@ankhorage/contracts 14.0.0 → 15.0.0

package/dist/infra/validateInfraAdapterSelection.js

@@ -0,0 +1,36 @@
+import { INFRA_ADAPTER_CATALOG } from './constants';
+import { isInfraAdapterDescriptor } from './isInfraAdapterDescriptor';
+/** Validate supplied installed descriptors without imports or filesystem access; only selected packages matter. */
+export function validateInfraAdapterSelection(environment, installed) {
+    const ids = new Set([
+        environment.deployment.compute.provider,
+        environment.deployment.runtime.provider,
+        environment.database?.provider,
+        environment.objectStorage?.provider,
+        environment.auth?.provider,
+        environment.authz?.provider,
+        environment.secretStore?.provider,
+    ]);
+    const selected = Object.values(INFRA_ADAPTER_CATALOG).filter((entry) => ids.has(entry.id));
+    const descriptors = installed.filter(isInfraAdapterDescriptor);
+    const diagnostics = selected.flatMap((entry) => {
+        const matches = descriptors.filter((descriptor) => descriptor.id === entry.id);
+        return matches.length === 1
+            ? []
+            : [
+                {
+                    severity: 'error',
+                    code: 'adapter_unavailable',
+                    message: `Selected adapter ${entry.id} requires exactly one installed ${entry.package} descriptor matching Contracts config version ${entry.configVersion}; found ${matches.length}.`,
+                },
+            ];
+    });
+    return diagnostics.length > 0
+        ? { ok: false, diagnostics }
+        : {
+            ok: true,
+            value: descriptors.filter((descriptor) => ids.has(descriptor.id)),
+            diagnostics,
+        };
+}
+//# sourceMappingURL=validateInfraAdapterSelection.js.map

package/dist/infra/validateInfraAdapterSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateInfraAdapterSelection.js","sourceRoot":"","sources":["../../src/infra/validateInfraAdapterSelection.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,mHAAmH;AACnH,MAAM,UAAU,6BAA6B,CAC3C,WAAiC,EACjC,SAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAClB,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACvC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ;QACvC,WAAW,CAAC,QAAQ,EAAE,QAAQ;QAC9B,WAAW,CAAC,aAAa,EAAE,QAAQ;QACnC,WAAW,CAAC,IAAI,EAAE,QAAQ;QAC1B,WAAW,CAAC,KAAK,EAAE,QAAQ;QAC3B,WAAW,CAAC,WAAW,EAAE,QAAQ;KAClC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC/D,MAAM,WAAW,GAA+B,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACzE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,oBAAoB,KAAK,CAAC,EAAE,mCAAmC,KAAK,CAAC,OAAO,iDAAiD,KAAK,CAAC,aAAa,WAAW,OAAO,CAAC,MAAM,GAAG;iBACtL;aACF,CAAC;IACR,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC;QAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;QAC5B,CAAC,CAAC;YACE,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACjE,WAAW;SACZ,CAAC;AACR,CAAC","sourcesContent":["import type { InfraAdapterDescriptor } from '../types/infraAdapters';\nimport type { InfraDiagnostic, InfraResult } from '../types/infraLifecycle';\nimport type { InfraEnvironmentSpec } from '../types/infraManifest';\nimport { INFRA_ADAPTER_CATALOG } from './constants';\nimport { isInfraAdapterDescriptor } from './isInfraAdapterDescriptor';\n\n/** Validate supplied installed descriptors without imports or filesystem access; only selected packages matter. */\nexport function validateInfraAdapterSelection(\n  environment: InfraEnvironmentSpec,\n  installed: readonly unknown[],\n): InfraResult<readonly InfraAdapterDescriptor[]> {\n  const ids = new Set([\n    environment.deployment.compute.provider,\n    environment.deployment.runtime.provider,\n    environment.database?.provider,\n    environment.objectStorage?.provider,\n    environment.auth?.provider,\n    environment.authz?.provider,\n    environment.secretStore?.provider,\n  ]);\n  const selected = Object.values(INFRA_ADAPTER_CATALOG).filter((entry) => ids.has(entry.id));\n  const descriptors = installed.filter(isInfraAdapterDescriptor);\n  const diagnostics: readonly InfraDiagnostic[] = selected.flatMap((entry) => {\n    const matches = descriptors.filter((descriptor) => descriptor.id === entry.id);\n    return matches.length === 1\n      ? []\n      : [\n          {\n            severity: 'error',\n            code: 'adapter_unavailable',\n            message: `Selected adapter ${entry.id} requires exactly one installed ${entry.package} descriptor matching Contracts config version ${entry.configVersion}; found ${matches.length}.`,\n          },\n        ];\n  });\n  return diagnostics.length > 0\n    ? { ok: false, diagnostics }\n    : {\n        ok: true,\n        value: descriptors.filter((descriptor) => ids.has(descriptor.id)),\n        diagnostics,\n      };\n}\n"]}

package/dist/infra.d.ts

@@ -0,0 +1,16 @@
+/** Canonical standalone infrastructure contracts, catalog and side-effect-free validation. */
+export { INFRA_ADAPTER_CATALOG, INFRA_RUNTIME_COMPATIBILITY } from './infra/constants';
+export { isInfraAdapterDescriptor } from './infra/isInfraAdapterDescriptor';
+export { isInfraAuthSpec } from './infra/isInfraAuthSpec';
+export { isInfraDeploymentSpec } from './infra/isInfraDeploymentSpec';
+export { isInfraEnvironmentSpec } from './infra/isInfraEnvironmentSpec';
+export { isInfraManifest } from './infra/isInfraManifest';
+export { isInfraWorkloadSpec } from './infra/isInfraWorkloadSpec';
+export { parseInfraManifest } from './infra/parseInfraManifest';
+export { validateInfraAdapterSelection } from './infra/validateInfraAdapterSelection';
+export type * from './types/infraAdapters';
+export type * from './types/infraLifecycle';
+export type * from './types/infraManifest';
+export type * from './types/infraSecrets';
+export type * from './types/infraWorkload';
+//# sourceMappingURL=infra.d.ts.map

package/dist/infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../src/infra.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,mBAAmB,uBAAuB,CAAC;AAC3C,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,uBAAuB,CAAC;AAC3C,mBAAmB,sBAAsB,CAAC;AAC1C,mBAAmB,uBAAuB,CAAC"}

package/dist/infra.js

@@ -0,0 +1,11 @@
+/** Canonical standalone infrastructure contracts, catalog and side-effect-free validation. */
+export { INFRA_ADAPTER_CATALOG, INFRA_RUNTIME_COMPATIBILITY } from './infra/constants';
+export { isInfraAdapterDescriptor } from './infra/isInfraAdapterDescriptor';
+export { isInfraAuthSpec } from './infra/isInfraAuthSpec';
+export { isInfraDeploymentSpec } from './infra/isInfraDeploymentSpec';
+export { isInfraEnvironmentSpec } from './infra/isInfraEnvironmentSpec';
+export { isInfraManifest } from './infra/isInfraManifest';
+export { isInfraWorkloadSpec } from './infra/isInfraWorkloadSpec';
+export { parseInfraManifest } from './infra/parseInfraManifest';
+export { validateInfraAdapterSelection } from './infra/validateInfraAdapterSelection';
+//# sourceMappingURL=infra.js.map

package/dist/infra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.js","sourceRoot":"","sources":["../src/infra.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC","sourcesContent":["/** Canonical standalone infrastructure contracts, catalog and side-effect-free validation. */\nexport { INFRA_ADAPTER_CATALOG, INFRA_RUNTIME_COMPATIBILITY } from './infra/constants';\nexport { isInfraAdapterDescriptor } from './infra/isInfraAdapterDescriptor';\nexport { isInfraAuthSpec } from './infra/isInfraAuthSpec';\nexport { isInfraDeploymentSpec } from './infra/isInfraDeploymentSpec';\nexport { isInfraEnvironmentSpec } from './infra/isInfraEnvironmentSpec';\nexport { isInfraManifest } from './infra/isInfraManifest';\nexport { isInfraWorkloadSpec } from './infra/isInfraWorkloadSpec';\nexport { parseInfraManifest } from './infra/parseInfraManifest';\nexport { validateInfraAdapterSelection } from './infra/validateInfraAdapterSelection';\nexport type * from './types/infraAdapters';\nexport type * from './types/infraLifecycle';\nexport type * from './types/infraManifest';\nexport type * from './types/infraSecrets';\nexport type * from './types/infraWorkload';\n"]}

package/dist/media.d.ts

@@ -2,19 +2,19 @@ export declare const MEDIA_ASSET_KINDS: readonly ["image", "audio", "video", "fo
 export type MediaAssetKind = (typeof MEDIA_ASSET_KINDS)[number];
 export interface MediaStorageSource {
     readonly kind: 'storage';
-    /** Optional logical storage connection identifier for future multi-storage apps. */
+    /*** Optional logical storage connection identifier for future multi-storage apps. */
     readonly storageId?: string;
     readonly bucket: string;
     readonly path: string;
 }
 export interface MediaUrlSource {
     readonly kind: 'url';
-    /** Stable remote URL. Transient/local URL schemes are not canonical media sources. */
+    /*** Stable remote URL. Transient/local URL schemes are not canonical media sources. */
     readonly url: string;
 }
 export interface MediaBundledSource {
     readonly kind: 'bundled';
-    /** App-relative bundled asset path resolved by the generated/runtime host. */
+    /*** App-relative bundled asset path resolved by the generated/runtime host. */
     readonly path: string;
 }
 export type MediaAssetSource = MediaStorageSource | MediaUrlSource | MediaBundledSource;
@@ -26,7 +26,7 @@ export interface MediaAssetMetadata {
     readonly height?: number;
     readonly durationMs?: number;
 }
-/** Canonical Studio-managed authoring media entry. */
+/*** Canonical Studio-managed authoring media entry. */
 export interface MediaAsset {
     readonly id: string;
     readonly name: string;
@@ -36,13 +36,14 @@ export interface MediaAsset {
     readonly metadata?: MediaAssetMetadata;
 }
 export type MediaAssetRegistry = Readonly<Record<string, MediaAsset>>;
-/** App-authoring media pool. Runtime/user-generated uploads do not belong here. */
+/*** App-authoring media pool. Runtime/user-generated uploads do not belong here. */
 export interface MediaManifest {
     readonly assets: MediaAssetRegistry;
 }
-/** Stable component/property reference to one entry in `AppManifest.media.assets`. */
+/*** Stable component/property reference to one entry in `AppManifest.media.assets`. */
 export interface MediaAssetReference {
     readonly mediaId: string;
 }
+/*** Validate an authored media reference with exactly one enumerable key and a non-empty media ID. */
 export declare function isMediaAssetReference(value: unknown): value is MediaAssetReference;
 //# sourceMappingURL=media.d.ts.map

package/dist/media.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,sDAAuD,CAAC;AAEtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtE,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAUlF"}
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,iBAAiB,sDAAuD,CAAC;AAEtF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,qFAAqF;IACrF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtE,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAOlF"}

package/dist/media.js

@@ -1,11 +1,11 @@
+import { isRecord } from '@ankhorage/utility/object';
+import { isNonEmptyString } from '@ankhorage/utility/string';
 export const MEDIA_ASSET_KINDS = ['image', 'audio', 'video', 'font', 'file'];
+/*** Validate an authored media reference with exactly one enumerable key and a non-empty media ID. */
 export function isMediaAssetReference(value) {
-    return (typeof value === 'object' &&
-        value !== null &&
-        !Array.isArray(value) &&
+    return (isRecord(value) &&
         Object.keys(value).length === 1 &&
         'mediaId' in value &&
-        typeof value.mediaId === 'string' &&
-        value.mediaId.trim().length > 0);
+        isNonEmptyString(value.mediaId));
 }
 //# sourceMappingURL=media.js.map

package/dist/media.js.map

@@ -1 +1 @@
-{"version":3,"file":"media.js","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAyDtF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,SAAS,IAAI,KAAK;QAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAChC,CAAC;AACJ,CAAC","sourcesContent":["export const MEDIA_ASSET_KINDS = ['image', 'audio', 'video', 'font', 'file'] as const;\n\nexport type MediaAssetKind = (typeof MEDIA_ASSET_KINDS)[number];\n\nexport interface MediaStorageSource {\n  readonly kind: 'storage';\n  /** Optional logical storage connection identifier for future multi-storage apps. */\n  readonly storageId?: string;\n  readonly bucket: string;\n  readonly path: string;\n}\n\nexport interface MediaUrlSource {\n  readonly kind: 'url';\n  /** Stable remote URL. Transient/local URL schemes are not canonical media sources. */\n  readonly url: string;\n}\n\nexport interface MediaBundledSource {\n  readonly kind: 'bundled';\n  /** App-relative bundled asset path resolved by the generated/runtime host. */\n  readonly path: string;\n}\n\nexport type MediaAssetSource = MediaStorageSource | MediaUrlSource | MediaBundledSource;\n\nexport interface MediaAssetMetadata {\n  readonly originalFileName?: string;\n  readonly sizeBytes?: number;\n  readonly createdAt?: string;\n  readonly width?: number;\n  readonly height?: number;\n  readonly durationMs?: number;\n}\n\n/** Canonical Studio-managed authoring media entry. */\nexport interface MediaAsset {\n  readonly id: string;\n  readonly name: string;\n  readonly kind: MediaAssetKind;\n  readonly source: MediaAssetSource;\n  readonly contentType?: string;\n  readonly metadata?: MediaAssetMetadata;\n}\n\nexport type MediaAssetRegistry = Readonly<Record<string, MediaAsset>>;\n\n/** App-authoring media pool. Runtime/user-generated uploads do not belong here. */\nexport interface MediaManifest {\n  readonly assets: MediaAssetRegistry;\n}\n\n/** Stable component/property reference to one entry in `AppManifest.media.assets`. */\nexport interface MediaAssetReference {\n  readonly mediaId: string;\n}\n\nexport function isMediaAssetReference(value: unknown): value is MediaAssetReference {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    !Array.isArray(value) &&\n    Object.keys(value).length === 1 &&\n    'mediaId' in value &&\n    typeof value.mediaId === 'string' &&\n    value.mediaId.trim().length > 0\n  );\n}\n"]}
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAyDtF,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,SAAS,IAAI,KAAK;QAClB,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import { isRecord } from '@ankhorage/utility/object';\nimport { isNonEmptyString } from '@ankhorage/utility/string';\n\nexport const MEDIA_ASSET_KINDS = ['image', 'audio', 'video', 'font', 'file'] as const;\n\nexport type MediaAssetKind = (typeof MEDIA_ASSET_KINDS)[number];\n\nexport interface MediaStorageSource {\n  readonly kind: 'storage';\n  /*** Optional logical storage connection identifier for future multi-storage apps. */\n  readonly storageId?: string;\n  readonly bucket: string;\n  readonly path: string;\n}\n\nexport interface MediaUrlSource {\n  readonly kind: 'url';\n  /*** Stable remote URL. Transient/local URL schemes are not canonical media sources. */\n  readonly url: string;\n}\n\nexport interface MediaBundledSource {\n  readonly kind: 'bundled';\n  /*** App-relative bundled asset path resolved by the generated/runtime host. */\n  readonly path: string;\n}\n\nexport type MediaAssetSource = MediaStorageSource | MediaUrlSource | MediaBundledSource;\n\nexport interface MediaAssetMetadata {\n  readonly originalFileName?: string;\n  readonly sizeBytes?: number;\n  readonly createdAt?: string;\n  readonly width?: number;\n  readonly height?: number;\n  readonly durationMs?: number;\n}\n\n/*** Canonical Studio-managed authoring media entry. */\nexport interface MediaAsset {\n  readonly id: string;\n  readonly name: string;\n  readonly kind: MediaAssetKind;\n  readonly source: MediaAssetSource;\n  readonly contentType?: string;\n  readonly metadata?: MediaAssetMetadata;\n}\n\nexport type MediaAssetRegistry = Readonly<Record<string, MediaAsset>>;\n\n/*** App-authoring media pool. Runtime/user-generated uploads do not belong here. */\nexport interface MediaManifest {\n  readonly assets: MediaAssetRegistry;\n}\n\n/*** Stable component/property reference to one entry in `AppManifest.media.assets`. */\nexport interface MediaAssetReference {\n  readonly mediaId: string;\n}\n\n/*** Validate an authored media reference with exactly one enumerable key and a non-empty media ID. */\nexport function isMediaAssetReference(value: unknown): value is MediaAssetReference {\n  return (\n    isRecord(value) &&\n    Object.keys(value).length === 1 &&\n    'mediaId' in value &&\n    isNonEmptyString(value.mediaId)\n  );\n}\n"]}

package/dist/state.d.ts

@@ -1,3 +1,8 @@
+/** Legend currently implements in-memory state only; unsupported persistence cannot be selected. */
+export interface AppStateSpec {
+    readonly provider: 'legend';
+    readonly persistence?: false;
+}
 export type StatePrimitive = string | number | boolean | null;
 export type StateValue = StatePrimitive | readonly StateValue[] | {
     readonly [key: string]: StateValue;

package/dist/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,SAAS,UAAU,EAAE,GACrB;IACE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAC7D;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CACnB,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,IAAI,IACjC,YAAY,CAAC,MAAM,CAAC,GACpB;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAEN,MAAM,WAAW,aAAa,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU;IACnE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,MAAM,aAAa,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,IAAI,CAClE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,KAC5B,IAAI,CAAC;AAEV,MAAM,WAAW,iBAAiB;IAChC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAEhD,GAAG,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9F,GAAG,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC;IACzF,SAAS,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAC9C,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,GAC9B,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAClC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;CACvC"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB,cAAc,GACd,SAAS,UAAU,EAAE,GACrB;IACE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAEnD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAC7D;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;CACnB,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN,MAAM,MAAM,WAAW,CAAC,MAAM,GAAG,IAAI,IACjC,YAAY,CAAC,MAAM,CAAC,GACpB;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAEN,MAAM,WAAW,aAAa,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU;IACnE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,MAAM,aAAa,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,IAAI,CAClE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,KAC5B,IAAI,CAAC;AAEV,MAAM,WAAW,iBAAiB;IAChC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAEhD,GAAG,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9F,GAAG,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAAC;IACzF,SAAS,CAAC,MAAM,SAAS,UAAU,GAAG,UAAU,EAC9C,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,GAC9B,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAClC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;CACvC"}

package/dist/state.js.map

@@ -1 +1 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"","sourcesContent":["export type StatePrimitive = string | number | boolean | null;\n\nexport type StateValue =\n  | StatePrimitive\n  | readonly StateValue[]\n  | {\n      readonly [key: string]: StateValue;\n    };\n\nexport type StatePath = string | readonly string[];\n\nexport interface StateAdapterCapabilities {\n  readonly subscriptions: boolean;\n  readonly computed: boolean;\n  readonly persistence: boolean;\n}\n\nexport interface StateAdapterError {\n  readonly code: string;\n  readonly message: string;\n  readonly cause?: unknown;\n}\n\nexport type StateSuccess<TValue = void> = [TValue] extends [void]\n  ? {\n      readonly ok: true;\n    }\n  : {\n      readonly ok: true;\n      readonly data: TValue;\n    };\n\nexport type StateResult<TValue = void> =\n  | StateSuccess<TValue>\n  | {\n      readonly ok: false;\n      readonly error: StateAdapterError;\n    };\n\nexport interface StateSnapshot<TValue extends StateValue = StateValue> {\n  readonly path: StatePath;\n  readonly value: TValue | undefined;\n}\n\nexport type StateListener<TValue extends StateValue = StateValue> = (\n  snapshot: StateSnapshot<TValue>,\n) => void;\n\nexport interface StateSubscription {\n  unsubscribe(): Promise<void> | void;\n}\n\nexport interface StateAdapter {\n  readonly capabilities: StateAdapterCapabilities;\n\n  get<TValue extends StateValue = StateValue>(path: StatePath): StateResult<TValue | undefined>;\n  set<TValue extends StateValue = StateValue>(path: StatePath, value: TValue): StateResult;\n  subscribe<TValue extends StateValue = StateValue>(\n    path: StatePath,\n    listener: StateListener<TValue>,\n  ): StateResult<StateSubscription>;\n  delete?(path: StatePath): StateResult;\n}\n"]}
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"","sourcesContent":["/** Legend currently implements in-memory state only; unsupported persistence cannot be selected. */\nexport interface AppStateSpec {\n  readonly provider: 'legend';\n  readonly persistence?: false;\n}\n\nexport type StatePrimitive = string | number | boolean | null;\n\nexport type StateValue =\n  | StatePrimitive\n  | readonly StateValue[]\n  | {\n      readonly [key: string]: StateValue;\n    };\n\nexport type StatePath = string | readonly string[];\n\nexport interface StateAdapterCapabilities {\n  readonly subscriptions: boolean;\n  readonly computed: boolean;\n  readonly persistence: boolean;\n}\n\nexport interface StateAdapterError {\n  readonly code: string;\n  readonly message: string;\n  readonly cause?: unknown;\n}\n\nexport type StateSuccess<TValue = void> = [TValue] extends [void]\n  ? {\n      readonly ok: true;\n    }\n  : {\n      readonly ok: true;\n      readonly data: TValue;\n    };\n\nexport type StateResult<TValue = void> =\n  | StateSuccess<TValue>\n  | {\n      readonly ok: false;\n      readonly error: StateAdapterError;\n    };\n\nexport interface StateSnapshot<TValue extends StateValue = StateValue> {\n  readonly path: StatePath;\n  readonly value: TValue | undefined;\n}\n\nexport type StateListener<TValue extends StateValue = StateValue> = (\n  snapshot: StateSnapshot<TValue>,\n) => void;\n\nexport interface StateSubscription {\n  unsubscribe(): Promise<void> | void;\n}\n\nexport interface StateAdapter {\n  readonly capabilities: StateAdapterCapabilities;\n\n  get<TValue extends StateValue = StateValue>(path: StatePath): StateResult<TValue | undefined>;\n  set<TValue extends StateValue = StateValue>(path: StatePath, value: TValue): StateResult;\n  subscribe<TValue extends StateValue = StateValue>(\n    path: StatePath,\n    listener: StateListener<TValue>,\n  ): StateResult<StateSubscription>;\n  delete?(path: StatePath): StateResult;\n}\n"]}

package/dist/types/appManifest.d.ts

@@ -0,0 +1,9 @@
+import type { AppManifest } from '../types';
+export type AppManifestParseResult = {
+    readonly ok: true;
+    readonly manifest: AppManifest;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
+//# sourceMappingURL=appManifest.d.ts.map

package/dist/types/appManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appManifest.d.ts","sourceRoot":"","sources":["../../src/types/appManifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/types/appManifest.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appManifest.js.map

package/dist/types/appManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appManifest.js","sourceRoot":"","sources":["../../src/types/appManifest.ts"],"names":[],"mappings":"","sourcesContent":["import type { AppManifest } from '../types';\n\nexport type AppManifestParseResult =\n  | { readonly ok: true; readonly manifest: AppManifest }\n  | { readonly ok: false; readonly message: string };\n"]}

package/dist/types/infraAdapters.d.ts

@@ -0,0 +1,85 @@
+import type { AppEnvironmentId } from '../environments';
+import type { INFRA_ADAPTER_CATALOG } from '../infra/constants';
+import type { InfraDestroyRequest, InfraGeneratedArtifact, InfraLedger, InfraOutput, InfraOwnedResource, InfraPlanAction, InfraResourceStatus, InfraResult } from './infraLifecycle';
+import type { InfraAdapterId, InfraComputeProviderId, InfraComputeSelection, InfraEnvironmentSpec, InfraRuntimeProviderId, InfraRuntimeSelection } from './infraManifest';
+import type { InfraControlPlaneCredentialRef, InfraSecretReference } from './infraSecrets';
+import type { InfraWorkloadSpec } from './infraWorkload';
+/** Package exports must match this exact catalog entry; optional operations are advertised explicitly. */
+export type InfraAdapterDescriptor<P extends InfraAdapterId = InfraAdapterId> = {
+    [K in P]: (typeof INFRA_ADAPTER_CATALOG)[K] & {
+        readonly operations?: readonly ('suspend' | 'resume' | 'generate' | 'diagnostics')[];
+    };
+}[P];
+export type InfraComputeTarget = {
+    readonly id: string;
+    readonly os: 'linux' | 'darwin' | 'windows';
+    readonly architecture: 'amd64' | 'arm64';
+} & ({
+    readonly kind: 'local-host';
+} | {
+    readonly kind: 'ssh-host';
+    readonly host: string;
+    readonly port: number;
+    readonly user: string;
+    readonly credential: InfraControlPlaneCredentialRef;
+    /** Expected host key supplied by the compute owner; runtimes must verify host authenticity. */
+    readonly hostKeyFingerprint: string;
+});
+/** Trusted execution-only ports. Implementations must not serialize resolved credential values. */
+export interface InfraExecutionContext {
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    readonly desired: InfraEnvironmentSpec;
+    readonly previous?: InfraLedger;
+    readonly signal?: AbortSignal;
+    readonly credentials: {
+        resolveAsync(reference: InfraControlPlaneCredentialRef): Promise<InfraResult<Readonly<Record<string, string>>>>;
+    };
+    readonly secrets: {
+        resolveAsync(reference: InfraSecretReference): Promise<InfraResult<string>>;
+    };
+}
+export interface InfraReconcileResult {
+    readonly resources: readonly InfraOwnedResource[];
+    readonly outputs: readonly InfraOutput[];
+}
+export interface InfraComputeAdapter<P extends InfraComputeProviderId = InfraComputeProviderId> {
+    readonly descriptor: InfraAdapterDescriptor<P>;
+    /** Read-only prerequisites, config and control-plane credential validation. */
+    validateAsync(context: InfraExecutionContext, selection: InfraComputeSelection<P>): Promise<InfraResult<null>>;
+    planAsync(context: InfraExecutionContext, selection: InfraComputeSelection<P>): Promise<InfraResult<readonly InfraPlanAction[]>>;
+    ensureAsync(context: InfraExecutionContext, selection: InfraComputeSelection<P>): Promise<InfraResult<InfraReconcileResult & {
+        readonly targets: readonly InfraComputeTarget[];
+    }>>;
+    statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+    destroyAsync(context: InfraExecutionContext, request: InfraDestroyRequest): Promise<InfraResult<InfraReconcileResult>>;
+}
+export interface InfraRuntimeDesiredState<P extends InfraRuntimeProviderId = InfraRuntimeProviderId> {
+    readonly selection: InfraRuntimeSelection<P>;
+    readonly targets: readonly InfraComputeTarget[];
+    readonly workloads: readonly InfraWorkloadSpec[];
+}
+export interface InfraRuntimeAdapter<P extends InfraRuntimeProviderId = InfraRuntimeProviderId> {
+    readonly descriptor: InfraAdapterDescriptor<P>;
+    /** Read-only prerequisites and desired-state validation; no cluster creation. */
+    validateAsync(context: InfraExecutionContext, desired: InfraRuntimeDesiredState<P>): Promise<InfraResult<null>>;
+    planAsync(context: InfraExecutionContext, desired: InfraRuntimeDesiredState<P>): Promise<InfraResult<readonly InfraPlanAction[]>>;
+    ensureAsync(context: InfraExecutionContext, desired: InfraRuntimeDesiredState<P>): Promise<InfraResult<InfraReconcileResult>>;
+    statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+    suspendAsync(context: InfraExecutionContext): Promise<InfraResult<InfraReconcileResult>>;
+    destroyAsync(context: InfraExecutionContext, request: InfraDestroyRequest): Promise<InfraResult<InfraReconcileResult>>;
+    generateAsync?(context: InfraExecutionContext, desired: InfraRuntimeDesiredState<P>): Promise<InfraResult<readonly InfraGeneratedArtifact[]>>;
+}
+/** A service can own several capabilities but contributes one deduplicated platform instance. */
+export interface InfraServiceAdapter {
+    readonly descriptor: InfraAdapterDescriptor<'supabase' | 'cerbos' | 'r2' | 'supabase-vault'>;
+    /** Read-only service config, bootstrap credentials and dependency validation. */
+    validateAsync(context: InfraExecutionContext): Promise<InfraResult<null>>;
+    planAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraPlanAction[]>>;
+    desiredWorkloadsAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraWorkloadSpec[]>>;
+    reconcileAsync(context: InfraExecutionContext, runtimeOutputs: readonly InfraOutput[]): Promise<InfraResult<InfraReconcileResult>>;
+    statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;
+    destroyAsync(context: InfraExecutionContext, request: InfraDestroyRequest): Promise<InfraResult<InfraReconcileResult>>;
+    suspendAsync?(context: InfraExecutionContext): Promise<InfraResult<InfraReconcileResult>>;
+}
+//# sourceMappingURL=infraAdapters.d.ts.map

package/dist/types/infraAdapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraAdapters.d.ts","sourceRoot":"","sources":["../../src/types/infraAdapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,0GAA0G;AAC1G,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc,IAAI;KAC7E,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAAG;QAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC;KACtF;CACF,CAAC,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC;CAC1C,GAAG,CACA;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC/B;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC,CACJ,CAAC;AAEF,mGAAmG;AACnG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE;QACpB,YAAY,CACV,SAAS,EAAE,8BAA8B,GACxC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,YAAY,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;KAC7E,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,sBAAsB,GAAG,sBAAsB;IAC5F,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC/C,+EAA+E;IAC/E,aAAa,CACX,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,SAAS,CACP,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;IACpD,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAClC,OAAO,CACR,WAAW,CAAC,oBAAoB,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;KAAE,CAAC,CACxF,CAAC;IACF,WAAW,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAClG,YAAY,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,wBAAwB,CACvC,CAAC,SAAS,sBAAsB,GAAG,sBAAsB;IAEzD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,sBAAsB,GAAG,sBAAsB;IAC5F,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC/C,iFAAiF;IACjF,aAAa,CACX,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9B,SAAS,CACP,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;IACpD,WAAW,CACT,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAClG,YAAY,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACzF,YAAY,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,aAAa,CAAC,CACZ,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,WAAW,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAC,CAAC;CAC5D;AAED,iGAAiG;AACjG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,GAAG,QAAQ,GAAG,IAAI,GAAG,gBAAgB,CAAC,CAAC;IAC7F,iFAAiF;IACjF,aAAa,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,SAAS,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;IAC5F,qBAAqB,CACnB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,WAAW,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACtD,cAAc,CACZ,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,SAAS,WAAW,EAAE,GACrC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,WAAW,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAClG,YAAY,CACV,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9C,YAAY,CAAC,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC;CAC3F"}

package/dist/types/infraAdapters.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=infraAdapters.js.map

package/dist/types/infraAdapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraAdapters.js","sourceRoot":"","sources":["../../src/types/infraAdapters.ts"],"names":[],"mappings":"","sourcesContent":["import type { AppEnvironmentId } from '../environments';\nimport type { INFRA_ADAPTER_CATALOG } from '../infra/constants';\nimport type {\n  InfraDestroyRequest,\n  InfraGeneratedArtifact,\n  InfraLedger,\n  InfraOutput,\n  InfraOwnedResource,\n  InfraPlanAction,\n  InfraResourceStatus,\n  InfraResult,\n} from './infraLifecycle';\nimport type {\n  InfraAdapterId,\n  InfraComputeProviderId,\n  InfraComputeSelection,\n  InfraEnvironmentSpec,\n  InfraRuntimeProviderId,\n  InfraRuntimeSelection,\n} from './infraManifest';\nimport type { InfraControlPlaneCredentialRef, InfraSecretReference } from './infraSecrets';\nimport type { InfraWorkloadSpec } from './infraWorkload';\n\n/** Package exports must match this exact catalog entry; optional operations are advertised explicitly. */\nexport type InfraAdapterDescriptor<P extends InfraAdapterId = InfraAdapterId> = {\n  [K in P]: (typeof INFRA_ADAPTER_CATALOG)[K] & {\n    readonly operations?: readonly ('suspend' | 'resume' | 'generate' | 'diagnostics')[];\n  };\n}[P];\n\nexport type InfraComputeTarget = {\n  readonly id: string;\n  readonly os: 'linux' | 'darwin' | 'windows';\n  readonly architecture: 'amd64' | 'arm64';\n} & (\n  | { readonly kind: 'local-host' }\n  | {\n      readonly kind: 'ssh-host';\n      readonly host: string;\n      readonly port: number;\n      readonly user: string;\n      readonly credential: InfraControlPlaneCredentialRef;\n      /** Expected host key supplied by the compute owner; runtimes must verify host authenticity. */\n      readonly hostKeyFingerprint: string;\n    }\n);\n\n/** Trusted execution-only ports. Implementations must not serialize resolved credential values. */\nexport interface InfraExecutionContext {\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  readonly desired: InfraEnvironmentSpec;\n  readonly previous?: InfraLedger;\n  readonly signal?: AbortSignal;\n  readonly credentials: {\n    resolveAsync(\n      reference: InfraControlPlaneCredentialRef,\n    ): Promise<InfraResult<Readonly<Record<string, string>>>>;\n  };\n  readonly secrets: {\n    resolveAsync(reference: InfraSecretReference): Promise<InfraResult<string>>;\n  };\n}\n\nexport interface InfraReconcileResult {\n  readonly resources: readonly InfraOwnedResource[];\n  readonly outputs: readonly InfraOutput[];\n}\n\nexport interface InfraComputeAdapter<P extends InfraComputeProviderId = InfraComputeProviderId> {\n  readonly descriptor: InfraAdapterDescriptor<P>;\n  /** Read-only prerequisites, config and control-plane credential validation. */\n  validateAsync(\n    context: InfraExecutionContext,\n    selection: InfraComputeSelection<P>,\n  ): Promise<InfraResult<null>>;\n  planAsync(\n    context: InfraExecutionContext,\n    selection: InfraComputeSelection<P>,\n  ): Promise<InfraResult<readonly InfraPlanAction[]>>;\n  ensureAsync(\n    context: InfraExecutionContext,\n    selection: InfraComputeSelection<P>,\n  ): Promise<\n    InfraResult<InfraReconcileResult & { readonly targets: readonly InfraComputeTarget[] }>\n  >;\n  statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;\n  destroyAsync(\n    context: InfraExecutionContext,\n    request: InfraDestroyRequest,\n  ): Promise<InfraResult<InfraReconcileResult>>;\n}\n\nexport interface InfraRuntimeDesiredState<\n  P extends InfraRuntimeProviderId = InfraRuntimeProviderId,\n> {\n  readonly selection: InfraRuntimeSelection<P>;\n  readonly targets: readonly InfraComputeTarget[];\n  readonly workloads: readonly InfraWorkloadSpec[];\n}\n\nexport interface InfraRuntimeAdapter<P extends InfraRuntimeProviderId = InfraRuntimeProviderId> {\n  readonly descriptor: InfraAdapterDescriptor<P>;\n  /** Read-only prerequisites and desired-state validation; no cluster creation. */\n  validateAsync(\n    context: InfraExecutionContext,\n    desired: InfraRuntimeDesiredState<P>,\n  ): Promise<InfraResult<null>>;\n  planAsync(\n    context: InfraExecutionContext,\n    desired: InfraRuntimeDesiredState<P>,\n  ): Promise<InfraResult<readonly InfraPlanAction[]>>;\n  ensureAsync(\n    context: InfraExecutionContext,\n    desired: InfraRuntimeDesiredState<P>,\n  ): Promise<InfraResult<InfraReconcileResult>>;\n  statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;\n  suspendAsync(context: InfraExecutionContext): Promise<InfraResult<InfraReconcileResult>>;\n  destroyAsync(\n    context: InfraExecutionContext,\n    request: InfraDestroyRequest,\n  ): Promise<InfraResult<InfraReconcileResult>>;\n  generateAsync?(\n    context: InfraExecutionContext,\n    desired: InfraRuntimeDesiredState<P>,\n  ): Promise<InfraResult<readonly InfraGeneratedArtifact[]>>;\n}\n\n/** A service can own several capabilities but contributes one deduplicated platform instance. */\nexport interface InfraServiceAdapter {\n  readonly descriptor: InfraAdapterDescriptor<'supabase' | 'cerbos' | 'r2' | 'supabase-vault'>;\n  /** Read-only service config, bootstrap credentials and dependency validation. */\n  validateAsync(context: InfraExecutionContext): Promise<InfraResult<null>>;\n  planAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraPlanAction[]>>;\n  desiredWorkloadsAsync(\n    context: InfraExecutionContext,\n  ): Promise<InfraResult<readonly InfraWorkloadSpec[]>>;\n  reconcileAsync(\n    context: InfraExecutionContext,\n    runtimeOutputs: readonly InfraOutput[],\n  ): Promise<InfraResult<InfraReconcileResult>>;\n  statusAsync(context: InfraExecutionContext): Promise<InfraResult<readonly InfraResourceStatus[]>>;\n  destroyAsync(\n    context: InfraExecutionContext,\n    request: InfraDestroyRequest,\n  ): Promise<InfraResult<InfraReconcileResult>>;\n  suspendAsync?(context: InfraExecutionContext): Promise<InfraResult<InfraReconcileResult>>;\n}\n"]}

package/dist/types/infraLifecycle.d.ts

@@ -0,0 +1,107 @@
+import type { AppEnvironmentId } from '../environments';
+import type { InfraAdapterId } from './infraManifest';
+import type { InfraSecretReference } from './infraSecrets';
+/** Identity must be verified before mutation; unowned resources must never be pruned. */
+export interface InfraResourceIdentity {
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    readonly adapter: InfraAdapterId;
+    readonly resourceId: string;
+}
+export interface InfraOwnedResource {
+    readonly identity: InfraResourceIdentity;
+    readonly externalId?: string;
+    readonly persistent: boolean;
+    readonly retention: 'retain' | 'delete-on-destroy';
+    readonly dependsOn: readonly InfraResourceIdentity[];
+}
+export interface InfraDiagnostic {
+    readonly severity: 'info' | 'warning' | 'error';
+    readonly code: string;
+    /** Safe human-readable detail. Tokens and privileged values must be redacted by the producer. */
+    readonly message: string;
+    readonly path?: readonly (string | number)[];
+    readonly owner?: InfraResourceIdentity;
+}
+export type InfraResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+    readonly diagnostics: readonly InfraDiagnostic[];
+} | {
+    readonly ok: false;
+    readonly diagnostics: readonly InfraDiagnostic[];
+};
+export interface InfraPlanAction {
+    readonly owner: InfraResourceIdentity;
+    readonly operation: 'create' | 'update' | 'delete' | 'retain' | 'noop';
+    readonly impact: 'none' | 'interrupts-service' | 'deletes-data';
+    readonly detail: string;
+    readonly dependsOn: readonly InfraResourceIdentity[];
+}
+export interface InfraPlan {
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    /** Ordered dependency-first; teardown consumers reverse dependency order. */
+    readonly actions: readonly InfraPlanAction[];
+}
+export interface InfraResourceStatus {
+    readonly owner: InfraResourceIdentity;
+    readonly state: 'absent' | 'pending' | 'ready' | 'degraded' | 'stopped' | 'retained' | 'failed' | 'unknown';
+    readonly detail?: string;
+    readonly diagnostics?: readonly InfraDiagnostic[];
+}
+export interface InfraStatus {
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    readonly state: InfraResourceStatus['state'];
+    readonly resources: readonly InfraResourceStatus[];
+}
+/** A privileged output has a reference, never a value field or environment export name. */
+export type InfraOutput = {
+    readonly owner: InfraResourceIdentity;
+    readonly name: string;
+} & ({
+    readonly visibility: 'public';
+    readonly value: string | number | boolean;
+    readonly environmentVariable?: string;
+    readonly reference?: never;
+} | {
+    readonly visibility: 'secret';
+    readonly reference: InfraSecretReference;
+    readonly value?: never;
+    readonly environmentVariable?: never;
+});
+export interface InfraGeneratedArtifact {
+    readonly owner: InfraResourceIdentity;
+    /** Project-relative file path validated by the writer before touching the filesystem. */
+    readonly path: string;
+    readonly content: string;
+    readonly executable?: boolean;
+}
+export interface InfraLedger {
+    readonly schemaVersion: 1;
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    readonly resources: readonly InfraOwnedResource[];
+    readonly artifacts: readonly {
+        readonly owner: InfraResourceIdentity;
+        readonly path: string;
+    }[];
+}
+/** No default environment or confirmation is possible for destruction. */
+export interface InfraDestroyRequest {
+    readonly projectId: string;
+    readonly environment: AppEnvironmentId;
+    readonly confirmation: {
+        readonly projectId: string;
+        readonly environment: AppEnvironmentId;
+    };
+    /** Data deletion is a separate, explicit resource-scoped authorization in every environment. */
+    readonly persistence: {
+        readonly policy: 'retain';
+    } | {
+        readonly policy: 'delete';
+        readonly confirmedResources: readonly InfraResourceIdentity[];
+    };
+}
+//# sourceMappingURL=infraLifecycle.d.ts.map

package/dist/types/infraLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraLifecycle.d.ts","sourceRoot":"","sources":["../../src/types/infraLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,yFAAyF;AACzF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,mBAAmB,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,IACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,GAAG,cAAc,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,KAAK,EACZ,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACpD;AAED,2FAA2F;AAC3F,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,CACzF;IACE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC1C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC;CACtC,CACJ,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,yFAAyF;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjG;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC9F,gGAAgG;IAChG,QAAQ,CAAC,WAAW,EAChB;QAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;KAAE,GAC7B;QAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,qBAAqB,EAAE,CAAA;KAAE,CAAC;CAClG"}

package/dist/types/infraLifecycle.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=infraLifecycle.js.map

package/dist/types/infraLifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infraLifecycle.js","sourceRoot":"","sources":["../../src/types/infraLifecycle.ts"],"names":[],"mappings":"","sourcesContent":["import type { AppEnvironmentId } from '../environments';\nimport type { InfraAdapterId } from './infraManifest';\nimport type { InfraSecretReference } from './infraSecrets';\n\n/** Identity must be verified before mutation; unowned resources must never be pruned. */\nexport interface InfraResourceIdentity {\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  readonly adapter: InfraAdapterId;\n  readonly resourceId: string;\n}\n\nexport interface InfraOwnedResource {\n  readonly identity: InfraResourceIdentity;\n  readonly externalId?: string;\n  readonly persistent: boolean;\n  readonly retention: 'retain' | 'delete-on-destroy';\n  readonly dependsOn: readonly InfraResourceIdentity[];\n}\n\nexport interface InfraDiagnostic {\n  readonly severity: 'info' | 'warning' | 'error';\n  readonly code: string;\n  /** Safe human-readable detail. Tokens and privileged values must be redacted by the producer. */\n  readonly message: string;\n  readonly path?: readonly (string | number)[];\n  readonly owner?: InfraResourceIdentity;\n}\n\nexport type InfraResult<T> =\n  | { readonly ok: true; readonly value: T; readonly diagnostics: readonly InfraDiagnostic[] }\n  | { readonly ok: false; readonly diagnostics: readonly InfraDiagnostic[] };\n\nexport interface InfraPlanAction {\n  readonly owner: InfraResourceIdentity;\n  readonly operation: 'create' | 'update' | 'delete' | 'retain' | 'noop';\n  readonly impact: 'none' | 'interrupts-service' | 'deletes-data';\n  readonly detail: string;\n  readonly dependsOn: readonly InfraResourceIdentity[];\n}\n\nexport interface InfraPlan {\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  /** Ordered dependency-first; teardown consumers reverse dependency order. */\n  readonly actions: readonly InfraPlanAction[];\n}\n\nexport interface InfraResourceStatus {\n  readonly owner: InfraResourceIdentity;\n  readonly state:\n    'absent' | 'pending' | 'ready' | 'degraded' | 'stopped' | 'retained' | 'failed' | 'unknown';\n  readonly detail?: string;\n  readonly diagnostics?: readonly InfraDiagnostic[];\n}\n\nexport interface InfraStatus {\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  readonly state: InfraResourceStatus['state'];\n  readonly resources: readonly InfraResourceStatus[];\n}\n\n/** A privileged output has a reference, never a value field or environment export name. */\nexport type InfraOutput = { readonly owner: InfraResourceIdentity; readonly name: string } & (\n  | {\n      readonly visibility: 'public';\n      readonly value: string | number | boolean;\n      readonly environmentVariable?: string;\n      readonly reference?: never;\n    }\n  | {\n      readonly visibility: 'secret';\n      readonly reference: InfraSecretReference;\n      readonly value?: never;\n      readonly environmentVariable?: never;\n    }\n);\n\nexport interface InfraGeneratedArtifact {\n  readonly owner: InfraResourceIdentity;\n  /** Project-relative file path validated by the writer before touching the filesystem. */\n  readonly path: string;\n  readonly content: string;\n  readonly executable?: boolean;\n}\n\nexport interface InfraLedger {\n  readonly schemaVersion: 1;\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  readonly resources: readonly InfraOwnedResource[];\n  readonly artifacts: readonly { readonly owner: InfraResourceIdentity; readonly path: string }[];\n}\n\n/** No default environment or confirmation is possible for destruction. */\nexport interface InfraDestroyRequest {\n  readonly projectId: string;\n  readonly environment: AppEnvironmentId;\n  readonly confirmation: { readonly projectId: string; readonly environment: AppEnvironmentId };\n  /** Data deletion is a separate, explicit resource-scoped authorization in every environment. */\n  readonly persistence:\n    | { readonly policy: 'retain' }\n    | { readonly policy: 'delete'; readonly confirmedResources: readonly InfraResourceIdentity[] };\n}\n"]}