feat: export repository as Terraform (#29)

* feat: export repository as Terraform

- Add Export as Terraform context menu command on repository nodes
- Consolidate upstream fetch into single shared helper in upstreamChecker.js
- Updated so all three upstream consumers use shared helper
- Upstream auth secrets use Terraform variable placeholders, never plaintext

* fix: reconcile inferred-format upstream fetch with full canonical list

- Inline indicator now falls back to getAllUpstreamData when inferred formats are incomplete
- Canonicalize inferred format order to match shared cache keys
- Add regression test for partial inferred-format undercounting

* fix: consolidate upstream fetch and fix WebView/Terraform export consumers
- Remove duplicate fetch logic from WebView and exporter
- Add abort/cancellation support for concurrent exports

* fix: merge conflict resolution with upstream hardening
- Merge shared upstream helper architecture with cache validation hardening
- Rewrite cache robustness tests against current helper API
- Fix test harness module instance alignment for repositoryNode and terraformExporter
- docs: add 2.1.0 changelog for Terraform export, upstream and license resolution reliability

* chore: updated .gitignore

Author: DevonL

.gitignore

@@ -3,15 +3,11 @@ node_modules/
 *.vsix
 .env
 .DS_Store
+.src/
 .npmrc
 
-# Local planning / agent reference docs
-/internal-docs/
-AGENTS*.md
-CLAUDE*.md
-IMPLEMENTATION*.md
-API_REFERENCE*.md
-ARCHITECTURE*.md
+# Local planning
+internal_docs/
 
 # Local agent / MCP config
 .mcp.json

CHANGELOG.md

@@ -3,6 +3,15 @@
 
 This release transforms the extension from a basic package explorer into a full package intelligence platform with security remediation, dependency health scanning, license compliance, upstream inspection, and cross-repository promotion workflows.
 
+#### Terraform Export
+- "Export as Terraform" context menu command on repository nodes generates a complete HCL configuration file using the Cloudsmith Terraform provider.
+- Exports the repository resource with all non-default settings including permissions, format-specific options, broadcast state, and storage region.
+- Exports all configured upstreams as `cloudsmith_repository_upstream` resources across all package formats, with correct `upstream_type` derived from the format endpoint.
+- Exports retention rules as `cloudsmith_repository_retention_rule` when configured.
+- All resource references use Terraform interpolation (`data.cloudsmith_namespace`, `cloudsmith_repository`) for portable, import-ready configurations.
+- Upstream auth secrets are never exported as plaintext. Sensitive values use Terraform variable placeholders with `sensitive = true`.
+- Generated HCL opens in a new editor tab for review before saving.
+
 #### Package Search
 - Full-text package search across workspaces and repositories with Cloudsmith query syntax support.
 - Guided multi-step search with filter presets for quarantined packages, policy violations, vulnerability violations, and license violations.

extension.js

@@ -18,9 +18,19 @@ const { UpstreamDetailProvider } = require("./views/upstreamDetailProvider");
 const { PromotionProvider } = require("./views/promotionProvider");
 const { SearchQueryBuilder } = require("./util/searchQueryBuilder");
 const { formatApiError } = require("./util/errorFormatter");
+<<<<<<< HEAD
 const { LicenseClassifier } = require("./util/licenseClassifier");
+=======
+const { fetchRepositoryUpstreams, generateTerraformConfig } = require("./util/terraformExporter");
+<<<<<<< HEAD
+>>>>>>> 52ddc2b (feat: export repository as Terraform)
+=======
+const { SUPPORTED_UPSTREAM_FORMATS } = require("./util/upstreamFormats");
+>>>>>>> 50c8bac (fix: consolidate upstream fetch and fix WebView/Terraform export consumers)
 const recentPackages = require("./util/recentPackages");
 
+let exportTerraformAbortController = null;
+
 /**
  * Helper: unwrap a property that may be stored as:
  *   - a raw string: "value"
@@ -228,11 +238,7 @@ const FILTER_PRESETS = [
     },
 ];
 
-const FORMAT_OPTIONS = [
-    "alpine", "cargo", "composer", "conan", "conda", "cran", "dart", "deb",
-    "docker", "go", "helm", "hex", "maven", "npm", "nuget", "python",
-    "rpm", "ruby", "swift", "terraform", "raw",
-];
+const FORMAT_OPTIONS = SUPPORTED_UPSTREAM_FORMATS;
 
 /**
  * Helper: get workspaces from cache or fetch fresh.
@@ -292,6 +298,17 @@ async function getWorkspaces(context) {
     return result;
 }
 
+async function getPreferredTextDocumentLanguage() {
+  const availableLanguages = new Set(await vscode.languages.getLanguages());
+  if (availableLanguages.has("terraform")) {
+    return "terraform";
+  }
+  if (availableLanguages.has("hcl")) {
+    return "hcl";
+  }
+  return "plaintext";
+}
+
 function buildRawSearchQuery(query) {
   return new SearchQueryBuilder().raw(query).build();
 }
@@ -1697,6 +1714,101 @@ async function activate(context) {
       await upstreamDetailProvider.show(workspace, repoSlug, repoName);
     }),
 
+    vscode.commands.registerCommand("cloudsmith-vsc.exportTerraform", async (item) => {
+      if (!item) {
+        vscode.window.showWarningMessage("No repository selected.");
+        return;
+      }
+
+      const workspace = item.workspace;
+      const repoSlug = item.slug || item.slug_perm;
+      const repoName = item.name;
+
+      if (!workspace || !repoSlug || !repoName) {
+        vscode.window.showWarningMessage("Could not determine repository details.");
+        return;
+      }
+
+      if (exportTerraformAbortController) {
+        exportTerraformAbortController.abort();
+      }
+
+      const abortController = new AbortController();
+      exportTerraformAbortController = abortController;
+      const cloudsmithAPI = new CloudsmithAPI(context);
+
+      await vscode.window.withProgress(
+        {
+          location: vscode.ProgressLocation.Notification,
+          title: "Generating Terraform configuration...",
+        },
+        async () => {
+          try {
+            const [repoResult, retentionResult, upstreamResult] = await Promise.all([
+              cloudsmithAPI.get(`repos/${workspace}/${repoSlug}`),
+              cloudsmithAPI.get(`repos/${workspace}/${repoSlug}/retention`),
+              fetchRepositoryUpstreams(context, workspace, repoSlug, {
+                signal: abortController.signal,
+              }),
+            ]);
+
+            if (abortController.signal.aborted || upstreamResult === null) {
+              return;
+            }
+
+            if (typeof repoResult === "string") {
+              vscode.window.showErrorMessage(
+                `Could not export repository. ${formatApiError(repoResult)}`
+              );
+              return;
+            }
+
+            const upstreamLoadFailed = Boolean(upstreamResult && upstreamResult.error);
+            const retentionRules = (
+              typeof retentionResult === "string" ||
+              !retentionResult ||
+              typeof retentionResult !== "object"
+            )
+              ? null
+              : retentionResult;
+
+            const hclContent = generateTerraformConfig({
+              repo: repoResult,
+              workspace,
+              upstreams: upstreamLoadFailed ? [] : upstreamResult.data,
+              retention: retentionRules,
+              exportedAt: new Date().toISOString(),
+              upstreamLoadFailed,
+            });
+
+            const doc = await vscode.workspace.openTextDocument({
+              content: hclContent,
+              language: await getPreferredTextDocumentLanguage(),
+            });
+
+            if (abortController.signal.aborted) {
+              return;
+            }
+
+            await vscode.window.showTextDocument(doc);
+          } catch (error) {
+            if (abortController.signal.aborted) {
+              return;
+            }
+
+            const message = error && error.message ? error.message : String(error);
+            vscode.window.showErrorMessage(
+              `Could not export repository. ${formatApiError(message)}`
+            );
+          } finally {
+            if (exportTerraformAbortController === abortController) {
+              exportTerraformAbortController = null;
+            }
+          }
+        }
+      );
+    }),
+
     // Phase 9: Preview upstream resolution
     vscode.commands.registerCommand("cloudsmith-vsc.previewUpstreamResolution", async (item) => {
       const defaultWsSlug = getDefaultWorkspace();
@@ -1714,11 +1826,6 @@ async function activate(context) {
         });
         if (!pkgName) return;
 
-        const FORMAT_OPTIONS = [
-          "alpine", "cargo", "composer", "conan", "conda", "cran", "dart", "deb",
-          "docker", "go", "helm", "hex", "maven", "npm", "nuget", "python",
-          "rpm", "ruby", "swift", "terraform", "raw",
-        ];
         const formatPick = await vscode.window.showQuickPick(
           FORMAT_OPTIONS.map(f => ({ label: f })),
           { placeHolder: "Select a package format" }
@@ -1987,4 +2094,5 @@ function deactivate() {}
 module.exports = {
   activate,
   deactivate,
+  FORMAT_OPTIONS,
 };