@intentius/chant-lexicon-terraform 0.124.52 → 0.124.55

package/src/__fixtures__/pr-loop/roots/app/main.tf

@@ -0,0 +1,19 @@
+variable "subnet" {
+  type = string
+}
+
+locals {
+  # A second resource only on a subnet whose id ends in -wide. The count
+  # reads var.subnet through a local, which the placeholder preview does not
+  # follow (chant#4463), so the preview plans no wide instance. See README.md.
+  wide = endswith(var.subnet, "-wide") ? 1 : 0
+}
+
+resource "terraform_data" "app" {
+  input = "app on ${var.subnet}"
+}
+
+resource "terraform_data" "wide" {
+  count = local.wide
+  input = "wide on ${var.subnet}"
+}

package/src/__fixtures__/pr-loop/roots/b/main.tf

@@ -0,0 +1,7 @@
+variable "cidr" {
+  type = string
+}
+
+resource "terraform_data" "subnet" {
+  input = "${var.cidr}/b-v1"
+}

package/src/__fixtures__/pr-loop/roots/dns/main.tf

@@ -0,0 +1,3 @@
+resource "terraform_data" "zone" {
+  input = "example.test"
+}

package/src/__fixtures__/pr-loop/roots/net/main.tf

@@ -0,0 +1,7 @@
+resource "terraform_data" "vpc" {
+  input = "10.0.0.0/16"
+}
+
+output "cidr" {
+  value = terraform_data.vpc.output
+}

package/src/__fixtures__/report/applied.show.json

@@ -0,0 +1,51 @@
+{
+  "format_version": "1.2",
+  "resource_changes": [],
+  "prior_state": {
+    "values": {
+      "root_module": {
+        "child_modules": [
+          {
+            "address": "module.network",
+            "resources": [
+              {
+                "address": "module.network.aws_subnet.new",
+                "values": {
+                  "id": "subnet-0a1b",
+                  "arn": "arn:aws:ec2:us-east-1:000000000000:subnet/subnet-0a1b"
+                },
+                "sensitive_values": {}
+              }
+            ]
+          },
+          {
+            "address": "module.app",
+            "resources": [
+              {
+                "address": "module.app.aws_security_group.sg",
+                "values": {
+                  "id": "sg-0c2d",
+                  "vpc_id": "vpc-0e3f"
+                },
+                "sensitive_values": {}
+              }
+            ]
+          },
+          {
+            "address": "module.edge",
+            "resources": [
+              {
+                "address": "module.edge.aws_route_table.rt",
+                "values": {
+                  "id": "rtb-0f4a",
+                  "vpc_id": "vpc-0e3f"
+                },
+                "sensitive_values": {}
+              }
+            ]
+          }
+        ]
+      }
+    }
+  }
+}

package/src/__fixtures__/report/generate.ts

@@ -0,0 +1,63 @@
+/**
+ * Regenerate the `chant terraform report` fixture behold renders (#4439):
+ *
+ *     npx tsx lexicons/terraform/src/__fixtures__/report/generate.ts
+ *
+ * It reads `plan.show.json` (a three-estate composed plan: network, app and
+ * edge, with app reading network and edge reading app) and `applied.show.json`
+ * (the plan made after the apply), runs `terraformReport` for both stages, and
+ * writes `<stage>/report.json` and `<stage>/change-set.json` beside them.
+ * `report.test.ts` runs `generateReportFixture` and compares it with the
+ * files, so a change to the writer shows as a diff here.
+ */
+
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { terraformReport, writeReport, type ReportStage, type ReportStore } from "../../report";
+
+const here = dirname(fileURLToPath(import.meta.url));
+
+export const FIXTURE_RUN = { project: "forgejo:3000/admin/demo-terragrunt", commit: "4439c0ffee", job_url: "http://forgejo:3000/admin/demo-terragrunt/actions/runs/1", pull_request: "1" };
+export const FIXTURE_ESTATES = { network: "demo-network", app: "demo-app", edge: "demo-edge" };
+const FINISHED: Record<ReportStage, string> = { "tf-plan": "2026-10-25T10:00:00Z", "tf-apply": "2026-10-25T10:05:00Z" };
+
+const readJson = (name: string): unknown => JSON.parse(readFileSync(join(here, name), "utf8"));
+
+/** The fixture's output files by path under this directory: `<stage>/report.json` and `<stage>/change-set.json`. */
+export async function generateReportFixture(): Promise<Record<string, string>> {
+  const plan = readJson("plan.show.json");
+  const applied = readJson("applied.show.json");
+  const files: Record<string, string> = {};
+  const store: ReportStore = {
+    async read() {
+      return undefined;
+    },
+    async put(key, body) {
+      const m = /\/(tf-plan|tf-apply)\/(report|change-set)\.json$/.exec(key);
+      if (m) files[`${m[1]}/${m[2]}.json`] = body;
+    },
+  };
+  for (const stage of ["tf-plan", "tf-apply"] as const) {
+    await writeReport(store, terraformReport({
+      stage,
+      plan,
+      ...(stage === "tf-apply" ? { applied } : {}),
+      run: FIXTURE_RUN,
+      binary: "choudoufu",
+      rootDir: "estates",
+      estates: FIXTURE_ESTATES,
+      finished: FINISHED[stage],
+    }));
+  }
+  return files;
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+  const files = await generateReportFixture();
+  for (const [name, body] of Object.entries(files)) {
+    mkdirSync(dirname(join(here, name)), { recursive: true });
+    writeFileSync(join(here, name), body);
+  }
+  console.log(`wrote ${Object.keys(files).join(", ")}`);
+}

package/src/__fixtures__/report/plan.show.json

@@ -0,0 +1,200 @@
+{
+  "format_version": "1.2",
+  "resource_changes": [
+    {
+      "address": "module.network.aws_vpc.main",
+      "module_address": "module.network",
+      "mode": "managed",
+      "type": "aws_vpc",
+      "name": "main",
+      "provider_name": "registry.terraform.io/hashicorp/aws",
+      "change": {
+        "actions": [
+          "update"
+        ],
+        "before": {
+          "cidr_block": "10.0.0.0/16",
+          "enable_dns_support": true
+        },
+        "after": {
+          "cidr_block": "10.0.0.0/16",
+          "enable_dns_support": false
+        },
+        "after_unknown": {},
+        "before_sensitive": {},
+        "after_sensitive": {}
+      }
+    },
+    {
+      "address": "module.network.aws_subnet.new",
+      "module_address": "module.network",
+      "mode": "managed",
+      "type": "aws_subnet",
+      "name": "new",
+      "provider_name": "registry.terraform.io/hashicorp/aws",
+      "change": {
+        "actions": [
+          "create"
+        ],
+        "before": null,
+        "after": {
+          "cidr_block": "10.0.9.0/24",
+          "tags": {
+            "Name": "new"
+          }
+        },
+        "after_unknown": {
+          "id": true,
+          "arn": true
+        },
+        "after_sensitive": {}
+      }
+    },
+    {
+      "address": "module.app.aws_security_group.sg",
+      "module_address": "module.app",
+      "mode": "managed",
+      "type": "aws_security_group",
+      "name": "sg",
+      "provider_name": "registry.terraform.io/hashicorp/aws",
+      "change": {
+        "actions": [
+          "create"
+        ],
+        "before": null,
+        "after": {
+          "name": "demo-sg"
+        },
+        "after_unknown": {
+          "id": true,
+          "vpc_id": true
+        },
+        "after_sensitive": {}
+      }
+    },
+    {
+      "address": "module.edge.aws_route_table.rt",
+      "module_address": "module.edge",
+      "mode": "managed",
+      "type": "aws_route_table",
+      "name": "rt",
+      "provider_name": "registry.terraform.io/hashicorp/aws",
+      "change": {
+        "actions": [
+          "create"
+        ],
+        "before": null,
+        "after": {
+          "tags": {
+            "Name": "edge"
+          }
+        },
+        "after_unknown": {
+          "id": true,
+          "vpc_id": true
+        },
+        "after_sensitive": {}
+      }
+    }
+  ],
+  "configuration": {
+    "root_module": {
+      "module_calls": {
+        "network": {
+          "module": {
+            "outputs": {
+              "subnet_id": {
+                "expression": {
+                  "references": [
+                    "aws_subnet.new.id",
+                    "aws_subnet.new"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "app": {
+          "module": {
+            "resources": [
+              {
+                "mode": "data",
+                "type": "terraform_estate_outputs",
+                "name": "net",
+                "expressions": {
+                  "estate": {
+                    "constant_value": "demo-network"
+                  },
+                  "names": {
+                    "constant_value": [
+                      "subnet_id"
+                    ]
+                  }
+                }
+              },
+              {
+                "mode": "managed",
+                "type": "aws_security_group",
+                "name": "sg",
+                "expressions": {
+                  "vpc_id": {
+                    "references": [
+                      "data.terraform_estate_outputs.net.values.subnet_id",
+                      "data.terraform_estate_outputs.net.values",
+                      "data.terraform_estate_outputs.net"
+                    ]
+                  }
+                }
+              }
+            ],
+            "outputs": {
+              "sg": {
+                "expression": {
+                  "references": [
+                    "aws_security_group.sg.id",
+                    "aws_security_group.sg"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "edge": {
+          "module": {
+            "resources": [
+              {
+                "mode": "data",
+                "type": "terraform_estate_outputs",
+                "name": "app",
+                "expressions": {
+                  "estate": {
+                    "constant_value": "demo-app"
+                  },
+                  "names": {
+                    "constant_value": [
+                      "sg"
+                    ]
+                  }
+                }
+              },
+              {
+                "mode": "managed",
+                "type": "aws_route_table",
+                "name": "rt",
+                "expressions": {
+                  "vpc_id": {
+                    "references": [
+                      "data.terraform_estate_outputs.app.values.sg",
+                      "data.terraform_estate_outputs.app.values",
+                      "data.terraform_estate_outputs.app"
+                    ]
+                  }
+                }
+              }
+            ]
+          }
+        }
+      }
+    }
+  }
+}

package/src/__fixtures__/report/tf-apply/change-set.json

@@ -0,0 +1,170 @@
+{
+  "$schema": "https://intentius.io/chant/schemas/workspace/change-set/v1/change-set.schema.json",
+  "contract": 1,
+  "digest": "jcs1-sha256:48ff3d6ad4d5cb31edd6cc22fd67bf02b3162687f75d21f6db3ef3ae411c7bbc",
+  "members": [
+    {
+      "member": "estates/app",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "status": "planned",
+      "planDigest": "jcs1-sha256:035c64a8e2dbaa66d06b3dc73fcbb41d304e8e0c0b4678c393083cf8e5ae9fff",
+      "holes": []
+    },
+    {
+      "member": "estates/edge",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "status": "planned",
+      "planDigest": "jcs1-sha256:5e22262b5c68660c37a3d547ae89d46c95c67c494dccff1c52f9873999a9adfd",
+      "holes": []
+    },
+    {
+      "member": "estates/network",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "status": "planned",
+      "planDigest": "jcs1-sha256:2f5b9678160933175ce9772c423f2738c5b6b290f9027756c1b6c9e3c3fbab2d",
+      "holes": []
+    }
+  ],
+  "entries": [
+    {
+      "member": "estates/app",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "address": "aws_security_group.sg",
+      "type": "aws_security_group",
+      "name": "sg",
+      "action": "create",
+      "attributes": [
+        {
+          "path": "id",
+          "unknown": true
+        },
+        {
+          "path": "name",
+          "after": "demo-sg"
+        },
+        {
+          "path": "vpc_id",
+          "unknown": true
+        }
+      ]
+    },
+    {
+      "member": "estates/edge",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "address": "aws_route_table.rt",
+      "type": "aws_route_table",
+      "name": "rt",
+      "action": "create",
+      "attributes": [
+        {
+          "path": "id",
+          "unknown": true
+        },
+        {
+          "path": "tags",
+          "after": {
+            "Name": "edge"
+          }
+        },
+        {
+          "path": "vpc_id",
+          "unknown": true
+        }
+      ]
+    },
+    {
+      "member": "estates/network",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "address": "aws_subnet.new",
+      "type": "aws_subnet",
+      "name": "new",
+      "action": "create",
+      "attributes": [
+        {
+          "path": "arn",
+          "unknown": true
+        },
+        {
+          "path": "cidr_block",
+          "after": "10.0.9.0/24"
+        },
+        {
+          "path": "id",
+          "unknown": true
+        },
+        {
+          "path": "tags",
+          "after": {
+            "Name": "new"
+          }
+        }
+      ]
+    },
+    {
+      "member": "estates/network",
+      "lexicon": "terraform",
+      "planner": "choudoufu",
+      "address": "aws_vpc.main",
+      "type": "aws_vpc",
+      "name": "main",
+      "action": "update",
+      "disruption": "in-place",
+      "attributes": [
+        {
+          "path": "enable_dns_support",
+          "before": true,
+          "after": false
+        }
+      ]
+    }
+  ],
+  "summary": {
+    "members": 3,
+    "entries": 4,
+    "actions": {
+      "create": 3,
+      "update": 1,
+      "replace": 0,
+      "delete": 0,
+      "read": 0,
+      "no-op": 0,
+      "forget": 0
+    },
+    "types": {
+      "aws_route_table": {
+        "create": 1
+      },
+      "aws_security_group": {
+        "create": 1
+      },
+      "aws_subnet": {
+        "create": 1
+      },
+      "aws_vpc": {
+        "update": 1
+      }
+    },
+    "byMember": {
+      "estates/app": {
+        "create": 1
+      },
+      "estates/edge": {
+        "create": 1
+      },
+      "estates/network": {
+        "create": 1,
+        "update": 1
+      }
+    },
+    "deletes": [],
+    "replacements": [],
+    "failed": [],
+    "holes": 0
+  }
+}