@intentius/terragucci 0.4.38 → 0.4.39

package/dist/estate.schema.json

@@ -85,9 +85,48 @@
           }
         }
       }
+    },
+    "versions": {
+      "type": "object",
+      "description": "The versions every root runs, from each project's versions.json: per binary, provider and module source, each version in use, newest first, and the roots on it. Absent until an apply records them.",
+      "required": ["binaries", "providers", "modules"],
+      "properties": {
+        "binaries": {
+          "type": "array",
+          "items": { "type": "object", "required": ["binary", "versions"], "properties": { "binary": { "type": "string" }, "versions": { "type": "array", "items": { "$ref": "#/$defs/versionRow" } } } }
+        },
+        "providers": {
+          "type": "array",
+          "items": { "type": "object", "required": ["provider", "versions"], "properties": { "provider": { "type": "string" }, "versions": { "type": "array", "items": { "$ref": "#/$defs/versionRow" } } } }
+        },
+        "modules": {
+          "type": "array",
+          "items": { "type": "object", "required": ["source", "versions"], "properties": { "source": { "type": "string" }, "versions": { "type": "array", "items": { "$ref": "#/$defs/versionRow" } } } }
+        }
+      }
     }
   },
   "$defs": {
+    "versionRow": {
+      "type": "object",
+      "description": "One version in use and the roots on it. An absent version: the binary did not say, or the module's source names none.",
+      "required": ["roots"],
+      "properties": {
+        "version": { "type": "string" },
+        "roots": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["project", "root"],
+            "properties": {
+              "project": { "type": "string" },
+              "root": { "type": "string" },
+              "call": { "type": "string", "description": "For a module, the call's address in the root." }
+            }
+          }
+        }
+      }
+    },
     "graphRoot": {
       "type": "object",
       "required": ["project", "root"],
@@ -215,6 +254,29 @@
               "status": { "enum": ["live", "destroy-failed"] }
             }
           }
+        },
+        "secrets": {
+          "type": "object",
+          "description": "Per root, the sensitive attributes its state holds and how many a write-only argument or an ephemeral resource could keep out, and for a choudoufu root its estate, record store and strict { secrets } setting. From the newest drift check that recorded them, else the newest plan of a push, else the newest plan of a pull request. Absent until a run records them.",
+          "required": ["run", "roots"],
+          "properties": {
+            "run": { "$ref": "#/$defs/run" },
+            "roots": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "required": ["root"],
+                "properties": {
+                  "root": { "type": "string" },
+                  "in_state": { "type": "integer" },
+                  "movable": { "type": "integer" },
+                  "estate": { "type": "string" },
+                  "record_store": { "type": "string" },
+                  "secrets": { "type": "string" }
+                }
+              }
+            }
+          }
         }
       }
     },

package/dist/report-index.schema.json

@@ -60,7 +60,25 @@
         "pull_request": { "type": "string" },
         "pull_request_url": { "type": "string" },
         "job_url": { "type": "string" },
-        "trace_url": { "type": "string" }
+        "trace_url": { "type": "string" },
+        "secrets": {
+          "type": "array",
+          "description": "A tf-plan or tf-drift row: each root whose plan leaves sensitive attributes in state, how many, and how many a write-only argument or an ephemeral resource could keep out. Absent when none.",
+          "items": {
+            "type": "object",
+            "required": ["root", "in_state", "movable"],
+            "properties": { "root": { "type": "string" }, "in_state": { "type": "integer" }, "movable": { "type": "integer" } }
+          }
+        },
+        "estates": {
+          "type": "array",
+          "description": "A tf-plan or tf-drift row: each choudoufu root's estate, record store and strict { secrets } setting. Absent when none.",
+          "items": {
+            "type": "object",
+            "required": ["root", "estate", "record_store", "secrets"],
+            "properties": { "root": { "type": "string" }, "estate": { "type": "string" }, "record_store": { "type": "string" }, "secrets": { "type": "string" } }
+          }
+        }
       }
     }
   }

package/dist/report.schema.json

@@ -147,7 +147,9 @@
                 "write_only": { "type": "array", "items": { "type": "string" } },
                 "kind": { "enum": ["tags", "description", "unknown"] },
                 "fold": { "$ref": "#/$defs/fold" },
-                "why": { "type": "string" }
+                "why": { "type": "string" },
+                "perpetual": { "const": true, "description": "A tf-plan's update or replacement the root's last applied waves each made too, to the same address with the same action and attributes, from the project's changes.json in the reports bucket (minor 43). The note folds it under Changes on every run; the plan, its digests and the gate read none of it." },
+                "streak": { "type": "integer", "minimum": 1, "description": "With perpetual: how many of the root's newest applied waves in a row made the change (minor 43)." }
               }
             }
           },
@@ -202,6 +204,21 @@
             "type": "array",
             "items": { "$ref": "#/$defs/resource" }
           },
+          "versions": {
+            "description": "On a tf-apply wave, a root that applied or had nothing to apply: the providers its .terraform.lock.hcl locks and the remote module calls init recorded in .terraform/modules/modules.json, nested calls included, at the applied commit (minor 42).",
+            "type": "object",
+            "required": ["providers", "modules"],
+            "properties": {
+              "providers": {
+                "type": "array",
+                "items": { "type": "object", "required": ["provider", "version"], "properties": { "provider": { "type": "string" }, "version": { "type": "string" } } }
+              },
+              "modules": {
+                "type": "array",
+                "items": { "type": "object", "required": ["call", "source"], "properties": { "call": { "type": "string" }, "source": { "type": "string" }, "version": { "type": "string" } } }
+              }
+            }
+          },
           "applied_changes": {
             "description": "On a tf-apply wave, a root that applied: what the apply did to each resource, and the top-level attributes an update or a replacement changed, by name. Never a value (minor 15).",
             "type": "array",
@@ -307,6 +324,25 @@
               "wave": { "type": "integer" },
               "module": { "type": "string" }
             }
+          },
+          "secrets": {
+            "type": "object",
+            "description": "The sensitive attributes its state holds once its plan applies (minor 42): in_state counts each resource instance's top-level attribute marked sensitive and set, movable those a write-only argument or an ephemeral resource could keep out on the root's binary and provider versions. Never a value. Absent when its plan leaves none.",
+            "required": ["in_state", "movable"],
+            "properties": {
+              "in_state": { "type": "integer" },
+              "movable": { "type": "integer" }
+            }
+          },
+          "live": {
+            "type": "object",
+            "description": "A choudoufu root under a live block (minor 42): its estate, its record store (s3://<bucket>/<prefix>, local, or the store's type) and its strict { secrets } setting, store when unset.",
+            "required": ["estate", "record_store", "secrets"],
+            "properties": {
+              "estate": { "type": "string" },
+              "record_store": { "type": "string" },
+              "secrets": { "type": "string" }
+            }
           }
         }
       }