@intentius/chant-lexicon-terraform 0.124.51 → 0.124.54

package/dist/plan-shape.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The plan shape of a terraform-family root (#4436): what `terraform show
+ * -json` says a plan does, without the values, in the form core's
+ * `coveredRound` compares (#4419). `terraform-apply`'s `plan` returns it, and
+ * terragucci calls it for the plan JSON of a note (terragucci#1268).
+ *
+ * Like `./change-set`, this module imports only `@intentius/chant` subpaths,
+ * never the lexicon's entry point.
+ */
+import type { PlanShape } from "@intentius/chant/components/covered-round";
+export interface TerraformPlanShapeOptions {
+    /** The inputs the plan was made without, as `<component>.<output>`. */
+    unknownInputs?: string[];
+    /** The inputs the plan read with a value, by reference. */
+    knownInputs?: Record<string, unknown>;
+}
+/**
+ * The shape of `planJson` (`terraform show -json`, from terraform, tofu or
+ * choudoufu) for `member`.
+ *
+ * One entry per `resource_changes` item that is not `no-op` or `read`.
+ * `logicalId` is the address, with `#<deposed>` for a deposed object. `type`
+ * is the resource type. `properties` are the top-level attributes that differ
+ * between `before` and `after` (on a create, those the plan sets or leaves
+ * unknown), and `unknown` the ones `after_unknown` marks, so `unknown` is
+ * within `properties`. A delete has no properties. Values never enter it, so
+ * a sensitive attribute is only a name.
+ */
+export declare function terraformPlanShape(planJson: unknown, member: string, options?: TerraformPlanShapeOptions): PlanShape;
+//# sourceMappingURL=plan-shape.d.ts.map

package/dist/plan-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-shape.d.ts","sourceRoot":"","sources":["../src/plan-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAoC,MAAM,2CAA2C,CAAC;AAuD7G,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,SAAS,CA2CxH"}

package/dist/plan-shape.js

@@ -0,0 +1,125 @@
+/**
+ * The plan shape of a terraform-family root (#4436): what `terraform show
+ * -json` says a plan does, without the values, in the form core's
+ * `coveredRound` compares (#4419). `terraform-apply`'s `plan` returns it, and
+ * terragucci calls it for the plan JSON of a note (terragucci#1268).
+ *
+ * Like `./change-set`, this module imports only `@intentius/chant` subpaths,
+ * never the lexicon's entry point.
+ */
+import { normalizePlanShape } from "@intentius/chant/components/covered-round";
+import { actionFor } from "./change-set.js";
+const isObject = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+/** Whether an `after_unknown` value marks anything under it unknown. */
+function marks(v) {
+    if (v === true)
+        return true;
+    if (Array.isArray(v))
+        return v.some(marks);
+    if (isObject(v))
+        return Object.values(v).some(marks);
+    return false;
+}
+function sameJson(a, b) {
+    if (a === b)
+        return true;
+    if (Array.isArray(a) && Array.isArray(b))
+        return a.length === b.length && a.every((x, i) => sameJson(x, b[i]));
+    if (isObject(a) && isObject(b)) {
+        const ka = Object.keys(a);
+        return ka.length === Object.keys(b).length && ka.every((k) => k in b && sameJson(a[k], b[k]));
+    }
+    return false;
+}
+/** Whether the value at `path` in an `after_unknown` tree is unknown: `true` at the path or on a prefix of it. */
+function unknownAt(tree, path) {
+    let at = tree;
+    for (const step of path) {
+        if (at === true)
+            return true;
+        if (Array.isArray(at) && typeof step === "number")
+            at = at[step];
+        else if (isObject(at) && typeof step === "string")
+            at = at[step];
+        else
+            return false;
+    }
+    return marks(at);
+}
+/**
+ * How a change replaces its resource. A `replace_paths` entry names an
+ * attribute whose change forces it. When every such attribute is unknown
+ * after apply, the plan cannot say the value will differ, so the replacement
+ * is `conditional`; one with a known forcing attribute is `true`. A delete
+ * and create pair with no `replace_paths` (a tainted object, `-replace`) is
+ * `true`. An update with none replaces nothing (`false`); a create or delete
+ * has no replacement to state.
+ */
+function replacementFor(change, action) {
+    const paths = (Array.isArray(change.replace_paths) ? change.replace_paths : []).filter(Array.isArray);
+    if (paths.length > 0)
+        return paths.every((p) => unknownAt(change.after_unknown, p)) ? "conditional" : "true";
+    if (action === "replace")
+        return "true";
+    if (action === "update")
+        return "false";
+    return undefined;
+}
+/**
+ * The shape of `planJson` (`terraform show -json`, from terraform, tofu or
+ * choudoufu) for `member`.
+ *
+ * One entry per `resource_changes` item that is not `no-op` or `read`.
+ * `logicalId` is the address, with `#<deposed>` for a deposed object. `type`
+ * is the resource type. `properties` are the top-level attributes that differ
+ * between `before` and `after` (on a create, those the plan sets or leaves
+ * unknown), and `unknown` the ones `after_unknown` marks, so `unknown` is
+ * within `properties`. A delete has no properties. Values never enter it, so
+ * a sensitive attribute is only a name.
+ */
+export function terraformPlanShape(planJson, member, options = {}) {
+    const plan = isObject(planJson) ? planJson : {};
+    const raw = Array.isArray(plan.resource_changes) ? plan.resource_changes : [];
+    const entries = [];
+    for (const r of raw) {
+        const rc = isObject(r) ? r : {};
+        const change = isObject(rc.change) ? rc.change : {};
+        const action = actionFor(change.actions);
+        if (action === "no-op" || action === "read")
+            continue;
+        const address = String(rc.address ?? "");
+        const before = isObject(change.before) ? change.before : {};
+        const after = isObject(change.after) ? change.after : {};
+        const afterUnknown = isObject(change.after_unknown) ? change.after_unknown : {};
+        const properties = [];
+        const unknown = [];
+        if (action !== "delete" && action !== "forget") {
+            for (const k of new Set([...Object.keys(before), ...Object.keys(after), ...Object.keys(afterUnknown)])) {
+                const isUnknown = marks(afterUnknown[k]);
+                const differs = action === "create"
+                    ? isUnknown || (after[k] !== undefined && after[k] !== null)
+                    : isUnknown || !sameJson(before[k] ?? null, after[k] ?? null);
+                if (!differs)
+                    continue;
+                properties.push(k);
+                if (isUnknown)
+                    unknown.push(k);
+            }
+        }
+        const replacement = replacementFor(change, action);
+        entries.push({
+            logicalId: typeof rc.deposed === "string" ? `${address}#${rc.deposed}` : address,
+            action,
+            ...(replacement ? { replacement } : {}),
+            ...(typeof rc.type === "string" ? { type: rc.type } : {}),
+            properties,
+            unknown,
+        });
+    }
+    return normalizePlanShape({
+        member,
+        entries,
+        unknownInputs: options.unknownInputs ?? [],
+        ...(options.knownInputs ? { knownInputs: options.knownInputs } : {}),
+    });
+}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAsB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAoElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,aAkS7B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAqElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,aAgT7B,CAAC"}

package/dist/plugin.js

@@ -1,4 +1,3 @@
-import { lastMemberReport, readPulumiMember, setLastMemberReport } from "./workspace-member.js";
 import { terraformBehaviourKinds } from "./behaviour/kinds.js";
 import { createSkillsLoader } from "@intentius/chant/lexicon-plugin-helpers";
 import { terraformSerializer } from "./serializer.js";
@@ -8,7 +7,7 @@ import { withCallersChain } from "./lint/post-synth/scope.js";
 import { terraformAuditCatalog } from "./lint/audit-catalog.js";
 import { completions } from "./lsp/completions.js";
 import { hover } from "./lsp/hover.js";
-import { terraformConfigSchema } from "./config.js";
+import { ownRoots, terraformConfigSchema } from "./config.js";
 import { renderTerraformRoots } from "./hcl/roots.js";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
@@ -17,6 +16,7 @@ import { descendModules } from "./hcl/descend.js";
 import { TERRAFORM_STATE_OWNERSHIP_KEYS } from "./state-ownership.js";
 import { terraformCommands } from "./commands.js";
 import { terraformCapabilityPack } from "./capabilities/adapter.js";
+import { TERRAFORM_REFERENCE_CATALOG } from "./behaviour/reference-catalog.js";
 const loadSkills = createSkillsLoader(import.meta.url, [
     {
         file: "chant-terraform.md",
@@ -69,6 +69,8 @@ export const terraformPlugin = {
     behaviourKinds: terraformBehaviourKinds,
     name: "terraform",
     capabilityPack: terraformCapabilityPack,
+    // Keyed by provider type (#2360); see its module doc for which nodes it reads (#4535).
+    referenceCatalog: TERRAFORM_REFERENCE_CATALOG,
     serializer: terraformSerializer,
     configSchema: terraformConfigSchema,
     // ── Required lifecycle methods ────────────────────────────────
@@ -120,6 +122,17 @@ export const terraformPlugin = {
         const { describeResources } = await import("./describe-resources.js");
         return describeResources(options);
     },
+    /**
+     * Each root's drift, as drift-record stream lines (behold#995): a stock
+     * root through its state or a plan, a live root through `live-plan` (and a
+     * plan), one resource through `live-plan -resource`. `chant workspace
+     * drift` reaches it through `chant lifecycle drift` in a member's reader
+     * project. See `./drift-read.ts`.
+     */
+    async readDrift(options) {
+        const { readTerraformDrift } = await import("./drift-read.js");
+        return readTerraformDrift(options);
+    },
     /**
      * The prediction, for whichever estate `options.from` names (#2495). The
      * producer is `predictTerraformBehaviour` and this is its second caller, not
@@ -156,15 +169,9 @@ export const terraformPlugin = {
      * project root, which is what relative `dir` paths resolve against.
      */
     async buildRoots(ctx) {
-        setLastMemberReport(undefined);
         const namespace = ctx.config.terraform;
-        // A pulumi workspace member (#3179): its checked-in stack export, never the program.
-        if (namespace?.pulumiMember) {
-            const read = readPulumiMember({ member: namespace.pulumiMember });
-            setLastMemberReport(read.report);
-            return { entities: read.entities, warnings: read.warnings };
-        }
-        const roots = namespace?.roots ?? {};
+        // A `signalOnly` root (#4484) feeds change detection only, so it builds no entities here.
+        const roots = ownRoots(namespace?.roots);
         if (Object.keys(roots).length === 0)
             return { entities: new Map(), warnings: [] };
         return renderTerraformRoots({
@@ -175,10 +182,6 @@ export const terraformPlugin = {
             moduleRoot: namespace?.moduleRoot,
         });
     },
-    graphMeta() {
-        const report = lastMemberReport();
-        return report ? { pulumiMember: report } : undefined;
-    },
     /** `chant terraform pin-rollout` (#3189). */
     commands() {
         return terraformCommands;
@@ -186,14 +189,16 @@ export const terraformPlugin = {
     /**
      * The `terraform.roots` a change touched (#3183): a changed file in the
      * root's directory, in a local module it calls, or one of its var files.
-     * See `./changed-roots.ts`.
+     * See `./changed-roots.ts`. Every root counts, a `signalOnly` one too
+     * (#4484): that is what it is declared for.
      */
     async changedUnits(ctx) {
-        const roots = ctx.config.terraform?.roots ?? {};
+        const tf = ctx.config.terraform;
+        const roots = tf?.roots ?? {};
         if (Object.keys(roots).length === 0)
             return [];
         const { changedRoots } = await import("./changed-roots.js");
-        return changedRoots(ctx.projectRoot, roots, ctx.changedFiles);
+        return changedRoots(ctx.projectRoot, roots, ctx.changedFiles, tf?.binary);
     },
     lintRules() {
         return rules;
@@ -263,13 +268,22 @@ export const terraformPlugin = {
             // A local audit knows the root's directory, so it can say whether the
             // lock file is beside the `.tf` files (TF040); a fetched one cannot.
             const lockFile = input?.dir !== undefined ? existsSync(join(input.dir, LOCK_FILENAME)) : undefined;
-            const entities = await parseTerraformRootContent(content, root, undefined, lockFile === undefined ? undefined : { lockFile });
+            // An audit has no `terraform.binary` to follow (chant#4457). A root
+            // that carries a `.tofu` file is written for OpenTofu, so it is read
+            // as a tofu root; any other is read as terraform, the config default.
+            const binary = /^# file: .*\.tofu(\.json)?\s*$/m.test(content) ? "tofu" : undefined;
+            const modeOptions = {
+                ...(binary !== undefined ? { binary } : {}),
+                ...(lockFile !== undefined ? { lockFile } : {}),
+            };
+            const entities = await parseTerraformRootContent(content, root, undefined, Object.keys(modeOptions).length > 0 ? modeOptions : undefined);
             if (input?.dir === undefined)
                 return entities;
             const { entities: children } = await descendModules(entities, {
                 dir: input.dir,
                 root,
                 projectRoot: input.baseDir ?? input.dir,
+                ...(binary !== undefined ? { modeOptions: { binary } } : {}),
             });
             for (const [key, entity] of children)
                 entities.set(key, entity);

package/dist/report.d.ts

@@ -0,0 +1,216 @@
+/**
+ * `chant terraform report`: a run report from `show -json` of a saved plan, in
+ * the `terragucci.report/v1` shape that behold's kiosk reads, for pipelines
+ * that run plain `terraform`, `terragrunt`, `atmos` or `choudoufu` and have no
+ * terragucci in them.
+ *
+ * It covers one composed run: a root whose only content is `module` calls
+ * (choudoufu's composed root, chant#4419), planned and applied as one. Each
+ * top-level module becomes one root of the report, with its part of the plan
+ * taken as if it had planned alone (`module.<m>.` off every address), the way
+ * terragucci's own composed run reports it.
+ *
+ * What it writes is the part of the v1 contract a reader needs to draw the
+ * run: roots, their changes with before and after values, "known after
+ * apply" for values the plan cannot know, one composed wave, the totals,
+ * groups and named destroys, the index row, and each root's `reads`: the
+ * `data "terraform_estate_outputs"` blocks that read another module's estate,
+ * and, in an Atmos repo, the `!terraform.output` calls in its stack manifests,
+ * which behold draws as the lines between roots. The estate of each module
+ * comes from the `live` block in its directory (`<repo>/<root-dir>/<module>`),
+ * since the plan holds none. After an apply, a second
+ * `show -json` (of a plan made once the apply finished, whose `prior_state`
+ * holds the state) fills in the values the plan left unknown. It writes no
+ * report.html, no plan files, no policy, cost or approval fields.
+ *
+ * The change set is {@link terraformChangeSetPart}'s, and the grouping is
+ * chant's `groupChangeSet`, so a report here and one from terragucci agree on
+ * what changed.
+ */
+import { type ChangeSetDocument } from "@intentius/chant/change-set";
+export { topModule } from "./compose/module-address.js";
+type Json = Record<string, unknown>;
+export declare const REPORT_SCHEMA = "terragucci.report/v1";
+export declare const INDEX_SCHEMA = "terragucci.report-index/v1";
+/** The minor of the v1 contract the report is written to: `compose.estate` is minor 48. */
+export declare const REPORT_MINOR = 48;
+/** What terragucci puts in place of a redacted value; the report carries no values it would need to redact. */
+export declare const REDACTED = "(sensitive, redacted by terragucci)";
+export type ReportStage = "tf-plan" | "tf-apply";
+export interface RunFacts {
+    /** `<host>/<path>` of the repo, as terragucci names a project. */
+    project: string;
+    commit: string;
+    job_url?: string;
+    commit_url?: string;
+    pull_request?: string;
+    pull_request_url?: string;
+}
+/**
+ * The run's facts from a Forgejo, Gitea or GitHub Actions environment
+ * (`GITHUB_REPOSITORY`, `GITHUB_SERVER_URL`, `GITHUB_SHA`, `GITHUB_RUN_ID`,
+ * which Forgejo sets too). `project` and `commit` override it; `pullRequest`
+ * is the number, when the run has one.
+ */
+export declare function runFactsFromEnv(env: NodeJS.ProcessEnv, over?: {
+    pullRequest?: string;
+    project?: string;
+    commit?: string;
+}): RunFacts;
+export interface TerraformReportInput {
+    stage: ReportStage;
+    /** `show -json` of the saved plan. */
+    plan: unknown;
+    /** tf-apply: `show -json` of a plan made after the apply. Its `prior_state` holds the applied values. */
+    applied?: unknown;
+    run: RunFacts;
+    /** The binary that planned, by name or path. Default `terraform`. */
+    binary?: string;
+    /** The binary's version, when known. */
+    binaryVersion?: string;
+    /** Where each root lives in the repo: the root of module `network` is `<rootDir>/network`. Default: the module's name. */
+    rootDir?: string;
+    /** The path of the composed root itself, which holds any resource declared outside a module. Default: `rootDir`, else `.`. */
+    selfRoot?: string;
+    /**
+     * The estate each module's directory names in its `live` block, by module:
+     * what ties a `terraform_estate_outputs` read to the module that owns the
+     * estate. The plan carries no `live` block, so {@link moduleEstates} reads it
+     * from the directories. A read of an estate none of these names has no edge.
+     */
+    estates?: Record<string, string>;
+    /**
+     * What each module reads off the others' outputs through the stack that
+     * wires them, by module: Atmos's `!terraform.output` ({@link atmosStackReads}).
+     * Atmos resolves those into plain variables before the plan, so the plan
+     * holds no trace of them. A module already read through an estate data
+     * block is not read twice.
+     */
+    componentReads?: ComponentReads;
+    started?: string;
+    finished: string;
+    runtime?: string;
+}
+export interface IndexRow {
+    project: string;
+    commit: string;
+    stage: ReportStage;
+    finished: string;
+    path: string;
+    roots: number;
+    groups: number;
+    totals: {
+        create: number;
+        update: number;
+        replace: number;
+        delete: number;
+    };
+    refused: number;
+    failed: number;
+    changed: number;
+    destroys: string[];
+    applied?: string;
+    commit_url?: string;
+    pull_request?: string;
+    pull_request_url?: string;
+    job_url?: string;
+}
+/** The plan's `resource_changes` that belong to module `m` (undefined: the root's own), each with the module taken off its address. */
+export declare function slicePlan(plan: unknown, m: string | undefined): Json;
+/** One `read` of the report schema's `reads`, as a composed run writes it. */
+export interface ReportRead {
+    upstream: string;
+    data: string;
+    outputs: "planned";
+    unknown?: string[];
+    /** Why the read is there, when no data block names it: Atmos's `!terraform.output` and the outputs it reads. */
+    why?: string;
+    composed: true;
+}
+/**
+ * The estate named by the first `live { estate = "..." }` block in a
+ * directory's configuration files, in filename order, or undefined. A `live`
+ * block takes effect only under choudoufu, so the files are the ones
+ * choudoufu reads (`.tf`, `.tf.json`, `.tofu` and `.tofu.json`, chant#4457)
+ * unless `binary` names another. A JSON-syntax file's `live` block is the one
+ * nested in its `terraform` block (chant#4504).
+ */
+export declare function estateOfDir(dir: string, binary?: string): string | undefined;
+/** Each module's estate, read from `<repo>/<rootDir>/<module>`. A module whose directory has no `live` block is left out. */
+export declare function moduleEstates(repo: string, rootDir: string, modules: readonly string[]): Record<string, string>;
+/**
+ * Module `m`'s reads of another module's estate, as terragucci writes them for
+ * a composed run: `{ upstream, data, outputs: "planned", unknown?, composed }`.
+ * `unknown` names the outputs it reads that the plan cannot know. A read of an
+ * estate no other module owns has no edge and is left out.
+ */
+export declare function estateReads(plan: Json, m: string, estates: Readonly<Record<string, string>>, rootOf: (m: string | undefined) => string): ReportRead[];
+/** What each component reads off another with `!terraform.output`: reader -> upstream -> output names. */
+export type ComponentReads = Record<string, Record<string, string[]>>;
+/**
+ * Each component's `!terraform.output <component> [<stack>] <output>` reads in
+ * one Atmos stack manifest. The components are the keys under
+ * `components.terraform`, named by their `metadata.component` when they set
+ * one. A line scan, not a YAML parser: Atmos writes the function as a tagged
+ * scalar, one per line, which is all this reads.
+ */
+export declare function atmosOutputReads(yaml: string): ComponentReads;
+/**
+ * The `!terraform.output` reads of every stack manifest in an Atmos repo: the
+ * `.yaml`/`.yml` files under `stacks.base_path` of `<repo>/atmos.yaml`
+ * (`stacks` when it names none), joined. Empty when the repo has no atmos.yaml.
+ */
+export declare function atmosStackReads(repo: string): ComponentReads;
+/**
+ * Module `m`'s reads of the other modules' outputs that the stack wires in
+ * (`componentReads`, from Atmos's `!terraform.output`): one per upstream that
+ * is a module of this run, planned and composed, as {@link estateReads} writes
+ * them. Under choudoufu the reader is planned on the upstream's planned
+ * outputs, so `unknown` names the ones read that the plan cannot know.
+ */
+export declare function componentOutputReads(plan: Json, m: string, componentReads: ComponentReads, modules: readonly string[], rootOf: (m: string | undefined) => string): ReportRead[];
+export interface TerraformReport {
+    report: Json;
+    /** The change set whose digest `report.change_set` names: what behold reads beside the report. */
+    changeSet: ChangeSetDocument;
+    /** The run's directory, relative to the project's own index: `yyyy/mm/<commit>/<stage>`. */
+    path: string;
+    row: IndexRow;
+}
+/** Where a run's report lives under its project: `yyyy/mm/<commit>/<stage>`, by the day it finished. */
+export declare function runPath(commit: string, stage: ReportStage, finished: string): string;
+/** The report for one composed run, and its index row. Pure. */
+export declare function terraformReport(input: TerraformReportInput): TerraformReport;
+/** How many rows an index keeps. */
+export declare const INDEX_ROWS = 500;
+/**
+ * `existing` index text with `row` added: a row at the same path is replaced,
+ * newest first, an unreadable index starts again from this row.
+ */
+export declare function addToIndex(existing: string | undefined, row: IndexRow): {
+    schema: string;
+    reports: IndexRow[];
+};
+/** A place the report's files go: a key is `project/...` under the reports prefix. */
+export interface ReportStore {
+    read(key: string): Promise<string | undefined>;
+    put(key: string, body: string): Promise<void>;
+}
+/**
+ * Write the run's `report.json` and `change-set.json` (the document whose
+ * digest the report names, as `chant change-set` writes it), and add its row to the project's index
+ * (`<project>/index.json`, paths relative to it) and to the prefix's
+ * (`index.json`, paths starting at the project), the two places terragucci
+ * writes. Returns the keys written.
+ */
+export declare function writeReport(store: ReportStore, r: TerraformReport): Promise<string[]>;
+/** A store under a local directory: what the tests and a job that uploads itself use. */
+export declare function dirStore(dir: string): ReportStore;
+/**
+ * A store behind an HTTP address that takes unsigned `GET` and `PUT` of
+ * `<base>/<key>`: the demo's floci bucket, `http://floci:4566/<bucket>/<prefix>`.
+ * It signs nothing, so it does not write to AWS S3 or another store that asks
+ * for credentials. A 404 on read is no object.
+ */
+export declare function httpStore(base: string, fetcher?: typeof fetch): ReportStore;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAA2D,KAAK,iBAAiB,EAAuE,MAAM,6BAA6B,CAAC;AAOnM,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAGpC,eAAO,MAAM,aAAa,yBAAyB,CAAC;AACpD,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,2FAA2F;AAC3F,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,+GAA+G;AAC/G,eAAO,MAAM,QAAQ,wCAAwC,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAEjD,MAAM,WAAW,QAAQ;IACvB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,QAAQ,CAgBxI;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,yGAAyG;IACzG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,QAAQ,CAAC;IACd,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0HAA0H;IAC1H,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8HAA8H;IAC9H,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,uIAAuI;AACvI,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGpE;AAgCD,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gHAAgH;IAChH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,MAAM,GAAG,SAAS,CAoBjF;AAED,6HAA6H;AAC7H,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ/G;AA4ED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAiBrJ;AAMD,0GAA0G;AAC1G,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAItE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAqC7D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAgC5D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAQ/K;AAyBD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,CAAC;IACb,kGAAkG;IAClG,SAAS,EAAE,iBAAiB,CAAC;IAC7B,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,QAAQ,CAAC;CACf;AAED,wGAAwG;AACxG,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGpF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,CA+K5E;AAMD,oCAAoC;AACpC,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,QAAQ,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,EAAE,CAAA;CAAE,CAa/G;AAED,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAa3F;AAED,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAcjD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa,GAAG,WAAW,CAclF"}