@warlock.js/core 5.36.0 → 5.37.0

package/esm/release/candidate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"candidate.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/candidate.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { access, mkdir, readFile, rm, symlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { appendLog, releaseDir, releasesDir, writeManifest, type ReleaseContext } from \"./store\";\nimport type { ReleaseManifest } from \"./types\";\n\nconst LOCKFILES = [\"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\", \"bun.lock\", \"bun.lockb\"];\n\nexport function shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nexport type CandidateOptions = {\n  /** Commit to freeze. Defaults to `HEAD`. */\n  commit?: string;\n  /** Freeze even when the working tree has uncommitted changes. */\n  allowDirty?: boolean;\n};\n\nasync function exists(file: string): Promise<boolean> {\n  try {\n    await access(file);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function git(context: ReleaseContext, command: string): Promise<string> {\n  const result = await context.runner(`git ${command}`, { cwd: context.root });\n\n  if (result.code !== 0) {\n    throw new Error(`git ${command} failed: ${result.output.trim() || `exit ${result.code}`}`);\n  }\n\n  return result.output.trim();\n}\n\n/**\n * Freeze a commit into a candidate directory.\n *\n * The commit is exported with `git archive` into `<release>/source`, so every\n * later step (gate, build, stage) works on exactly those bytes and not on a\n * working tree that keeps changing. A dirty tree is refused unless\n * `allowDirty` is set, because the candidate would not describe what is\n * checked out.\n *\n * @example\n * const manifest = await createCandidate(context, {});\n */\nexport async function createCandidate(\n  context: ReleaseContext,\n  options: CandidateOptions = {},\n): Promise<ReleaseManifest> {\n  if (!options.allowDirty) {\n    const exclude = shellQuote(`:(exclude)${context.config.directory}`);\n    const dirty = await git(context, `status --porcelain -- . ${exclude}`);\n\n    if (dirty) {\n      throw new Error(\n        `The working tree has uncommitted changes:\\n${dirty}\\nCommit or stash them, or pass --allow-dirty.`,\n      );\n    }\n  }\n\n  const commit = await git(\n    context,\n    `rev-parse --verify ${shellQuote(`${options.commit ?? \"HEAD\"}^{commit}`)}`,\n  );\n  const packageText = await git(context, `show ${shellQuote(`${commit}:package.json`)}`);\n  const version = (JSON.parse(packageText) as { version?: string }).version;\n\n  if (!version) throw new Error(\"package.json has no `version`; a release needs one.\");\n\n  const id = `${version}-${commit.slice(0, 7)}`;\n  const directory = releaseDir(context, id);\n\n  if (await exists(directory)) {\n    throw new Error(`Release \"${id}\" already exists. Releases are never overwritten.`);\n  }\n\n  const source = path.join(directory, \"source\");\n\n  await mkdir(releasesDir(context), { recursive: true });\n  await mkdir(source, { recursive: true });\n\n  try {\n    // Two steps rather than a pipe: a failing `git archive` must not be\n    // masked by the exit code of `tar`.\n    const archive = path.join(directory, \"source.tar\");\n\n    await git(context, `archive --format=tar -o ${shellQuote(archive)} ${shellQuote(commit)}`);\n\n    const extracted = await context.runner(\n      `tar -xf ${shellQuote(archive)} -C ${shellQuote(source)}`,\n      { cwd: context.root },\n    );\n\n    await rm(archive, { force: true });\n\n    if (extracted.code !== 0) {\n      throw new Error(`Could not extract the commit archive: ${extracted.output.trim()}`);\n    }\n\n    if (context.config.linkNodeModules) {\n      const modules = path.join(context.root, \"node_modules\");\n\n      if (await exists(modules)) await symlink(modules, path.join(source, \"node_modules\"), \"dir\");\n    }\n\n    let lockfile: ReleaseManifest[\"lockfile\"] = null;\n\n    for (const file of LOCKFILES) {\n      const location = path.join(source, file);\n\n      if (await exists(location)) {\n        lockfile = {\n          file,\n          sha256: createHash(\"sha256\")\n            .update(await readFile(location))\n            .digest(\"hex\"),\n        };\n        break;\n      }\n    }\n\n    const manifest: ReleaseManifest = {\n      schema: 1,\n      id,\n      version,\n      commit,\n      createdAt: context.now().toISOString(),\n      nodeVersion: context.nodeVersion,\n      lockfile,\n      status: \"candidate\",\n    };\n\n    await writeManifest(context, manifest);\n    await appendLog(context, { event: \"candidate\", release: id, ok: true, detail: commit });\n\n    return manifest;\n  } catch (error) {\n    // The directory was created by this call and holds no finished release.\n    await rm(directory, { recursive: true, force: true });\n    throw error;\n  }\n}\n"],"mappings":";;;;;;AAMA,MAAM,YAAY;CAAC;CAAkB;CAAqB;CAAa;CAAY;AAAW;AAE9F,SAAgB,WAAW,OAAuB;CAChD,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,EAAE;AAC1C;AASA,eAAe,OAAO,MAAgC;CACpD,IAAI;EACF,MAAM,OAAO,IAAI;EACjB,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,IAAI,SAAyB,SAAkC;CAC5E,MAAM,SAAS,MAAM,QAAQ,OAAO,OAAO,WAAW,EAAE,KAAK,QAAQ,KAAK,CAAC;CAE3E,IAAI,OAAO,SAAS,GAClB,MAAM,IAAI,MAAM,OAAO,QAAQ,WAAW,OAAO,OAAO,KAAK,KAAK,QAAQ,OAAO,QAAQ;CAG3F,OAAO,OAAO,OAAO,KAAK;AAC5B;;;;;;;;;;;;;AAcA,eAAsB,gBACpB,SACA,UAA4B,CAAC,GACH;CAC1B,IAAI,CAAC,QAAQ,YAAY;EAEvB,MAAM,QAAQ,MAAM,IAAI,SAAS,2BADjB,WAAW,aAAa,QAAQ,OAAO,WACW,GAAG;EAErE,IAAI,OACF,MAAM,IAAI,MACR,8CAA8C,MAAM,+CACtD;CAEJ;CAEA,MAAM,SAAS,MAAM,IACnB,SACA,sBAAsB,WAAW,GAAG,QAAQ,UAAU,OAAO,UAAU,GACzE;CACA,MAAM,cAAc,MAAM,IAAI,SAAS,QAAQ,WAAW,GAAG,OAAO,cAAc,GAAG;CACrF,MAAM,UAAW,KAAK,MAAM,WAAW,CAAC,CAA0B;CAElE,IAAI,CAAC,SAAS,MAAM,IAAI,MAAM,qDAAqD;CAEnF,MAAM,KAAK,GAAG,QAAQ,GAAG,OAAO,MAAM,GAAG,CAAC;CAC1C,MAAM,YAAY,WAAW,SAAS,EAAE;CAExC,IAAI,MAAM,OAAO,SAAS,GACxB,MAAM,IAAI,MAAM,YAAY,GAAG,kDAAkD;CAGnF,MAAM,SAAS,KAAK,KAAK,WAAW,QAAQ;CAE5C,MAAM,MAAM,YAAY,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;CACrD,MAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;CAEvC,IAAI;EAGF,MAAM,UAAU,KAAK,KAAK,WAAW,YAAY;EAEjD,MAAM,IAAI,SAAS,2BAA2B,WAAW,OAAO,EAAE,GAAG,WAAW,MAAM,GAAG;EAEzF,MAAM,YAAY,MAAM,QAAQ,OAC9B,WAAW,WAAW,OAAO,EAAE,MAAM,WAAW,MAAM,KACtD,EAAE,KAAK,QAAQ,KAAK,CACtB;EAEA,MAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;EAEjC,IAAI,UAAU,SAAS,GACrB,MAAM,IAAI,MAAM,yCAAyC,UAAU,OAAO,KAAK,GAAG;EAGpF,IAAI,QAAQ,OAAO,iBAAiB;GAClC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,cAAc;GAEtD,IAAI,MAAM,OAAO,OAAO,GAAG,MAAM,QAAQ,SAAS,KAAK,KAAK,QAAQ,cAAc,GAAG,KAAK;EAC5F;EAEA,IAAI,WAAwC;EAE5C,KAAK,MAAM,QAAQ,WAAW;GAC5B,MAAM,WAAW,KAAK,KAAK,QAAQ,IAAI;GAEvC,IAAI,MAAM,OAAO,QAAQ,GAAG;IAC1B,WAAW;KACT;KACA,QAAQ,WAAW,QAAQ,CAAC,CACzB,OAAO,MAAM,SAAS,QAAQ,CAAC,CAAC,CAChC,OAAO,KAAK;IACjB;IACA;GACF;EACF;EAEA,MAAM,WAA4B;GAChC,QAAQ;GACR;GACA;GACA;GACA,WAAW,QAAQ,IAAI,CAAC,CAAC,YAAY;GACrC,aAAa,QAAQ;GACrB;GACA,QAAQ;EACV;EAEA,MAAM,cAAc,SAAS,QAAQ;EACrC,MAAM,UAAU,SAAS;GAAE,OAAO;GAAa,SAAS;GAAI,IAAI;GAAM,QAAQ;EAAO,CAAC;EAEtF,OAAO;CACT,SAAS,OAAO;EAEd,MAAM,GAAG,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EACpD,MAAM;CACR;AACF"}

package/esm/release/cascade-migration-provider.mjs

@@ -0,0 +1,32 @@
+import { loadAllMigrations } from "../database/migrate-action.mjs";
+import { dataSourceRegistry, listExecutedMigrations, listPendingMigrations, runMigrations } from "@warlock.js/cascade";
+
+//#region ../../packages/core/src/release/cascade-migration-provider.ts
+/**
+* The provider behind `warlock release migrations --prove`: migrations are
+* loaded the way `warlock migrate` loads them, the ledger and the run go
+* through cascade's migration API, and tables and indexes come from the
+* data source's driver blueprint, so it works for any driver that has one.
+*
+* The database connector must already be started.
+*/
+async function createCascadeMigrationProvider() {
+	await loadAllMigrations();
+	const blueprint = () => dataSourceRegistry.get().driver.blueprint;
+	return {
+		listExecuted: async () => (await listExecutedMigrations()).map((record) => record.name),
+		listPending: async () => (await listPendingMigrations()).map((migration) => migration.name),
+		listTables: () => blueprint().listTables(),
+		listIndexes: async (table) => (await blueprint().listIndexes(table)).map((index) => index.name),
+		runPending: async () => {
+			const results = await runMigrations();
+			const failed = results.find((result) => !result.success);
+			if (failed) throw new Error(`${failed.name}: ${failed.error ?? "failed"}`);
+			return results.filter((result) => result.direction === "up").map((result) => result.name);
+		}
+	};
+}
+
+//#endregion
+export { createCascadeMigrationProvider };
+//# sourceMappingURL=cascade-migration-provider.mjs.map

package/esm/release/cascade-migration-provider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade-migration-provider.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/cascade-migration-provider.ts"],"sourcesContent":["import {\n  dataSourceRegistry,\n  listExecutedMigrations,\n  listPendingMigrations,\n  runMigrations,\n} from \"@warlock.js/cascade\";\nimport { loadAllMigrations } from \"../database/migrate-action\";\nimport type { MigrationProofProvider } from \"./migrations-proof\";\n\n/**\n * The provider behind `warlock release migrations --prove`: migrations are\n * loaded the way `warlock migrate` loads them, the ledger and the run go\n * through cascade's migration API, and tables and indexes come from the\n * data source's driver blueprint, so it works for any driver that has one.\n *\n * The database connector must already be started.\n */\nexport async function createCascadeMigrationProvider(): Promise<MigrationProofProvider> {\n  await loadAllMigrations();\n\n  const blueprint = () => dataSourceRegistry.get().driver.blueprint;\n\n  return {\n    listExecuted: async () => (await listExecutedMigrations()).map((record) => record.name),\n    listPending: async () => (await listPendingMigrations()).map((migration) => migration.name),\n    listTables: () => blueprint().listTables(),\n    listIndexes: async (table) => (await blueprint().listIndexes(table)).map((index) => index.name),\n    runPending: async () => {\n      const results = await runMigrations();\n      const failed = results.find((result) => !result.success);\n\n      if (failed) throw new Error(`${failed.name}: ${failed.error ?? \"failed\"}`);\n\n      return results.filter((result) => result.direction === \"up\").map((result) => result.name);\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,eAAsB,iCAAkE;CACtF,MAAM,kBAAkB;CAExB,MAAM,kBAAkB,mBAAmB,IAAI,CAAC,CAAC,OAAO;CAExD,OAAO;EACL,cAAc,aAAa,MAAM,uBAAuB,EAAC,CAAE,KAAK,WAAW,OAAO,IAAI;EACtF,aAAa,aAAa,MAAM,sBAAsB,EAAC,CAAE,KAAK,cAAc,UAAU,IAAI;EAC1F,kBAAkB,UAAU,CAAC,CAAC,WAAW;EACzC,aAAa,OAAO,WAAW,MAAM,UAAU,CAAC,CAAC,YAAY,KAAK,EAAC,CAAE,KAAK,UAAU,MAAM,IAAI;EAC9F,YAAY,YAAY;GACtB,MAAM,UAAU,MAAM,cAAc;GACpC,MAAM,SAAS,QAAQ,MAAM,WAAW,CAAC,OAAO,OAAO;GAEvD,IAAI,QAAQ,MAAM,IAAI,MAAM,GAAG,OAAO,KAAK,IAAI,OAAO,SAAS,UAAU;GAEzE,OAAO,QAAQ,QAAQ,WAAW,OAAO,cAAc,IAAI,CAAC,CAAC,KAAK,WAAW,OAAO,IAAI;EAC1F;CACF;AACF"}

package/esm/release/config.mjs

@@ -0,0 +1,60 @@
+//#region ../../packages/core/src/release/config.ts
+const DEFAULT_CHECKS = [
+	{
+		name: "typecheck",
+		command: "npx warlock typecheck"
+	},
+	{
+		name: "check",
+		command: "npx warlock check"
+	},
+	{
+		name: "test",
+		command: "npx warlock test"
+	},
+	{
+		name: "build",
+		command: "NODE_ENV=production npx warlock build"
+	}
+];
+/**
+* Fill every default of the `release` config.
+*
+* Rejects settings that would make a later step guess: a check without a
+* name or command, and duplicate check names.
+*/
+function resolveReleaseConfig(raw = {}) {
+	const checks = raw.gate?.checks ?? DEFAULT_CHECKS;
+	const seen = /* @__PURE__ */ new Set();
+	for (const check of checks) {
+		if (!check.name || !check.command) throw new Error("Every release.gate check needs a `name` and a `command`.");
+		if (seen.has(check.name)) throw new Error(`release.gate has two checks named "${check.name}".`);
+		seen.add(check.name);
+	}
+	return {
+		directory: raw.directory ?? ".warlock",
+		distDir: raw.distDir ?? "dist",
+		include: raw.include ?? [],
+		linkNodeModules: raw.linkNodeModules ?? true,
+		checks,
+		migrations: raw.migrations ?? {},
+		restart: {
+			command: raw.restart?.command,
+			timeoutMs: raw.restart?.timeoutMs ?? 12e4
+		},
+		verify: {
+			url: raw.verify?.url,
+			expectedStatus: raw.verify?.expectedStatus ?? 200,
+			retries: raw.verify?.retries ?? 5,
+			intervalMs: raw.verify?.intervalMs ?? 2e3,
+			timeoutMs: raw.verify?.timeoutMs ?? 5e3,
+			versionPath: raw.verify?.versionPath ?? "version",
+			commitPath: raw.verify?.commitPath ?? "commit",
+			match: raw.verify?.match ?? ["version", "commit"]
+		}
+	};
+}
+
+//#endregion
+export { resolveReleaseConfig };
+//# sourceMappingURL=config.mjs.map

package/esm/release/config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/config.ts"],"sourcesContent":["import type { ReleaseCheck, ReleaseConfig, ResolvedReleaseConfig } from \"./types\";\n\nconst DEFAULT_CHECKS: ReleaseCheck[] = [\n  { name: \"typecheck\", command: \"npx warlock typecheck\" },\n  { name: \"check\", command: \"npx warlock check\" },\n  { name: \"test\", command: \"npx warlock test\" },\n  { name: \"build\", command: \"NODE_ENV=production npx warlock build\" },\n];\n\n/**\n * Fill every default of the `release` config.\n *\n * Rejects settings that would make a later step guess: a check without a\n * name or command, and duplicate check names.\n */\nexport function resolveReleaseConfig(raw: ReleaseConfig = {}): ResolvedReleaseConfig {\n  const checks = raw.gate?.checks ?? DEFAULT_CHECKS;\n  const seen = new Set<string>();\n\n  for (const check of checks) {\n    if (!check.name || !check.command) {\n      throw new Error(\"Every release.gate check needs a `name` and a `command`.\");\n    }\n\n    if (seen.has(check.name)) {\n      throw new Error(`release.gate has two checks named \"${check.name}\".`);\n    }\n\n    seen.add(check.name);\n  }\n\n  return {\n    directory: raw.directory ?? \".warlock\",\n    distDir: raw.distDir ?? \"dist\",\n    include: raw.include ?? [],\n    linkNodeModules: raw.linkNodeModules ?? true,\n    checks,\n    migrations: raw.migrations ?? {},\n    restart: {\n      command: raw.restart?.command,\n      timeoutMs: raw.restart?.timeoutMs ?? 120_000,\n    },\n    verify: {\n      url: raw.verify?.url,\n      expectedStatus: raw.verify?.expectedStatus ?? 200,\n      retries: raw.verify?.retries ?? 5,\n      intervalMs: raw.verify?.intervalMs ?? 2000,\n      timeoutMs: raw.verify?.timeoutMs ?? 5000,\n      versionPath: raw.verify?.versionPath ?? \"version\",\n      commitPath: raw.verify?.commitPath ?? \"commit\",\n      match: raw.verify?.match ?? [\"version\", \"commit\"],\n    },\n  };\n}\n"],"mappings":";AAEA,MAAM,iBAAiC;CACrC;EAAE,MAAM;EAAa,SAAS;CAAwB;CACtD;EAAE,MAAM;EAAS,SAAS;CAAoB;CAC9C;EAAE,MAAM;EAAQ,SAAS;CAAmB;CAC5C;EAAE,MAAM;EAAS,SAAS;CAAwC;AACpE;;;;;;;AAQA,SAAgB,qBAAqB,MAAqB,CAAC,GAA0B;CACnF,MAAM,SAAS,IAAI,MAAM,UAAU;CACnC,MAAM,uBAAO,IAAI,IAAY;CAE7B,KAAK,MAAM,SAAS,QAAQ;EAC1B,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,SACxB,MAAM,IAAI,MAAM,0DAA0D;EAG5E,IAAI,KAAK,IAAI,MAAM,IAAI,GACrB,MAAM,IAAI,MAAM,sCAAsC,MAAM,KAAK,GAAG;EAGtE,KAAK,IAAI,MAAM,IAAI;CACrB;CAEA,OAAO;EACL,WAAW,IAAI,aAAa;EAC5B,SAAS,IAAI,WAAW;EACxB,SAAS,IAAI,WAAW,CAAC;EACzB,iBAAiB,IAAI,mBAAmB;EACxC;EACA,YAAY,IAAI,cAAc,CAAC;EAC/B,SAAS;GACP,SAAS,IAAI,SAAS;GACtB,WAAW,IAAI,SAAS,aAAa;EACvC;EACA,QAAQ;GACN,KAAK,IAAI,QAAQ;GACjB,gBAAgB,IAAI,QAAQ,kBAAkB;GAC9C,SAAS,IAAI,QAAQ,WAAW;GAChC,YAAY,IAAI,QAAQ,cAAc;GACtC,WAAW,IAAI,QAAQ,aAAa;GACpC,aAAa,IAAI,QAAQ,eAAe;GACxC,YAAY,IAAI,QAAQ,cAAc;GACtC,OAAO,IAAI,QAAQ,SAAS,CAAC,WAAW,QAAQ;EAClD;CACF;AACF"}

package/esm/release/gate.mjs

@@ -0,0 +1,67 @@
+import { appendLog, readManifest, releaseDir, writeManifest } from "./store.mjs";
+import path from "node:path";
+
+//#region ../../packages/core/src/release/gate.ts
+const DEFAULT_CHECK_TIMEOUT_MS = 18e5;
+/**
+* Run the configured checks, in order, inside the candidate's frozen source.
+*
+* The gate stops at the first failing check: later checks do not run and are
+* not recorded, so the manifest never claims a result that did not happen.
+* Results are written to the manifest either way. A passing gate moves the
+* candidate to `gated`; a failing one returns it to `candidate`. Either way
+* an earlier staging is discarded from the manifest.
+*
+* @example
+* const manifest = await runGate(context, "1.4.0-a1b2c3d");
+* if (!manifest.gate?.passed) process.exitCode = 1;
+*/
+async function runGate(context, id) {
+	const manifest = await readManifest(context, id);
+	if (manifest.status === "active" || manifest.status === "superseded") throw new Error(`Release "${id}" is ${manifest.status}; only a new candidate can be gated.`);
+	const cwd = path.join(releaseDir(context, id), "source");
+	const results = [];
+	let passed = true;
+	for (const check of context.config.checks) {
+		const started = Date.now();
+		const result = await context.runner(check.command, {
+			cwd,
+			timeoutMs: check.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS
+		});
+		const ok = result.code === 0 && !result.timedOut;
+		results.push({
+			name: check.name,
+			command: check.command,
+			status: ok ? "passed" : "failed",
+			exitCode: result.code,
+			durationMs: Date.now() - started,
+			...ok ? {} : { output: result.timedOut ? `${result.output}\n(timed out)` : result.output }
+		});
+		if (!ok) {
+			passed = false;
+			break;
+		}
+	}
+	const updated = {
+		...manifest,
+		status: passed ? "gated" : "candidate",
+		gate: {
+			passed,
+			ranAt: context.now().toISOString(),
+			results
+		}
+	};
+	delete updated.staged;
+	await writeManifest(context, updated);
+	await appendLog(context, {
+		event: "gate",
+		release: id,
+		ok: passed,
+		detail: passed ? `${results.length} check(s) passed` : `failed at ${results[results.length - 1]?.name}`
+	});
+	return updated;
+}
+
+//#endregion
+export { runGate };
+//# sourceMappingURL=gate.mjs.map

package/esm/release/gate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/gate.ts"],"sourcesContent":["import path from \"node:path\";\nimport { appendLog, readManifest, releaseDir, writeManifest, type ReleaseContext } from \"./store\";\nimport type { GateCheckResult, ReleaseManifest } from \"./types\";\n\nconst DEFAULT_CHECK_TIMEOUT_MS = 1_800_000;\n\n/**\n * Run the configured checks, in order, inside the candidate's frozen source.\n *\n * The gate stops at the first failing check: later checks do not run and are\n * not recorded, so the manifest never claims a result that did not happen.\n * Results are written to the manifest either way. A passing gate moves the\n * candidate to `gated`; a failing one returns it to `candidate`. Either way\n * an earlier staging is discarded from the manifest.\n *\n * @example\n * const manifest = await runGate(context, \"1.4.0-a1b2c3d\");\n * if (!manifest.gate?.passed) process.exitCode = 1;\n */\nexport async function runGate(context: ReleaseContext, id: string): Promise<ReleaseManifest> {\n  const manifest = await readManifest(context, id);\n\n  if (manifest.status === \"active\" || manifest.status === \"superseded\") {\n    throw new Error(`Release \"${id}\" is ${manifest.status}; only a new candidate can be gated.`);\n  }\n\n  const cwd = path.join(releaseDir(context, id), \"source\");\n  const results: GateCheckResult[] = [];\n  let passed = true;\n\n  for (const check of context.config.checks) {\n    const started = Date.now();\n    const result = await context.runner(check.command, {\n      cwd,\n      timeoutMs: check.timeoutMs ?? DEFAULT_CHECK_TIMEOUT_MS,\n    });\n    const ok = result.code === 0 && !result.timedOut;\n\n    results.push({\n      name: check.name,\n      command: check.command,\n      status: ok ? \"passed\" : \"failed\",\n      exitCode: result.code,\n      durationMs: Date.now() - started,\n      ...(ok ? {} : { output: result.timedOut ? `${result.output}\\n(timed out)` : result.output }),\n    });\n\n    if (!ok) {\n      passed = false;\n      break;\n    }\n  }\n\n  const updated: ReleaseManifest = {\n    ...manifest,\n    status: passed ? \"gated\" : \"candidate\",\n    gate: { passed, ranAt: context.now().toISOString(), results },\n  };\n\n  // A new gate run invalidates anything staged from an earlier one, so the\n  // candidate has to be staged again.\n  delete updated.staged;\n\n  await writeManifest(context, updated);\n  await appendLog(context, {\n    event: \"gate\",\n    release: id,\n    ok: passed,\n    detail: passed\n      ? `${results.length} check(s) passed`\n      : `failed at ${results[results.length - 1]?.name}`,\n  });\n\n  return updated;\n}\n"],"mappings":";;;;AAIA,MAAM,2BAA2B;;;;;;;;;;;;;;AAejC,eAAsB,QAAQ,SAAyB,IAAsC;CAC3F,MAAM,WAAW,MAAM,aAAa,SAAS,EAAE;CAE/C,IAAI,SAAS,WAAW,YAAY,SAAS,WAAW,cACtD,MAAM,IAAI,MAAM,YAAY,GAAG,OAAO,SAAS,OAAO,qCAAqC;CAG7F,MAAM,MAAM,KAAK,KAAK,WAAW,SAAS,EAAE,GAAG,QAAQ;CACvD,MAAM,UAA6B,CAAC;CACpC,IAAI,SAAS;CAEb,KAAK,MAAM,SAAS,QAAQ,OAAO,QAAQ;EACzC,MAAM,UAAU,KAAK,IAAI;EACzB,MAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,SAAS;GACjD;GACA,WAAW,MAAM,aAAa;EAChC,CAAC;EACD,MAAM,KAAK,OAAO,SAAS,KAAK,CAAC,OAAO;EAExC,QAAQ,KAAK;GACX,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,QAAQ,KAAK,WAAW;GACxB,UAAU,OAAO;GACjB,YAAY,KAAK,IAAI,IAAI;GACzB,GAAI,KAAK,CAAC,IAAI,EAAE,QAAQ,OAAO,WAAW,GAAG,OAAO,OAAO,iBAAiB,OAAO,OAAO;EAC5F,CAAC;EAED,IAAI,CAAC,IAAI;GACP,SAAS;GACT;EACF;CACF;CAEA,MAAM,UAA2B;EAC/B,GAAG;EACH,QAAQ,SAAS,UAAU;EAC3B,MAAM;GAAE;GAAQ,OAAO,QAAQ,IAAI,CAAC,CAAC,YAAY;GAAG;EAAQ;CAC9D;CAIA,OAAO,QAAQ;CAEf,MAAM,cAAc,SAAS,OAAO;CACpC,MAAM,UAAU,SAAS;EACvB,OAAO;EACP,SAAS;EACT,IAAI;EACJ,QAAQ,SACJ,GAAG,QAAQ,OAAO,oBAClB,aAAa,QAAQ,QAAQ,SAAS,EAAE,EAAE;CAChD,CAAC;CAED,OAAO;AACT"}

package/esm/release/migrations-proof.mjs

@@ -0,0 +1,100 @@
+import { appendLog, readManifest, writeManifest } from "./store.mjs";
+
+//#region ../../packages/core/src/release/migrations-proof.ts
+async function snapshot(provider) {
+	const tables = [...await provider.listTables()].sort();
+	const indexes = {};
+	for (const table of tables) indexes[table] = [...await provider.listIndexes(table)].sort();
+	return {
+		executed: await provider.listExecuted(),
+		tables,
+		indexes
+	};
+}
+function difference(left, right) {
+	const other = new Set(right);
+	return left.filter((item) => !other.has(item));
+}
+/** What `--prove` would do, without touching the database. */
+async function planMigrationProof(context, provider, target) {
+	const pending = await provider.listPending();
+	return {
+		target,
+		pending,
+		expected: context.config.migrations.expected ?? pending
+	};
+}
+/**
+* Snapshot the ledger, tables and indexes, run the pending migrations,
+* snapshot again and compare the result with the expected set.
+*
+* The proof passes when exactly the expected migrations were applied, in
+* order, the ledger grew by exactly those names, and every table listed in
+* `release.migrations.expectedTables` exists afterwards. The full before and
+* after snapshots go into the manifest, so the schema change is on record
+* with the release.
+*
+* Run it against a target that is safe to migrate (a staging copy): the
+* migrations really execute.
+*
+* @example
+* const proof = await proveMigrations(context, provider, "staging");
+*/
+async function proveMigrations(context, provider, options) {
+	const plan = await planMigrationProof(context, provider, options.target);
+	const before = await snapshot(provider);
+	const problems = [];
+	let applied = [];
+	try {
+		applied = await provider.runPending();
+	} catch (error) {
+		problems.push(`Running migrations failed: ${error.message}`);
+	}
+	const after = await snapshot(provider);
+	const ledgerGrowth = difference(after.executed, before.executed);
+	if (JSON.stringify(applied) !== JSON.stringify(plan.expected)) problems.push(`Applied [${applied.join(", ")}] but expected [${plan.expected.join(", ")}].`);
+	if (JSON.stringify(ledgerGrowth) !== JSON.stringify(plan.expected)) problems.push(`The ledger gained [${ledgerGrowth.join(", ")}] but expected [${plan.expected.join(", ")}].`);
+	const removedFromLedger = difference(before.executed, after.executed);
+	if (removedFromLedger.length > 0) problems.push(`The ledger lost entries: ${removedFromLedger.join(", ")}.`);
+	for (const table of context.config.migrations.expectedTables ?? []) if (!after.tables.includes(table)) problems.push(`Expected table "${table}" is missing.`);
+	const indexesChanged = {};
+	for (const table of /* @__PURE__ */ new Set([...Object.keys(before.indexes), ...Object.keys(after.indexes)])) {
+		const was = before.indexes[table] ?? [];
+		const now = after.indexes[table] ?? [];
+		const added = difference(now, was);
+		const removed = difference(was, now);
+		if (added.length > 0 || removed.length > 0) indexesChanged[table] = {
+			added,
+			removed
+		};
+	}
+	const proof = {
+		target: options.target,
+		provedAt: context.now().toISOString(),
+		passed: problems.length === 0,
+		before,
+		after,
+		expected: plan.expected,
+		applied,
+		tablesAdded: difference(after.tables, before.tables),
+		tablesRemoved: difference(before.tables, after.tables),
+		indexesChanged,
+		problems
+	};
+	const manifest = await readManifest(context, options.releaseId);
+	await writeManifest(context, {
+		...manifest,
+		migrations: proof
+	});
+	await appendLog(context, {
+		event: "migrations",
+		release: options.releaseId,
+		ok: proof.passed,
+		detail: proof.passed ? `${applied.length} migration(s) proved` : problems[0]
+	});
+	return proof;
+}
+
+//#endregion
+export { planMigrationProof, proveMigrations };
+//# sourceMappingURL=migrations-proof.mjs.map

package/esm/release/migrations-proof.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations-proof.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/migrations-proof.ts"],"sourcesContent":["import { appendLog, readManifest, writeManifest, type ReleaseContext } from \"./store\";\nimport type { MigrationProof, MigrationSnapshot } from \"./types\";\n\n/**\n * What the proof needs from a database. Kept driver-agnostic: the default\n * implementation (see `cascade-migration-provider.ts`) reads the migration\n * ledger and the schema through cascade, and tests pass a plain object.\n */\nexport type MigrationProofProvider = {\n  /** Names in the migration ledger, in execution order */\n  listExecuted(): Promise<string[]>;\n  /** Registered migrations that have not run, in the order they will run */\n  listPending(): Promise<string[]>;\n  /** Tables or collections */\n  listTables(): Promise<string[]>;\n  /** Index names of one table or collection */\n  listIndexes(table: string): Promise<string[]>;\n  /** Run the pending migrations; resolves to the names that were applied */\n  runPending(): Promise<string[]>;\n};\n\nexport type MigrationPlan = {\n  target: string | null;\n  pending: string[];\n  expected: string[];\n};\n\nasync function snapshot(provider: MigrationProofProvider): Promise<MigrationSnapshot> {\n  const tables = [...(await provider.listTables())].sort();\n  const indexes: Record<string, string[]> = {};\n\n  for (const table of tables) {\n    indexes[table] = [...(await provider.listIndexes(table))].sort();\n  }\n\n  return { executed: await provider.listExecuted(), tables, indexes };\n}\n\nfunction difference(left: string[], right: string[]): string[] {\n  const other = new Set(right);\n\n  return left.filter((item) => !other.has(item));\n}\n\n/** What `--prove` would do, without touching the database. */\nexport async function planMigrationProof(\n  context: ReleaseContext,\n  provider: MigrationProofProvider,\n  target: string | null,\n): Promise<MigrationPlan> {\n  const pending = await provider.listPending();\n\n  return { target, pending, expected: context.config.migrations.expected ?? pending };\n}\n\n/**\n * Snapshot the ledger, tables and indexes, run the pending migrations,\n * snapshot again and compare the result with the expected set.\n *\n * The proof passes when exactly the expected migrations were applied, in\n * order, the ledger grew by exactly those names, and every table listed in\n * `release.migrations.expectedTables` exists afterwards. The full before and\n * after snapshots go into the manifest, so the schema change is on record\n * with the release.\n *\n * Run it against a target that is safe to migrate (a staging copy): the\n * migrations really execute.\n *\n * @example\n * const proof = await proveMigrations(context, provider, \"staging\");\n */\nexport async function proveMigrations(\n  context: ReleaseContext,\n  provider: MigrationProofProvider,\n  options: { target: string | null; releaseId: string },\n): Promise<MigrationProof> {\n  const plan = await planMigrationProof(context, provider, options.target);\n  const before = await snapshot(provider);\n  const problems: string[] = [];\n  let applied: string[] = [];\n\n  try {\n    applied = await provider.runPending();\n  } catch (error) {\n    problems.push(`Running migrations failed: ${(error as Error).message}`);\n  }\n\n  const after = await snapshot(provider);\n  const ledgerGrowth = difference(after.executed, before.executed);\n\n  if (JSON.stringify(applied) !== JSON.stringify(plan.expected)) {\n    problems.push(`Applied [${applied.join(\", \")}] but expected [${plan.expected.join(\", \")}].`);\n  }\n\n  if (JSON.stringify(ledgerGrowth) !== JSON.stringify(plan.expected)) {\n    problems.push(\n      `The ledger gained [${ledgerGrowth.join(\", \")}] but expected [${plan.expected.join(\", \")}].`,\n    );\n  }\n\n  const removedFromLedger = difference(before.executed, after.executed);\n\n  if (removedFromLedger.length > 0) {\n    problems.push(`The ledger lost entries: ${removedFromLedger.join(\", \")}.`);\n  }\n\n  for (const table of context.config.migrations.expectedTables ?? []) {\n    if (!after.tables.includes(table)) problems.push(`Expected table \"${table}\" is missing.`);\n  }\n\n  const indexesChanged: MigrationProof[\"indexesChanged\"] = {};\n\n  for (const table of new Set([...Object.keys(before.indexes), ...Object.keys(after.indexes)])) {\n    const was = before.indexes[table] ?? [];\n    const now = after.indexes[table] ?? [];\n    const added = difference(now, was);\n    const removed = difference(was, now);\n\n    if (added.length > 0 || removed.length > 0) indexesChanged[table] = { added, removed };\n  }\n\n  const proof: MigrationProof = {\n    target: options.target,\n    provedAt: context.now().toISOString(),\n    passed: problems.length === 0,\n    before,\n    after,\n    expected: plan.expected,\n    applied,\n    tablesAdded: difference(after.tables, before.tables),\n    tablesRemoved: difference(before.tables, after.tables),\n    indexesChanged,\n    problems,\n  };\n\n  const manifest = await readManifest(context, options.releaseId);\n\n  await writeManifest(context, { ...manifest, migrations: proof });\n  await appendLog(context, {\n    event: \"migrations\",\n    release: options.releaseId,\n    ok: proof.passed,\n    detail: proof.passed ? `${applied.length} migration(s) proved` : problems[0],\n  });\n\n  return proof;\n}\n"],"mappings":";;;AA2BA,eAAe,SAAS,UAA8D;CACpF,MAAM,SAAS,CAAC,GAAI,MAAM,SAAS,WAAW,CAAE,CAAC,CAAC,KAAK;CACvD,MAAM,UAAoC,CAAC;CAE3C,KAAK,MAAM,SAAS,QAClB,QAAQ,SAAS,CAAC,GAAI,MAAM,SAAS,YAAY,KAAK,CAAE,CAAC,CAAC,KAAK;CAGjE,OAAO;EAAE,UAAU,MAAM,SAAS,aAAa;EAAG;EAAQ;CAAQ;AACpE;AAEA,SAAS,WAAW,MAAgB,OAA2B;CAC7D,MAAM,QAAQ,IAAI,IAAI,KAAK;CAE3B,OAAO,KAAK,QAAQ,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC;AAC/C;;AAGA,eAAsB,mBACpB,SACA,UACA,QACwB;CACxB,MAAM,UAAU,MAAM,SAAS,YAAY;CAE3C,OAAO;EAAE;EAAQ;EAAS,UAAU,QAAQ,OAAO,WAAW,YAAY;CAAQ;AACpF;;;;;;;;;;;;;;;;;AAkBA,eAAsB,gBACpB,SACA,UACA,SACyB;CACzB,MAAM,OAAO,MAAM,mBAAmB,SAAS,UAAU,QAAQ,MAAM;CACvE,MAAM,SAAS,MAAM,SAAS,QAAQ;CACtC,MAAM,WAAqB,CAAC;CAC5B,IAAI,UAAoB,CAAC;CAEzB,IAAI;EACF,UAAU,MAAM,SAAS,WAAW;CACtC,SAAS,OAAO;EACd,SAAS,KAAK,8BAA+B,MAAgB,SAAS;CACxE;CAEA,MAAM,QAAQ,MAAM,SAAS,QAAQ;CACrC,MAAM,eAAe,WAAW,MAAM,UAAU,OAAO,QAAQ;CAE/D,IAAI,KAAK,UAAU,OAAO,MAAM,KAAK,UAAU,KAAK,QAAQ,GAC1D,SAAS,KAAK,YAAY,QAAQ,KAAK,IAAI,EAAE,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAE,GAAG;CAG7F,IAAI,KAAK,UAAU,YAAY,MAAM,KAAK,UAAU,KAAK,QAAQ,GAC/D,SAAS,KACP,sBAAsB,aAAa,KAAK,IAAI,EAAE,kBAAkB,KAAK,SAAS,KAAK,IAAI,EAAE,GAC3F;CAGF,MAAM,oBAAoB,WAAW,OAAO,UAAU,MAAM,QAAQ;CAEpE,IAAI,kBAAkB,SAAS,GAC7B,SAAS,KAAK,4BAA4B,kBAAkB,KAAK,IAAI,EAAE,EAAE;CAG3E,KAAK,MAAM,SAAS,QAAQ,OAAO,WAAW,kBAAkB,CAAC,GAC/D,IAAI,CAAC,MAAM,OAAO,SAAS,KAAK,GAAG,SAAS,KAAK,mBAAmB,MAAM,cAAc;CAG1F,MAAM,iBAAmD,CAAC;CAE1D,KAAK,MAAM,yBAAS,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,OAAO,OAAO,GAAG,GAAG,OAAO,KAAK,MAAM,OAAO,CAAC,CAAC,GAAG;EAC5F,MAAM,MAAM,OAAO,QAAQ,UAAU,CAAC;EACtC,MAAM,MAAM,MAAM,QAAQ,UAAU,CAAC;EACrC,MAAM,QAAQ,WAAW,KAAK,GAAG;EACjC,MAAM,UAAU,WAAW,KAAK,GAAG;EAEnC,IAAI,MAAM,SAAS,KAAK,QAAQ,SAAS,GAAG,eAAe,SAAS;GAAE;GAAO;EAAQ;CACvF;CAEA,MAAM,QAAwB;EAC5B,QAAQ,QAAQ;EAChB,UAAU,QAAQ,IAAI,CAAC,CAAC,YAAY;EACpC,QAAQ,SAAS,WAAW;EAC5B;EACA;EACA,UAAU,KAAK;EACf;EACA,aAAa,WAAW,MAAM,QAAQ,OAAO,MAAM;EACnD,eAAe,WAAW,OAAO,QAAQ,MAAM,MAAM;EACrD;EACA;CACF;CAEA,MAAM,WAAW,MAAM,aAAa,SAAS,QAAQ,SAAS;CAE9D,MAAM,cAAc,SAAS;EAAE,GAAG;EAAU,YAAY;CAAM,CAAC;CAC/D,MAAM,UAAU,SAAS;EACvB,OAAO;EACP,SAAS,QAAQ;EACjB,IAAI,MAAM;EACV,QAAQ,MAAM,SAAS,GAAG,QAAQ,OAAO,wBAAwB,SAAS;CAC5E,CAAC;CAED,OAAO;AACT"}

package/esm/release/prune.mjs

@@ -0,0 +1,42 @@
+import { appendLog, listManifests, readPointer, releaseDir } from "./store.mjs";
+import { rm } from "node:fs/promises";
+
+//#region ../../packages/core/src/release/prune.ts
+/**
+* Delete old releases, keeping the newest `keep`. The release `current` names
+* and the one `previous` names are always kept, whatever their age. This is
+* the only operation that removes a release.
+*
+* @example
+* await pruneReleases(context, { keep: 5 });
+*/
+async function pruneReleases(context, options) {
+	if (!Number.isInteger(options.keep) || options.keep < 1) throw new Error("--keep must be a whole number of at least 1.");
+	const manifests = await listManifests(context);
+	const pinned = new Set([await readPointer(context, "current"), await readPointer(context, "previous")].filter((id) => id !== null));
+	const kept = new Set(manifests.slice(0, options.keep).map((manifest) => manifest.id));
+	const removed = [];
+	for (const manifest of manifests) {
+		if (kept.has(manifest.id) || pinned.has(manifest.id)) continue;
+		removed.push(manifest.id);
+		if (!options.dryRun) await rm(releaseDir(context, manifest.id), {
+			recursive: true,
+			force: true
+		});
+	}
+	if (!options.dryRun && removed.length > 0) await appendLog(context, {
+		event: "prune",
+		release: null,
+		ok: true,
+		detail: `removed ${removed.join(", ")}`
+	});
+	return {
+		kept: manifests.filter((manifest) => !removed.includes(manifest.id)).map((manifest) => manifest.id),
+		removed,
+		dryRun: options.dryRun === true
+	};
+}
+
+//#endregion
+export { pruneReleases };
+//# sourceMappingURL=prune.mjs.map

package/esm/release/prune.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/prune.ts"],"sourcesContent":["import { rm } from \"node:fs/promises\";\nimport { appendLog, listManifests, readPointer, releaseDir, type ReleaseContext } from \"./store\";\n\nexport type PruneResult = {\n  kept: string[];\n  removed: string[];\n  dryRun: boolean;\n};\n\n/**\n * Delete old releases, keeping the newest `keep`. The release `current` names\n * and the one `previous` names are always kept, whatever their age. This is\n * the only operation that removes a release.\n *\n * @example\n * await pruneReleases(context, { keep: 5 });\n */\nexport async function pruneReleases(\n  context: ReleaseContext,\n  options: { keep: number; dryRun?: boolean },\n): Promise<PruneResult> {\n  if (!Number.isInteger(options.keep) || options.keep < 1) {\n    throw new Error(\"--keep must be a whole number of at least 1.\");\n  }\n\n  const manifests = await listManifests(context);\n  const pinned = new Set(\n    [await readPointer(context, \"current\"), await readPointer(context, \"previous\")].filter(\n      (id): id is string => id !== null,\n    ),\n  );\n  const kept = new Set(manifests.slice(0, options.keep).map((manifest) => manifest.id));\n  const removed: string[] = [];\n\n  for (const manifest of manifests) {\n    if (kept.has(manifest.id) || pinned.has(manifest.id)) continue;\n\n    removed.push(manifest.id);\n\n    if (!options.dryRun) {\n      await rm(releaseDir(context, manifest.id), { recursive: true, force: true });\n    }\n  }\n\n  if (!options.dryRun && removed.length > 0) {\n    await appendLog(context, {\n      event: \"prune\",\n      release: null,\n      ok: true,\n      detail: `removed ${removed.join(\", \")}`,\n    });\n  }\n\n  return {\n    kept: manifests\n      .filter((manifest) => !removed.includes(manifest.id))\n      .map((manifest) => manifest.id),\n    removed,\n    dryRun: options.dryRun === true,\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,eAAsB,cACpB,SACA,SACsB;CACtB,IAAI,CAAC,OAAO,UAAU,QAAQ,IAAI,KAAK,QAAQ,OAAO,GACpD,MAAM,IAAI,MAAM,8CAA8C;CAGhE,MAAM,YAAY,MAAM,cAAc,OAAO;CAC7C,MAAM,SAAS,IAAI,IACjB,CAAC,MAAM,YAAY,SAAS,SAAS,GAAG,MAAM,YAAY,SAAS,UAAU,CAAC,CAAC,CAAC,QAC7E,OAAqB,OAAO,IAC/B,CACF;CACA,MAAM,OAAO,IAAI,IAAI,UAAU,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC,KAAK,aAAa,SAAS,EAAE,CAAC;CACpF,MAAM,UAAoB,CAAC;CAE3B,KAAK,MAAM,YAAY,WAAW;EAChC,IAAI,KAAK,IAAI,SAAS,EAAE,KAAK,OAAO,IAAI,SAAS,EAAE,GAAG;EAEtD,QAAQ,KAAK,SAAS,EAAE;EAExB,IAAI,CAAC,QAAQ,QACX,MAAM,GAAG,WAAW,SAAS,SAAS,EAAE,GAAG;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;CAE/E;CAEA,IAAI,CAAC,QAAQ,UAAU,QAAQ,SAAS,GACtC,MAAM,UAAU,SAAS;EACvB,OAAO;EACP,SAAS;EACT,IAAI;EACJ,QAAQ,WAAW,QAAQ,KAAK,IAAI;CACtC,CAAC;CAGH,OAAO;EACL,MAAM,UACH,QAAQ,aAAa,CAAC,QAAQ,SAAS,SAAS,EAAE,CAAC,CAAC,CACpD,KAAK,aAAa,SAAS,EAAE;EAChC;EACA,QAAQ,QAAQ,WAAW;CAC7B;AACF"}

package/esm/release/report.mjs

@@ -0,0 +1,25 @@
+import { listManifests, readLog, readPointer } from "./store.mjs";
+
+//#region ../../packages/core/src/release/report.ts
+/** Every release, newest first, with the two pointers. */
+async function listReleases(context) {
+	return {
+		current: await readPointer(context, "current"),
+		previous: await readPointer(context, "previous"),
+		releases: await listManifests(context)
+	};
+}
+/** The active release with the last entries of the release log. */
+async function releaseStatus(context, logLimit = 10) {
+	const listing = await listReleases(context);
+	return {
+		current: listing.current,
+		previous: listing.previous,
+		active: listing.releases.find((release) => release.id === listing.current) ?? null,
+		log: (await readLog(context)).slice(-logLimit)
+	};
+}
+
+//#endregion
+export { listReleases, releaseStatus };
+//# sourceMappingURL=report.mjs.map

package/esm/release/report.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/report.ts"],"sourcesContent":["import { readLog, listManifests, readPointer, type ReleaseContext } from \"./store\";\nimport type { ReleaseLogEntry, ReleaseManifest } from \"./types\";\n\nexport type ReleaseListing = {\n  current: string | null;\n  previous: string | null;\n  releases: ReleaseManifest[];\n};\n\nexport type ReleaseStatusReport = {\n  current: string | null;\n  previous: string | null;\n  active: ReleaseManifest | null;\n  log: ReleaseLogEntry[];\n};\n\n/** Every release, newest first, with the two pointers. */\nexport async function listReleases(context: ReleaseContext): Promise<ReleaseListing> {\n  return {\n    current: await readPointer(context, \"current\"),\n    previous: await readPointer(context, \"previous\"),\n    releases: await listManifests(context),\n  };\n}\n\n/** The active release with the last entries of the release log. */\nexport async function releaseStatus(\n  context: ReleaseContext,\n  logLimit = 10,\n): Promise<ReleaseStatusReport> {\n  const listing = await listReleases(context);\n\n  return {\n    current: listing.current,\n    previous: listing.previous,\n    active: listing.releases.find((release) => release.id === listing.current) ?? null,\n    log: (await readLog(context)).slice(-logLimit),\n  };\n}\n"],"mappings":";;;;AAiBA,eAAsB,aAAa,SAAkD;CACnF,OAAO;EACL,SAAS,MAAM,YAAY,SAAS,SAAS;EAC7C,UAAU,MAAM,YAAY,SAAS,UAAU;EAC/C,UAAU,MAAM,cAAc,OAAO;CACvC;AACF;;AAGA,eAAsB,cACpB,SACA,WAAW,IACmB;CAC9B,MAAM,UAAU,MAAM,aAAa,OAAO;CAE1C,OAAO;EACL,SAAS,QAAQ;EACjB,UAAU,QAAQ;EAClB,QAAQ,QAAQ,SAAS,MAAM,YAAY,QAAQ,OAAO,QAAQ,OAAO,KAAK;EAC9E,MAAM,MAAM,QAAQ,OAAO,EAAC,CAAE,MAAM,CAAC,QAAQ;CAC/C;AACF"}

package/esm/release/runner.mjs

@@ -0,0 +1,55 @@
+import { spawn } from "node:child_process";
+
+//#region ../../packages/core/src/release/runner.ts
+/**
+* Default runner: the command goes through the shell, so config entries such
+* as `NODE_ENV=production npx warlock build` work as written. Output is
+* captured (the tail is kept) rather than streamed.
+*
+* On timeout only the child this function started is signalled.
+*/
+const shellRunner = (command, options) => new Promise((resolve) => {
+	const child = spawn(command, {
+		cwd: options.cwd,
+		env: {
+			...process.env,
+			...options.env
+		},
+		shell: true,
+		stdio: [
+			"ignore",
+			"pipe",
+			"pipe"
+		]
+	});
+	let output = "";
+	let timedOut = false;
+	const append = (chunk) => {
+		output = (output + chunk.toString("utf8")).slice(-8e3);
+	};
+	child.stdout.on("data", append);
+	child.stderr.on("data", append);
+	const timer = options.timeoutMs ? setTimeout(() => {
+		timedOut = true;
+		child.kill("SIGTERM");
+	}, options.timeoutMs) : void 0;
+	child.on("error", (error) => {
+		if (timer) clearTimeout(timer);
+		resolve({
+			code: 127,
+			output: `${output}${error.message}`.slice(-8e3)
+		});
+	});
+	child.on("close", (code) => {
+		if (timer) clearTimeout(timer);
+		resolve({
+			code: code ?? 1,
+			output,
+			timedOut
+		});
+	});
+});
+
+//#endregion
+export { shellRunner };
+//# sourceMappingURL=runner.mjs.map

package/esm/release/runner.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/runner.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport type { CommandResult, CommandRunner } from \"./types\";\n\nconst OUTPUT_LIMIT = 8000;\n\n/**\n * Default runner: the command goes through the shell, so config entries such\n * as `NODE_ENV=production npx warlock build` work as written. Output is\n * captured (the tail is kept) rather than streamed.\n *\n * On timeout only the child this function started is signalled.\n */\nexport const shellRunner: CommandRunner = (command, options) =>\n  new Promise<CommandResult>((resolve) => {\n    const child = spawn(command, {\n      cwd: options.cwd,\n      env: { ...process.env, ...options.env },\n      shell: true,\n      stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    });\n    let output = \"\";\n    let timedOut = false;\n    const append = (chunk: Buffer) => {\n      output = (output + chunk.toString(\"utf8\")).slice(-OUTPUT_LIMIT);\n    };\n\n    child.stdout.on(\"data\", append);\n    child.stderr.on(\"data\", append);\n\n    const timer = options.timeoutMs\n      ? setTimeout(() => {\n          timedOut = true;\n          child.kill(\"SIGTERM\");\n        }, options.timeoutMs)\n      : undefined;\n\n    child.on(\"error\", (error) => {\n      if (timer) clearTimeout(timer);\n      resolve({ code: 127, output: `${output}${error.message}`.slice(-OUTPUT_LIMIT) });\n    });\n\n    child.on(\"close\", (code) => {\n      if (timer) clearTimeout(timer);\n      resolve({ code: code ?? 1, output, timedOut });\n    });\n  });\n"],"mappings":";;;;;;;;;;AAYA,MAAa,eAA8B,SAAS,YAClD,IAAI,SAAwB,YAAY;CACtC,MAAM,QAAQ,MAAM,SAAS;EAC3B,KAAK,QAAQ;EACb,KAAK;GAAE,GAAG,QAAQ;GAAK,GAAG,QAAQ;EAAI;EACtC,OAAO;EACP,OAAO;GAAC;GAAU;GAAQ;EAAM;CAClC,CAAC;CACD,IAAI,SAAS;CACb,IAAI,WAAW;CACf,MAAM,UAAU,UAAkB;EAChC,UAAU,SAAS,MAAM,SAAS,MAAM,EAAC,CAAE,MAAM,IAAa;CAChE;CAEA,MAAM,OAAO,GAAG,QAAQ,MAAM;CAC9B,MAAM,OAAO,GAAG,QAAQ,MAAM;CAE9B,MAAM,QAAQ,QAAQ,YAClB,iBAAiB;EACf,WAAW;EACX,MAAM,KAAK,SAAS;CACtB,GAAG,QAAQ,SAAS,IACpB;CAEJ,MAAM,GAAG,UAAU,UAAU;EAC3B,IAAI,OAAO,aAAa,KAAK;EAC7B,QAAQ;GAAE,MAAM;GAAK,QAAQ,GAAG,SAAS,MAAM,UAAU,MAAM,IAAa;EAAE,CAAC;CACjF,CAAC;CAED,MAAM,GAAG,UAAU,SAAS;EAC1B,IAAI,OAAO,aAAa,KAAK;EAC7B,QAAQ;GAAE,MAAM,QAAQ;GAAG;GAAQ;EAAS,CAAC;CAC/C,CAAC;AACH,CAAC"}

package/esm/release/semver.mjs

@@ -0,0 +1,53 @@
+//#region ../../packages/core/src/release/semver.ts
+function parseVersion(version) {
+	const match = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(version.trim());
+	if (!match) throw new Error(`"${version}" is not a valid semantic version (expected MAJOR.MINOR.PATCH).`);
+	return {
+		core: [
+			Number(match[1]),
+			Number(match[2]),
+			Number(match[3])
+		],
+		prerelease: match[4] ? match[4].split(".") : []
+	};
+}
+function comparePrerelease(a, b) {
+	if (a.length === 0 && b.length === 0) return 0;
+	if (a.length === 0) return 1;
+	if (b.length === 0) return -1;
+	for (let index = 0; index < Math.max(a.length, b.length); index++) {
+		const left = a[index];
+		const right = b[index];
+		if (left === void 0) return -1;
+		if (right === void 0) return 1;
+		if (left === right) continue;
+		const leftNumeric = /^\d+$/.test(left);
+		const rightNumeric = /^\d+$/.test(right);
+		if (leftNumeric && rightNumeric) return Number(left) < Number(right) ? -1 : 1;
+		if (leftNumeric) return -1;
+		if (rightNumeric) return 1;
+		return left < right ? -1 : 1;
+	}
+	return 0;
+}
+/**
+* Compare two semantic versions. Returns a negative number when `a < b`,
+* zero when equal and a positive number when `a > b`. Build metadata is
+* ignored. Throws on a string that is not a semantic version.
+*
+* @example
+* compareVersions("1.2.0", "1.10.0"); // < 0
+*/
+function compareVersions(a, b) {
+	const left = parseVersion(a);
+	const right = parseVersion(b);
+	for (let index = 0; index < 3; index++) {
+		const difference = left.core[index] - right.core[index];
+		if (difference !== 0) return difference < 0 ? -1 : 1;
+	}
+	return comparePrerelease(left.prerelease, right.prerelease);
+}
+
+//#endregion
+export { compareVersions };
+//# sourceMappingURL=semver.mjs.map

package/esm/release/semver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.mjs","names":[],"sources":["../../../../../../../../packages/core/src/release/semver.ts"],"sourcesContent":["type ParsedVersion = { core: [number, number, number]; prerelease: string[] };\n\nfunction parseVersion(version: string): ParsedVersion {\n  const match = /^v?(\\d+)\\.(\\d+)\\.(\\d+)(?:-([0-9A-Za-z.-]+))?(?:\\+[0-9A-Za-z.-]+)?$/.exec(\n    version.trim(),\n  );\n\n  if (!match) {\n    throw new Error(`\"${version}\" is not a valid semantic version (expected MAJOR.MINOR.PATCH).`);\n  }\n\n  return {\n    core: [Number(match[1]), Number(match[2]), Number(match[3])],\n    prerelease: match[4] ? match[4].split(\".\") : [],\n  };\n}\n\nfunction comparePrerelease(a: string[], b: string[]): number {\n  // A version without a prerelease tag is greater than one with it.\n  if (a.length === 0 && b.length === 0) return 0;\n  if (a.length === 0) return 1;\n  if (b.length === 0) return -1;\n\n  for (let index = 0; index < Math.max(a.length, b.length); index++) {\n    const left = a[index];\n    const right = b[index];\n\n    if (left === undefined) return -1;\n    if (right === undefined) return 1;\n    if (left === right) continue;\n\n    const leftNumeric = /^\\d+$/.test(left);\n    const rightNumeric = /^\\d+$/.test(right);\n\n    if (leftNumeric && rightNumeric) return Number(left) < Number(right) ? -1 : 1;\n    if (leftNumeric) return -1;\n    if (rightNumeric) return 1;\n\n    return left < right ? -1 : 1;\n  }\n\n  return 0;\n}\n\n/**\n * Compare two semantic versions. Returns a negative number when `a < b`,\n * zero when equal and a positive number when `a > b`. Build metadata is\n * ignored. Throws on a string that is not a semantic version.\n *\n * @example\n * compareVersions(\"1.2.0\", \"1.10.0\"); // < 0\n */\nexport function compareVersions(a: string, b: string): number {\n  const left = parseVersion(a);\n  const right = parseVersion(b);\n\n  for (let index = 0; index < 3; index++) {\n    const difference = left.core[index]! - right.core[index]!;\n\n    if (difference !== 0) return difference < 0 ? -1 : 1;\n  }\n\n  return comparePrerelease(left.prerelease, right.prerelease);\n}\n"],"mappings":";AAEA,SAAS,aAAa,SAAgC;CACpD,MAAM,QAAQ,qEAAqE,KACjF,QAAQ,KAAK,CACf;CAEA,IAAI,CAAC,OACH,MAAM,IAAI,MAAM,IAAI,QAAQ,gEAAgE;CAG9F,OAAO;EACL,MAAM;GAAC,OAAO,MAAM,EAAE;GAAG,OAAO,MAAM,EAAE;GAAG,OAAO,MAAM,EAAE;EAAC;EAC3D,YAAY,MAAM,KAAK,MAAM,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC;CAChD;AACF;AAEA,SAAS,kBAAkB,GAAa,GAAqB;CAE3D,IAAI,EAAE,WAAW,KAAK,EAAE,WAAW,GAAG,OAAO;CAC7C,IAAI,EAAE,WAAW,GAAG,OAAO;CAC3B,IAAI,EAAE,WAAW,GAAG,OAAO;CAE3B,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS;EACjE,MAAM,OAAO,EAAE;EACf,MAAM,QAAQ,EAAE;EAEhB,IAAI,SAAS,QAAW,OAAO;EAC/B,IAAI,UAAU,QAAW,OAAO;EAChC,IAAI,SAAS,OAAO;EAEpB,MAAM,cAAc,QAAQ,KAAK,IAAI;EACrC,MAAM,eAAe,QAAQ,KAAK,KAAK;EAEvC,IAAI,eAAe,cAAc,OAAO,OAAO,IAAI,IAAI,OAAO,KAAK,IAAI,KAAK;EAC5E,IAAI,aAAa,OAAO;EACxB,IAAI,cAAc,OAAO;EAEzB,OAAO,OAAO,QAAQ,KAAK;CAC7B;CAEA,OAAO;AACT;;;;;;;;;AAUA,SAAgB,gBAAgB,GAAW,GAAmB;CAC5D,MAAM,OAAO,aAAa,CAAC;CAC3B,MAAM,QAAQ,aAAa,CAAC;CAE5B,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS;EACtC,MAAM,aAAa,KAAK,KAAK,SAAU,MAAM,KAAK;EAElD,IAAI,eAAe,GAAG,OAAO,aAAa,IAAI,KAAK;CACrD;CAEA,OAAO,kBAAkB,KAAK,YAAY,MAAM,UAAU;AAC5D"}