adoptStep(root, detected2, doc, io.env, declaration.doc, opts.dryRun, files, notes, todo));
   todo.push(...todoLines(detected2, doc, forge.kind, io.env));
-  if (forge.kind === "gitlab" && chant && stacks2.length > 0 && await hasChantWavePreview()) {
+  if (forge.kind === "gitlab" && chant && stacks2.length > 0 && previewOf(doc) && await hasChantWavePreview()) {
     todo.push(`Add a ${GITLAB_READ_TOKEN} CI/CD variable (a project access token with the read_api scope, masked and protected) so a wave can read the merge request it applies; without it the wave refuses`);
   }
   const failed = files.find((f) => f.status === "failed");
@@ -5809,7 +5819,7 @@ async function wavesSpecStep(chant, stacks2, doc, settings, branch, ordered, for
     ...settings.pipeline.notify ? { notify: { ...notifyForChant(settings.pipeline.notify, chant) } } : {}
   });
   const named = chant.productWavesSpec ? chant.productWavesSpec(base, PRODUCT_WORDS) : base;
-  return await hasChantWavePreview() ? withWavePreview(named, forge) : named;
+  return previewOf(doc) && await hasChantWavePreview() ? withWavePreview(named, forge) : named;
 }
 async function workflowStep(chant, root, doc, settings, forge, opts, spec, table, io) {
   const output = WORKFLOW_FILE[forge];
@@ -7918,7 +7928,7 @@ var execChild = (bin, args, opts) => new Promise((done) => {
 
 // src/cli.ts
 init_words();
-var VERSION3 = true ? "0.3.0" : "0.0.0-dev";
+var VERSION3 = true ? "0.3.1" : "0.0.0-dev";
 var stdio = {
   out: (s) => process.stdout.write(s + "\n"),
   err: (s) => process.stderr.write(s + "\n")