@quadnix/octo 0.0.30 → 0.2.0

package/dist/models/subnet/subnet.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"subnet.model.js","sourceRoot":"","sources":["../../../src/models/subnet/subnet.model.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,MAAM,cAAZ,MAAM,MAAO,SAAQ,MAA4B;IAUtD,YAAY,MAAc,EAAE,IAAY;QACtC,KAAK,EAAE,CAAC;QAVF,YAAO,GAA4B;YACzC,yBAAyB,EAAE,KAAK;YAChC,UAAU,EAAE,UAAU,CAAC,OAAO;SAC/B,CAAC;QAQA,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAChD,CAAC;IAED,IAAI,yBAAyB,CAAC,yBAAkC;QAC9D,IAAI,CAAC,OAAO,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IACrE,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACjC,CAAC;IAED,IAAI,UAAU,CAAC,UAAsB;QACnC,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC;IAC7D,CAAC;IAEQ,UAAU;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,GAAI,IAAI,CAAC,WAA6B,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9G,CAAC;IAEQ,KAAK;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QAEjD,OAAO;YACL,OAAO,EAAE,EAAE,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YACnG,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE;YACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,OAAO,CAC3B,MAAoB,EACpB,kBAA8D;QAE9D,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,QAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAExD,SAAS,CAAC,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAC/E,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAEjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,qBAAqB,CAAC,MAAc,EAAE,gBAAyB;QAC7D,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YAAE,mBAAmB,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE/D,IAAI,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9D,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YACxF,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF,CAAA;AAhGY,MAAM;IADlB,KAAK,CAAS,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC;;GAClC,MAAM,CAgGlB"}
+{"version":3,"file":"subnet.model.js","sourceRoot":"","sources":["../../../src/models/subnet/subnet.model.ts"],"names":[],"mappings":";;;;;;;;;;AACA,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,MAAM,cAAZ,MAAM,MAAO,SAAQ,MAA4B;IAKtD;;;;;;;OAOG;IACH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,IAAI,yBAAyB,CAAC,yBAAkC;QAC9D,IAAI,CAAC,OAAO,CAAC,yBAAyB,GAAG,yBAAyB,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU,CAAC,UAAsB;QACnC,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC;IAC7D,CAAC;IAOD;;;OAGG;IACH,YAAY,MAAc,EAAE,IAAY;QACtC,KAAK,EAAE,CAAC;QAVF,YAAO,GAA4B;YACzC,yBAAyB,EAAE,KAAK;YAChC,UAAU,EAAE,UAAU,CAAC,OAAO;SAC/B,CAAC;QAQA,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAU,KAAK,CAAC,OAAO,CAC3B,MAAoB,EACpB,kBAA8D;QAE9D,MAAM,MAAM,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAW,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,QAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAExD,SAAS,CAAC,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC;QAC/E,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAEjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACM,UAAU;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,CAAC,GAAI,IAAI,CAAC,WAA6B,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9G,CAAC;IAED;;OAEG;IACM,KAAK;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAY,CAAC;QAEjD,OAAO;YACL,OAAO,EAAE,EAAE,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YACnG,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE;YACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,qBAAqB,CAAC,MAAc,EAAE,gBAAyB;QAC7D,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;YAAE,mBAAmB,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE/D,IAAI,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC9D,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YACxF,oBAAoB,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5F,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF,CAAA;AAxHY,MAAM;IADlB,KAAK,CAAS,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC;;GAClC,MAAM,CAwHlB"}

package/dist/models/subnet/subnet.schema.d.ts

@@ -18,13 +18,22 @@ export declare enum SubnetType {
     PRIVATE = "private"
 }
 /**
+ * Schema of the {@link Subnet} model.
+ *
  * @group Models/Subnet
  */
 export declare class SubnetSchema {
+    /**
+     * The behavior options of the subnet.
+     * - See {@link Subnet.disableSubnetIntraNetwork} and {@link SubnetType}.
+     */
     options: {
         disableSubnetIntraNetwork: boolean;
         subnetType: SubnetType;
     };
+    /**
+     * The region this subnet belongs to.
+     */
     region: IModelReference;
     /**
      * The ID of the subnet.

package/dist/models/subnet/subnet.schema.js

@@ -29,11 +29,20 @@ export var SubnetType;
     SubnetType["PRIVATE"] = "private";
 })(SubnetType || (SubnetType = {}));
 /**
+ * Schema of the {@link Subnet} model.
+ *
  * @group Models/Subnet
  */
 export class SubnetSchema {
     constructor() {
+        /**
+         * The behavior options of the subnet.
+         * - See {@link Subnet.disableSubnetIntraNetwork} and {@link SubnetType}.
+         */
         this.options = Schema();
+        /**
+         * The region this subnet belongs to.
+         */
         this.region = Schema();
         /**
          * The ID of the subnet.

package/dist/models/subnet/subnet.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"subnet.schema.js","sourceRoot":"","sources":["../../../src/models/subnet/subnet.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG1D;;;;GAIG;AACH,MAAM,CAAN,IAAY,UAaX;AAbD,WAAY,UAAU;IACpB;;;;OAIG;IACH,+BAAiB,CAAA;IAEjB;;;OAGG;IACH,iCAAmB,CAAA;AACrB,CAAC,EAbW,UAAU,KAAV,UAAU,QAarB;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IAAzB;QACE,YAAO,GAAG,MAAM,EAAkE,CAAC;QAEnF,WAAM,GAAG,MAAM,EAAmB,CAAC;QAEnC;;;WAGG;QACH,aAAQ,GAAG,MAAM,EAAU,CAAC;QAE5B;;WAEG;QAEH,eAAU,GAAG,MAAM,EAAU,CAAC;IAChC,CAAC;CAAA;AADC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,CAAC;;gDAC/D"}
+{"version":3,"file":"subnet.schema.js","sourceRoot":"","sources":["../../../src/models/subnet/subnet.schema.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAG1D;;;;GAIG;AACH,MAAM,CAAN,IAAY,UAaX;AAbD,WAAY,UAAU;IACpB;;;;OAIG;IACH,+BAAiB,CAAA;IAEjB;;;OAGG;IACH,iCAAmB,CAAA;AACrB,CAAC,EAbW,UAAU,KAAV,UAAU,QAarB;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAAzB;QACE;;;WAGG;QACH,YAAO,GAAG,MAAM,EAAkE,CAAC;QAEnF;;WAEG;QACH,WAAM,GAAG,MAAM,EAAmB,CAAC;QAEnC;;;WAGG;QACH,aAAQ,GAAG,MAAM,EAAU,CAAC;QAE5B;;WAEG;QAEH,eAAU,GAAG,MAAM,EAAU,CAAC;IAChC,CAAC;CAAA;AADC;IADC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,CAAC;;gDAC/D"}

package/dist/modes/apply-transaction.d.ts

@@ -0,0 +1,23 @@
+import type { DiffMetadata } from '../functions/diff/diff-metadata.js';
+import type { App } from '../models/app/app.model.js';
+/**
+ * The result of applying the model transaction once: the model transaction and the resource diffs,
+ * with the resource graph built and swept into terraform as a side effect. `commit` consumes the
+ * model transaction; `generate` and `validate` consume the resource diffs.
+ */
+export interface ModelTransactionResult {
+    modelTransaction: DiffMetadata[][];
+    resourceDiffs: DiffMetadata[][];
+}
+/**
+ * Applies the model transaction: derives the full resource graph from intent (running every model
+ * action once) and sweeps it into terraform, returning the model transaction and resource diffs.
+ *
+ * This is the single "build" step of a lifecycle. In production each of generate/validate/commit is
+ * a separate process and builds its own; a single-process driver (e.g. the test harness) can build
+ * once and hand the same {@link ModelTransactionResult} to all three modes, so the graph is derived
+ * once rather than three times. No resource actions run here — that is `generateTerraform`'s path.
+ *
+ * @internal
+ */
+export declare function applyModelTransaction(app: App): Promise<ModelTransactionResult>;

package/dist/modes/apply-transaction.js

@@ -0,0 +1,25 @@
+import { Container } from '../functions/container/container.js';
+import { TransactionService } from '../services/transaction/transaction.service.js';
+/**
+ * Applies the model transaction: derives the full resource graph from intent (running every model
+ * action once) and sweeps it into terraform, returning the model transaction and resource diffs.
+ *
+ * This is the single "build" step of a lifecycle. In production each of generate/validate/commit is
+ * a separate process and builds its own; a single-process driver (e.g. the test harness) can build
+ * once and hand the same {@link ModelTransactionResult} to all three modes, so the graph is derived
+ * once rather than three times. No resource actions run here — that is `generateTerraform`'s path.
+ *
+ * @internal
+ */
+export async function applyModelTransaction(app) {
+    const transactionService = await Container.getInstance().get(TransactionService);
+    const transaction = transactionService.beginTransaction(await app.diff(), {
+        generateTerraform: true,
+        yieldModelTransaction: true,
+        yieldResourceDiffs: true,
+    });
+    const modelTransaction = (await transaction.next()).value;
+    const resourceDiffs = (await transaction.next()).value;
+    return { modelTransaction, resourceDiffs };
+}
+//# sourceMappingURL=apply-transaction.js.map

package/dist/modes/apply-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-transaction.js","sourceRoot":"","sources":["../../src/modes/apply-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAGhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAYpF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAQ;IAClD,MAAM,kBAAkB,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAEjF,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE;QACxE,iBAAiB,EAAE,IAAI;QACvB,qBAAqB,EAAE,IAAI;QAC3B,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,KAAyB,CAAC;IAC9E,MAAM,aAAa,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,KAAyB,CAAC;IAE3E,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC7C,CAAC"}

package/dist/modes/commit.mode.d.ts

@@ -0,0 +1,54 @@
+import type { TerraformFolderOutput, TerraformResourceOutput } from '../app.type.js';
+import type { CommitModeCompletedEvent } from '../events/index.js';
+import type { DiffMetadata } from '../functions/diff/diff-metadata.js';
+import type { ModelTransactionResult } from './apply-transaction.js';
+export type TerraformOutputs = Record<string, {
+    value: unknown;
+}>;
+/**
+ * Records a terraform apply back into octo's state: Committed ← Cloud. The catch-up step of a
+ * run, not a drift resolver.
+ *
+ * Operates on the resource graph the `transaction` already built: reads every module folder's outputs
+ * from the caller-supplied `outputs` map (keyed by module id), populates resource responses by the
+ * `${resourceId}-${key}` convention, and syncs the actual graph to the new graph.
+ *
+ * Rejects — all-or-nothing, throwing before any mutation: a declared output that is missing
+ * (partial apply) or carries a null value (broken apply). `partial` turns those rejections into
+ * warnings and keeps every resource whose outputs did not all resolve out of the committed graph,
+ * which is what lets a failed apply still record the half that worked. Outputs are demanded only for the
+ * modules the sweep filled — never for an emptied (deleted) folder, whose destroy simply drops its
+ * resources from the committed state. Warns: outputs supplied for a folder that is neither in
+ * intent nor in the committed folder record (`previousFolders`) are ignored — octo never fails on,
+ * or touches, a folder it does not recognize; re-declaring the module in intent re-adopts it.
+ *
+ * Returns the model transaction so {@link Octo} can run the persistence + commit hooks it owns,
+ * plus a description of what was committed for the caller to emit and surface.
+ *
+ * `previousMappings` is the octo→terraform mapping persisted by the last commit. It supplies the
+ * module and addresses of resources being deleted, which this run's sweep no longer renders.
+ *
+ * @internal
+ */
+export declare function commit({ outputs, partial, previousFolders, previousMappings, transaction, }: {
+    outputs: Map<string, TerraformOutputs>;
+    partial?: boolean;
+    previousFolders?: TerraformFolderOutput[];
+    previousMappings?: TerraformResourceOutput[];
+    transaction: ModelTransactionResult;
+}): Promise<{
+    emptiedModuleIds: string[];
+    externalResourceIds: string[];
+    modelTransaction: DiffMetadata[][];
+    resources: CommitModeCompletedEvent['payload']['resources'];
+    responses: {
+        key: string;
+        previousValue?: string;
+        resourceContext: string;
+        value: string;
+    }[];
+    warnings: {
+        message: string;
+        moduleId?: string;
+    }[];
+}>;

package/dist/modes/commit.mode.js

@@ -0,0 +1,235 @@
+import { TransactionError } from '../errors/index.js';
+import { Container } from '../functions/container/container.js';
+import { aggregateResourceActions } from '../functions/diff/aggregate-resource-actions.js';
+import { ResourceDataRepository } from '../resources/resource-data.repository.js';
+import { ATerraformResource } from '../resources/terraform-resource.abstract.js';
+import { TerraformService } from '../services/terraform/terraform.service.js';
+import { TransactionService } from '../services/transaction/transaction.service.js';
+/**
+ * Records a terraform apply back into octo's state: Committed ← Cloud. The catch-up step of a
+ * run, not a drift resolver.
+ *
+ * Operates on the resource graph the `transaction` already built: reads every module folder's outputs
+ * from the caller-supplied `outputs` map (keyed by module id), populates resource responses by the
+ * `${resourceId}-${key}` convention, and syncs the actual graph to the new graph.
+ *
+ * Rejects — all-or-nothing, throwing before any mutation: a declared output that is missing
+ * (partial apply) or carries a null value (broken apply). `partial` turns those rejections into
+ * warnings and keeps every resource whose outputs did not all resolve out of the committed graph,
+ * which is what lets a failed apply still record the half that worked. Outputs are demanded only for the
+ * modules the sweep filled — never for an emptied (deleted) folder, whose destroy simply drops its
+ * resources from the committed state. Warns: outputs supplied for a folder that is neither in
+ * intent nor in the committed folder record (`previousFolders`) are ignored — octo never fails on,
+ * or touches, a folder it does not recognize; re-declaring the module in intent re-adopts it.
+ *
+ * Returns the model transaction so {@link Octo} can run the persistence + commit hooks it owns,
+ * plus a description of what was committed for the caller to emit and surface.
+ *
+ * `previousMappings` is the octo→terraform mapping persisted by the last commit. It supplies the
+ * module and addresses of resources being deleted, which this run's sweep no longer renders.
+ *
+ * @internal
+ */
+export async function commit({ outputs, partial = false, previousFolders = [], previousMappings = [], transaction, }) {
+    const container = Container.getInstance();
+    const [resourceDataRepository, terraformService, transactionService] = await Promise.all([
+        container.get(ResourceDataRepository),
+        container.get(TerraformService),
+        container.get(TransactionService),
+    ]);
+    const { modelTransaction } = transaction;
+    const mappings = terraformService.getOctoTerraformResourceMappings();
+    const warnings = [];
+    // Read every filled module folder's outputs from the caller-supplied map. A folder with no
+    // outputs at all never applied, which a partial commit records as a warning and skips.
+    const outputsByModule = new Map();
+    const moduleIdsWithoutOutputs = [];
+    for (const moduleId of terraformService.getModuleIds()) {
+        const moduleOutputs = outputs.get(moduleId);
+        if (moduleOutputs === undefined) {
+            if (!partial) {
+                throw new TransactionError(`No terraform outputs provided for module "${moduleId}"!`);
+            }
+            warnings.push({
+                message: `No terraform outputs for module "${moduleId}"; its resources are left uncommitted.`,
+                moduleId,
+            });
+            moduleIdsWithoutOutputs.push(moduleId);
+            continue;
+        }
+        outputsByModule.set(moduleId, moduleOutputs);
+    }
+    // Outputs for a folder octo does not track (not in intent, not in the committed folder record)
+    // are ignored: warn, never reject. Tracked-but-emptied folders pass silently — their outputs
+    // (if any) are simply not demanded or read.
+    const trackedModuleIds = new Set([
+        ...terraformService.getModuleIds(),
+        ...previousFolders.map((folder) => folder.moduleId),
+    ]);
+    for (const moduleId of outputs.keys()) {
+        if (!trackedModuleIds.has(moduleId)) {
+            warnings.push({
+                message: `Terraform outputs supplied for folder "${moduleId}", which octo does not track (not in intent or committed ` +
+                    'state); ignoring it. Re-declare its module in intent to re-adopt it.',
+                moduleId,
+            });
+        }
+    }
+    // Populate responses; collect all missing and null outputs before failing. Non-null values are
+    // coerced to string to honor the flat-string response contract; a null value is rejected — no
+    // resource legitimately emits one, so it signals a broken apply and must not corrupt octo state.
+    const missingOutputs = [];
+    const nullOutputs = [];
+    const responseUpdates = [];
+    const unresolvedResourceContexts = new Set();
+    for (const mapping of mappings) {
+        const resource = resourceDataRepository.getNewResourceByContext(mapping.resourceContext);
+        if (!resource) {
+            continue;
+        }
+        const outputs = outputsByModule.get(mapping.moduleId) ?? {};
+        // A resource is recorded only when every one of its outputs resolved, so a partial commit never
+        // half-records one.
+        const resourceUpdates = [];
+        let isResolved = true;
+        if (mapping.entireResponseOutput !== undefined) {
+            const outputName = mapping.entireResponseOutput;
+            if (!(outputName in outputs)) {
+                missingOutputs.push(`${mapping.moduleId}/${outputName}`);
+                isResolved = false;
+            }
+            else if (outputs[outputName].value === null || outputs[outputName].value === undefined) {
+                nullOutputs.push(`${mapping.moduleId}/${outputName}`);
+                isResolved = false;
+            }
+            else {
+                const wholeResponse = outputs[outputName].value;
+                for (const [key, value] of Object.entries(wholeResponse)) {
+                    if (value === null || value === undefined) {
+                        nullOutputs.push(`${mapping.moduleId}/${outputName}.${key}`);
+                        isResolved = false;
+                    }
+                    else {
+                        resourceUpdates.push({ key, resource, value: String(value) });
+                    }
+                }
+            }
+        }
+        else {
+            for (const { key, outputName } of mapping.outputMappings) {
+                if (!(outputName in outputs)) {
+                    missingOutputs.push(`${mapping.moduleId}/${outputName}`);
+                    isResolved = false;
+                }
+                else if (outputs[outputName].value === null || outputs[outputName].value === undefined) {
+                    nullOutputs.push(`${mapping.moduleId}/${outputName}`);
+                    isResolved = false;
+                }
+                else {
+                    resourceUpdates.push({ key, resource, value: String(outputs[outputName].value) });
+                }
+            }
+        }
+        if (isResolved) {
+            responseUpdates.push(...resourceUpdates);
+        }
+        else {
+            unresolvedResourceContexts.add(mapping.resourceContext);
+        }
+    }
+    if (!partial && missingOutputs.length > 0) {
+        throw new TransactionError(`Cannot commit: missing terraform outputs (partial apply?): ${missingOutputs.join(', ')}! ` +
+            'Octo state is unchanged. Re-run with a partial commit to record what did apply.');
+    }
+    if (!partial && nullOutputs.length > 0) {
+        throw new TransactionError(`Cannot commit: null terraform outputs (broken apply?): ${nullOutputs.join(', ')}! ` +
+            'A declared output must carry a value. Octo state is unchanged.');
+    }
+    if (unresolvedResourceContexts.size > 0) {
+        warnings.push({
+            message: `Partial commit: ${unresolvedResourceContexts.size} resource(s) left uncommitted because their terraform ` +
+                `outputs are missing or null: ${[...unresolvedResourceContexts].sort().join(', ')}. The next run plans to ` +
+                'create them again, which terraform reconciles against its own state.',
+        });
+    }
+    // Capture the previous value before overwriting.
+    const responses = [];
+    for (const { key, resource, value } of responseUpdates) {
+        const previousValue = resource.response[key];
+        responses.push({
+            key,
+            previousValue: previousValue === undefined ? undefined : String(previousValue),
+            resourceContext: resource.getContext(),
+            value,
+        });
+        resource.response[key] = value;
+    }
+    // Tell every deleted external resource to delete itself, before anything is recorded.
+    //
+    // Terraform cannot: octo deletes a resource by removing its block from the configuration, and
+    // terraform will not run a `when = destroy` provisioner for a resource that is no longer in the
+    // configuration - it drops the `null_resource` from state and moves on, so the callback never
+    // fires. Without this the real thing outlives both state files with nothing tracking it.
+    //
+    // These deletes sit outside terraform's graph, so they run over the whole diff set with no regard
+    // for the order terraform destroyed anything in. That is only safe once terraform reached the
+    // desired state everywhere: an apply that stopped short leaves live infrastructure still pointing
+    // at what is about to be deleted, and octo cannot tell which. So an unconfirmed apply defers every
+    // one of them instead, keeping the resources recorded as present for the next run to delete.
+    //
+    // Placed before the sync deliberately. A delete that throws aborts the commit with octo state
+    // untouched, so the resource is still recorded as present and the deletion is retried next run.
+    const deferredResourceContexts = new Set();
+    if (moduleIdsWithoutOutputs.length > 0 || unresolvedResourceContexts.size > 0) {
+        for (const diff of transactionService.getExternalResourceDeletes(transaction.resourceDiffs)) {
+            deferredResourceContexts.add(diff.node.getContext());
+        }
+        if (deferredResourceContexts.size > 0) {
+            warnings.push({
+                message: `Partial commit: ${deferredResourceContexts.size} external resource(s) were not deleted because this ` +
+                    `apply was not confirmed everywhere: ${[...deferredResourceContexts].sort().join(', ')}. They stay ` +
+                    'recorded as present, and the next successful run deletes them.',
+            });
+        }
+    }
+    else {
+        await transactionService.applyExternalResourceDeletes(transaction.resourceDiffs);
+    }
+    // Terraform has applied the desired state: actual ← new, less anything a partial commit could not
+    // confirm, plus anything whose deletion was deferred.
+    resourceDataRepository.syncActualToNew(unresolvedResourceContexts, deferredResourceContexts);
+    // Describe what was committed. Addresses come from this run's sweep, falling back to the last
+    // commit's mapping for deleted resources, which the sweep no longer renders.
+    const mappingByContext = new Map(mappings.map((mapping) => [mapping.resourceContext, mapping]));
+    const previousByContext = new Map(previousMappings.map((mapping) => [mapping.resourceContext, mapping]));
+    const resources = [...aggregateResourceActions(transaction.resourceDiffs.flat()).entries()]
+        .filter(([resourceContext]) => !unresolvedResourceContexts.has(resourceContext) && !deferredResourceContexts.has(resourceContext))
+        .map(([resourceContext, action]) => {
+        const mapping = mappingByContext.get(resourceContext) ?? previousByContext.get(resourceContext);
+        return {
+            action: action.action,
+            moduleId: mapping?.moduleId,
+            reason: action.reason,
+            resourceContext,
+            resourceId: action.resourceId,
+            terraformAddresses: mapping?.terraformAddresses ?? [],
+        };
+    });
+    const writtenModuleIds = terraformService.getModuleIds();
+    const emptiedModuleIds = previousFolders
+        .map((folder) => folder.moduleId)
+        .filter((moduleId) => !writtenModuleIds.includes(moduleId));
+    // Every external resource whose response is now part of the committed graph. One left out of a
+    // partial commit is excluded: its published record is still the only copy of what it produced.
+    const externalResourceIds = [
+        ...new Set([
+            ...resourceDataRepository.getNewResourcesByProperties(),
+            ...transaction.resourceDiffs.flat().map((diff) => diff.node),
+        ]
+            .filter((resource) => !(resource instanceof ATerraformResource))
+            .filter((resource) => !unresolvedResourceContexts.has(resource.getContext()))
+            .map((resource) => resource.resourceId)),
+    ];
+    return { emptiedModuleIds, externalResourceIds, modelTransaction, resources, responses, warnings };
+}
+//# sourceMappingURL=commit.mode.js.map

package/dist/modes/commit.mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.mode.js","sourceRoot":"","sources":["../../src/modes/commit.mode.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAKpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAC3B,OAAO,EACP,OAAO,GAAG,KAAK,EACf,eAAe,GAAG,EAAE,EACpB,gBAAgB,GAAG,EAAE,EACrB,WAAW,GAOZ;IAQC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvF,SAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACrC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;KAClC,CAAC,CAAC;IAEH,MAAM,EAAE,gBAAgB,EAAE,GAAG,WAAW,CAAC;IAEzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,gCAAgC,EAAE,CAAC;IAErE,MAAM,QAAQ,GAA6C,EAAE,CAAC;IAE9D,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM,eAAe,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5D,MAAM,uBAAuB,GAAa,EAAE,CAAC;IAC7C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,YAAY,EAAE,EAAE,CAAC;QACvD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CAAC,6CAA6C,QAAQ,IAAI,CAAC,CAAC;YACxF,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,oCAAoC,QAAQ,wCAAwC;gBAC7F,QAAQ;aACT,CAAC,CAAC;YACH,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC/C,CAAC;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,4CAA4C;IAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,GAAG,gBAAgB,CAAC,YAAY,EAAE;QAClC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;KACpD,CAAC,CAAC;IACH,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EACL,0CAA0C,QAAQ,2DAA2D;oBAC7G,sEAAsE;gBACxE,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,8FAA8F;IAC9F,iGAAiG;IACjG,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,eAAe,GAAgE,EAAE,CAAC;IACxF,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;IACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,uBAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE5D,gGAAgG;QAChG,oBAAoB;QACpB,MAAM,eAAe,GAAgE,EAAE,CAAC;QACxF,IAAI,UAAU,GAAG,IAAI,CAAC;QAEtB,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAChD,IAAI,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,EAAE,CAAC;gBAC7B,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;gBACzD,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzF,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;gBACtD,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,KAAgC,CAAC;gBAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;oBACzD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;wBAC7D,UAAU,GAAG,KAAK,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBACzD,IAAI,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,EAAE,CAAC;oBAC7B,cAAc,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;oBACzD,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;qBAAM,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACzF,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;oBACtD,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,eAAe,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,gBAAgB,CACxB,8DAA8D,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACzF,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CACxB,0DAA0D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClF,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,0BAA0B,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EACL,mBAAmB,0BAA0B,CAAC,IAAI,wDAAwD;gBAC1G,gCAAgC,CAAC,GAAG,0BAA0B,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B;gBAC3G,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,MAAM,SAAS,GAAsF,EAAE,CAAC;IACxG,KAAK,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,eAAe,EAAE,CAAC;QACvD,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7C,SAAS,CAAC,IAAI,CAAC;YACb,GAAG;YACH,aAAa,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;YAC9E,eAAe,EAAE,QAAQ,CAAC,UAAU,EAAE;YACtC,KAAK;SACN,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjC,CAAC;IAED,sFAAsF;IACtF,EAAE;IACF,8FAA8F;IAC9F,gGAAgG;IAChG,8FAA8F;IAC9F,yFAAyF;IACzF,EAAE;IACF,kGAAkG;IAClG,8FAA8F;IAC9F,kGAAkG;IAClG,mGAAmG;IACnG,6FAA6F;IAC7F,EAAE;IACF,8FAA8F;IAC9F,gGAAgG;IAChG,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;IACnD,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,0BAA0B,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5F,wBAAwB,CAAC,GAAG,CAAE,IAAI,CAAC,IAAwB,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,wBAAwB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO,EACL,mBAAmB,wBAAwB,CAAC,IAAI,sDAAsD;oBACtG,uCAAuC,CAAC,GAAG,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc;oBACpG,gEAAgE;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,kBAAkB,CAAC,4BAA4B,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IACnF,CAAC;IAED,kGAAkG;IAClG,sDAAsD;IACtD,sBAAsB,CAAC,eAAe,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;IAE7F,8FAA8F;IAC9F,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzG,MAAM,SAAS,GAAG,CAAC,GAAG,wBAAwB,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACxF,MAAM,CACL,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,CACpB,CAAC,0BAA0B,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,eAAe,CAAC,CACrG;SACA,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChG,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe;YACf,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,IAAI,EAAE;SACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAC;IACzD,MAAM,gBAAgB,GAAG,eAAe;SACrC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE9D,+FAA+F;IAC/F,+FAA+F;IAC/F,MAAM,mBAAmB,GAAG;QAC1B,GAAG,IAAI,GAAG,CACR;YACE,GAAG,sBAAsB,CAAC,2BAA2B,EAAE;YACvD,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAuB,CAAC;SAChF;aACE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,YAAY,kBAAkB,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC1C;KACF,CAAC;IAEF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACrG,CAAC"}

package/dist/modes/generate.mode.d.ts

@@ -0,0 +1,30 @@
+import type { TerraformFolderOutput } from '../app.type.js';
+import type { DiffMetadata } from '../functions/diff/diff-metadata.js';
+import type { ModelTransactionResult } from './apply-transaction.js';
+/**
+ * Generates terragrunt module folders representing the full desired state: Folders ← Intent.
+ *
+ * Renders the resource graph the `transaction` already built — every resource contributed to
+ * terraform (terraform resources via `toHCL()`, external resources via the `null_resource` wrapper) — and
+ * writes one folder per octo module. Persists nothing to octo state; the returned resource
+ * diffs are a review artifact only. (An author's refusal in a `diff*` method surfaces earlier, when
+ * {@link applyModelTransaction} builds the transaction, so no folder is ever written from a bad graph.)
+ *
+ * `previousFolders` is the folder record persisted by previous runs (the caller reads it from
+ * `models.json` ∪ `resources.json`). A recorded folder the sweep does not produce was deleted from
+ * intent, and is written **emptied** — no resources, but the recorded provider blocks intact — so
+ * terragrunt still discovers it and a later apply destroys whatever its state holds (and cannot
+ * redeploy it). Folders are emptied, never removed. A folder the sweep did produce keeps the
+ * recorded provider blocks its resources no longer use, for the same reason.
+ *
+ * Writes are gentle: each folder is overwritten in place, and `outputDir` is not wiped, so
+ * `terraform.tfstate`, `.terragrunt-cache`, and any folder octo does not recognize (a user's own, or
+ * an emptied leftover) are preserved across runs.
+ *
+ * @internal
+ */
+export declare function generate({ outputDir, previousFolders, transaction, }: {
+    outputDir: string;
+    previousFolders?: TerraformFolderOutput[];
+    transaction: ModelTransactionResult;
+}): Promise<DiffMetadata[][]>;

package/dist/modes/generate.mode.js

@@ -0,0 +1,50 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import { join } from 'path';
+import { Container } from '../functions/container/container.js';
+import { TerraformService } from '../services/terraform/terraform.service.js';
+/**
+ * Generates terragrunt module folders representing the full desired state: Folders ← Intent.
+ *
+ * Renders the resource graph the `transaction` already built — every resource contributed to
+ * terraform (terraform resources via `toHCL()`, external resources via the `null_resource` wrapper) — and
+ * writes one folder per octo module. Persists nothing to octo state; the returned resource
+ * diffs are a review artifact only. (An author's refusal in a `diff*` method surfaces earlier, when
+ * {@link applyModelTransaction} builds the transaction, so no folder is ever written from a bad graph.)
+ *
+ * `previousFolders` is the folder record persisted by previous runs (the caller reads it from
+ * `models.json` ∪ `resources.json`). A recorded folder the sweep does not produce was deleted from
+ * intent, and is written **emptied** — no resources, but the recorded provider blocks intact — so
+ * terragrunt still discovers it and a later apply destroys whatever its state holds (and cannot
+ * redeploy it). Folders are emptied, never removed. A folder the sweep did produce keeps the
+ * recorded provider blocks its resources no longer use, for the same reason.
+ *
+ * Writes are gentle: each folder is overwritten in place, and `outputDir` is not wiped, so
+ * `terraform.tfstate`, `.terragrunt-cache`, and any folder octo does not recognize (a user's own, or
+ * an emptied leftover) are preserved across runs.
+ *
+ * @internal
+ */
+export async function generate({ outputDir, previousFolders = [], transaction, }) {
+    const terraformService = await Container.getInstance().get(TerraformService);
+    const { resourceDiffs } = transaction;
+    const moduleFiles = terraformService.renderAllModules(previousFolders);
+    // Write rule: a recorded folder the sweep did not produce was deleted from intent — add it to
+    // the write set emptied, with the providers recorded by the last run.
+    for (const folder of previousFolders) {
+        if (!moduleFiles.has(folder.moduleId)) {
+            moduleFiles.set(folder.moduleId, terraformService.renderEmptyModule(folder));
+        }
+    }
+    // Overwrite each module folder in place. The output directory is not wiped, so terraform state,
+    // caches, and unrelated folders survive a regenerate.
+    for (const [moduleId, files] of moduleFiles.entries()) {
+        const moduleDir = join(outputDir, moduleId);
+        await mkdir(moduleDir, { recursive: true });
+        await writeFile(join(moduleDir, 'main.tf'), files.mainTf, 'utf-8');
+        await writeFile(join(moduleDir, 'variables.tf'), files.variablesTf, 'utf-8');
+        await writeFile(join(moduleDir, 'outputs.tf'), files.outputsTf, 'utf-8');
+        await writeFile(join(moduleDir, 'terragrunt.hcl'), files.terragruntHcl, 'utf-8');
+    }
+    return resourceDiffs;
+}
+//# sourceMappingURL=generate.mode.js.map

package/dist/modes/generate.mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.mode.js","sourceRoot":"","sources":["../../src/modes/generate.mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAG9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAC7B,SAAS,EACT,eAAe,GAAG,EAAE,EACpB,WAAW,GAKZ;IACC,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE7E,MAAM,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC;IAEtC,MAAM,WAAW,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAEvE,8FAA8F;IAC9F,sEAAsE;IACtE,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,sDAAsD;IACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/modes/run-action.mode.d.ts

@@ -0,0 +1,30 @@
+import type { App } from '../models/app/app.model.js';
+interface RunActionResult {
+    action: 'add' | 'delete' | 'noop' | 'update';
+    resourceId: string;
+    response: Record<string, string>;
+}
+/**
+ * Runs a single resource action, invoked by terraform mid-apply for an external resource.
+ *
+ * Octo-internal: not a step of the user's generate → validate → apply → commit run — terraform
+ * shells back into it from a generated `local-exec` provisioner; users never run it by hand.
+ *
+ * Boots normally, computes the full resource diff, filters to `resourceId` — the diff decides
+ * whether this is an add, update, delete, or noop. Explicit `inputs`
+ * (`<parentResourceId>.<responseKey>` keys) are injected into the parent resources' responses in
+ * memory before the action runs. Rejects a `resourceId` that is not an external resource.
+ *
+ * What the action made of the resource is recorded against it, and a delete clears that record.
+ * Repeating a call for the same inputs and the same desired properties does nothing, because that
+ * record says the work is already done - terraform replaces a `null_resource` by destroying and
+ * recreating it, so it calls back twice for one change, and octo state learns nothing of the first
+ * call until `commit`. Nothing else in octo state is touched.
+ *
+ * @internal
+ */
+export declare function runAction(app: App, { inputs, resourceId }: {
+    inputs?: Record<string, unknown>;
+    resourceId: string;
+}): Promise<RunActionResult>;
+export {};