@warlock.js/core 5.35.0 → 5.37.0

package/esm/release/activate.mjs

@@ -0,0 +1,261 @@
+import { compareVersions } from "./semver.mjs";
+import { appendLog, pointerPath, readManifest, readPointer, releaseDir, switchPointer, writeManifest } from "./store.mjs";
+import { hasStagedArtefacts } from "./stage.mjs";
+
+//#region ../../packages/core/src/release/activate.ts
+/**
+* The checks every activation must pass.
+*
+* The version rule is strict on purpose: the candidate has to be greater than
+* the active release. Equal versions need `allowSame` (a rebuild of the same
+* version from another commit); a lower version is never activated this way,
+* `release rollback` is the path back.
+*/
+async function runPreflight(context, manifest, options = {}) {
+	const checks = [];
+	const activeId = await readPointer(context, "current");
+	checks.push({
+		name: "staged",
+		ok: manifest.status === "staged" && await hasStagedArtefacts(context, manifest.id),
+		detail: "staged artefacts are present (run `warlock release stage`)"
+	});
+	checks.push({
+		name: "gate",
+		ok: manifest.gate?.passed === true,
+		detail: "the gate passed"
+	});
+	if (manifest.migrations) checks.push({
+		name: "migrations",
+		ok: manifest.migrations.passed,
+		detail: "the recorded migration proof passed"
+	});
+	if (activeId === manifest.id) checks.push({
+		name: "not-active",
+		ok: false,
+		detail: "this release is already active"
+	});
+	else if (activeId) {
+		const active = await readManifest(context, activeId);
+		const order = compareVersions(manifest.version, active.version);
+		checks.push({
+			name: "version",
+			ok: order > 0 || order === 0 && options.allowSame === true,
+			detail: order > 0 ? `${manifest.version} is greater than the active ${active.version}` : order === 0 ? `${manifest.version} equals the active version (pass --allow-same to accept)` : `${manifest.version} is lower than the active ${active.version} (use \`release rollback\`)`
+		});
+	} else checks.push({
+		name: "version",
+		ok: true,
+		detail: "no active release yet"
+	});
+	return {
+		checks,
+		activeId
+	};
+}
+async function restart(context, id) {
+	const command = context.config.restart.command;
+	if (!command) return {
+		ran: false,
+		ok: true
+	};
+	const result = await context.runner(command, {
+		cwd: context.root,
+		timeoutMs: context.config.restart.timeoutMs,
+		env: {
+			WARLOCK_RELEASE_ID: id,
+			WARLOCK_RELEASE_DIR: releaseDir(context, id),
+			WARLOCK_RELEASE_CURRENT: pointerPath(context, "current")
+		}
+	});
+	return {
+		ran: true,
+		ok: result.code === 0 && !result.timedOut,
+		output: result.output
+	};
+}
+/**
+* Preflight, then switch `current` to the release and run the restart
+* command.
+*
+* The switch is one atomic symlink rename. The old `current` becomes
+* `previous`. Warlock restarts nothing itself: only the configured
+* `release.restart.command` runs, and when it is unset the pointer switch is
+* the whole activation. If the restart command fails the pointer stays on the
+* new release (the restart may have partly taken effect) and the result says
+* so; `release rollback` is the way back.
+*
+* @example
+* const result = await activateRelease(context, "1.4.0-a1b2c3d", { dryRun: true });
+*/
+async function activateRelease(context, id, options = {}) {
+	const manifest = await readManifest(context, id);
+	const { checks, activeId } = await runPreflight(context, manifest, options);
+	const failed = checks.filter((check) => !check.ok);
+	const base = {
+		id,
+		previousId: activeId,
+		checks,
+		switched: false,
+		dryRun: options.dryRun === true,
+		restarted: null
+	};
+	if (failed.length > 0) {
+		const message = `Preflight failed: ${failed.map((check) => check.name).join(", ")}.`;
+		if (!options.preflightOnly && !options.dryRun) await appendLog(context, {
+			event: "activate",
+			release: id,
+			ok: false,
+			detail: message
+		});
+		return {
+			...base,
+			ok: false,
+			message
+		};
+	}
+	if (options.preflightOnly) return {
+		...base,
+		ok: true,
+		message: "Preflight passed."
+	};
+	if (options.dryRun) return {
+		...base,
+		ok: true,
+		message: `Dry run: would switch current to ${id}${activeId ? ` (previous becomes ${activeId})` : ""}${context.config.restart.command ? " and run the restart command" : ""}.`
+	};
+	if (activeId) await switchPointer(context, "previous", activeId);
+	await switchPointer(context, "current", id);
+	if (activeId) {
+		const old = await readManifest(context, activeId);
+		await writeManifest(context, {
+			...old,
+			status: "superseded"
+		});
+	}
+	const restarted = await restart(context, id);
+	await writeManifest(context, {
+		...manifest,
+		status: "active",
+		activation: {
+			at: context.now().toISOString(),
+			previousId: activeId,
+			restarted: restarted.ran && restarted.ok
+		}
+	});
+	if (!restarted.ok) {
+		const message = `Switched current to ${id}, but the restart command failed. Fix it or run \`warlock release rollback\`.`;
+		await appendLog(context, {
+			event: "activate",
+			release: id,
+			ok: false,
+			detail: message
+		});
+		return {
+			...base,
+			switched: true,
+			restarted: false,
+			restartOutput: restarted.output,
+			ok: false,
+			message
+		};
+	}
+	const message = `Activated ${id}${restarted.ran ? " and ran the restart command" : ""}.`;
+	await appendLog(context, {
+		event: "activate",
+		release: id,
+		ok: true,
+		detail: message
+	});
+	return {
+		...base,
+		switched: true,
+		restarted: restarted.ran ? true : null,
+		ok: true,
+		message
+	};
+}
+/**
+* Switch `current` back to `previous`, and `previous` to the release that was
+* just left (so a second rollback returns to it), then run the restart
+* command.
+*
+* Migrations are never rolled back here. A migration may have dropped or
+* rewritten data that no reverse step can restore, and the code that ran
+* before usually tolerates the newer schema; deciding to undo a schema change
+* is a separate, deliberate step (`warlock migrate --rollback`) taken with the
+* data in view.
+*/
+async function rollbackRelease(context, options = {}) {
+	const current = await readPointer(context, "current");
+	const previous = await readPointer(context, "previous");
+	const base = {
+		from: current,
+		to: previous,
+		switched: false,
+		dryRun: options.dryRun === true,
+		restarted: null
+	};
+	if (!current || !previous) return {
+		...base,
+		ok: false,
+		message: "There is no previous release to roll back to."
+	};
+	const target = await readManifest(context, previous);
+	const left = await readManifest(context, current);
+	if (!await hasStagedArtefacts(context, previous)) return {
+		...base,
+		ok: false,
+		message: `The staged files of ${previous} are gone; cannot roll back to it.`
+	};
+	if (options.dryRun) return {
+		...base,
+		ok: true,
+		message: `Dry run: would switch current back to ${previous}${context.config.restart.command ? " and run the restart command" : ""}.`
+	};
+	await switchPointer(context, "previous", current);
+	await switchPointer(context, "current", previous);
+	await writeManifest(context, {
+		...left,
+		status: "superseded"
+	});
+	await writeManifest(context, {
+		...target,
+		status: "active"
+	});
+	const restarted = await restart(context, previous);
+	if (!restarted.ok) {
+		const message = `Rolled current back to ${previous}, but the restart command failed.`;
+		await appendLog(context, {
+			event: "rollback",
+			release: previous,
+			ok: false,
+			detail: message
+		});
+		return {
+			...base,
+			switched: true,
+			restarted: false,
+			restartOutput: restarted.output,
+			ok: false,
+			message
+		};
+	}
+	const message = `Rolled back from ${current} to ${previous}${restarted.ran ? " and ran the restart command" : ""}.`;
+	await appendLog(context, {
+		event: "rollback",
+		release: previous,
+		ok: true,
+		detail: message
+	});
+	return {
+		...base,
+		switched: true,
+		restarted: restarted.ran ? true : null,
+		ok: true,
+		message
+	};
+}
+
+//#endregion
+export { activateRelease, rollbackRelease, runPreflight };
+//# sourceMappingURL=activate.mjs.map

package/esm/release/activate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/activate.ts"],"sourcesContent":["import { compareVersions } from \"./semver\";\nimport { hasStagedArtefacts } from \"./stage\";\nimport {\n  appendLog,\n  pointerPath,\n  readManifest,\n  readPointer,\n  releaseDir,\n  switchPointer,\n  writeManifest,\n  type ReleaseContext,\n} from \"./store\";\nimport type { ReleaseManifest } from \"./types\";\n\nexport type PreflightCheck = { name: string; ok: boolean; detail: string };\n\nexport type ActivateOptions = {\n  /** Run the preflight checks and stop. */\n  preflightOnly?: boolean;\n  /** Report what would change without changing anything. */\n  dryRun?: boolean;\n  /** Accept a version equal to the active one (a different commit). */\n  allowSame?: boolean;\n};\n\nexport type ActivationResult = {\n  id: string;\n  /** The release that was active before, if any */\n  previousId: string | null;\n  checks: PreflightCheck[];\n  /** Whether the pointer was switched */\n  switched: boolean;\n  dryRun: boolean;\n  /** Whether the restart command ran, and succeeded */\n  restarted: boolean | null;\n  restartOutput?: string;\n  ok: boolean;\n  message: string;\n};\n\n/**\n * The checks every activation must pass.\n *\n * The version rule is strict on purpose: the candidate has to be greater than\n * the active release. Equal versions need `allowSame` (a rebuild of the same\n * version from another commit); a lower version is never activated this way,\n * `release rollback` is the path back.\n */\nexport async function runPreflight(\n  context: ReleaseContext,\n  manifest: ReleaseManifest,\n  options: Pick<ActivateOptions, \"allowSame\"> = {},\n): Promise<{ checks: PreflightCheck[]; activeId: string | null }> {\n  const checks: PreflightCheck[] = [];\n  const activeId = await readPointer(context, \"current\");\n\n  checks.push({\n    name: \"staged\",\n    ok: manifest.status === \"staged\" && (await hasStagedArtefacts(context, manifest.id)),\n    detail: \"staged artefacts are present (run `warlock release stage`)\",\n  });\n\n  checks.push({\n    name: \"gate\",\n    ok: manifest.gate?.passed === true,\n    detail: \"the gate passed\",\n  });\n\n  if (manifest.migrations) {\n    checks.push({\n      name: \"migrations\",\n      ok: manifest.migrations.passed,\n      detail: \"the recorded migration proof passed\",\n    });\n  }\n\n  if (activeId === manifest.id) {\n    checks.push({ name: \"not-active\", ok: false, detail: \"this release is already active\" });\n  } else if (activeId) {\n    const active = await readManifest(context, activeId);\n    const order = compareVersions(manifest.version, active.version);\n\n    checks.push({\n      name: \"version\",\n      ok: order > 0 || (order === 0 && options.allowSame === true),\n      detail:\n        order > 0\n          ? `${manifest.version} is greater than the active ${active.version}`\n          : order === 0\n            ? `${manifest.version} equals the active version (pass --allow-same to accept)`\n            : `${manifest.version} is lower than the active ${active.version} (use \\`release rollback\\`)`,\n    });\n  } else {\n    checks.push({ name: \"version\", ok: true, detail: \"no active release yet\" });\n  }\n\n  return { checks, activeId };\n}\n\nasync function restart(\n  context: ReleaseContext,\n  id: string,\n): Promise<{ ran: boolean; ok: boolean; output?: string }> {\n  const command = context.config.restart.command;\n\n  if (!command) return { ran: false, ok: true };\n\n  const result = await context.runner(command, {\n    cwd: context.root,\n    timeoutMs: context.config.restart.timeoutMs,\n    env: {\n      WARLOCK_RELEASE_ID: id,\n      WARLOCK_RELEASE_DIR: releaseDir(context, id),\n      WARLOCK_RELEASE_CURRENT: pointerPath(context, \"current\"),\n    },\n  });\n\n  return { ran: true, ok: result.code === 0 && !result.timedOut, output: result.output };\n}\n\n/**\n * Preflight, then switch `current` to the release and run the restart\n * command.\n *\n * The switch is one atomic symlink rename. The old `current` becomes\n * `previous`. Warlock restarts nothing itself: only the configured\n * `release.restart.command` runs, and when it is unset the pointer switch is\n * the whole activation. If the restart command fails the pointer stays on the\n * new release (the restart may have partly taken effect) and the result says\n * so; `release rollback` is the way back.\n *\n * @example\n * const result = await activateRelease(context, \"1.4.0-a1b2c3d\", { dryRun: true });\n */\nexport async function activateRelease(\n  context: ReleaseContext,\n  id: string,\n  options: ActivateOptions = {},\n): Promise<ActivationResult> {\n  const manifest = await readManifest(context, id);\n  const { checks, activeId } = await runPreflight(context, manifest, options);\n  const failed = checks.filter((check) => !check.ok);\n  const base = {\n    id,\n    previousId: activeId,\n    checks,\n    switched: false,\n    dryRun: options.dryRun === true,\n    restarted: null,\n  };\n\n  if (failed.length > 0) {\n    const message = `Preflight failed: ${failed.map((check) => check.name).join(\", \")}.`;\n\n    if (!options.preflightOnly && !options.dryRun) {\n      await appendLog(context, { event: \"activate\", release: id, ok: false, detail: message });\n    }\n\n    return { ...base, ok: false, message };\n  }\n\n  if (options.preflightOnly) {\n    return { ...base, ok: true, message: \"Preflight passed.\" };\n  }\n\n  if (options.dryRun) {\n    return {\n      ...base,\n      ok: true,\n      message: `Dry run: would switch current to ${id}${activeId ? ` (previous becomes ${activeId})` : \"\"}${\n        context.config.restart.command ? \" and run the restart command\" : \"\"\n      }.`,\n    };\n  }\n\n  if (activeId) await switchPointer(context, \"previous\", activeId);\n  await switchPointer(context, \"current\", id);\n\n  if (activeId) {\n    const old = await readManifest(context, activeId);\n\n    await writeManifest(context, { ...old, status: \"superseded\" });\n  }\n\n  const restarted = await restart(context, id);\n\n  await writeManifest(context, {\n    ...manifest,\n    status: \"active\",\n    activation: {\n      at: context.now().toISOString(),\n      previousId: activeId,\n      restarted: restarted.ran && restarted.ok,\n    },\n  });\n\n  if (!restarted.ok) {\n    const message = `Switched current to ${id}, but the restart command failed. Fix it or run \\`warlock release rollback\\`.`;\n\n    await appendLog(context, { event: \"activate\", release: id, ok: false, detail: message });\n\n    return {\n      ...base,\n      switched: true,\n      restarted: false,\n      restartOutput: restarted.output,\n      ok: false,\n      message,\n    };\n  }\n\n  const message = `Activated ${id}${restarted.ran ? \" and ran the restart command\" : \"\"}.`;\n\n  await appendLog(context, { event: \"activate\", release: id, ok: true, detail: message });\n\n  return {\n    ...base,\n    switched: true,\n    restarted: restarted.ran ? true : null,\n    ok: true,\n    message,\n  };\n}\n\nexport type RollbackResult = {\n  from: string | null;\n  to: string | null;\n  switched: boolean;\n  dryRun: boolean;\n  restarted: boolean | null;\n  restartOutput?: string;\n  ok: boolean;\n  message: string;\n};\n\n/**\n * Switch `current` back to `previous`, and `previous` to the release that was\n * just left (so a second rollback returns to it), then run the restart\n * command.\n *\n * Migrations are never rolled back here. A migration may have dropped or\n * rewritten data that no reverse step can restore, and the code that ran\n * before usually tolerates the newer schema; deciding to undo a schema change\n * is a separate, deliberate step (`warlock migrate --rollback`) taken with the\n * data in view.\n */\nexport async function rollbackRelease(\n  context: ReleaseContext,\n  options: { dryRun?: boolean } = {},\n): Promise<RollbackResult> {\n  const current = await readPointer(context, \"current\");\n  const previous = await readPointer(context, \"previous\");\n  const base = {\n    from: current,\n    to: previous,\n    switched: false,\n    dryRun: options.dryRun === true,\n    restarted: null,\n  };\n\n  if (!current || !previous) {\n    return { ...base, ok: false, message: \"There is no previous release to roll back to.\" };\n  }\n\n  // Both manifests must exist before anything moves.\n  const target = await readManifest(context, previous);\n  const left = await readManifest(context, current);\n\n  if (!(await hasStagedArtefacts(context, previous))) {\n    return {\n      ...base,\n      ok: false,\n      message: `The staged files of ${previous} are gone; cannot roll back to it.`,\n    };\n  }\n\n  if (options.dryRun) {\n    return {\n      ...base,\n      ok: true,\n      message: `Dry run: would switch current back to ${previous}${\n        context.config.restart.command ? \" and run the restart command\" : \"\"\n      }.`,\n    };\n  }\n\n  await switchPointer(context, \"previous\", current);\n  await switchPointer(context, \"current\", previous);\n  await writeManifest(context, { ...left, status: \"superseded\" });\n  await writeManifest(context, { ...target, status: \"active\" });\n\n  const restarted = await restart(context, previous);\n\n  if (!restarted.ok) {\n    const message = `Rolled current back to ${previous}, but the restart command failed.`;\n\n    await appendLog(context, { event: \"rollback\", release: previous, ok: false, detail: message });\n\n    return {\n      ...base,\n      switched: true,\n      restarted: false,\n      restartOutput: restarted.output,\n      ok: false,\n      message,\n    };\n  }\n\n  const message = `Rolled back from ${current} to ${previous}${\n    restarted.ran ? \" and ran the restart command\" : \"\"\n  }.`;\n\n  await appendLog(context, { event: \"rollback\", release: previous, ok: true, detail: message });\n\n  return {\n    ...base,\n    switched: true,\n    restarted: restarted.ran ? true : null,\n    ok: true,\n    message,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAgDA,eAAsB,aACpB,SACA,UACA,UAA8C,CAAC,GACiB;CAChE,MAAM,SAA2B,CAAC;CAClC,MAAM,WAAW,MAAM,YAAY,SAAS,SAAS;CAErD,OAAO,KAAK;EACV,MAAM;EACN,IAAI,SAAS,WAAW,YAAa,MAAM,mBAAmB,SAAS,SAAS,EAAE;EAClF,QAAQ;CACV,CAAC;CAED,OAAO,KAAK;EACV,MAAM;EACN,IAAI,SAAS,MAAM,WAAW;EAC9B,QAAQ;CACV,CAAC;CAED,IAAI,SAAS,YACX,OAAO,KAAK;EACV,MAAM;EACN,IAAI,SAAS,WAAW;EACxB,QAAQ;CACV,CAAC;CAGH,IAAI,aAAa,SAAS,IACxB,OAAO,KAAK;EAAE,MAAM;EAAc,IAAI;EAAO,QAAQ;CAAiC,CAAC;MAClF,IAAI,UAAU;EACnB,MAAM,SAAS,MAAM,aAAa,SAAS,QAAQ;EACnD,MAAM,QAAQ,gBAAgB,SAAS,SAAS,OAAO,OAAO;EAE9D,OAAO,KAAK;GACV,MAAM;GACN,IAAI,QAAQ,KAAM,UAAU,KAAK,QAAQ,cAAc;GACvD,QACE,QAAQ,IACJ,GAAG,SAAS,QAAQ,8BAA8B,OAAO,YACzD,UAAU,IACR,GAAG,SAAS,QAAQ,4DACpB,GAAG,SAAS,QAAQ,4BAA4B,OAAO,QAAQ;EACzE,CAAC;CACH,OACE,OAAO,KAAK;EAAE,MAAM;EAAW,IAAI;EAAM,QAAQ;CAAwB,CAAC;CAG5E,OAAO;EAAE;EAAQ;CAAS;AAC5B;AAEA,eAAe,QACb,SACA,IACyD;CACzD,MAAM,UAAU,QAAQ,OAAO,QAAQ;CAEvC,IAAI,CAAC,SAAS,OAAO;EAAE,KAAK;EAAO,IAAI;CAAK;CAE5C,MAAM,SAAS,MAAM,QAAQ,OAAO,SAAS;EAC3C,KAAK,QAAQ;EACb,WAAW,QAAQ,OAAO,QAAQ;EAClC,KAAK;GACH,oBAAoB;GACpB,qBAAqB,WAAW,SAAS,EAAE;GAC3C,yBAAyB,YAAY,SAAS,SAAS;EACzD;CACF,CAAC;CAED,OAAO;EAAE,KAAK;EAAM,IAAI,OAAO,SAAS,KAAK,CAAC,OAAO;EAAU,QAAQ,OAAO;CAAO;AACvF;;;;;;;;;;;;;;;AAgBA,eAAsB,gBACpB,SACA,IACA,UAA2B,CAAC,GACD;CAC3B,MAAM,WAAW,MAAM,aAAa,SAAS,EAAE;CAC/C,MAAM,EAAE,QAAQ,aAAa,MAAM,aAAa,SAAS,UAAU,OAAO;CAC1E,MAAM,SAAS,OAAO,QAAQ,UAAU,CAAC,MAAM,EAAE;CACjD,MAAM,OAAO;EACX;EACA,YAAY;EACZ;EACA,UAAU;EACV,QAAQ,QAAQ,WAAW;EAC3B,WAAW;CACb;CAEA,IAAI,OAAO,SAAS,GAAG;EACrB,MAAM,UAAU,qBAAqB,OAAO,KAAK,UAAU,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE;EAElF,IAAI,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,QACrC,MAAM,UAAU,SAAS;GAAE,OAAO;GAAY,SAAS;GAAI,IAAI;GAAO,QAAQ;EAAQ,CAAC;EAGzF,OAAO;GAAE,GAAG;GAAM,IAAI;GAAO;EAAQ;CACvC;CAEA,IAAI,QAAQ,eACV,OAAO;EAAE,GAAG;EAAM,IAAI;EAAM,SAAS;CAAoB;CAG3D,IAAI,QAAQ,QACV,OAAO;EACL,GAAG;EACH,IAAI;EACJ,SAAS,oCAAoC,KAAK,WAAW,sBAAsB,SAAS,KAAK,KAC/F,QAAQ,OAAO,QAAQ,UAAU,iCAAiC,GACnE;CACH;CAGF,IAAI,UAAU,MAAM,cAAc,SAAS,YAAY,QAAQ;CAC/D,MAAM,cAAc,SAAS,WAAW,EAAE;CAE1C,IAAI,UAAU;EACZ,MAAM,MAAM,MAAM,aAAa,SAAS,QAAQ;EAEhD,MAAM,cAAc,SAAS;GAAE,GAAG;GAAK,QAAQ;EAAa,CAAC;CAC/D;CAEA,MAAM,YAAY,MAAM,QAAQ,SAAS,EAAE;CAE3C,MAAM,cAAc,SAAS;EAC3B,GAAG;EACH,QAAQ;EACR,YAAY;GACV,IAAI,QAAQ,IAAI,CAAC,CAAC,YAAY;GAC9B,YAAY;GACZ,WAAW,UAAU,OAAO,UAAU;EACxC;CACF,CAAC;CAED,IAAI,CAAC,UAAU,IAAI;EACjB,MAAM,UAAU,uBAAuB,GAAG;EAE1C,MAAM,UAAU,SAAS;GAAE,OAAO;GAAY,SAAS;GAAI,IAAI;GAAO,QAAQ;EAAQ,CAAC;EAEvF,OAAO;GACL,GAAG;GACH,UAAU;GACV,WAAW;GACX,eAAe,UAAU;GACzB,IAAI;GACJ;EACF;CACF;CAEA,MAAM,UAAU,aAAa,KAAK,UAAU,MAAM,iCAAiC,GAAG;CAEtF,MAAM,UAAU,SAAS;EAAE,OAAO;EAAY,SAAS;EAAI,IAAI;EAAM,QAAQ;CAAQ,CAAC;CAEtF,OAAO;EACL,GAAG;EACH,UAAU;EACV,WAAW,UAAU,MAAM,OAAO;EAClC,IAAI;EACJ;CACF;AACF;;;;;;;;;;;;AAwBA,eAAsB,gBACpB,SACA,UAAgC,CAAC,GACR;CACzB,MAAM,UAAU,MAAM,YAAY,SAAS,SAAS;CACpD,MAAM,WAAW,MAAM,YAAY,SAAS,UAAU;CACtD,MAAM,OAAO;EACX,MAAM;EACN,IAAI;EACJ,UAAU;EACV,QAAQ,QAAQ,WAAW;EAC3B,WAAW;CACb;CAEA,IAAI,CAAC,WAAW,CAAC,UACf,OAAO;EAAE,GAAG;EAAM,IAAI;EAAO,SAAS;CAAgD;CAIxF,MAAM,SAAS,MAAM,aAAa,SAAS,QAAQ;CACnD,MAAM,OAAO,MAAM,aAAa,SAAS,OAAO;CAEhD,IAAI,CAAE,MAAM,mBAAmB,SAAS,QAAQ,GAC9C,OAAO;EACL,GAAG;EACH,IAAI;EACJ,SAAS,uBAAuB,SAAS;CAC3C;CAGF,IAAI,QAAQ,QACV,OAAO;EACL,GAAG;EACH,IAAI;EACJ,SAAS,yCAAyC,WAChD,QAAQ,OAAO,QAAQ,UAAU,iCAAiC,GACnE;CACH;CAGF,MAAM,cAAc,SAAS,YAAY,OAAO;CAChD,MAAM,cAAc,SAAS,WAAW,QAAQ;CAChD,MAAM,cAAc,SAAS;EAAE,GAAG;EAAM,QAAQ;CAAa,CAAC;CAC9D,MAAM,cAAc,SAAS;EAAE,GAAG;EAAQ,QAAQ;CAAS,CAAC;CAE5D,MAAM,YAAY,MAAM,QAAQ,SAAS,QAAQ;CAEjD,IAAI,CAAC,UAAU,IAAI;EACjB,MAAM,UAAU,0BAA0B,SAAS;EAEnD,MAAM,UAAU,SAAS;GAAE,OAAO;GAAY,SAAS;GAAU,IAAI;GAAO,QAAQ;EAAQ,CAAC;EAE7F,OAAO;GACL,GAAG;GACH,UAAU;GACV,WAAW;GACX,eAAe,UAAU;GACzB,IAAI;GACJ;EACF;CACF;CAEA,MAAM,UAAU,oBAAoB,QAAQ,MAAM,WAChD,UAAU,MAAM,iCAAiC,GAClD;CAED,MAAM,UAAU,SAAS;EAAE,OAAO;EAAY,SAAS;EAAU,IAAI;EAAM,QAAQ;CAAQ,CAAC;CAE5F,OAAO;EACL,GAAG;EACH,UAAU;EACV,WAAW,UAAU,MAAM,OAAO;EAClC,IAAI;EACJ;CACF;AACF"}

package/esm/release/candidate.mjs

@@ -0,0 +1,107 @@
+import { appendLog, releaseDir, releasesDir, writeManifest } from "./store.mjs";
+import { createHash } from "node:crypto";
+import path from "node:path";
+import { access, mkdir, readFile, rm, symlink } from "node:fs/promises";
+
+//#region ../../packages/core/src/release/candidate.ts
+const LOCKFILES = [
+	"pnpm-lock.yaml",
+	"package-lock.json",
+	"yarn.lock",
+	"bun.lock",
+	"bun.lockb"
+];
+function shellQuote(value) {
+	return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+async function exists(file) {
+	try {
+		await access(file);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function git(context, command) {
+	const result = await context.runner(`git ${command}`, { cwd: context.root });
+	if (result.code !== 0) throw new Error(`git ${command} failed: ${result.output.trim() || `exit ${result.code}`}`);
+	return result.output.trim();
+}
+/**
+* Freeze a commit into a candidate directory.
+*
+* The commit is exported with `git archive` into `<release>/source`, so every
+* later step (gate, build, stage) works on exactly those bytes and not on a
+* working tree that keeps changing. A dirty tree is refused unless
+* `allowDirty` is set, because the candidate would not describe what is
+* checked out.
+*
+* @example
+* const manifest = await createCandidate(context, {});
+*/
+async function createCandidate(context, options = {}) {
+	if (!options.allowDirty) {
+		const dirty = await git(context, `status --porcelain -- . ${shellQuote(`:(exclude)${context.config.directory}`)}`);
+		if (dirty) throw new Error(`The working tree has uncommitted changes:\n${dirty}\nCommit or stash them, or pass --allow-dirty.`);
+	}
+	const commit = await git(context, `rev-parse --verify ${shellQuote(`${options.commit ?? "HEAD"}^{commit}`)}`);
+	const packageText = await git(context, `show ${shellQuote(`${commit}:package.json`)}`);
+	const version = JSON.parse(packageText).version;
+	if (!version) throw new Error("package.json has no `version`; a release needs one.");
+	const id = `${version}-${commit.slice(0, 7)}`;
+	const directory = releaseDir(context, id);
+	if (await exists(directory)) throw new Error(`Release "${id}" already exists. Releases are never overwritten.`);
+	const source = path.join(directory, "source");
+	await mkdir(releasesDir(context), { recursive: true });
+	await mkdir(source, { recursive: true });
+	try {
+		const archive = path.join(directory, "source.tar");
+		await git(context, `archive --format=tar -o ${shellQuote(archive)} ${shellQuote(commit)}`);
+		const extracted = await context.runner(`tar -xf ${shellQuote(archive)} -C ${shellQuote(source)}`, { cwd: context.root });
+		await rm(archive, { force: true });
+		if (extracted.code !== 0) throw new Error(`Could not extract the commit archive: ${extracted.output.trim()}`);
+		if (context.config.linkNodeModules) {
+			const modules = path.join(context.root, "node_modules");
+			if (await exists(modules)) await symlink(modules, path.join(source, "node_modules"), "dir");
+		}
+		let lockfile = null;
+		for (const file of LOCKFILES) {
+			const location = path.join(source, file);
+			if (await exists(location)) {
+				lockfile = {
+					file,
+					sha256: createHash("sha256").update(await readFile(location)).digest("hex")
+				};
+				break;
+			}
+		}
+		const manifest = {
+			schema: 1,
+			id,
+			version,
+			commit,
+			createdAt: context.now().toISOString(),
+			nodeVersion: context.nodeVersion,
+			lockfile,
+			status: "candidate"
+		};
+		await writeManifest(context, manifest);
+		await appendLog(context, {
+			event: "candidate",
+			release: id,
+			ok: true,
+			detail: commit
+		});
+		return manifest;
+	} catch (error) {
+		await rm(directory, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+}
+
+//#endregion
+export { createCandidate, shellQuote };
+//# sourceMappingURL=candidate.mjs.map

package/esm/release/candidate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/candidate.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { access, mkdir, readFile, rm, symlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { appendLog, releaseDir, releasesDir, writeManifest, type ReleaseContext } from \"./store\";\nimport type { ReleaseManifest } from \"./types\";\n\nconst LOCKFILES = [\"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\", \"bun.lock\", \"bun.lockb\"];\n\nexport function shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nexport type CandidateOptions = {\n  /** Commit to freeze. Defaults to `HEAD`. */\n  commit?: string;\n  /** Freeze even when the working tree has uncommitted changes. */\n  allowDirty?: boolean;\n};\n\nasync function exists(file: string): Promise<boolean> {\n  try {\n    await access(file);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function git(context: ReleaseContext, command: string): Promise<string> {\n  const result = await context.runner(`git ${command}`, { cwd: context.root });\n\n  if (result.code !== 0) {\n    throw new Error(`git ${command} failed: ${result.output.trim() || `exit ${result.code}`}`);\n  }\n\n  return result.output.trim();\n}\n\n/**\n * Freeze a commit into a candidate directory.\n *\n * The commit is exported with `git archive` into `<release>/source`, so every\n * later step (gate, build, stage) works on exactly those bytes and not on a\n * working tree that keeps changing. A dirty tree is refused unless\n * `allowDirty` is set, because the candidate would not describe what is\n * checked out.\n *\n * @example\n * const manifest = await createCandidate(context, {});\n */\nexport async function createCandidate(\n  context: ReleaseContext,\n  options: CandidateOptions = {},\n): Promise<ReleaseManifest> {\n  if (!options.allowDirty) {\n    const exclude = shellQuote(`:(exclude)${context.config.directory}`);\n    const dirty = await git(context, `status --porcelain -- . ${exclude}`);\n\n    if (dirty) {\n      throw new Error(\n        `The working tree has uncommitted changes:\\n${dirty}\\nCommit or stash them, or pass --allow-dirty.`,\n      );\n    }\n  }\n\n  const commit = await git(\n    context,\n    `rev-parse --verify ${shellQuote(`${options.commit ?? \"HEAD\"}^{commit}`)}`,\n  );\n  const packageText = await git(context, `show ${shellQuote(`${commit}:package.json`)}`);\n  const version = (JSON.parse(packageText) as { version?: string }).version;\n\n  if (!version) throw new Error(\"package.json has no `version`; a release needs one.\");\n\n  const id = `${version}-${commit.slice(0, 7)}`;\n  const directory = releaseDir(context, id);\n\n  if (await exists(directory)) {\n    throw new Error(`Release \"${id}\" already exists. Releases are never overwritten.`);\n  }\n\n  const source = path.join(directory, \"source\");\n\n  await mkdir(releasesDir(context), { recursive: true });\n  await mkdir(source, { recursive: true });\n\n  try {\n    // Two steps rather than a pipe: a failing `git archive` must not be\n    // masked by the exit code of `tar`.\n    const archive = path.join(directory, \"source.tar\");\n\n    await git(context, `archive --format=tar -o ${shellQuote(archive)} ${shellQuote(commit)}`);\n\n    const extracted = await context.runner(\n      `tar -xf ${shellQuote(archive)} -C ${shellQuote(source)}`,\n      { cwd: context.root },\n    );\n\n    await rm(archive, { force: true });\n\n    if (extracted.code !== 0) {\n      throw new Error(`Could not extract the commit archive: ${extracted.output.trim()}`);\n    }\n\n    if (context.config.linkNodeModules) {\n      const modules = path.join(context.root, \"node_modules\");\n\n      if (await exists(modules)) await symlink(modules, path.join(source, \"node_modules\"), \"dir\");\n    }\n\n    let lockfile: ReleaseManifest[\"lockfile\"] = null;\n\n    for (const file of LOCKFILES) {\n      const location = path.join(source, file);\n\n      if (await exists(location)) {\n        lockfile = {\n          file,\n          sha256: createHash(\"sha256\")\n            .update(await readFile(location))\n            .digest(\"hex\"),\n        };\n        break;\n      }\n    }\n\n    const manifest: ReleaseManifest = {\n      schema: 1,\n      id,\n      version,\n      commit,\n      createdAt: context.now().toISOString(),\n      nodeVersion: context.nodeVersion,\n      lockfile,\n      status: \"candidate\",\n    };\n\n    await writeManifest(context, manifest);\n    await appendLog(context, { event: \"candidate\", release: id, ok: true, detail: commit });\n\n    return manifest;\n  } catch (error) {\n    // The directory was created by this call and holds no finished release.\n    await rm(directory, { recursive: true, force: true });\n    throw error;\n  }\n}\n"],"mappings":";;;;;;AAMA,MAAM,YAAY;CAAC;CAAkB;CAAqB;CAAa;CAAY;AAAW;AAE9F,SAAgB,WAAW,OAAuB;CAChD,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AASA,eAAe,OAAO,MAAgC;CACpD,IAAI;EACF,MAAM,OAAO,IAAI;EACjB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,IAAI,SAAyB,SAAkC;CAC5E,MAAM,SAAS,MAAM,QAAQ,OAAO,OAAO,WAAW,EAAE,KAAK,QAAQ,KAAK,CAAC;CAE3E,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,MAAM,OAAO,QAAQ,WAAW,OAAO,OAAO,KAAK,KAAK,QAAQ,OAAO,QAAQ;CAG3F,OAAO,OAAO,OAAO,KAAK;AAC5B;;;;;;;;;;;;;AAcA,eAAsB,gBACpB,SACA,UAA4B,CAAC,GACH;CAC1B,IAAI,CAAC,QAAQ,YAAY;EAEvB,MAAM,QAAQ,MAAM,IAAI,SAAS,2BADjB,WAAW,aAAa,QAAQ,OAAO,WACW,GAAG;EAErE,IAAI,OACF,MAAM,IAAI,MACR,8CAA8C,MAAM,+CACtD;CAEJ;CAEA,MAAM,SAAS,MAAM,IACnB,SACA,sBAAsB,WAAW,GAAG,QAAQ,UAAU,OAAO,UAAU,GACzE;CACA,MAAM,cAAc,MAAM,IAAI,SAAS,QAAQ,WAAW,GAAG,OAAO,cAAc,GAAG;CACrF,MAAM,UAAW,KAAK,MAAM,WAAW,CAAC,CAA0B;CAElE,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,qDAAqD;CAEnF,MAAM,KAAK,GAAG,QAAQ,GAAG,OAAO,MAAM,GAAG,CAAC;CAC1C,MAAM,YAAY,WAAW,SAAS,EAAE;CAExC,IAAI,MAAM,OAAO,SAAS,GACxB,MAAM,IAAI,MAAM,YAAY,GAAG,kDAAkD;CAGnF,MAAM,SAAS,KAAK,KAAK,WAAW,QAAQ;CAE5C,MAAM,MAAM,YAAY,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;CAEvC,IAAI;EAGF,MAAM,UAAU,KAAK,KAAK,WAAW,YAAY;EAEjD,MAAM,IAAI,SAAS,2BAA2B,WAAW,OAAO,EAAE,GAAG,WAAW,MAAM,GAAG;EAEzF,MAAM,YAAY,MAAM,QAAQ,OAC9B,WAAW,WAAW,OAAO,EAAE,MAAM,WAAW,MAAM,KACtD,EAAE,KAAK,QAAQ,KAAK,CACtB;EAEA,MAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;EAEjC,IAAI,UAAU,SAAS,GACrB,MAAM,IAAI,MAAM,yCAAyC,UAAU,OAAO,KAAK,GAAG;EAGpF,IAAI,QAAQ,OAAO,iBAAiB;GAClC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,cAAc;GAEtD,IAAI,MAAM,OAAO,OAAO,GAAG,MAAM,QAAQ,SAAS,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK;EAC5F;EAEA,IAAI,WAAwC;EAE5C,KAAK,MAAM,QAAQ,WAAW;GAC5B,MAAM,WAAW,KAAK,KAAK,QAAQ,IAAI;GAEvC,IAAI,MAAM,OAAO,QAAQ,GAAG;IAC1B,WAAW;KACT;KACA,QAAQ,WAAW,QAAQ,CAAC,CACzB,OAAO,MAAM,SAAS,QAAQ,CAAC,CAAC,CAChC,OAAO,KAAK;IACjB;IACA;GACF;EACF;EAEA,MAAM,WAA4B;GAChC,QAAQ;GACR;GACA;GACA;GACA,WAAW,QAAQ,IAAI,CAAC,CAAC,YAAY;GACrC,aAAa,QAAQ;GACrB;GACA,QAAQ;EACV;EAEA,MAAM,cAAc,SAAS,QAAQ;EACrC,MAAM,UAAU,SAAS;GAAE,OAAO;GAAa,SAAS;GAAI,IAAI;GAAM,QAAQ;EAAO,CAAC;EAEtF,OAAO;CACT,SAAS,OAAO;EAEd,MAAM,GAAG,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EACpD,MAAM;CACR;AACF"}

package/esm/release/cascade-migration-provider.mjs

@@ -0,0 +1,32 @@
+import { loadAllMigrations } from "../database/migrate-action.mjs";
+import { dataSourceRegistry, listExecutedMigrations, listPendingMigrations, runMigrations } from "@warlock.js/cascade";
+
+//#region ../../packages/core/src/release/cascade-migration-provider.ts
+/**
+* The provider behind `warlock release migrations --prove`: migrations are
+* loaded the way `warlock migrate` loads them, the ledger and the run go
+* through cascade's migration API, and tables and indexes come from the
+* data source's driver blueprint, so it works for any driver that has one.
+*
+* The database connector must already be started.
+*/
+async function createCascadeMigrationProvider() {
+	await loadAllMigrations();
+	const blueprint = () => dataSourceRegistry.get().driver.blueprint;
+	return {
+		listExecuted: async () => (await listExecutedMigrations()).map((record) => record.name),
+		listPending: async () => (await listPendingMigrations()).map((migration) => migration.name),
+		listTables: () => blueprint().listTables(),
+		listIndexes: async (table) => (await blueprint().listIndexes(table)).map((index) => index.name),
+		runPending: async () => {
+			const results = await runMigrations();
+			const failed = results.find((result) => !result.success);
+			if (failed) throw new Error(`${failed.name}: ${failed.error ?? "failed"}`);
+			return results.filter((result) => result.direction === "up").map((result) => result.name);
+		}
+	};
+}
+
+//#endregion
+export { createCascadeMigrationProvider };
+//# sourceMappingURL=cascade-migration-provider.mjs.map

package/esm/release/cascade-migration-provider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade-migration-provider.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/cascade-migration-provider.ts"],"sourcesContent":["import {\n  dataSourceRegistry,\n  listExecutedMigrations,\n  listPendingMigrations,\n  runMigrations,\n} from \"@warlock.js/cascade\";\nimport { loadAllMigrations } from \"../database/migrate-action\";\nimport type { MigrationProofProvider } from \"./migrations-proof\";\n\n/**\n * The provider behind `warlock release migrations --prove`: migrations are\n * loaded the way `warlock migrate` loads them, the ledger and the run go\n * through cascade's migration API, and tables and indexes come from the\n * data source's driver blueprint, so it works for any driver that has one.\n *\n * The database connector must already be started.\n */\nexport async function createCascadeMigrationProvider(): Promise<MigrationProofProvider> {\n  await loadAllMigrations();\n\n  const blueprint = () => dataSourceRegistry.get().driver.blueprint;\n\n  return {\n    listExecuted: async () => (await listExecutedMigrations()).map((record) => record.name),\n    listPending: async () => (await listPendingMigrations()).map((migration) => migration.name),\n    listTables: () => blueprint().listTables(),\n    listIndexes: async (table) => (await blueprint().listIndexes(table)).map((index) => index.name),\n    runPending: async () => {\n      const results = await runMigrations();\n      const failed = results.find((result) => !result.success);\n\n      if (failed) throw new Error(`${failed.name}: ${failed.error ?? \"failed\"}`);\n\n      return results.filter((result) => result.direction === \"up\").map((result) => result.name);\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,eAAsB,iCAAkE;CACtF,MAAM,kBAAkB;CAExB,MAAM,kBAAkB,mBAAmB,IAAI,CAAC,CAAC,OAAO;CAExD,OAAO;EACL,cAAc,aAAa,MAAM,uBAAuB,EAAC,CAAE,KAAK,WAAW,OAAO,IAAI;EACtF,aAAa,aAAa,MAAM,sBAAsB,EAAC,CAAE,KAAK,cAAc,UAAU,IAAI;EAC1F,kBAAkB,UAAU,CAAC,CAAC,WAAW;EACzC,aAAa,OAAO,WAAW,MAAM,UAAU,CAAC,CAAC,YAAY,KAAK,EAAC,CAAE,KAAK,UAAU,MAAM,IAAI;EAC9F,YAAY,YAAY;GACtB,MAAM,UAAU,MAAM,cAAc;GACpC,MAAM,SAAS,QAAQ,MAAM,WAAW,CAAC,OAAO,OAAO;GAEvD,IAAI,QAAQ,MAAM,IAAI,MAAM,GAAG,OAAO,KAAK,IAAI,OAAO,SAAS,UAAU;GAEzE,OAAO,QAAQ,QAAQ,WAAW,OAAO,cAAc,IAAI,CAAC,CAAC,KAAK,WAAW,OAAO,IAAI;EAC1F;CACF;AACF"}

package/esm/release/config.mjs

@@ -0,0 +1,60 @@
+//#region ../../packages/core/src/release/config.ts
+const DEFAULT_CHECKS = [
+	{
+		name: "typecheck",
+		command: "npx warlock typecheck"
+	},
+	{
+		name: "check",
+		command: "npx warlock check"
+	},
+	{
+		name: "test",
+		command: "npx warlock test"
+	},
+	{
+		name: "build",
+		command: "NODE_ENV=production npx warlock build"
+	}
+];
+/**
+* Fill every default of the `release` config.
+*
+* Rejects settings that would make a later step guess: a check without a
+* name or command, and duplicate check names.
+*/
+function resolveReleaseConfig(raw = {}) {
+	const checks = raw.gate?.checks ?? DEFAULT_CHECKS;
+	const seen = /* @__PURE__ */ new Set();
+	for (const check of checks) {
+		if (!check.name || !check.command) throw new Error("Every release.gate check needs a `name` and a `command`.");
+		if (seen.has(check.name)) throw new Error(`release.gate has two checks named "${check.name}".`);
+		seen.add(check.name);
+	}
+	return {
+		directory: raw.directory ?? ".warlock",
+		distDir: raw.distDir ?? "dist",
+		include: raw.include ?? [],
+		linkNodeModules: raw.linkNodeModules ?? true,
+		checks,
+		migrations: raw.migrations ?? {},
+		restart: {
+			command: raw.restart?.command,
+			timeoutMs: raw.restart?.timeoutMs ?? 12e4
+		},
+		verify: {
+			url: raw.verify?.url,
+			expectedStatus: raw.verify?.expectedStatus ?? 200,
+			retries: raw.verify?.retries ?? 5,
+			intervalMs: raw.verify?.intervalMs ?? 2e3,
+			timeoutMs: raw.verify?.timeoutMs ?? 5e3,
+			versionPath: raw.verify?.versionPath ?? "version",
+			commitPath: raw.verify?.commitPath ?? "commit",
+			match: raw.verify?.match ?? ["version", "commit"]
+		}
+	};
+}
+
+//#endregion
+export { resolveReleaseConfig };
+//# sourceMappingURL=config.mjs.map

package/esm/release/config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/config.ts"],"sourcesContent":["import type { ReleaseCheck, ReleaseConfig, ResolvedReleaseConfig } from \"./types\";\n\nconst DEFAULT_CHECKS: ReleaseCheck[] = [\n  { name: \"typecheck\", command: \"npx warlock typecheck\" },\n  { name: \"check\", command: \"npx warlock check\" },\n  { name: \"test\", command: \"npx warlock test\" },\n  { name: \"build\", command: \"NODE_ENV=production npx warlock build\" },\n];\n\n/**\n * Fill every default of the `release` config.\n *\n * Rejects settings that would make a later step guess: a check without a\n * name or command, and duplicate check names.\n */\nexport function resolveReleaseConfig(raw: ReleaseConfig = {}): ResolvedReleaseConfig {\n  const checks = raw.gate?.checks ?? DEFAULT_CHECKS;\n  const seen = new Set<string>();\n\n  for (const check of checks) {\n    if (!check.name || !check.command) {\n      throw new Error(\"Every release.gate check needs a `name` and a `command`.\");\n    }\n\n    if (seen.has(check.name)) {\n      throw new Error(`release.gate has two checks named \"${check.name}\".`);\n    }\n\n    seen.add(check.name);\n  }\n\n  return {\n    directory: raw.directory ?? \".warlock\",\n    distDir: raw.distDir ?? \"dist\",\n    include: raw.include ?? [],\n    linkNodeModules: raw.linkNodeModules ?? true,\n    checks,\n    migrations: raw.migrations ?? {},\n    restart: {\n      command: raw.restart?.command,\n      timeoutMs: raw.restart?.timeoutMs ?? 120_000,\n    },\n    verify: {\n      url: raw.verify?.url,\n      expectedStatus: raw.verify?.expectedStatus ?? 200,\n      retries: raw.verify?.retries ?? 5,\n      intervalMs: raw.verify?.intervalMs ?? 2000,\n      timeoutMs: raw.verify?.timeoutMs ?? 5000,\n      versionPath: raw.verify?.versionPath ?? \"version\",\n      commitPath: raw.verify?.commitPath ?? \"commit\",\n      match: raw.verify?.match ?? [\"version\", \"commit\"],\n    },\n  };\n}\n"],"mappings":";AAEA,MAAM,iBAAiC;CACrC;EAAE,MAAM;EAAa,SAAS;CAAwB;CACtD;EAAE,MAAM;EAAS,SAAS;CAAoB;CAC9C;EAAE,MAAM;EAAQ,SAAS;CAAmB;CAC5C;EAAE,MAAM;EAAS,SAAS;CAAwC;AACpE;;;;;;;AAQA,SAAgB,qBAAqB,MAAqB,CAAC,GAA0B;CACnF,MAAM,SAAS,IAAI,MAAM,UAAU;CACnC,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,SACxB,MAAM,IAAI,MAAM,0DAA0D;EAG5E,IAAI,KAAK,IAAI,MAAM,IAAI,GACrB,MAAM,IAAI,MAAM,sCAAsC,MAAM,KAAK,GAAG;EAGtE,KAAK,IAAI,MAAM,IAAI;CACrB;CAEA,OAAO;EACL,WAAW,IAAI,aAAa;EAC5B,SAAS,IAAI,WAAW;EACxB,SAAS,IAAI,WAAW,CAAC;EACzB,iBAAiB,IAAI,mBAAmB;EACxC;EACA,YAAY,IAAI,cAAc,CAAC;EAC/B,SAAS;GACP,SAAS,IAAI,SAAS;GACtB,WAAW,IAAI,SAAS,aAAa;EACvC;EACA,QAAQ;GACN,KAAK,IAAI,QAAQ;GACjB,gBAAgB,IAAI,QAAQ,kBAAkB;GAC9C,SAAS,IAAI,QAAQ,WAAW;GAChC,YAAY,IAAI,QAAQ,cAAc;GACtC,WAAW,IAAI,QAAQ,aAAa;GACpC,aAAa,IAAI,QAAQ,eAAe;GACxC,YAAY,IAAI,QAAQ,cAAc;GACtC,OAAO,IAAI,QAAQ,SAAS,CAAC,WAAW,QAAQ;EAClD;CACF;AACF"}

package/esm/release/gate.mjs

@@ -0,0 +1,67 @@
+import { appendLog, readManifest, releaseDir, writeManifest } from "./store.mjs";
+import path from "node:path";
+
+//#region ../../packages/core/src/release/gate.ts
+const DEFAULT_CHECK_TIMEOUT_MS = 18e5;
+/**
+* Run the configured checks, in order, inside the candidate's frozen source.
+*
+* The gate stops at the first failing check: later checks do not run and are
+* not recorded, so the manifest never claims a result that did not happen.
+* Results are written to the manifest either way. A passing gate moves the
+* candidate to `gated`; a failing one returns it to `candidate`. Either way
+* an earlier staging is discarded from the manifest.
+*
+* @example
+* const manifest = await runGate(context, "1.4.0-a1b2c3d");
+* if (!manifest.gate?.passed) process.exitCode = 1;
+*/
+async function runGate(context, id) {
+	const manifest = await readManifest(context, id);
+	if (manifest.status === "active" || manifest.status === "superseded") throw new Error(`Release "${id}" is ${manifest.status}; only a new candidate can be gated.`);
+	const cwd = path.join(releaseDir(context, id), "source");
+	const results = [];
+	let passed = true;
+	for (const check of context.config.checks) {
+		const started = Date.now();
+		const result = await context.runner(check.command, {
+			cwd,
+			timeoutMs: check.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS
+		});
+		const ok = result.code === 0 && !result.timedOut;
+		results.push({
+			name: check.name,
+			command: check.command,
+			status: ok ? "passed" : "failed",
+			exitCode: result.code,
+			durationMs: Date.now() - started,
+			...ok ? {} : { output: result.timedOut ? `${result.output}\n(timed out)` : result.output }
+		});
+		if (!ok) {
+			passed = false;
+			break;
+		}
+	}
+	const updated = {
+		...manifest,
+		status: passed ? "gated" : "candidate",
+		gate: {
+			passed,
+			ranAt: context.now().toISOString(),
+			results
+		}
+	};
+	delete updated.staged;
+	await writeManifest(context, updated);
+	await appendLog(context, {
+		event: "gate",
+		release: id,
+		ok: passed,
+		detail: passed ? `${results.length} check(s) passed` : `failed at ${results[results.length - 1]?.name}`
+	});
+	return updated;
+}
+
+//#endregion
+export { runGate };
+//# sourceMappingURL=gate.mjs.map

package/esm/release/gate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/gate.ts"],"sourcesContent":["import path from \"node:path\";\nimport { appendLog, readManifest, releaseDir, writeManifest, type ReleaseContext } from \"./store\";\nimport type { GateCheckResult, ReleaseManifest } from \"./types\";\n\nconst DEFAULT_CHECK_TIMEOUT_MS = 1_800_000;\n\n/**\n * Run the configured checks, in order, inside the candidate's frozen source.\n *\n * The gate stops at the first failing check: later checks do not run and are\n * not recorded, so the manifest never claims a result that did not happen.\n * Results are written to the manifest either way. A passing gate moves the\n * candidate to `gated`; a failing one returns it to `candidate`. Either way\n * an earlier staging is discarded from the manifest.\n *\n * @example\n * const manifest = await runGate(context, \"1.4.0-a1b2c3d\");\n * if (!manifest.gate?.passed) process.exitCode = 1;\n */\nexport async function runGate(context: ReleaseContext, id: string): Promise<ReleaseManifest> {\n  const manifest = await readManifest(context, id);\n\n  if (manifest.status === \"active\" || manifest.status === \"superseded\") {\n    throw new Error(`Release \"${id}\" is ${manifest.status}; only a new candidate can be gated.`);\n  }\n\n  const cwd = path.join(releaseDir(context, id), \"source\");\n  const results: GateCheckResult[] = [];\n  let passed = true;\n\n  for (const check of context.config.checks) {\n    const started = Date.now();\n    const result = await context.runner(check.command, {\n      cwd,\n      timeoutMs: check.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS,\n    });\n    const ok = result.code === 0 && !result.timedOut;\n\n    results.push({\n      name: check.name,\n      command: check.command,\n      status: ok ? \"passed\" : \"failed\",\n      exitCode: result.code,\n      durationMs: Date.now() - started,\n      ...(ok ? {} : { output: result.timedOut ? `${result.output}\\n(timed out)` : result.output }),\n    });\n\n    if (!ok) {\n      passed = false;\n      break;\n    }\n  }\n\n  const updated: ReleaseManifest = {\n    ...manifest,\n    status: passed ? \"gated\" : \"candidate\",\n    gate: { passed, ranAt: context.now().toISOString(), results },\n  };\n\n  // A new gate run invalidates anything staged from an earlier one, so the\n  // candidate has to be staged again.\n  delete updated.staged;\n\n  await writeManifest(context, updated);\n  await appendLog(context, {\n    event: \"gate\",\n    release: id,\n    ok: passed,\n    detail: passed\n      ? `${results.length} check(s) passed`\n      : `failed at ${results[results.length - 1]?.name}`,\n  });\n\n  return updated;\n}\n"],"mappings":";;;;AAIA,MAAM,2BAA2B;;;;;;;;;;;;;;AAejC,eAAsB,QAAQ,SAAyB,IAAsC;CAC3F,MAAM,WAAW,MAAM,aAAa,SAAS,EAAE;CAE/C,IAAI,SAAS,WAAW,YAAY,SAAS,WAAW,cACtD,MAAM,IAAI,MAAM,YAAY,GAAG,OAAO,SAAS,OAAO,qCAAqC;CAG7F,MAAM,MAAM,KAAK,KAAK,WAAW,SAAS,EAAE,GAAG,QAAQ;CACvD,MAAM,UAA6B,CAAC;CACpC,IAAI,SAAS;CAEb,KAAK,MAAM,SAAS,QAAQ,OAAO,QAAQ;EACzC,MAAM,UAAU,KAAK,IAAI;EACzB,MAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,SAAS;GACjD;GACA,WAAW,MAAM,aAAa;EAChC,CAAC;EACD,MAAM,KAAK,OAAO,SAAS,KAAK,CAAC,OAAO;EAExC,QAAQ,KAAK;GACX,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,QAAQ,KAAK,WAAW;GACxB,UAAU,OAAO;GACjB,YAAY,KAAK,IAAI,IAAI;GACzB,GAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,WAAW,GAAG,OAAO,OAAO,iBAAiB,OAAO,OAAO;EAC5F,CAAC;EAED,IAAI,CAAC,IAAI;GACP,SAAS;GACT;EACF;CACF;CAEA,MAAM,UAA2B;EAC/B,GAAG;EACH,QAAQ,SAAS,UAAU;EAC3B,MAAM;GAAE;GAAQ,OAAO,QAAQ,IAAI,CAAC,CAAC,YAAY;GAAG;EAAQ;CAC9D;CAIA,OAAO,QAAQ;CAEf,MAAM,cAAc,SAAS,OAAO;CACpC,MAAM,UAAU,SAAS;EACvB,OAAO;EACP,SAAS;EACT,IAAI;EACJ,QAAQ,SACJ,GAAG,QAAQ,OAAO,oBAClB,aAAa,QAAQ,QAAQ,SAAS,EAAE,EAAE;CAChD,CAAC;CAED,OAAO;AACT"}