@intentius/chant-lexicon-terraform 0.124.52 → 0.124.54

package/dist/plan-shape.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The plan shape of a terraform-family root (#4436): what `terraform show
+ * -json` says a plan does, without the values, in the form core's
+ * `coveredRound` compares (#4419). `terraform-apply`'s `plan` returns it, and
+ * terragucci calls it for the plan JSON of a note (terragucci#1268).
+ *
+ * Like `./change-set`, this module imports only `@intentius/chant` subpaths,
+ * never the lexicon's entry point.
+ */
+import type { PlanShape } from "@intentius/chant/components/covered-round";
+export interface TerraformPlanShapeOptions {
+    /** The inputs the plan was made without, as `<component>.<output>`. */
+    unknownInputs?: string[];
+    /** The inputs the plan read with a value, by reference. */
+    knownInputs?: Record<string, unknown>;
+}
+/**
+ * The shape of `planJson` (`terraform show -json`, from terraform, tofu or
+ * choudoufu) for `member`.
+ *
+ * One entry per `resource_changes` item that is not `no-op` or `read`.
+ * `logicalId` is the address, with `#<deposed>` for a deposed object. `type`
+ * is the resource type. `properties` are the top-level attributes that differ
+ * between `before` and `after` (on a create, those the plan sets or leaves
+ * unknown), and `unknown` the ones `after_unknown` marks, so `unknown` is
+ * within `properties`. A delete has no properties. Values never enter it, so
+ * a sensitive attribute is only a name.
+ */
+export declare function terraformPlanShape(planJson: unknown, member: string, options?: TerraformPlanShapeOptions): PlanShape;
+//# sourceMappingURL=plan-shape.d.ts.map

package/dist/plan-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-shape.d.ts","sourceRoot":"","sources":["../src/plan-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAoC,MAAM,2CAA2C,CAAC;AAuD7G,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,SAAS,CA2CxH"}

package/dist/plan-shape.js

@@ -0,0 +1,125 @@
+/**
+ * The plan shape of a terraform-family root (#4436): what `terraform show
+ * -json` says a plan does, without the values, in the form core's
+ * `coveredRound` compares (#4419). `terraform-apply`'s `plan` returns it, and
+ * terragucci calls it for the plan JSON of a note (terragucci#1268).
+ *
+ * Like `./change-set`, this module imports only `@intentius/chant` subpaths,
+ * never the lexicon's entry point.
+ */
+import { normalizePlanShape } from "@intentius/chant/components/covered-round";
+import { actionFor } from "./change-set.js";
+const isObject = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+/** Whether an `after_unknown` value marks anything under it unknown. */
+function marks(v) {
+    if (v === true)
+        return true;
+    if (Array.isArray(v))
+        return v.some(marks);
+    if (isObject(v))
+        return Object.values(v).some(marks);
+    return false;
+}
+function sameJson(a, b) {
+    if (a === b)
+        return true;
+    if (Array.isArray(a) && Array.isArray(b))
+        return a.length === b.length && a.every((x, i) => sameJson(x, b[i]));
+    if (isObject(a) && isObject(b)) {
+        const ka = Object.keys(a);
+        return ka.length === Object.keys(b).length && ka.every((k) => k in b && sameJson(a[k], b[k]));
+    }
+    return false;
+}
+/** Whether the value at `path` in an `after_unknown` tree is unknown: `true` at the path or on a prefix of it. */
+function unknownAt(tree, path) {
+    let at = tree;
+    for (const step of path) {
+        if (at === true)
+            return true;
+        if (Array.isArray(at) && typeof step === "number")
+            at = at[step];
+        else if (isObject(at) && typeof step === "string")
+            at = at[step];
+        else
+            return false;
+    }
+    return marks(at);
+}
+/**
+ * How a change replaces its resource. A `replace_paths` entry names an
+ * attribute whose change forces it. When every such attribute is unknown
+ * after apply, the plan cannot say the value will differ, so the replacement
+ * is `conditional`; one with a known forcing attribute is `true`. A delete
+ * and create pair with no `replace_paths` (a tainted object, `-replace`) is
+ * `true`. An update with none replaces nothing (`false`); a create or delete
+ * has no replacement to state.
+ */
+function replacementFor(change, action) {
+    const paths = (Array.isArray(change.replace_paths) ? change.replace_paths : []).filter(Array.isArray);
+    if (paths.length > 0)
+        return paths.every((p) => unknownAt(change.after_unknown, p)) ? "conditional" : "true";
+    if (action === "replace")
+        return "true";
+    if (action === "update")
+        return "false";
+    return undefined;
+}
+/**
+ * The shape of `planJson` (`terraform show -json`, from terraform, tofu or
+ * choudoufu) for `member`.
+ *
+ * One entry per `resource_changes` item that is not `no-op` or `read`.
+ * `logicalId` is the address, with `#<deposed>` for a deposed object. `type`
+ * is the resource type. `properties` are the top-level attributes that differ
+ * between `before` and `after` (on a create, those the plan sets or leaves
+ * unknown), and `unknown` the ones `after_unknown` marks, so `unknown` is
+ * within `properties`. A delete has no properties. Values never enter it, so
+ * a sensitive attribute is only a name.
+ */
+export function terraformPlanShape(planJson, member, options = {}) {
+    const plan = isObject(planJson) ? planJson : {};
+    const raw = Array.isArray(plan.resource_changes) ? plan.resource_changes : [];
+    const entries = [];
+    for (const r of raw) {
+        const rc = isObject(r) ? r : {};
+        const change = isObject(rc.change) ? rc.change : {};
+        const action = actionFor(change.actions);
+        if (action === "no-op" || action === "read")
+            continue;
+        const address = String(rc.address ?? "");
+        const before = isObject(change.before) ? change.before : {};
+        const after = isObject(change.after) ? change.after : {};
+        const afterUnknown = isObject(change.after_unknown) ? change.after_unknown : {};
+        const properties = [];
+        const unknown = [];
+        if (action !== "delete" && action !== "forget") {
+            for (const k of new Set([...Object.keys(before), ...Object.keys(after), ...Object.keys(afterUnknown)])) {
+                const isUnknown = marks(afterUnknown[k]);
+                const differs = action === "create"
+                    ? isUnknown || (after[k] !== undefined && after[k] !== null)
+                    : isUnknown || !sameJson(before[k] ?? null, after[k] ?? null);
+                if (!differs)
+                    continue;
+                properties.push(k);
+                if (isUnknown)
+                    unknown.push(k);
+            }
+        }
+        const replacement = replacementFor(change, action);
+        entries.push({
+            logicalId: typeof rc.deposed === "string" ? `${address}#${rc.deposed}` : address,
+            action,
+            ...(replacement ? { replacement } : {}),
+            ...(typeof rc.type === "string" ? { type: rc.type } : {}),
+            properties,
+            unknown,
+        });
+    }
+    return normalizePlanShape({
+        member,
+        entries,
+        unknownInputs: options.unknownInputs ?? [],
+        ...(options.knownInputs ? { knownInputs: options.knownInputs } : {}),
+    });
+}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAsB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAoElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,aAkS7B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAqElF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,aAgT7B,CAAC"}

package/dist/plugin.js

@@ -1,4 +1,3 @@
-import { lastMemberReport, readPulumiMember, setLastMemberReport } from "./workspace-member.js";
 import { terraformBehaviourKinds } from "./behaviour/kinds.js";
 import { createSkillsLoader } from "@intentius/chant/lexicon-plugin-helpers";
 import { terraformSerializer } from "./serializer.js";
@@ -8,7 +7,7 @@ import { withCallersChain } from "./lint/post-synth/scope.js";
 import { terraformAuditCatalog } from "./lint/audit-catalog.js";
 import { completions } from "./lsp/completions.js";
 import { hover } from "./lsp/hover.js";
-import { terraformConfigSchema } from "./config.js";
+import { ownRoots, terraformConfigSchema } from "./config.js";
 import { renderTerraformRoots } from "./hcl/roots.js";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
@@ -17,6 +16,7 @@ import { descendModules } from "./hcl/descend.js";
 import { TERRAFORM_STATE_OWNERSHIP_KEYS } from "./state-ownership.js";
 import { terraformCommands } from "./commands.js";
 import { terraformCapabilityPack } from "./capabilities/adapter.js";
+import { TERRAFORM_REFERENCE_CATALOG } from "./behaviour/reference-catalog.js";
 const loadSkills = createSkillsLoader(import.meta.url, [
     {
         file: "chant-terraform.md",
@@ -69,6 +69,8 @@ export const terraformPlugin = {
     behaviourKinds: terraformBehaviourKinds,
     name: "terraform",
     capabilityPack: terraformCapabilityPack,
+    // Keyed by provider type (#2360); see its module doc for which nodes it reads (#4535).
+    referenceCatalog: TERRAFORM_REFERENCE_CATALOG,
     serializer: terraformSerializer,
     configSchema: terraformConfigSchema,
     // ── Required lifecycle methods ────────────────────────────────
@@ -120,6 +122,17 @@ export const terraformPlugin = {
         const { describeResources } = await import("./describe-resources.js");
         return describeResources(options);
     },
+    /**
+     * Each root's drift, as drift-record stream lines (behold#995): a stock
+     * root through its state or a plan, a live root through `live-plan` (and a
+     * plan), one resource through `live-plan -resource`. `chant workspace
+     * drift` reaches it through `chant lifecycle drift` in a member's reader
+     * project. See `./drift-read.ts`.
+     */
+    async readDrift(options) {
+        const { readTerraformDrift } = await import("./drift-read.js");
+        return readTerraformDrift(options);
+    },
     /**
      * The prediction, for whichever estate `options.from` names (#2495). The
      * producer is `predictTerraformBehaviour` and this is its second caller, not
@@ -156,15 +169,9 @@ export const terraformPlugin = {
      * project root, which is what relative `dir` paths resolve against.
      */
     async buildRoots(ctx) {
-        setLastMemberReport(undefined);
         const namespace = ctx.config.terraform;
-        // A pulumi workspace member (#3179): its checked-in stack export, never the program.
-        if (namespace?.pulumiMember) {
-            const read = readPulumiMember({ member: namespace.pulumiMember });
-            setLastMemberReport(read.report);
-            return { entities: read.entities, warnings: read.warnings };
-        }
-        const roots = namespace?.roots ?? {};
+        // A `signalOnly` root (#4484) feeds change detection only, so it builds no entities here.
+        const roots = ownRoots(namespace?.roots);
         if (Object.keys(roots).length === 0)
             return { entities: new Map(), warnings: [] };
         return renderTerraformRoots({
@@ -175,10 +182,6 @@ export const terraformPlugin = {
             moduleRoot: namespace?.moduleRoot,
         });
     },
-    graphMeta() {
-        const report = lastMemberReport();
-        return report ? { pulumiMember: report } : undefined;
-    },
     /** `chant terraform pin-rollout` (#3189). */
     commands() {
         return terraformCommands;
@@ -186,14 +189,16 @@ export const terraformPlugin = {
     /**
      * The `terraform.roots` a change touched (#3183): a changed file in the
      * root's directory, in a local module it calls, or one of its var files.
-     * See `./changed-roots.ts`.
+     * See `./changed-roots.ts`. Every root counts, a `signalOnly` one too
+     * (#4484): that is what it is declared for.
      */
     async changedUnits(ctx) {
-        const roots = ctx.config.terraform?.roots ?? {};
+        const tf = ctx.config.terraform;
+        const roots = tf?.roots ?? {};
         if (Object.keys(roots).length === 0)
             return [];
         const { changedRoots } = await import("./changed-roots.js");
-        return changedRoots(ctx.projectRoot, roots, ctx.changedFiles);
+        return changedRoots(ctx.projectRoot, roots, ctx.changedFiles, tf?.binary);
     },
     lintRules() {
         return rules;
@@ -263,13 +268,22 @@ export const terraformPlugin = {
             // A local audit knows the root's directory, so it can say whether the
             // lock file is beside the `.tf` files (TF040); a fetched one cannot.
             const lockFile = input?.dir !== undefined ? existsSync(join(input.dir, LOCK_FILENAME)) : undefined;
-            const entities = await parseTerraformRootContent(content, root, undefined, lockFile === undefined ? undefined : { lockFile });
+            // An audit has no `terraform.binary` to follow (chant#4457). A root
+            // that carries a `.tofu` file is written for OpenTofu, so it is read
+            // as a tofu root; any other is read as terraform, the config default.
+            const binary = /^# file: .*\.tofu(\.json)?\s*$/m.test(content) ? "tofu" : undefined;
+            const modeOptions = {
+                ...(binary !== undefined ? { binary } : {}),
+                ...(lockFile !== undefined ? { lockFile } : {}),
+            };
+            const entities = await parseTerraformRootContent(content, root, undefined, Object.keys(modeOptions).length > 0 ? modeOptions : undefined);
             if (input?.dir === undefined)
                 return entities;
             const { entities: children } = await descendModules(entities, {
                 dir: input.dir,
                 root,
                 projectRoot: input.baseDir ?? input.dir,
+                ...(binary !== undefined ? { modeOptions: { binary } } : {}),
             });
             for (const [key, entity] of children)
                 entities.set(key, entity);

package/dist/report.d.ts

@@ -27,6 +27,8 @@
  * chant's `groupChangeSet`, so a report here and one from terragucci agree on
  * what changed.
  */
+import { type ChangeSetDocument } from "@intentius/chant/change-set";
+export { topModule } from "./compose/module-address.js";
 type Json = Record<string, unknown>;
 export declare const REPORT_SCHEMA = "terragucci.report/v1";
 export declare const INDEX_SCHEMA = "terragucci.report-index/v1";
@@ -113,8 +115,6 @@ export interface IndexRow {
     pull_request_url?: string;
     job_url?: string;
 }
-/** The top-level module an address or module address is in, or undefined for the composed root's own. */
-export declare function topModule(address: string): string | undefined;
 /** The plan's `resource_changes` that belong to module `m` (undefined: the root's own), each with the module taken off its address. */
 export declare function slicePlan(plan: unknown, m: string | undefined): Json;
 /** One `read` of the report schema's `reads`, as a composed run writes it. */
@@ -127,8 +127,15 @@ export interface ReportRead {
     why?: string;
     composed: true;
 }
-/** The estate named by the first `live { estate = "..." }` block in a directory's `.tf` files, or undefined. */
-export declare function estateOfDir(dir: string): string | undefined;
+/**
+ * The estate named by the first `live { estate = "..." }` block in a
+ * directory's configuration files, in filename order, or undefined. A `live`
+ * block takes effect only under choudoufu, so the files are the ones
+ * choudoufu reads (`.tf`, `.tf.json`, `.tofu` and `.tofu.json`, chant#4457)
+ * unless `binary` names another. A JSON-syntax file's `live` block is the one
+ * nested in its `terraform` block (chant#4504).
+ */
+export declare function estateOfDir(dir: string, binary?: string): string | undefined;
 /** Each module's estate, read from `<repo>/<rootDir>/<module>`. A module whose directory has no `live` block is left out. */
 export declare function moduleEstates(repo: string, rootDir: string, modules: readonly string[]): Record<string, string>;
 /**
@@ -164,6 +171,8 @@ export declare function atmosStackReads(repo: string): ComponentReads;
 export declare function componentOutputReads(plan: Json, m: string, componentReads: ComponentReads, modules: readonly string[], rootOf: (m: string | undefined) => string): ReportRead[];
 export interface TerraformReport {
     report: Json;
+    /** The change set whose digest `report.change_set` names: what behold reads beside the report. */
+    changeSet: ChangeSetDocument;
     /** The run's directory, relative to the project's own index: `yyyy/mm/<commit>/<stage>`. */
     path: string;
     row: IndexRow;
@@ -188,7 +197,8 @@ export interface ReportStore {
     put(key: string, body: string): Promise<void>;
 }
 /**
- * Write the run's `report.json` and add its row to the project's index
+ * Write the run's `report.json` and `change-set.json` (the document whose
+ * digest the report names, as `chant change-set` writes it), and add its row to the project's index
  * (`<project>/index.json`, paths relative to it) and to the prefix's
  * (`index.json`, paths starting at the project), the two places terragucci
  * writes. Returns the keys written.
@@ -203,5 +213,4 @@ export declare function dirStore(dir: string): ReportStore;
  * for credentials. A 404 on read is no object.
  */
 export declare function httpStore(base: string, fetcher?: typeof fetch): ReportStore;
-export {};
 //# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAQH,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAGpC,eAAO,MAAM,aAAa,yBAAyB,CAAC;AACpD,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,2FAA2F;AAC3F,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,+GAA+G;AAC/G,eAAO,MAAM,QAAQ,wCAAwC,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAEjD,MAAM,WAAW,QAAQ;IACvB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,QAAQ,CAgBxI;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,yGAAyG;IACzG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,QAAQ,CAAC;IACd,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0HAA0H;IAC1H,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8HAA8H;IAC9H,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,yGAAyG;AACzG,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7D;AAQD,uIAAuI;AACvI,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAgBpE;AAkDD,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gHAAgH;IAChH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,gHAAgH;AAChH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAe3D;AAED,6HAA6H;AAC7H,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ/G;AA4ED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAiBrJ;AAMD,0GAA0G;AAC1G,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAItE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAqC7D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAgC5D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAQ/K;AAyBD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,CAAC;IACb,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,QAAQ,CAAC;CACf;AAED,wGAAwG;AACxG,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGpF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,CA+K5E;AAMD,oCAAoC;AACpC,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,QAAQ,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,EAAE,CAAA;CAAE,CAa/G;AAED,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAY3F;AAED,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAcjD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa,GAAG,WAAW,CAclF"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAA2D,KAAK,iBAAiB,EAAuE,MAAM,6BAA6B,CAAC;AAOnM,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAGpC,eAAO,MAAM,aAAa,yBAAyB,CAAC;AACpD,eAAO,MAAM,YAAY,+BAA+B,CAAC;AACzD,2FAA2F;AAC3F,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,+GAA+G;AAC/G,eAAO,MAAM,QAAQ,wCAAwC,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAEjD,MAAM,WAAW,QAAQ;IACvB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,QAAQ,CAgBxI;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAC;IACd,yGAAyG;IACzG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,EAAE,QAAQ,CAAC;IACd,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0HAA0H;IAC1H,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8HAA8H;IAC9H,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,uIAAuI;AACvI,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAGpE;AAgCD,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,gHAAgH;IAChH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,MAAM,GAAG,SAAS,CAoBjF;AAED,6HAA6H;AAC7H,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ/G;AA4ED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAiBrJ;AAMD,0GAA0G;AAC1G,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAItE;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAqC7D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAgC5D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,UAAU,EAAE,CAQ/K;AAyBD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,IAAI,CAAC;IACb,kGAAkG;IAClG,SAAS,EAAE,iBAAiB,CAAC;IAC7B,4FAA4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,QAAQ,CAAC;CACf;AAED,wGAAwG;AACxG,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGpF;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,eAAe,CA+K5E;AAMD,oCAAoC;AACpC,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B;;;GAGG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,QAAQ,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,EAAE,CAAA;CAAE,CAa/G;AAED,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAa3F;AAED,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAcjD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa,GAAG,WAAW,CAclF"}

package/dist/report.js

@@ -32,6 +32,10 @@ import { dirname, join } from "node:path";
 import { changeSetDigest, composeChangeSet } from "@intentius/chant/change-set";
 import { groupChangeSet } from "@intentius/chant/plan-summary";
 import { plannerForBinary, terraformChangeSetPart } from "./change-set.js";
+import { moduleChanges, stripModule, topModule } from "./compose/module-address.js";
+import { stateResources } from "./applied-state.js";
+import { isJsonConfigFile, jsonLiveBlocks, listConfigFiles } from "./hcl/files.js";
+export { topModule } from "./compose/module-address.js";
 const isObject = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
 export const REPORT_SCHEMA = "terragucci.report/v1";
 export const INDEX_SCHEMA = "terragucci.report-index/v1";
@@ -66,39 +70,14 @@ export function runFactsFromEnv(env, over = {}) {
 // ---------------------------------------------------------------------------
 // Slicing the composed plan into one plan per module.
 // ---------------------------------------------------------------------------
-const TOP_MODULE = /^module\.([^.[\]]+)(?:\[(?:"(?:[^"\\]|\\.)*"|\d+)\])?(?:\.|$)/;
-/** The top-level module an address or module address is in, or undefined for the composed root's own. */
-export function topModule(address) {
-    return TOP_MODULE.exec(address)?.[1];
-}
-/** `address` with its leading `module.<m>` (and index) taken off. */
-function unprefix(address) {
-    const m = TOP_MODULE.exec(address);
-    return m ? address.slice(m[0].length) : address;
-}
 /** The plan's `resource_changes` that belong to module `m` (undefined: the root's own), each with the module taken off its address. */
 export function slicePlan(plan, m) {
     const p = isObject(plan) ? plan : {};
-    const list = Array.isArray(p.resource_changes) ? p.resource_changes : [];
-    const mine = list.filter((r) => isObject(r) && topModule(String(r.module_address ?? r.address ?? "")) === m);
-    const resource_changes = mine.map((r) => {
-        const rc = r;
-        const out = { ...rc, address: unprefix(String(rc.address)) };
-        if (typeof rc.previous_address === "string")
-            out.previous_address = unprefix(rc.previous_address);
-        if (typeof rc.module_address === "string") {
-            const rest = unprefix(rc.module_address);
-            if (rest === "" || rest === rc.module_address)
-                delete out.module_address;
-            else
-                out.module_address = rest;
-        }
-        return out;
-    });
-    return { ...(p.errored === true ? { errored: true } : {}), resource_changes };
+    return { ...(p.errored === true ? { errored: true } : {}), resource_changes: moduleChanges(p.resource_changes, m) };
 }
 // ---------------------------------------------------------------------------
-// Applied values: the state after the apply gives the values the plan left unknown.
+// Applied values: the state after the apply gives the values the plan left unknown,
+// read through `./applied-state`, as the composed estate run reads them.
 // ---------------------------------------------------------------------------
 /** Whether a sensitivity map marks anything under it `true`. */
 function marks(v) {
@@ -110,27 +89,6 @@ function marks(v) {
         return Object.values(v).some(marks);
     return false;
 }
-/** Every resource of a `show -json` state, by address. A deposed object is left out. */
-function stateResources(show) {
-    const out = new Map();
-    const walk = (mod) => {
-        if (!isObject(mod))
-            return;
-        for (const r of Array.isArray(mod.resources) ? mod.resources : []) {
-            if (!isObject(r) || typeof r.address !== "string" || r.deposed_key !== undefined)
-                continue;
-            out.set(r.address, { values: isObject(r.values) ? r.values : {}, sensitive: isObject(r.sensitive_values) ? r.sensitive_values : {} });
-        }
-        for (const c of Array.isArray(mod.child_modules) ? mod.child_modules : [])
-            walk(c);
-    };
-    const root = isObject(show) ? show : {};
-    // A plan's `prior_state` is the state; a `show -json` of state has `values` itself.
-    const state = isObject(root.prior_state) ? root.prior_state : root;
-    const values = isObject(state.values) ? state.values : {};
-    walk(values.root_module);
-    return out;
-}
 /** Each unknown attribute given the value the state holds. One the state lacks stays unknown; a sensitive one stays `sensitive`. */
 function resolveUnknowns(attributes, res) {
     if (!res || !attributes.some((a) => a.unknown))
@@ -147,16 +105,29 @@ function resolveUnknowns(attributes, res) {
         return { ...rest, ...(a.before !== undefined ? { before: a.before } : {}), after: value };
     });
 }
-/** The estate named by the first `live { estate = "..." }` block in a directory's `.tf` files, or undefined. */
-export function estateOfDir(dir) {
+/**
+ * The estate named by the first `live { estate = "..." }` block in a
+ * directory's configuration files, in filename order, or undefined. A `live`
+ * block takes effect only under choudoufu, so the files are the ones
+ * choudoufu reads (`.tf`, `.tf.json`, `.tofu` and `.tofu.json`, chant#4457)
+ * unless `binary` names another. A JSON-syntax file's `live` block is the one
+ * nested in its `terraform` block (chant#4504).
+ */
+export function estateOfDir(dir, binary = "choudoufu") {
     let files;
     try {
-        files = readdirSync(dir).filter((f) => f.endsWith(".tf")).sort();
+        files = listConfigFiles(dir, binary);
     }
     catch {
         return undefined;
     }
     for (const f of files) {
+        if (isJsonConfigFile(f)) {
+            const estate = jsonLiveBlocks(readFileSync(join(dir, f), "utf8")).map((b) => b.estate).find((e) => typeof e === "string" && e !== "");
+            if (estate)
+                return estate;
+            continue;
+        }
         const text = readFileSync(join(dir, f), "utf8").replace(/^\s*(#|\/\/).*$/gm, "");
         const live = /\blive\s*\{/.exec(text);
         if (!live)
@@ -240,7 +211,7 @@ function unknownOutputsOf(plan, u) {
             const [type, rname, attr] = data ? [parts[1], parts[2], parts[3]] : [parts[0], parts[1], parts[2]];
             if (!type || !rname)
                 continue;
-            const unprefixed = (c) => unprefix(String(c.address)).replace(/\[[^\]]*\]$/, "");
+            const unprefixed = (c) => stripModule(String(c.address)).replace(/\[[^\]]*\]$/, "");
             for (const c of changes) {
                 if (unprefixed(c) !== `${data ? "data." : ""}${type}.${rname}`)
                     continue;
@@ -604,7 +575,7 @@ export function terraformReport(input) {
         ...(run.pull_request_url ? { pull_request_url: run.pull_request_url } : {}),
         ...(run.job_url ? { job_url: run.job_url } : {}),
     };
-    return { report, path, row };
+    return { report, changeSet: doc, path, row };
 }
 // ---------------------------------------------------------------------------
 // The indexes.
@@ -632,7 +603,8 @@ export function addToIndex(existing, row) {
     return { schema: INDEX_SCHEMA, reports: reports.slice(0, INDEX_ROWS) };
 }
 /**
- * Write the run's `report.json` and add its row to the project's index
+ * Write the run's `report.json` and `change-set.json` (the document whose
+ * digest the report names, as `chant change-set` writes it), and add its row to the project's index
  * (`<project>/index.json`, paths relative to it) and to the prefix's
  * (`index.json`, paths starting at the project), the two places terragucci
  * writes. Returns the keys written.
@@ -645,6 +617,7 @@ export async function writeReport(store, r) {
         keys.push(key);
     };
     await put(`${project}/${r.path}/report.json`, r.report);
+    await put(`${project}/${r.path}/change-set.json`, r.changeSet);
     for (const [key, path] of [[`${project}/index.json`, r.path], ["index.json", `${project}/${r.path}`]]) {
         await put(key, addToIndex(await store.read(key), { ...r.row, path }));
     }

package/dist/skills/chant-terraform.md

@@ -33,7 +33,7 @@ export default {
 
 ## What a build produces
 
-Every block of every configured root becomes one entity, keyed `<root>/<address>`: `terraform { }` -> `Terraform::Terraform`, `provider "x" {}` -> `Terraform::Provider`, `resource "x" "y" {}` -> `Terraform::Resource`, `data "x" "y" {}` -> `Terraform::Data`, `module "x" {}` -> `Terraform::Module`, `variable "x" {}` -> `Terraform::Variable`, `output "x" {}` -> `Terraform::Output`, `locals {}` -> `Terraform::Locals`. Each carries `props.address`, `props.body` (the block, verbatim), `props.file` and `props.root`. A root whose `dir` doesn't exist, or whose HCL the parser refuses, warns and contributes no entities — the rest of the build is unaffected.
+Every block of every configured root becomes one entity, keyed `<root>/<address>`: `terraform { }` -> `Terraform::Terraform`, `provider "x" {}` -> `Terraform::Provider`, `resource "x" "y" {}` -> `Terraform::Resource`, `data "x" "y" {}` -> `Terraform::Data`, `module "x" {}` -> `Terraform::Module`, `variable "x" {}` -> `Terraform::Variable`, `output "x" {}` -> `Terraform::Output`, `locals {}` -> `Terraform::Locals`, `moved {}` -> `Terraform::Moved`, `import {}` -> `Terraform::Import`, `removed {}` -> `Terraform::Removed`, `check "x" {}` -> `Terraform::Check`. Each carries `props.address`, `props.body` (the block, verbatim), `props.file` and `props.root`. A root whose `dir` doesn't exist, or whose HCL the parser refuses, warns and contributes no entities — the rest of the build is unaffected.
 
 ## The one thing to check before anything else
 

package/dist/state/azure-blob.d.ts

@@ -0,0 +1,68 @@
+import { type StoreFetch } from "./object-store.js";
+/** The REST version every request names. */
+export declare const AZURE_VERSION = "2021-08-06";
+/** Entra ID's public cloud. */
+export declare const AZURE_AUTHORITY = "https://login.microsoftonline.com";
+export interface AzureLocation {
+    account: string;
+    container: string;
+    /** The account's blob endpoint, no trailing slash: https://<account>.blob.core.windows.net, or an emulator's http://host:10000/<account>. */
+    endpoint: string;
+}
+/** The job's federated identity: an Entra app or managed identity that trusts the forge's token. */
+export interface AzureOidc {
+    tenantId: string;
+    clientId: string;
+    tokenFile: string;
+    /** Entra ID's address, https://host, no path. */
+    authority: string;
+}
+export type AzureTarget = AzureLocation & ({
+    accountKey: string;
+} | {
+    oidc: AzureOidc;
+} | {
+    sas: string;
+});
+/** A blob's properties, as a HEAD answers them: never its body. */
+export interface BlobHead {
+    exists: boolean;
+    etag?: string;
+    /** x-ms-lease-state: `leased` while a lease holds it. */
+    leaseState?: string;
+    /** Its metadata, by name without the x-ms-meta- prefix. */
+    metadata: Record<string, string>;
+}
+/** The Shared Key Authorization header for a request. */
+export declare function sharedKey(account: string, accountKey: string, method: string, rawUrl: string, headers: Record<string, string>): string;
+export declare class AzureBlobClient {
+    readonly target: AzureTarget;
+    private readonly fetchFn;
+    private readonly readToken;
+    private token?;
+    constructor(target: AzureTarget, fetchFn?: StoreFetch, readToken?: (file: string) => string);
+    private where;
+    private blobUrl;
+    /** The storage token for the OIDC identity: once per client, again a minute before it expires. */
+    private bearer;
+    /** The headers for one request, signed or with the bearer token. */
+    private headers;
+    get(key: string): Promise<string | undefined>;
+    /** A blob's properties and metadata, from a HEAD. */
+    head(key: string): Promise<BlobHead>;
+    /** Take a snapshot of a blob: its id, the time Azure gives it. */
+    snapshot(key: string): Promise<string>;
+    /** Write a block blob with metadata, under a lease when one holds it; with `ifNoneMatch`, only when there is none (false when one was there). */
+    putBlob(key: string, body: string, contentType: string, options?: {
+        leaseId?: string;
+        metadata?: Record<string, string>;
+        ifNoneMatch?: boolean;
+    }): Promise<boolean>;
+    /** Delete a blob. One that is not there is deleted already. */
+    remove(key: string): Promise<void>;
+    /** A blob lease: acquire one that never expires with the id given (false when one holds it), or release it. */
+    lease(key: string, action: "acquire" | "release", id: string): Promise<boolean>;
+    /** Set a blob's metadata, all of it, under its lease when one holds it. */
+    setMetadata(key: string, metadata: Record<string, string>, leaseId?: string): Promise<void>;
+}
+//# sourceMappingURL=azure-blob.d.ts.map

package/dist/state/azure-blob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-blob.d.ts","sourceRoot":"","sources":["../../src/state/azure-blob.ts"],"names":[],"mappings":"AAeA,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEhG,4CAA4C;AAC5C,eAAO,MAAM,aAAa,eAAe,CAAC;AAE1C,+BAA+B;AAC/B,eAAO,MAAM,eAAe,sCAAsC,CAAC;AAInE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,6IAA6I;IAC7I,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oGAAoG;AACpG,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3G,mEAAmE;AACnE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAOD,yDAAyD;AACzD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAUtI;AAaD,qBAAa,eAAe;IAGd,QAAQ,CAAC,MAAM,EAAE,WAAW;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAA6B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFzH,OAAO,CAAC,KAAK,CAAC,CAA8C;IAE5D,YAAqB,MAAM,EAAE,WAAW,EAAmB,OAAO,GAAE,UAAyB,EAAmB,SAAS,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAwC,EAAI;IAEzL,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,OAAO;IAMf,kGAAkG;YACpF,MAAM;IAsCpB,oEAAoE;YACtD,OAAO;IAQf,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMlD;IAED,qDAAqD;IAC/C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAczC;IAED,kEAAkE;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO3C;IAED,iJAAiJ;IAC3I,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAe5K;IAED,+DAA+D;IACzD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvC;IAED,+GAA+G;IACzG,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOpF;IAED,2EAA2E;IACrE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKhG;CACF"}