@telorun/cli 0.73.0 → 0.75.0

package/dist/release/apply-plan.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Writing a release plan to disk — the half of `telo release apply` that
+ * changes files.
+ *
+ * Split from the command so the command is wiring: `commands/release.ts` reads
+ * argv, resolves the registry and prints, and everything that touches a manifest,
+ * a changelog or the ledger is here. The seam is the plan itself, which is
+ * already a complete description of what to write.
+ */
+import { type Ledger, type ModuleKey, type ReleasePlan } from "@telorun/analyzer";
+import { type Workspace } from "./workspace.js";
+/** One module's writes, reported so `apply` can list what it touched. */
+export interface AppliedModule {
+    readonly key: ModuleKey;
+    readonly from: string;
+    readonly to: string;
+    /** Workspace-relative paths written for this module. */
+    readonly files: readonly string[];
+}
+/**
+ * Write every planned module's version and changelog.
+ *
+ * Returns before the ledger is recorded, because the ledger has to be built from
+ * the versions this pass just wrote.
+ */
+export declare function writePlannedVersions(workspace: Workspace, plan: ReleasePlan, date: string): AppliedModule[];
+/**
+ * The ledger as it will look once this release is published.
+ *
+ * Built from a SECOND payload pass taken after the versions are on disk, because
+ * that is what will actually ship: a dependent's manifest layer carries its
+ * dependency's new version and the pin derived from the dependency's new bytes,
+ * neither of which existed while the plan was being formed. Recording the
+ * pre-bump digest would guarantee the next `check` reported drift on every
+ * module in this release.
+ */
+export declare function recordLedger(root: string, registry: string, plan: ReleasePlan): Promise<Ledger>;
+//# sourceMappingURL=apply-plan.d.ts.map

package/dist/release/apply-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAML,KAAK,MAAM,EAEX,KAAK,SAAS,EAEd,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE9E,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,aAAa,EAAE,CAQjB;AAoDD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/dist/release/apply-plan.js

@@ -0,0 +1,103 @@
+/**
+ * Writing a release plan to disk — the half of `telo release apply` that
+ * changes files.
+ *
+ * Split from the command so the command is wiring: `commands/release.ts` reads
+ * argv, resolves the registry and prints, and everything that touches a manifest,
+ * a changelog or the ledger is here. The seam is the plan itself, which is
+ * already a complete description of what to write.
+ */
+import { prependChangelogRelease, renderChangelogRelease, stampCrateVersion, stampManifestVersion, stampPackageVersion, } from "@telorun/analyzer";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ModulePayloadBuilder } from "../bundle/module-payload.js";
+import { destinationFor, digestPayload, imageDigest } from "./evidence.js";
+import { readLedger } from "./ledger-store.js";
+import { loadWorkspace, requireModule } from "./workspace.js";
+/**
+ * Write every planned module's version and changelog.
+ *
+ * Returns before the ledger is recorded, because the ledger has to be built from
+ * the versions this pass just wrote.
+ */
+export function writePlannedVersions(workspace, plan, date) {
+    return plan.modules.map((module) => {
+        const discovered = requireModule(workspace, module.key);
+        const files = [...stampVersion(discovered.dir, module.to)];
+        const changelog = writeChangelog(workspace, discovered.dir, module, date);
+        if (changelog)
+            files.push(changelog);
+        return { key: module.key, from: module.from, to: module.to, files };
+    });
+}
+/**
+ * Stamp a module's one version into every manifest it owns.
+ *
+ * A file that carries no version is skipped — a module may own only a
+ * `telo.yaml`, and most have no Rust crate. One whose version is written in a
+ * shape that cannot be rewritten in place throws instead, because leaving a
+ * module's manifests disagreeing about its own version is worse than stopping.
+ */
+function stampVersion(dir, version) {
+    const targets = [
+        ["telo.yaml", stampManifestVersion],
+        ["nodejs/package.json", stampPackageVersion],
+        ["rust/Cargo.toml", stampCrateVersion],
+    ];
+    const written = [];
+    for (const [relative, stamp] of targets) {
+        const file = path.join(dir, relative);
+        if (!fs.existsSync(file))
+            continue;
+        const before = fs.readFileSync(file, "utf8");
+        const after = stamp(before, version, relative);
+        if (after === undefined || after === before)
+            continue;
+        fs.writeFileSync(file, after, "utf8");
+        written.push(relative);
+    }
+    return written;
+}
+/** Prepend this release's block, or nothing when no fragment named the module —
+ *  a bump that came only from propagation or a toolchain move has no prose, and
+ *  an empty heading would be worse than silence. */
+function writeChangelog(workspace, dir, module, date) {
+    if (module.entries.length === 0)
+        return undefined;
+    const file = path.join(dir, "CHANGELOG.md");
+    const existing = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : undefined;
+    fs.writeFileSync(file, prependChangelogRelease(existing, renderChangelogRelease({ version: module.to, date, entries: module.entries })), "utf8");
+    return path.relative(workspace.root, file);
+}
+/**
+ * The ledger as it will look once this release is published.
+ *
+ * Built from a SECOND payload pass taken after the versions are on disk, because
+ * that is what will actually ship: a dependent's manifest layer carries its
+ * dependency's new version and the pin derived from the dependency's new bytes,
+ * neither of which existed while the plan was being formed. Recording the
+ * pre-bump digest would guarantee the next `check` reported drift on every
+ * module in this release.
+ */
+export async function recordLedger(root, registry, plan) {
+    // Re-read the workspace so discovery sees the versions just written.
+    const workspace = loadWorkspace(root);
+    const planned = new Set(plan.modules.map((module) => module.key));
+    const builder = new ModulePayloadBuilder({ cacheRoot: path.join(workspace.root, ".telo") });
+    // A module that is not in the plan keeps whatever the ledger already said —
+    // which may be nothing, the correct reading for one that has never published.
+    // Recording a digest for it here would claim a publish that is not happening.
+    const entries = new Map(readLedger(workspace.root).modules);
+    for (const module of workspace.modules) {
+        if (!planned.has(module.key))
+            continue;
+        entries.set(module.key, {
+            version: module.version,
+            layers: module.artifactKind === "image"
+                ? { image: await imageDigest(module) }
+                : await digestPayload(await builder.payload(module.manifestPath, destinationFor(registry, module))),
+        });
+    }
+    return { registry, modules: entries };
+}
+//# sourceMappingURL=apply-plan.js.map

package/dist/release/apply-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GAMpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAW9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAoB,EACpB,IAAiB,EACjB,IAAY;IAEZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAoF;QAC/F,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACnC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;QAC5C,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oDAEoD;AACpD,SAAS,cAAc,CACrB,SAAoB,EACpB,GAAW,EACX,MAAqB,EACrB,IAAY;IAEZ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,uBAAuB,CACrB,QAAQ,EACR,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC9E,EACD,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,QAAgB,EAChB,IAAiB;IAEjB,qEAAqE;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAyB,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EACJ,MAAM,CAAC,YAAY,KAAK,OAAO;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE;gBACtC,CAAC,CAAC,MAAM,aAAa,CACjB,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC7E;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC"}

package/dist/release/evidence.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Collecting what the planner needs: one `ModuleEvidence` per module.
+ *
+ * Three separate readings, because the plan asks three separate questions:
+ *
+ * - **The payload digest** — built through the shared `ModulePayloadBuilder`, so
+ *   the number recorded here is the number `telo publish` computes against the
+ *   registry. That equality is the whole point of the ledger.
+ * - **The edge graph** — from the build's own metafile (which module's source
+ *   got inlined into whose artifact) and from in-repo relative `imports:`. A
+ *   declared-dependency graph cannot see `--external`, so `@telorun/sdk` —
+ *   declared by 54 modules, inlined by none — would bump the entire standard
+ *   library on every SDK change.
+ * - **Own changed files** — a git diff, path-scoped. It used to decide the
+ *   version, which is why its guesswork had to be sound; here it decides only
+ *   whether a changelog line is requested.
+ */
+import { type LayerDigests, type ModuleEvidence } from "@telorun/analyzer";
+import { type ModulePayload } from "../bundle/module-payload.js";
+import type { DiscoveredModule, Workspace } from "./workspace.js";
+export interface EvidenceOptions {
+    /** `oci://host/org` — the base each module's destination derives from. */
+    readonly registry: string;
+    /** Git ref the changed-files reading diffs against. */
+    readonly baseRef: string;
+    /** Called before each module is built, so a long batch shows progress. */
+    readonly onModule?: (module: DiscoveredModule, index: number, total: number) => void;
+}
+/**
+ * A module's publish destination: the registry base plus its own directory name.
+ *
+ * Identity is the ref, never `metadata.name` — this is the same rule the release
+ * job has always applied, lifted out of a shell script.
+ *
+ * This is the ROOT destination, which is a policy rather than a derivation:
+ * nothing in the graph can say which repo a module publishes to. The payload
+ * builder derives a SIBLING's from it instead of re-applying this rule, so the
+ * ref an artifact carries and the destination its dependency is pushed to are
+ * the same string by construction.
+ */
+export declare function destinationFor(registry: string, module: DiscoveredModule): string;
+/**
+ * A built payload reduced to the per-layer digest map the ledger records.
+ *
+ * ONE function, because there are two write paths into the ledger — `apply`
+ * recording what it is about to publish, and `verify --write` re-recording what
+ * the registry actually serves — and the gates only work if they produce the
+ * same map. Two hand-built copies that drifted would make `verify --write`
+ * record numbers `check` cannot reproduce, and every module would then report
+ * permanent phantom drift: the exact failure the ledger's "both gates compute
+ * the same number" premise rests on not happening.
+ */
+export declare function digestPayload(payload: ModulePayload): Promise<LayerDigests>;
+export declare function collectEvidence(workspace: Workspace, options: EvidenceOptions): Promise<ModuleEvidence[]>;
+export declare function imageDigest(module: DiscoveredModule): Promise<string>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/release/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/release/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EAEpB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAajF;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,EAAE,CAAC,CAe3B;AAmED,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B3E"}

package/dist/release/evidence.js

@@ -0,0 +1,245 @@
+/**
+ * Collecting what the planner needs: one `ModuleEvidence` per module.
+ *
+ * Three separate readings, because the plan asks three separate questions:
+ *
+ * - **The payload digest** — built through the shared `ModulePayloadBuilder`, so
+ *   the number recorded here is the number `telo publish` computes against the
+ *   registry. That equality is the whole point of the ledger.
+ * - **The edge graph** — from the build's own metafile (which module's source
+ *   got inlined into whose artifact) and from in-repo relative `imports:`. A
+ *   declared-dependency graph cannot see `--external`, so `@telorun/sdk` —
+ *   declared by 54 modules, inlined by none — would bump the entire standard
+ *   library on every SDK change.
+ * - **Own changed files** — a git diff, path-scoped. It used to decide the
+ *   version, which is why its guesswork had to be sound; here it decides only
+ *   whether a changelog line is requested.
+ */
+import { MANIFEST_LAYER, layerDigestKey, } from "@telorun/analyzer";
+import { computeFilesIntegrity } from "@telorun/kernel";
+import { selectByPatterns } from "@telorun/glob";
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ModulePayloadBuilder } from "../bundle/module-payload.js";
+/**
+ * A module's publish destination: the registry base plus its own directory name.
+ *
+ * Identity is the ref, never `metadata.name` — this is the same rule the release
+ * job has always applied, lifted out of a shell script.
+ *
+ * This is the ROOT destination, which is a policy rather than a derivation:
+ * nothing in the graph can say which repo a module publishes to. The payload
+ * builder derives a SIBLING's from it instead of re-applying this rule, so the
+ * ref an artifact carries and the destination its dependency is pushed to are
+ * the same string by construction.
+ */
+export function destinationFor(registry, module) {
+    return `${registry.replace(/\/+$/, "")}/${path.basename(module.dir)}`;
+}
+/**
+ * A built payload reduced to the per-layer digest map the ledger records.
+ *
+ * ONE function, because there are two write paths into the ledger — `apply`
+ * recording what it is about to publish, and `verify --write` re-recording what
+ * the registry actually serves — and the gates only work if they produce the
+ * same map. Two hand-built copies that drifted would make `verify --write`
+ * record numbers `check` cannot reproduce, and every module would then report
+ * permanent phantom drift: the exact failure the ledger's "both gates compute
+ * the same number" premise rests on not happening.
+ */
+export async function digestPayload(payload) {
+    // The manifest is not one of `partitionLayers`' layers — the transport writes
+    // it as its own — but it is the layer that changes when a dependency's version
+    // or pin moves, which is most of what propagation is about.
+    const layers = {
+        [MANIFEST_LAYER]: await computeFilesIntegrity([
+            { name: MANIFEST_LAYER, content: Buffer.from(payload.manifest, "utf8") },
+        ]),
+    };
+    for (const layer of payload.layers) {
+        layers[layerDigestKey(layer.role, layer.selector)] = await computeFilesIntegrity(layer.files);
+    }
+    return layers;
+}
+export async function collectEvidence(workspace, options) {
+    const byDir = new Map(workspace.modules.map((module) => [path.resolve(module.dir), module]));
+    const changed = changedModules(workspace, options.baseRef);
+    const builder = new ModulePayloadBuilder({ cacheRoot: path.join(workspace.root, ".telo") });
+    const evidence = [];
+    for (const [index, module] of workspace.modules.entries()) {
+        options.onModule?.(module, index, workspace.modules.length);
+        evidence.push(module.artifactKind === "image"
+            ? await imageEvidence(module, changed)
+            : await registryEvidence(workspace, module, byDir, builder, options, changed));
+    }
+    return evidence;
+}
+/**
+ * A registry artifact module: the layers `telo publish` builds, digested.
+ */
+async function registryEvidence(workspace, module, byDir, builder, options, changed) {
+    const payload = await builder.payload(module.manifestPath, destinationFor(options.registry, module));
+    return {
+        key: module.key,
+        name: module.name,
+        version: module.version,
+        artifactKind: "registry",
+        layers: await digestPayload(payload),
+        inlines: attributeInputs(workspace, payload.buildInputs, module, byDir),
+        imports: payload.relativeImports
+            .map((entry) => byDir.get(path.resolve(path.dirname(entry.manifestPath)))?.key)
+            .filter((key) => key !== undefined && key !== module.key),
+        ownFilesChanged: changed.has(module.key),
+    };
+}
+/**
+ * An image module: the file set its Docker ignore file defines, digested.
+ *
+ * The ignore file is already the authored statement of what the image contains,
+ * so it is read rather than the `COPY` directives parsed. Without a digest here
+ * the demoted changed-files rule would be authoritative again for a third of the
+ * set — which is precisely the guesswork this design moves off the critical path.
+ *
+ * The base image is deliberately outside it: a kernel change alters `apps/hub`'s
+ * image while this digest does not move. That exposure is closed elsewhere —
+ * every app image publishes `:latest` and `:sha-<short>` on each push, so the
+ * change reaches the deployed app regardless, and the immutable `:<version>` tag
+ * is what a version move is for.
+ */
+async function imageEvidence(module, changed) {
+    return {
+        key: module.key,
+        name: module.name,
+        version: module.version,
+        artifactKind: "image",
+        layers: { image: await imageDigest(module) },
+        inlines: new Map(),
+        imports: [],
+        ownFilesChanged: changed.has(module.key),
+    };
+}
+/** BuildKit's per-Dockerfile ignore file, then the classic one. Both image
+ *  modules here carry the former, and looking for only `.dockerignore` would
+ *  digest every excluded file in both. */
+const DOCKERIGNORE_NAMES = ["Dockerfile.dockerignore", ".dockerignore"];
+export async function imageDigest(module) {
+    const ignoreFile = DOCKERIGNORE_NAMES.map((name) => path.join(module.dir, name)).find((file) => fs.existsSync(file));
+    const ignored = ignoreFile
+        ? fs
+            .readFileSync(ignoreFile, "utf8")
+            .split("\n")
+            .map((line) => line.trim())
+            .filter((line) => line !== "" && !line.startsWith("#"))
+        : [];
+    // An ignore file EXCLUDES, so it goes in `exclude:` rather than being read as
+    // a selector — `*` followed by `!*.yaml` means "nothing but the YAML", and
+    // treating those as includes would digest exactly the files Docker drops.
+    // `exclude` shares the same last-match-wins engine, so the re-include works.
+    //
+    // The same digest primitive the artifact layers use, so "did this module's
+    // payload change?" is one question with one answer regardless of which of the
+    // two file sets stands behind it.
+    const files = selectByPatterns(listFiles(module.dir), ["**"], {
+        applyDefaultIgnore: false,
+        exclude: ignored,
+    });
+    return computeFilesIntegrity([...files].sort().map((file) => ({
+        name: file,
+        content: fs.readFileSync(path.join(module.dir, file)),
+    })));
+}
+function listFiles(root) {
+    const found = [];
+    const walk = (dir) => {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            if (entry.name === "node_modules" || entry.name === ".git" || entry.name === ".telo")
+                continue;
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory())
+                walk(full);
+            else if (entry.isFile())
+                found.push(path.relative(root, full).split(path.sep).join("/"));
+        }
+    };
+    walk(root);
+    return found;
+}
+/**
+ * Attribute each build input to the workspace module that owns it.
+ *
+ * A module's own sources are excluded — they are covered by its digest and by
+ * the changed-files reading, and listing them as an inline edge would make every
+ * module inline itself. An input under no module (a third-party package, a
+ * changesets-owned library) is deliberately not attributed: that is the
+ * *unattributed* case, reported rather than papered over.
+ */
+function attributeInputs(workspace, inputs, module, byDir) {
+    const owners = new Map();
+    for (const input of inputs) {
+        const owner = ownerOf(path.resolve(input), byDir);
+        if (!owner || owner.key === module.key)
+            continue;
+        const list = owners.get(owner.key);
+        const relative = path.relative(workspace.root, input).split(path.sep).join("/");
+        if (list)
+            list.push(relative);
+        else
+            owners.set(owner.key, [relative]);
+    }
+    for (const files of owners.values())
+        files.sort();
+    return owners;
+}
+/** The nearest enclosing module directory, by walking up. Nearest rather than
+ *  any, so a nested module is credited to itself. */
+function ownerOf(file, byDir) {
+    let dir = path.dirname(file);
+    for (;;) {
+        const owner = byDir.get(dir);
+        if (owner)
+            return owner;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/** Paths under a module that never reach its artifact, so editing one is not a
+ *  semantic change worth a changelog line. Kept deliberately short: this rule no
+ *  longer decides a version, so a false positive costs one sentence and the old
+ *  per-language guesswork bought nothing. */
+const NON_ARTIFACT_PATHS = [/^docs\//, /^plans\//, /^tests\//, /^README\.md$/, /^CHANGELOG\.md$/];
+/**
+ * Modules with a change of their own on this branch.
+ *
+ * No merge base — a shallow clone, a fresh repo — means the reading cannot be
+ * taken, and guessing would ask for a changelog entry at random. The digest is
+ * unaffected: it compares against the ledger, not against a ref, which is why it
+ * needs no merge base in the first place.
+ */
+function changedModules(workspace, baseRef) {
+    let diff;
+    try {
+        diff = execFileSync("git", ["diff", "--name-only", `${baseRef}...HEAD`], {
+            cwd: workspace.root,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+    }
+    catch {
+        return new Set();
+    }
+    const changed = new Set();
+    for (const file of diff.split("\n").map((line) => line.trim()).filter(Boolean)) {
+        const module = workspace.modules.find((candidate) => file.startsWith(`${candidate.key}/`));
+        if (!module)
+            continue;
+        const rest = file.slice(module.key.length + 1);
+        if (NON_ARTIFACT_PATHS.some((pattern) => pattern.test(rest)))
+            continue;
+        changed.add(module.key);
+    }
+    return changed;
+}
+//# sourceMappingURL=evidence.js.map

package/dist/release/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/release/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,cAAc,EACd,cAAc,GAIf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAsB,MAAM,6BAA6B,CAAC;AAYvF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAwB;IACvE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB;IACxD,8EAA8E;IAC9E,+EAA+E;IAC/E,4DAA4D;IAC5D,MAAM,MAAM,GAA2B;QACrC,CAAC,cAAc,CAAC,EAAE,MAAM,qBAAqB,CAAC;YAC5C,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;SACzE,CAAC;KACH,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,OAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,YAAY,KAAK,OAAO;YAC7B,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC;YACtC,CAAC,CAAC,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,SAAoB,EACpB,MAAwB,EACxB,KAA4C,EAC5C,OAA6B,EAC7B,OAAwB,EACxB,OAA+B;IAE/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CACnC,MAAM,CAAC,YAAY,EACnB,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CACzC,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE,MAAM,aAAa,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC;QACvE,OAAO,EAAE,OAAO,CAAC,eAAe;aAC7B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;aAC9E,MAAM,CAAC,CAAC,GAAG,EAAoB,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;QAC7E,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAwB,EACxB,OAA+B;IAE/B,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,OAAO;QACrB,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE;QAC5C,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;0CAE0C;AAC1C,MAAM,kBAAkB,GAAG,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC;AAExE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAwB;IACxD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7F,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACpB,CAAC;IACF,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,EAAE;aACC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC;aAChC,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,EAAE;IACF,2EAA2E;IAC3E,8EAA8E;IAC9E,kCAAkC;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;QAC5D,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IACH,OAAO,qBAAqB,CAC1B,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;KACtD,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAC/B,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,CAAC;IACX,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CACtB,SAAoB,EACpB,MAAyB,EACzB,MAAwB,EACxB,KAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChF,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;YACzB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;qDACqD;AACrD,SAAS,OAAO,CACd,IAAY,EACZ,KAA4C;IAE5C,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACrC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;6CAG6C;AAC7C,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;AAElG;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,SAAoB,EAAE,OAAe;IAC3D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,SAAS,CAAC,EAAE;YACvE,GAAG,EAAE,SAAS,CAAC,IAAI;YACnB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACvE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/release/ledger-store.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Reading and writing `.changes/ledger.yaml`, and the pending fragment
+ * directory beside it.
+ *
+ * The Node half only — the shapes and their parsers are the analyzer's, so the
+ * editor reads the same files the same way.
+ */
+import { type Ledger, type ReleaseFragment } from "@telorun/analyzer";
+/** Where a fragment waits to be released. Sits under `.changes/` beside the
+ *  ledger, so everything the release system owns is in one directory. */
+export declare const PENDING_DIR = ".changes/pending";
+export declare function readLedger(root: string): Ledger;
+export declare function writeLedger(root: string, ledger: Ledger): void;
+/** Every pending fragment, in filename order so a plan's changelog entries land
+ *  in a stable order across runs. */
+export declare function readFragments(root: string): ReleaseFragment[];
+/**
+ * Write a fragment, never over one that already exists.
+ *
+ * The filename is derived from the kind and the first words of the body, which
+ * is what makes the pending directory readable — and what makes a collision
+ * possible. Silently overwriting would delete somebody's changelog line, so a
+ * taken name gets a `-2` rather than the file it names.
+ */
+export declare function writeFragment(root: string, name: string, text: string): string;
+export declare function deleteFragment(root: string, source: string): void;
+//# sourceMappingURL=ledger-store.d.ts.map

package/dist/release/ledger-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-store.d.ts","sourceRoot":"","sources":["../../src/release/ledger-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAML,KAAK,MAAM,EACX,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AAI3B;yEACyE;AACzE,eAAO,MAAM,WAAW,qBAAqB,CAAC;AAE9C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI9D;AAED;qCACqC;AACrC,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAW7D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjE"}

package/dist/release/ledger-store.js

@@ -0,0 +1,62 @@
+/**
+ * Reading and writing `.changes/ledger.yaml`, and the pending fragment
+ * directory beside it.
+ *
+ * The Node half only — the shapes and their parsers are the analyzer's, so the
+ * editor reads the same files the same way.
+ */
+import { EMPTY_LEDGER, LEDGER_PATH, parseFragment, parseLedger, serializeLedger, } from "@telorun/analyzer";
+import * as fs from "node:fs";
+import * as path from "node:path";
+/** Where a fragment waits to be released. Sits under `.changes/` beside the
+ *  ledger, so everything the release system owns is in one directory. */
+export const PENDING_DIR = ".changes/pending";
+export function readLedger(root) {
+    const file = path.join(root, LEDGER_PATH);
+    if (!fs.existsSync(file))
+        return EMPTY_LEDGER;
+    return parseLedger(fs.readFileSync(file, "utf8"), LEDGER_PATH);
+}
+export function writeLedger(root, ledger) {
+    const file = path.join(root, LEDGER_PATH);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, serializeLedger(ledger), "utf8");
+}
+/** Every pending fragment, in filename order so a plan's changelog entries land
+ *  in a stable order across runs. */
+export function readFragments(root) {
+    const dir = path.join(root, PENDING_DIR);
+    if (!fs.existsSync(dir))
+        return [];
+    return fs
+        .readdirSync(dir)
+        .filter((name) => name.endsWith(".yaml") || name.endsWith(".yml"))
+        .sort()
+        .map((name) => {
+        const source = `${PENDING_DIR}/${name}`;
+        return parseFragment(fs.readFileSync(path.join(dir, name), "utf8"), source);
+    });
+}
+/**
+ * Write a fragment, never over one that already exists.
+ *
+ * The filename is derived from the kind and the first words of the body, which
+ * is what makes the pending directory readable — and what makes a collision
+ * possible. Silently overwriting would delete somebody's changelog line, so a
+ * taken name gets a `-2` rather than the file it names.
+ */
+export function writeFragment(root, name, text) {
+    const dir = path.join(root, PENDING_DIR);
+    fs.mkdirSync(dir, { recursive: true });
+    const [, stem, ext] = /^(.*?)(\.[^.]+)$/.exec(name) ?? [undefined, name, ""];
+    let candidate = name;
+    for (let n = 2; fs.existsSync(path.join(dir, candidate)); n++) {
+        candidate = `${stem}-${n}${ext}`;
+    }
+    fs.writeFileSync(path.join(dir, candidate), text, "utf8");
+    return `${PENDING_DIR}/${candidate}`;
+}
+export function deleteFragment(root, source) {
+    fs.rmSync(path.join(root, source), { force: true });
+}
+//# sourceMappingURL=ledger-store.js.map

package/dist/release/ledger-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-store.js","sourceRoot":"","sources":["../../src/release/ledger-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,WAAW,EACX,eAAe,GAGhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;yEACyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAE9C,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC9C,OAAO,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAc;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;qCACqC;AACrC,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACjE,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC;QACxC,OAAO,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,SAAS,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;IACnC,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,GAAG,WAAW,IAAI,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACzD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/release/render.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Rendering a release plan for a person.
+ *
+ * The output's job is to answer "why is this module in the list", because that
+ * is the question every previous version of this system could not answer. A
+ * payload that moved through an inlined sibling, through an import whose version
+ * is about to change, or through nothing anyone can name are three different
+ * situations, and only the last one is a judgement call the reader has to make.
+ */
+import type { BumpReason, ReleasePlan } from "@telorun/analyzer";
+import type { Logger } from "../logger.js";
+export declare function describeReason(reason: BumpReason): string;
+export declare function renderPlan(plan: ReleasePlan, log: Logger): string[];
+export declare function renderDiagnostics(plan: ReleasePlan, log: Logger): string[];
+/** The machine surface: the same plan, without the column alignment. */
+export declare function planPayload(plan: ReleasePlan): unknown;
+//# sourceMappingURL=render.d.ts.map

package/dist/release/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/release/render.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAiB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAM3C,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAczD;AAgBD,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAenE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAM1E;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAetD"}