@telorun/cli 0.74.0 → 0.76.0

package/dist/output.js

@@ -45,20 +45,76 @@ export class Output {
         this.stdout = format === "text" ? paletteFor(Boolean(stdout.isTTY), env) : PLAIN;
         this.stderr = paletteFor(Boolean(stderr.isTTY), env);
     }
+    /** Whether a transient progress line is currently on screen, waiting to be
+     *  overwritten. Owned here because the rule it implies — every other write
+     *  must erase it first — has to hold for every write method, and a call site
+     *  that forgot would leave its output glued to the end of a ticker. */
+    transient = false;
     get isJson() {
         return this.format === "json";
     }
+    /** Erase a pending transient line, so the next write starts on a clean row.
+     *  `\r` returns to column 0 and `\x1b[2K` clears the row; both are cursor
+     *  control rather than colour, so they are gated on the stream being a TTY and
+     *  not on the palette — a `NO_COLOR` terminal still has a cursor. */
+    clearTransient() {
+        if (!this.transient)
+            return;
+        this.transient = false;
+        this.errStream.write("\r\x1b[2K");
+    }
+    /** Drop any pending progress line without writing anything else. For a
+     *  command that finishes without a further write and would otherwise leave the
+     *  shell prompt sitting after a half-drawn ticker. */
+    endProgress() {
+        this.clearTransient();
+    }
     /** Human-readable line on stdout. Suppressed under `-o json`, where stdout is
      *  reserved for the payload. */
     line(text = "") {
-        if (this.format === "text")
-            this.outStream.write(`${text}\n`);
+        if (this.format !== "text")
+            return;
+        // Cleared even though this writes to the OTHER stream: both usually land on
+        // one terminal, so a stdout line written over a pending stderr ticker would
+        // start halfway across the row.
+        this.clearTransient();
+        this.outStream.write(`${text}\n`);
     }
     /** Human-readable line on stderr. Written in BOTH formats — stderr is not the
      *  machine contract, and silencing it loses the reason a command failed. */
     errLine(text = "") {
+        this.clearTransient();
         this.errStream.write(`${text}\n`);
     }
+    /**
+     * A progress tick on stderr, written only in text format and only to a TTY.
+     *
+     * The distinction this draws is between a **diagnostic** and a **progress
+     * indicator**, and it is why the rule is not the one `errLine` follows.
+     * `errLine` must write in every format because silencing it would lose the
+     * reason a command failed — that is error swallowing. A tick explains nothing.
+     * It is an affordance of the human-formatted mode: something for a person
+     * watching a long operation, so that a two-minute build does not look hung.
+     *
+     * BOTH conditions, because either one alone leaves a case wrong. `-o json`
+     * says the output is a contract, and decorating that run with prose the caller
+     * did not ask for is noise in their terminal whether or not they are looking
+     * at it — the format is the caller's statement of intent, not a guess about
+     * where the bytes land. And a text run redirected into a file or a CI log has
+     * nobody watching either, where sixty ticks bury the output the reader came
+     * for.
+     */
+    progress(text) {
+        if (this.format !== "text" || !this.errStream.isTTY)
+            return;
+        this.clearTransient();
+        // No newline: this line is TRANSIENT. The next tick overwrites it and any
+        // real output erases it, so a 59-module run leaves behind only the findings
+        // rather than 59 ticks interleaved with them — which is the whole reason a
+        // ticker is bearable at this length at all.
+        this.errStream.write(truncate(text, this.errStream.columns));
+        this.transient = true;
+    }
     /** Emit a command's structured RESULT ENVELOPE. A no-op in text mode.
      *
      *  Every command that owns its stdout calls this exactly once, including when
@@ -75,6 +131,10 @@ export class Output {
      *  whose wire protocol is framed per event precisely because it shares a
      *  stream. */
     emit(payload) {
+        // Unconditionally, including under `text` where nothing is written: every
+        // command reports its result exactly once, so this is the lifecycle point at
+        // which a leftover ticker has to go.
+        this.clearTransient();
         if (this.format === "json")
             this.outStream.write(serialize(payload));
     }
@@ -86,6 +146,7 @@ export class Output {
      *  must keep working under the default `text` format. One serializer with
      *  `emit`, so the CLI has a single JSON encoding rather than three. */
     document(payload) {
+        this.clearTransient();
         this.outStream.write(serialize(payload));
     }
     /** Write verbatim content to stdout, unconditionally and with no framing.
@@ -96,9 +157,30 @@ export class Output {
      *  — the `--json` path wraps them in a document instead and never reaches
      *  here. */
     raw(content) {
+        this.clearTransient();
         this.outStream.write(content);
     }
 }
+/** Clip to the terminal width, measuring PRINTABLE characters so the escapes a
+ *  palette wrapped the text in do not count toward it. A line that wraps
+ *  occupies two rows and the erase sequence clears one. */
+function truncate(text, columns) {
+    if (!columns || columns < 8)
+        return text;
+    let printable = 0;
+    for (let i = 0; i < text.length; i++) {
+        // Skip a CSI sequence wholesale: `\x1b[` … a final byte in `@`–`~`.
+        if (text[i] === "\x1b" && text[i + 1] === "[") {
+            i += 2;
+            while (i < text.length && !/[@-~]/.test(text[i]))
+                i++;
+            continue;
+        }
+        if (++printable > columns - 1)
+            return `${text.slice(0, i)}…`;
+    }
+    return text;
+}
 function serialize(payload) {
     return `${JSON.stringify(payload, null, 2)}\n`;
 }
@@ -140,4 +222,6 @@ export const outLine = (text = "") => current.line(text);
 export const outErrLine = (text = "") => current.errLine(text);
 export const outEmit = (payload) => current.emit(payload);
 export const outDocument = (payload) => current.document(payload);
+export const outProgress = (text) => current.progress(text);
+export const outEndProgress = () => current.endProgress();
 //# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAM9C,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAiB/D,MAAM,KAAK,GAAY;IACrB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACd,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;CACd,CAAC;AAEF,SAAS,UAAU,CAAC,KAAc,EAAE,GAAsB;IACxD,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,IAAI,SAAS,CAAC;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACjF,CAAC;AAgBD;;;;;;;;;;;;gEAYgE;AAChE,MAAM,OAAO,MAAM;IACR,MAAM,CAAe;IACrB,MAAM,CAAU;IAChB,MAAM,CAAU;IACR,SAAS,CAAe;IACxB,SAAS,CAAe;IAEzC,YAAY,OAAsB;QAChC,MAAM,EACJ,MAAM,EACN,MAAM,GAAG,OAAO,CAAC,MAAM,EACvB,MAAM,GAAG,OAAO,CAAC,MAAM,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,GAClB,GAAG,OAAO,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjF,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAChC,CAAC;IAED;oCACgC;IAChC,IAAI,CAAC,IAAI,GAAG,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;gFAC4E;IAC5E,OAAO,CAAC,IAAI,GAAG,EAAE;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;kBAcc;IACd,IAAI,CAAC,OAAgB;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;2EAMuE;IACvE,QAAQ,CAAC,OAAgB;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;gBAMY;IACZ,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;CACF;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;6EAE6E;AAC7E,IAAI,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE7C,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;2CAI2C;AAC3C,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC;IACzB,OAAO,GAAG,WAAW,CAAC;IACtB,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;gDAGgD;AAChD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAqB,CAAC;QAAE,OAAO,KAAqB,CAAC;IACjF,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,KAAK,CAAC,uBAAuB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;AACJ,CAAC;AAED;;+EAE+E;AAC/E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAI,GAAG,EAAE,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,EAAE,EAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAM9C,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAiB/D,MAAM,KAAK,GAAY;IACrB,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACd,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;CACd,CAAC;AAEF,SAAS,UAAU,CAAC,KAAc,EAAE,GAAsB;IACxD,+EAA+E;IAC/E,0CAA0C;IAC1C,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,IAAI,SAAS,CAAC;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACjF,CAAC;AAqBD;;;;;;;;;;;;gEAYgE;AAChE,MAAM,OAAO,MAAM;IACR,MAAM,CAAe;IACrB,MAAM,CAAU;IAChB,MAAM,CAAU;IACR,SAAS,CAAe;IACxB,SAAS,CAAe;IAEzC,YAAY,OAAsB;QAChC,MAAM,EACJ,MAAM,EACN,MAAM,GAAG,OAAO,CAAC,MAAM,EACvB,MAAM,GAAG,OAAO,CAAC,MAAM,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,GAClB,GAAG,OAAO,CAAC;QACZ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjF,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED;;;2EAGuE;IAC/D,SAAS,GAAG,KAAK,CAAC;IAE1B,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAChC,CAAC;IAED;;;yEAGqE;IAC7D,cAAc;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED;;0DAEsD;IACtD,WAAW;QACT,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED;oCACgC;IAChC,IAAI,CAAC,IAAI,GAAG,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QACnC,4EAA4E;QAC5E,4EAA4E;QAC5E,gCAAgC;QAChC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;gFAC4E;IAC5E,OAAO,CAAC,IAAI,GAAG,EAAE;QACf,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAY;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK;YAAE,OAAO;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,4CAA4C;QAC5C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;;;;kBAcc;IACd,IAAI,CAAC,OAAgB;QACnB,0EAA0E;QAC1E,6EAA6E;QAC7E,qCAAqC;QACrC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;2EAMuE;IACvE,QAAQ,CAAC,OAAgB;QACvB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;gBAMY;IACZ,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;2DAE2D;AAC3D,SAAS,QAAQ,CAAC,IAAY,EAAE,OAA2B;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,oEAAoE;QACpE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC9C,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YACtD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;6EAE6E;AAC7E,IAAI,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAE7C,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;2CAI2C;AAC3C,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC;IACzB,OAAO,GAAG,WAAW,CAAC;IACtB,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;gDAGgD;AAChD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAqB,CAAC;QAAE,OAAO,KAAqB,CAAC;IACjF,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,KAAK,CAAC,uBAAuB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;AACJ,CAAC;AAED;;+EAE+E;AAC/E,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAI,GAAG,EAAE,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,EAAE,EAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC"}

package/dist/publishers/npm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm.d.ts","sourceRoot":"","sources":["../../src/publishers/npm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAa,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErE,eAAO,MAAM,YAAY,EAAE,mBAgD1B,CAAC"}
+{"version":3,"file":"npm.d.ts","sourceRoot":"","sources":["../../src/publishers/npm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAa,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErE,eAAO,MAAM,YAAY,EAAE,mBAwD1B,CAAC"}

package/dist/publishers/npm.js

@@ -16,9 +16,17 @@ export const npmPublisher = {
         return this.readVersion(localPath);
     },
     async build(localPath) {
+        // Windows ships no executable named `npm` — it is `npm.cmd`, which libuv's
+        // PATH search (`.com`/`.exe` only) never finds and which Node refuses to
+        // spawn without a shell since CVE-2024-27980. The `execSync` calls in this
+        // file already route through `ComSpec` and so were never affected; only a
+        // direct spawn needs this. Every argument here is a fixed literal with no
+        // space and no cmd metacharacter, so unlike the kernel's installer this one
+        // needs no per-token quoting — a dynamic argument added later would.
         const result = spawnSync("npm", ["--loglevel=error", "run", "build"], {
             cwd: localPath,
             encoding: "utf-8",
+            shell: process.platform === "win32",
         });
         if (result.status !== 0) {
             const output = [result.stdout, result.stderr].filter(Boolean).join("\n");

package/dist/publishers/npm.js.map

@@ -1 +1 @@
-{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/publishers/npm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,MAAM,CAAC,MAAM,YAAY,GAAwB;IAC/C,IAAI,EAAE,KAAK;IAEX,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAwB,CAAC;QACjF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAgB;QACnD,QAAQ,CAAC,eAAe,KAAK,wCAAwC,EAAE;YACrE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;YACpE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,OAAe;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAqB,CAAC;QAC9E,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7B,sDAAsD;QACtD,IAAI,CAAC;YACH,QAAQ,CAAC,YAAY,WAAW,IAAI,OAAO,2BAA2B,EAAE;gBACtE,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,wEAAwE;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;QAED,QAAQ,CAAC,8CAA8C,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC"}
+{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../src/publishers/npm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,MAAM,CAAC,MAAM,YAAY,GAAwB;IAC/C,IAAI,EAAE,KAAK;IAEX,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAwB,CAAC;QACjF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAgB;QACnD,QAAQ,CAAC,eAAe,KAAK,wCAAwC,EAAE;YACrE,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB;QAC3B,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;YACpE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,OAAe;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAqB,CAAC;QAC9E,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7B,sDAAsD;QACtD,IAAI,CAAC;YACH,QAAQ,CAAC,YAAY,WAAW,IAAI,OAAO,2BAA2B,EAAE;gBACtE,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,wEAAwE;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;QAED,QAAQ,CAAC,8CAA8C,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC"}

package/dist/release/apply-plan.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Writing a release plan to disk — the half of `telo release apply` that
+ * changes files.
+ *
+ * Split from the command so the command is wiring: `commands/release.ts` reads
+ * argv, resolves the registry and prints, and everything that touches a manifest,
+ * a changelog or the ledger is here. The seam is the plan itself, which is
+ * already a complete description of what to write.
+ */
+import { type Ledger, type ModuleKey, type ReleasePlan } from "@telorun/analyzer";
+import { type Workspace } from "./workspace.js";
+/** One module's writes, reported so `apply` can list what it touched. */
+export interface AppliedModule {
+    readonly key: ModuleKey;
+    readonly from: string;
+    readonly to: string;
+    /** Workspace-relative paths written for this module. */
+    readonly files: readonly string[];
+}
+/**
+ * Write every planned module's version and changelog.
+ *
+ * Returns before the ledger is recorded, because the ledger has to be built from
+ * the versions this pass just wrote.
+ */
+export declare function writePlannedVersions(workspace: Workspace, plan: ReleasePlan, date: string): AppliedModule[];
+/**
+ * The ledger as it will look once this release is published.
+ *
+ * Built from a SECOND payload pass taken after the versions are on disk, because
+ * that is what will actually ship: a dependent's manifest layer carries its
+ * dependency's new version and the pin derived from the dependency's new bytes,
+ * neither of which existed while the plan was being formed. Recording the
+ * pre-bump digest would guarantee the next `check` reported drift on every
+ * module in this release.
+ */
+export declare function recordLedger(root: string, registry: string, plan: ReleasePlan): Promise<Ledger>;
+//# sourceMappingURL=apply-plan.d.ts.map

package/dist/release/apply-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAML,KAAK,MAAM,EAEX,KAAK,SAAS,EAEd,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE9E,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,aAAa,EAAE,CAQjB;AAoDD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/dist/release/apply-plan.js

@@ -0,0 +1,103 @@
+/**
+ * Writing a release plan to disk — the half of `telo release apply` that
+ * changes files.
+ *
+ * Split from the command so the command is wiring: `commands/release.ts` reads
+ * argv, resolves the registry and prints, and everything that touches a manifest,
+ * a changelog or the ledger is here. The seam is the plan itself, which is
+ * already a complete description of what to write.
+ */
+import { prependChangelogRelease, renderChangelogRelease, stampCrateVersion, stampManifestVersion, stampPackageVersion, } from "@telorun/analyzer";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ModulePayloadBuilder } from "../bundle/module-payload.js";
+import { destinationFor, digestPayload, imageDigest } from "./evidence.js";
+import { readLedger } from "./ledger-store.js";
+import { loadWorkspace, requireModule } from "./workspace.js";
+/**
+ * Write every planned module's version and changelog.
+ *
+ * Returns before the ledger is recorded, because the ledger has to be built from
+ * the versions this pass just wrote.
+ */
+export function writePlannedVersions(workspace, plan, date) {
+    return plan.modules.map((module) => {
+        const discovered = requireModule(workspace, module.key);
+        const files = [...stampVersion(discovered.dir, module.to)];
+        const changelog = writeChangelog(workspace, discovered.dir, module, date);
+        if (changelog)
+            files.push(changelog);
+        return { key: module.key, from: module.from, to: module.to, files };
+    });
+}
+/**
+ * Stamp a module's one version into every manifest it owns.
+ *
+ * A file that carries no version is skipped — a module may own only a
+ * `telo.yaml`, and most have no Rust crate. One whose version is written in a
+ * shape that cannot be rewritten in place throws instead, because leaving a
+ * module's manifests disagreeing about its own version is worse than stopping.
+ */
+function stampVersion(dir, version) {
+    const targets = [
+        ["telo.yaml", stampManifestVersion],
+        ["nodejs/package.json", stampPackageVersion],
+        ["rust/Cargo.toml", stampCrateVersion],
+    ];
+    const written = [];
+    for (const [relative, stamp] of targets) {
+        const file = path.join(dir, relative);
+        if (!fs.existsSync(file))
+            continue;
+        const before = fs.readFileSync(file, "utf8");
+        const after = stamp(before, version, relative);
+        if (after === undefined || after === before)
+            continue;
+        fs.writeFileSync(file, after, "utf8");
+        written.push(relative);
+    }
+    return written;
+}
+/** Prepend this release's block, or nothing when no fragment named the module —
+ *  a bump that came only from propagation or a toolchain move has no prose, and
+ *  an empty heading would be worse than silence. */
+function writeChangelog(workspace, dir, module, date) {
+    if (module.entries.length === 0)
+        return undefined;
+    const file = path.join(dir, "CHANGELOG.md");
+    const existing = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : undefined;
+    fs.writeFileSync(file, prependChangelogRelease(existing, renderChangelogRelease({ version: module.to, date, entries: module.entries })), "utf8");
+    return path.relative(workspace.root, file);
+}
+/**
+ * The ledger as it will look once this release is published.
+ *
+ * Built from a SECOND payload pass taken after the versions are on disk, because
+ * that is what will actually ship: a dependent's manifest layer carries its
+ * dependency's new version and the pin derived from the dependency's new bytes,
+ * neither of which existed while the plan was being formed. Recording the
+ * pre-bump digest would guarantee the next `check` reported drift on every
+ * module in this release.
+ */
+export async function recordLedger(root, registry, plan) {
+    // Re-read the workspace so discovery sees the versions just written.
+    const workspace = loadWorkspace(root);
+    const planned = new Set(plan.modules.map((module) => module.key));
+    const builder = new ModulePayloadBuilder({ cacheRoot: path.join(workspace.root, ".telo") });
+    // A module that is not in the plan keeps whatever the ledger already said —
+    // which may be nothing, the correct reading for one that has never published.
+    // Recording a digest for it here would claim a publish that is not happening.
+    const entries = new Map(readLedger(workspace.root).modules);
+    for (const module of workspace.modules) {
+        if (!planned.has(module.key))
+            continue;
+        entries.set(module.key, {
+            version: module.version,
+            layers: module.artifactKind === "image"
+                ? { image: await imageDigest(module) }
+                : await digestPayload(await builder.payload(module.manifestPath, destinationFor(registry, module))),
+        });
+    }
+    return { registry, modules: entries };
+}
+//# sourceMappingURL=apply-plan.js.map

package/dist/release/apply-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,GAMpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAW9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAoB,EACpB,IAAiB,EACjB,IAAY;IAEZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAoF;QAC/F,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACnC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;QAC5C,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oDAEoD;AACpD,SAAS,cAAc,CACrB,SAAoB,EACpB,GAAW,EACX,MAAqB,EACrB,IAAY;IAEZ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,uBAAuB,CACrB,QAAQ,EACR,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC9E,EACD,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,QAAgB,EAChB,IAAiB;IAEjB,qEAAqE;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAyB,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EACJ,MAAM,CAAC,YAAY,KAAK,OAAO;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE;gBACtC,CAAC,CAAC,MAAM,aAAa,CACjB,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC7E;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC"}

package/dist/release/evidence.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Collecting what the planner needs: one `ModuleEvidence` per module.
+ *
+ * Three separate readings, because the plan asks three separate questions:
+ *
+ * - **The payload digest** — built through the shared `ModulePayloadBuilder`, so
+ *   the number recorded here is the number `telo publish` computes against the
+ *   registry. That equality is the whole point of the ledger.
+ * - **The edge graph** — from the build's own metafile (which module's source
+ *   got inlined into whose artifact) and from in-repo relative `imports:`. A
+ *   declared-dependency graph cannot see `--external`, so `@telorun/sdk` —
+ *   declared by 54 modules, inlined by none — would bump the entire standard
+ *   library on every SDK change.
+ * - **Own changed files** — a git diff, path-scoped. It used to decide the
+ *   version, which is why its guesswork had to be sound; here it decides only
+ *   whether a changelog line is requested.
+ */
+import { type LayerDigests, type ModuleEvidence } from "@telorun/analyzer";
+import { type ModulePayload } from "../bundle/module-payload.js";
+import type { DiscoveredModule, Workspace } from "./workspace.js";
+export interface EvidenceOptions {
+    /** `oci://host/org` — the base each module's destination derives from. */
+    readonly registry: string;
+    /** Git ref the changed-files reading diffs against. */
+    readonly baseRef: string;
+    /** Called before each module is built, so a long batch shows progress. */
+    readonly onModule?: (module: DiscoveredModule, index: number, total: number) => void;
+}
+/**
+ * A module's publish destination: the registry base plus its own directory name.
+ *
+ * Identity is the ref, never `metadata.name` — this is the same rule the release
+ * job has always applied, lifted out of a shell script.
+ *
+ * This is the ROOT destination, which is a policy rather than a derivation:
+ * nothing in the graph can say which repo a module publishes to. The payload
+ * builder derives a SIBLING's from it instead of re-applying this rule, so the
+ * ref an artifact carries and the destination its dependency is pushed to are
+ * the same string by construction.
+ */
+export declare function destinationFor(registry: string, module: DiscoveredModule): string;
+/**
+ * A built payload reduced to the per-layer digest map the ledger records.
+ *
+ * ONE function, because there are two write paths into the ledger — `apply`
+ * recording what it is about to publish, and `verify --write` re-recording what
+ * the registry actually serves — and the gates only work if they produce the
+ * same map. Two hand-built copies that drifted would make `verify --write`
+ * record numbers `check` cannot reproduce, and every module would then report
+ * permanent phantom drift: the exact failure the ledger's "both gates compute
+ * the same number" premise rests on not happening.
+ */
+export declare function digestPayload(payload: ModulePayload): Promise<LayerDigests>;
+export declare function collectEvidence(workspace: Workspace, options: EvidenceOptions): Promise<ModuleEvidence[]>;
+export declare function imageDigest(module: DiscoveredModule): Promise<string>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/release/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/release/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EAEpB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAEjF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAajF;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,cAAc,EAAE,CAAC,CAe3B;AAmED,wBAAsB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B3E"}

package/dist/release/evidence.js

@@ -0,0 +1,245 @@
+/**
+ * Collecting what the planner needs: one `ModuleEvidence` per module.
+ *
+ * Three separate readings, because the plan asks three separate questions:
+ *
+ * - **The payload digest** — built through the shared `ModulePayloadBuilder`, so
+ *   the number recorded here is the number `telo publish` computes against the
+ *   registry. That equality is the whole point of the ledger.
+ * - **The edge graph** — from the build's own metafile (which module's source
+ *   got inlined into whose artifact) and from in-repo relative `imports:`. A
+ *   declared-dependency graph cannot see `--external`, so `@telorun/sdk` —
+ *   declared by 54 modules, inlined by none — would bump the entire standard
+ *   library on every SDK change.
+ * - **Own changed files** — a git diff, path-scoped. It used to decide the
+ *   version, which is why its guesswork had to be sound; here it decides only
+ *   whether a changelog line is requested.
+ */
+import { MANIFEST_LAYER, layerDigestKey, } from "@telorun/analyzer";
+import { computeFilesIntegrity } from "@telorun/kernel";
+import { selectByPatterns } from "@telorun/glob";
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { ModulePayloadBuilder } from "../bundle/module-payload.js";
+/**
+ * A module's publish destination: the registry base plus its own directory name.
+ *
+ * Identity is the ref, never `metadata.name` — this is the same rule the release
+ * job has always applied, lifted out of a shell script.
+ *
+ * This is the ROOT destination, which is a policy rather than a derivation:
+ * nothing in the graph can say which repo a module publishes to. The payload
+ * builder derives a SIBLING's from it instead of re-applying this rule, so the
+ * ref an artifact carries and the destination its dependency is pushed to are
+ * the same string by construction.
+ */
+export function destinationFor(registry, module) {
+    return `${registry.replace(/\/+$/, "")}/${path.basename(module.dir)}`;
+}
+/**
+ * A built payload reduced to the per-layer digest map the ledger records.
+ *
+ * ONE function, because there are two write paths into the ledger — `apply`
+ * recording what it is about to publish, and `verify --write` re-recording what
+ * the registry actually serves — and the gates only work if they produce the
+ * same map. Two hand-built copies that drifted would make `verify --write`
+ * record numbers `check` cannot reproduce, and every module would then report
+ * permanent phantom drift: the exact failure the ledger's "both gates compute
+ * the same number" premise rests on not happening.
+ */
+export async function digestPayload(payload) {
+    // The manifest is not one of `partitionLayers`' layers — the transport writes
+    // it as its own — but it is the layer that changes when a dependency's version
+    // or pin moves, which is most of what propagation is about.
+    const layers = {
+        [MANIFEST_LAYER]: await computeFilesIntegrity([
+            { name: MANIFEST_LAYER, content: Buffer.from(payload.manifest, "utf8") },
+        ]),
+    };
+    for (const layer of payload.layers) {
+        layers[layerDigestKey(layer.role, layer.selector)] = await computeFilesIntegrity(layer.files);
+    }
+    return layers;
+}
+export async function collectEvidence(workspace, options) {
+    const byDir = new Map(workspace.modules.map((module) => [path.resolve(module.dir), module]));
+    const changed = changedModules(workspace, options.baseRef);
+    const builder = new ModulePayloadBuilder({ cacheRoot: path.join(workspace.root, ".telo") });
+    const evidence = [];
+    for (const [index, module] of workspace.modules.entries()) {
+        options.onModule?.(module, index, workspace.modules.length);
+        evidence.push(module.artifactKind === "image"
+            ? await imageEvidence(module, changed)
+            : await registryEvidence(workspace, module, byDir, builder, options, changed));
+    }
+    return evidence;
+}
+/**
+ * A registry artifact module: the layers `telo publish` builds, digested.
+ */
+async function registryEvidence(workspace, module, byDir, builder, options, changed) {
+    const payload = await builder.payload(module.manifestPath, destinationFor(options.registry, module));
+    return {
+        key: module.key,
+        name: module.name,
+        version: module.version,
+        artifactKind: "registry",
+        layers: await digestPayload(payload),
+        inlines: attributeInputs(workspace, payload.buildInputs, module, byDir),
+        imports: payload.relativeImports
+            .map((entry) => byDir.get(path.resolve(path.dirname(entry.manifestPath)))?.key)
+            .filter((key) => key !== undefined && key !== module.key),
+        ownFilesChanged: changed.has(module.key),
+    };
+}
+/**
+ * An image module: the file set its Docker ignore file defines, digested.
+ *
+ * The ignore file is already the authored statement of what the image contains,
+ * so it is read rather than the `COPY` directives parsed. Without a digest here
+ * the demoted changed-files rule would be authoritative again for a third of the
+ * set — which is precisely the guesswork this design moves off the critical path.
+ *
+ * The base image is deliberately outside it: a kernel change alters `apps/hub`'s
+ * image while this digest does not move. That exposure is closed elsewhere —
+ * every app image publishes `:latest` and `:sha-<short>` on each push, so the
+ * change reaches the deployed app regardless, and the immutable `:<version>` tag
+ * is what a version move is for.
+ */
+async function imageEvidence(module, changed) {
+    return {
+        key: module.key,
+        name: module.name,
+        version: module.version,
+        artifactKind: "image",
+        layers: { image: await imageDigest(module) },
+        inlines: new Map(),
+        imports: [],
+        ownFilesChanged: changed.has(module.key),
+    };
+}
+/** BuildKit's per-Dockerfile ignore file, then the classic one. Both image
+ *  modules here carry the former, and looking for only `.dockerignore` would
+ *  digest every excluded file in both. */
+const DOCKERIGNORE_NAMES = ["Dockerfile.dockerignore", ".dockerignore"];
+export async function imageDigest(module) {
+    const ignoreFile = DOCKERIGNORE_NAMES.map((name) => path.join(module.dir, name)).find((file) => fs.existsSync(file));
+    const ignored = ignoreFile
+        ? fs
+            .readFileSync(ignoreFile, "utf8")
+            .split("\n")
+            .map((line) => line.trim())
+            .filter((line) => line !== "" && !line.startsWith("#"))
+        : [];
+    // An ignore file EXCLUDES, so it goes in `exclude:` rather than being read as
+    // a selector — `*` followed by `!*.yaml` means "nothing but the YAML", and
+    // treating those as includes would digest exactly the files Docker drops.
+    // `exclude` shares the same last-match-wins engine, so the re-include works.
+    //
+    // The same digest primitive the artifact layers use, so "did this module's
+    // payload change?" is one question with one answer regardless of which of the
+    // two file sets stands behind it.
+    const files = selectByPatterns(listFiles(module.dir), ["**"], {
+        applyDefaultIgnore: false,
+        exclude: ignored,
+    });
+    return computeFilesIntegrity([...files].sort().map((file) => ({
+        name: file,
+        content: fs.readFileSync(path.join(module.dir, file)),
+    })));
+}
+function listFiles(root) {
+    const found = [];
+    const walk = (dir) => {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            if (entry.name === "node_modules" || entry.name === ".git" || entry.name === ".telo")
+                continue;
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory())
+                walk(full);
+            else if (entry.isFile())
+                found.push(path.relative(root, full).split(path.sep).join("/"));
+        }
+    };
+    walk(root);
+    return found;
+}
+/**
+ * Attribute each build input to the workspace module that owns it.
+ *
+ * A module's own sources are excluded — they are covered by its digest and by
+ * the changed-files reading, and listing them as an inline edge would make every
+ * module inline itself. An input under no module (a third-party package, a
+ * changesets-owned library) is deliberately not attributed: that is the
+ * *unattributed* case, reported rather than papered over.
+ */
+function attributeInputs(workspace, inputs, module, byDir) {
+    const owners = new Map();
+    for (const input of inputs) {
+        const owner = ownerOf(path.resolve(input), byDir);
+        if (!owner || owner.key === module.key)
+            continue;
+        const list = owners.get(owner.key);
+        const relative = path.relative(workspace.root, input).split(path.sep).join("/");
+        if (list)
+            list.push(relative);
+        else
+            owners.set(owner.key, [relative]);
+    }
+    for (const files of owners.values())
+        files.sort();
+    return owners;
+}
+/** The nearest enclosing module directory, by walking up. Nearest rather than
+ *  any, so a nested module is credited to itself. */
+function ownerOf(file, byDir) {
+    let dir = path.dirname(file);
+    for (;;) {
+        const owner = byDir.get(dir);
+        if (owner)
+            return owner;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+}
+/** Paths under a module that never reach its artifact, so editing one is not a
+ *  semantic change worth a changelog line. Kept deliberately short: this rule no
+ *  longer decides a version, so a false positive costs one sentence and the old
+ *  per-language guesswork bought nothing. */
+const NON_ARTIFACT_PATHS = [/^docs\//, /^plans\//, /^tests\//, /^README\.md$/, /^CHANGELOG\.md$/];
+/**
+ * Modules with a change of their own on this branch.
+ *
+ * No merge base — a shallow clone, a fresh repo — means the reading cannot be
+ * taken, and guessing would ask for a changelog entry at random. The digest is
+ * unaffected: it compares against the ledger, not against a ref, which is why it
+ * needs no merge base in the first place.
+ */
+function changedModules(workspace, baseRef) {
+    let diff;
+    try {
+        diff = execFileSync("git", ["diff", "--name-only", `${baseRef}...HEAD`], {
+            cwd: workspace.root,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+    }
+    catch {
+        return new Set();
+    }
+    const changed = new Set();
+    for (const file of diff.split("\n").map((line) => line.trim()).filter(Boolean)) {
+        const module = workspace.modules.find((candidate) => file.startsWith(`${candidate.key}/`));
+        if (!module)
+            continue;
+        const rest = file.slice(module.key.length + 1);
+        if (NON_ARTIFACT_PATHS.some((pattern) => pattern.test(rest)))
+            continue;
+        changed.add(module.key);
+    }
+    return changed;
+}
+//# sourceMappingURL=evidence.js.map