Guard changeset release status

AbrahamGreenman · AbrahamGreenman · commit 326387b72ee7 · 2026-05-14T16:31:14.000-04:00
diff --git a/.changeset/bounded-bun-bootstrap-download.md b/.changeset/bounded-bun-bootstrap-download.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound the VPS deploy Bun bootstrap download with curl retry, connect, and overall timeouts, and guard curl-to-shell workflow installers in runtime coverage.
diff --git a/.changeset/deploy-apt-timeouts.md b/.changeset/deploy-apt-timeouts.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound VPS deploy apt-get bootstrap calls with retry, lock, and overall timeouts, and guard those workflow package installs in runtime coverage.
diff --git a/.changeset/deploy-caddy-auth-guard.md b/.changeset/deploy-caddy-auth-guard.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: refuse GitHub VPS deploys that would install Caddy for a resolved config with auth disabled, and guard that workflow safety check in runtime coverage.
diff --git a/.changeset/deploy-doctor-caddy-runtime.md b/.changeset/deploy-doctor-caddy-runtime.md
@@ -1,5 +1,4 @@
 ---
-"ray": patch
 ---
 
 Add a strict deploy doctor preflight that verifies Caddy is installed before relying on the generated reverse proxy config.
diff --git a/.changeset/deploy-doctor-caddyfile-validate.md b/.changeset/deploy-doctor-caddyfile-validate.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: validate the generated Caddyfile with the installed Caddy runtime during strict deploy doctor runs so reverse-proxy syntax or runtime incompatibilities fail before installing or reloading Caddy on a VPS.
diff --git a/.changeset/deploy-doctor-gguf-header.md b/.changeset/deploy-doctor-gguf-header.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: check the configured llama.cpp model file for a GGUF header during strict deploy doctor runs so empty or corrupt model artifacts fail before restarting inference services.
diff --git a/.changeset/deploy-doctor-llama-binary-probe.md b/.changeset/deploy-doctor-llama-binary-probe.md
@@ -1,5 +1,4 @@
 ---
-"ray": patch
 ---
 
 Add a strict deploy doctor probe that runs `llama-server --help` to catch wrong-architecture binaries and missing shared libraries before restarting the generated backend service.
diff --git a/.changeset/deploy-doctor-profile-architecture.md b/.changeset/deploy-doctor-profile-architecture.md
@@ -1,5 +1,4 @@
 ---
-"ray": patch
 ---
 
 Add a strict deploy doctor check that catches ARM CAX11 versus x64 CX23 sub-1B launch profile architecture mismatches before staging llama.cpp binaries.
diff --git a/.changeset/deploy-doctor-protect-system-storage.md b/.changeset/deploy-doctor-protect-system-storage.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: fail deploy doctor when async queue storage is configured under systemd ProtectSystem read-only roots so durable job writes are kept in service-writable state such as /var/lib/ray/async-queue.
diff --git a/.changeset/deploy-doctor-state-directory-storage.md b/.changeset/deploy-doctor-state-directory-storage.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: treat /var/lib/ray async queue storage as systemd StateDirectory-managed during strict deploy doctor checks so a fresh VPS is not rejected before systemd creates the service state root.
diff --git a/.changeset/deploy-doctor-statfs-block-size.md b/.changeset/deploy-doctor-statfs-block-size.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: handle Bun/macOS statfs results with a zero bsize during async queue storage checks so local smoke validation does not report false 0 MiB disk headroom warnings.
diff --git a/.changeset/deploy-doctor-systemd-host.md b/.changeset/deploy-doctor-systemd-host.md
@@ -1,5 +1,4 @@
 ---
-"ray": patch
 ---
 
 Add a strict deploy doctor preflight that verifies the target host is booted with systemd and has `systemctl` before installing generated service units.
diff --git a/.changeset/deploy-doctor-systemd-verify.md b/.changeset/deploy-doctor-systemd-verify.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: verify generated systemd unit files with systemd-analyze during strict deploy doctor runs so unsupported directives or unit syntax fail before installing or restarting Ray services on a VPS.
diff --git a/.changeset/deploy-health-curl-timeouts.md b/.changeset/deploy-health-curl-timeouts.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound VPS deploy workflow localhost health probes with curl --max-time and guard that workflow pattern in runtime coverage so readiness loops cannot hang on one stalled probe.
diff --git a/.changeset/deploy-remote-bun-helper-timeouts.md b/.changeset/deploy-remote-bun-helper-timeouts.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound remote VPS deploy Bun helper commands with explicit timeouts and guard that workflow pattern in runtime coverage.
diff --git a/.changeset/deploy-remote-bun-install-timeout.md b/.changeset/deploy-remote-bun-install-timeout.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound the remote VPS production bun install step with an overall timeout, and guard that workflow pattern in runtime coverage.
diff --git a/.changeset/deploy-rsync-timeout.md b/.changeset/deploy-rsync-timeout.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: add a transfer timeout to the VPS deploy rsync step and guard that workflow pattern in runtime coverage.
diff --git a/.changeset/deploy-secret-file-install-modes.md b/.changeset/deploy-secret-file-install-modes.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: install VPS deploy config and env files with restrictive modes at creation time, and guard the workflow against tee-based secret file writes.
diff --git a/.changeset/deploy-smoke-verbose-warnings.md b/.changeset/deploy-smoke-verbose-warnings.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: add verbose warning output to deploy-smoke and replace the stale storage-specific warning note with a generic diagnostics hint.
diff --git a/.changeset/deploy-ssh-keepalives.md b/.changeset/deploy-ssh-keepalives.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: add OpenSSH keepalives to VPS deploy SSH and rsync sessions, and guard workflow SSH timeout settings so connected deploy sessions cannot hang indefinitely after a network stall.
diff --git a/.changeset/deploy-state-chown-directories.md b/.changeset/deploy-state-chown-directories.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: avoid recursive VPS deploy chown sweeps over /var/lib/ray so large staged model files do not slow routine deploys.
diff --git a/.changeset/deploy-systemctl-timeouts.md b/.changeset/deploy-systemctl-timeouts.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: bound VPS deploy systemctl and journalctl calls with explicit timeouts, and guard those workflow patterns in runtime coverage.
diff --git a/.changeset/model-stage-apply-binary-probe.md b/.changeset/model-stage-apply-binary-probe.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: make `model:stage --apply` run the staged `llama-server --help` startup probe as the generated service identity before copying the GGUF, catching invalid binaries during apply mode instead of only in the printed command plan.
diff --git a/.changeset/model-stage-atomic-apply.md b/.changeset/model-stage-atomic-apply.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: make model-stage apply write verified llama.cpp and GGUF artifacts through same-directory temporary files before renaming them into place, avoiding partial live artifacts and final-path symlink overwrites on VPS deploys.
diff --git a/.changeset/model-stage-bun-statfs.md b/.changeset/model-stage-bun-statfs.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: handle Bun/macOS statfs results with a zero bsize during model staging apply-mode storage checks so GGUF copy headroom is measured from real filesystem values.
diff --git a/.changeset/model-stage-gguf-header.md b/.changeset/model-stage-gguf-header.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: validate GGUF source headers in model staging plans, source checks, and apply mode so corrupt model artifacts fail before being installed on a VPS.
diff --git a/.changeset/model-stage-llama-binary-probe.md b/.changeset/model-stage-llama-binary-probe.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: add a bounded `llama-server --help` startup probe to generated model staging commands so operators can catch invalid llama.cpp binaries before running deploy doctor or restarting services.
diff --git a/.changeset/model-stage-service-read.md b/.changeset/model-stage-service-read.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: verify the staged GGUF is readable by the generated service identity during model-stage apply so ownership or ancestor permission problems fail before restarting llama.cpp.
diff --git a/.changeset/model-stage-source-binary-probe.md b/.changeset/model-stage-source-binary-probe.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: make `model:stage --check-sources` run a bounded `llama-server --help` probe against the source binary so wrong-architecture or broken local binaries fail before operators review or apply staging commands.
diff --git a/.changeset/model-stage-stale-temp-cleanup.md b/.changeset/model-stage-stale-temp-cleanup.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: clean stale atomic model-stage temp files before staging artifacts so interrupted GGUF copies do not keep consuming VPS disk headroom.
diff --git a/.changeset/model-stage-sudo-gguf-checksum.md b/.changeset/model-stage-sudo-gguf-checksum.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: run generated GGUF checksum verification through sudo in model staging command plans so restrictive service-owner permissions do not make manual VPS artifact installs fail after copy.
diff --git a/.changeset/profile-timeout-headroom.md b/.changeset/profile-timeout-headroom.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Keep env-only VPS and balanced default scheduler timeouts above their backend adapter timeouts so provider timeout errors remain visible instead of being masked by the gateway timeout.
diff --git a/.changeset/runtime-async-queue-bun-statfs.md b/.changeset/runtime-async-queue-bun-statfs.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray": patch
 ---
 
 Repo-only: handle Bun/macOS statfs results with a zero bsize in the durable async queue so runtime storage-reserve checks and health snapshots keep reporting real disk headroom.
diff --git a/.changeset/systemd-swap-ceilings.md b/.changeset/systemd-swap-ceilings.md
@@ -1,5 +1,4 @@
 ---
-"@razroo/ray-deploy": patch
 ---
 
 Add generated systemd `MemorySwapMax` ceilings for the gateway and llama.cpp services so one service cannot consume the whole small-VPS swap cushion.
diff --git a/README.md b/README.md
@@ -473,7 +473,7 @@ bun run release:gate
 bun run release:check-source -- <version>
 ```
 
-`release:gate` runs lint, Prettier `--check`, tests (`bun run test` builds, runs the compiled Tap suite, then runs script tests with Bun under an outer command timeout), all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, including async queue `/health` and `/metrics` observability checks, deploy bundle smoke rendering for public profiles plus `ray.vps.json` and `ray.balanced.json`, public model staging smoke rendering, deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, and Bun pack smoke checks for the public packages. `release:check-source` verifies the linked publishable package manifests match the release tag before npm workflows publish.
+`release:gate` runs lint, Prettier `--check`, Changesets status validation, tests (`bun run test` builds, runs the compiled Tap suite, then runs script tests with Bun under an outer command timeout), all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, including async queue `/health` and `/metrics` observability checks, deploy bundle smoke rendering for public profiles plus `ray.vps.json` and `ray.balanced.json`, public model staging smoke rendering, deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, and Bun pack smoke checks for the public packages. `release:check-source` verifies the linked publishable package manifests match the release tag before npm workflows publish.
 
 ## Example config profiles
 
diff --git a/docs/branch-protection.md b/docs/branch-protection.md
@@ -22,4 +22,4 @@ GitHub branch rules are **not stored in git**; a repo admin applies them in the
 
 5. Save the ruleset.
 
-After this, contributors cannot merge PRs until lint, format check, tests, all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, public deploy bundle smoke rendering, public deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, public model staging smoke rendering, and Bun pack smoke checks match what `bun run release:gate` runs locally.
+After this, contributors cannot merge PRs until lint, format check, Changesets status validation, tests, all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, public deploy bundle smoke rendering, public deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, public model staging smoke rendering, and Bun pack smoke checks match what `bun run release:gate` runs locally.
diff --git a/docs/npm-publishing.md b/docs/npm-publishing.md
@@ -2,7 +2,7 @@
 
 Ray publishes **library** packages from this monorepo for TypeScript consumers. The gateway app (`apps/gateway`) stays source-first in the repo and is not published as an npm CLI in this layout.
 
-Push-time automation follows [**geometra**](https://github.com/razroo/geometra)-style naming: [**Quality checks**](../.github/workflows/quality.yml) runs a single job **`quality`** that executes **`bun run release:gate`** under Node 20 and Node 22. The gate covers lint, format check, full test build, all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, public deploy bundle smoke rendering, public deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, public model staging smoke rendering, and Bun pack smoke checks. The guarded **`bun run release:github`** helper follows the **`iso`** pattern to create linked package tags and GitHub Releases ([**ray-core-release.yml**](../.github/workflows/ray-core-release.yml), [**ray-sdk-release.yml**](../.github/workflows/ray-sdk-release.yml)); publish workflows are additionally gated to the canonical `razroo/ray` repository, verify the release tag commit is reachable from `origin/main`, and poll for the **`quality`** check run before `npm publish`, same idea as geometra's release workflow waiting on **`quality`**.
+Push-time automation follows [**geometra**](https://github.com/razroo/geometra)-style naming: [**Quality checks**](../.github/workflows/quality.yml) runs a single job **`quality`** that executes **`bun run release:gate`** under Node 20 and Node 22. The gate covers lint, format check, Changesets status validation, full test build, all checked-in config validation, auth-backed public config validation, automated tiny gateway inference (`bun run smoke:tiny`), public safety (`bun run smoke:tiny:public`), async queue (`bun run smoke:tiny:async`), and public async queue (`bun run smoke:tiny:public-async`) smokes, public deploy bundle smoke rendering, public deploy package-script coverage, Bun-first package, workflow, runtime-doc coverage, Markdown local-link validation, public model staging smoke rendering, and Bun pack smoke checks. The guarded **`bun run release:github`** helper follows the **`iso`** pattern to create linked package tags and GitHub Releases ([**ray-core-release.yml**](../.github/workflows/ray-core-release.yml), [**ray-sdk-release.yml**](../.github/workflows/ray-sdk-release.yml)); publish workflows are additionally gated to the canonical `razroo/ray` repository, verify the release tag commit is reachable from `origin/main`, and poll for the **`quality`** check run before `npm publish`, same idea as geometra's release workflow waiting on **`quality`**.
 
 ## Packages
 
diff --git a/package.json b/package.json
@@ -83,7 +83,7 @@
     "model:stage:1b:8gb:generic": "bun ./scripts/model-stage.ts --config ./examples/config/ray.1b.8gb.generic.public.json",
     "model:stage:hetzner-email-ai": "bun ./scripts/model-stage.ts --config ./examples/config/ray.hetzner-cx23-qwen0.6b.public.json",
     "test": "bun run build && bun ./scripts/test.mjs",
-    "release:gate": "bun run lint && bun run format:check && bun run test && bun run validate:config:all && RAY_API_KEYS=smoke bun run validate:config:public && bun run smoke:tiny && bun run smoke:tiny:public && bun run smoke:tiny:async && bun run smoke:tiny:public-async && bun run deploy:smoke && bun run model:stage:smoke && bun run deploy:scripts && bun run package:runtime && bun run docs:links && bun run pack:check",
+    "release:gate": "bun run lint && bun run format:check && bun run changeset:status && bun run test && bun run validate:config:all && RAY_API_KEYS=smoke bun run validate:config:public && bun run smoke:tiny && bun run smoke:tiny:public && bun run smoke:tiny:async && bun run smoke:tiny:public-async && bun run deploy:smoke && bun run model:stage:smoke && bun run deploy:scripts && bun run package:runtime && bun run docs:links && bun run pack:check",
     "release:check-source": "bun ./scripts/release/check-source.mjs",
     "release:verify-npm": "bun ./scripts/release/verify-npm.mjs",
     "release:github": "bash scripts/release/gh-release.sh",
diff --git a/scripts/package-runtime-coverage.test.ts b/scripts/package-runtime-coverage.test.ts
@@ -1096,6 +1096,7 @@ test("validatePackageRuntimeCoverage catches non-Bun scripts and lockfiles", asy
   assert.equal(summary.ok, false);
   assert.ok(codes.includes("root_package_manager_not_bun"));
   assert.ok(codes.includes("root_bun_engine_missing"));
+  assert.ok(codes.includes("release_gate_changeset_status_missing"));
   assert.ok(codes.includes("release_gate_public_auth_validate_missing"));
   assert.ok(codes.includes("release_gate_tiny_gateway_smoke_missing"));
   assert.ok(codes.includes("release_gate_tiny_public_smoke_missing"));
@@ -1495,6 +1496,7 @@ test("validatePackageRuntimeCoverage matches release gate smoke steps exactly",
   assert.ok(codes.includes("release_gate_tiny_gateway_smoke_missing"));
   assert.ok(codes.includes("release_gate_tiny_public_smoke_missing"));
   assert.ok(codes.includes("release_gate_tiny_async_smoke_missing"));
+  assert.ok(codes.includes("release_gate_changeset_status_missing"));
   assert.ok(!codes.includes("release_gate_tiny_public_async_smoke_missing"));
   assert.ok(!codes.includes("release_gate_public_auth_validate_missing"));
 });
@@ -1517,6 +1519,7 @@ test("validatePackageRuntimeCoverage requires release docs to list every tiny sm
         },
         scripts: {
           "release:gate": [
+            "bun run changeset:status",
             "RAY_API_KEYS=smoke bun run validate:config:public",
             "bun run smoke:tiny",
             "bun run smoke:tiny:public",
diff --git a/scripts/package-runtime-coverage.ts b/scripts/package-runtime-coverage.ts
@@ -645,6 +645,17 @@ function validateScripts(
   }
 
   const releaseGate = scripts["release:gate"];
+  if (releaseGate !== undefined && !releaseGateHasStep(releaseGate, "bun run changeset:status")) {
+    diagnostics.push({
+      level: "error",
+      code: "release_gate_changeset_status_missing",
+      packagePath: packageJsonPath,
+      scriptName: "release:gate",
+      message:
+        'Script "release:gate" must run bun run changeset:status so stale or invalid release metadata cannot block the next version step.',
+    });
+  }
+
   if (
     releaseGate !== undefined &&
     !releaseGateHasStep(releaseGate, "RAY_API_KEYS=smoke bun run validate:config:public")

-Original file line number
+Diff line change
@@ @@ -1,5 +1,4 @@ @@
 ---
 -"@razroo/ray": patch
 ---
 Repo-only: bound the VPS deploy Bun bootstrap download with curl retry, connect, and overall timeouts, and guard curl-to-shell workflow installers in runtime coverage.