@intentius/chant 0.124.48 → 0.124.49

package/dist/workspace/exit.schema.json

@@ -0,0 +1,257 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://intentius.io/chant/schemas/workspace/exit/v1/exit.schema.json",
+  "title": "chant workspace exit output",
+  "description": "What `chant workspace exit [<member>...] --json` prints (#3177): the drill report with --drill, and otherwise the staged exit, its drill report and the outcome of the gate. A refused member carries one of the codes in $defs.memberResult.properties.code, and a drill finding one of the codes in $defs.finding.properties.code; both are in the one closed list of `reason-codes.ts`. A failure that stops the command before it prints this document (no such member, a dirty tree, no git repository) prints an error message and exits 1. Readers ignore fields they do not know; a field is only ever added within a version.",
+  "oneOf": [
+    {
+      "$ref": "#/$defs/drill"
+    },
+    {
+      "$ref": "#/$defs/exit"
+    }
+  ],
+  "$defs": {
+    "drill": {
+      "description": "--drill: the exit run on a scratch copy and checked. Exit code 0 when ok, else 1.",
+      "type": "object",
+      "required": [
+        "outcome",
+        "ok",
+        "members"
+      ],
+      "properties": {
+        "outcome": {
+          "const": "drill"
+        },
+        "ok": {
+          "type": "boolean",
+          "description": "True when no member failed. A not-run member does not fail the drill."
+        },
+        "members": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/drillMember"
+          }
+        }
+      }
+    },
+    "exit": {
+      "description": "The exit staged in a worktree. Exit code 0 for nothing-to-exit, dry-run and applied, 1 for checks-failed and 3 for gated.",
+      "type": "object",
+      "required": [
+        "outcome",
+        "digest",
+        "members",
+        "report"
+      ],
+      "properties": {
+        "outcome": {
+          "enum": [
+            "nothing-to-exit",
+            "checks-failed",
+            "dry-run",
+            "gated",
+            "applied"
+          ]
+        },
+        "digest": {
+          "type": "string",
+          "description": "sha256: and the first 16 hex digits of the staged patch. The gate binds it."
+        },
+        "members": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/memberResult"
+          }
+        },
+        "report": {
+          "$ref": "#/$defs/report"
+        },
+        "pending": {
+          "description": "With outcome gated: the pending gate fact, as the gate ledger records it."
+        },
+        "approvedBy": {
+          "type": "string",
+          "description": "With outcome applied: who approved the gate."
+        }
+      }
+    },
+    "report": {
+      "description": "The drill's checks of the staged tree.",
+      "type": "object",
+      "required": [
+        "ok",
+        "members"
+      ],
+      "properties": {
+        "ok": {
+          "type": "boolean"
+        },
+        "members": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/drillMember"
+          }
+        }
+      }
+    },
+    "memberResult": {
+      "description": "What the exit did to one member.",
+      "type": "object",
+      "required": [
+        "name",
+        "dir",
+        "kind",
+        "status",
+        "native",
+        "deploy",
+        "ci",
+        "ops",
+        "steps"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "dir": {
+          "type": "string"
+        },
+        "kind": {
+          "type": "string"
+        },
+        "status": {
+          "enum": [
+            "exited",
+            "kept",
+            "manual",
+            "refused",
+            "failed"
+          ]
+        },
+        "code": {
+          "enum": [
+            "missing-dir",
+            "no-lexicon",
+            "lexicon-unsupported"
+          ],
+          "description": "With status refused: why the member can't be exited."
+        },
+        "native": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Native files written, relative to the workspace root."
+        },
+        "deploy": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "The stock command for each native file, relative to the member's directory."
+        },
+        "ci": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "CI files rewritten or written, relative to the workspace root."
+        },
+        "ops": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "op.json files left in place, relative to the workspace root."
+        },
+        "steps": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Steps a person runs, for a member the exit can't do alone."
+        },
+        "detail": {
+          "type": "string"
+        }
+      }
+    },
+    "drillMember": {
+      "description": "The drill's verdict on one member.",
+      "type": "object",
+      "required": [
+        "name",
+        "kind",
+        "status",
+        "findings",
+        "native",
+        "deploy"
+      ],
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "kind": {
+          "type": "string"
+        },
+        "status": {
+          "enum": [
+            "passed",
+            "failed",
+            "not-run",
+            "kept"
+          ]
+        },
+        "note": {
+          "type": "string",
+          "description": "Why the member is not-run or kept."
+        },
+        "findings": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/finding"
+          }
+        },
+        "native": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "deploy": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "finding": {
+      "description": "One thing the drill found wrong with an exited member.",
+      "type": "object",
+      "required": [
+        "code",
+        "message"
+      ],
+      "properties": {
+        "code": {
+          "enum": [
+            "native-missing",
+            "native-unreadable",
+            "chant-dependency",
+            "chant-config-left",
+            "chant-in-ci",
+            "no-deploy-command",
+            "declaration-not-other",
+            "exit-failed",
+            "choudoufu-steps-missing"
+          ]
+        },
+        "message": {
+          "type": "string"
+        }
+      }
+    }
+  }
+}

package/dist/workspace/graph-cache.d.ts

@@ -85,7 +85,9 @@ export declare function memberStamp(abs: string, exclude?: readonly string[], at
 export declare function toolchainStamp(toolchain: Toolchain): string;
 /** What a kind's reader adds to the key: its graph block, and the installed version of the package supplying it. */
 export declare function readerStamp(reader: {
-    lexicon: string;
+    lexicon?: string;
+    reader?: string;
+    readerFile?: string;
     config: unknown;
     packageDir: string;
 }): string;

package/dist/workspace/graph-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-cache.d.ts","sourceRoot":"","sources":["../../src/workspace/graph-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAc,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/G,gFAAgF;AAChF,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,mHAAmH;AACnH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,eAAO,MAAM,SAAS,QAAoB,CAAC;AAE3C,gFAAgF;AAChF,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qFAAqF;AACrF,eAAO,MAAM,UAAU,YAAI,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAExE,yFAAyF;AACzF,eAAO,MAAM,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAiBpD,CAAC;AAgBF,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEhE;AAMD,MAAM,WAAW,KAAK;IACpB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAgDD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,EAAE,EAAE,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,KAAK,GAAG,SAAS,CASjI;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAc3D;AAED,oHAAoH;AACpH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQpG;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAK7E;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEhD;AAED,uBAAuB;AACvB,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CASxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA4B7F;AAyBD,8EAA8E;AAC9E,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,EAAE,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,mEAAmE;IACnE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,oHAAoH;IACpH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,GAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,EAAwC,GAAG,UAAU,CA4B5L;AASD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAUnF;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,UAAU,CAInF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CASrG"}
+{"version":3,"file":"graph-cache.d.ts","sourceRoot":"","sources":["../../src/workspace/graph-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAMH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAc,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/G,gFAAgF;AAChF,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,mHAAmH;AACnH,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAE/C,eAAO,MAAM,WAAW,MAAM,CAAC;AAC/B,eAAO,MAAM,SAAS,QAAoB,CAAC;AAE3C,gFAAgF;AAChF,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qFAAqF;AACrF,eAAO,MAAM,UAAU,YAAI,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAExE,yFAAyF;AACzF,eAAO,MAAM,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAiBpD,CAAC;AAgBF,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEhE;AAMD,MAAM,WAAW,KAAK;IACpB,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;CAChB;AAgDD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,EAAE,EAAE,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,KAAK,GAAG,SAAS,CASjI;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAc3D;AAED,oHAAoH;AACpH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAkB3I;AAED,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAK7E;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEhD;AAED,uBAAuB;AACvB,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CASxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA4B7F;AAyBD,8EAA8E;AAC9E,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,EAAE,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,mEAAmE;IACnE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,oHAAoH;IACpH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,GAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,EAAwC,GAAG,UAAU,CA4B5L;AASD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAUnF;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,UAAU,CAInF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CASrG"}

package/dist/workspace/graph-cache.js

@@ -197,7 +197,18 @@ export function readerStamp(reader) {
     catch {
         // An unreadable manifest keys on the directory alone.
     }
-    return JSON.stringify([reader.lexicon, reader.config, reader.packageDir, version]);
+    // A reader module is code: its size and mtime key too, so an edit under the same version is a new read (#4413).
+    let module = "";
+    if (reader.readerFile) {
+        try {
+            const st = statSync(reader.readerFile);
+            module = `${reader.reader}:${st.size}:${st.mtimeMs}`;
+        }
+        catch {
+            module = `${reader.reader}:unreadable`;
+        }
+    }
+    return JSON.stringify([reader.lexicon, reader.config, reader.packageDir, version, ...(module ? [module] : [])]);
 }
 /** The ambient environment, less {@link VOLATILE_ENV}, as one digest. */
 export function environmentStamp(env = process.env) {

package/dist/workspace/import-fetch.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The network half of `chant workspace init --from tfc|spacelift` (#3178).
+ *
+ * Reads the Terraform Cloud API or the Spacelift GraphQL API into the input
+ * documents `import-source.ts` maps. The transport is a parameter, so a test
+ * feeds fixture responses and nothing here is reached without a token. A
+ * token is read from `--token`, else `TFE_TOKEN` / `TF_TOKEN_app_terraform_io`
+ * for Terraform Cloud and `SPACELIFT_API_TOKEN` for Spacelift. Only reads:
+ * every request is a GET, or a GraphQL query with no mutation.
+ */
+import type { SpaceliftInput, TfcInput } from "./import-source.js";
+export type Fetcher = (url: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}>;
+export declare class ImportFetchError extends Error {
+}
+export interface TfcFetchOptions {
+    organization: string;
+    token: string;
+    /** Default `https://app.terraform.io`; a Terraform Enterprise host works too. */
+    host?: string;
+    fetcher?: Fetcher;
+}
+export declare function fetchTfc(options: TfcFetchOptions): Promise<TfcInput>;
+export interface SpaceliftFetchOptions {
+    /** The account's endpoint, e.g. `https://acme.app.spacelift.io/graphql`. */
+    endpoint: string;
+    token: string;
+    fetcher?: Fetcher;
+}
+export declare function fetchSpacelift(options: SpaceliftFetchOptions): Promise<SpaceliftInput>;
+//# sourceMappingURL=import-fetch.d.ts.map

package/dist/workspace/import-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-fetch.d.ts","sourceRoot":"","sources":["../../src/workspace/import-fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAEvL,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAa9C,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqD1E;AAID,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AASD,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CA2C5F"}

package/dist/workspace/import-fetch.js

@@ -0,0 +1,99 @@
+/**
+ * The network half of `chant workspace init --from tfc|spacelift` (#3178).
+ *
+ * Reads the Terraform Cloud API or the Spacelift GraphQL API into the input
+ * documents `import-source.ts` maps. The transport is a parameter, so a test
+ * feeds fixture responses and nothing here is reached without a token. A
+ * token is read from `--token`, else `TFE_TOKEN` / `TF_TOKEN_app_terraform_io`
+ * for Terraform Cloud and `SPACELIFT_API_TOKEN` for Spacelift. Only reads:
+ * every request is a GET, or a GraphQL query with no mutation.
+ */
+export class ImportFetchError extends Error {
+}
+const defaultFetch = (url, init) => fetch(url, init);
+export async function fetchTfc(options) {
+    const fetcher = options.fetcher ?? defaultFetch;
+    const base = (options.host ?? "https://app.terraform.io").replace(/\/$/, "");
+    const headers = { Authorization: `Bearer ${options.token}`, "Content-Type": "application/vnd.api+json" };
+    const list = async (path) => {
+        const out = [];
+        let url = `${base}/api/v2${path}${path.includes("?") ? "&" : "?"}page%5Bsize%5D=100`;
+        while (url) {
+            const res = await fetcher(url, { method: "GET", headers });
+            if (!res.ok)
+                throw new ImportFetchError(`Terraform Cloud answered ${res.status} for ${url.replace(base, "")}`);
+            const body = (await res.json());
+            out.push(...(body.data ?? []));
+            url = body.links?.next ?? undefined;
+        }
+        return out;
+    };
+    const org = encodeURIComponent(options.organization);
+    const [projects, workspaces, policySets] = await Promise.all([list(`/organizations/${org}/projects`), list(`/organizations/${org}/workspaces`), list(`/organizations/${org}/policy-sets`)]);
+    const full = [];
+    for (const w of workspaces) {
+        const a = w.attributes ?? {};
+        const [vars, triggers] = await Promise.all([list(`/workspaces/${w.id}/vars`), list(`/workspaces/${w.id}/run-triggers?filter%5Brun-trigger%5D%5Btype%5D=inbound`)]);
+        const project = w.relationships?.project?.data;
+        full.push({
+            id: w.id,
+            name: String(a.name ?? w.id),
+            ...(project && !Array.isArray(project) ? { project: project.id } : {}),
+            ...(a["working-directory"] ? { workingDirectory: String(a["working-directory"]) } : {}),
+            ...(a["terraform-version"] ? { terraformVersion: String(a["terraform-version"]) } : {}),
+            ...(a["vcs-repo"]?.identifier ? { vcsRepo: a["vcs-repo"].identifier } : {}),
+            tags: Array.isArray(a["tag-names"]) ? a["tag-names"] : [],
+            variables: vars.map((v) => ({ key: String(v.attributes?.key ?? ""), category: String(v.attributes?.category ?? ""), sensitive: v.attributes?.sensitive === true })),
+            runTriggers: triggers
+                .map((t) => t.relationships?.sourceable?.data?.id)
+                .filter((id) => typeof id === "string"),
+        });
+    }
+    return {
+        organization: options.organization,
+        projects: projects.map((p) => ({ id: p.id, name: String(p.attributes?.name ?? p.id) })),
+        workspaces: full,
+        policySets: policySets.map((p) => ({
+            id: p.id,
+            name: String(p.attributes?.name ?? p.id),
+            kind: String(p.attributes?.kind ?? "sentinel"),
+            global: p.attributes?.global === true,
+            workspaces: (p.relationships?.workspaces?.data ?? []).map((x) => x.id),
+        })),
+    };
+}
+const SPACELIFT_QUERY = `query ChantImport {
+  stacks { id name space repository branch projectRoot vendor { __typename } labels
+    attachedPolicies: attachedPolicies { id }
+    dependsOn: dependencies { stackId references { outputName inputName } } }
+  policies { id name type }
+}`;
+export async function fetchSpacelift(options) {
+    const fetcher = options.fetcher ?? defaultFetch;
+    const res = await fetcher(options.endpoint, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${options.token}`, "Content-Type": "application/json" },
+        body: JSON.stringify({ query: SPACELIFT_QUERY }),
+    });
+    if (!res.ok)
+        throw new ImportFetchError(`Spacelift answered ${res.status} for ${options.endpoint}`);
+    const body = (await res.json());
+    if (body.errors?.length)
+        throw new ImportFetchError(`Spacelift: ${body.errors.map((e) => e.message).join("; ")}`);
+    return {
+        account: new URL(options.endpoint).hostname.split(".")[0],
+        stacks: (body.data?.stacks ?? []).map((s) => ({
+            id: s.id,
+            name: s.name,
+            ...(s.space ? { space: s.space } : {}),
+            ...(s.repository ? { repository: s.repository } : {}),
+            ...(s.branch ? { branch: s.branch } : {}),
+            ...(s.projectRoot ? { projectRoot: s.projectRoot } : {}),
+            vendor: (s.vendor?.__typename ?? "TerraformStackVendor").replace(/StackVendor$|Vendor$/, "").toLowerCase() || "terraform",
+            labels: s.labels ?? [],
+            policies: (s.attachedPolicies ?? []).map((p) => p.id),
+            dependsOn: (s.dependsOn ?? []).map((d) => ({ stack: d.stackId, references: d.references ?? [] })),
+        })),
+        policies: body.data?.policies ?? [],
+    };
+}

package/dist/workspace/import-init.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `chant workspace init --from tfc|spacelift|backstage` (#3178): the command
+ * around `import-source.ts`. It reads the source, prints the proposal and what
+ * was left out, and writes only on confirmation, as `init` does (#2525 rule 1).
+ * Besides `chant.workspace.json` it writes `chant-import.<source>.json`: the
+ * environments and constraint records the declaration has no field for.
+ */
+import type { CommandContext } from "../cli/registry.js";
+import { ImportFetchError, type Fetcher } from "./import-fetch.js";
+import { type ImportProposal, type ImportSource } from "./import-source.js";
+export declare const IMPORT_USAGE: string;
+export declare const isImportSource: (v: string | undefined) => v is ImportSource;
+export interface ImportDeps {
+    /** For tests: the transport the API readers use. */
+    fetcher?: Fetcher;
+    env?: Record<string, string | undefined>;
+    /** For tests: answers the confirmation. */
+    confirm?: (question: string) => Promise<boolean>;
+    isTTY?: boolean;
+}
+/** Read the source into a proposal. Throws {@link ImportFetchError} or an Error naming what is missing. */
+export declare function loadProposal(source: ImportSource, root: string, args: CommandContext["args"], deps?: ImportDeps): Promise<ImportProposal>;
+export declare function formatImportProposal(p: ImportProposal): string[];
+export declare function runImportInit(source: ImportSource, root: string, args: CommandContext["args"], deps?: ImportDeps): Promise<number>;
+export { ImportFetchError };
+//# sourceMappingURL=import-init.d.ts.map

package/dist/workspace/import-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-init.d.ts","sourceRoot":"","sources":["../../src/workspace/import-init.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAA4B,gBAAgB,EAAE,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,YAAY,EAGlB,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,YAAY,QAGqD,CAAC;AAE/E,eAAO,MAAM,cAAc,MAAO,MAAM,GAAG,SAAS,KAAG,CAAC,IAAI,YAAuE,CAAC;AAEpI,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,2CAA2C;IAC3C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,2GAA2G;AAC3G,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAuBnJ;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,EAAE,CAiBhE;AAcD,wBAAsB,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA6C5I;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/workspace/import-init.js

@@ -0,0 +1,130 @@
+/**
+ * `chant workspace init --from tfc|spacelift|backstage` (#3178): the command
+ * around `import-source.ts`. It reads the source, prints the proposal and what
+ * was left out, and writes only on confirmation, as `init` does (#2525 rule 1).
+ * Besides `chant.workspace.json` it writes `chant-import.<source>.json`: the
+ * environments and constraint records the declaration has no field for.
+ */
+import { existsSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { formatError, formatSuccess } from "../cli/format.js";
+import { fetchSpacelift, fetchTfc, ImportFetchError } from "./import-fetch.js";
+import { IMPORT_SOURCES, proposeFromBackstage, proposeFromSpacelift, proposeFromTfc, readInputFile, } from "./import-source.js";
+import { WorkspaceReadError } from "./declaration.js";
+export const IMPORT_USAGE = "chant workspace init --from tfc --org <organization> [--input <export.json>] [--token <token>] [dir] [--name <name>] [--yes]\n" +
+    "       chant workspace init --from spacelift --endpoint <https://acme.app.spacelift.io/graphql> [--input <export.json>] [--token <token>] [dir] [--yes]\n" +
+    "       chant workspace init --from backstage [dir] [--name <name>] [--yes]";
+export const isImportSource = (v) => IMPORT_SOURCES.includes(v ?? "");
+/** Read the source into a proposal. Throws {@link ImportFetchError} or an Error naming what is missing. */
+export async function loadProposal(source, root, args, deps = {}) {
+    const env = deps.env ?? process.env;
+    if (source === "backstage")
+        return proposeFromBackstage(root, { name: args.selectName });
+    if (source === "tfc") {
+        let input;
+        if (args.input)
+            input = readInputFile("tfc", resolve(args.input));
+        else {
+            const token = args.token ?? env.TFE_TOKEN ?? env.TF_TOKEN_app_terraform_io;
+            if (!token)
+                throw new Error("--from tfc needs --input <export.json>, or a token in --token, TFE_TOKEN or TF_TOKEN_app_terraform_io");
+            if (!args.org)
+                throw new Error("--from tfc needs --org <organization>");
+            input = await fetchTfc({ organization: args.org, token, fetcher: deps.fetcher });
+        }
+        return proposeFromTfc(input, { name: args.selectName });
+    }
+    let input;
+    if (args.input)
+        input = readInputFile("spacelift", resolve(args.input));
+    else {
+        const token = args.token ?? env.SPACELIFT_API_TOKEN;
+        if (!token)
+            throw new Error("--from spacelift needs --input <export.json>, or a token in --token or SPACELIFT_API_TOKEN");
+        if (!args.endpoint)
+            throw new Error("--from spacelift needs --endpoint <https://<account>.app.spacelift.io/graphql>");
+        input = await fetchSpacelift({ endpoint: args.endpoint, token, fetcher: deps.fetcher });
+    }
+    return proposeFromSpacelift(input, { name: args.selectName });
+}
+export function formatImportProposal(p) {
+    const lines = [];
+    const links = p.declaration.members.reduce((n, m) => n + (m.links?.length ?? 0), 0);
+    lines.push(`${p.declaration.members.length} member(s), ${links} link(s), ${p.environments.length} environment(s), ${p.records.length} constraint record(s).`);
+    if (p.environments.length > 0) {
+        lines.push("", "Environments:");
+        for (const e of p.environments)
+            lines.push(`  ${e.name}: ${e.members.join(", ")}`);
+    }
+    if (p.records.length > 0) {
+        lines.push("", "Constraint records:");
+        for (const r of p.records)
+            lines.push(`  ${r.id}${r.policyKind ? ` (${r.policyKind})` : ""} applies to ${r.appliesTo.length === 0 ? "every member" : r.appliesTo.join(", ")}`);
+    }
+    lines.push("", "Left out:");
+    if (p.leftOut.length === 0)
+        lines.push("  nothing");
+    for (const l of p.leftOut)
+        lines.push(`  ${l.count} ${l.what}: ${l.why}`);
+    for (const n of p.notes)
+        lines.push("", n);
+    return lines;
+}
+async function defaultConfirm(question) {
+    const { createInterface } = await import("node:readline");
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((done) => {
+        rl.question(question, (a) => {
+            done(/^y(es)?$/i.test(a.trim()));
+            rl.close();
+        });
+        rl.on("close", () => done(false));
+    });
+}
+export async function runImportInit(source, root, args, deps = {}) {
+    let proposal;
+    try {
+        proposal = await loadProposal(source, root, args, deps);
+    }
+    catch (err) {
+        if (err instanceof WorkspaceReadError) {
+            console.error(formatError({ message: `the proposed declaration is not valid: ${err.describe()}`, hint: "Write chant.workspace.json by hand for now." }));
+            return 1;
+        }
+        console.error(formatError({ message: err instanceof Error ? err.message : String(err), hint: IMPORT_USAGE }));
+        return 1;
+    }
+    const target = join(root, "chant.workspace.json");
+    const sidecar = join(root, `chant-import.${source}.json`);
+    const text = `${JSON.stringify(proposal.declaration, null, 2)}\n`;
+    const sideText = `${JSON.stringify({ source, environments: proposal.environments, records: proposal.records, leftOut: proposal.leftOut }, null, 2)}\n`;
+    console.log(`Proposed ${target}:`);
+    console.log("");
+    console.log(text);
+    for (const line of formatImportProposal(proposal))
+        console.log(line);
+    console.log("");
+    console.log(`Confirming also writes ${sidecar}, holding the environments, constraint records and the left-out list.`);
+    console.log("");
+    let write = !!args.yes;
+    if (!write) {
+        if (!(deps.isTTY ?? process.stdin.isTTY)) {
+            console.log("Nothing written. Re-run with --yes to write it, or save the proposal above and edit it first.");
+            return 0;
+        }
+        write = await (deps.confirm ?? defaultConfirm)("Write chant.workspace.json? [y/N] ");
+    }
+    if (!write) {
+        console.log("Nothing written.");
+        return 0;
+    }
+    if (existsSync(sidecar)) {
+        console.error(formatError({ message: `${sidecar} already exists`, hint: "Move it aside and run again." }));
+        return 1;
+    }
+    writeFileSync(target, text, { flag: "wx" });
+    writeFileSync(sidecar, sideText, { flag: "wx" });
+    console.log(formatSuccess(`Wrote ${target} and ${sidecar}. chant workspace ls lists what it declares.`));
+    return 0;
+}
+export { ImportFetchError };