Changelog

All notable changes to this project are documented here.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

provider_config block in tlumi.yaml for setting provider-namespaced Pulumi config (e.g. azure-native:location: westeurope), the complement to variables (which are set under the project namespace). Many real Pulumi programs need this; previously the only workaround was hand-editing internal Pulumi files.

Initial public release.

Terraform-like CLI over the Pulumi Automation API: init, plan, apply, destroy, refresh, import, output, show, validate, fmt, clean, and version.
Local state by default in .tlumi/state/, with no Pulumi Cloud account and no ~/.pulumi pollution. Optional remote backends (AWS S3, Azure Blob, GCS) via backend.url in tlumi.yaml; see docs/backends.md.
Opt-in secret encryption via TLUMI_SECRETS_PASSPHRASE. Without a passphrase, tlumi refuses to store secrets in plaintext unless secrets.allow_unencrypted: true is set.
State management: state list, state show, state rm, state mv, state pull, state push, and state unlock, with a timestamped backup written before every state mutation.
Dependency management: deps add, deps install, and deps list, using an auto-installed uv for the provider virtualenv.
Variables via --var, --var-file, and TLUMI_VAR_*; operation flags --target, --replace, --destroy, --out, --plan, --show-secrets, --auto-approve, --json, and --verbose.
Property-level diffs in plan and apply previews, rendered from Pulumi engine events.
Four runnable examples: random (no credentials), aws-s3, azure-container-apps, and azure-modular.
Architecture Decision Records in DESIGN.md, plus CONTRIBUTING.md and SECURITY.md.