@intentius/terragucci 0.4.40 → 0.4.41

package/dist/terragucci.schema.json

@@ -251,93 +251,6 @@
       "pattern": "\\S",
       "description": "The command that writes the roots before any job reads them."
     },
-    "steps": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "properties": {
-          "name": {
-            "type": "string",
-            "pattern": "\\S"
-          },
-          "run": {
-            "type": "string",
-            "pattern": "\\S"
-          },
-          "before": {
-            "enum": [
-              "init",
-              "plan",
-              "apply",
-              "drift"
-            ]
-          },
-          "after": {
-            "enum": [
-              "init",
-              "plan",
-              "apply",
-              "drift"
-            ]
-          },
-          "roots": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            }
-          },
-          "on_failure": {
-            "enum": [
-              "fail",
-              "approve"
-            ]
-          }
-        },
-        "additionalProperties": false,
-        "required": [
-          "run"
-        ],
-        "oneOf": [
-          {
-            "required": [
-              "before"
-            ]
-          },
-          {
-            "required": [
-              "after"
-            ]
-          }
-        ],
-        "if": {
-          "properties": {
-            "on_failure": {
-              "const": "approve"
-            }
-          },
-          "required": [
-            "on_failure"
-          ]
-        },
-        "then": {
-          "properties": {
-            "before": {
-              "enum": [
-                "init",
-                "plan"
-              ]
-            },
-            "after": {
-              "enum": [
-                "init",
-                "plan"
-              ]
-            }
-          }
-        }
-      },
-      "description": "Commands run before or after a root's init, plan, apply and drift."
-    },
     "image": {
       "type": "string",
       "pattern": "^[^\\s]+$",
@@ -2084,93 +1997,6 @@
           "pattern": "\\S",
           "description": "The command that writes the roots before any job reads them."
         },
-        "steps": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "properties": {
-              "name": {
-                "type": "string",
-                "pattern": "\\S"
-              },
-              "run": {
-                "type": "string",
-                "pattern": "\\S"
-              },
-              "before": {
-                "enum": [
-                  "init",
-                  "plan",
-                  "apply",
-                  "drift"
-                ]
-              },
-              "after": {
-                "enum": [
-                  "init",
-                  "plan",
-                  "apply",
-                  "drift"
-                ]
-              },
-              "roots": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              },
-              "on_failure": {
-                "enum": [
-                  "fail",
-                  "approve"
-                ]
-              }
-            },
-            "additionalProperties": false,
-            "required": [
-              "run"
-            ],
-            "oneOf": [
-              {
-                "required": [
-                  "before"
-                ]
-              },
-              {
-                "required": [
-                  "after"
-                ]
-              }
-            ],
-            "if": {
-              "properties": {
-                "on_failure": {
-                  "const": "approve"
-                }
-              },
-              "required": [
-                "on_failure"
-              ]
-            },
-            "then": {
-              "properties": {
-                "before": {
-                  "enum": [
-                    "init",
-                    "plan"
-                  ]
-                },
-                "after": {
-                  "enum": [
-                    "init",
-                    "plan"
-                  ]
-                }
-              }
-            }
-          },
-          "description": "Commands run before or after a root's init, plan, apply and drift."
-        },
         "image": {
           "type": "string",
           "pattern": "^[^\\s]+$",

package/dist/types.d.ts

@@ -53,7 +53,7 @@ export interface OverrideEntry {
 /** The keys of one `approval_rules` entry. */
 export declare const APPROVAL_RULE_KEYS: readonly ["roots", "count", "roles", "not_author"];
 /**
- * One `approval_rules` entry (./approval-rules.ts): a wave with a root a glob
+ * One `approval_rules` entry, judged as chant's `approvals.quorum` rule (../approval.ts quorumOf): a wave with a root a glob
  * of `roots` matches waits for `count` distinct approvers of its set digest
  * (default 1), each holding one of `roles` in `.chant/trust.json` at base when
  * `roles` is set, and with `not_author` at least one who is not the change's
@@ -124,30 +124,6 @@ export type ApplyWhen = (typeof APPLY_WHEN)[number];
 export type Locks = (typeof LOCKS)[number];
 export type ApplyMerge = (typeof APPLY_MERGE)[number];
 export type ApplyRequire = (typeof APPLY_REQUIRES)[number];
-/** The stages a step runs before or after (`steps:`). `drift` is the drift job's refresh-only plan. */
-export declare const STEP_STAGES: readonly ["init", "plan", "apply", "drift"];
-export type StepStage = (typeof STEP_STAGES)[number];
-/** What a step's non-zero exit does: fail the root (the default), or hold its wave for an approval. */
-export declare const STEP_FAILURES: readonly ["fail", "approve"];
-export type StepFailure = (typeof STEP_FAILURES)[number];
-export declare const STEP_KEYS: readonly ["name", "run", "before", "after", "roots", "on_failure"];
-/**
- * One entry of `steps:`. `run` is a shell command, run in the root's
- * directory. Exactly one of `before` and `after` names the stage. `roots`
- * are globs of the roots it runs for (every root when unset).
- * `on_failure: approve` turns a non-zero exit into a hold: the root's wave
- * waits for an approval of its set digest, whatever `gate` says. Only a step
- * that runs before the gate is decided can hold it: one before or after
- * init or plan.
- */
-export interface StepSettings {
-    run: string;
-    name?: string;
-    before?: StepStage;
-    after?: StepStage;
-    roots?: string[];
-    on_failure?: StepFailure;
-}
 /**
  * `apply:`: when a change applies. `when: merge` (the default) applies the
  * default branch after a merge. `when: pull-request` applies an open pull
@@ -409,7 +385,7 @@ export declare const AGENT_DRIFT_RESPOND = "agent.drift opens the drift pull req
 export interface ReviewSettings {
     /** Turns the review on. */
     agent?: boolean;
-    /** The command line, run with the prompt on stdin; it prints the review. Default: Claude Code in print mode with no tools (REVIEW_COMMAND in review-agent.ts). */
+    /** The command line, run with the prompt on stdin; it prints the review. Default: Claude Code in print mode with no tools (REVIEW_COMMAND in chant's op/activities/review-agent.ts). */
     command?: string;
     /** The secret holding the model's API key, mapped into the review command's step alone. Default `ANTHROPIC_API_KEY`. */
     key_secret?: string;
@@ -467,17 +443,10 @@ export interface ProjectSettings {
      * plan, apply and drift jobs, on their own checkout.
      */
     synth?: string;
-    /**
-     * Commands run before and after a root's init, plan, apply and drift, in
-     * the stage's own job, on its checkout, with its environment less the forge
-     * tokens. Read from terragucci.yml at base, never from the change under
-     * review (./steps.ts).
-     */
-    steps?: StepSettings[];
     /**
      * The image every job runs in, in place of terragucci's: one built FROM
      * the terragucci image for the binary, so the job still has terragucci and
-     * the binary, plus what the steps need.
+     * the binary, plus what the `ci.hooks` need.
      */
     image?: string;
     /**
@@ -804,7 +773,7 @@ export declare const BUILT_IN: ResolvedSettings;
  * own clone URL and `rollouts` belongs to a single repo, so `defaults`
  * refuses both.
  */
-export declare const PROJECT_FILE_KEYS: readonly ["policy", "sources", "reports", "approval", "approval_rules", "gate", "roots", "waves", "parallelism", "synth", "steps", "drift", "cost", "tips", "runtime", "telemetry", "respond", "review", "decide", "audit_region", "modules", "terragrunt", "token_env", "generate", "ephemeral", "environments", "secrets"];
+export declare const PROJECT_FILE_KEYS: readonly ["policy", "sources", "reports", "approval", "approval_rules", "gate", "roots", "waves", "parallelism", "synth", "drift", "cost", "tips", "runtime", "telemetry", "respond", "review", "decide", "audit_region", "modules", "terragrunt", "token_env", "generate", "ephemeral", "environments", "secrets"];
 export declare class ConfigError extends Error {
     /** Every problem found, when the error is a validation failure. */
     readonly problems?: string[];
@@ -844,6 +813,8 @@ export declare function agentLoginWarning(agent: {
     token_env?: unknown;
     login?: unknown;
 } | undefined): string | undefined;
+/** Why terragucci.yml takes no `steps:`: chant runs them, from chant.workspace.json. */
+export declare const STEPS_MOVED = "steps are ci.hooks in chant.workspace.json now, each with a command list and perRun: true (before: init or drift is before.observe, after: init is before.plan, after: drift is after.plan, roots is targets, on_failure is onFailure); see https://intentius.io/terragucci/guides/run-steps/";
 export declare const MODULES_KEYS: Set<string>;
 export declare const REGISTRY_KEYS: string[];
 /** A registry namespace or module name, as the Terraform module registry protocol allows them. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/terragucci",
-  "version": "0.4.40",
+  "version": "0.4.41",
   "description": "The whole Terraform lifecycle, handled: one config file, generated pipelines for GitHub, GitLab and Forgejo.",
   "license": "Apache-2.0",
   "type": "module",
@@ -34,7 +34,7 @@
     "build": "node ../../scripts/build-cli.mjs"
   },
   "dependencies": {
-    "@intentius/chant": "0.124.24"
+    "@intentius/chant": "0.124.42"
   },
   "peerDependencies": {
     "@intentius/tsad-reference": "2.x",
@@ -50,10 +50,10 @@
   },
   "devDependencies": {
     "@cdktn/hcl2json": "0.24.0",
-    "@intentius/chant-lexicon-forgejo": "0.124.24",
-    "@intentius/chant-lexicon-github": "0.124.24",
-    "@intentius/chant-lexicon-gitlab": "0.124.24",
-    "@intentius/chant-lexicon-terraform": "0.124.24",
+    "@intentius/chant-lexicon-forgejo": "0.124.42",
+    "@intentius/chant-lexicon-github": "0.124.42",
+    "@intentius/chant-lexicon-gitlab": "0.124.42",
+    "@intentius/chant-lexicon-terraform": "0.124.42",
     "@intentius/tsad-reference": "2.1.0",
     "@modelcontextprotocol/sdk": "1.30.1"
   }