@datadog/datadog-ci-plugin-terraform 0.0.1

package/README.md

@@ -0,0 +1,88 @@
+# Terraform command
+
+This command lets you upload Terraform runtime artifacts (plan and state JSON files) to the Datadog CI intake endpoint for enhanced cloud-to-code mapping and policy evaluation.
+
+## Usage
+
+```bash
+datadog-ci terraform upload [plan|state] <path/to/terraform-file.json> [additional-files...]
+```
+
+### Arguments
+
+- `plan` or `state`: The type of Terraform artifact being uploaded
+- `<path>`: Path to one or more Terraform JSON files (space-separated)
+
+### Optional arguments
+
+- `--repo-id` (optional): Repository identifier override (e.g., github.com/datadog/my-repo)
+- `--dry-run` (default: `false`): Run the command without uploading any data to Datadog
+- `--verbose` (default: `false`): Enable verbose logging
+- `--skip-git-metadata-upload` (default: `false`): Skip the upload of git metadata
+
+### Environment variables
+
+The following environment variables are required:
+
+- `DD_API_KEY`: the API key to use
+
+Optional environment variables:
+
+- `DD_SITE`: the [Datadog site](https://docs.datadoghq.com/getting_started/site/#access-the-datadog-site) (default: `datadoghq.com`)
+- `DD_GIT_REPOSITORY_URL`: Override for repository URL
+- `DD_REPOSITORY_URL`: Alternative override for repository URL
+
+### Examples
+
+```bash
+# Upload a single Terraform plan file
+datadog-ci terraform upload plan ./terraform-plan.json
+
+# Upload multiple Terraform plan files
+datadog-ci terraform upload plan ./plan1.json ./plan2.json ./plan3.json
+
+# Upload multiple plan files using glob expansion
+datadog-ci terraform upload plan ./plans/*.json
+
+# Upload a Terraform state file
+datadog-ci terraform upload state ./terraform.tfstate
+
+# Upload with manual repo-id override
+datadog-ci terraform upload plan ./terraform-plan.json --repo-id "github.com/my-org/my-repo"
+
+# Dry run mode
+datadog-ci terraform upload plan ./terraform-plan.json --dry-run
+
+# Upload multiple files with verbose logging
+datadog-ci terraform upload plan ./plan1.json ./plan2.json --verbose
+```
+
+### Git context resolution
+
+The Git context is resolved in the following order of priority:
+
+1. CI environment variables
+2. Current Git repository metadata
+3. Override environment variables (`DD_GIT_*` variables)
+
+The repository identifier (`repo_id`) is resolved in this order:
+
+1. `--repo-id` flag value
+2. `DD_GIT_REPOSITORY_URL` or `DD_REPOSITORY_URL` environment variable
+3. Git metadata from the current repository
+
+## Development
+
+To test locally, run:
+
+```bash
+yarn launch terraform upload plan /path/to/terraform-plan.json
+```
+
+## Notes
+
+- The command accepts one or more files per invocation. All files must be of the same artifact type (plan or state).
+- Files are automatically gzipped before upload.
+- The command computes a SHA256 hash of each file's content.
+- No client-side validation or filtering of file content is performed (as per RFC requirements).
+- Git metadata is synced only once per invocation, even when uploading multiple files.

package/dist/api.d.ts

@@ -0,0 +1,8 @@
+import type { AxiosPromise, AxiosRequestConfig, AxiosResponse } from 'axios';
+import { TerraformArtifactPayload } from './interfaces';
+export declare const intakeUrl: string;
+export declare const apiUrl: string;
+export declare const uploadTerraformArtifact: (request: (args: AxiosRequestConfig) => AxiosPromise<AxiosResponse>) => (payload: TerraformArtifactPayload) => Promise<AxiosResponse<AxiosResponse<any, any, {}>, any, {}>>;
+export declare const apiConstructor: (baseIntakeUrl: string, apiKey: string) => {
+    uploadTerraformArtifact: (payload: TerraformArtifactPayload) => Promise<AxiosResponse<AxiosResponse<any, any, {}>, any, {}>>;
+};

package/dist/api.js

@@ -0,0 +1,66 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiConstructor = exports.uploadTerraformArtifact = exports.apiUrl = exports.intakeUrl = void 0;
+const zlib_1 = require("zlib");
+const api_1 = require("@datadog/datadog-ci-base/helpers/api");
+const utils_1 = require("@datadog/datadog-ci-base/helpers/utils");
+const form_data_1 = __importDefault(require("form-data"));
+const maxBodyLength = Infinity;
+exports.intakeUrl = (0, api_1.getIntakeUrl)('ci-intake');
+exports.apiUrl = (0, api_1.getApiUrl)();
+const uploadTerraformArtifact = (request) => (payload) => __awaiter(void 0, void 0, void 0, function* () {
+    const form = new form_data_1.default();
+    // Build event envelope according to RFC spec
+    const event = Object.assign({ type: 'terraform_artifact', track_type: 'ciiac', schema_version: '1.0', artifact_type: payload.artifactType, artifact_format: 'terraform-json', artifact_sha256: payload.artifactSha256, artifact_size_bytes: payload.artifactSizeBytes }, payload.spanTags);
+    // Add repo_id if available
+    if (payload.repoId) {
+        event.repo_id = payload.repoId;
+    }
+    // Append event JSON
+    form.append('event', JSON.stringify(event), { filename: 'event.json' });
+    // Append gzipped file content
+    const gzippedContent = yield gzipContent(payload.fileContent);
+    form.append('iac_file', gzippedContent, {
+        filename: `${payload.artifactType}.json.gz`,
+        contentType: 'application/gzip',
+    });
+    return request({
+        data: form,
+        headers: form.getHeaders(),
+        maxBodyLength,
+        method: 'POST',
+        url: 'api/v2/ciiac',
+    });
+});
+exports.uploadTerraformArtifact = uploadTerraformArtifact;
+const gzipContent = (content) => {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        const gzip = (0, zlib_1.createGzip)();
+        gzip.on('data', (chunk) => chunks.push(chunk));
+        gzip.on('end', () => resolve(Buffer.concat(chunks)));
+        gzip.on('error', reject);
+        gzip.write(content);
+        gzip.end();
+    });
+};
+const apiConstructor = (baseIntakeUrl, apiKey) => {
+    const requestIntake = (0, utils_1.getRequestBuilder)({ baseUrl: baseIntakeUrl, apiKey });
+    return {
+        uploadTerraformArtifact: (0, exports.uploadTerraformArtifact)(requestIntake),
+    };
+};
+exports.apiConstructor = apiConstructor;
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+BAA+B;AAI/B,8DAA4E;AAC5E,kEAAwE;AACxE,0DAAgC;AAIhC,MAAM,aAAa,GAAG,QAAQ,CAAA;AAEjB,QAAA,SAAS,GAAG,IAAA,kBAAY,EAAC,WAAW,CAAC,CAAA;AACrC,QAAA,MAAM,GAAG,IAAA,eAAS,GAAE,CAAA;AAE1B,MAAM,uBAAuB,GAClC,CAAC,OAAkE,EAAE,EAAE,CAAC,CAAO,OAAiC,EAAE,EAAE;IAClH,MAAM,IAAI,GAAG,IAAI,mBAAQ,EAAE,CAAA;IAE3B,6CAA6C;IAC7C,MAAM,KAAK,mBACT,IAAI,EAAE,oBAAoB,EAC1B,UAAU,EAAE,OAAO,EACnB,cAAc,EAAE,KAAK,EACrB,aAAa,EAAE,OAAO,CAAC,YAAY,EACnC,eAAe,EAAE,gBAAgB,EACjC,eAAe,EAAE,OAAO,CAAC,cAAc,EACvC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,IAC3C,OAAO,CAAC,QAAQ,CACpB,CAAA;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;KAC/B;IAED,oBAAoB;IACpB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAC,QAAQ,EAAE,YAAY,EAAC,CAAC,CAAA;IAErE,8BAA8B;IAC9B,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE;QACtC,QAAQ,EAAE,GAAG,OAAO,CAAC,YAAY,UAAU;QAC3C,WAAW,EAAE,kBAAkB;KAChC,CAAC,CAAA;IAEF,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE;QAC1B,aAAa;QACb,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,cAAc;KACpB,CAAC,CAAA;AACJ,CAAC,CAAA,CAAA;AAtCU,QAAA,uBAAuB,2BAsCjC;AAEH,MAAM,WAAW,GAAG,CAAC,OAAe,EAAmB,EAAE;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,IAAI,GAAG,IAAA,iBAAU,GAAE,CAAA;QAEzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9C,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACpD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAExB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,GAAG,EAAE,CAAA;IACZ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAEM,MAAM,cAAc,GAAG,CAAC,aAAqB,EAAE,MAAc,EAAE,EAAE;IACtE,MAAM,aAAa,GAAG,IAAA,yBAAiB,EAAC,EAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAC,CAAC,CAAA;IAEzE,OAAO;QACL,uBAAuB,EAAE,IAAA,+BAAuB,EAAC,aAAa,CAAC;KAChE,CAAA;AACH,CAAC,CAAA;AANY,QAAA,cAAc,kBAM1B"}

package/dist/commands/upload.d.ts

@@ -0,0 +1,11 @@
+import { TerraformUploadCommand } from '@datadog/datadog-ci-base/commands/terraform/upload';
+export declare class PluginCommand extends TerraformUploadCommand {
+    private config;
+    private logger;
+    private git;
+    execute(): Promise<1 | 0>;
+    private syncGitMetadata;
+    private uploadToGitDB;
+    private uploadTerraformArtifact;
+    private getSpanTags;
+}

package/dist/commands/upload.js

@@ -0,0 +1,170 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PluginCommand = void 0;
+const fs_1 = __importDefault(require("fs"));
+const git_1 = require("@datadog/datadog-ci-base/commands/git-metadata/git");
+const gitdb_1 = require("@datadog/datadog-ci-base/commands/git-metadata/gitdb");
+const library_1 = require("@datadog/datadog-ci-base/commands/git-metadata/library");
+const upload_1 = require("@datadog/datadog-ci-base/commands/terraform/upload");
+const constants_1 = require("@datadog/datadog-ci-base/constants");
+const ci_1 = require("@datadog/datadog-ci-base/helpers/ci");
+const env_1 = require("@datadog/datadog-ci-base/helpers/env");
+const fips_1 = require("@datadog/datadog-ci-base/helpers/fips");
+const format_git_span_data_1 = require("@datadog/datadog-ci-base/helpers/git/format-git-span-data");
+const id_1 = __importDefault(require("@datadog/datadog-ci-base/helpers/id"));
+const logger_1 = require("@datadog/datadog-ci-base/helpers/logger");
+const retry_1 = require("@datadog/datadog-ci-base/helpers/retry");
+const user_provided_git_1 = require("@datadog/datadog-ci-base/helpers/user-provided-git");
+const utils_1 = require("@datadog/datadog-ci-base/helpers/utils");
+const chalk_1 = __importDefault(require("chalk"));
+const api_1 = require("../api");
+const renderer_1 = require("../renderer");
+const utils_2 = require("../utils");
+class PluginCommand extends upload_1.TerraformUploadCommand {
+    constructor() {
+        var _a, _b;
+        super(...arguments);
+        this.config = {
+            apiKey: process.env.DATADOG_API_KEY || process.env.DD_API_KEY,
+            fips: (_a = (0, env_1.toBoolean)(process.env[constants_1.FIPS_ENV_VAR])) !== null && _a !== void 0 ? _a : false,
+            fipsIgnoreError: (_b = (0, env_1.toBoolean)(process.env[constants_1.FIPS_IGNORE_ERROR_ENV_VAR])) !== null && _b !== void 0 ? _b : false,
+        };
+        this.logger = new logger_1.Logger((s) => this.context.stdout.write(s), logger_1.LogLevel.INFO);
+        this.git = undefined;
+    }
+    execute() {
+        return __awaiter(this, void 0, void 0, function* () {
+            (0, fips_1.enableFips)(this.fips || this.config.fips, this.fipsIgnoreError || this.config.fipsIgnoreError);
+            this.logger.setLogLevel(this.verbose ? logger_1.LogLevel.DEBUG : logger_1.LogLevel.INFO);
+            this.logger.setShouldIncludeTime(this.verbose);
+            // Validate API key
+            if (!this.config.apiKey) {
+                this.logger.error(`Neither ${chalk_1.default.red.bold('DATADOG_API_KEY')} nor ${chalk_1.default.red.bold('DD_API_KEY')} is in your environment.`);
+                return 1;
+            }
+            // Initialize git if in a repository
+            const isGitRepository = yield (0, library_1.isGitRepo)();
+            if (isGitRepository) {
+                this.git = yield (0, git_1.newSimpleGit)();
+            }
+            // Sync git metadata if needed (only once for all files)
+            if (!this.skipGitMetadataUpload && isGitRepository) {
+                yield this.syncGitMetadata();
+            }
+            // Upload terraform artifacts
+            let hasFailures = false;
+            for (const filePath of this.filePaths) {
+                const exitCode = yield this.uploadTerraformArtifact(filePath);
+                if (exitCode !== 0) {
+                    hasFailures = true;
+                }
+            }
+            return hasFailures ? 1 : 0;
+        });
+    }
+    syncGitMetadata() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const traceId = (0, id_1.default)();
+            const requestBuilder = (0, utils_1.getRequestBuilder)({
+                baseUrl: api_1.apiUrl,
+                apiKey: this.config.apiKey,
+                headers: new Map([
+                    ['x-datadog-trace-id', traceId],
+                    ['x-datadog-parent-id', traceId],
+                ]),
+            });
+            try {
+                this.logger.info(`${this.dryRun ? '[DRYRUN] ' : ''}Syncing git metadata...`);
+                let elapsed = 0;
+                if (!this.dryRun) {
+                    elapsed = yield (0, utils_1.timedExecAsync)(this.uploadToGitDB.bind(this), { requestBuilder });
+                }
+                this.logger.info((0, renderer_1.renderSuccessfulGitDBSync)(this.dryRun, elapsed));
+            }
+            catch (err) {
+                this.logger.info((0, renderer_1.renderFailedGitDBSync)(err));
+            }
+        });
+    }
+    uploadToGitDB(opts) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.git) {
+                return;
+            }
+            yield (0, gitdb_1.uploadToGitDB)(this.logger, opts.requestBuilder, this.git, this.dryRun);
+        });
+    }
+    uploadTerraformArtifact(filePath) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.logger.info((0, renderer_1.renderCommandInfo)(this.artifactType, filePath, this.dryRun));
+            // Validate file exists and is readable
+            if (!(0, utils_2.validateFilePath)(filePath)) {
+                this.context.stderr.write((0, renderer_1.renderInvalidFile)(filePath, 'File not found or not readable'));
+                return 1;
+            }
+            // Read and validate JSON structure
+            const fileContent = fs_1.default.readFileSync(filePath, 'utf8');
+            if (!(0, utils_2.validateJsonStructure)(fileContent)) {
+                this.context.stderr.write((0, renderer_1.renderInvalidFile)(filePath, 'Invalid JSON structure'));
+                return 1;
+            }
+            // Compute file hash and size
+            const artifactSha256 = (0, utils_2.computeFileHash)(fileContent);
+            const artifactSizeBytes = Buffer.byteLength(fileContent, 'utf8');
+            const spanTags = yield this.getSpanTags();
+            const api = (0, api_1.apiConstructor)(api_1.intakeUrl, this.config.apiKey);
+            // Build payload
+            const payload = {
+                artifactType: this.artifactType,
+                filePath,
+                fileContent,
+                artifactSha256,
+                artifactSizeBytes,
+                spanTags,
+                repoId: (0, utils_2.resolveRepoId)(this.repoId, spanTags),
+            };
+            try {
+                // Upload
+                if (this.dryRun) {
+                    this.logger.info((0, renderer_1.renderDryRunUpload)(payload));
+                }
+                else {
+                    yield (0, retry_1.retryRequest)(() => api.uploadTerraformArtifact(payload), {
+                        onRetry: (e, attempt) => {
+                            this.logger.warn(`Retry attempt ${attempt} for ${filePath}: ${e.message}`);
+                        },
+                        retries: 5,
+                    });
+                    this.logger.info((0, renderer_1.renderSuccessfulUpload)(filePath));
+                }
+                return 0;
+            }
+            catch (error) {
+                this.context.stderr.write((0, renderer_1.renderFailedUpload)(filePath, error));
+                return 1;
+            }
+        });
+    }
+    getSpanTags() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const ciSpanTags = (0, ci_1.getCISpanTags)();
+            const gitSpanTags = yield (0, format_git_span_data_1.getGitMetadata)();
+            const userGitSpanTags = (0, user_provided_git_1.getUserGitSpanTags)();
+            return Object.assign(Object.assign(Object.assign({}, gitSpanTags), ciSpanTags), userGitSpanTags);
+        });
+    }
+}
+exports.PluginCommand = PluginCommand;
+//# sourceMappingURL=upload.js.map

package/dist/commands/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/commands/upload.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,4CAAmB;AAEnB,4EAA+E;AAC/E,gFAAkF;AAClF,oFAAgF;AAChF,+EAAyF;AACzF,kEAA0F;AAC1F,4DAAiE;AACjE,8DAA8D;AAC9D,gEAAgE;AAChE,oGAAwF;AACxF,6EAAoD;AAEpD,oEAAwE;AACxE,kEAAmE;AACnE,0FAAqF;AACrF,kEAAwF;AACxF,kDAAyB;AAGzB,gCAAwD;AAExD,0CAQoB;AACpB,oCAAgG;AAEhG,MAAa,aAAc,SAAQ,+BAAsB;IAAzD;;;QACU,WAAM,GAAG;YACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;YAC7D,IAAI,EAAE,MAAA,IAAA,eAAS,EAAC,OAAO,CAAC,GAAG,CAAC,wBAAY,CAAC,CAAC,mCAAI,KAAK;YACnD,eAAe,EAAE,MAAA,IAAA,eAAS,EAAC,OAAO,CAAC,GAAG,CAAC,qCAAyB,CAAC,CAAC,mCAAI,KAAK;SAC5E,CAAA;QAEO,WAAM,GAAW,IAAI,eAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,iBAAQ,CAAC,IAAI,CAAC,CAAA;QAEvF,QAAG,GAAoC,SAAS,CAAA;IA4I1D,CAAC;IA1Ic,OAAO;;YAClB,IAAA,iBAAU,EAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;YAE9F,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAQ,CAAC,IAAI,CAAC,CAAA;YACtE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAE9C,mBAAmB;YACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,WAAW,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAC3G,CAAA;gBAED,OAAO,CAAC,CAAA;aACT;YAED,oCAAoC;YACpC,MAAM,eAAe,GAAG,MAAM,IAAA,mBAAS,GAAE,CAAA;YACzC,IAAI,eAAe,EAAE;gBACnB,IAAI,CAAC,GAAG,GAAG,MAAM,IAAA,kBAAY,GAAE,CAAA;aAChC;YAED,wDAAwD;YACxD,IAAI,CAAC,IAAI,CAAC,qBAAqB,IAAI,eAAe,EAAE;gBAClD,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;aAC7B;YAED,6BAA6B;YAC7B,IAAI,WAAW,GAAG,KAAK,CAAA;YACvB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE;gBACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;gBAC7D,IAAI,QAAQ,KAAK,CAAC,EAAE;oBAClB,WAAW,GAAG,IAAI,CAAA;iBACnB;aACF;YAED,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;KAAA;IAEa,eAAe;;YAC3B,MAAM,OAAO,GAAG,IAAA,YAAE,GAAE,CAAA;YACpB,MAAM,cAAc,GAAG,IAAA,yBAAiB,EAAC;gBACvC,OAAO,EAAE,YAAM;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAO;gBAC3B,OAAO,EAAE,IAAI,GAAG,CAAC;oBACf,CAAC,oBAAoB,EAAE,OAAO,CAAC;oBAC/B,CAAC,qBAAqB,EAAE,OAAO,CAAC;iBACjC,CAAC;aACH,CAAC,CAAA;YAEF,IAAI;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAA;gBAC5E,IAAI,OAAO,GAAG,CAAC,CAAA;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAChB,OAAO,GAAG,MAAM,IAAA,sBAAc,EAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAC,cAAc,EAAC,CAAC,CAAA;iBAChF;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,oCAAyB,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;aAClE;YAAC,OAAO,GAAG,EAAE;gBACZ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,gCAAqB,EAAC,GAAG,CAAC,CAAC,CAAA;aAC7C;QACH,CAAC;KAAA;IAEa,aAAa,CAAC,IAA2B;;YACrD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACb,OAAM;aACP;YAED,MAAM,IAAA,qBAAa,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9E,CAAC;KAAA;IAEa,uBAAuB,CAAC,QAAgB;;YACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,4BAAiB,EAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;YAE7E,uCAAuC;YACvC,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,CAAC,EAAE;gBAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,4BAAiB,EAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC,CAAA;gBAExF,OAAO,CAAC,CAAA;aACT;YAED,mCAAmC;YACnC,MAAM,WAAW,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACrD,IAAI,CAAC,IAAA,6BAAqB,EAAC,WAAW,CAAC,EAAE;gBACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,4BAAiB,EAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAA;gBAEhF,OAAO,CAAC,CAAA;aACT;YAED,6BAA6B;YAC7B,MAAM,cAAc,GAAG,IAAA,uBAAe,EAAC,WAAW,CAAC,CAAA;YACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;YAEhE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;YACzC,MAAM,GAAG,GAAG,IAAA,oBAAc,EAAC,eAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAO,CAAC,CAAA;YAE1D,gBAAgB;YAChB,MAAM,OAAO,GAA6B;gBACxC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ;gBACR,WAAW;gBACX,cAAc;gBACd,iBAAiB;gBACjB,QAAQ;gBACR,MAAM,EAAE,IAAA,qBAAa,EAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;aAC7C,CAAA;YAED,IAAI;gBACF,SAAS;gBACT,IAAI,IAAI,CAAC,MAAM,EAAE;oBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,6BAAkB,EAAC,OAAO,CAAC,CAAC,CAAA;iBAC9C;qBAAM;oBACL,MAAM,IAAA,oBAAY,EAAC,GAAG,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE;wBAC7D,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE;4BACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,OAAO,QAAQ,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;wBAC5E,CAAC;wBACD,OAAO,EAAE,CAAC;qBACX,CAAC,CAAA;oBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAA;iBACnD;gBAED,OAAO,CAAC,CAAA;aACT;YAAC,OAAO,KAAK,EAAE;gBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,6BAAkB,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;gBAE9D,OAAO,CAAC,CAAA;aACT;QACH,CAAC;KAAA;IAEa,WAAW;;YACvB,MAAM,UAAU,GAAG,IAAA,kBAAa,GAAE,CAAA;YAClC,MAAM,WAAW,GAAG,MAAM,IAAA,qCAAc,GAAE,CAAA;YAC1C,MAAM,eAAe,GAAG,IAAA,sCAAkB,GAAE,CAAA;YAE5C,qDACK,WAAW,GACX,UAAU,GACV,eAAe,EACnB;QACH,CAAC;KAAA;CACF;AArJD,sCAqJC"}

package/dist/interfaces.d.ts

@@ -0,0 +1,14 @@
+import type { AxiosPromise, AxiosResponse } from 'axios';
+import { SpanTags } from '@datadog/datadog-ci-base/helpers/interfaces';
+export interface TerraformArtifactPayload {
+    artifactType: 'plan' | 'state';
+    filePath: string;
+    fileContent: string;
+    artifactSha256: string;
+    artifactSizeBytes: number;
+    spanTags: SpanTags;
+    repoId?: string;
+}
+export interface APIHelper {
+    uploadTerraformArtifact(payload: TerraformArtifactPayload): AxiosPromise<AxiosResponse>;
+}

package/dist/interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../src/interfaces.ts"],"names":[],"mappings":""}

package/dist/renderer.d.ts

@@ -0,0 +1,8 @@
+import { TerraformArtifactPayload } from './interfaces';
+export declare const renderCommandInfo: (artifactType: string, filePath: string, dryRun: boolean) => string;
+export declare const renderDryRunUpload: (payload: TerraformArtifactPayload) => string;
+export declare const renderSuccessfulUpload: (filePath: string) => string;
+export declare const renderFailedUpload: (filePath: string, error: any) => string;
+export declare const renderInvalidFile: (filePath: string, reason: string) => string;
+export declare const renderSuccessfulGitDBSync: (dryRun: boolean, elapsed: number) => string;
+export declare const renderFailedGitDBSync: (error: any) => string;

package/dist/renderer.js

@@ -0,0 +1,41 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderFailedGitDBSync = exports.renderSuccessfulGitDBSync = exports.renderInvalidFile = exports.renderFailedUpload = exports.renderSuccessfulUpload = exports.renderDryRunUpload = exports.renderCommandInfo = void 0;
+const renderer_1 = require("@datadog/datadog-ci-base/helpers/renderer");
+const chalk_1 = __importDefault(require("chalk"));
+const renderCommandInfo = (artifactType, filePath, dryRun) => {
+    const prefix = dryRun ? `${renderer_1.dryRunTag} ` : '';
+    return `${prefix}Uploading Terraform ${artifactType} file: ${filePath}\n`;
+};
+exports.renderCommandInfo = renderCommandInfo;
+const renderDryRunUpload = (payload) => {
+    return `${renderer_1.dryRunTag} Would upload: ${payload.filePath}\n`;
+};
+exports.renderDryRunUpload = renderDryRunUpload;
+const renderSuccessfulUpload = (filePath) => {
+    return `${renderer_1.successCheckmarkTag} Successfully uploaded: ${filePath}\n`;
+};
+exports.renderSuccessfulUpload = renderSuccessfulUpload;
+const renderFailedUpload = (filePath, error) => {
+    const message = (error === null || error === void 0 ? void 0 : error.message) || 'Unknown error';
+    return `${renderer_1.failCrossTag} Failed to upload ${filePath}: ${message}\n`;
+};
+exports.renderFailedUpload = renderFailedUpload;
+const renderInvalidFile = (filePath, reason) => {
+    return `${renderer_1.failCrossTag} Invalid file ${filePath}: ${reason}\n`;
+};
+exports.renderInvalidFile = renderInvalidFile;
+const renderSuccessfulGitDBSync = (dryRun, elapsed) => {
+    const prefix = dryRun ? `${renderer_1.dryRunTag} ` : '';
+    return `${prefix}${renderer_1.successCheckmarkTag} Git metadata synced (${elapsed}ms)\n`;
+};
+exports.renderSuccessfulGitDBSync = renderSuccessfulGitDBSync;
+const renderFailedGitDBSync = (error) => {
+    const message = (error === null || error === void 0 ? void 0 : error.message) || 'Unknown error';
+    return chalk_1.default.yellow(`⚠ Failed to sync git metadata: ${message}\n`);
+};
+exports.renderFailedGitDBSync = renderFailedGitDBSync;
+//# sourceMappingURL=renderer.js.map

package/dist/renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../src/renderer.ts"],"names":[],"mappings":";;;;;;AAAA,wEAAsG;AACtG,kDAAyB;AAIlB,MAAM,iBAAiB,GAAG,CAAC,YAAoB,EAAE,QAAgB,EAAE,MAAe,EAAU,EAAE;IACnG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE5C,OAAO,GAAG,MAAM,uBAAuB,YAAY,UAAU,QAAQ,IAAI,CAAA;AAC3E,CAAC,CAAA;AAJY,QAAA,iBAAiB,qBAI7B;AAEM,MAAM,kBAAkB,GAAG,CAAC,OAAiC,EAAU,EAAE;IAC9E,OAAO,GAAG,oBAAS,kBAAkB,OAAO,CAAC,QAAQ,IAAI,CAAA;AAC3D,CAAC,CAAA;AAFY,QAAA,kBAAkB,sBAE9B;AAEM,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAU,EAAE;IACjE,OAAO,GAAG,8BAAmB,2BAA2B,QAAQ,IAAI,CAAA;AACtE,CAAC,CAAA;AAFY,QAAA,sBAAsB,0BAElC;AAEM,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,KAAU,EAAU,EAAE;IACzE,MAAM,OAAO,GAAG,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,eAAe,CAAA;IAEjD,OAAO,GAAG,uBAAY,qBAAqB,QAAQ,KAAK,OAAO,IAAI,CAAA;AACrE,CAAC,CAAA;AAJY,QAAA,kBAAkB,sBAI9B;AAEM,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAU,EAAE;IAC5E,OAAO,GAAG,uBAAY,iBAAiB,QAAQ,KAAK,MAAM,IAAI,CAAA;AAChE,CAAC,CAAA;AAFY,QAAA,iBAAiB,qBAE7B;AAEM,MAAM,yBAAyB,GAAG,CAAC,MAAe,EAAE,OAAe,EAAU,EAAE;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,oBAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE5C,OAAO,GAAG,MAAM,GAAG,8BAAmB,yBAAyB,OAAO,OAAO,CAAA;AAC/E,CAAC,CAAA;AAJY,QAAA,yBAAyB,6BAIrC;AAEM,MAAM,qBAAqB,GAAG,CAAC,KAAU,EAAU,EAAE;IAC1D,MAAM,OAAO,GAAG,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,eAAe,CAAA;IAEjD,OAAO,eAAK,CAAC,MAAM,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAA;AACpE,CAAC,CAAA;AAJY,QAAA,qBAAqB,yBAIjC"}

package/dist/utils.d.ts

@@ -0,0 +1,11 @@
+import { SpanTags } from '@datadog/datadog-ci-base/helpers/interfaces';
+export declare const validateFilePath: (filePath: string) => boolean;
+export declare const validateJsonStructure: (content: string) => boolean;
+export declare const computeFileHash: (content: string) => string;
+/**
+ * Resolve repo_id with the following priority:
+ * 1. Explicit flag value (--repo-id)
+ * 2. Environment variable (DD_GIT_REPOSITORY_URL or similar)
+ * 3. Git metadata extracted from spanTags
+ */
+export declare const resolveRepoId: (flagValue: string | undefined, spanTags: SpanTags) => string | undefined;

package/dist/utils.js

@@ -0,0 +1,54 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRepoId = exports.computeFileHash = exports.validateJsonStructure = exports.validateFilePath = void 0;
+const crypto_1 = require("crypto");
+const fs_1 = __importDefault(require("fs"));
+const tags_1 = require("@datadog/datadog-ci-base/helpers/tags");
+const validateFilePath = (filePath) => {
+    try {
+        return fs_1.default.existsSync(filePath) && fs_1.default.statSync(filePath).isFile();
+    }
+    catch (_a) {
+        return false;
+    }
+};
+exports.validateFilePath = validateFilePath;
+const validateJsonStructure = (content) => {
+    try {
+        JSON.parse(content);
+        return true;
+    }
+    catch (_a) {
+        return false;
+    }
+};
+exports.validateJsonStructure = validateJsonStructure;
+const computeFileHash = (content) => {
+    const hash = (0, crypto_1.createHash)('sha256');
+    hash.update(content);
+    return hash.digest('hex');
+};
+exports.computeFileHash = computeFileHash;
+/**
+ * Resolve repo_id with the following priority:
+ * 1. Explicit flag value (--repo-id)
+ * 2. Environment variable (DD_GIT_REPOSITORY_URL or similar)
+ * 3. Git metadata extracted from spanTags
+ */
+const resolveRepoId = (flagValue, spanTags) => {
+    if (flagValue) {
+        return flagValue;
+    }
+    // Try environment variables
+    const envRepoId = process.env.DD_GIT_REPOSITORY_URL || process.env.DD_REPOSITORY_URL;
+    if (envRepoId) {
+        return envRepoId;
+    }
+    // Fall back to git metadata
+    return spanTags[tags_1.GIT_REPOSITORY_URL];
+};
+exports.resolveRepoId = resolveRepoId;
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAiC;AACjC,4CAAmB;AAGnB,gEAAwE;AAEjE,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAW,EAAE;IAC5D,IAAI;QACF,OAAO,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;KACjE;IAAC,WAAM;QACN,OAAO,KAAK,CAAA;KACb;AACH,CAAC,CAAA;AANY,QAAA,gBAAgB,oBAM5B;AAEM,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAW,EAAE;IAChE,IAAI;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEnB,OAAO,IAAI,CAAA;KACZ;IAAC,WAAM;QACN,OAAO,KAAK,CAAA;KACb;AACH,CAAC,CAAA;AARY,QAAA,qBAAqB,yBAQjC;AAEM,MAAM,eAAe,GAAG,CAAC,OAAe,EAAU,EAAE;IACzD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC,CAAA;AALY,QAAA,eAAe,mBAK3B;AAED;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAAC,SAA6B,EAAE,QAAkB,EAAsB,EAAE;IACrG,IAAI,SAAS,EAAE;QACb,OAAO,SAAS,CAAA;KACjB;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;IACpF,IAAI,SAAS,EAAE;QACb,OAAO,SAAS,CAAA;KACjB;IAED,4BAA4B;IAC5B,OAAO,QAAQ,CAAC,yBAAkB,CAAC,CAAA;AACrC,CAAC,CAAA;AAbY,QAAA,aAAa,iBAazB"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@datadog/datadog-ci-plugin-terraform",
+  "version": "0.0.1",
+  "description": "Datadog CI plugin for `terraform` commands",
+  "license": "Apache-2.0",
+  "keywords": [
+    "datadog",
+    "datadog-ci",
+    "iac",
+    "plugin",
+    "terraform"
+  ],
+  "homepage": "https://github.com/DataDog/datadog-ci/tree/master/packages/plugin-terraform",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/DataDog/datadog-ci.git",
+    "directory": "packages/plugin-terraform"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    "./commands/*": {
+      "development": "./src/commands/*.ts",
+      "default": "./dist/commands/*.js"
+    }
+  },
+  "files": [
+    "dist/**/*",
+    "README",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "yarn package:clean; yarn package:build",
+    "lint": "yarn package:lint",
+    "prepack": "yarn package:clean-dist"
+  },
+  "peerDependencies": {
+    "@datadog/datadog-ci-base": "5.9.0"
+  },
+  "dependencies": {
+    "axios": "^1.13.5",
+    "chalk": "3.0.0",
+    "form-data": "^4.0.4",
+    "simple-git": "3.16.0"
+  },
+  "devDependencies": {
+    "@types/jest": "29.5.3",
+    "upath": "^2.0.1"
+  }
+}