@ankhorage/contracts 14.0.0 → 16.0.0

package/src/types.ts

@@ -1,18 +1,20 @@
 import type { ColorHarmony } from '@ankhorage/color-theory';
 
 import type { SplashScreenSpec } from './appManifest/splashScreen';
-import type { AuthFlowConfig, AuthIdentifierKind, AuthOAuthConfig, AuthSignUpField } from './auth';
+import type { AuthIdentifierKind, AuthSignUpField } from './auth';
 import type {
   BindingValueSource,
   ComponentDataBindingRegistry,
   ScreenDataLoaderDefinition,
 } from './bindings';
-import type { ApiDefinitionList, DataSourceRegistry } from './data';
+import type { DataSourceRegistry } from './data';
 import type { AppDeployManifest } from './deploy';
+import type { InfraManifest } from './infra';
 import type { MediaAssetReference, MediaManifest } from './media';
 import type { AppNavigatorManifest } from './navigator';
 import type { RepositoryManifest } from './repository';
 import type { ScreenRequirements } from './requirements';
+import type { AppStateSpec } from './state';
 import type { ThemeGlobalTokenOverrides, ThemeRecipeOverrides } from './theme';
 
 export interface ThemeModeConfig {
@@ -164,40 +166,9 @@ export const APP_CATEGORIES = [
 ] as const;
 export type AppCategory = (typeof APP_CATEGORIES)[number];
 
-export const DEPLOYMENT_TARGETS = ['minikube'] as const;
-export type KnownDeploymentTarget = (typeof DEPLOYMENT_TARGETS)[number];
-export type DeploymentTarget = KnownDeploymentTarget | (string & {});
-
-export const DATABASE_PROVIDERS = ['supabase'] as const;
-export type KnownDatabaseProvider = (typeof DATABASE_PROVIDERS)[number];
-export type DatabaseProvider = KnownDatabaseProvider | (string & {});
-
-export const DATABASE_TIERS = ['dev', 'prod'] as const;
-export type DatabaseTier = (typeof DATABASE_TIERS)[number];
-
-export const STORAGE_PROVIDERS = ['auto', 's3', 'r2'] as const;
-export type StorageProvider = (typeof STORAGE_PROVIDERS)[number];
-
-export const STATE_PROVIDERS = ['legend'] as const;
-export type KnownStateProvider = (typeof STATE_PROVIDERS)[number];
-export type StateProvider = KnownStateProvider | (string & {});
-
-export const STATE_PERSISTENCE_MODES = ['none', 'local', 'secure', 'database'] as const;
-export type StatePersistenceMode = (typeof STATE_PERSISTENCE_MODES)[number];
-
-export const AUTHZ_KINDS = ['RBAC', 'ABAC'] as const;
-export type AuthzKind = (typeof AUTHZ_KINDS)[number];
-
-export const AUTHZ_ENGINES = ['cerbos', 'native'] as const;
-export type AuthzEngine = (typeof AUTHZ_ENGINES)[number];
-
 export const AUTH_SCOPES = ['global', 'none', 'integrated'] as const;
 export type AuthScope = (typeof AUTH_SCOPES)[number];
 
-export const AUTH_PROVIDERS = ['supabase'] as const;
-export type KnownAuthProvider = (typeof AUTH_PROVIDERS)[number];
-export type AuthProvider = KnownAuthProvider | (string & {});
-
 export const AUTH_SIGN_IN_IDENTIFIERS = ['email', 'username', 'phone'] as const;
 export type AuthSignInIdentifier = AuthIdentifierKind;
 
@@ -269,31 +240,6 @@ export interface ScreenSpec {
   requires?: ScreenRequirements;
 }
 
-export interface DeploymentSpec {
-  target: DeploymentTarget;
-  monitoring: boolean;
-}
-
-export interface DatabaseSpec {
-  provider: DatabaseProvider;
-  tier: DatabaseTier;
-}
-
-export interface StorageSpec {
-  provider: StorageProvider;
-  buckets: string[];
-}
-
-export interface StateSpec {
-  readonly provider: StateProvider;
-  readonly persistence?: StatePersistenceMode;
-}
-
-export interface AuthzSpec {
-  kind: AuthzKind;
-  engine: AuthzEngine;
-}
-
 export interface AuthSignInSpec {
   identifiers: AuthSignInIdentifier[];
 }
@@ -312,34 +258,6 @@ export interface AuthProfileSpec {
   updateStrategy?: AuthProfileUpdateStrategy;
 }
 
-export interface AuthSpec {
-  scope: AuthScope;
-  provider: AuthProvider;
-  authorization?: AuthzSpec;
-  flow?: AuthFlowConfig;
-  signIn?: AuthSignInSpec;
-  signUp?: AuthSignUpSpec;
-  oauth?: AuthOAuthConfig;
-  profile?: AuthProfileSpec;
-}
-
-export interface NetworkingSpec {
-  domain?: string;
-  cdn: boolean;
-}
-
-export interface InfraManifest {
-  deployment?: DeploymentSpec;
-  auth?: AuthSpec;
-  database?: DatabaseSpec;
-  storage?: StorageSpec;
-  state?: StateSpec;
-  networking?: NetworkingSpec;
-  apis?: ApiDefinitionList;
-  modules: string[];
-  modulesConfig?: Record<string, unknown>;
-}
-
 export interface AppSettings {
   localization: {
     defaultLocale: string;
@@ -363,8 +281,10 @@ export interface AppManifest {
   splashScreen?: SplashScreenSpec;
   /** Studio-managed authoring media. Runtime/user uploads are intentionally separate. */
   media?: MediaManifest;
-  /** App distribution desired state. Infrastructure deployment remains under `infra.deployment`. */
+  /** App distribution desired state, separate from environment-specific infrastructure. */
   deploy?: AppDeployManifest;
+  /** Application runtime state is not provisioned by Infra. */
+  state?: AppStateSpec;
   infra: InfraManifest;
   navigator: AppNavigatorManifest;
   screens: Record<string, ScreenSpec>;

package/dist/appManifest/infra.d.ts

@@ -1,2 +0,0 @@
-export declare function isInfraManifest(value: unknown): boolean;
-//# sourceMappingURL=infra.d.ts.map

package/dist/appManifest/infra.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../src/appManifest/infra.ts"],"names":[],"mappings":"AAqCA,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAgBvD"}

package/dist/appManifest/infra.js

@@ -1,130 +0,0 @@
-import { AUTH_OAUTH_PROVIDER_IDS } from '../auth';
-import { AUTH_PROFILE_CREATE_STRATEGIES, AUTH_PROFILE_PRIMARY_KEY_STRATEGIES, AUTH_PROFILE_UPDATE_STRATEGIES, AUTH_SCOPES, AUTH_SIGN_IN_IDENTIFIERS, AUTH_SIGN_UP_POLICIES, AUTHZ_ENGINES, AUTHZ_KINDS, DATABASE_TIERS, STATE_PERSISTENCE_MODES, STORAGE_PROVIDERS, } from '../types';
-import { isApiDefinitionList } from './apis';
-import { isIconSpec } from './icon';
-import { isOptionalBoolean, isOptionalString, isRecord, isStringArray, isStringRecord, } from './shared';
-const AUTH_OAUTH_PROVIDER_SET = new Set(AUTH_OAUTH_PROVIDER_IDS);
-const AUTH_PROFILE_CREATE_STRATEGY_SET = new Set(AUTH_PROFILE_CREATE_STRATEGIES);
-const AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET = new Set(AUTH_PROFILE_PRIMARY_KEY_STRATEGIES);
-const AUTH_PROFILE_UPDATE_STRATEGY_SET = new Set(AUTH_PROFILE_UPDATE_STRATEGIES);
-const AUTH_SCOPE_SET = new Set(AUTH_SCOPES);
-const AUTH_SIGN_IN_IDENTIFIER_SET = new Set(AUTH_SIGN_IN_IDENTIFIERS);
-const AUTH_SIGN_UP_POLICY_SET = new Set(AUTH_SIGN_UP_POLICIES);
-const AUTHZ_ENGINE_SET = new Set(AUTHZ_ENGINES);
-const AUTHZ_KIND_SET = new Set(AUTHZ_KINDS);
-const DATABASE_TIER_SET = new Set(DATABASE_TIERS);
-const STATE_PERSISTENCE_MODE_SET = new Set(STATE_PERSISTENCE_MODES);
-const STORAGE_PROVIDER_SET = new Set(STORAGE_PROVIDERS);
-export function isInfraManifest(value) {
-    return (isRecord(value) &&
-        (value.deployment === undefined || isDeploymentSpec(value.deployment)) &&
-        (value.auth === undefined || isAuthSpec(value.auth)) &&
-        (value.database === undefined || isDatabaseSpec(value.database)) &&
-        (value.storage === undefined || isStorageSpec(value.storage)) &&
-        (value.state === undefined || isStateSpec(value.state)) &&
-        (value.networking === undefined || isNetworkingSpec(value.networking)) &&
-        (value.apis === undefined || isApiDefinitionList(value.apis)) &&
-        Array.isArray(value.modules) &&
-        value.modules.every((moduleId) => typeof moduleId === 'string') &&
-        (value.modulesConfig === undefined || isRecord(value.modulesConfig)) &&
-        !('plugins' in value) &&
-        !('pluginsConfig' in value));
-}
-function isDeploymentSpec(value) {
-    return (isRecord(value) && typeof value.target === 'string' && typeof value.monitoring === 'boolean');
-}
-function isDatabaseSpec(value) {
-    return (isRecord(value) &&
-        typeof value.provider === 'string' &&
-        typeof value.tier === 'string' &&
-        DATABASE_TIER_SET.has(value.tier));
-}
-function isStorageSpec(value) {
-    return (isRecord(value) &&
-        typeof value.provider === 'string' &&
-        STORAGE_PROVIDER_SET.has(value.provider) &&
-        isStringArray(value.buckets));
-}
-function isStateSpec(value) {
-    return (isRecord(value) &&
-        typeof value.provider === 'string' &&
-        (value.persistence === undefined ||
-            (typeof value.persistence === 'string' && STATE_PERSISTENCE_MODE_SET.has(value.persistence))));
-}
-function isNetworkingSpec(value) {
-    return isRecord(value) && isOptionalString(value.domain) && typeof value.cdn === 'boolean';
-}
-function isAuthSpec(value) {
-    return (isRecord(value) &&
-        typeof value.scope === 'string' &&
-        AUTH_SCOPE_SET.has(value.scope) &&
-        typeof value.provider === 'string' &&
-        (value.authorization === undefined || isAuthzSpec(value.authorization)) &&
-        (value.flow === undefined || isAuthFlow(value.flow)) &&
-        (value.signIn === undefined || isAuthSignInSpec(value.signIn)) &&
-        (value.signUp === undefined || isAuthSignUpSpec(value.signUp)) &&
-        (value.oauth === undefined || isAuthOAuthConfig(value.oauth)) &&
-        (value.profile === undefined || isAuthProfileSpec(value.profile)));
-}
-function isAuthzSpec(value) {
-    return (isRecord(value) &&
-        typeof value.kind === 'string' &&
-        AUTHZ_KIND_SET.has(value.kind) &&
-        typeof value.engine === 'string' &&
-        AUTHZ_ENGINE_SET.has(value.engine));
-}
-function isAuthFlow(value) {
-    return (isRecord(value) &&
-        typeof value.signInRoute === 'string' &&
-        isOptionalString(value.signUpRoute) &&
-        isOptionalString(value.signOutRoute) &&
-        isOptionalString(value.forgotPasswordRoute) &&
-        isOptionalString(value.otpRoute) &&
-        typeof value.postSignInRoute === 'string' &&
-        isOptionalString(value.unauthorizedRoute));
-}
-function isAuthSignInSpec(value) {
-    return (isRecord(value) &&
-        Array.isArray(value.identifiers) &&
-        value.identifiers.every((identifier) => typeof identifier === 'string' && AUTH_SIGN_IN_IDENTIFIER_SET.has(identifier)));
-}
-function isAuthSignUpSpec(value) {
-    return (isRecord(value) &&
-        isStringArray(value.requiredFields) &&
-        (value.optionalFields === undefined || isStringArray(value.optionalFields)) &&
-        (value.signUpPolicy === undefined ||
-            (typeof value.signUpPolicy === 'string' && AUTH_SIGN_UP_POLICY_SET.has(value.signUpPolicy))));
-}
-function isAuthOAuthConfig(value) {
-    return (isRecord(value) &&
-        typeof value.enabled === 'boolean' &&
-        typeof value.callbackRoute === 'string' &&
-        Array.isArray(value.providers) &&
-        value.providers.every(isAuthOAuthProviderConfig));
-}
-function isAuthOAuthProviderConfig(value) {
-    return (isRecord(value) &&
-        typeof value.id === 'string' &&
-        (AUTH_OAUTH_PROVIDER_SET.has(value.id) || value.id.length > 0) &&
-        isOptionalString(value.label) &&
-        isOptionalBoolean(value.enabled) &&
-        (value.scopes === undefined || isStringArray(value.scopes)) &&
-        (value.queryParams === undefined || isStringRecord(value.queryParams)) &&
-        (value.icon === undefined || isIconSpec(value.icon)) &&
-        (value.credentialsRef === undefined || typeof value.credentialsRef === 'string'));
-}
-function isAuthProfileSpec(value) {
-    return (isRecord(value) &&
-        isStringArray(value.fields) &&
-        isOptionalString(value.table) &&
-        (value.primaryKey === undefined ||
-            (typeof value.primaryKey === 'string' &&
-                AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET.has(value.primaryKey))) &&
-        (value.createStrategy === undefined ||
-            (typeof value.createStrategy === 'string' &&
-                AUTH_PROFILE_CREATE_STRATEGY_SET.has(value.createStrategy))) &&
-        (value.updateStrategy === undefined ||
-            (typeof value.updateStrategy === 'string' &&
-                AUTH_PROFILE_UPDATE_STRATEGY_SET.has(value.updateStrategy))));
-}
-//# sourceMappingURL=infra.js.map

package/dist/appManifest/infra.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"infra.js","sourceRoot":"","sources":["../../src/appManifest/infra.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,EACnC,8BAA8B,EAC9B,WAAW,EACX,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,aAAa,EACb,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AACzE,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;AACzF,MAAM,qCAAqC,GAAG,IAAI,GAAG,CAAS,mCAAmC,CAAC,CAAC;AACnG,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;AACzF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,CAAC;AACpD,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAS,wBAAwB,CAAC,CAAC;AAC9E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;AACvE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;AACxD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,cAAc,CAAC,CAAC;AAC1D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AAC5E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,iBAAiB,CAAC,CAAC;AAEhE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;QAC/D,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QACrB,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QACxC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YAC9B,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC;QACnC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;QACpC,gBAAgB,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC3C,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,KAAK,CAAC,WAAW,CAAC,KAAK,CACrB,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,2BAA2B,CAAC,GAAG,CAAC,UAAU,CAAC,CAC9F,CACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QACnC,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3E,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;YAC/B,CAAC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAClC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAC9B,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,CAAC,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9D,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC7B,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3B,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YAC7B,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACnC,qCAAqC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACjE,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;YACjC,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;gBACvC,gCAAgC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAChE,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;YACjC,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;gBACvC,gCAAgC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC","sourcesContent":["import { AUTH_OAUTH_PROVIDER_IDS } from '../auth';\nimport {\n  AUTH_PROFILE_CREATE_STRATEGIES,\n  AUTH_PROFILE_PRIMARY_KEY_STRATEGIES,\n  AUTH_PROFILE_UPDATE_STRATEGIES,\n  AUTH_SCOPES,\n  AUTH_SIGN_IN_IDENTIFIERS,\n  AUTH_SIGN_UP_POLICIES,\n  AUTHZ_ENGINES,\n  AUTHZ_KINDS,\n  DATABASE_TIERS,\n  STATE_PERSISTENCE_MODES,\n  STORAGE_PROVIDERS,\n} from '../types';\nimport { isApiDefinitionList } from './apis';\nimport { isIconSpec } from './icon';\nimport {\n  isOptionalBoolean,\n  isOptionalString,\n  isRecord,\n  isStringArray,\n  isStringRecord,\n} from './shared';\n\nconst AUTH_OAUTH_PROVIDER_SET = new Set<string>(AUTH_OAUTH_PROVIDER_IDS);\nconst AUTH_PROFILE_CREATE_STRATEGY_SET = new Set<string>(AUTH_PROFILE_CREATE_STRATEGIES);\nconst AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET = new Set<string>(AUTH_PROFILE_PRIMARY_KEY_STRATEGIES);\nconst AUTH_PROFILE_UPDATE_STRATEGY_SET = new Set<string>(AUTH_PROFILE_UPDATE_STRATEGIES);\nconst AUTH_SCOPE_SET = new Set<string>(AUTH_SCOPES);\nconst AUTH_SIGN_IN_IDENTIFIER_SET = new Set<string>(AUTH_SIGN_IN_IDENTIFIERS);\nconst AUTH_SIGN_UP_POLICY_SET = new Set<string>(AUTH_SIGN_UP_POLICIES);\nconst AUTHZ_ENGINE_SET = new Set<string>(AUTHZ_ENGINES);\nconst AUTHZ_KIND_SET = new Set<string>(AUTHZ_KINDS);\nconst DATABASE_TIER_SET = new Set<string>(DATABASE_TIERS);\nconst STATE_PERSISTENCE_MODE_SET = new Set<string>(STATE_PERSISTENCE_MODES);\nconst STORAGE_PROVIDER_SET = new Set<string>(STORAGE_PROVIDERS);\n\nexport function isInfraManifest(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    (value.deployment === undefined || isDeploymentSpec(value.deployment)) &&\n    (value.auth === undefined || isAuthSpec(value.auth)) &&\n    (value.database === undefined || isDatabaseSpec(value.database)) &&\n    (value.storage === undefined || isStorageSpec(value.storage)) &&\n    (value.state === undefined || isStateSpec(value.state)) &&\n    (value.networking === undefined || isNetworkingSpec(value.networking)) &&\n    (value.apis === undefined || isApiDefinitionList(value.apis)) &&\n    Array.isArray(value.modules) &&\n    value.modules.every((moduleId) => typeof moduleId === 'string') &&\n    (value.modulesConfig === undefined || isRecord(value.modulesConfig)) &&\n    !('plugins' in value) &&\n    !('pluginsConfig' in value)\n  );\n}\n\nfunction isDeploymentSpec(value: unknown): boolean {\n  return (\n    isRecord(value) && typeof value.target === 'string' && typeof value.monitoring === 'boolean'\n  );\n}\n\nfunction isDatabaseSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.provider === 'string' &&\n    typeof value.tier === 'string' &&\n    DATABASE_TIER_SET.has(value.tier)\n  );\n}\n\nfunction isStorageSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.provider === 'string' &&\n    STORAGE_PROVIDER_SET.has(value.provider) &&\n    isStringArray(value.buckets)\n  );\n}\n\nfunction isStateSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.provider === 'string' &&\n    (value.persistence === undefined ||\n      (typeof value.persistence === 'string' && STATE_PERSISTENCE_MODE_SET.has(value.persistence)))\n  );\n}\n\nfunction isNetworkingSpec(value: unknown): boolean {\n  return isRecord(value) && isOptionalString(value.domain) && typeof value.cdn === 'boolean';\n}\n\nfunction isAuthSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.scope === 'string' &&\n    AUTH_SCOPE_SET.has(value.scope) &&\n    typeof value.provider === 'string' &&\n    (value.authorization === undefined || isAuthzSpec(value.authorization)) &&\n    (value.flow === undefined || isAuthFlow(value.flow)) &&\n    (value.signIn === undefined || isAuthSignInSpec(value.signIn)) &&\n    (value.signUp === undefined || isAuthSignUpSpec(value.signUp)) &&\n    (value.oauth === undefined || isAuthOAuthConfig(value.oauth)) &&\n    (value.profile === undefined || isAuthProfileSpec(value.profile))\n  );\n}\n\nfunction isAuthzSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.kind === 'string' &&\n    AUTHZ_KIND_SET.has(value.kind) &&\n    typeof value.engine === 'string' &&\n    AUTHZ_ENGINE_SET.has(value.engine)\n  );\n}\n\nfunction isAuthFlow(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.signInRoute === 'string' &&\n    isOptionalString(value.signUpRoute) &&\n    isOptionalString(value.signOutRoute) &&\n    isOptionalString(value.forgotPasswordRoute) &&\n    isOptionalString(value.otpRoute) &&\n    typeof value.postSignInRoute === 'string' &&\n    isOptionalString(value.unauthorizedRoute)\n  );\n}\n\nfunction isAuthSignInSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    Array.isArray(value.identifiers) &&\n    value.identifiers.every(\n      (identifier) => typeof identifier === 'string' && AUTH_SIGN_IN_IDENTIFIER_SET.has(identifier),\n    )\n  );\n}\n\nfunction isAuthSignUpSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    isStringArray(value.requiredFields) &&\n    (value.optionalFields === undefined || isStringArray(value.optionalFields)) &&\n    (value.signUpPolicy === undefined ||\n      (typeof value.signUpPolicy === 'string' && AUTH_SIGN_UP_POLICY_SET.has(value.signUpPolicy)))\n  );\n}\n\nfunction isAuthOAuthConfig(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.enabled === 'boolean' &&\n    typeof value.callbackRoute === 'string' &&\n    Array.isArray(value.providers) &&\n    value.providers.every(isAuthOAuthProviderConfig)\n  );\n}\n\nfunction isAuthOAuthProviderConfig(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    typeof value.id === 'string' &&\n    (AUTH_OAUTH_PROVIDER_SET.has(value.id) || value.id.length > 0) &&\n    isOptionalString(value.label) &&\n    isOptionalBoolean(value.enabled) &&\n    (value.scopes === undefined || isStringArray(value.scopes)) &&\n    (value.queryParams === undefined || isStringRecord(value.queryParams)) &&\n    (value.icon === undefined || isIconSpec(value.icon)) &&\n    (value.credentialsRef === undefined || typeof value.credentialsRef === 'string')\n  );\n}\n\nfunction isAuthProfileSpec(value: unknown): boolean {\n  return (\n    isRecord(value) &&\n    isStringArray(value.fields) &&\n    isOptionalString(value.table) &&\n    (value.primaryKey === undefined ||\n      (typeof value.primaryKey === 'string' &&\n        AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET.has(value.primaryKey))) &&\n    (value.createStrategy === undefined ||\n      (typeof value.createStrategy === 'string' &&\n        AUTH_PROFILE_CREATE_STRATEGY_SET.has(value.createStrategy))) &&\n    (value.updateStrategy === undefined ||\n      (typeof value.updateStrategy === 'string' &&\n        AUTH_PROFILE_UPDATE_STRATEGY_SET.has(value.updateStrategy)))\n  );\n}\n"]}

package/dist/appManifest/shared.d.ts

@@ -1,8 +0,0 @@
-export declare function isRecord(value: unknown): value is Record<string, unknown>;
-export declare function isOptionalString(value: unknown): boolean;
-export declare function isOptionalNumber(value: unknown): boolean;
-export declare function isOptionalBoolean(value: unknown): boolean;
-export declare function isStringArray(value: unknown): value is string[];
-export declare function isStringRecord(value: unknown): boolean;
-export declare function isManifestValue(value: unknown): boolean;
-//# sourceMappingURL=shared.d.ts.map

package/dist/appManifest/shared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/appManifest/shared.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAExD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAExD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAE/D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAevD"}

package/dist/appManifest/shared.js

@@ -1,31 +0,0 @@
-export function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-export function isOptionalString(value) {
-    return value === undefined || typeof value === 'string';
-}
-export function isOptionalNumber(value) {
-    return value === undefined || typeof value === 'number';
-}
-export function isOptionalBoolean(value) {
-    return value === undefined || typeof value === 'boolean';
-}
-export function isStringArray(value) {
-    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
-}
-export function isStringRecord(value) {
-    return isRecord(value) && Object.values(value).every((entry) => typeof entry === 'string');
-}
-export function isManifestValue(value) {
-    if (value === null ||
-        typeof value === 'string' ||
-        typeof value === 'number' ||
-        typeof value === 'boolean') {
-        return true;
-    }
-    if (Array.isArray(value)) {
-        return value.every(isManifestValue);
-    }
-    return isRecord(value) && Object.values(value).every(isManifestValue);
-}
-//# sourceMappingURL=shared.js.map

package/dist/appManifest/shared.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/appManifest/shared.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AACxE,CAAC","sourcesContent":["export function isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function isOptionalString(value: unknown): boolean {\n  return value === undefined || typeof value === 'string';\n}\n\nexport function isOptionalNumber(value: unknown): boolean {\n  return value === undefined || typeof value === 'number';\n}\n\nexport function isOptionalBoolean(value: unknown): boolean {\n  return value === undefined || typeof value === 'boolean';\n}\n\nexport function isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((entry) => typeof entry === 'string');\n}\n\nexport function isStringRecord(value: unknown): boolean {\n  return isRecord(value) && Object.values(value).every((entry) => typeof entry === 'string');\n}\n\nexport function isManifestValue(value: unknown): boolean {\n  if (\n    value === null ||\n    typeof value === 'string' ||\n    typeof value === 'number' ||\n    typeof value === 'boolean'\n  ) {\n    return true;\n  }\n\n  if (Array.isArray(value)) {\n    return value.every(isManifestValue);\n  }\n\n  return isRecord(value) && Object.values(value).every(isManifestValue);\n}\n"]}

package/dist/secretManifest.d.ts

@@ -1,11 +0,0 @@
-import type { SecretStoreProvider } from './secrets';
-export interface InfraSecretStoreSpec {
-    provider: SecretStoreProvider;
-}
-declare module './types' {
-    interface InfraManifest {
-        /** Non-secret provider selection. Bootstrap credentials stay in trusted environment config. */
-        secretStore?: InfraSecretStoreSpec;
-    }
-}
-//# sourceMappingURL=secretManifest.d.ts.map

package/dist/secretManifest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretManifest.d.ts","sourceRoot":"","sources":["../src/secretManifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,aAAa;QACrB,+FAA+F;QAC/F,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC;CACF"}

package/dist/secretManifest.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=secretManifest.js.map

package/dist/secretManifest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretManifest.js","sourceRoot":"","sources":["../src/secretManifest.ts"],"names":[],"mappings":"","sourcesContent":["import type { SecretStoreProvider } from './secrets';\n\nexport interface InfraSecretStoreSpec {\n  provider: SecretStoreProvider;\n}\n\ndeclare module './types' {\n  interface InfraManifest {\n    /** Non-secret provider selection. Bootstrap credentials stay in trusted environment config. */\n    secretStore?: InfraSecretStoreSpec;\n  }\n}\n"]}

package/src/appManifest/infra.ts

@@ -1,190 +0,0 @@
-import { AUTH_OAUTH_PROVIDER_IDS } from '../auth';
-import {
-  AUTH_PROFILE_CREATE_STRATEGIES,
-  AUTH_PROFILE_PRIMARY_KEY_STRATEGIES,
-  AUTH_PROFILE_UPDATE_STRATEGIES,
-  AUTH_SCOPES,
-  AUTH_SIGN_IN_IDENTIFIERS,
-  AUTH_SIGN_UP_POLICIES,
-  AUTHZ_ENGINES,
-  AUTHZ_KINDS,
-  DATABASE_TIERS,
-  STATE_PERSISTENCE_MODES,
-  STORAGE_PROVIDERS,
-} from '../types';
-import { isApiDefinitionList } from './apis';
-import { isIconSpec } from './icon';
-import {
-  isOptionalBoolean,
-  isOptionalString,
-  isRecord,
-  isStringArray,
-  isStringRecord,
-} from './shared';
-
-const AUTH_OAUTH_PROVIDER_SET = new Set<string>(AUTH_OAUTH_PROVIDER_IDS);
-const AUTH_PROFILE_CREATE_STRATEGY_SET = new Set<string>(AUTH_PROFILE_CREATE_STRATEGIES);
-const AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET = new Set<string>(AUTH_PROFILE_PRIMARY_KEY_STRATEGIES);
-const AUTH_PROFILE_UPDATE_STRATEGY_SET = new Set<string>(AUTH_PROFILE_UPDATE_STRATEGIES);
-const AUTH_SCOPE_SET = new Set<string>(AUTH_SCOPES);
-const AUTH_SIGN_IN_IDENTIFIER_SET = new Set<string>(AUTH_SIGN_IN_IDENTIFIERS);
-const AUTH_SIGN_UP_POLICY_SET = new Set<string>(AUTH_SIGN_UP_POLICIES);
-const AUTHZ_ENGINE_SET = new Set<string>(AUTHZ_ENGINES);
-const AUTHZ_KIND_SET = new Set<string>(AUTHZ_KINDS);
-const DATABASE_TIER_SET = new Set<string>(DATABASE_TIERS);
-const STATE_PERSISTENCE_MODE_SET = new Set<string>(STATE_PERSISTENCE_MODES);
-const STORAGE_PROVIDER_SET = new Set<string>(STORAGE_PROVIDERS);
-
-export function isInfraManifest(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    (value.deployment === undefined || isDeploymentSpec(value.deployment)) &&
-    (value.auth === undefined || isAuthSpec(value.auth)) &&
-    (value.database === undefined || isDatabaseSpec(value.database)) &&
-    (value.storage === undefined || isStorageSpec(value.storage)) &&
-    (value.state === undefined || isStateSpec(value.state)) &&
-    (value.networking === undefined || isNetworkingSpec(value.networking)) &&
-    (value.apis === undefined || isApiDefinitionList(value.apis)) &&
-    Array.isArray(value.modules) &&
-    value.modules.every((moduleId) => typeof moduleId === 'string') &&
-    (value.modulesConfig === undefined || isRecord(value.modulesConfig)) &&
-    !('plugins' in value) &&
-    !('pluginsConfig' in value)
-  );
-}
-
-function isDeploymentSpec(value: unknown): boolean {
-  return (
-    isRecord(value) && typeof value.target === 'string' && typeof value.monitoring === 'boolean'
-  );
-}
-
-function isDatabaseSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.provider === 'string' &&
-    typeof value.tier === 'string' &&
-    DATABASE_TIER_SET.has(value.tier)
-  );
-}
-
-function isStorageSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.provider === 'string' &&
-    STORAGE_PROVIDER_SET.has(value.provider) &&
-    isStringArray(value.buckets)
-  );
-}
-
-function isStateSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.provider === 'string' &&
-    (value.persistence === undefined ||
-      (typeof value.persistence === 'string' && STATE_PERSISTENCE_MODE_SET.has(value.persistence)))
-  );
-}
-
-function isNetworkingSpec(value: unknown): boolean {
-  return isRecord(value) && isOptionalString(value.domain) && typeof value.cdn === 'boolean';
-}
-
-function isAuthSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.scope === 'string' &&
-    AUTH_SCOPE_SET.has(value.scope) &&
-    typeof value.provider === 'string' &&
-    (value.authorization === undefined || isAuthzSpec(value.authorization)) &&
-    (value.flow === undefined || isAuthFlow(value.flow)) &&
-    (value.signIn === undefined || isAuthSignInSpec(value.signIn)) &&
-    (value.signUp === undefined || isAuthSignUpSpec(value.signUp)) &&
-    (value.oauth === undefined || isAuthOAuthConfig(value.oauth)) &&
-    (value.profile === undefined || isAuthProfileSpec(value.profile))
-  );
-}
-
-function isAuthzSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.kind === 'string' &&
-    AUTHZ_KIND_SET.has(value.kind) &&
-    typeof value.engine === 'string' &&
-    AUTHZ_ENGINE_SET.has(value.engine)
-  );
-}
-
-function isAuthFlow(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.signInRoute === 'string' &&
-    isOptionalString(value.signUpRoute) &&
-    isOptionalString(value.signOutRoute) &&
-    isOptionalString(value.forgotPasswordRoute) &&
-    isOptionalString(value.otpRoute) &&
-    typeof value.postSignInRoute === 'string' &&
-    isOptionalString(value.unauthorizedRoute)
-  );
-}
-
-function isAuthSignInSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    Array.isArray(value.identifiers) &&
-    value.identifiers.every(
-      (identifier) => typeof identifier === 'string' && AUTH_SIGN_IN_IDENTIFIER_SET.has(identifier),
-    )
-  );
-}
-
-function isAuthSignUpSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    isStringArray(value.requiredFields) &&
-    (value.optionalFields === undefined || isStringArray(value.optionalFields)) &&
-    (value.signUpPolicy === undefined ||
-      (typeof value.signUpPolicy === 'string' && AUTH_SIGN_UP_POLICY_SET.has(value.signUpPolicy)))
-  );
-}
-
-function isAuthOAuthConfig(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.enabled === 'boolean' &&
-    typeof value.callbackRoute === 'string' &&
-    Array.isArray(value.providers) &&
-    value.providers.every(isAuthOAuthProviderConfig)
-  );
-}
-
-function isAuthOAuthProviderConfig(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    typeof value.id === 'string' &&
-    (AUTH_OAUTH_PROVIDER_SET.has(value.id) || value.id.length > 0) &&
-    isOptionalString(value.label) &&
-    isOptionalBoolean(value.enabled) &&
-    (value.scopes === undefined || isStringArray(value.scopes)) &&
-    (value.queryParams === undefined || isStringRecord(value.queryParams)) &&
-    (value.icon === undefined || isIconSpec(value.icon)) &&
-    (value.credentialsRef === undefined || typeof value.credentialsRef === 'string')
-  );
-}
-
-function isAuthProfileSpec(value: unknown): boolean {
-  return (
-    isRecord(value) &&
-    isStringArray(value.fields) &&
-    isOptionalString(value.table) &&
-    (value.primaryKey === undefined ||
-      (typeof value.primaryKey === 'string' &&
-        AUTH_PROFILE_PRIMARY_KEY_STRATEGY_SET.has(value.primaryKey))) &&
-    (value.createStrategy === undefined ||
-      (typeof value.createStrategy === 'string' &&
-        AUTH_PROFILE_CREATE_STRATEGY_SET.has(value.createStrategy))) &&
-    (value.updateStrategy === undefined ||
-      (typeof value.updateStrategy === 'string' &&
-        AUTH_PROFILE_UPDATE_STRATEGY_SET.has(value.updateStrategy)))
-  );
-}

package/src/appManifest/shared.ts

@@ -1,40 +0,0 @@
-export function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-
-export function isOptionalString(value: unknown): boolean {
-  return value === undefined || typeof value === 'string';
-}
-
-export function isOptionalNumber(value: unknown): boolean {
-  return value === undefined || typeof value === 'number';
-}
-
-export function isOptionalBoolean(value: unknown): boolean {
-  return value === undefined || typeof value === 'boolean';
-}
-
-export function isStringArray(value: unknown): value is string[] {
-  return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
-}
-
-export function isStringRecord(value: unknown): boolean {
-  return isRecord(value) && Object.values(value).every((entry) => typeof entry === 'string');
-}
-
-export function isManifestValue(value: unknown): boolean {
-  if (
-    value === null ||
-    typeof value === 'string' ||
-    typeof value === 'number' ||
-    typeof value === 'boolean'
-  ) {
-    return true;
-  }
-
-  if (Array.isArray(value)) {
-    return value.every(isManifestValue);
-  }
-
-  return isRecord(value) && Object.values(value).every(isManifestValue);
-}

package/src/secretManifest.ts

@@ -1,12 +0,0 @@
-import type { SecretStoreProvider } from './secrets';
-
-export interface InfraSecretStoreSpec {
-  provider: SecretStoreProvider;
-}
-
-declare module './types' {
-  interface InfraManifest {
-    /** Non-secret provider selection. Bootstrap credentials stay in trusted environment config. */
-    secretStore?: InfraSecretStoreSpec;
-  }
-}