nexarch 0.12.14 → 0.12.15

package/dist/commands/ingest-infra.js

@@ -88,8 +88,28 @@ function loadState(statePath, dir) {
         return { document: parseTerraformStateBuffer(stdout), source: "terraform show -json" };
     }
     catch (error) {
-        const detail = error instanceof Error ? error.message : String(error);
-        throw new Error(`Could not read Terraform state. Run inside the infrastructure repo with terraform available, or pass --state <file>.\n  ${detail.split("\n")[0]}`);
+        // `error.message` is only ever "Command failed: terraform show -json",
+        // which names the command that failed and not one thing about why. The
+        // reason — no state, a backend that needs credentials, a lock, a directory
+        // owned by another user — is on stderr, and reporting the wrapper instead
+        // of the cause leaves the caller with nothing to act on. That matters more
+        // here than usual: the caller is normally an agent, and an agent given
+        // "Command failed" can only report failure, while an agent given
+        // "Error: Backend initialization required" can run terraform init.
+        const failure = error;
+        const stderr = (typeof failure.stderr === "string" ? failure.stderr : failure.stderr?.toString("utf8") ?? "").trim();
+        const reason = stderr || failure.message || String(error);
+        // Terraform's own errors are already formatted for a reader; keep enough
+        // lines to carry the explanation without pasting an entire trace.
+        const detail = reason
+            .split("\n")
+            .filter((line) => line.trim().length > 0)
+            .slice(0, 8)
+            .map((line) => `  ${line.trim()}`)
+            .join("\n");
+        throw new Error(`Could not read Terraform state in ${dir}.\n` +
+            `  Run inside the infrastructure repo with terraform available, or pass --state <file>.\n` +
+            `\n  terraform said:\n${detail}`);
     }
 }
 function resolveEnvironment(projection, override, dir, rootModuleDir) {

package/dist/lib/terraform-detect.js

@@ -183,7 +183,14 @@ export function discoverRootModules(repoDir) {
                 if (/^\s*provider\s+"[a-z0-9_]+"\s*\{/m.test(content))
                     hasProvider = true;
             }
-            const initialised = existsSync(join(dir, ".terraform"));
+            // A `.terraform` directory only proves provider plugins were downloaded.
+            // The backend — the thing `terraform show` needs — is initialised when
+            // `.terraform/terraform.tfstate` records its configuration. Treating the
+            // directory as proof reports a root as ready, the caller runs ingest, and
+            // Terraform answers "Backend initialization required" from somewhere the
+            // caller was told not to expect it.
+            const hasPluginDir = existsSync(join(dir, ".terraform"));
+            const initialised = existsSync(join(dir, ".terraform", "terraform.tfstate"));
             const hasTfvars = entries.some((entry) => entry.endsWith(".tfvars") || entry.endsWith(".tfvars.json"));
             const environmentHint = environmentFromPath(relative);
             const underStacksDir = /(^|[\\/])(environments|envs|stacks|live)([\\/]|$)/i.test(relative);
@@ -193,11 +200,13 @@ export function discoverRootModules(repoDir) {
                 signals.push("provider configuration");
             if (initialised)
                 signals.push("initialised");
+            else if (hasPluginDir)
+                signals.push("providers downloaded, backend not initialised");
             if (hasTfvars)
                 signals.push("tfvars");
             if (underStacksDir)
                 signals.push("stacks directory");
-            if (hasBackend || hasProvider || initialised || (underStacksDir && hasTfvars) || (underStacksDir && environmentHint)) {
+            if (hasBackend || hasProvider || initialised || hasPluginDir || (underStacksDir && hasTfvars) || (underStacksDir && environmentHint)) {
                 found.push({ dir, relative: relative || ".", signals, environmentHint, initialised, usesLocalBackend: hasLocalBackend });
                 // A root module's subdirectories are its own modules, not further roots.
                 return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexarch",
-  "version": "0.12.14",
+  "version": "0.12.15",
   "description": "Your architecture workspace for AI delivery.",
   "keywords": [
     "nexarch",