@intentius/terragucci 0.4.35 → 0.4.36

package/dist/audit.schema.json

@@ -8,25 +8,27 @@
   "properties": {
     "schema": { "const": "terragucci.audit/v1" },
     "id": { "type": "string", "description": "sha256: over where the entry came from; the same records give the same id." },
-    "kind": { "enum": ["approval-requested", "approval", "approval-revoked", "override-requested", "override", "override-revoked", "apply", "refused", "migration", "unlock", "state-export", "ephemeral-apply", "ephemeral-destroy"] },
+    "kind": { "enum": ["approval-requested", "approval", "approval-revoked", "override-requested", "override", "override-revoked", "apply", "refused", "migration", "unlock", "state-export", "ephemeral-apply", "ephemeral-destroy", "unrecorded-write"] },
     "project": { "type": "string", "description": "<host>/<path> of the repo." },
     "at": { "type": "string", "description": "When it happened, ISO 8601." },
-    "who": { "type": ["string", "null"], "description": "The approver, the overrider, whoever removed the line, or for an apply the approver it applied under. Null when nobody did." },
-    "what": { "type": "string", "description": "The gate (wave-<k>, or a migration's name) or, for an override or a state export, the root." },
+    "who": { "type": ["string", "null"], "description": "The approver, the overrider, whoever removed the line, for an apply the approver it applied under, or for an unrecorded write the writer a log of the state bucket names. Null when nobody did, or no log names one." },
+    "what": { "type": "string", "description": "The gate (wave-<k>, or a migration's name) or, for an override, a state export or an unrecorded write, the root." },
     "digest": { "type": ["string", "null"], "description": "The wave's set digest, or the digest an override binds. Null when a root failed to plan." },
     "result": { "type": "string" },
     "evidence": {
       "type": "object",
       "required": ["source"],
       "properties": {
-        "source": { "enum": ["ledger", "report"] },
+        "source": { "enum": ["ledger", "report", "state"] },
         "branch": { "type": "string" },
         "path": { "type": "string" },
         "commit": { "type": "string" },
         "bucket": { "type": "string" },
         "key": { "type": "string" },
         "url": { "type": "string" },
-        "job_url": { "type": "string" }
+        "job_url": { "type": "string" },
+        "location": { "type": "string", "description": "An unrecorded write: the state's location." },
+        "version_id": { "type": "string", "description": "An unrecorded write: the version the store lists." }
       }
     },
     "detail": { "type": "object", "description": "What else the source says, by kind." }

package/dist/estate.schema.json

@@ -268,6 +268,20 @@
               "report": { "type": "string", "description": "The wave's report.html, when the page can link it." }
             }
           }
+        },
+        "unrecorded": {
+          "type": "array",
+          "description": "The versions the state's store lists that no wave or migration recorded, from the audit trail's unrecorded-write entries, newest first. Absent when there are none.",
+          "items": {
+            "type": "object",
+            "required": ["version_id", "written_at", "who"],
+            "properties": {
+              "version_id": { "type": "string" },
+              "written_at": { "type": "string" },
+              "who": { "type": ["string", "null"], "description": "The writer a log of the state bucket names, else null." },
+              "deleted": { "type": "boolean", "description": "An S3 delete marker." }
+            }
+          }
         }
       }
     },

package/dist/report.schema.json

@@ -406,7 +406,32 @@
               "over": { "type": "boolean" }
             }
           },
-          "state": { "enum": ["planned", "waiting", "applying", "applied", "refused", "failed"], "description": "Where the wave stands (minor 21): a tf-plan wave is planned; a tf-apply wave waiting, applying, applied, refused or failed." },
+          "state": { "enum": ["planned", "waiting", "applying", "applied", "refused", "failed", "blocked"], "description": "Where the wave stands (minor 21): a tf-plan wave is planned; a tf-apply wave waiting, applying, applied, refused or failed, or blocked when none of its roots ran because an upstream of each did not apply (minor 41)." },
+          "outcomes": {
+            "type": "array",
+            "description": "A tf-apply wave's outcome of each root once it ended (minor 41): applied, unchanged, failed (with the first line of its plan's or apply's error), waiting, refused, decided (its share or group job applies it), not-applied (another root of the wave failed to plan) or blocked (with blocked_by).",
+            "items": {
+              "type": "object",
+              "required": ["root", "outcome"],
+              "additionalProperties": false,
+              "properties": {
+                "root": { "type": "string" },
+                "outcome": { "enum": ["applied", "unchanged", "failed", "waiting", "refused", "decided", "not-applied", "blocked"] },
+                "error": { "type": "string" },
+                "blocked_by": { "type": "string" }
+              }
+            }
+          },
+          "blocked": {
+            "type": "array",
+            "description": "A tf-apply wave's roots that did not run because an upstream did not apply in this run; blocked_by names the root whose failure held it, past any root blocked in between (minor 41).",
+            "items": {
+              "type": "object",
+              "required": ["root", "blocked_by"],
+              "additionalProperties": false,
+              "properties": { "root": { "type": "string" }, "blocked_by": { "type": "string" } }
+            }
+          },
           "reads": { "type": "array", "items": { "type": "integer" }, "description": "The waves whose roots' state its roots read (minor 21)." },
           "replans_after": { "type": "array", "items": { "type": "integer" }, "description": "A tf-plan wave whose plans read outputs known only once these waves apply: it plans again after they apply, and when that plan changes something its gate holds it for an approval of that plan under gate always or on-destructive, but not under gate never; its review digest is null (minor 21)." },
           "preview": {

package/dist/run.schema.json

@@ -66,7 +66,7 @@
           "number": { "type": "integer" },
           "roots": { "type": "array", "items": { "type": "string" } },
           "reads": { "type": "array", "items": { "type": "integer" }, "description": "The waves whose roots' state its roots read." },
-          "state": { "enum": ["not-started", "planned", "waiting", "applying", "applied", "refused", "failed"] },
+          "state": { "enum": ["not-started", "planned", "waiting", "applying", "applied", "refused", "failed", "blocked"] },
           "gate": { "type": "string", "description": "Its gate on the ledger, wave-<n>." },
           "policy": { "type": "string", "description": "The gate policy it ran under: always, on-destructive or never." },
           "approval": { "enum": ["not-requested", "waiting", "approved", "not-required"] },

package/dist/state-versions.schema.json

@@ -29,6 +29,7 @@
               "properties": {
                 "version_id": { "type": "string" },
                 "commit": { "type": "string" },
+                "started": { "type": "string", "description": "When the wave that recorded the version started. terragucci audit counts a version its store says was written between this and finished as the wave's." },
                 "finished": { "type": "string", "description": "When the wave that recorded the version finished." },
                 "wave": { "type": "integer" },
                 "path": { "type": "string", "description": "The wave's run directory, relative to the project's index.json." }