@intentius/sql-yodeler 0.2.0 → 0.3.0

package/dist/report/audit.js

@@ -0,0 +1,202 @@
+/**
+ * The audit log (#57), derived and never written by hand: every entry comes
+ * from a row of an environment's history table or a line of chant's gate
+ * ledger (`_gates/<op>.jsonl` on the `chant/lifecycle` branch), so the log
+ * cannot say something those two do not. Pure: rows and ledger lines in,
+ * entries and gaps out.
+ *
+ * Entries, by where they come from:
+ *
+ * | kind                 | source                                                        |
+ * |----------------------|---------------------------------------------------------------|
+ * | `approval-requested` | a pending fact on the ledger: a run stopped at the gate       |
+ * | `approved`           | a resolution of the migrations Op's gate                      |
+ * | `override`           | a resolution of an `override-<rule>` gate (`yodel override`)  |
+ * | `silenced`           | a `-- yodel:allow` silence on a migration's first started row |
+ * | `applied`            | the migration row that first recorded a migration succeeded   |
+ * | `refused`            | a failed migration row naming a pre-migration check           |
+ * | `failed`             | any other failed migration row                                |
+ * | `repaired`           | a succeeded migration row after it was applied (`yodel repair`) |
+ *
+ * Each entry's `id` is a hash of what it says and where it came from, so
+ * deriving again from the same sources gives the same ids, and an audit.jsonl
+ * written earlier can be checked against the sources now (`./jsonl.ts`).
+ *
+ * Gaps are what the sources show is missing from themselves:
+ *
+ * - `history-row`: the history's seqs run from 1 with no hole (every run
+ *   appends at the highest seq plus one, under the lock); a hole is a row
+ *   that was deleted.
+ * - `approval`: a migration applied under a plan digest that the ledger
+ *   holds no approval of the environment's gate for. A baseline (`yodel init
+ *   --from`, no digest) needs none. A migration a wave of the apply pipeline
+ *   applied (#87) was approved on the wave's gate (`<op>-wave-<k>`), for the
+ *   wave's set digest its `started` row records (`note.wave`); a wave whose
+ *   policy at the base needed no approval records that instead, and needs
+ *   none.
+ */
+import { createHash } from "node:crypto";
+import { waveRecordOf } from "../waves/record.js";
+export const AUDIT_KINDS = ["approval-requested", "approved", "override", "silenced", "applied", "refused", "failed", "repaired", "reverted"];
+/** `2026-10-10 09:12:44.123456` (the history's UTC) as ISO 8601. An ISO time is returned as it is. */
+export function isoTime(t) {
+    if (!t)
+        return "";
+    if (/T.*(Z|[+-]\d\d:?\d\d)$/.test(t))
+        return t;
+    return `${t.replace(" ", "T")}Z`;
+}
+/** A key that orders ISO times written to the millisecond (the ledger) and the microsecond (the history) together. */
+export function timeKey(t) {
+    const m = /^(.*?)(?:\.(\d+))?Z$/.exec(t);
+    return m ? `${m[1] ?? ""}.${(m[2] ?? "").padEnd(6, "0")}Z` : t;
+}
+/** Oldest first. */
+export const byTime = (a, b) => {
+    const x = timeKey(a.at);
+    const y = timeKey(b.at);
+    return x < y ? -1 : x > y ? 1 : 0;
+};
+function entry(fields) {
+    // An entry with no wave hashes as it did before waves were recorded, so audit files written then still match.
+    const key = JSON.stringify([fields.environment, fields.kind, fields.at, fields.by ?? "", fields.migration ?? "", fields.digest ?? "", fields.detail ?? "", fields.source, ...(fields.wave ? [fields.wave] : [])]);
+    return { id: `sha256:${createHash("sha256").update(key).digest("hex").slice(0, 24)}`, ...fields };
+}
+const CHECK_FAILED = /\bcheck \S+ failed\b/;
+function fromHistory(input) {
+    const { environment, history } = input;
+    const out = [];
+    const applied = new Set();
+    const silenced = new Set();
+    /** Each migration's wave, from its latest started row. */
+    const waveOf = new Map();
+    for (const r of [...input.rows].sort((a, b) => a.seq - b.seq)) {
+        if (r.kind !== "migration")
+            continue;
+        const source = { history, seq: r.seq, run: r.run_id };
+        const base = { at: isoTime(r.recorded_at ?? ""), environment, by: r.applied_by, migration: r.migration_id, ...(r.plan_digest ? { digest: r.plan_digest } : {}), source };
+        if (r.status === "started") {
+            const w = waveRecordOf(r.note);
+            if (w)
+                waveOf.set(r.migration_id, { gate: w.gate, digest: w.digest, status: w.status });
+            else
+                waveOf.delete(r.migration_id);
+            let list = [];
+            try {
+                list = JSON.parse(r.silences || "[]");
+            }
+            catch {
+                list = [];
+            }
+            for (const s of list) {
+                const key = `${r.migration_id}\u0000${String(s.step)}\u0000${s.rule ?? ""}\u0000${s.reason ?? ""}`;
+                if (silenced.has(key))
+                    continue;
+                silenced.add(key);
+                out.push(entry({ ...base, kind: "silenced", detail: `step ${String(s.step)}: ${s.rule ?? ""} ${s.reason ?? ""}`.trim() }));
+            }
+        }
+        else if (r.status === "reverted") {
+            // yodel revert (#55): applied again later, it is applied, not repaired.
+            applied.delete(r.migration_id);
+            out.push(entry({ ...base, kind: "reverted", ...(r.note ? { detail: r.note } : {}) }));
+        }
+        else if (r.status === "succeeded") {
+            if (applied.has(r.migration_id))
+                out.push(entry({ ...base, kind: "repaired", detail: r.note || `checksum ${r.checksum}` }));
+            else {
+                applied.add(r.migration_id);
+                const wave = waveOf.get(r.migration_id);
+                out.push(entry({ ...base, kind: "applied", ...(r.note ? { detail: r.note } : {}), ...(wave ? { wave } : {}) }));
+            }
+        }
+        else {
+            out.push(entry({ ...base, kind: CHECK_FAILED.test(r.error) ? "refused" : "failed", detail: r.error }));
+        }
+    }
+    return out;
+}
+function fromLedger(environment, l) {
+    const out = [];
+    const source = { ledger: l.path, op: l.op, gate: l.gate };
+    for (const p of l.pending) {
+        if (p.gate !== l.gate)
+            continue;
+        out.push(entry({ at: p.timestamp, environment, kind: "approval-requested", ...(p.planDigest ? { digest: p.planDigest } : {}), ...(p.runId ? { detail: `run ${p.runId}` } : {}), source }));
+    }
+    for (const r of l.resolutions) {
+        const override = r.gate.startsWith("override-");
+        if (!override && r.gate !== l.gate)
+            continue;
+        out.push(entry({
+            at: r.timestamp,
+            environment,
+            kind: override ? "override" : "approved",
+            by: r.resolvedBy,
+            ...(r.planDigest ? { digest: r.planDigest } : {}),
+            ...(override ? { detail: `${r.gate.slice("override-".length)}: ${r.note ?? ""}`.trim() } : r.note ? { detail: r.note } : {}),
+            source: { ...source, gate: r.gate },
+        }));
+    }
+    return out;
+}
+/** The wave gates' lines that are this environment's: its configured wave gate, and every gate its history's waves recorded. */
+function fromWaves(environment, w, history) {
+    const gates = new Set([...(w.gate ? [w.gate] : []), ...history.flatMap((e) => (e.wave ? [e.wave.gate] : []))]);
+    const out = [];
+    for (const gate of gates)
+        out.push(...fromLedger(environment, { op: w.op, gate, path: w.path, pending: w.pending, resolutions: w.resolutions.filter((r) => !r.gate.startsWith("override-")) }));
+    return out;
+}
+/**
+ * The approval an `applied` entry was let through by, among `entries`: on
+ * the wave's gate for the wave's set digest when a wave applied it, else
+ * on the migrations gate for its plan digest. Undefined when none is there.
+ */
+export function approvalOf(applied, entries, same = (a, b) => a === b) {
+    const approvals = entries.filter((e) => e.kind === "approved" && e.environment === applied.environment);
+    const wave = applied.wave;
+    if (wave)
+        return approvals.filter((x) => "ledger" in x.source && x.source.gate === wave.gate && same(x.digest, wave.digest)).at(-1);
+    return approvals.filter((x) => same(x.digest, applied.digest)).at(-1);
+}
+/** The entries one environment's history and ledger add up to, oldest first, and the gaps they show. */
+export function deriveAudit(input) {
+    const same = input.sameDigest ?? ((a, b) => a === b);
+    const history = fromHistory(input);
+    const entries = [...history, ...(input.ledger ? fromLedger(input.environment, input.ledger) : []), ...(input.waves ? fromWaves(input.environment, input.waves, history) : [])].sort(byTime);
+    const gaps = [];
+    const seqs = new Set(input.rows.map((r) => r.seq));
+    const max = Math.max(0, ...seqs);
+    const missing = [];
+    for (let s = 1; s <= max; s++)
+        if (!seqs.has(s))
+            missing.push(s);
+    if (missing.length > 0) {
+        gaps.push({ environment: input.environment, kind: "history-row", detail: `${input.history} has no row with seq ${missing.join(", ")} of 1..${String(max)}: rows are only ever appended, so ${missing.length === 1 ? "that row was" : "those rows were"} deleted` });
+    }
+    for (const a of entries.filter((e) => (e.kind === "applied" || e.kind === "reverted") && e.digest)) {
+        const seq = "history" in a.source ? a.source.seq : 0;
+        const wave = a.wave;
+        if (wave) {
+            // A wave's policy at the base let it through with no approval; the run checked that under the lock.
+            if (wave.status === "not-required" || !input.waves || approvalOf(a, entries, same))
+                continue;
+            gaps.push({
+                environment: input.environment,
+                kind: "approval",
+                detail: `${String(a.migration)} was applied by a wave under ${wave.digest} (${input.history} seq ${String(seq)}), but ${input.waves.path} holds no approval of ${input.waves.op} / ${wave.gate} for that digest`,
+            });
+            continue;
+        }
+        if (!input.ledger || approvalOf(a, entries, same))
+            continue;
+        gaps.push({
+            environment: input.environment,
+            kind: "approval",
+            detail: `${String(a.migration)} was ${a.kind} under ${String(a.digest)} (${input.history} seq ${String(seq)}), but ${input.ledger.path} holds no approval of ${input.ledger.op} / ${input.ledger.gate} for that digest`,
+        });
+    }
+    return { entries, gaps };
+}
+//# sourceMappingURL=audit.js.map

package/dist/report/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/report/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AA+DvJ,sGAAsG;AACtG,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC;AACnC,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,oBAAoB;AACpB,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAiB,EAAE,CAAiB,EAAU,EAAE;IACrE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,SAAS,KAAK,CAAC,MAA8B;IAC3C,8GAA8G;IAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClN,OAAO,EAAE,EAAE,EAAE,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,SAAS,WAAW,CAAC,KAAiB;IACpC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,0DAA0D;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;YAAE,SAAS;QACrC,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;QACzK,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;;gBACnF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACnC,IAAI,IAAI,GAA6D,EAAE,CAAC;YACxE,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAgB,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACnG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAChC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACnC,wEAAwE;YACxE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;iBACvH,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB,EAAE,CAAc;IACrD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,SAAS;QAChC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7L,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,SAAS;QAC7C,GAAG,CAAC,IAAI,CACN,KAAK,CAAC;YACJ,EAAE,EAAE,CAAC,CAAC,SAAS;YACf,WAAW;YACX,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;YACxC,EAAE,EAAE,CAAC,CAAC,UAAU;YAChB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5H,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gIAAgI;AAChI,SAAS,SAAS,CAAC,WAAmB,EAAE,CAAkB,EAAE,OAA8B;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChM,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAmB,EAAE,OAA8B,EAAE,OAAkE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;IACjK,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5L,MAAM,IAAI,GAAe,EAAE,CAAC;IAE5B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,qCAAqC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,UAAU,EAAE,CAAC,CAAC;IACtQ,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnG,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,IAAI,IAAI,EAAE,CAAC;YACT,oGAAoG;YACpG,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC7F,IAAI,CAAC,IAAI,CAAC;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,gCAAgC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,QAAQ,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,yBAAyB,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,IAAI,kBAAkB;aACjN,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC;YAAE,SAAS;QAC5D,IAAI,CAAC,IAAI,CAAC;YACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,UAAU,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,OAAO,QAAQ,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,CAAC,IAAI,yBAAyB,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,kBAAkB;SACxN,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/report/jsonl.d.ts

@@ -0,0 +1,21 @@
+/**
+ * audit.jsonl (#57): the derived audit log kept as a file, one entry per
+ * line, only ever appended to. `yodel report --audit <file>` appends the
+ * entries the sources hold that the file does not; `--check` appends nothing
+ * and names every entry of the file that the sources no longer give, which
+ * is a ledger line or a history row removed since the file was written.
+ */
+import type { AuditEntry } from "./audit.js";
+export interface AuditFile {
+    path: string;
+    entries: AuditEntry[];
+}
+export declare function readAuditFile(path: string): AuditFile;
+/** Compares the file with what the sources give now, for the environments read. */
+export declare function compareAudit(file: AuditFile, derived: readonly AuditEntry[], environments: readonly string[]): {
+    missing: AuditEntry[];
+    added: AuditEntry[];
+};
+export declare function appendAudit(path: string, entries: readonly AuditEntry[]): void;
+/** One line for a missing entry. */
+export declare function describeEntry(e: AuditEntry): string;

package/dist/report/jsonl.js

@@ -0,0 +1,52 @@
+/**
+ * audit.jsonl (#57): the derived audit log kept as a file, one entry per
+ * line, only ever appended to. `yodel report --audit <file>` appends the
+ * entries the sources hold that the file does not; `--check` appends nothing
+ * and names every entry of the file that the sources no longer give, which
+ * is a ledger line or a history row removed since the file was written.
+ */
+import { appendFileSync, existsSync, readFileSync } from "node:fs";
+import { YodelError } from "../project.js";
+export function readAuditFile(path) {
+    if (!existsSync(path))
+        return { path, entries: [] };
+    const entries = [];
+    readFileSync(path, "utf8")
+        .split("\n")
+        .forEach((line, i) => {
+        if (line.trim() === "")
+            return;
+        let e;
+        try {
+            e = JSON.parse(line);
+        }
+        catch {
+            throw new YodelError(`${path}:${String(i + 1)} is not a JSON line; an audit file holds one entry per line, as yodel report --audit writes it`);
+        }
+        if (typeof e !== "object" || e === null || typeof e.id !== "string" || typeof e.environment !== "string") {
+            throw new YodelError(`${path}:${String(i + 1)} is not an audit entry (no id or environment)`);
+        }
+        entries.push(e);
+    });
+    return { path, entries };
+}
+/** Compares the file with what the sources give now, for the environments read. */
+export function compareAudit(file, derived, environments) {
+    const now = new Set(derived.map((e) => e.id));
+    const had = new Set(file.entries.map((e) => e.id));
+    return {
+        missing: file.entries.filter((e) => environments.includes(e.environment) && !now.has(e.id)),
+        added: derived.filter((e) => !had.has(e.id)),
+    };
+}
+export function appendAudit(path, entries) {
+    if (entries.length === 0)
+        return;
+    appendFileSync(path, entries.map((e) => `${JSON.stringify(e)}\n`).join(""));
+}
+/** One line for a missing entry. */
+export function describeEntry(e) {
+    const source = "history" in e.source ? `${e.source.history} seq ${String(e.source.seq)}` : `${e.source.ledger} (${e.source.op} / ${e.source.gate})`;
+    return `${e.at} ${e.environment} ${e.kind}${e.migration ? ` ${e.migration}` : ""}${e.by ? ` by ${e.by}` : ""}${e.digest ? ` for ${e.digest}` : ""}, from ${source}`;
+}
+//# sourceMappingURL=jsonl.js.map

package/dist/report/jsonl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../src/report/jsonl.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAQ3C,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SACvB,KAAK,CAAC,IAAI,CAAC;SACX,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACnB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QAC/B,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,gGAAgG,CAAC,CAAC;QACjJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAQ,CAAsB,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAQ,CAA+B,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC9J,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,+CAA+C,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAe,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACL,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,OAA8B,EAAE,YAA+B;IAC3G,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAA8B;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IACpJ,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,MAAM,EAAE,CAAC;AACtK,CAAC"}

package/dist/report/model.d.ts

@@ -0,0 +1,68 @@
+/**
+ * `yodel report` (#57): every environment's migrations side by side, the
+ * audit log derived from each environment's history and chant's gate ledger
+ * (`./audit.ts`), and the gaps those sources show. Read only: it takes no
+ * lock and writes nothing to a server or the ledger.
+ */
+import type { GateLedgerPort } from "@intentius/chant/op/gate";
+import { type HistoryRow } from "../history/index.js";
+import type { Migration } from "../migrations/index.js";
+import { type Project } from "../project.js";
+import { type MigrateOpRef } from "../versioned/index.js";
+import { type AuditEntry, type AuditGap } from "./audit.js";
+export declare const REPORT_VERSION = 1;
+export type MigrationState = "applied" | "pending" | "failed" | "started" | "reverted";
+export interface EnvironmentMigration {
+    id: string;
+    /** `started`: the runner stopped part way; `failed`: a statement or a check failed. */
+    state: MigrationState;
+    /** Whether the migrations directory still has it. */
+    inDirectory: boolean;
+    /** When it was applied, and by whom; for failed and started, its latest migration row's. */
+    at?: string;
+    by?: string;
+    digest?: string;
+    /** The approval on the ledger of the digest it was applied under. */
+    approvedBy?: string;
+    approvedAt?: string;
+}
+export interface EnvironmentReport {
+    name: string;
+    /** `<database>.history`. */
+    history?: string;
+    /** The migrations Op whose gate the ledger is read for. */
+    op?: {
+        name: string;
+        gate: string;
+    };
+    /** Why the environment could not be read; its migrations are then empty. */
+    error?: string;
+    /** Something read only in part, such as a ledger that could not be read. */
+    notes: string[];
+    migrations: EnvironmentMigration[];
+}
+export interface Report {
+    version: typeof REPORT_VERSION;
+    generatedAt: string;
+    project: string;
+    dialect: string;
+    /** The migrations, in chain order, then any an environment applied that the directory no longer has. */
+    migrations: string[];
+    /** In the order they were asked for (default: chant.config.ts's sql.profiles). */
+    environments: EnvironmentReport[];
+    /** Every environment's entries, oldest first. */
+    audit: AuditEntry[];
+    gaps: AuditGap[];
+}
+/** What reading one environment needs; tests stand in for the server and the ledger. */
+export interface ReportSources {
+    rows(project: Project, env: string): Promise<{
+        rows: HistoryRow[];
+        history: string;
+    }>;
+    op(project: Project, env: string): Promise<MigrateOpRef>;
+    ledger(project: Project): Promise<GateLedgerPort>;
+}
+export declare const liveSources: ReportSources;
+/** Reads every environment in `names` and derives the report. An environment that cannot be read is reported with its error. */
+export declare function collectReport(project: Project, chain: readonly Migration[], names: readonly string[], sources?: ReportSources, now?: Date): Promise<Report>;

package/dist/report/model.js

@@ -0,0 +1,127 @@
+/**
+ * `yodel report` (#57): every environment's migrations side by side, the
+ * audit log derived from each environment's history and chant's gate ledger
+ * (`./audit.ts`), and the gaps those sources show. Read only: it takes no
+ * lock and writes nothing to a server or the ledger.
+ */
+import { deriveState } from "../history/index.js";
+import { resolveEnvironment } from "../project.js";
+import { closeVersioned, findMigrateOp, gitLedger, openVersioned } from "../versioned/index.js";
+import { WAVES_PIPELINE } from "../waves/record.js";
+import { baseEnvironment } from "../tenants/target.js";
+import { approvalOf, byTime, deriveAudit, isoTime } from "./audit.js";
+export const REPORT_VERSION = 1;
+export const liveSources = {
+    async rows(project, name) {
+        const venv = await openVersioned(project, resolveEnvironment(project, name));
+        try {
+            return { rows: await venv.store.rows({ sync: false }), history: `${venv.location.database}.history` };
+        }
+        finally {
+            await closeVersioned(venv);
+        }
+    },
+    op: (project, name) => findMigrateOp(project, resolveEnvironment(project, name)),
+    ledger: (project) => gitLedger(project.dir),
+};
+const firstLine = (e) => (e instanceof Error ? (e.message.split("\n")[0] ?? "") : String(e));
+/** Reads every environment in `names` and derives the report. An environment that cannot be read is reported with its error. */
+export async function collectReport(project, chain, names, sources = liveSources, now = new Date()) {
+    const { samePlanDigest } = await import("@intentius/chant/lifecycle/plan-digest");
+    const { gateLedgerPath } = await import("@intentius/chant/lifecycle/gate-ledger");
+    let port;
+    let portError;
+    try {
+        port = await sources.ledger(project);
+    }
+    catch (e) {
+        portError = firstLine(e);
+    }
+    const environments = [];
+    const audit = [];
+    const gaps = [];
+    const known = new Set(chain.map((m) => m.id));
+    const extra = [];
+    for (const name of names) {
+        const env = { name, notes: [], migrations: [] };
+        environments.push(env);
+        let rows;
+        try {
+            const read = await sources.rows(project, name);
+            rows = read.rows;
+            env.history = read.history;
+        }
+        catch (e) {
+            env.error = `the history could not be read: ${firstLine(e)}`;
+            continue;
+        }
+        let ledger;
+        try {
+            const op = await sources.op(project, name);
+            env.op = { name: op.name, gate: op.gate };
+            if (!port)
+                throw new Error(portError ?? "no ledger");
+            const lines = await port.read(op.name);
+            ledger = { op: op.name, gate: op.gate, path: gateLedgerPath(op.name), pending: lines.pending, resolutions: lines.resolutions };
+        }
+        catch (e) {
+            env.notes.push(env.op ? `chant's gate ledger could not be read (${firstLine(e)}); approvals are not shown and not checked` : `no migrations Op for ${name} (${firstLine(e)}); approvals are not shown and not checked`);
+        }
+        // The apply pipeline's waves (#87): their gates are on the waves' op's ledger, not the migrations Op's.
+        let waves;
+        const k = (project.yodel?.config.waves ?? []).findIndex((w) => w.env === baseEnvironment(name)) + 1;
+        if (port && (k > 0 || rows.some((r) => r.kind === "migration" && r.note.includes('"wave"')))) {
+            try {
+                const { waveGateName } = await import("@intentius/chant/gated-waves");
+                const lines = await port.read(WAVES_PIPELINE);
+                waves = { op: WAVES_PIPELINE, path: gateLedgerPath(WAVES_PIPELINE), ...(k > 0 ? { gate: waveGateName(WAVES_PIPELINE, k) } : {}), pending: lines.pending, resolutions: lines.resolutions };
+            }
+            catch (e) {
+                env.notes.push(`the waves' gate ledger could not be read (${firstLine(e)}); wave approvals are not shown and not checked`);
+            }
+        }
+        const derived = deriveAudit({ environment: name, history: env.history ?? "history", rows, ledger, waves, sameDigest: samePlanDigest });
+        audit.push(...derived.entries);
+        gaps.push(...derived.gaps);
+        const state = deriveState(rows);
+        const listed = [...chain.map((m) => m.id), ...state.migrations.map((m) => m.id).filter((id) => !known.has(id))];
+        for (const id of state.migrations.map((m) => m.id)) {
+            if (!known.has(id) && !extra.includes(id))
+                extra.push(id);
+        }
+        for (const id of listed) {
+            const rec = state.byId.get(id);
+            if (!rec) {
+                env.migrations.push({ id, state: "pending", inDirectory: true });
+                continue;
+            }
+            const appliedEntry = derived.entries.filter((e) => e.kind === "applied" && e.migration === id).at(-1);
+            const approval = appliedEntry
+                ? approvalOf(appliedEntry, derived.entries, samePlanDigest)
+                : rec.planDigest
+                    ? derived.entries.filter((a) => a.kind === "approved" && samePlanDigest(a.digest, rec.planDigest)).at(-1)
+                    : undefined;
+            env.migrations.push({
+                id,
+                state: rec.status === "succeeded" ? "applied" : rec.status,
+                inDirectory: known.has(id),
+                ...(rec.recordedAt ? { at: isoTime(rec.recordedAt) } : {}),
+                ...(rec.appliedBy ? { by: rec.appliedBy } : {}),
+                ...(rec.planDigest ? { digest: rec.planDigest } : {}),
+                ...(approval?.by ? { approvedBy: approval.by, approvedAt: approval.at } : {}),
+            });
+        }
+    }
+    audit.sort(byTime);
+    return {
+        version: REPORT_VERSION,
+        generatedAt: now.toISOString(),
+        project: project.dir,
+        dialect: project.dialect,
+        migrations: [...chain.map((m) => m.id), ...extra],
+        environments,
+        audit,
+        gaps,
+    };
+}
+//# sourceMappingURL=model.js.map

package/dist/report/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/report/model.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAgB,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAqB,MAAM,uBAAuB,CAAC;AACnH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAA0E,MAAM,YAAY,CAAC;AAE9I,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAqDhC,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI;QACtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,UAAU,EAAE,CAAC;QACxG,CAAC;gBAAS,CAAC;YACT,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5C,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9G,gIAAgI;AAChI,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,KAA2B,EAAE,KAAwB,EAAE,UAAyB,WAAW,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACjK,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;IAClF,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wCAAwC,CAAC,CAAC;IAClF,IAAI,IAAgC,CAAC;IACrC,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACjB,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,GAAG,kCAAkC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS;QACX,CAAC;QAED,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACjI,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,0CAA0C,SAAS,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,wBAAwB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;QAC1N,CAAC;QAED,wGAAwG;QACxG,IAAI,KAAkC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpG,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC;gBACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;gBACtE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9C,KAAK,GAAG,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;YAC5L,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,SAAS,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;QACvI,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAE3B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChH,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAG,YAAY;gBAC3B,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;gBAC3D,CAAC,CAAC,GAAG,CAAC,UAAU;oBACd,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACzG,CAAC,CAAC,SAAS,CAAC;YAChB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;gBAClB,EAAE;gBACF,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM;gBAC1D,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;QACjD,YAAY;QACZ,KAAK;QACL,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/report/render.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The report as text, and as a self-contained HTML page (the run view): one
+ * row per migration (each merge that added one), one column per
+ * environment, in the order they were asked for, so a change's progress from
+ * dev to prod reads left to right. Then the gaps and the audit log.
+ */
+import type { AuditEntry } from "./audit.js";
+import type { Report } from "./model.js";
+export declare function renderReportText(r: Report, extra?: {
+    check?: {
+        file: string;
+        missing: readonly string[];
+        appended: number;
+    };
+}): string;
+export declare function auditLine(a: AuditEntry): string;
+/** The run view: a page with no external resources, safe to upload as a CI artifact and open from disk. */
+export declare function renderReportHtml(r: Report): string;