@intentius/chant 0.124.51 → 0.124.54

package/dist/graph-schema/fixtures/plunge.engine-graph.json

@@ -0,0 +1,158 @@
+{
+  "version": 1,
+  "meta": {
+    "engineGraph": {
+      "format": 1,
+      "engine": {
+        "name": "plunge",
+        "version": "3.272.0-plunge.1"
+      },
+      "scope": {
+        "kind": "stack",
+        "project": "app",
+        "stack": "dev"
+      },
+      "observedAt": "2026-10-26T12:00:00Z",
+      "markerScheme": {
+        "ownerKey": "plunge-stack",
+        "addressKey": "plunge-urn",
+        "continuationKeys": [
+          "plunge-urn-2",
+          "plunge-urn-3",
+          "plunge-urn-4"
+        ],
+        "encoding": {
+          "tags": "plain",
+          "labels": "digest"
+        }
+      }
+    }
+  },
+  "nodes": [
+    {
+      "id": "urn:pulumi:dev::app::pulumi:providers:aws::default",
+      "kind": "pulumi:providers:aws",
+      "lexicon": "pulumi",
+      "attrs": {
+        "address": "urn:pulumi:dev::app::pulumi:providers:aws::default"
+      },
+      "facts": {
+        "ownership": "bound",
+        "ownedBy": "record",
+        "observedAt": "2026-10-26T12:00:00Z"
+      }
+    },
+    {
+      "id": "urn:pulumi:dev::app::aws:s3/bucketV2:BucketV2::assets",
+      "kind": "aws:s3/bucketV2:BucketV2",
+      "lexicon": "pulumi",
+      "attrs": {
+        "address": "urn:pulumi:dev::app::aws:s3/bucketV2:BucketV2::assets"
+      },
+      "physicalId": "assets-4f1c2e9",
+      "facts": {
+        "ownership": "bound",
+        "ownedBy": "marker",
+        "markers": {
+          "owner": "app/dev",
+          "address": "aws:s3/bucketV2:BucketV2::assets",
+          "encoding": "plain",
+          "source": "record"
+        },
+        "cloudIds": [
+          {
+            "kind": "provider-id",
+            "value": "assets-4f1c2e9"
+          },
+          {
+            "kind": "arn",
+            "value": "arn:aws:s3:::assets-4f1c2e9"
+          }
+        ],
+        "recordVersions": {
+          "kept": true,
+          "versions": [
+            {
+              "id": "000003",
+              "writtenAt": "2026-10-26T11:40:00Z",
+              "current": true,
+              "deleted": false
+            }
+          ]
+        },
+        "observedAt": "2026-10-26T12:00:00Z"
+      }
+    },
+    {
+      "id": "urn:pulumi:dev::app::gcp:storage/bucket:Bucket::media",
+      "kind": "gcp:storage/bucket:Bucket",
+      "lexicon": "pulumi",
+      "attrs": {
+        "address": "urn:pulumi:dev::app::gcp:storage/bucket:Bucket::media"
+      },
+      "physicalId": "media-9a0b",
+      "facts": {
+        "ownership": "bound",
+        "ownedBy": "marker",
+        "markers": {
+          "owner": "3f2a9c0d41b7e6a1",
+          "address": "9c41e0b7d2a85f3e6b1c0d9a7e4f2b18",
+          "encoding": "digest",
+          "source": "record"
+        },
+        "cloudIds": [
+          {
+            "kind": "provider-id",
+            "value": "media-9a0b"
+          },
+          {
+            "kind": "self-link",
+            "value": "https://www.googleapis.com/storage/v1/b/media-9a0b"
+          }
+        ],
+        "recordVersions": {
+          "kept": false,
+          "versions": []
+        },
+        "observedAt": "2026-10-26T12:00:00Z"
+      }
+    },
+    {
+      "id": "urn:pulumi:dev::app::aws:s3/bucketPolicy:BucketPolicy::assets-policy",
+      "kind": "aws:s3/bucketPolicy:BucketPolicy",
+      "lexicon": "pulumi",
+      "attrs": {
+        "address": "urn:pulumi:dev::app::aws:s3/bucketPolicy:BucketPolicy::assets-policy"
+      },
+      "facts": {
+        "ownership": "pending",
+        "ownedBy": "record",
+        "observedAt": "2026-10-26T12:00:00Z"
+      }
+    }
+  ],
+  "edges": [
+    {
+      "from": "urn:pulumi:dev::app::aws:s3/bucketPolicy:BucketPolicy::assets-policy",
+      "to": "urn:pulumi:dev::app::aws:s3/bucketV2:BucketV2::assets",
+      "kind": "ref",
+      "viaAttr": "dependencies",
+      "grain": "instance"
+    },
+    {
+      "from": "urn:pulumi:dev::app::aws:s3/bucketPolicy:BucketPolicy::assets-policy",
+      "to": "urn:pulumi:dev::app::aws:s3/bucketV2:BucketV2::assets",
+      "kind": "ref",
+      "viaAttr": "bucket",
+      "grain": "property"
+    },
+    {
+      "from": "urn:pulumi:dev::app::aws:s3/bucketV2:BucketV2::assets",
+      "to": "urn:pulumi:dev::app::pulumi:providers:aws::default",
+      "kind": "ref",
+      "viaAttr": "provider",
+      "grain": "instance"
+    }
+  ],
+  "groups": {}
+}

package/dist/graph-schema/fixtures.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The fixture documents engines test their output against (#4527): one
+ * engine graph per engine and one index version. The compiler checks each
+ * against chant's types here; ./generate.ts writes them to ./fixtures/*.json,
+ * and ./graph-schema.test.ts validates those files against the generated
+ * schema. Shapes follow #4520's design section 3 and behold#1025's ruling.
+ *
+ * No record payloads, no output values and no secrets, the rule both
+ * emitters keep (choudoufu#2285, plunge#40).
+ */
+import type { EngineGraphDocument } from "../engine-facts.js";
+import type { AdoptionFile } from "../lifecycle/adoption-file.js";
+import { type IndexDocument } from "../lifecycle/index-document.js";
+/** Each fixture by file name (without `.json`). */
+export declare const GRAPH_SCHEMA_FIXTURES: {
+    readonly "choudoufu.engine-graph": EngineGraphDocument;
+    readonly "plunge.engine-graph": EngineGraphDocument;
+    readonly index: IndexDocument;
+    readonly adopt: AdoptionFile;
+};
+/** The `$defs` entry each fixture validates against. */
+export declare const GRAPH_SCHEMA_FIXTURE_DEFS: Record<keyof typeof GRAPH_SCHEMA_FIXTURES, "EngineGraphDocument" | "IndexDocument" | "AdoptionFile">;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/graph-schema/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../src/graph-schema/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAA8E,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAgP7I,mDAAmD;AACnD,eAAO,MAAM,qBAAqB;;;;;CAKxB,CAAC;AAEX,wDAAwD;AACxD,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC,MAAM,OAAO,qBAAqB,EAAE,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAK1I,CAAC"}

package/dist/graph-schema/fixtures.js

@@ -0,0 +1,246 @@
+import { indexDocumentDigest, indexScopeKey, indexVersionName } from "../lifecycle/index-document.js";
+/** What `choudoufu live-graph -json -from-plan=<file> -history` prints for a small estate. */
+const choudoufu = {
+    version: 1,
+    meta: {
+        engineGraph: {
+            format: 1,
+            engine: { name: "choudoufu", version: "0.33.0" },
+            scope: { kind: "estate", estate: "web" },
+            observedAt: "2026-10-26T12:00:00Z",
+            markerScheme: {
+                ownerKey: "tofu-estate",
+                addressKey: "tofu-address",
+                continuationKeys: ["tofu-slot"],
+                encoding: { tags: "escaped", labels: "escaped" },
+            },
+            gaps: [{ address: "aws_iam_role.legacy", reason: "unsupported-kind", detail: "no lister for this type on this provider" }],
+        },
+    },
+    nodes: [
+        {
+            id: "aws_s3_bucket.logs",
+            kind: "aws_s3_bucket",
+            lexicon: "terraform",
+            attrs: { address: "aws_s3_bucket.logs" },
+            physicalId: "web-logs",
+            facts: {
+                ownership: "bound",
+                ownedBy: "record",
+                cloudIds: [
+                    { kind: "import-id", value: "web-logs" },
+                    { kind: "arn", value: "arn:aws:s3:::web-logs" },
+                ],
+                recordVersions: {
+                    kept: true,
+                    versions: [
+                        { id: "3sL4kqtJlcpXroDTDmJ.rmSpXd3dIbrHY", writtenAt: "2026-10-26T11:58:02Z", current: true, deleted: false },
+                        { id: "2bE8x0l1BqzDmoPTmD7M7bGqFrsTFTQS", writtenAt: "2026-10-20T09:14:40Z", current: false, deleted: false },
+                    ],
+                },
+                observedAt: "2026-10-26T12:00:00Z",
+            },
+        },
+        {
+            id: "module.app.aws_eip.pool",
+            kind: "aws_eip",
+            lexicon: "terraform",
+            attrs: { address: "module.app.aws_eip.pool" },
+        },
+        {
+            id: "module.app.aws_instance.web",
+            kind: "aws_instance",
+            lexicon: "terraform",
+            attrs: { address: "module.app.aws_instance.web" },
+        },
+        {
+            id: "module.app[0].aws_eip.pool[1]",
+            kind: "aws_eip",
+            lexicon: "terraform",
+            attrs: { address: "module.app[0].aws_eip.pool[1]" },
+            physicalId: "eipalloc-0abc",
+            instanceOf: "module.app.aws_eip.pool",
+            instanceKey: "[1]",
+            instanceScope: "module.app[0]",
+            facts: {
+                ownership: "bound",
+                ownedBy: "marker",
+                markers: { owner: "web", address: "module.app:0.aws_eip.pool:1", encoding: "escaped", source: "live" },
+                cloudIds: [{ kind: "import-id", value: "eipalloc-0abc" }],
+                observedAt: "2026-10-26T12:00:00Z",
+            },
+        },
+        {
+            id: "aws_sqs_queue.jobs",
+            kind: "aws_sqs_queue",
+            lexicon: "terraform",
+            attrs: { address: "aws_sqs_queue.jobs" },
+            facts: {
+                ownership: "foreign",
+                markers: { owner: "billing", encoding: "escaped", source: "live" },
+                observedAt: "2026-10-26T12:00:00Z",
+            },
+        },
+        {
+            id: "aws_sns_topic.alerts",
+            kind: "aws_sns_topic",
+            lexicon: "terraform",
+            attrs: { address: "aws_sns_topic.alerts" },
+            facts: { ownership: "pending", observedAt: "2026-10-26T12:00:00Z" },
+        },
+    ],
+    edges: [
+        { from: "module.app[0].aws_eip.pool[1]", to: "module.app.aws_instance.web", kind: "ref", viaAttr: "dependencies", grain: "block" },
+        { from: "module.app.aws_instance.web", to: "aws_s3_bucket.logs", kind: "ref", viaAttr: "dependencies", grain: "block" },
+    ],
+    groups: {},
+};
+const URN = "urn:pulumi:dev::app::";
+/** What `plunge graph --json --stack dev --versions` prints for a small stack: record markers, no live read. */
+const plunge = {
+    version: 1,
+    meta: {
+        engineGraph: {
+            format: 1,
+            engine: { name: "plunge", version: "3.272.0-plunge.1" },
+            scope: { kind: "stack", project: "app", stack: "dev" },
+            observedAt: "2026-10-26T12:00:00Z",
+            markerScheme: {
+                ownerKey: "plunge-stack",
+                addressKey: "plunge-urn",
+                continuationKeys: ["plunge-urn-2", "plunge-urn-3", "plunge-urn-4"],
+                encoding: { tags: "plain", labels: "digest" },
+            },
+        },
+    },
+    nodes: [
+        {
+            id: `${URN}pulumi:providers:aws::default`,
+            kind: "pulumi:providers:aws",
+            lexicon: "pulumi",
+            attrs: { address: `${URN}pulumi:providers:aws::default` },
+            facts: { ownership: "bound", ownedBy: "record", observedAt: "2026-10-26T12:00:00Z" },
+        },
+        {
+            id: `${URN}aws:s3/bucketV2:BucketV2::assets`,
+            kind: "aws:s3/bucketV2:BucketV2",
+            lexicon: "pulumi",
+            attrs: { address: `${URN}aws:s3/bucketV2:BucketV2::assets` },
+            physicalId: "assets-4f1c2e9",
+            facts: {
+                ownership: "bound",
+                ownedBy: "marker",
+                markers: { owner: "app/dev", address: "aws:s3/bucketV2:BucketV2::assets", encoding: "plain", source: "record" },
+                cloudIds: [
+                    { kind: "provider-id", value: "assets-4f1c2e9" },
+                    { kind: "arn", value: "arn:aws:s3:::assets-4f1c2e9" },
+                ],
+                recordVersions: {
+                    kept: true,
+                    versions: [{ id: "000003", writtenAt: "2026-10-26T11:40:00Z", current: true, deleted: false }],
+                },
+                observedAt: "2026-10-26T12:00:00Z",
+            },
+        },
+        {
+            id: `${URN}gcp:storage/bucket:Bucket::media`,
+            kind: "gcp:storage/bucket:Bucket",
+            lexicon: "pulumi",
+            attrs: { address: `${URN}gcp:storage/bucket:Bucket::media` },
+            physicalId: "media-9a0b",
+            facts: {
+                ownership: "bound",
+                ownedBy: "marker",
+                markers: { owner: "3f2a9c0d41b7e6a1", address: "9c41e0b7d2a85f3e6b1c0d9a7e4f2b18", encoding: "digest", source: "record" },
+                cloudIds: [
+                    { kind: "provider-id", value: "media-9a0b" },
+                    { kind: "self-link", value: "https://www.googleapis.com/storage/v1/b/media-9a0b" },
+                ],
+                recordVersions: { kept: false, versions: [] },
+                observedAt: "2026-10-26T12:00:00Z",
+            },
+        },
+        {
+            id: `${URN}aws:s3/bucketPolicy:BucketPolicy::assets-policy`,
+            kind: "aws:s3/bucketPolicy:BucketPolicy",
+            lexicon: "pulumi",
+            attrs: { address: `${URN}aws:s3/bucketPolicy:BucketPolicy::assets-policy` },
+            facts: { ownership: "pending", ownedBy: "record", observedAt: "2026-10-26T12:00:00Z" },
+        },
+    ],
+    edges: [
+        { from: `${URN}aws:s3/bucketPolicy:BucketPolicy::assets-policy`, to: `${URN}aws:s3/bucketV2:BucketV2::assets`, kind: "ref", viaAttr: "dependencies", grain: "instance" },
+        { from: `${URN}aws:s3/bucketPolicy:BucketPolicy::assets-policy`, to: `${URN}aws:s3/bucketV2:BucketV2::assets`, kind: "ref", viaAttr: "bucket", grain: "property" },
+        { from: `${URN}aws:s3/bucketV2:BucketV2::assets`, to: `${URN}pulumi:providers:aws::default`, kind: "ref", viaAttr: "provider", grain: "instance" },
+    ],
+    groups: {},
+};
+const cloudScope = {
+    kind: "cloud",
+    substrate: "aws",
+    scopeId: "000000000000",
+    locations: ["us-east-1"],
+    types: ["AWS::S3::Bucket", "AWS::SQS::Queue"],
+};
+const indexBody = {
+    coverage: [
+        { listedType: "AWS::S3::Bucket", location: "us-east-1", verdict: "listed" },
+        { listedType: "AWS::SQS::Queue", location: "us-east-1", verdict: "read-failed", detail: "ListResources returned UnsupportedOperation" },
+    ],
+    graph: {
+        version: 1,
+        nodes: [
+            {
+                id: "aws/000000000000/us-east-1/AWS::S3::Bucket/web-logs",
+                kind: "AWS::S3::Bucket",
+                lexicon: "aws",
+                attrs: { BucketName: "web-logs" },
+                physicalId: "web-logs",
+            },
+        ],
+        edges: [],
+        groups: { byLexicon: { aws: ["aws/000000000000/us-east-1/AWS::S3::Bucket/web-logs"] } },
+    },
+};
+/** One `behold index aws` version over one account and region. */
+const index = {
+    index: "v1",
+    stamp: {
+        source: { kind: "cloud", name: "behold-lister", version: "0.0.0" },
+        scope: cloudScope,
+        scopeKey: indexScopeKey(cloudScope),
+        observedAt: "2026-10-26T12:00:00Z",
+        completedAt: "2026-10-26T12:00:04Z",
+        digest: indexDocumentDigest(indexBody),
+    },
+    ...indexBody,
+    notes: [{ kind: "no-catalog", message: "no reference catalog for AWS::SQS::Queue", listedType: "AWS::SQS::Queue" }],
+};
+/**
+ * An adoption file over ./index.json (#4536): its one bucket adopted as a
+ * Terraform address with the engine type given. A Go reader (choudoufu#2286)
+ * reads this file with index.json and accepts it.
+ */
+const adopt = {
+    adopt: "v1",
+    index: {
+        scopeKey: index.stamp.scopeKey,
+        version: indexVersionName(index.stamp.observedAt, index.stamp.digest),
+        digest: index.stamp.digest,
+    },
+    select: [{ node: "aws/000000000000/us-east-1/AWS::S3::Bucket/web-logs", as: "aws_s3_bucket.web_logs", type: "aws_s3_bucket" }],
+};
+/** Each fixture by file name (without `.json`). */
+export const GRAPH_SCHEMA_FIXTURES = {
+    "choudoufu.engine-graph": choudoufu,
+    "plunge.engine-graph": plunge,
+    index,
+    adopt,
+};
+/** The `$defs` entry each fixture validates against. */
+export const GRAPH_SCHEMA_FIXTURE_DEFS = {
+    "choudoufu.engine-graph": "EngineGraphDocument",
+    "plunge.engine-graph": "EngineGraphDocument",
+    index: "IndexDocument",
+    adopt: "AdoptionFile",
+};

package/dist/graph-schema/generate.d.ts

@@ -0,0 +1,15 @@
+/** The schema's `$id`. */
+export declare const GRAPH_SCHEMA_ID = "https://intentius.io/chant/schemas/graph/v1/graph.schema.json";
+/** Where the generated schema is checked in. */
+export declare const GRAPH_SCHEMA_PATH: string;
+/** Where the generated fixtures are checked in. */
+export declare const GRAPH_SCHEMA_FIXTURE_DIR: string;
+type Schema = Record<string, unknown>;
+/** The schema set, as an object. */
+export declare function generateGraphSchema(): Schema;
+/** Every generated file, by path, with its contents. */
+export declare function generatedGraphSchemaFiles(): Map<string, string>;
+/** The generated files whose checked-in copy is missing or differs. */
+export declare function staleGraphSchemaFiles(): string[];
+export {};
+//# sourceMappingURL=generate.d.ts.map

package/dist/graph-schema/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/graph-schema/generate.ts"],"names":[],"mappings":"AA6CA,0BAA0B;AAC1B,eAAO,MAAM,eAAe,kEAAkE,CAAC;AAE/F,gDAAgD;AAChD,eAAO,MAAM,iBAAiB,QAAkC,CAAC;AAEjE,mDAAmD;AACnD,eAAO,MAAM,wBAAwB,QAAyB,CAAC;AAS/D,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA8JtC,oCAAoC;AACpC,wBAAgB,mBAAmB,IAAI,MAAM,CAuB5C;AAED,wDAAwD;AACxD,wBAAgB,yBAAyB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAO/D;AAED,uEAAuE;AACvE,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAMhD"}