@synapsestudios/lintofu 0.0.0-stage → 0.9.0

package/dist/rules/core/no-bool-as-count.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-bool-as-count.js","sourceRoot":"","sources":["../../../src/rules/core/no-bool-as-count.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAW;IACxC,OAAO;IACP,UAAU;IACV,aAAa;IACb,oBAAoB;IACpB,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,IAAgB;IACpC,OAAO,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,IAAgB;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;QACnC,OAAO,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC,EAAE,KAAK,YAAY,CAAC;IACnE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAA0D;IAClE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,gGAAgG;YAClG,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,WAAW,EACT,+JAA+J;SAClK;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO;gBAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;gBAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;oBAAE,OAAO;gBAClC,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,aAAa;oBACxB,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;wBACb,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;wBACjC,IACE,KAAK,CAAC,IAAI,KAAK,kBAAkB;4BACjC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,EAChC,CAAC;4BACD,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;wBAC1D,CAAC;wBACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC/C,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC;oBACtD,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-duplicate-map-keys.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'duplicateMapKey';
+}>;
+export default rule;
+//# sourceMappingURL=no-duplicate-map-keys.d.ts.map

package/dist/rules/core/no-duplicate-map-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-duplicate-map-keys.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-duplicate-map-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAG7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,iBAAiB,CAAA;CAAE,CAuCnE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-duplicate-map-keys.js

@@ -0,0 +1,42 @@
+import { objectItemKeyName } from './utils.js';
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Flag a repeated statically-known key in an object literal. HCL keeps only the last entry and silently discards the earlier ones.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            duplicateMapKey: 'Duplicate object key `{{key}}`. HCL keeps only the last entry and silently discards the earlier ones, which can drop settings such as an IAM policy condition.',
+        },
+        schema: [],
+    },
+    create(context) {
+        return {
+            // Each object literal is its own scope. Statically-known keys are literal
+            // strings, bare identifiers, and single-part templates; computed keys
+            // (traversals, calls, interpolations, conditionals) yield undefined and
+            // are skipped, since their collision cannot be proven at lint time.
+            ObjectConsExpr(node) {
+                const seen = new Set();
+                for (const item of node.items) {
+                    const name = objectItemKeyName(item);
+                    if (name === undefined)
+                        continue;
+                    if (seen.has(name)) {
+                        context.report({
+                            node: item.keyExpr,
+                            messageId: 'duplicateMapKey',
+                            data: { key: name },
+                        });
+                        continue;
+                    }
+                    seen.add(name);
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-duplicate-map-keys.js.map

package/dist/rules/core/no-duplicate-map-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-duplicate-map-keys.js","sourceRoot":"","sources":["../../../src/rules/core/no-duplicate-map-keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,IAAI,GAA8D;IACtE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,kIAAkI;YACpI,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,eAAe,EACb,gKAAgK;SACnK;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,0EAA0E;YAC1E,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,cAAc,CAAC,IAAI;gBACjB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;gBAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC9B,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBACrC,IAAI,IAAI,KAAK,SAAS;wBAAE,SAAS;oBACjC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACnB,OAAO,CAAC,MAAM,CAAC;4BACb,IAAI,EAAE,IAAI,CAAC,OAAO;4BAClB,SAAS,EAAE,iBAAiB;4BAC5B,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;yBACpB,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-empty-list-equality.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'emptyListEquality';
+}>;
+export default rule;
+//# sourceMappingURL=no-empty-list-equality.d.ts.map

package/dist/rules/core/no-empty-list-equality.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-empty-list-equality.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-empty-list-equality.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,mBAAmB,CAAA;CAAE,CAmDrE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-empty-list-equality.js

@@ -0,0 +1,48 @@
+const rule = {
+    meta: {
+        type: 'problem',
+        fixable: 'code',
+        docs: {
+            description: 'Flag `==` or `!=` against an empty tuple literal `[]`, which never matches a list, set, or map value. Use `length(expr) == 0` instead.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            emptyListEquality: 'Comparing with an empty tuple `[]` never matches a list, set, or map value. Compare `length(expr)` to `0` instead.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const sourceCode = context.sourceCode;
+        return {
+            // `[]` parses as a TupleConsExpr with no elements, and `==` is true only
+            // when both operands share a type, so a list/set/map value never equals
+            // `[]`. Only `==`/`!=` against such a literal is a mistake.
+            BinaryOpExpr(node) {
+                if (node.op !== 'equal' && node.op !== 'notEqual')
+                    return;
+                const lhsEmpty = node.lhs.type === 'TupleConsExpr' && node.lhs.exprs.length === 0;
+                const rhsEmpty = node.rhs.type === 'TupleConsExpr' && node.rhs.exprs.length === 0;
+                if (!lhsEmpty && !rhsEmpty)
+                    return;
+                context.report({
+                    node,
+                    messageId: 'emptyListEquality',
+                    // With one empty-tuple operand, rewrite to `length(other) == 0`.
+                    // When both sides are `[]` there is no expression to measure, so
+                    // leave the comparison alone and only report.
+                    fix: lhsEmpty && rhsEmpty
+                        ? undefined
+                        : (fixer) => {
+                            const other = lhsEmpty ? node.rhs : node.lhs;
+                            const otherText = sourceCode.getText(other);
+                            const op = node.op === 'equal' ? '==' : '!=';
+                            return fixer.replaceText(node, `length(${otherText}) ${op} 0`);
+                        },
+                });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-empty-list-equality.js.map

package/dist/rules/core/no-empty-list-equality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-empty-list-equality.js","sourceRoot":"","sources":["../../../src/rules/core/no-empty-list-equality.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAgE;IACxE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,wIAAwI;YAC1I,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,iBAAiB,EACf,oHAAoH;SACvH;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO;YACL,yEAAyE;YACzE,wEAAwE;YACxE,4DAA4D;YAC5D,YAAY,CAAC,IAAI;gBACf,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;oBAAE,OAAO;gBAC1D,MAAM,QAAQ,GACZ,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;gBACnE,MAAM,QAAQ,GACZ,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;oBAAE,OAAO;gBACnC,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI;oBACJ,SAAS,EAAE,mBAAmB;oBAC9B,iEAAiE;oBACjE,iEAAiE;oBACjE,8CAA8C;oBAC9C,GAAG,EACD,QAAQ,IAAI,QAAQ;wBAClB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;4BACR,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;4BAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;4BAC7C,OAAO,KAAK,CAAC,WAAW,CACtB,IAAI,EACJ,UAAU,SAAS,KAAK,EAAE,IAAI,CAC/B,CAAC;wBACJ,CAAC;iBACR,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-external-refs-in-destroy-provisioner.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'disallowedReference';
+}>;
+export default rule;
+//# sourceMappingURL=no-external-refs-in-destroy-provisioner.d.ts.map

package/dist/rules/core/no-external-refs-in-destroy-provisioner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-refs-in-destroy-provisioner.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-external-refs-in-destroy-provisioner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAiC7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,qBAAqB,CAAA;CAAE,CA8CvE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-external-refs-in-destroy-provisioner.js

@@ -0,0 +1,74 @@
+import { collectTraversals, findAttribute, traversalText } from './utils.js';
+function isDestroyBareword(expr) {
+    return (expr.type === 'ScopeTraversalExpr' &&
+        expr.traversal.length === 1 &&
+        expr.traversal[0]?.type === 'TraverseRoot' &&
+        expr.traversal[0].name === 'destroy');
+}
+function isAllowedTraversal(expr) {
+    const [head, second] = expr.traversal;
+    if (head?.type !== 'TraverseRoot')
+        return false;
+    if (head.name === 'self')
+        return true;
+    if (head.name === 'count') {
+        return (expr.traversal.length === 2 &&
+            second?.type === 'TraverseAttr' &&
+            second.name === 'index');
+    }
+    if (head.name === 'each') {
+        return (expr.traversal.length === 2 &&
+            second?.type === 'TraverseAttr' &&
+            (second.name === 'key' || second.name === 'value'));
+    }
+    return false;
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        docs: {
+            description: 'Flag references to anything other than `self`, `count.index`, or `each.key`/`each.value` inside `provisioner` blocks with `when = destroy`.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            disallowedReference: 'Destroy-time provisioners may only reference `self`, `count.index`, `each.key`, or `each.value`. `{{name}}` is not allowed.',
+        },
+        schema: [],
+    },
+    create(context) {
+        function checkAttributes(attrs) {
+            for (const attr of attrs) {
+                if (attr.name === 'when')
+                    continue;
+                const traversals = collectTraversals(attr.expression);
+                for (const t of traversals) {
+                    if (!isAllowedTraversal(t)) {
+                        context.report({
+                            node: t,
+                            messageId: 'disallowedReference',
+                            data: { name: traversalText(t) },
+                        });
+                    }
+                }
+            }
+        }
+        return {
+            Block(node) {
+                if (node.kind !== 'provisioner')
+                    return;
+                const whenAttr = findAttribute(node.body.attributes, 'when');
+                if (!whenAttr || !isDestroyBareword(whenAttr.expression))
+                    return;
+                checkAttributes(node.body.attributes);
+                for (const inner of node.body.blocks) {
+                    if (inner.kind === 'connection') {
+                        checkAttributes(inner.body.attributes);
+                    }
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-external-refs-in-destroy-provisioner.js.map

package/dist/rules/core/no-external-refs-in-destroy-provisioner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-external-refs-in-destroy-provisioner.js","sourceRoot":"","sources":["../../../src/rules/core/no-external-refs-in-destroy-provisioner.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7E,SAAS,iBAAiB,CAAC,IAAgB;IACzC,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAClC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,cAAc;QAC1C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB;IAClD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IACtC,IAAI,IAAI,EAAE,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,EAAE,IAAI,KAAK,cAAc;YAC/B,MAAM,CAAC,IAAI,KAAK,OAAO,CACxB,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,MAAM,EAAE,IAAI,KAAK,cAAc;YAC/B,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,IAAI,GAAkE;IAC1E,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,WAAW,EACT,6IAA6I;YAC/I,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,mBAAmB,EACjB,6HAA6H;SAChI;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,SAAS,eAAe,CAAC,KAA2B;YAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;oBAC3B,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3B,OAAO,CAAC,MAAM,CAAC;4BACb,IAAI,EAAE,CAAC;4BACP,SAAS,EAAE,qBAAqB;4BAChC,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;oBAAE,OAAO;gBACxC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC7D,IAAI,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,OAAO;gBACjE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAChC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-count-attribute.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'legacyCountAttribute';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-count-attribute.d.ts.map

package/dist/rules/core/no-legacy-count-attribute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-count-attribute.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-count-attribute.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AA4B7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,sBAAsB,CAAA;CAAE,CAmCxE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-count-attribute.js

@@ -0,0 +1,64 @@
+import { collectTraversals } from './utils.js';
+const RESERVED_ROOTS = new Set([
+    'var',
+    'local',
+    'module',
+    'data',
+    'each',
+    'self',
+    'path',
+    'terraform',
+    'count',
+]);
+// Matches `<type>.<name>.count`: a resource type root that is not a named
+// scope, a resource name, then the removed `.count` attribute.
+function legacyCountResource(expr) {
+    if (expr.traversal.length !== 3)
+        return undefined;
+    const [root, name, attr] = expr.traversal;
+    if (root?.type !== 'TraverseRoot' || RESERVED_ROOTS.has(root.name)) {
+        return undefined;
+    }
+    if (name?.type !== 'TraverseAttr')
+        return undefined;
+    if (attr?.type !== 'TraverseAttr' || attr.name !== 'count')
+        return undefined;
+    return `${root.name}.${name.name}`;
+}
+const rule = {
+    meta: {
+        type: 'problem',
+        fixable: 'code',
+        docs: {
+            description: 'Flag references to the legacy `.count` attribute of a resource, removed in Terraform 0.12. Use `length(...)` instead.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            legacyCountAttribute: 'The `.count` attribute of a resource was removed in Terraform 0.12. Use `length({{resource}})` instead.',
+        },
+        schema: [],
+    },
+    create(context) {
+        return {
+            Attribute(node) {
+                // collectTraversals tracks for-expression bindings, so a loop
+                // variable like `r` in `[for r in aws_instance.foo : r.count]` is
+                // never returned and cannot be mistaken for a resource reference.
+                for (const traversal of collectTraversals(node.expression)) {
+                    const resource = legacyCountResource(traversal);
+                    if (resource === undefined)
+                        continue;
+                    context.report({
+                        node: traversal,
+                        messageId: 'legacyCountAttribute',
+                        data: { resource },
+                        fix: (fixer) => fixer.replaceText(traversal, `length(${resource})`),
+                    });
+                }
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-legacy-count-attribute.js.map

package/dist/rules/core/no-legacy-count-attribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-count-attribute.js","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-count-attribute.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,OAAO;CACR,CAAC,CAAC;AAEH,0EAA0E;AAC1E,+DAA+D;AAC/D,SAAS,mBAAmB,CAAC,IAAwB;IACnD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;IAC1C,IAAI,IAAI,EAAE,IAAI,KAAK,cAAc,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,EAAE,IAAI,KAAK,cAAc;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,IAAI,EAAE,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC7E,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,IAAI,GAAmE;IAC3E,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,uHAAuH;YACzH,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,oBAAoB,EAClB,yGAAyG;SAC5G;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,SAAS,CAAC,IAAI;gBACZ,8DAA8D;gBAC9D,kEAAkE;gBAClE,kEAAkE;gBAClE,KAAK,MAAM,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;oBAChD,IAAI,QAAQ,KAAK,SAAS;wBAAE,SAAS;oBACrC,OAAO,CAAC,MAAM,CAAC;wBACb,IAAI,EAAE,SAAS;wBACf,SAAS,EAAE,sBAAsB;wBACjC,IAAI,EAAE,EAAE,QAAQ,EAAE;wBAClB,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,QAAQ,GAAG,CAAC;qBACpE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-dot-index.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'dotIndex' | 'dotSplat';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-dot-index.d.ts.map

package/dist/rules/core/no-legacy-dot-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-dot-index.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-dot-index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,CA0FzE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-dot-index.js

@@ -0,0 +1,79 @@
+const rule = {
+    meta: {
+        type: 'suggestion',
+        fixable: 'code',
+        docs: {
+            description: 'Flag legacy dot forms `list.0` and `a.*.b`. Use bracket index `list[0]` and full splat `a[*].b`.',
+            recommended: true,
+            severity: 'warn',
+        },
+        messages: {
+            dotIndex: 'Legacy dot index `.{{index}}` is discouraged. Use bracket index `[{{index}}]`.',
+            dotSplat: 'Legacy attribute splat `.*` is discouraged. Use `[*]`.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const source = context.sourceCode.getText();
+        // A dot index and a bracket index parse to the same TraverseIndex node; the
+        // only signal is the step's source text. `.0` is legacy, `[0]` is modern.
+        const reportDotIndexSteps = (traversal) => {
+            for (const step of traversal) {
+                if (step.type !== 'TraverseIndex')
+                    continue;
+                const stepText = source.slice(step.range.start.offset, step.range.end.offset);
+                if (!stepText.trimStart().startsWith('.'))
+                    continue;
+                context.report({
+                    node: step,
+                    messageId: 'dotIndex',
+                    data: { index: String(step.key) },
+                    fix: (fixer) => fixer.replaceTextRange([step.range.start.offset, step.range.end.offset], `[${String(step.key)}]`),
+                });
+            }
+        };
+        // Splat results indexed by a constant (`a.*.b[0]`) parse as a
+        // RelativeTraversalExpr wrapping the SplatExpr. Rewriting `.*` to `[*]`
+        // there changes meaning, so record those SplatExprs to skip their fix.
+        // ESLint visits the wrapping RelativeTraversalExpr before its child
+        // SplatExpr, so this set is populated before the SplatExpr handler reads it.
+        const noFixSplats = new Set();
+        return {
+            ScopeTraversalExpr(node) {
+                reportDotIndexSteps(node.traversal);
+            },
+            RelativeTraversalExpr(node) {
+                reportDotIndexSteps(node.traversal);
+                if (node.source.type === 'SplatExpr' &&
+                    node.traversal[0]?.type === 'TraverseIndex') {
+                    noFixSplats.add(node.source);
+                }
+            },
+            SplatExpr(node) {
+                // Read from the source end to the splat end so a bare `var.list.*`
+                // (whose `each` sits at the `*`) is still recognized. A legacy splat
+                // begins with `.*`; the modern `[*]` form starts with `[`.
+                const marker = /^(\s*)\.\*/.exec(source.slice(node.source.range.end.offset, node.range.end.offset));
+                if (!marker)
+                    return;
+                const dotStar = node.source.range.end.offset + (marker[1] ?? '').length;
+                // A constant index that binds to each element (`a.*.b[0]`, `a.*.b.0`)
+                // makes the `.*` to `[*]` rewrite meaning-changing, so report without a
+                // fix; the wrapping-index case is caught via noFixSplats above.
+                const eachIndexed = (node.each.type === 'ScopeTraversalExpr' ||
+                    node.each.type === 'RelativeTraversalExpr') &&
+                    node.each.traversal.some((s) => s.type === 'TraverseIndex');
+                const safeToFix = !noFixSplats.has(node) && !eachIndexed;
+                context.report({
+                    node,
+                    messageId: 'dotSplat',
+                    fix: safeToFix
+                        ? (fixer) => fixer.replaceTextRange([dotStar, dotStar + 2], '[*]')
+                        : undefined,
+                });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-legacy-dot-index.js.map

package/dist/rules/core/no-legacy-dot-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-dot-index.js","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-dot-index.ts"],"names":[],"mappings":"AAGA,MAAM,IAAI,GAAoE;IAC5E,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,kGAAkG;YACpG,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,MAAM;SACjB;QACD,QAAQ,EAAE;YACR,QAAQ,EACN,gFAAgF;YAClF,QAAQ,EAAE,wDAAwD;SACnE;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAE5C,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,mBAAmB,GAAG,CAAC,SAA+B,EAAQ,EAAE;YACpE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;oBAAE,SAAS;gBAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CACtB,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACpD,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,UAAU;oBACrB,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACjC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CACb,KAAK,CAAC,gBAAgB,CACpB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAChD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACxB;iBACJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,8DAA8D;QAC9D,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,6EAA6E;QAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAa,CAAC;QAEzC,OAAO;YACL,kBAAkB,CAAC,IAAI;gBACrB,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YACD,qBAAqB,CAAC,IAAI;gBACxB,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW;oBAChC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,eAAe,EAC3C,CAAC;oBACD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,SAAS,CAAC,IAAI;gBACZ,mEAAmE;gBACnE,qEAAqE;gBACrE,2DAA2D;gBAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAClE,CAAC;gBACF,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACxE,sEAAsE;gBACtE,wEAAwE;gBACxE,gEAAgE;gBAChE,MAAM,WAAW,GACf,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB;oBACtC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,uBAAuB,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;gBACzD,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI;oBACJ,SAAS,EAAE,UAAU;oBACrB,GAAG,EAAE,SAAS;wBACZ,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC;wBAClE,CAAC,CAAC,SAAS;iBACd,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-ignore-changes-wildcard.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'legacyIgnoreChangesWildcard';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-ignore-changes-wildcard.d.ts.map

package/dist/rules/core/no-legacy-ignore-changes-wildcard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-ignore-changes-wildcard.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-ignore-changes-wildcard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAG7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IACjC,UAAU,EAAE,6BAA6B,CAAC;CAC3C,CAkCA,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-ignore-changes-wildcard.js

@@ -0,0 +1,40 @@
+import { findAttribute, literalStringValue } from './utils.js';
+const rule = {
+    meta: {
+        type: 'problem',
+        fixable: 'code',
+        docs: {
+            description: 'Flag the quoted `["*"]` wildcard in a `lifecycle` `ignore_changes` list, replaced by the unquoted `all` keyword in Terraform 0.15.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            legacyIgnoreChangesWildcard: 'The quoted `"*"` wildcard in `ignore_changes` was removed in Terraform 0.15. Use the unquoted `all` keyword instead.',
+        },
+        schema: [],
+    },
+    create(context) {
+        return {
+            Block(node) {
+                if (node.kind !== 'lifecycle')
+                    return;
+                const attr = findAttribute(node.body.attributes, 'ignore_changes');
+                if (!attr)
+                    return;
+                const expr = attr.expression;
+                if (expr.type !== 'TupleConsExpr' || expr.exprs.length !== 1)
+                    return;
+                const only = expr.exprs[0];
+                if (only === undefined || literalStringValue(only) !== '*')
+                    return;
+                context.report({
+                    node: expr,
+                    messageId: 'legacyIgnoreChangesWildcard',
+                    fix: (fixer) => fixer.replaceText(expr, 'all'),
+                });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-legacy-ignore-changes-wildcard.js.map

package/dist/rules/core/no-legacy-ignore-changes-wildcard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-ignore-changes-wildcard.js","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-ignore-changes-wildcard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,IAAI,GAEL;IACH,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,oIAAoI;YACtI,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,2BAA2B,EACzB,sHAAsH;SACzH;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO;gBACtC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;gBACnE,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;gBAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBACrE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,GAAG;oBAAE,OAAO;gBACnE,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,6BAA6B;oBACxC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;iBAC/C,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-list-function.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'legacyListFunction';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-list-function.d.ts.map

package/dist/rules/core/no-legacy-list-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-list-function.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-list-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,oBAAoB,CAAA;CAAE,CAmEtE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-list-function.js

@@ -0,0 +1,67 @@
+const rule = {
+    meta: {
+        type: 'problem',
+        fixable: 'code',
+        docs: {
+            description: 'Flag the legacy `list(...)` function, removed in Terraform 0.15. Use a `[...]` tuple literal instead.',
+            recommended: true,
+            severity: 'error',
+        },
+        messages: {
+            legacyListFunction: 'The legacy `list(...)` function was deprecated in Terraform 0.12 and removed in 0.15. Use a `[...]` tuple literal instead.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const sourceCode = context.sourceCode;
+        // `type = list(string)` in a variable block is a current type constraint,
+        // not the legacy value function, but it parses as a FunctionCallExpr named
+        // `list`. Record each variable block's `type` expression range so the
+        // FunctionCallExpr handler can skip calls that fall within it. ESLint
+        // visits a Block before its descendant expressions, so these ranges are
+        // populated before any nested `list(...)` call is checked.
+        const typeConstraintRanges = [];
+        return {
+            Block(node) {
+                if (node.kind !== 'variable')
+                    return;
+                const typeAttr = node.body.attributes.find((a) => a.name === 'type');
+                if (typeAttr) {
+                    typeConstraintRanges.push({
+                        start: typeAttr.expression.range.start.offset,
+                        end: typeAttr.expression.range.end.offset,
+                    });
+                }
+            },
+            FunctionCallExpr(node) {
+                if (node.name !== 'list')
+                    return;
+                const withinTypeConstraint = typeConstraintRanges.some((r) => node.range.start.offset >= r.start &&
+                    node.range.end.offset <= r.end);
+                if (withinTypeConstraint)
+                    return;
+                context.report({
+                    node,
+                    messageId: 'legacyListFunction',
+                    // Splice the original argument source (comma-separated, from the
+                    // first arg's start to the last arg's end) into a bracket tuple.
+                    // A `...` spread cannot become a tuple literal, so skip the fix.
+                    fix: node.expandFinal
+                        ? undefined
+                        : (fixer) => {
+                            const first = node.args[0];
+                            const last = node.args[node.args.length - 1];
+                            const inner = first && last
+                                ? sourceCode
+                                    .getText()
+                                    .slice(first.range.start.offset, last.range.end.offset)
+                                : '';
+                            return fixer.replaceText(node, `[${inner}]`);
+                        },
+                });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-legacy-list-function.js.map

package/dist/rules/core/no-legacy-list-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-list-function.js","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-list-function.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAiE;IACzE,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,uGAAuG;YACzG,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO;SAClB;QACD,QAAQ,EAAE;YACR,kBAAkB,EAChB,4HAA4H;SAC/H;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,oBAAoB,GAAqC,EAAE,CAAC;QAClE,OAAO;YACL,KAAK,CAAC,IAAI;gBACR,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBACrE,IAAI,QAAQ,EAAE,CAAC;oBACb,oBAAoB,CAAC,IAAI,CAAC;wBACxB,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;wBAC7C,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;qBAC1C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO;gBACjC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK;oBAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CACjC,CAAC;gBACF,IAAI,oBAAoB;oBAAE,OAAO;gBACjC,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI;oBACJ,SAAS,EAAE,oBAAoB;oBAC/B,iEAAiE;oBACjE,iEAAiE;oBACjE,iEAAiE;oBACjE,GAAG,EAAE,IAAI,CAAC,WAAW;wBACnB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;4BACR,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;4BAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;4BAC7C,MAAM,KAAK,GACT,KAAK,IAAI,IAAI;gCACX,CAAC,CAAC,UAAU;qCACP,OAAO,EAAE;qCACT,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gCAC3D,CAAC,CAAC,EAAE,CAAC;4BACT,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC;wBAC/C,CAAC;iBACN,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-lookup.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'legacyLookup';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-lookup.d.ts.map

package/dist/rules/core/no-legacy-lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-lookup.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,cAAc,CAAA;CAAE,CAiDhE,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-lookup.js

@@ -0,0 +1,53 @@
+const rule = {
+    meta: {
+        type: 'suggestion',
+        fixable: 'code',
+        docs: {
+            description: 'Flag two-argument `lookup()`, deprecated since Terraform 0.7. Use index syntax instead.',
+            recommended: true,
+            severity: 'warn',
+        },
+        messages: {
+            legacyLookup: 'Two-argument `lookup()` is deprecated. Use index syntax, e.g. `var.tags["Name"]`.',
+        },
+        schema: [],
+    },
+    create(context) {
+        const sourceCode = context.sourceCode;
+        return {
+            FunctionCallExpr(node) {
+                if (node.name !== 'lookup')
+                    return;
+                // The spread form `lookup(var.pair...)` has unknown runtime arity.
+                if (node.expandFinal)
+                    return;
+                // A third default argument keeps `lookup()` valid; only the two-arg
+                // form is equivalent to native index syntax.
+                if (node.args.length !== 2)
+                    return;
+                const first = node.args[0];
+                const second = node.args[1];
+                if (first === undefined || second === undefined)
+                    return;
+                context.report({
+                    node,
+                    messageId: 'legacyLookup',
+                    fix: (fixer) => {
+                        const firstText = sourceCode.getText(first);
+                        const secondText = sourceCode.getText(second);
+                        // The index postfix `[...]` binds tighter than conditional,
+                        // binary, and unary operators, so a first argument built from one
+                        // of those needs parentheses to keep its original meaning.
+                        const needsParens = first.type === 'ConditionalExpr' ||
+                            first.type === 'BinaryOpExpr' ||
+                            first.type === 'UnaryOpExpr';
+                        const base = needsParens ? `(${firstText})` : firstText;
+                        return fixer.replaceText(node, `${base}[${secondText}]`);
+                    },
+                });
+            },
+        };
+    },
+};
+export default rule;
+//# sourceMappingURL=no-legacy-lookup.js.map

package/dist/rules/core/no-legacy-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-lookup.js","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-lookup.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAA2D;IACnE,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,MAAM;QACf,IAAI,EAAE;YACJ,WAAW,EACT,yFAAyF;YAC3F,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,MAAM;SACjB;QACD,QAAQ,EAAE;YACR,YAAY,EACV,mFAAmF;SACtF;QACD,MAAM,EAAE,EAAE;KACX;IACD,MAAM,CAAC,OAAO;QACZ,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,OAAO;YACL,gBAAgB,CAAC,IAAI;gBACnB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO;gBACnC,mEAAmE;gBACnE,IAAI,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAC7B,oEAAoE;gBACpE,6CAA6C;gBAC7C,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO;gBACxD,OAAO,CAAC,MAAM,CAAC;oBACb,IAAI;oBACJ,SAAS,EAAE,cAAc;oBACzB,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;wBACb,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5C,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBAC9C,4DAA4D;wBAC5D,kEAAkE;wBAClE,2DAA2D;wBAC3D,MAAM,WAAW,GACf,KAAK,CAAC,IAAI,KAAK,iBAAiB;4BAChC,KAAK,CAAC,IAAI,KAAK,cAAc;4BAC7B,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;wBAC/B,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;wBACxD,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,UAAU,GAAG,CAAC,CAAC;oBAC3D,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/rules/core/no-legacy-map-function.d.ts

@@ -0,0 +1,6 @@
+import type { OpenTofuRuleDefinition } from '../../types.js';
+declare const rule: OpenTofuRuleDefinition<{
+    MessageIds: 'legacyMapFunction';
+}>;
+export default rule;
+//# sourceMappingURL=no-legacy-map-function.d.ts.map

package/dist/rules/core/no-legacy-map-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-legacy-map-function.d.ts","sourceRoot":"","sources":["../../../src/rules/core/no-legacy-map-function.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAgC7D,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC;IAAE,UAAU,EAAE,mBAAmB,CAAA;CAAE,CA6DrE,CAAC;AAEF,eAAe,IAAI,CAAC"}