@intentius/chant 0.124.51 → 0.124.54

package/dist/lifecycle/query.d.ts

@@ -8,12 +8,28 @@ export declare const QUERY_SCHEMA_VERSION = 1;
  * for a project outside a workspace.
  */
 export declare const QUERY_TABLES: {
-    /** One row per resource in each environment's newest snapshot. `attributes` is JSON. */
-    readonly resources: readonly [readonly ["member", "TEXT"], readonly ["env", "TEXT"], readonly ["stack", "TEXT"], readonly ["lexicon", "TEXT"], readonly ["name", "TEXT"], readonly ["type", "TEXT"], readonly ["physical_id", "TEXT"], readonly ["status", "TEXT"], readonly ["last_updated", "TEXT"], readonly ["ownership", "TEXT"], readonly ["attributes", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["observed_at", "TEXT"]];
+    /**
+     * One row per resource in each environment's newest snapshot. `attributes`
+     * is JSON. `ownership` is chant's marker verdict; `marker_stack` and
+     * `marker_env` (#4534) are the stack and env that marker names, read off
+     * the resource. `engine_ownership` and `engine_owned_by` (#4534) are an
+     * ownership engine's verdict and what bound the node (choudoufu, plunge;
+     * the snapshot's `facts.ownership` and `facts.ownedBy`), shown beside
+     * chant's and never in place of it. NULL means unknown.
+     */
+    readonly resources: readonly [readonly ["member", "TEXT"], readonly ["env", "TEXT"], readonly ["stack", "TEXT"], readonly ["lexicon", "TEXT"], readonly ["name", "TEXT"], readonly ["type", "TEXT"], readonly ["physical_id", "TEXT"], readonly ["status", "TEXT"], readonly ["last_updated", "TEXT"], readonly ["ownership", "TEXT"], readonly ["attributes", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["observed_at", "TEXT"], readonly ["marker_stack", "TEXT"], readonly ["marker_env", "TEXT"], readonly ["engine_ownership", "TEXT"], readonly ["engine_owned_by", "TEXT"]];
     /** One row per snapshot file: what was observed, when, and how many resources it holds. */
     readonly snapshots: readonly [readonly ["member", "TEXT"], readonly ["env", "TEXT"], readonly ["stack", "TEXT"], readonly ["lexicon", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["observed_at", "TEXT"], readonly ["depth", "TEXT"], readonly ["resources", "INTEGER"], readonly ["unobserved", "INTEGER"]];
-    /** One row per Op run record. `labels` and `outcomes` are JSON. */
-    readonly runs: readonly [readonly ["member", "TEXT"], readonly ["id", "TEXT"], readonly ["op", "TEXT"], readonly ["env", "TEXT"], readonly ["started", "TEXT"], readonly ["ended", "TEXT"], readonly ["status", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["forge", "TEXT"], readonly ["run_url", "TEXT"], readonly ["failure_code", "TEXT"], readonly ["failure_reason", "TEXT"], readonly ["failed_phase", "TEXT"], readonly ["gate", "TEXT"], readonly ["steward", "TEXT"], readonly ["labels", "TEXT"], readonly ["outcomes", "TEXT"]];
+    /**
+     * One row per Op run record. `labels` and `outcomes` are JSON. `root_member`
+     * (#4482) is the workspace member whose directory holds the terraform root
+     * a TerraformApplyOp run applied, read off its `TerraformRootPath` outcome.
+     * NULL means unknown (#4508): any other run, outside a workspace, or a run
+     * whose Init step failed before it resolved the root's directory, since the
+     * Op names its root only by key and Init is what resolves it. A run whose
+     * `terraform init` itself failed still names it (#4512).
+     */
+    readonly runs: readonly [readonly ["member", "TEXT"], readonly ["id", "TEXT"], readonly ["op", "TEXT"], readonly ["env", "TEXT"], readonly ["started", "TEXT"], readonly ["ended", "TEXT"], readonly ["status", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["forge", "TEXT"], readonly ["run_url", "TEXT"], readonly ["failure_code", "TEXT"], readonly ["failure_reason", "TEXT"], readonly ["failed_phase", "TEXT"], readonly ["gate", "TEXT"], readonly ["steward", "TEXT"], readonly ["labels", "TEXT"], readonly ["outcomes", "TEXT"], readonly ["root_member", "TEXT"]];
     /** One row per gate ledger line: `kind` is `pending` or `resolution`. `signed` is 1 for a sealed approval. */
     readonly gates: readonly [readonly ["member", "TEXT"], readonly ["op", "TEXT"], readonly ["gate", "TEXT"], readonly ["kind", "TEXT"], readonly ["timestamp", "TEXT"], readonly ["resolved_by", "TEXT"], readonly ["relayed_by", "TEXT"], readonly ["approver_kind", "TEXT"], readonly ["plan_digest", "TEXT"], readonly ["environment", "TEXT"], readonly ["release_digest", "TEXT"], readonly ["git_sha", "TEXT"], readonly ["run_id", "TEXT"], readonly ["url", "TEXT"], readonly ["note", "TEXT"], readonly ["expires_at", "TEXT"], readonly ["origin", "TEXT"], readonly ["empty", "INTEGER"], readonly ["signed", "INTEGER"]];
     /** One row per deploy record in `<env>/releases.jsonl`. `promoted_from`, `restores` and `redeploys` are JSON. */
@@ -23,6 +39,20 @@ export declare const QUERY_TABLES: {
     /** One row per line of `_releases/cuts.jsonl`. `signed` is 1 for a signed cut. */
     readonly cuts: readonly [readonly ["member", "TEXT"], readonly ["release_digest", "TEXT"], readonly ["label", "TEXT"], readonly ["actor", "TEXT"], readonly ["timestamp", "TEXT"], readonly ["run_id", "TEXT"], readonly ["forge", "TEXT"], readonly ["channel", "TEXT"], readonly ["signed", "INTEGER"], readonly ["composed_base", "TEXT"]];
 };
+/**
+ * The first chant that writes `root_member` on a `runs` row, in `chant query`
+ * and in `chant ledger runs --json` (#4482, #4500). A contract field added
+ * within version 1: a reader treats a row from an older chant as lacking it.
+ */
+export declare const LEDGER_ROOT_MEMBER_FLOOR = "0.124.54";
+/**
+ * The first chant that writes `marker_stack`, `marker_env`,
+ * `engine_ownership` and `engine_owned_by` on a `resources` row, in
+ * `chant query` and in `chant ledger resources --json` (#4534). Columns added
+ * within version 1: a reader treats a row from an older chant as lacking
+ * them, which reads as unknown.
+ */
+export declare const QUERY_OWNERSHIP_COLUMNS_FLOOR = "0.124.54";
 export type QueryTable = keyof typeof QUERY_TABLES;
 /** The table that describes the others: one row per column, with the schema version. */
 export declare const SCHEMA_TABLE = "chant_schema";
@@ -34,6 +64,17 @@ export type QueryData = Record<QueryTable, QueryRow[]>;
 export interface QueryLedger {
     member: string | null;
     port: LedgerReadPort;
+    /**
+     * The snapshot family of the index store (#4519, `snapshotReadPort`). Given,
+     * the `resources` and `snapshots` rows come from it and snapshot files on
+     * `port` are skipped. Absent, they come from `port`, as before the store.
+     */
+    snapshots?: LedgerReadPort;
+    /**
+     * The member whose directory holds a workspace-relative path, or null
+     * (#4482). Given in a workspace; without it `root_member` is NULL.
+     */
+    ownerOfPath?: (path: string) => string | null;
 }
 export interface QueryLoad {
     data: QueryData;

package/dist/lifecycle/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/lifecycle/query.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAMpD,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAItC;;;;;GAKG;AACH,eAAO,MAAM,YAAY;IACvB,wFAAwF;;IAExF,2FAA2F;;IAE3F,mEAAmE;;IAEnE,8GAA8G;;IAE9G,iHAAiH;;IAEjH,4IAA4I;;IAE5I,kFAAkF;;CAEH,CAAC;AAElF,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,YAAY,CAAC;AAEnD,wFAAwF;AACxF,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,KAAK,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AACpC,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE7C,yCAAyC;AACzC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAEvD,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,4FAA4F;AAC5F,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAsDxC;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAyEvF;AA6BD,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,mDAAmD;AACnD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAoCjF;AAID,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAMxD"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/lifecycle/query.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAOpD,6CAA6C;AAC7C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAItC;;;;;GAKG;AACH,eAAO,MAAM,YAAY;IACvB;;;;;;;;OAQG;;IAEH,2FAA2F;;IAE3F;;;;;;;;OAQG;;IAEH,8GAA8G;;IAE9G,iHAAiH;;IAEjH,4IAA4I;;IAE5I,kFAAkF;;CAEH,CAAC;AAElF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAAe,CAAC;AAErD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,aAAe,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,MAAM,OAAO,YAAY,CAAC;AAEnD,wFAAwF;AACxF,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,KAAK,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AACpC,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAE7C,yCAAyC;AACzC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAEvD,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,cAAc,CAAC;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,4FAA4F;AAC5F,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAqFxC;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAyFvF;AA6BD,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED,mDAAmD;AACnD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAoCjF;AAID,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAMxD"}

package/dist/lifecycle/query.js

@@ -2,6 +2,7 @@ import { parseGateLedger, GATES_DIR } from "./gate-ledger.js";
 import { parseReleaseLedger, releaseLedgerLines } from "./release-read.js";
 import { CUTS_FILE, parseCuts, parseRelease, RELEASES_DIR, verifyReleaseDigest } from "./release-store.js";
 import { opOfRunLedgerFile, parseRunLedger } from "./run-ledger.js";
+import { NEXT_RELEASE } from "../release-floors.js";
 /** The version of the table schema below. */
 export const QUERY_SCHEMA_VERSION = 1;
 /**
@@ -11,12 +12,28 @@ export const QUERY_SCHEMA_VERSION = 1;
  * for a project outside a workspace.
  */
 export const QUERY_TABLES = {
-    /** One row per resource in each environment's newest snapshot. `attributes` is JSON. */
-    resources: [["member", "TEXT"], ["env", "TEXT"], ["stack", "TEXT"], ["lexicon", "TEXT"], ["name", "TEXT"], ["type", "TEXT"], ["physical_id", "TEXT"], ["status", "TEXT"], ["last_updated", "TEXT"], ["ownership", "TEXT"], ["attributes", "TEXT"], ["git_sha", "TEXT"], ["observed_at", "TEXT"]],
+    /**
+     * One row per resource in each environment's newest snapshot. `attributes`
+     * is JSON. `ownership` is chant's marker verdict; `marker_stack` and
+     * `marker_env` (#4534) are the stack and env that marker names, read off
+     * the resource. `engine_ownership` and `engine_owned_by` (#4534) are an
+     * ownership engine's verdict and what bound the node (choudoufu, plunge;
+     * the snapshot's `facts.ownership` and `facts.ownedBy`), shown beside
+     * chant's and never in place of it. NULL means unknown.
+     */
+    resources: [["member", "TEXT"], ["env", "TEXT"], ["stack", "TEXT"], ["lexicon", "TEXT"], ["name", "TEXT"], ["type", "TEXT"], ["physical_id", "TEXT"], ["status", "TEXT"], ["last_updated", "TEXT"], ["ownership", "TEXT"], ["attributes", "TEXT"], ["git_sha", "TEXT"], ["observed_at", "TEXT"], ["marker_stack", "TEXT"], ["marker_env", "TEXT"], ["engine_ownership", "TEXT"], ["engine_owned_by", "TEXT"]],
     /** One row per snapshot file: what was observed, when, and how many resources it holds. */
     snapshots: [["member", "TEXT"], ["env", "TEXT"], ["stack", "TEXT"], ["lexicon", "TEXT"], ["git_sha", "TEXT"], ["observed_at", "TEXT"], ["depth", "TEXT"], ["resources", "INTEGER"], ["unobserved", "INTEGER"]],
-    /** One row per Op run record. `labels` and `outcomes` are JSON. */
-    runs: [["member", "TEXT"], ["id", "TEXT"], ["op", "TEXT"], ["env", "TEXT"], ["started", "TEXT"], ["ended", "TEXT"], ["status", "TEXT"], ["git_sha", "TEXT"], ["forge", "TEXT"], ["run_url", "TEXT"], ["failure_code", "TEXT"], ["failure_reason", "TEXT"], ["failed_phase", "TEXT"], ["gate", "TEXT"], ["steward", "TEXT"], ["labels", "TEXT"], ["outcomes", "TEXT"]],
+    /**
+     * One row per Op run record. `labels` and `outcomes` are JSON. `root_member`
+     * (#4482) is the workspace member whose directory holds the terraform root
+     * a TerraformApplyOp run applied, read off its `TerraformRootPath` outcome.
+     * NULL means unknown (#4508): any other run, outside a workspace, or a run
+     * whose Init step failed before it resolved the root's directory, since the
+     * Op names its root only by key and Init is what resolves it. A run whose
+     * `terraform init` itself failed still names it (#4512).
+     */
+    runs: [["member", "TEXT"], ["id", "TEXT"], ["op", "TEXT"], ["env", "TEXT"], ["started", "TEXT"], ["ended", "TEXT"], ["status", "TEXT"], ["git_sha", "TEXT"], ["forge", "TEXT"], ["run_url", "TEXT"], ["failure_code", "TEXT"], ["failure_reason", "TEXT"], ["failed_phase", "TEXT"], ["gate", "TEXT"], ["steward", "TEXT"], ["labels", "TEXT"], ["outcomes", "TEXT"], ["root_member", "TEXT"]],
     /** One row per gate ledger line: `kind` is `pending` or `resolution`. `signed` is 1 for a sealed approval. */
     gates: [["member", "TEXT"], ["op", "TEXT"], ["gate", "TEXT"], ["kind", "TEXT"], ["timestamp", "TEXT"], ["resolved_by", "TEXT"], ["relayed_by", "TEXT"], ["approver_kind", "TEXT"], ["plan_digest", "TEXT"], ["environment", "TEXT"], ["release_digest", "TEXT"], ["git_sha", "TEXT"], ["run_id", "TEXT"], ["url", "TEXT"], ["note", "TEXT"], ["expires_at", "TEXT"], ["origin", "TEXT"], ["empty", "INTEGER"], ["signed", "INTEGER"]],
     /** One row per deploy record in `<env>/releases.jsonl`. `promoted_from`, `restores` and `redeploys` are JSON. */
@@ -26,6 +43,20 @@ export const QUERY_TABLES = {
     /** One row per line of `_releases/cuts.jsonl`. `signed` is 1 for a signed cut. */
     cuts: [["member", "TEXT"], ["release_digest", "TEXT"], ["label", "TEXT"], ["actor", "TEXT"], ["timestamp", "TEXT"], ["run_id", "TEXT"], ["forge", "TEXT"], ["channel", "TEXT"], ["signed", "INTEGER"], ["composed_base", "TEXT"]],
 };
+/**
+ * The first chant that writes `root_member` on a `runs` row, in `chant query`
+ * and in `chant ledger runs --json` (#4482, #4500). A contract field added
+ * within version 1: a reader treats a row from an older chant as lacking it.
+ */
+export const LEDGER_ROOT_MEMBER_FLOOR = NEXT_RELEASE;
+/**
+ * The first chant that writes `marker_stack`, `marker_env`,
+ * `engine_ownership` and `engine_owned_by` on a `resources` row, in
+ * `chant query` and in `chant ledger resources --json` (#4534). Columns added
+ * within version 1: a reader treats a row from an older chant as lacking
+ * them, which reads as unknown.
+ */
+export const QUERY_OWNERSHIP_COLUMNS_FLOOR = NEXT_RELEASE;
 /** The table that describes the others: one row per column, with the schema version. */
 export const SCHEMA_TABLE = "chant_schema";
 /** A statement that can't run, or a Node.js with no SQLite. The message is for a person. */
@@ -51,7 +82,25 @@ function snapshotRows(member, env, file, s, data) {
     const resources = Object.entries(s.resources);
     data.snapshots.push({ member, env, stack, lexicon: s.lexicon, ...at, depth: s.depth ?? "identity", resources: resources.length, unobserved: Object.keys(s.unobserved ?? {}).length });
     for (const [name, r] of resources) {
-        data.resources.push({ member, env, stack, lexicon: s.lexicon, name, type: str(r?.type), physical_id: str(r?.physicalId), status: str(r?.status), last_updated: str(r?.lastUpdated), ownership: str(r?.ownership), attributes: json(r?.attributes), ...at });
+        data.resources.push({
+            member,
+            env,
+            stack,
+            lexicon: s.lexicon,
+            name,
+            type: str(r?.type),
+            physical_id: str(r?.physicalId),
+            status: str(r?.status),
+            last_updated: str(r?.lastUpdated),
+            ownership: str(r?.ownership),
+            attributes: json(r?.attributes),
+            ...at,
+            // Read as data from the snapshot (#4534): a projection for people, never a decision.
+            marker_stack: str(r?.marker?.stack),
+            marker_env: str(r?.marker?.env),
+            engine_ownership: str(r?.facts?.ownership),
+            engine_owned_by: str(r?.facts?.ownedBy),
+        });
     }
 }
 function gateRow(member, r) {
@@ -80,6 +129,19 @@ function gateRow(member, r) {
         signed: bit(res?.seal !== undefined),
     };
 }
+/**
+ * The member a run's `TerraformRootPath` outcome falls in (#4482): the
+ * workspace-relative directory of the root a TerraformApplyOp's Init step
+ * resolved. A local `chant run` records under the member that declares the
+ * Op, so this is what names the member whose root it applied when the two
+ * differ, as for a choudoufu member applied from a chant one.
+ */
+function rootMemberOf(outcomes, ownerOfPath) {
+    const path = outcomes?.TerraformRootPath;
+    if (typeof path !== "string" || !ownerOfPath)
+        return null;
+    return ownerOfPath(path);
+}
 /**
  * Read every table's rows from the ledgers, in the order given. A ledger
  * whose branch is absent reads as no rows. A line or file that is not its
@@ -89,11 +151,31 @@ function gateRow(member, r) {
 export async function loadQueryData(ledgers) {
     const data = empty(() => []);
     const malformed = empty(() => 0);
-    for (const { member, port } of ledgers) {
+    for (const { member, port, ownerOfPath, snapshots } of ledgers) {
+        if (snapshots) {
+            for (const env of (await snapshots.trees()).filter((t) => !t.startsWith("_")).sort()) {
+                for (const file of (await snapshots.list(env)).sort()) {
+                    if (!file.endsWith(".json"))
+                        continue;
+                    const text = await snapshots.read(env, file);
+                    let parsed;
+                    try {
+                        parsed = text === null ? null : JSON.parse(text);
+                    }
+                    catch {
+                        parsed = null;
+                    }
+                    if (isSnapshot(parsed))
+                        snapshotRows(member, env, file, parsed, data);
+                }
+            }
+        }
         const trees = (await port.trees()).sort();
         for (const env of trees.filter((t) => !t.startsWith("_"))) {
             for (const file of (await port.list(env)).sort()) {
                 if (file.endsWith(".json")) {
+                    if (snapshots)
+                        continue;
                     const text = await port.read(env, file);
                     let parsed;
                     try {
@@ -122,7 +204,7 @@ export async function loadQueryData(ledgers) {
                     const { records, malformed: bad } = parseRunLedger(text);
                     malformed.runs += bad;
                     for (const r of records) {
-                        data.runs.push({ member, id: r.id, op: r.op, env: r.env, started: r.started, ended: r.ended, status: r.status, git_sha: str(r.gitSha), forge: str(r.runOrigin?.forge), run_url: str(r.runOrigin?.url), failure_code: str(r.failure?.code), failure_reason: str(r.failure?.reason), failed_phase: str(r.failure?.phase), gate: str(r.gate?.name), steward: str(r.steward), labels: json(r.labels ?? {}), outcomes: json(r.outcomes ?? {}) });
+                        data.runs.push({ member, id: r.id, op: r.op, env: r.env, started: r.started, ended: r.ended, status: r.status, git_sha: str(r.gitSha), forge: str(r.runOrigin?.forge), run_url: str(r.runOrigin?.url), failure_code: str(r.failure?.code), failure_reason: str(r.failure?.reason), failed_phase: str(r.failure?.phase), gate: str(r.gate?.name), steward: str(r.steward), labels: json(r.labels ?? {}), outcomes: json(r.outcomes ?? {}), root_member: rootMemberOf(r.outcomes, ownerOfPath) });
                     }
                 }
             }

package/dist/lifecycle/replay.d.ts

@@ -13,6 +13,7 @@
  * recorded estate had to reach for the live endpoint, and a snapshot could
  * answer most questions but never all of them.
  */
+import { type SnapshotStore } from "./snapshot-store.js";
 import type { LiveObservation } from "../graph-ir.js";
 import type { ObservationDepth } from "./types.js";
 /**
@@ -25,7 +26,7 @@ import type { ObservationDepth } from "./types.js";
  * is shared. Nothing downstream needs to know which source it got.
  *
  * `latest` is the only ref for now. A specific commit is the natural extension
- * and the storage already supports it (`readSnapshotAt`), but "answer from what
+ * and the store already supports it (`SnapshotStore.readAt`), but "answer from what
  * is recorded" is the question worth settling first.
  */
 /**
@@ -36,8 +37,14 @@ import type { ObservationDepth } from "./types.js";
  * failure here means the caller says the plain version of the message, never
  * that the command fails.
  */
-export declare function hasSnapshot(environment: string): Promise<boolean>;
-export declare function replaySnapshots(environment: string, ref: string, scopedStacks: Set<string>): Promise<{
+export declare function hasSnapshot(environment: string, opts?: {
+    store?: SnapshotStore;
+}): Promise<boolean>;
+export declare function replaySnapshots(environment: string, ref: string, scopedStacks: Set<string>, 
+/** The index store to read (#4519). Default: the project's. */
+opts?: {
+    store?: SnapshotStore;
+}): Promise<{
     observations: LiveObservation[];
     commit: string;
     timestamp: string;

package/dist/lifecycle/replay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/lifecycle/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMvE;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,OAAO,CACN;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAC/F;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CACnC,CA8IA"}
+{"version":3,"file":"replay.d.ts","sourceRoot":"","sources":["../../src/lifecycle/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAsD,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEnE;;;;;;;;;;;;GAYG;AACH;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAOzG;AAED,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC;AACzB,+DAA+D;AAC/D,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE,GAC/B,OAAO,CACN;IAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAC/F;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CACnC,CA+IA"}

package/dist/lifecycle/replay.js

@@ -13,7 +13,7 @@
  * recorded estate had to reach for the live endpoint, and a snapshot could
  * answer most questions but never all of them.
  */
-import { readEnvironmentSnapshots } from "./git.js";
+import { readEnvironmentSnapshotsFrom, resolveSnapshotStore } from "./snapshot-store.js";
 import { unqualifiedKey } from "./identity.js";
 /**
  * Rebuild observations from a recorded snapshot (#1266).
@@ -25,7 +25,7 @@ import { unqualifiedKey } from "./identity.js";
  * is shared. Nothing downstream needs to know which source it got.
  *
  * `latest` is the only ref for now. A specific commit is the natural extension
- * and the storage already supports it (`readSnapshotAt`), but "answer from what
+ * and the store already supports it (`SnapshotStore.readAt`), but "answer from what
  * is recorded" is the question worth settling first.
  */
 /**
@@ -36,22 +36,26 @@ import { unqualifiedKey } from "./identity.js";
  * failure here means the caller says the plain version of the message, never
  * that the command fails.
  */
-export async function hasSnapshot(environment) {
+export async function hasSnapshot(environment, opts) {
     try {
-        return (await readEnvironmentSnapshots(environment)).size > 0;
+        const store = opts?.store ?? (await resolveSnapshotStore());
+        return (await store.keys(environment)).length > 0;
     }
     catch {
         return false;
     }
 }
-export async function replaySnapshots(environment, ref, scopedStacks) {
+export async function replaySnapshots(environment, ref, scopedStacks, 
+/** The index store to read (#4519). Default: the project's. */
+opts) {
     if (ref !== "latest" && ref !== "true") {
         return {
             error: `chant search --at only accepts "latest" for now, got "${ref}"`,
             hint: "a specific snapshot commit is not wired up yet",
         };
     }
-    const stored = await readEnvironmentSnapshots(environment);
+    const store = opts?.store ?? (await resolveSnapshotStore());
+    const stored = await readEnvironmentSnapshotsFrom(store, environment);
     if (stored.size === 0) {
         return {
             error: `No snapshots found for environment "${environment}"`,

package/dist/lifecycle/scenario.d.ts

@@ -43,9 +43,10 @@ export interface ScenarioGivenFile {
 }
 /**
  * `given: snapshot("prod")` — the last snapshot recorded for that environment
- * on the `chant/lifecycle` orphan branch (one file per lexicon, read via
- * `readSnapshot`/`readEnvironmentSnapshots`, ../lifecycle/git.ts), replayed
- * exactly as `chant lifecycle plan` reads its own prior snapshot.
+ * in the project's index store (one file per lexicon, read through
+ * ./snapshot-store.ts, #4519), replayed exactly as `chant lifecycle plan`
+ * reads its own prior snapshot. With no store (`none`) a scenario names a
+ * checked-in fixture instead.
  */
 export interface ScenarioGivenEnv {
     readonly kind: "env";

package/dist/lifecycle/scenario.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../src/lifecycle/scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C;;iEAEiE;AACjE,eAAO,MAAM,eAAe,eAA+B,CAAC;AAE5D,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAMtD;AAED;wEACwE;AACxE,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;+CAK2C;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;iFAE6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACxD;8EAC0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAC/C;;sEAEkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED;uCACuC;AACvC,eAAO,MAAM,WAAW,YAAI,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;AAI5G;;;;;GAKG;AACH,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,oBAAoB,CAAC;IACjD,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,mBAAmB,CAoBpF;AAmID,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAOvE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAM5G"}
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../src/lifecycle/scenario.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C;;iEAEiE;AACjE,eAAO,MAAM,eAAe,eAA+B,CAAC;AAE5D,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAEjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAMtD;AAED;wEACwE;AACxE,MAAM,WAAW,yBAAyB;IACxC,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;+CAK2C;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;iFAE6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACxD;8EAC0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAC/C;;sEAEkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED;uCACuC;AACvC,eAAO,MAAM,WAAW,YAAI,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;AAI5G;;;;;GAKG;AACH,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,QAAQ,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,oBAAoB,CAAC;IACjD,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,mBAAmB,CAoBpF;AAmID,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAOvE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAM5G"}

package/dist/lifecycle/snapshot-store-fake.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A {@link SnapshotStore} made of the methods a test supplies, every other
+ * method reading as empty (#4519). It imports nothing at runtime, so a
+ * `vi.mock` factory can load it while the modules the real store needs are
+ * themselves mocked.
+ */
+import type { SnapshotStore } from "./snapshot-store.js";
+export declare function fakeSnapshotStore(parts?: Partial<SnapshotStore>): SnapshotStore;
+//# sourceMappingURL=snapshot-store-fake.d.ts.map

package/dist/lifecycle/snapshot-store-fake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store-fake.d.ts","sourceRoot":"","sources":["../../src/lifecycle/snapshot-store-fake.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,wBAAgB,iBAAiB,CAAC,KAAK,GAAE,OAAO,CAAC,aAAa,CAAM,GAAG,aAAa,CAoBnF"}

package/dist/lifecycle/snapshot-store-fake.js

@@ -0,0 +1,21 @@
+export function fakeSnapshotStore(parts = {}) {
+    return {
+        kind: "git-ref",
+        where: "the test store",
+        writable: true,
+        write: async () => ({ written: true }),
+        readLatest: async () => null,
+        readAt: async () => null,
+        list: async () => [],
+        keys: async () => [],
+        environments: async () => [],
+        writeIndex: async () => ({ written: false, reason: "the test store keeps no index" }),
+        listIndex: async () => [],
+        readIndexAt: async () => null,
+        readIndexLatest: async () => null,
+        readIndexScope: async () => null,
+        fetch: async () => { },
+        publish: async () => ({ status: "local" }),
+        ...parts,
+    };
+}

package/dist/lifecycle/snapshot-store-s3.d.ts

@@ -0,0 +1,102 @@
+/** Explicit credentials. */
+export interface S3StoreCredentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+    sessionToken?: string;
+}
+/** Where an s3 store keeps its objects. */
+export interface S3StoreSettings {
+    bucket: string;
+    /** Key prefix, without leading or trailing `/`. Default `chant`. */
+    prefix?: string;
+    /** Signing region. Default `us-east-1`. */
+    region?: string;
+    /** An S3-compatible endpoint (an emulator, MinIO). With one, credentials must be explicit. */
+    endpoint?: string;
+    /** Path-style addressing. Default: on with an endpoint, off without. */
+    forcePathStyle?: boolean;
+    credentials?: S3StoreCredentials;
+}
+/** The `fetch` the medium calls. Tests pass a fake. */
+export type S3Fetch = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    text(): Promise<string>;
+}>;
+export declare class S3StoreError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/** One object version, newest first in {@link S3Medium.versions}. */
+export interface S3ObjectVersion {
+    key: string;
+    versionId: string;
+    lastModified: string;
+    isLatest: boolean;
+}
+/**
+ * Resolve the credentials the medium signs with, by the rule in the module
+ * header. Exported for the test that pins it.
+ */
+export declare function resolveS3Credentials(settings: S3StoreSettings, env?: Record<string, string | undefined>): S3StoreCredentials;
+/** RFC 3986 percent-encoding, as S3 signs it. */
+export declare function encodeRfc3986(value: string): string;
+/**
+ * SigV4 headers for one S3 request. S3 signs the path encoded once, which is
+ * how {@link S3Medium} builds it, so the URL's pathname is the canonical URI
+ * as it stands.
+ */
+export declare function signS3Request(req: {
+    method: string;
+    url: string;
+    headers: Record<string, string>;
+    body: string;
+    region: string;
+    credentials: S3StoreCredentials;
+    now?: Date;
+}): Record<string, string>;
+/**
+ * Get, put and list over one bucket. Keys passed in are relative to the
+ * store's prefix.
+ */
+export declare class S3Medium {
+    readonly settings: S3StoreSettings;
+    private readonly prefix;
+    private readonly region;
+    private readonly fetchImpl;
+    private credentials?;
+    constructor(settings: S3StoreSettings, opts?: {
+        fetch?: S3Fetch;
+        env?: Record<string, string | undefined>;
+    });
+    /** `s3://bucket/prefix`, for messages. */
+    get where(): string;
+    private fullKey;
+    private stripPrefix;
+    private url;
+    private request;
+    /** The object's content, or null when absent. `versionId` reads an older version. */
+    get(key: string, versionId?: string): Promise<string | null>;
+    /**
+     * Put an object. With `ifAbsent`, an existing key is not overwritten and
+     * the result says `exists`. Returns the version id when the bucket keeps
+     * versions.
+     */
+    put(key: string, content: string, opts?: {
+        ifAbsent?: boolean;
+    }): Promise<{
+        exists: boolean;
+        versionId?: string;
+    }>;
+    /** The names directly under `dir/`: files, and directories with a trailing `/`. */
+    list(dir: string): Promise<string[]>;
+    /** Every version of every key under `dir/` (recursively), newest first. */
+    versions(dir: string): Promise<S3ObjectVersion[]>;
+}
+//# sourceMappingURL=snapshot-store-s3.d.ts.map

package/dist/lifecycle/snapshot-store-s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-store-s3.d.ts","sourceRoot":"","sources":["../../src/lifecycle/snapshot-store-s3.ts"],"names":[],"mappings":"AAiCA,4BAA4B;AAC5B,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC;AAED,uDAAuD;AACvD,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC;IACvH,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9C,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,qBAAa,YAAa,SAAQ,KAAK;IACR,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IAArD,YAAY,OAAO,EAAE,MAAM,EAAW,MAAM,CAAC,EAAE,MAAM,YAAA,EAGpD;CACF;AAED,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,eAAe,EACzB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,kBAAkB,CAwBpB;AAMD,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiCzB;AAcD;;;GAGG;AACH,qBAAa,QAAQ;IAOjB,QAAQ,CAAC,QAAQ,EAAE,eAAe;IANpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,WAAW,CAAC,CAAqB;IAEzC,YACW,QAAQ,EAAE,eAAe,EAClC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE,EAQrE;IAED,0CAA0C;IAC1C,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,GAAG;YAeG,OAAO;IAMrB,qFAAqF;IAC/E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMjE;IAED;;;;OAIG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAQvH;IAED,mFAAmF;IAC7E,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyBzC;IAED,2EAA2E;IACrE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CA2BtD;CACF"}