@ankhorage/infra 0.0.0

package/dist/adapters/minikube/base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/minikube/base/index.ts"],"names":[],"mappings":"AAmBA,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAC3C,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAC9C,MAAM,qCAAqC,GAAG,QAAQ,CAAC;AAEvD,MAAM,UAAU,6BAA6B,CAAC,IAK7C;IACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAEtE,MAAM,IAAI,GAAG,gBAAgB,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,IAAI,MAAM,CAAC;IAC9B,MAAM,WAAW,GAAG,GAAG,IAAI,UAAU,CAAC;IACtC,MAAM,YAAY,GAAG,GAAG,IAAI,YAAY,CAAC;IACzC,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,CAAC;IACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,IAAI,MAAM,CAAC;IAClE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC;IAC/D,MAAM,eAAe,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC;IAEjD,OAAO;QACL;YACE,IAAI,EAAE,GAAG,IAAI,YAAY;YACzB,OAAO,EAAE,iBAAiB,CAAC;gBACzB,SAAS;gBACT,eAAe;gBACf,iBAAiB;gBACjB,YAAY;gBACZ,WAAW;gBACX,cAAc;gBACd,kBAAkB;aACnB,CAAC;SACH;QACD;YACE,IAAI,EAAE,GAAG,IAAI,eAAe;YAC5B,OAAO,EAAE,aAAa,CAAC;gBACrB,SAAS;gBACT,MAAM;gBACN,eAAe;gBACf,eAAe;gBACf,kBAAkB;aACnB,CAAC;SACH;QACD;YACE,IAAI,EAAE,GAAG,OAAO,iBAAiB;YACjC,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC;SACzC;QACD;YACE,IAAI,EAAE,GAAG,OAAO,qBAAqB;YACrC,OAAO,EAAE,eAAe,CAAC;gBACvB,SAAS;gBACT,SAAS;gBACT,YAAY;gBACZ,gBAAgB;gBAChB,eAAe;gBACf,iBAAiB;gBACjB,MAAM;aACP,CAAC;SACH;QACD;YACE,IAAI,EAAE,GAAG,OAAO,sBAAsB;YACtC,OAAO,EAAE,wBAAwB,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;SAClE;QACD;YACE,IAAI,EAAE,GAAG,OAAO,mBAAmB;YACnC,OAAO,EAAE,qBAAqB,CAAC,SAAS,CAAC;SAC1C;QACD;YACE,IAAI,EAAE,GAAG,OAAO,qBAAqB;YACrC,OAAO,EAAE,wBAAwB,CAAC,cAAc,CAAC;SAClD;QACD;YACE,IAAI,EAAE,GAAG,WAAW,QAAQ;YAC5B,OAAO,EAAE,WAAW,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;YACtE,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,WAAW,qBAAqB;YACzC,OAAO,EAAE,sBAAsB,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;YACjF,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,WAAW,kBAAkB;YACtC,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC;YACxC,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,WAAW,UAAU;YAC9B,OAAO,EAAE,aAAa,EAAE;YACxB,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,WAAW,YAAY;YAChC,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC;YACnC,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,WAAW,wBAAwB;YAC5C,OAAO,EAAE,yBAAyB,CAAC,kBAAkB,CAAC;YACtD,UAAU,EAAE,IAAI;SACjB;QACD;YACE,IAAI,EAAE,GAAG,YAAY,aAAa;YAClC,OAAO,EAAE,qBAAqB,EAAE;SACjC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAQ1B;IACC,MAAM,EACJ,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,kBAAkB,GACnB,GAAG,IAAI,CAAC;IACT,MAAM,aAAa,GAAG;QACpB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,kBAAkB;QAClB,GAAG,cAAc;KAClB;SACE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyCP,aAAa;;;;;;;;;;;iBAWE,SAAS;4BACE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;qBAC3C,YAAY;4BACL,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sDAmDe,kBAAkB,CAAC,IAAI;qDACxB,kBAAkB,CAAC,GAAG;oDACvB,kBAAkB,CAAC,EAAE;wDACjB,kBAAkB,CAAC,MAAM;0DACvB,kBAAkB,CAAC,QAAQ;2DAC1B,kBAAkB,CAAC,SAAS;wDAC/B,kBAAkB,CAAC,MAAM;;;;;;iBAMhE,kBAAkB,CAAC,IAAI;4BACZ,kBAAkB,CAAC,GAAG;oBAC9B,kBAAkB,CAAC,EAAE;+BACV,kBAAkB,CAAC,MAAM;iCACvB,kBAAkB,CAAC,QAAQ;kCAC1B,kBAAkB,CAAC,SAAS;2BACnC,kBAAkB,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA6Bf,eAAe;;;;;;;CAOnD,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAMtB;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAEzF,MAAM,WAAW,GAAG;QAClB,kCAAkC;QAClC,kBAAkB,SAAS,EAAE;QAC7B,2BAA2B;QAC3B,wBAAwB;QACxB,wBAAwB;QACxB,iBAAiB;QACjB,qCAAqC;QACrC,uBAAuB;QACvB,4BAA4B,kBAAkB,CAAC,IAAI,EAAE;QACrD,8BAA8B,kBAAkB,CAAC,MAAM,EAAE;QACzD,2BAA2B,kBAAkB,CAAC,GAAG,EAAE;QACnD,0BAA0B,kBAAkB,CAAC,EAAE,EAAE;QACjD,8BAA8B,kBAAkB,CAAC,MAAM,EAAE;QACzD,gCAAgC,kBAAkB,CAAC,QAAQ,EAAE;QAC7D,iCAAiC,kBAAkB,CAAC,SAAS,EAAE;QAC/D,aAAa,eAAe,EAAE;QAC9B,qCAAqC;QACrC,gCAAgC;QAChC,iCAAiC;QACjC,+BAA+B;QAC/B,yBAAyB;QACzB,mCAAmC;QACnC,iCAAiC;QACjC,gBAAgB;QAChB,gCAAgC;QAChC,EAAE;QACF,gDAAgD;QAChD,6BAA6B;QAC7B,sCAAsC;QACtC,iCAAiC;QACjC,iCAAiC;QACjC,8BAA8B;QAC9B,EAAE;QACF,kCAAkC;QAClC,cAAc,MAAM,EAAE;QACtB,EAAE;QACF,iCAAiC;KAClC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC;IACpD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,OAAO;;;UAGC,SAAS;;;CAGlB,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,IAQxB;IACC,MAAM,EACJ,SAAS,EACT,SAAS,EACT,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,MAAM,GACP,GAAG,IAAI,CAAC;IAET,MAAM,YAAY,GAAG,eAAe;QAClC,CAAC,CAAC,wBAAwB,eAAe,CAAC,QAAQ;sBAChC,sBAAsB,CAAC,eAAe,CAAC,UAAU,CAAC;6BAC3C,sBAAsB,CAAC,eAAe,CAAC,aAAa,CAAC;CACjF;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;eAIM,SAAS;;;yBAGC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;iBAC5C,SAAS;oBACN,YAAY;wBACR,gBAAgB;EACtC,YAAY,sBAAsB,MAAM;CACzC,CAAC;AACF,CAAC;AAED,SAAS,8BAA8B,CACrC,QAA4B;IAE5B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC;IAChC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAEhC,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,aAAa;SACd,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,uBAAuB,GAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,CAAC;QAEvF,IAAI,CAAC,uBAAuB;YAAE,OAAO,IAAI,CAAC;QAE1C,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,aAAa;SACd,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,UAA6B;IACrD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,wBAAwB,CAAC,cAAwB;IACxD,MAAM,SAAS,GAAG;QAChB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,kBAAkB;QAClB,GAAG,cAAc;KAClB,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElE,OAAO;;;EAGP,aAAa;CACd,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAoD;IACpF,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAE5C,OAAO;;;;eAIM,SAAS;;;;;;;;;;;;;;;mBAeL,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BjC,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB;IAC9C,OAAO;;;;eAIM,SAAS;;;;;;;;;;;CAWvB,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,IAA2D;IAC9E,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAEnD,OAAO;;;;;;;;;;;;;;;;;gCAiBuB,gBAAgB;;;;2BAIrB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsNzC,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,IAG/B;IACC,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IAEnD,OAAO;;;;;;;;;;;;;;gCAcuB,gBAAgB;;;;2BAIrB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDzC,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;CAoBR,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,gBAAwB;IACpD,OAAO;;;;;;;;;;;;;gCAauB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;CAwB/C,CAAC;AACF,CAAC;AAED,SAAS,aAAa;IACpB,OAAO;;;;;;;;;;;;;;;;CAgBR,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,gBAAwB;IAC/C,OAAO;;;;;;;;;;;;;gCAauB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0E/C,CAAC;AACF,CAAC;AAED,SAAS,yBAAyB,CAAC,kBAAsC;IACvE,OAAO;;;;;;;;;;;;;;;;;;;yDAmBgD,kBAAkB,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2V/E,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAiB;IAC3C,OAAO,QAAQ,SAAS,MAAM,CAAC;AACjC,CAAC;AAED,SAAS,yBAAyB,CAAC,SAAiB;IAClD,MAAM,IAAI,GACR,wBAAwB;QACxB,8BAA8B,CAAC,SAAS,CAAC,GAAG,+BAA+B,CAAC;IAE9E,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,IAAI,GAAG,CAAC;QACb,EAAE,EAAE,IAAI,GAAG,CAAC;QACZ,MAAM,EAAE,IAAI,GAAG,CAAC;QAChB,QAAQ,EAAE,IAAI,GAAG,CAAC;QAClB,SAAS,EAAE,IAAI,GAAG,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,SAAiB;IACvD,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,aAAa,CAAC,qCAAqC,CAAC,CAAC;IAClG,OAAO,CAAC,SAAS,GAAG,gCAAgC,CAAC,GAAG,gCAAgC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,gCAAgC,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { GeneratedInfrastructureFile } from '../../../types';\nimport type { InfraManifestInput } from '../../../types';\n\ninterface SupabaseLocalPorts {\n  base: number;\n  shadow: number;\n  api: number;\n  db: number;\n  studio: number;\n  inbucket: number;\n  analytics: number;\n}\n\ninterface AppInfraStorageMetadata {\n  provider: 'supabase';\n  bucketsCsv: string;\n  defaultBucket: string;\n}\n\nconst SUPABASE_LOCAL_PORT_BASE = 55320;\nconst SUPABASE_LOCAL_PORT_BUCKET_SIZE = 10;\nconst SUPABASE_LOCAL_PORT_BUCKET_COUNT = 1000;\nconst SUPABASE_LOCAL_PORT_REFERENCE_PROJECT = 'my-app';\n\nexport function generateMinikubeBaseArtifacts(args: {\n  manifest: InfraManifestInput;\n  namespace: string;\n  extraResources: string[];\n  extraEnvEntries: string[];\n}): GeneratedInfrastructureFile[] {\n  const { manifest, namespace, extraResources, extraEnvEntries } = args;\n\n  const root = 'infra/minikube';\n  const k8sRoot = `${root}/k8s`;\n  const scriptsRoot = `${root}/scripts`;\n  const appImageRoot = `${root}/app-image`;\n  const defaultAppImage = getDefaultAppImage(namespace);\n  const supabaseLocalPorts = resolveSupabaseLocalPorts(namespace);\n\n  const authScope = manifest.auth?.scope ?? 'none';\n  const authProvider = manifest.auth?.provider ?? 'none';\n  const authzEngine = manifest.auth?.authorization.engine ?? 'none';\n  const databaseProvider = manifest.database?.provider ?? 'none';\n  const storageMetadata = resolveAppInfraStorageMetadata(manifest);\n  const monitoringEnabled = manifest.deployment?.monitoring === true;\n  const domain = manifest.networking?.domain ?? '';\n\n  return [\n    {\n      path: `${root}/README.md`,\n      content: getReadmeMarkdown({\n        namespace,\n        defaultAppImage,\n        monitoringEnabled,\n        authProvider,\n        authzEngine,\n        extraResources,\n        supabaseLocalPorts,\n      }),\n    },\n    {\n      path: `${root}/.env.example`,\n      content: getEnvExample({\n        namespace,\n        domain,\n        extraEnvEntries,\n        defaultAppImage,\n        supabaseLocalPorts,\n      }),\n    },\n    {\n      path: `${k8sRoot}/namespace.yaml`,\n      content: getNamespaceManifest(namespace),\n    },\n    {\n      path: `${k8sRoot}/app.configmap.yaml`,\n      content: getAppConfigMap({\n        namespace,\n        authScope,\n        authProvider,\n        databaseProvider,\n        storageMetadata,\n        monitoringEnabled,\n        domain,\n      }),\n    },\n    {\n      path: `${k8sRoot}/app/deployment.yaml`,\n      content: getAppDeploymentManifest({ namespace, defaultAppImage }),\n    },\n    {\n      path: `${k8sRoot}/app/service.yaml`,\n      content: getAppServiceManifest(namespace),\n    },\n    {\n      path: `${k8sRoot}/kustomization.yaml`,\n      content: getKustomizationManifest(extraResources),\n    },\n    {\n      path: `${scriptsRoot}/up.sh`,\n      content: getUpScript({ defaultNamespace: namespace, defaultAppImage }),\n      executable: true,\n    },\n    {\n      path: `${scriptsRoot}/build-app-image.sh`,\n      content: getBuildAppImageScript({ defaultNamespace: namespace, defaultAppImage }),\n      executable: true,\n    },\n    {\n      path: `${scriptsRoot}/port-forward.sh`,\n      content: getPortForwardScript(namespace),\n      executable: true,\n    },\n    {\n      path: `${scriptsRoot}/down.sh`,\n      content: getDownScript(),\n      executable: true,\n    },\n    {\n      path: `${scriptsRoot}/status.sh`,\n      content: getStatusScript(namespace),\n      executable: true,\n    },\n    {\n      path: `${scriptsRoot}/supabase-local-env.sh`,\n      content: getSupabaseLocalEnvScript(supabaseLocalPorts),\n      executable: true,\n    },\n    {\n      path: `${appImageRoot}/Dockerfile`,\n      content: getAppImageDockerfile(),\n    },\n  ];\n}\n\nfunction getReadmeMarkdown(args: {\n  namespace: string;\n  defaultAppImage: string;\n  monitoringEnabled: boolean;\n  authProvider: string;\n  authzEngine: string;\n  extraResources: string[];\n  supabaseLocalPorts: SupabaseLocalPorts;\n}): string {\n  const {\n    namespace,\n    defaultAppImage,\n    monitoringEnabled,\n    authProvider,\n    authzEngine,\n    extraResources,\n    supabaseLocalPorts,\n  } = args;\n  const resourceLines = [\n    'namespace.yaml',\n    'app.configmap.yaml',\n    'app/deployment.yaml',\n    'app/service.yaml',\n    ...extraResources,\n  ]\n    .map((r) => `- \\`k8s/${r}\\``)\n    .join('\\n');\n\n  return `# Minikube Infra\n\nThis directory is generated from \\`ankh.config.json\\` (infra manifest).\n\n## Requirements\n\n- minikube\n- kubectl\n- docker (when using the default driver)\n- bun (for Expo web export in app image build flow)\n- python3 (for patching generated local Supabase port defaults and checking port availability)\n\n## Quick Start\n\n1. Copy env template:\n   \\`\\`\\`bash\n   cp .env.example .env\n   \\`\\`\\`\n2. Optional: import local Supabase credentials from \\`supabase status\\` output:\n   \\`\\`\\`bash\n   ./scripts/supabase-local-env.sh\n   \\`\\`\\`\n3. Apply baseline infra:\n   \\`\\`\\`bash\n   ./scripts/up.sh\n   \\`\\`\\`\n4. Start app port-forward:\n   \\`\\`\\`bash\n   ./scripts/port-forward.sh\n   \\`\\`\\`\n5. Check status:\n   \\`\\`\\`bash\n   ./scripts/status.sh\n   \\`\\`\\`\n6. Tear down:\n   \\`\\`\\`bash\n   ./scripts/down.sh\n   \\`\\`\\`\n\n## Generated Resources\n\n${resourceLines}\n\n## Generated Helpers\n\n- \\`scripts/build-app-image.sh\\`\n- \\`scripts/port-forward.sh\\`\n- \\`scripts/supabase-local-env.sh\\`\n- \\`app-image/Dockerfile\\`\n\n## Runtime Conventions\n\n- Namespace: \\`${namespace}\\`\n- Monitoring requested: \\`${monitoringEnabled ? 'true' : 'false'}\\`\n- Auth provider: \\`${authProvider}\\`\n- Authorization engine: \\`${authzEngine}\\`\n- Namespace source: \\`infra.networking.domain\\` first, otherwise project slug hint from CLI.\n\n## App Runtime\n\nDefault app runtime manifests are generated:\n\n- \\`k8s/app/deployment.yaml\\`\n- \\`k8s/app/service.yaml\\`\n\nDeployment env wiring includes:\n\n- \\`ConfigMap/app-infra-config\\`\n- \\`ConfigMap/app-runtime-auth-env\\` (optional)\n- \\`ConfigMap/app-runtime-storage-env\\` (optional)\n- \\`Secret/supabase-auth-secrets\\` (optional)\n\nIf \\`auth.provider\\` is \\`supabase\\`, use:\n\n- \\`k8s/auth/supabase/supabase-auth.secret.yaml\\`\n- \\`k8s/auth/supabase/app-runtime-auth.env.configmap.yaml\\`\n- \\`auth/supabase-runtime-wiring.md\\`\n\nThe app deployment should import runtime config sources in this order:\n\n\\`\\`\\`yaml\nenvFrom:\n  - configMapRef:\n      name: app-runtime-auth-env\n  - configMapRef:\n      name: app-runtime-storage-env\n  - secretRef:\n      name: supabase-auth-secrets\n\\`\\`\\`\n\nDefault runtime knobs in \\`.env\\`:\n\n- \\`APP_BUILD_ENABLED\\`\n- \\`APP_SOURCE_DIR\\`\n- \\`APP_WEB_EXPORT_DIR\\`\n- \\`APP_IMAGE\\`\n- \\`APP_IMAGE_SYNC_STRATEGY\\`\n- \\`APP_IMAGE_CLEANUP_ON_DOWN\\`\n- \\`APP_IMAGE_CLEANUP_MINIKUBE\\`\n- \\`APP_IMAGE_CLEANUP_DOCKER\\`\n- \\`AUTH_RUNTIME_MODE\\`\n- \\`APP_PORT_FORWARD_LOCAL_PORT\\`\n- \\`APP_PORT_FORWARD_REMOTE_PORT\\`\n- \\`APP_REPLICAS\\`\n- \\`APP_FORCE_ROLLOUT_RESTART\\`\n- \\`SUPABASE_PROJECT_DIR\\` (optional supabase CLI project path)\n- \\`SUPABASE_LOCAL_PORT_BASE\\` (generated default \\`${supabaseLocalPorts.base}\\`)\n- \\`SUPABASE_LOCAL_API_PORT\\` (generated default \\`${supabaseLocalPorts.api}\\`)\n- \\`SUPABASE_LOCAL_DB_PORT\\` (generated default \\`${supabaseLocalPorts.db}\\`)\n- \\`SUPABASE_LOCAL_STUDIO_PORT\\` (generated default \\`${supabaseLocalPorts.studio}\\`)\n- \\`SUPABASE_LOCAL_INBUCKET_PORT\\` (generated default \\`${supabaseLocalPorts.inbucket}\\`)\n- \\`SUPABASE_LOCAL_ANALYTICS_PORT\\` (generated default \\`${supabaseLocalPorts.analytics}\\`)\n- \\`SUPABASE_LOCAL_SHADOW_PORT\\` (generated default \\`${supabaseLocalPorts.shadow}\\`)\n- \\`APP_IMAGE_PULL_SECRET_NAME\\` + credentials (optional, private registry)\n- \\`SUPABASE_SECRET_SYNC_ENABLED\\`\n\nGenerated app Supabase local defaults:\n\n- Port base: \\`${supabaseLocalPorts.base}\\`\n- API: \\`http://127.0.0.1:${supabaseLocalPorts.api}\\`\n- DB: \\`127.0.0.1:${supabaseLocalPorts.db}\\`\n- Studio: \\`http://127.0.0.1:${supabaseLocalPorts.studio}\\`\n- Inbucket: \\`http://127.0.0.1:${supabaseLocalPorts.inbucket}\\`\n- Analytics: \\`http://127.0.0.1:${supabaseLocalPorts.analytics}\\`\n- Shadow DB: \\`127.0.0.1:${supabaseLocalPorts.shadow}\\`\n\nOverride with:\n\n- \\`SUPABASE_LOCAL_PORT_BASE\\`\n- \\`SUPABASE_LOCAL_API_PORT\\`\n- \\`SUPABASE_LOCAL_DB_PORT\\`\n- \\`SUPABASE_LOCAL_STUDIO_PORT\\`\n- \\`SUPABASE_LOCAL_INBUCKET_PORT\\`\n- \\`SUPABASE_LOCAL_ANALYTICS_PORT\\`\n- \\`SUPABASE_LOCAL_SHADOW_PORT\\`\n\nBuild flow:\n\n- \\`./scripts/up.sh\\` calls \\`./scripts/build-app-image.sh\\` when \\`APP_BUILD_ENABLED=true\\`.\n- \\`./scripts/supabase-local-env.sh\\` can populate Supabase keys in \\`.env\\` from local \\`supabase status -o env\\`.\n- \\`./scripts/supabase-local-env.sh\\` writes \\`EXPO_PUBLIC_SUPABASE_URL\\` + \\`EXPO_PUBLIC_SUPABASE_ANON_KEY\\` into \\`$APP_SOURCE_DIR/.env.local\\` (e.g. \\`apps/card/.env.local\\`) for local app runs.\n- With \\`AUTH_RUNTIME_MODE=local\\` (default), \\`up.sh\\` auto-runs \\`supabase-local-env.sh\\` when Supabase keys are missing.\n- \\`supabase-local-env.sh\\` checks configured host ports before starting a missing local Supabase stack.\n- \\`build-app-image.sh\\` runs \\`bunx expo export --platform web\\` from app source.\n- \\`app-image/Dockerfile\\` builds an nginx image from exported web artifacts.\n- \\`build-app-image.sh\\` labels the generated Docker image with Ankhorage metadata for diagnostics.\n- \\`up.sh\\` syncs runtime image by strategy:\n  - \\`APP_IMAGE_SYNC_STRATEGY=docker-load\\` (default): load prebuilt local Docker image into Minikube.\n  - \\`APP_IMAGE_SYNC_STRATEGY=minikube-build\\`: build directly into Minikube image store.\n  - \\`APP_IMAGE_SYNC_STRATEGY=none\\`: skip local image sync.\n- \\`up.sh\\` applies image/replica changes and (by default) restarts \\`deployment/app-runtime\\`.\n- If Supabase keys are provided, \\`up.sh\\` syncs \\`Secret/supabase-auth-secrets\\` from env.\n\nDefault generated app image tag: \\`${defaultAppImage}\\`.\n\n## Notes\n\n- Auth/database/authorization resources are generated in adapter modules.\n- Cerbos route/screen policies derive from app navigator + authFlow intent when available.\n- Re-generate infra by saving the manifest or calling the bridge infra endpoint.\n`;\n}\n\nfunction getEnvExample(args: {\n  namespace: string;\n  domain: string;\n  extraEnvEntries: string[];\n  defaultAppImage: string;\n  supabaseLocalPorts: SupabaseLocalPorts;\n}): string {\n  const { namespace, domain, extraEnvEntries, defaultAppImage, supabaseLocalPorts } = args;\n\n  const baseEntries = [\n    '# Minikube runtime configuration',\n    `ANKH_NAMESPACE=${namespace}`,\n    'MINIKUBE_PROFILE=minikube',\n    'MINIKUBE_DRIVER=docker',\n    'APP_BUILD_ENABLED=true',\n    'APP_SOURCE_DIR=',\n    'APP_WEB_EXPORT_DIR=.ankh/web-export',\n    'SUPABASE_PROJECT_DIR=',\n    `SUPABASE_LOCAL_PORT_BASE=${supabaseLocalPorts.base}`,\n    `SUPABASE_LOCAL_SHADOW_PORT=${supabaseLocalPorts.shadow}`,\n    `SUPABASE_LOCAL_API_PORT=${supabaseLocalPorts.api}`,\n    `SUPABASE_LOCAL_DB_PORT=${supabaseLocalPorts.db}`,\n    `SUPABASE_LOCAL_STUDIO_PORT=${supabaseLocalPorts.studio}`,\n    `SUPABASE_LOCAL_INBUCKET_PORT=${supabaseLocalPorts.inbucket}`,\n    `SUPABASE_LOCAL_ANALYTICS_PORT=${supabaseLocalPorts.analytics}`,\n    `APP_IMAGE=${defaultAppImage}`,\n    'APP_IMAGE_SYNC_STRATEGY=docker-load',\n    'APP_IMAGE_CLEANUP_ON_DOWN=true',\n    'APP_IMAGE_CLEANUP_MINIKUBE=true',\n    'APP_IMAGE_CLEANUP_DOCKER=true',\n    'AUTH_RUNTIME_MODE=local',\n    'APP_PORT_FORWARD_LOCAL_PORT=18080',\n    'APP_PORT_FORWARD_REMOTE_PORT=80',\n    'APP_REPLICAS=1',\n    'APP_FORCE_ROLLOUT_RESTART=true',\n    '',\n    '# Optional private registry auth for APP_IMAGE',\n    'APP_IMAGE_PULL_SECRET_NAME=',\n    'APP_IMAGE_PULL_SECRET_SERVER=ghcr.io',\n    'APP_IMAGE_PULL_SECRET_USERNAME=',\n    'APP_IMAGE_PULL_SECRET_PASSWORD=',\n    'APP_IMAGE_PULL_SECRET_EMAIL=',\n    '',\n    '# Optional app networking domain',\n    `APP_DOMAIN=${domain}`,\n    '',\n    '# Adapter-provided runtime keys',\n  ];\n\n  const merged = [...baseEntries, ...extraEnvEntries];\n  const unique: string[] = [];\n  for (const entry of merged) {\n    if (!unique.includes(entry)) unique.push(entry);\n  }\n\n  return `${unique.join('\\n')}\\n`;\n}\n\nfunction getNamespaceManifest(namespace: string): string {\n  return `apiVersion: v1\nkind: Namespace\nmetadata:\n  name: ${namespace}\n  labels:\n    app.kubernetes.io/part-of: ankhorage\n`;\n}\n\nfunction getAppConfigMap(args: {\n  namespace: string;\n  authScope: string;\n  authProvider: string;\n  databaseProvider: string;\n  storageMetadata: AppInfraStorageMetadata | null;\n  monitoringEnabled: boolean;\n  domain: string;\n}): string {\n  const {\n    namespace,\n    authScope,\n    authProvider,\n    databaseProvider,\n    storageMetadata,\n    monitoringEnabled,\n    domain,\n  } = args;\n\n  const storageLines = storageMetadata\n    ? `  STORAGE_PROVIDER: \"${storageMetadata.provider}\"\n  STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(storageMetadata.bucketsCsv)}\"\n  STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(storageMetadata.defaultBucket)}\"\n`\n    : '';\n\n  return `apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: app-infra-config\n  namespace: ${namespace}\ndata:\n  DEPLOYMENT_TARGET: \"minikube\"\n  MONITORING_ENABLED: \"${monitoringEnabled ? 'true' : 'false'}\"\n  AUTH_SCOPE: \"${authScope}\"\n  AUTH_PROVIDER: \"${authProvider}\"\n  DATABASE_PROVIDER: \"${databaseProvider}\"\n${storageLines}  NETWORK_DOMAIN: \"${domain}\"\n`;\n}\n\nfunction resolveAppInfraStorageMetadata(\n  manifest: InfraManifestInput,\n): AppInfraStorageMetadata | null {\n  const spec = manifest.storage;\n  if (!spec) return null;\n\n  const buckets = normalizeBuckets(spec.buckets);\n  if (buckets.length === 0) return null;\n  const [defaultBucket] = buckets;\n  if (!defaultBucket) return null;\n\n  if (spec.provider === 'supabase') {\n    return {\n      provider: 'supabase',\n      bucketsCsv: buckets.join(','),\n      defaultBucket,\n    };\n  }\n\n  if (spec.provider === 'auto') {\n    const shouldResolveToSupabase =\n      manifest.database?.provider === 'supabase' || manifest.auth?.provider === 'supabase';\n\n    if (!shouldResolveToSupabase) return null;\n\n    return {\n      provider: 'supabase',\n      bucketsCsv: buckets.join(','),\n      defaultBucket,\n    };\n  }\n\n  return null;\n}\n\nfunction normalizeBuckets(rawBuckets: readonly string[]): string[] {\n  const normalized: string[] = [];\n  const seen = new Set<string>();\n\n  for (const raw of rawBuckets) {\n    const bucket = raw.trim();\n    if (!bucket) continue;\n    if (seen.has(bucket)) continue;\n    seen.add(bucket);\n    normalized.push(bucket);\n  }\n\n  return normalized;\n}\n\nfunction escapeYamlDoubleQuoted(value: string): string {\n  return value.replaceAll('\\\\', '\\\\\\\\').replaceAll('\"', '\\\\\"');\n}\n\nfunction getKustomizationManifest(extraResources: string[]): string {\n  const resources = [\n    'namespace.yaml',\n    'app.configmap.yaml',\n    'app/deployment.yaml',\n    'app/service.yaml',\n    ...extraResources,\n  ];\n  const resourceLines = resources.map((r) => `  - ${r}`).join('\\n');\n\n  return `apiVersion: kustomize.config.k8s.io/v1beta1\nkind: Kustomization\nresources:\n${resourceLines}\n`;\n}\n\nfunction getAppDeploymentManifest(args: { namespace: string; defaultAppImage: string }): string {\n  const { namespace, defaultAppImage } = args;\n\n  return `apiVersion: apps/v1\nkind: Deployment\nmetadata:\n  name: app-runtime\n  namespace: ${namespace}\n  labels:\n    app.kubernetes.io/name: app-runtime\nspec:\n  replicas: 1\n  selector:\n    matchLabels:\n      app.kubernetes.io/name: app-runtime\n  template:\n    metadata:\n      labels:\n        app.kubernetes.io/name: app-runtime\n    spec:\n      containers:\n        - name: app\n          image: ${defaultAppImage}\n          imagePullPolicy: IfNotPresent\n          ports:\n            - containerPort: 8080\n              name: http\n          envFrom:\n            - configMapRef:\n                name: app-infra-config\n            - configMapRef:\n                name: app-runtime-auth-env\n                optional: true\n            - configMapRef:\n                name: app-runtime-storage-env\n                optional: true\n            - secretRef:\n                name: supabase-auth-secrets\n                optional: true\n          readinessProbe:\n            httpGet:\n              path: /\n              port: http\n            initialDelaySeconds: 5\n            periodSeconds: 10\n          livenessProbe:\n            httpGet:\n              path: /\n              port: http\n            initialDelaySeconds: 15\n            periodSeconds: 20\n`;\n}\n\nfunction getAppServiceManifest(namespace: string): string {\n  return `apiVersion: v1\nkind: Service\nmetadata:\n  name: app-runtime\n  namespace: ${namespace}\n  labels:\n    app.kubernetes.io/name: app-runtime\nspec:\n  type: ClusterIP\n  selector:\n    app.kubernetes.io/name: app-runtime\n  ports:\n    - name: http\n      port: 80\n      targetPort: http\n`;\n}\n\nfunction getUpScript(args: { defaultNamespace: string; defaultAppImage: string }): string {\n  const { defaultNamespace, defaultAppImage } = args;\n\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\nK8S_DIR=\"\\${ROOT_DIR}/k8s\"\nBUILD_SCRIPT=\"\\${SCRIPT_DIR}/build-app-image.sh\"\n\nif [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ROOT_DIR}/.env\"\n  set +a\nfi\n\nPROFILE=\"\\${MINIKUBE_PROFILE:-minikube}\"\nDRIVER=\"\\${MINIKUBE_DRIVER:-docker}\"\nNAMESPACE=\"\\${ANKH_NAMESPACE:-${defaultNamespace}}\"\nAPP_BUILD_ENABLED=\"\\${APP_BUILD_ENABLED:-true}\"\nAPP_SOURCE_DIR=\"\\${APP_SOURCE_DIR:-$(cd \"\\${ROOT_DIR}/../..\" && pwd)}\"\nAPP_WEB_EXPORT_DIR=\"\\${APP_WEB_EXPORT_DIR:-.ankh/web-export}\"\nAPP_IMAGE=\"\\${APP_IMAGE:-${defaultAppImage}}\"\nAPP_IMAGE_SYNC_STRATEGY=\"\\${APP_IMAGE_SYNC_STRATEGY:-docker-load}\"\nAPP_REPLICAS=\"\\${APP_REPLICAS:-1}\"\nAPP_FORCE_ROLLOUT_RESTART=\"\\${APP_FORCE_ROLLOUT_RESTART:-true}\"\nAPP_IMAGE_PULL_SECRET_NAME=\"\\${APP_IMAGE_PULL_SECRET_NAME:-}\"\nAPP_IMAGE_PULL_SECRET_SERVER=\"\\${APP_IMAGE_PULL_SECRET_SERVER:-ghcr.io}\"\nAPP_IMAGE_PULL_SECRET_USERNAME=\"\\${APP_IMAGE_PULL_SECRET_USERNAME:-}\"\nAPP_IMAGE_PULL_SECRET_PASSWORD=\"\\${APP_IMAGE_PULL_SECRET_PASSWORD:-}\"\nAPP_IMAGE_PULL_SECRET_EMAIL=\"\\${APP_IMAGE_PULL_SECRET_EMAIL:-}\"\nAUTH_RUNTIME_MODE=\"\\${AUTH_RUNTIME_MODE:-local}\"\nSUPABASE_SECRET_SYNC_ENABLED=\"\\${SUPABASE_SECRET_SYNC_ENABLED:-true}\"\nSUPABASE_LOCAL_ENV_SCRIPT=\"\\${SCRIPT_DIR}/supabase-local-env.sh\"\nSUPABASE_URL=\"\\${SUPABASE_URL:-}\"\nSUPABASE_ANON_KEY=\"\\${SUPABASE_ANON_KEY:-}\"\nSUPABASE_SERVICE_ROLE_KEY=\"\\${SUPABASE_SERVICE_ROLE_KEY:-}\"\nSUPABASE_JWT_SECRET=\"\\${SUPABASE_JWT_SECRET:-}\"\nSUPABASE_PUBLIC_URL=\"\\${EXPO_PUBLIC_SUPABASE_URL:-\\${SUPABASE_URL}}\"\nSUPABASE_PUBLIC_ANON_KEY=\"\\${EXPO_PUBLIC_SUPABASE_ANON_KEY:-\\${SUPABASE_ANON_KEY}}\"\n\nrefresh_supabase_env() {\n  SUPABASE_URL=\"\\${SUPABASE_URL:-}\"\n  SUPABASE_ANON_KEY=\"\\${SUPABASE_ANON_KEY:-}\"\n  SUPABASE_SERVICE_ROLE_KEY=\"\\${SUPABASE_SERVICE_ROLE_KEY:-}\"\n  SUPABASE_JWT_SECRET=\"\\${SUPABASE_JWT_SECRET:-}\"\n  SUPABASE_PUBLIC_URL=\"\\${EXPO_PUBLIC_SUPABASE_URL:-\\${SUPABASE_URL}}\"\n  SUPABASE_PUBLIC_ANON_KEY=\"\\${EXPO_PUBLIC_SUPABASE_ANON_KEY:-\\${SUPABASE_ANON_KEY}}\"\n}\n\nhas_required_supabase_env() {\n  [[ -n \"\\${SUPABASE_URL}\" && -n \"\\${SUPABASE_ANON_KEY}\" && -n \"\\${SUPABASE_SERVICE_ROLE_KEY}\" && -n \"\\${SUPABASE_JWT_SECRET}\" ]]\n}\n\nrefresh_supabase_env\n\nif [[ \"\\${AUTH_RUNTIME_MODE}\" != \"local\" && \"\\${AUTH_RUNTIME_MODE}\" != \"remote\" ]]; then\n  echo \"Unsupported AUTH_RUNTIME_MODE=\\${AUTH_RUNTIME_MODE}. Use local or remote.\"\n  exit 1\nfi\n\nif ! command -v minikube >/dev/null 2>&1; then\n  echo \"minikube is required but not installed.\"\n  exit 1\nfi\n\nif ! command -v kubectl >/dev/null 2>&1; then\n  echo \"kubectl is required but not installed.\"\n  exit 1\nfi\n\nHOST_STATUS=\"$(minikube -p \"\\${PROFILE}\" status --format='{{.Host}}' 2>/dev/null || true)\"\nif [[ \"\\${HOST_STATUS}\" != \"Running\" ]]; then\n  minikube start -p \"\\${PROFILE}\" --driver=\"\\${DRIVER}\"\nfi\n\nif ! has_required_supabase_env && [[ \"\\${AUTH_RUNTIME_MODE}\" == \"local\" ]]; then\n  if [[ ! -x \"\\${SUPABASE_LOCAL_ENV_SCRIPT}\" ]]; then\n    echo \"Supabase local bootstrap skipped before app build: missing executable \\${SUPABASE_LOCAL_ENV_SCRIPT}.\"\n  else\n    echo \"Supabase keys missing before app build; running \\${SUPABASE_LOCAL_ENV_SCRIPT}.\"\n    if ! \"\\${SUPABASE_LOCAL_ENV_SCRIPT}\"; then\n      echo \"Supabase local bootstrap failed before app build; continuing.\"\n    fi\n    if [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n      set -a\n      # shellcheck disable=SC1090\n      source \"\\${ROOT_DIR}/.env\"\n      set +a\n    fi\n    refresh_supabase_env\n  fi\nfi\n\nif [[ \"\\${APP_BUILD_ENABLED}\" == \"true\" ]]; then\n  if [[ ! -x \"\\${BUILD_SCRIPT}\" ]]; then\n    echo \"Missing build helper script: \\${BUILD_SCRIPT}\"\n    exit 1\n  fi\n\n  \"\\${BUILD_SCRIPT}\"\nfi\n\nif [[ \"\\${APP_WEB_EXPORT_DIR}\" = /* ]]; then\n  EXPORT_DIR=\"\\${APP_WEB_EXPORT_DIR}\"\nelse\n  EXPORT_DIR=\"\\${APP_SOURCE_DIR}/\\${APP_WEB_EXPORT_DIR}\"\nfi\n\ndocker_load_image_to_minikube() {\n  if command -v docker >/dev/null 2>&1 && docker image inspect \"\\${APP_IMAGE}\" >/dev/null 2>&1; then\n    minikube -p \"\\${PROFILE}\" image load --daemon=true --overwrite=true \"\\${APP_IMAGE}\" >/dev/null\n    return 0\n  fi\n\n  return 1\n}\n\ncase \"\\${APP_IMAGE_SYNC_STRATEGY}\" in\n  minikube-build)\n    if [[ ! -f \"\\${EXPORT_DIR}/index.html\" ]]; then\n      echo \"Expected web export output not found at \\${EXPORT_DIR}/index.html\"\n      echo \"Run build-app-image.sh first or switch APP_IMAGE_SYNC_STRATEGY=docker-load.\"\n      exit 1\n    fi\n\n    if minikube -p \"\\${PROFILE}\" image build -t \"\\${APP_IMAGE}\" -f \"\\${ROOT_DIR}/app-image/Dockerfile\" \"\\${EXPORT_DIR}\" >/dev/null; then\n      if ! minikube -p \"\\${PROFILE}\" image ls 2>/dev/null | grep -Fq \"\\${APP_IMAGE}\"; then\n        echo \"minikube image build did not register \\${APP_IMAGE}; falling back to docker-load.\"\n        if ! docker_load_image_to_minikube; then\n          echo \"Fallback docker-load failed: local Docker image \\${APP_IMAGE} not found.\"\n          exit 1\n        fi\n      fi\n    else\n      echo \"minikube image build failed for \\${APP_IMAGE}; falling back to docker-load.\"\n      if ! docker_load_image_to_minikube; then\n        echo \"Fallback docker-load failed: local Docker image \\${APP_IMAGE} not found.\"\n        exit 1\n      fi\n    fi\n    ;;\n  docker-load)\n    if ! docker_load_image_to_minikube; then\n      echo \"Skipping docker-load image sync; local Docker image \\${APP_IMAGE} not found.\"\n    fi\n    ;;\n  none)\n    echo \"Skipping local image sync (APP_IMAGE_SYNC_STRATEGY=none).\"\n    ;;\n  *)\n    echo \"Unsupported APP_IMAGE_SYNC_STRATEGY=\\${APP_IMAGE_SYNC_STRATEGY}. Use minikube-build, docker-load, or none.\"\n    exit 1\n    ;;\nesac\n\nkubectl apply -k \"\\${K8S_DIR}\"\n\nif [[ \"\\${SUPABASE_SECRET_SYNC_ENABLED}\" == \"true\" ]]; then\n  if ! has_required_supabase_env && [[ \"\\${AUTH_RUNTIME_MODE}\" == \"local\" ]]; then\n    if [[ ! -x \"\\${SUPABASE_LOCAL_ENV_SCRIPT}\" ]]; then\n      echo \"Supabase local bootstrap skipped: missing executable \\${SUPABASE_LOCAL_ENV_SCRIPT}.\"\n    else\n      echo \"Supabase keys missing; running \\${SUPABASE_LOCAL_ENV_SCRIPT}.\"\n      if ! \"\\${SUPABASE_LOCAL_ENV_SCRIPT}\"; then\n        echo \"Supabase local bootstrap failed; continuing without local credential import.\"\n      fi\n      if [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n        set -a\n        # shellcheck disable=SC1090\n        source \"\\${ROOT_DIR}/.env\"\n        set +a\n      fi\n      refresh_supabase_env\n    fi\n  fi\n\n  if ! has_required_supabase_env; then\n    if [[ \"\\${AUTH_RUNTIME_MODE}\" == \"local\" ]]; then\n      echo \"Supabase secret sync skipped: local credentials still missing after bootstrap.\"\n      echo \"Run ./scripts/supabase-local-env.sh and retry.\"\n    else\n      echo \"Supabase secret sync skipped: set SUPABASE_URL, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY, and SUPABASE_JWT_SECRET in .env.\"\n    fi\n  else\n    TMP_SUPABASE_ENV_FILE=\"$(mktemp)\"\n    trap 'rm -f \"\\${TMP_SUPABASE_ENV_FILE}\"' EXIT\n\n    cat > \"\\${TMP_SUPABASE_ENV_FILE}\" <<EOF\nSUPABASE_URL=\\${SUPABASE_URL}\nSUPABASE_ANON_KEY=\\${SUPABASE_ANON_KEY}\nSUPABASE_SERVICE_ROLE_KEY=\\${SUPABASE_SERVICE_ROLE_KEY}\nSUPABASE_JWT_SECRET=\\${SUPABASE_JWT_SECRET}\nEXPO_PUBLIC_SUPABASE_URL=\\${SUPABASE_PUBLIC_URL}\nEXPO_PUBLIC_SUPABASE_ANON_KEY=\\${SUPABASE_PUBLIC_ANON_KEY}\nEOF\n\n    kubectl -n \"\\${NAMESPACE}\" create secret generic supabase-auth-secrets --from-env-file=\"\\${TMP_SUPABASE_ENV_FILE}\" --dry-run=client -o yaml | kubectl -n \"\\${NAMESPACE}\" apply -f -\n\n    rm -f \"\\${TMP_SUPABASE_ENV_FILE}\"\n    trap - EXIT\n    echo \"Synchronized supabase-auth-secrets from environment values.\"\n  fi\nfi\n\nif [[ -n \"\\${APP_IMAGE_PULL_SECRET_NAME}\" ]]; then\n  if [[ -z \"\\${APP_IMAGE_PULL_SECRET_USERNAME}\" || -z \"\\${APP_IMAGE_PULL_SECRET_PASSWORD}\" ]]; then\n    echo \"APP_IMAGE_PULL_SECRET_NAME is set, but username/password are missing.\"\n    exit 1\n  fi\n\n  SECRET_EMAIL_ARG=()\n  if [[ -n \"\\${APP_IMAGE_PULL_SECRET_EMAIL}\" ]]; then\n    SECRET_EMAIL_ARG=(--docker-email=\"\\${APP_IMAGE_PULL_SECRET_EMAIL}\")\n  fi\n\n  kubectl -n \"\\${NAMESPACE}\" create secret docker-registry \"\\${APP_IMAGE_PULL_SECRET_NAME}\" --docker-server=\"\\${APP_IMAGE_PULL_SECRET_SERVER}\" --docker-username=\"\\${APP_IMAGE_PULL_SECRET_USERNAME}\" --docker-password=\"\\${APP_IMAGE_PULL_SECRET_PASSWORD}\" \"\\${SECRET_EMAIL_ARG[@]}\" --dry-run=client -o yaml | kubectl -n \"\\${NAMESPACE}\" apply -f -\n\n  PULL_SECRET_PATCH=\"$(cat <<EOF\n{\"spec\":{\"template\":{\"spec\":{\"imagePullSecrets\":[{\"name\":\"\\${APP_IMAGE_PULL_SECRET_NAME}\"}]}}}}\nEOF\n)\"\n  kubectl -n \"\\${NAMESPACE}\" patch deployment app-runtime --type=merge --patch \"\\${PULL_SECRET_PATCH}\" >/dev/null\nelse\n  kubectl -n \"\\${NAMESPACE}\" patch deployment app-runtime --type=json --patch='[{\"op\":\"remove\",\"path\":\"/spec/template/spec/imagePullSecrets\"}]' >/dev/null 2>&1 || true\nfi\n\nkubectl -n \"\\${NAMESPACE}\" set image deployment/app-runtime app=\"\\${APP_IMAGE}\" >/dev/null\nkubectl -n \"\\${NAMESPACE}\" scale deployment/app-runtime --replicas=\"\\${APP_REPLICAS}\" >/dev/null\n\nif [[ \"\\${APP_FORCE_ROLLOUT_RESTART}\" == \"true\" ]]; then\n  kubectl -n \"\\${NAMESPACE}\" rollout restart deployment/app-runtime >/dev/null\nfi\n\nkubectl -n \"\\${NAMESPACE}\" rollout status deployment/app-runtime --timeout=180s >/dev/null\necho \"Minikube infrastructure applied.\"\n`;\n}\n\nfunction getBuildAppImageScript(args: {\n  defaultNamespace: string;\n  defaultAppImage: string;\n}): string {\n  const { defaultNamespace, defaultAppImage } = args;\n\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\nDOCKERFILE_PATH=\"\\${ROOT_DIR}/app-image/Dockerfile\"\n\nif [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ROOT_DIR}/.env\"\n  set +a\nfi\n\nNAMESPACE=\"\\${ANKH_NAMESPACE:-${defaultNamespace}}\"\nAPP_BUILD_ENABLED=\"\\${APP_BUILD_ENABLED:-true}\"\nAPP_SOURCE_DIR=\"\\${APP_SOURCE_DIR:-$(cd \"\\${ROOT_DIR}/../..\" && pwd)}\"\nAPP_WEB_EXPORT_DIR=\"\\${APP_WEB_EXPORT_DIR:-.ankh/web-export}\"\nAPP_IMAGE=\"\\${APP_IMAGE:-${defaultAppImage}}\"\n\nif [[ \"\\${APP_BUILD_ENABLED}\" != \"true\" ]]; then\n  echo \"Skipping app image build (APP_BUILD_ENABLED=\\${APP_BUILD_ENABLED}).\"\n  exit 0\nfi\n\nif ! command -v docker >/dev/null 2>&1; then\n  echo \"docker is required to build app image.\"\n  exit 1\nfi\n\nif ! command -v bunx >/dev/null 2>&1; then\n  echo \"bunx is required to export the app for container image build.\"\n  exit 1\nfi\n\nif [[ ! -f \"\\${APP_SOURCE_DIR}/package.json\" ]]; then\n  echo \"APP_SOURCE_DIR does not look like an app root: \\${APP_SOURCE_DIR}\"\n  exit 1\nfi\n\nif [[ ! -f \"\\${DOCKERFILE_PATH}\" ]]; then\n  echo \"Dockerfile for app image build is missing: \\${DOCKERFILE_PATH}\"\n  exit 1\nfi\n\n(\n  cd \"\\${APP_SOURCE_DIR}\"\n  bunx expo export --platform web --output-dir \"\\${APP_WEB_EXPORT_DIR}\"\n)\n\nif [[ \"\\${APP_WEB_EXPORT_DIR}\" = /* ]]; then\n  EXPORT_DIR=\"\\${APP_WEB_EXPORT_DIR}\"\nelse\n  EXPORT_DIR=\"\\${APP_SOURCE_DIR}/\\${APP_WEB_EXPORT_DIR}\"\nfi\n\nif [[ ! -f \"\\${EXPORT_DIR}/index.html\" ]]; then\n  echo \"Expected web export output not found at \\${EXPORT_DIR}/index.html\"\n  exit 1\nfi\n\ndocker build -t \"\\${APP_IMAGE}\" \\\n  --label \"ankhorage.kind=generated-app\" \\\n  --label \"ankhorage.namespace=\\${NAMESPACE}\" \\\n  --label \"ankhorage.image=\\${APP_IMAGE}\" \\\n  -f \"\\${DOCKERFILE_PATH}\" \\\n  \"\\${EXPORT_DIR}\"\necho \"Built app image: \\${APP_IMAGE} (namespace: \\${NAMESPACE})\"\n`;\n}\n\nfunction getAppImageDockerfile(): string {\n  return `FROM nginx:1.27-alpine\n\nRUN cat <<'EOF' > /etc/nginx/conf.d/default.conf\nserver {\n  listen 8080;\n  server_name _;\n  root /usr/share/nginx/html;\n  index index.html;\n\n  location / {\n    try_files $uri $uri/ /index.html;\n  }\n}\nEOF\n\nCOPY . /usr/share/nginx/html\n\nEXPOSE 8080\n\nCMD [\"nginx\", \"-g\", \"daemon off;\"]\n`;\n}\n\nfunction getPortForwardScript(defaultNamespace: string): string {\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\n\nif [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ROOT_DIR}/.env\"\n  set +a\nfi\n\nNAMESPACE=\"\\${ANKH_NAMESPACE:-${defaultNamespace}}\"\nLOCAL_PORT=\"\\${APP_PORT_FORWARD_LOCAL_PORT:-18080}\"\nREMOTE_PORT=\"\\${APP_PORT_FORWARD_REMOTE_PORT:-80}\"\n\nif ! command -v kubectl >/dev/null 2>&1; then\n  echo \"kubectl is required but not installed.\"\n  exit 1\nfi\n\nif ! kubectl get namespace \"\\${NAMESPACE}\" >/dev/null 2>&1; then\n  echo \"Namespace '\\${NAMESPACE}' was not found.\"\n  echo \"Run ./scripts/up.sh to create infrastructure first.\"\n  exit 1\nfi\n\nif ! kubectl -n \"\\${NAMESPACE}\" get service app-runtime >/dev/null 2>&1; then\n  echo \"Service 'app-runtime' was not found in namespace '\\${NAMESPACE}'.\"\n  echo \"Run ./scripts/up.sh to apply runtime resources.\"\n  exit 1\nfi\n\necho \"Forwarding app-runtime from namespace '\\${NAMESPACE}' to http://127.0.0.1:\\${LOCAL_PORT}\"\necho \"Press Ctrl+C to stop.\"\nkubectl -n \"\\${NAMESPACE}\" port-forward service/app-runtime \"\\${LOCAL_PORT}:\\${REMOTE_PORT}\"\n`;\n}\n\nfunction getDownScript(): string {\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\nK8S_DIR=\"\\${ROOT_DIR}/k8s\"\n\nif [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ROOT_DIR}/.env\"\n  set +a\nfi\n\nkubectl delete -k \"\\${K8S_DIR}\" --ignore-not-found\necho \"Minikube infrastructure removed.\"\n`;\n}\n\nfunction getStatusScript(defaultNamespace: string): string {\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\n\nif [[ -f \"\\${ROOT_DIR}/.env\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ROOT_DIR}/.env\"\n  set +a\nfi\n\nNAMESPACE=\"\\${ANKH_NAMESPACE:-${defaultNamespace}}\"\nAUTH_RUNTIME_MODE=\"\\${AUTH_RUNTIME_MODE:-local}\"\nSUPABASE_SECRET_SYNC_ENABLED=\"\\${SUPABASE_SECRET_SYNC_ENABLED:-true}\"\n\nif ! command -v kubectl >/dev/null 2>&1; then\n  echo \"kubectl is required but not installed.\"\n  exit 1\nfi\n\nif ! kubectl config current-context >/dev/null 2>&1; then\n  echo \"No active kubectl context is configured.\"\n  echo \"Run ./scripts/up.sh to start Minikube and apply manifests.\"\n  exit 1\nfi\n\nif ! kubectl cluster-info >/dev/null 2>&1; then\n  CONTEXT=\"$(kubectl config current-context 2>/dev/null || echo \"unknown\")\"\n  echo \"Cannot reach Kubernetes API server for context '\\${CONTEXT}'.\"\n  echo \"Run ./scripts/up.sh or verify your kubeconfig context.\"\n  exit 1\nfi\n\nif ! kubectl get namespace \"\\${NAMESPACE}\" >/dev/null 2>&1; then\n  echo \"Namespace '\\${NAMESPACE}' was not found in the current cluster.\"\n  echo \"Run ./scripts/up.sh to create it and apply resources.\"\n  exit 1\nfi\n\nkubectl get all -n \"\\${NAMESPACE}\"\n\necho\necho \"Runtime auth checks:\"\necho \"- AUTH_RUNTIME_MODE=\\${AUTH_RUNTIME_MODE}\"\necho \"- SUPABASE_SECRET_SYNC_ENABLED=\\${SUPABASE_SECRET_SYNC_ENABLED}\"\n\nif kubectl -n \"\\${NAMESPACE}\" get configmap app-runtime-auth-env >/dev/null 2>&1; then\n  echo \"- configmap/app-runtime-auth-env: present\"\nelse\n  echo \"- configmap/app-runtime-auth-env: missing\"\nfi\n\nif [[ \"\\${SUPABASE_SECRET_SYNC_ENABLED}\" == \"true\" ]]; then\n  if kubectl -n \"\\${NAMESPACE}\" get secret supabase-auth-secrets >/dev/null 2>&1; then\n    echo \"- secret/supabase-auth-secrets: present\"\n\n    has_secret_key() {\n      local key=\"$1\"\n      local value\n      value=\"$(kubectl -n \"\\${NAMESPACE}\" get secret supabase-auth-secrets -o \"jsonpath={.data.\\${key}}\" 2>/dev/null || true)\"\n      [[ -n \"\\${value}\" ]]\n    }\n\n    required_secret_keys=(\n      SUPABASE_URL\n      SUPABASE_ANON_KEY\n      SUPABASE_SERVICE_ROLE_KEY\n      SUPABASE_JWT_SECRET\n      EXPO_PUBLIC_SUPABASE_URL\n      EXPO_PUBLIC_SUPABASE_ANON_KEY\n    )\n\n    for key in \"\\${required_secret_keys[@]}\"; do\n      if has_secret_key \"\\${key}\"; then\n        echo \"  - \\${key}: present\"\n      else\n        echo \"  - \\${key}: missing\"\n      fi\n    done\n  else\n    echo \"- secret/supabase-auth-secrets: missing\"\n  fi\nelse\n  echo \"- secret/supabase-auth-secrets: skipped (SUPABASE_SECRET_SYNC_ENABLED=false)\"\nfi\n`;\n}\n\nfunction getSupabaseLocalEnvScript(supabaseLocalPorts: SupabaseLocalPorts): string {\n  return `#!/usr/bin/env bash\nset -euo pipefail\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"\\${BASH_SOURCE[0]}\")\" && pwd)\"\nROOT_DIR=\"$(cd \"\\${SCRIPT_DIR}/..\" && pwd)\"\nENV_FILE=\"\\${ROOT_DIR}/.env\"\nENV_EXAMPLE_FILE=\"\\${ROOT_DIR}/.env.example\"\n\nif [[ -f \"\\${ENV_FILE}\" ]]; then\n  set -a\n  # shellcheck disable=SC1090\n  source \"\\${ENV_FILE}\"\n  set +a\nfi\n\nAPP_SOURCE_DIR=\"\\${APP_SOURCE_DIR:-$(cd \"\\${ROOT_DIR}/../..\" && pwd)}\"\nSUPABASE_PROJECT_DIR=\"\\${SUPABASE_PROJECT_DIR:-\\${APP_SOURCE_DIR}}\"\nAPP_SUPABASE_ENV_FILE=\"\\${APP_SUPABASE_ENV_FILE:-\\${APP_SOURCE_DIR}/.env.local}\"\n\nSUPABASE_LOCAL_PORT_BASE=\"\\${SUPABASE_LOCAL_PORT_BASE:-${supabaseLocalPorts.base}}\"\nSUPABASE_LOCAL_SHADOW_PORT=\"\\${SUPABASE_LOCAL_SHADOW_PORT:-\\${SUPABASE_LOCAL_PORT_BASE}}\"\nSUPABASE_LOCAL_API_PORT=\"\\${SUPABASE_LOCAL_API_PORT:-$((SUPABASE_LOCAL_PORT_BASE + 1))}\"\nSUPABASE_LOCAL_DB_PORT=\"\\${SUPABASE_LOCAL_DB_PORT:-$((SUPABASE_LOCAL_PORT_BASE + 2))}\"\nSUPABASE_LOCAL_STUDIO_PORT=\"\\${SUPABASE_LOCAL_STUDIO_PORT:-$((SUPABASE_LOCAL_PORT_BASE + 3))}\"\nSUPABASE_LOCAL_INBUCKET_PORT=\"\\${SUPABASE_LOCAL_INBUCKET_PORT:-$((SUPABASE_LOCAL_PORT_BASE + 4))}\"\nSUPABASE_LOCAL_ANALYTICS_PORT=\"\\${SUPABASE_LOCAL_ANALYTICS_PORT:-$((SUPABASE_LOCAL_PORT_BASE + 5))}\"\nexport SUPABASE_LOCAL_PORT_BASE\nexport SUPABASE_LOCAL_SHADOW_PORT\nexport SUPABASE_LOCAL_API_PORT\nexport SUPABASE_LOCAL_DB_PORT\nexport SUPABASE_LOCAL_STUDIO_PORT\nexport SUPABASE_LOCAL_INBUCKET_PORT\nexport SUPABASE_LOCAL_ANALYTICS_PORT\nif ! command -v supabase >/dev/null 2>&1; then\n  echo \"supabase CLI is required but not installed.\"\n  echo \"Install: https://supabase.com/docs/guides/local-development/cli/getting-started\"\n  exit 1\nfi\n\nconfigure_supabase_local_ports() {\n  local config_file=\"\\${SUPABASE_PROJECT_DIR}/supabase/config.toml\"\n\n  if ! command -v python3 >/dev/null 2>&1; then\n    echo \"python3 is required to patch supabase/config.toml with generated local port defaults.\"\n    echo \"Install python3 (recommended) or manually edit \\${config_file} ports:\"\n    echo \"- [api] port = \\${SUPABASE_LOCAL_API_PORT}\"\n    echo \"- [db] port = \\${SUPABASE_LOCAL_DB_PORT}\"\n    echo \"- [db] shadow_port = \\${SUPABASE_LOCAL_SHADOW_PORT}\"\n    echo \"- [studio] port = \\${SUPABASE_LOCAL_STUDIO_PORT}\"\n    echo \"- [inbucket] port = \\${SUPABASE_LOCAL_INBUCKET_PORT}\"\n    echo \"- [analytics] port = \\${SUPABASE_LOCAL_ANALYTICS_PORT}\"\n    exit 1\n  fi\n\n  python3 - \"\\${config_file}\" <<'PY'\nimport os\nimport re\nimport sys\nfrom dataclasses import dataclass\n\n\n@dataclass(frozen=True)\nclass Patch:\n    section: str\n    key: str\n    value: str\n\n\ndef _env_required(name):\n    value = os.environ.get(name)\n    if value is None or value == \"\":\n        raise RuntimeError(f\"Missing required env var: {name}\")\n    return value\n\n\ndef _is_section_header(line):\n    return re.match(r\"^\\\\s*\\\\[[^\\\\]]+\\\\]\\\\s*$\", line) is not None\n\n\ndef _section_name(line):\n    match = re.match(r\"^\\\\s*\\\\[([^\\\\]]+)\\\\]\\\\s*$\", line)\n    return match.group(1) if match else None\n\n\ndef _patch_section(lines, section, key, value):\n    current_section = None\n    section_start = None\n\n    for i, line in enumerate(lines):\n        if _is_section_header(line):\n            current_section = _section_name(line)\n            if current_section == section and section_start is None:\n                section_start = i\n\n    if section_start is None:\n        if lines and not lines[-1].endswith(\"\\\\n\"):\n            lines[-1] = lines[-1] + \"\\\\n\"\n        if lines and lines[-1].strip() != \"\":\n            lines.append(\"\\\\n\")\n        lines.append(f\"[{section}]\\\\n\")\n        lines.append(f\"{key} = {value}\\\\n\")\n        return lines\n\n    section_end = len(lines)\n    for j in range(section_start + 1, len(lines)):\n        if _is_section_header(lines[j]):\n            section_end = j\n            break\n\n    key_re = re.compile(rf\"^(\\\\s*){re.escape(key)}\\\\s*=\\\\s*(.*?)(\\\\s*(#.*)?)?$\")\n    for k in range(section_start + 1, section_end):\n        match = key_re.match(lines[k])\n        if match:\n            indent = match.group(1) or \"\"\n            trailing = match.group(3) or \"\"\n            suffix = trailing.rstrip(\"\\\\n\")\n            lines[k] = f\"{indent}{key} = {value}{suffix}\\\\n\"\n            return lines\n\n    insert_at = section_end\n    while insert_at > section_start + 1 and lines[insert_at - 1].strip() == \"\":\n        insert_at -= 1\n    lines.insert(insert_at, f\"{key} = {value}\\\\n\")\n    return lines\n\n\ndef main():\n    if len(sys.argv) != 2:\n        raise RuntimeError(\"Usage: patch_config.py <supabase/config.toml>\")\n\n    config_path = sys.argv[1]\n    with open(config_path, \"r\", encoding=\"utf-8\") as f:\n        lines = f.readlines()\n\n    patches = [\n        Patch(\"api\", \"port\", _env_required(\"SUPABASE_LOCAL_API_PORT\")),\n        Patch(\"db\", \"port\", _env_required(\"SUPABASE_LOCAL_DB_PORT\")),\n        Patch(\"db\", \"shadow_port\", _env_required(\"SUPABASE_LOCAL_SHADOW_PORT\")),\n        Patch(\"studio\", \"port\", _env_required(\"SUPABASE_LOCAL_STUDIO_PORT\")),\n        Patch(\"inbucket\", \"port\", _env_required(\"SUPABASE_LOCAL_INBUCKET_PORT\")),\n        Patch(\"analytics\", \"port\", _env_required(\"SUPABASE_LOCAL_ANALYTICS_PORT\")),\n    ]\n\n    for p in patches:\n        lines = _patch_section(lines, p.section, p.key, p.value)\n\n    with open(config_path, \"w\", encoding=\"utf-8\") as f:\n        f.writelines(lines)\n\n    return 0\n\n\nif __name__ == \"__main__\":\n    raise SystemExit(main())\nPY\n}\n\nassert_supabase_local_ports_available() {\n  local project_label=\"\\${ANKH_NAMESPACE:-$(basename \"\\${APP_SOURCE_DIR}\")}\"\n\n  ANKH_PROJECT_LABEL=\"\\${project_label}\" python3 - <<'PY'\nimport os\nimport socket\nimport sys\n\n\nPORT_KEYS = [\n    \"SUPABASE_LOCAL_SHADOW_PORT\",\n    \"SUPABASE_LOCAL_API_PORT\",\n    \"SUPABASE_LOCAL_DB_PORT\",\n    \"SUPABASE_LOCAL_STUDIO_PORT\",\n    \"SUPABASE_LOCAL_INBUCKET_PORT\",\n    \"SUPABASE_LOCAL_ANALYTICS_PORT\",\n]\n\n\ndef read_port(key):\n    value = os.environ.get(key, \"\")\n    try:\n        port = int(value)\n    except ValueError:\n        raise RuntimeError(f\"{key} must be an integer, got {value!r}\") from None\n\n    if port < 1 or port > 65535:\n        raise RuntimeError(f\"{key} must be between 1 and 65535, got {port}\")\n\n    return port\n\n\ndef can_bind(port):\n    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as sock:\n        try:\n            sock.bind((\"0.0.0.0\", port))\n        except OSError:\n            return False\n    return True\n\n\ndef main():\n    project_label = os.environ.get(\"ANKH_PROJECT_LABEL\", \"unknown\")\n    ports = [(key, read_port(key)) for key in PORT_KEYS]\n\n    seen = {}\n    duplicates = []\n    for key, port in ports:\n      existing = seen.get(port)\n      if existing is not None:\n        duplicates.append((key, existing, port))\n      else:\n        seen[port] = key\n\n    blocked = [(key, port) for key, port in ports if not can_bind(port)]\n\n    if not duplicates and not blocked:\n        return 0\n\n    print(f\"Supabase local port preflight failed for project '{project_label}'.\", file=sys.stderr)\n\n    for key, existing, port in duplicates:\n        print(f\"- {key} duplicates {existing} on port {port}.\", file=sys.stderr)\n\n    for key, port in blocked:\n        print(f\"- {key}={port} is already in use on this host.\", file=sys.stderr)\n\n    print(\"Override SUPABASE_LOCAL_PORT_BASE or the specific SUPABASE_LOCAL_*_PORT values in infra/minikube/.env and retry.\", file=sys.stderr)\n    return 1\n\n\nif __name__ == \"__main__\":\n    raise SystemExit(main())\nPY\n}\n\nif [[ ! -f \"\\${SUPABASE_PROJECT_DIR}/supabase/config.toml\" ]]; then\n  echo \"No supabase/config.toml found in \\${SUPABASE_PROJECT_DIR}. Initializing Supabase project...\"\n  (\n    cd \"\\${SUPABASE_PROJECT_DIR}\"\n    supabase init --yes >/dev/null\n  )\nfi\n\nconfigure_supabase_local_ports\n\nSTATUS_ENV=\"$(\n  cd \"\\${SUPABASE_PROJECT_DIR}\"\n  supabase status -o env 2>/dev/null || true\n)\"\n\nstart_supabase_local_stack() {\n  if supabase start >/dev/null; then\n    return 0\n  fi\n\n  echo \"Supabase local start failed. Stopping stale local stack and retrying once...\"\n  supabase stop --no-backup >/dev/null 2>&1 || true\n\n  if supabase start >/dev/null; then\n    return 0\n  fi\n\n  echo \"Supabase local start failed after retry.\"\n  return 1\n}\n\nif [[ -z \"\\${STATUS_ENV}\" ]]; then\n  assert_supabase_local_ports_available\n  echo \"Supabase local stack not detected. Starting with 'supabase start'...\"\n  (\n    cd \"\\${SUPABASE_PROJECT_DIR}\"\n    start_supabase_local_stack\n  )\n\n  STATUS_ENV=\"$(\n    cd \"\\${SUPABASE_PROJECT_DIR}\"\n    supabase status -o env\n  )\"\nfi\n\nread_env_value() {\n  local key=\"$1\"\n  local line\n  line=\"$(printf '%s\\\\n' \"\\${STATUS_ENV}\" | awk -v key=\"\\${key}\" '\n    $0 ~ \"^(export[[:space:]]+)?\" key \"=\" {print}\n  ' | tail -n1)\"\n\n  if [[ -z \"\\${line}\" ]]; then\n    echo \"\"\n    return\n  fi\n\n  line=\"\\${line#export }\"\n  line=\"\\${line#\\${key}=}\"\n  line=\"\\${line%\\\\\"}\"\n  line=\"\\${line#\\\\\"}\"\n  printf '%s' \"\\${line}\"\n}\n\nAPI_URL=\"$(read_env_value API_URL)\"\nANON_KEY=\"$(read_env_value ANON_KEY)\"\nSERVICE_ROLE_KEY=\"$(read_env_value SERVICE_ROLE_KEY)\"\nJWT_SECRET=\"$(read_env_value JWT_SECRET)\"\n\nif [[ -z \"\\${API_URL}\" || -z \"\\${ANON_KEY}\" || -z \"\\${SERVICE_ROLE_KEY}\" || -z \"\\${JWT_SECRET}\" ]]; then\n  echo \"Unable to read required Supabase values from 'supabase status -o env'.\"\n  echo \"Expected API_URL, ANON_KEY, SERVICE_ROLE_KEY, JWT_SECRET.\"\n  exit 1\nfi\n\nupsert_env() {\n  local file=\"$1\"\n  local key=\"$2\"\n  local value=\"$3\"\n  local tmp_file\n  tmp_file=\"$(mktemp)\"\n\n  awk -v key=\"\\${key}\" -v value=\"\\${value}\" '\n    BEGIN { replaced = 0 }\n    index($0, key \"=\") == 1 {\n      print key \"=\" value\n      replaced = 1\n      next\n    }\n    { print }\n    END {\n      if (replaced == 0) {\n        print key \"=\" value\n      }\n    }\n  ' \"\\${file}\" > \"\\${tmp_file}\"\n\n  mv \"\\${tmp_file}\" \"\\${file}\"\n}\n\nif [[ ! -f \"\\${ENV_FILE}\" ]]; then\n  cp \"\\${ENV_EXAMPLE_FILE}\" \"\\${ENV_FILE}\"\nfi\n\nif [[ ! -f \"\\${APP_SUPABASE_ENV_FILE}\" ]]; then\n  touch \"\\${APP_SUPABASE_ENV_FILE}\"\nfi\n\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_SECRET_SYNC_ENABLED\" \"true\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_URL\" \"\\${API_URL}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_ANON_KEY\" \"\\${ANON_KEY}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_SERVICE_ROLE_KEY\" \"\\${SERVICE_ROLE_KEY}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_JWT_SECRET\" \"\\${JWT_SECRET}\"\nupsert_env \"\\${ENV_FILE}\" \"EXPO_PUBLIC_SUPABASE_URL\" \"\\${API_URL}\"\nupsert_env \"\\${ENV_FILE}\" \"EXPO_PUBLIC_SUPABASE_ANON_KEY\" \"\\${ANON_KEY}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_PROJECT_DIR\" \"\\${SUPABASE_PROJECT_DIR}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_PORT_BASE\" \"\\${SUPABASE_LOCAL_PORT_BASE}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_SHADOW_PORT\" \"\\${SUPABASE_LOCAL_SHADOW_PORT}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_API_PORT\" \"\\${SUPABASE_LOCAL_API_PORT}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_DB_PORT\" \"\\${SUPABASE_LOCAL_DB_PORT}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_STUDIO_PORT\" \"\\${SUPABASE_LOCAL_STUDIO_PORT}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_INBUCKET_PORT\" \"\\${SUPABASE_LOCAL_INBUCKET_PORT}\"\nupsert_env \"\\${ENV_FILE}\" \"SUPABASE_LOCAL_ANALYTICS_PORT\" \"\\${SUPABASE_LOCAL_ANALYTICS_PORT}\"\n\nupsert_env \"\\${APP_SUPABASE_ENV_FILE}\" \"EXPO_PUBLIC_SUPABASE_URL\" \"\\${API_URL}\"\nupsert_env \"\\${APP_SUPABASE_ENV_FILE}\" \"EXPO_PUBLIC_SUPABASE_ANON_KEY\" \"\\${ANON_KEY}\"\nupsert_env \"\\${APP_SUPABASE_ENV_FILE}\" \"SUPABASE_URL\" \"\\${API_URL}\"\nupsert_env \"\\${APP_SUPABASE_ENV_FILE}\" \"SUPABASE_ANON_KEY\" \"\\${ANON_KEY}\"\n\necho \"Updated \\${ENV_FILE} with local Supabase credentials from \\${SUPABASE_PROJECT_DIR}.\"\necho \"Updated \\${APP_SUPABASE_ENV_FILE} with Expo Supabase credentials for local app runs.\"\necho \"If Expo is already running, restart it to pick up updated EXPO_PUBLIC_* variables.\"\necho \"Next: run ./scripts/up.sh to sync Kubernetes secrets and apply infrastructure.\"\n`;\n}\n\nfunction getDefaultAppImage(namespace: string): string {\n  return `ankh/${namespace}:dev`;\n}\n\nfunction resolveSupabaseLocalPorts(namespace: string): SupabaseLocalPorts {\n  const base =\n    SUPABASE_LOCAL_PORT_BASE +\n    resolveSupabaseLocalPortBucket(namespace) * SUPABASE_LOCAL_PORT_BUCKET_SIZE;\n\n  return {\n    base,\n    shadow: base,\n    api: base + 1,\n    db: base + 2,\n    studio: base + 3,\n    inbucket: base + 4,\n    analytics: base + 5,\n  };\n}\n\nfunction resolveSupabaseLocalPortBucket(namespace: string): number {\n  const rawBucket = hashProjectId(namespace) - hashProjectId(SUPABASE_LOCAL_PORT_REFERENCE_PROJECT);\n  return (rawBucket + SUPABASE_LOCAL_PORT_BUCKET_COUNT) % SUPABASE_LOCAL_PORT_BUCKET_COUNT;\n}\n\nfunction hashProjectId(value: string): number {\n  const source = value.trim().length > 0 ? value.trim() : 'app';\n  let hash = 0;\n\n  for (const char of source) {\n    hash = (hash * 31 + char.charCodeAt(0)) % SUPABASE_LOCAL_PORT_BUCKET_COUNT;\n  }\n\n  return hash;\n}\n"]}

package/dist/adapters/minikube/contracts.d.ts

@@ -0,0 +1,9 @@
+import type { GeneratedInfrastructureFile } from '../../types';
+export interface MinikubeAdapterArtifacts {
+    files: GeneratedInfrastructureFile[];
+    resources: string[];
+    envEntries: string[];
+    warnings: string[];
+}
+export declare function emptyMinikubeArtifacts(): MinikubeAdapterArtifacts;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/adapters/minikube/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../src/adapters/minikube/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAgB,sBAAsB,IAAI,wBAAwB,CAOjE"}

package/dist/adapters/minikube/contracts.js

@@ -0,0 +1,9 @@
+export function emptyMinikubeArtifacts() {
+    return {
+        files: [],
+        resources: [],
+        envEntries: [],
+        warnings: [],
+    };
+}
+//# sourceMappingURL=contracts.js.map

package/dist/adapters/minikube/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../src/adapters/minikube/contracts.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC","sourcesContent":["import type { GeneratedInfrastructureFile } from '../../types';\n\nexport interface MinikubeAdapterArtifacts {\n  files: GeneratedInfrastructureFile[];\n  resources: string[];\n  envEntries: string[];\n  warnings: string[];\n}\n\nexport function emptyMinikubeArtifacts(): MinikubeAdapterArtifacts {\n  return {\n    files: [],\n    resources: [],\n    envEntries: [],\n    warnings: [],\n  };\n}\n"]}

package/dist/adapters/minikube/index.d.ts

@@ -0,0 +1,3 @@
+import type { InfraManifestInput, InfrastructureGenerationOptions, InfrastructureGenerationResult } from '../../types';
+export declare function generateMinikubeInfra(manifest: InfraManifestInput, options?: InfrastructureGenerationOptions): InfrastructureGenerationResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/minikube/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,+BAA+B,EAC/B,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAQrB,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,+BAAoC,GAC5C,8BAA8B,CAoEhC"}

package/dist/adapters/minikube/index.js

@@ -0,0 +1,114 @@
+import { generateDatasetInfrastructureArtifacts } from '../../datasets';
+import { generateAuthProviderArtifacts } from './auth';
+import { generateAuthorizationArtifacts } from './authz';
+import { generateMinikubeBaseArtifacts } from './base';
+import { generateStorageArtifacts } from './storage';
+const DEFAULT_NAMESPACE = 'ankh-app';
+export function generateMinikubeInfra(manifest, options = {}) {
+    if (manifest.deployment?.target !== 'minikube') {
+        throw new Error(`Minikube adapter only supports deployment target "minikube" (received "${manifest.deployment?.target ?? 'undefined'}").`);
+    }
+    if (manifest.database?.provider && manifest.database.provider !== 'supabase') {
+        throw new Error(`Unsupported database provider for minikube adapter: "${manifest.database.provider}". Only "supabase" is implemented.`);
+    }
+    const namespace = resolveNamespace(manifest, options);
+    const authArtifacts = generateAuthProviderArtifacts({ manifest, namespace });
+    const authzArtifacts = generateAuthorizationArtifacts({
+        manifest,
+        namespace,
+        appManifest: options.appManifest,
+    });
+    const storageArtifacts = generateStorageArtifacts({ manifest, namespace });
+    const datasetArtifacts = generateDatasetInfrastructureArtifacts({
+        data: options.appManifest?.data,
+        databaseProvider: manifest.database?.provider,
+    });
+    const extraResources = unique([
+        ...authArtifacts.resources,
+        ...authzArtifacts.resources,
+        ...storageArtifacts.resources,
+    ]);
+    const extraEnvEntries = unique([
+        ...authArtifacts.envEntries,
+        ...authzArtifacts.envEntries,
+        ...storageArtifacts.envEntries,
+    ]);
+    const baseFiles = generateMinikubeBaseArtifacts({
+        manifest,
+        namespace,
+        extraResources,
+        extraEnvEntries,
+    });
+    const warnings = unique([
+        ...collectWarnings(manifest),
+        ...authArtifacts.warnings,
+        ...authzArtifacts.warnings,
+        ...storageArtifacts.warnings,
+        ...datasetArtifacts.warnings,
+    ]);
+    return {
+        files: [
+            ...baseFiles,
+            ...authArtifacts.files,
+            ...authzArtifacts.files,
+            ...storageArtifacts.files,
+            ...datasetArtifacts.files,
+        ],
+        warnings,
+        meta: {
+            target: 'minikube',
+            providers: collectProviders(manifest),
+        },
+        dependencies: collectDependencies(manifest),
+    };
+}
+function collectProviders(manifest) {
+    const providers = new Set();
+    if (manifest.auth?.provider)
+        providers.add(manifest.auth.provider);
+    if (manifest.auth?.authorization.engine)
+        providers.add(manifest.auth.authorization.engine);
+    if (manifest.database?.provider)
+        providers.add(manifest.database.provider);
+    if (manifest.storage?.provider)
+        providers.add(manifest.storage.provider);
+    if (manifest.state?.provider)
+        providers.add(manifest.state.provider);
+    return [...providers].sort();
+}
+function collectDependencies(manifest) {
+    if (manifest.state?.provider !== 'legend') {
+        return [];
+    }
+    return [
+        {
+            name: '@ankhorage/state-legend',
+            version: '^0.1.0',
+            reason: 'Selected by infra.state.provider=legend.',
+        },
+    ];
+}
+function collectWarnings(manifest) {
+    const warnings = [];
+    if (manifest.deployment?.monitoring) {
+        warnings.push('Monitoring is enabled in manifest, but monitoring stack resources are not generated yet.');
+    }
+    if (manifest.networking?.cdn) {
+        warnings.push('CDN is enabled in manifest, but CDN resources are not generated for minikube.');
+    }
+    return warnings;
+}
+function resolveNamespace(manifest, options) {
+    const source = manifest.networking?.domain?.trim() ?? options.namespaceHint?.trim() ?? DEFAULT_NAMESPACE;
+    const normalized = source
+        .toLowerCase()
+        .replace(/[^a-z0-9-]/g, '-')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+    const safe = normalized.slice(0, 63).replace(/-+$/g, '');
+    return safe || DEFAULT_NAMESPACE;
+}
+function unique(values) {
+    return [...new Set(values)];
+}
+//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/minikube/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sCAAsC,EAAE,MAAM,gBAAgB,CAAC;AAOxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAErC,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,UAA2C,EAAE;IAE7C,IAAI,QAAQ,CAAC,UAAU,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,0EAA0E,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,WAAW,KAAK,CAC1H,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,wDAAwD,QAAQ,CAAC,QAAQ,CAAC,QAAQ,oCAAoC,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEtD,MAAM,aAAa,GAAG,6BAA6B,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,8BAA8B,CAAC;QACpD,QAAQ;QACR,SAAS;QACT,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3E,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;QAC9D,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI;QAC/B,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ;KAC9C,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,GAAG,aAAa,CAAC,SAAS;QAC1B,GAAG,cAAc,CAAC,SAAS;QAC3B,GAAG,gBAAgB,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,CAAC;QAC7B,GAAG,aAAa,CAAC,UAAU;QAC3B,GAAG,cAAc,CAAC,UAAU;QAC5B,GAAG,gBAAgB,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,6BAA6B,CAAC;QAC9C,QAAQ;QACR,SAAS;QACT,cAAc;QACd,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC;QACtB,GAAG,eAAe,CAAC,QAAQ,CAAC;QAC5B,GAAG,aAAa,CAAC,QAAQ;QACzB,GAAG,cAAc,CAAC,QAAQ;QAC1B,GAAG,gBAAgB,CAAC,QAAQ;QAC5B,GAAG,gBAAgB,CAAC,QAAQ;KAC7B,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,GAAG,SAAS;YACZ,GAAG,aAAa,CAAC,KAAK;YACtB,GAAG,cAAc,CAAC,KAAK;YACvB,GAAG,gBAAgB,CAAC,KAAK;YACzB,GAAG,gBAAgB,CAAC,KAAK;SAC1B;QACD,QAAQ;QACR,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACtC;QACD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4B;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3F,IAAI,QAAQ,CAAC,QAAQ,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA4B;IACvD,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,0CAA0C;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B;IACnD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CACX,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CACvB,QAA4B,EAC5B,OAAwC;IAExC,MAAM,MAAM,GACV,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAAC;IAE5F,MAAM,UAAU,GAAG,MAAM;SACtB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,IAAI,iBAAiB,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { generateDatasetInfrastructureArtifacts } from '../../datasets';\nimport type {\n  GeneratedPackageDependency,\n  InfraManifestInput,\n  InfrastructureGenerationOptions,\n  InfrastructureGenerationResult,\n} from '../../types';\nimport { generateAuthProviderArtifacts } from './auth';\nimport { generateAuthorizationArtifacts } from './authz';\nimport { generateMinikubeBaseArtifacts } from './base';\nimport { generateStorageArtifacts } from './storage';\n\nconst DEFAULT_NAMESPACE = 'ankh-app';\n\nexport function generateMinikubeInfra(\n  manifest: InfraManifestInput,\n  options: InfrastructureGenerationOptions = {},\n): InfrastructureGenerationResult {\n  if (manifest.deployment?.target !== 'minikube') {\n    throw new Error(\n      `Minikube adapter only supports deployment target \"minikube\" (received \"${manifest.deployment?.target ?? 'undefined'}\").`,\n    );\n  }\n\n  if (manifest.database?.provider && manifest.database.provider !== 'supabase') {\n    throw new Error(\n      `Unsupported database provider for minikube adapter: \"${manifest.database.provider}\". Only \"supabase\" is implemented.`,\n    );\n  }\n\n  const namespace = resolveNamespace(manifest, options);\n\n  const authArtifacts = generateAuthProviderArtifacts({ manifest, namespace });\n  const authzArtifacts = generateAuthorizationArtifacts({\n    manifest,\n    namespace,\n    appManifest: options.appManifest,\n  });\n  const storageArtifacts = generateStorageArtifacts({ manifest, namespace });\n  const datasetArtifacts = generateDatasetInfrastructureArtifacts({\n    data: options.appManifest?.data,\n    databaseProvider: manifest.database?.provider,\n  });\n\n  const extraResources = unique([\n    ...authArtifacts.resources,\n    ...authzArtifacts.resources,\n    ...storageArtifacts.resources,\n  ]);\n  const extraEnvEntries = unique([\n    ...authArtifacts.envEntries,\n    ...authzArtifacts.envEntries,\n    ...storageArtifacts.envEntries,\n  ]);\n\n  const baseFiles = generateMinikubeBaseArtifacts({\n    manifest,\n    namespace,\n    extraResources,\n    extraEnvEntries,\n  });\n\n  const warnings = unique([\n    ...collectWarnings(manifest),\n    ...authArtifacts.warnings,\n    ...authzArtifacts.warnings,\n    ...storageArtifacts.warnings,\n    ...datasetArtifacts.warnings,\n  ]);\n\n  return {\n    files: [\n      ...baseFiles,\n      ...authArtifacts.files,\n      ...authzArtifacts.files,\n      ...storageArtifacts.files,\n      ...datasetArtifacts.files,\n    ],\n    warnings,\n    meta: {\n      target: 'minikube',\n      providers: collectProviders(manifest),\n    },\n    dependencies: collectDependencies(manifest),\n  };\n}\n\nfunction collectProviders(manifest: InfraManifestInput): string[] {\n  const providers = new Set<string>();\n\n  if (manifest.auth?.provider) providers.add(manifest.auth.provider);\n  if (manifest.auth?.authorization.engine) providers.add(manifest.auth.authorization.engine);\n  if (manifest.database?.provider) providers.add(manifest.database.provider);\n  if (manifest.storage?.provider) providers.add(manifest.storage.provider);\n  if (manifest.state?.provider) providers.add(manifest.state.provider);\n\n  return [...providers].sort();\n}\n\nfunction collectDependencies(manifest: InfraManifestInput): readonly GeneratedPackageDependency[] {\n  if (manifest.state?.provider !== 'legend') {\n    return [];\n  }\n\n  return [\n    {\n      name: '@ankhorage/state-legend',\n      version: '^0.1.0',\n      reason: 'Selected by infra.state.provider=legend.',\n    },\n  ];\n}\n\nfunction collectWarnings(manifest: InfraManifestInput): string[] {\n  const warnings: string[] = [];\n\n  if (manifest.deployment?.monitoring) {\n    warnings.push(\n      'Monitoring is enabled in manifest, but monitoring stack resources are not generated yet.',\n    );\n  }\n\n  if (manifest.networking?.cdn) {\n    warnings.push('CDN is enabled in manifest, but CDN resources are not generated for minikube.');\n  }\n\n  return warnings;\n}\n\nfunction resolveNamespace(\n  manifest: InfraManifestInput,\n  options: InfrastructureGenerationOptions,\n): string {\n  const source =\n    manifest.networking?.domain?.trim() ?? options.namespaceHint?.trim() ?? DEFAULT_NAMESPACE;\n\n  const normalized = source\n    .toLowerCase()\n    .replace(/[^a-z0-9-]/g, '-')\n    .replace(/-+/g, '-')\n    .replace(/^-|-$/g, '');\n\n  const safe = normalized.slice(0, 63).replace(/-+$/g, '');\n  return safe || DEFAULT_NAMESPACE;\n}\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n"]}

package/dist/adapters/minikube/storage/index.d.ts

@@ -0,0 +1,7 @@
+import type { InfraManifestInput } from '../../../types';
+import { type MinikubeAdapterArtifacts } from '../contracts';
+export declare function generateStorageArtifacts(args: {
+    manifest: InfraManifestInput;
+    namespace: string;
+}): MinikubeAdapterArtifacts;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/minikube/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAGrF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,wBAAwB,CAoE3B"}

package/dist/adapters/minikube/storage/index.js

@@ -0,0 +1,77 @@
+import { emptyMinikubeArtifacts } from '../contracts';
+import { generateSupabaseStorageArtifacts } from './supabase';
+export function generateStorageArtifacts(args) {
+    const { manifest, namespace } = args;
+    const spec = manifest.storage;
+    if (!spec) {
+        return emptyMinikubeArtifacts();
+    }
+    const buckets = normalizeBuckets(spec.buckets);
+    const { provider } = spec;
+    const includeSupabaseConnectionEnvEntries = manifest.auth?.provider !== 'supabase';
+    const emptyBucketsWarning = 'Storage buckets are empty after normalization; no storage artifacts generated.';
+    switch (provider) {
+        case 'auto': {
+            const shouldResolveToSupabase = manifest.database?.provider === 'supabase' || manifest.auth?.provider === 'supabase';
+            if (!shouldResolveToSupabase) {
+                return {
+                    ...emptyMinikubeArtifacts(),
+                    warnings: [
+                        'Storage provider "auto" could not be resolved for minikube; no storage artifacts generated.',
+                    ],
+                };
+            }
+            if (buckets.length === 0) {
+                return {
+                    ...emptyMinikubeArtifacts(),
+                    warnings: [emptyBucketsWarning],
+                };
+            }
+            return generateSupabaseStorageArtifacts({
+                namespace,
+                buckets,
+                includeSupabaseConnectionEnvEntries,
+            });
+        }
+        case 'supabase': {
+            if (buckets.length === 0) {
+                return {
+                    ...emptyMinikubeArtifacts(),
+                    warnings: [emptyBucketsWarning],
+                };
+            }
+            return generateSupabaseStorageArtifacts({
+                namespace,
+                buckets,
+                includeSupabaseConnectionEnvEntries,
+            });
+        }
+        case 's3':
+        case 'r2':
+            return {
+                ...emptyMinikubeArtifacts(),
+                warnings: [
+                    `Storage provider "${provider}" is not implemented for minikube yet; no storage artifacts generated.`,
+                ],
+            };
+        default: {
+            const exhaustiveCheck = provider;
+            return exhaustiveCheck;
+        }
+    }
+}
+function normalizeBuckets(rawBuckets) {
+    const normalized = [];
+    const seen = new Set();
+    for (const raw of rawBuckets) {
+        const bucket = raw.trim();
+        if (!bucket)
+            continue;
+        if (seen.has(bucket))
+            continue;
+        seen.add(bucket);
+        normalized.push(bucket);
+    }
+    return normalized;
+}
+//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/minikube/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAiC,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CAAC,IAGxC;IACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,MAAM,mCAAmC,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,CAAC;IACnF,MAAM,mBAAmB,GACvB,gFAAgF,CAAC;IAEnF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,uBAAuB,GAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,CAAC;YAEvF,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE;wBACR,6FAA6F;qBAC9F;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE,CAAC,mBAAmB,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,OAAO,gCAAgC,CAAC;gBACtC,SAAS;gBACT,OAAO;gBACP,mCAAmC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE,CAAC,mBAAmB,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,OAAO,gCAAgC,CAAC;gBACtC,SAAS;gBACT,OAAO;gBACP,mCAAmC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,IAAI,CAAC;QACV,KAAK,IAAI;YACP,OAAO;gBACL,GAAG,sBAAsB,EAAE;gBAC3B,QAAQ,EAAE;oBACR,qBAAqB,QAAQ,wEAAwE;iBACtG;aACF,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,QAAQ,CAAC;YACxC,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAA6B;IACrD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import type { InfraManifestInput } from '../../../types';\nimport { emptyMinikubeArtifacts, type MinikubeAdapterArtifacts } from '../contracts';\nimport { generateSupabaseStorageArtifacts } from './supabase';\n\nexport function generateStorageArtifacts(args: {\n  manifest: InfraManifestInput;\n  namespace: string;\n}): MinikubeAdapterArtifacts {\n  const { manifest, namespace } = args;\n  const spec = manifest.storage;\n\n  if (!spec) {\n    return emptyMinikubeArtifacts();\n  }\n\n  const buckets = normalizeBuckets(spec.buckets);\n  const { provider } = spec;\n  const includeSupabaseConnectionEnvEntries = manifest.auth?.provider !== 'supabase';\n  const emptyBucketsWarning =\n    'Storage buckets are empty after normalization; no storage artifacts generated.';\n\n  switch (provider) {\n    case 'auto': {\n      const shouldResolveToSupabase =\n        manifest.database?.provider === 'supabase' || manifest.auth?.provider === 'supabase';\n\n      if (!shouldResolveToSupabase) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [\n            'Storage provider \"auto\" could not be resolved for minikube; no storage artifacts generated.',\n          ],\n        };\n      }\n\n      if (buckets.length === 0) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [emptyBucketsWarning],\n        };\n      }\n\n      return generateSupabaseStorageArtifacts({\n        namespace,\n        buckets,\n        includeSupabaseConnectionEnvEntries,\n      });\n    }\n    case 'supabase': {\n      if (buckets.length === 0) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [emptyBucketsWarning],\n        };\n      }\n\n      return generateSupabaseStorageArtifacts({\n        namespace,\n        buckets,\n        includeSupabaseConnectionEnvEntries,\n      });\n    }\n    case 's3':\n    case 'r2':\n      return {\n        ...emptyMinikubeArtifacts(),\n        warnings: [\n          `Storage provider \"${provider}\" is not implemented for minikube yet; no storage artifacts generated.`,\n        ],\n      };\n    default: {\n      const exhaustiveCheck: never = provider;\n      return exhaustiveCheck;\n    }\n  }\n}\n\nfunction normalizeBuckets(rawBuckets: readonly string[]): string[] {\n  const normalized: string[] = [];\n  const seen = new Set<string>();\n\n  for (const raw of rawBuckets) {\n    const bucket = raw.trim();\n    if (!bucket) continue;\n    if (seen.has(bucket)) continue;\n    seen.add(bucket);\n    normalized.push(bucket);\n  }\n\n  return normalized;\n}\n"]}

package/dist/adapters/minikube/storage/supabase/index.d.ts

@@ -0,0 +1,7 @@
+import type { MinikubeAdapterArtifacts } from '../../contracts';
+export declare function generateSupabaseStorageArtifacts(args: {
+    namespace: string;
+    buckets: string[];
+    includeSupabaseConnectionEnvEntries: boolean;
+}): MinikubeAdapterArtifacts;
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/storage/supabase/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/minikube/storage/supabase/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mCAAmC,EAAE,OAAO,CAAC;CAC9C,GAAG,wBAAwB,CA2D3B"}

package/dist/adapters/minikube/storage/supabase/index.js

@@ -0,0 +1,81 @@
+export function generateSupabaseStorageArtifacts(args) {
+    const { namespace, buckets, includeSupabaseConnectionEnvEntries } = args;
+    const root = 'infra/minikube/k8s/storage/supabase';
+    const resourceRoot = 'storage/supabase';
+    const bucketsCsv = buckets.join(',');
+    const defaultBucket = buckets[0] ?? '';
+    const envEntries = [
+        'STORAGE_PROVIDER=supabase',
+        'STORAGE_RUNTIME_MODE=local',
+        `STORAGE_BUCKETS=${bucketsCsv}`,
+        `STORAGE_DEFAULT_BUCKET=${defaultBucket}`,
+        'EXPO_PUBLIC_STORAGE_PROVIDER=supabase',
+        `EXPO_PUBLIC_STORAGE_BUCKETS=${bucketsCsv}`,
+        `EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET=${defaultBucket}`,
+    ];
+    if (includeSupabaseConnectionEnvEntries) {
+        envEntries.push('', '# Supabase provider connection details', 'SUPABASE_SECRET_SYNC_ENABLED=true', 'SUPABASE_URL=', 'SUPABASE_ANON_KEY=', 'SUPABASE_SERVICE_ROLE_KEY=', 'SUPABASE_JWT_SECRET=', 'EXPO_PUBLIC_SUPABASE_URL=', 'EXPO_PUBLIC_SUPABASE_ANON_KEY=');
+    }
+    return {
+        files: [
+            {
+                path: `${root}/supabase-storage.configmap.yaml`,
+                content: getSupabaseStorageConfigMap({
+                    namespace,
+                    bucketsCsv,
+                    defaultBucket,
+                }),
+            },
+            {
+                path: `${root}/app-runtime-storage.env.configmap.yaml`,
+                content: getRuntimeStorageEnvConfigMap({
+                    namespace,
+                    bucketsCsv,
+                    defaultBucket,
+                }),
+            },
+        ],
+        resources: [
+            `${resourceRoot}/supabase-storage.configmap.yaml`,
+            `${resourceRoot}/app-runtime-storage.env.configmap.yaml`,
+        ],
+        envEntries,
+        warnings: [
+            `Storage buckets are configured but not created automatically yet. Ensure buckets exist in Supabase Storage: ${bucketsCsv}.`,
+        ],
+    };
+}
+function getSupabaseStorageConfigMap(args) {
+    const { namespace, bucketsCsv, defaultBucket } = args;
+    return `apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: supabase-storage-config
+  namespace: ${namespace}
+data:
+  STORAGE_PROVIDER: "supabase"
+  STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
+  STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
+`;
+}
+function getRuntimeStorageEnvConfigMap(args) {
+    const { namespace, bucketsCsv, defaultBucket } = args;
+    return `apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: app-runtime-storage-env
+  namespace: ${namespace}
+data:
+  STORAGE_PROVIDER: "supabase"
+  STORAGE_RUNTIME_MODE: "local"
+  STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
+  STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
+  EXPO_PUBLIC_STORAGE_PROVIDER: "supabase"
+  EXPO_PUBLIC_STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
+  EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
+`;
+}
+function escapeYamlDoubleQuoted(value) {
+    return value.replaceAll('\\', '\\\\').replaceAll('"', '\\"');
+}
+//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/storage/supabase/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/adapters/minikube/storage/supabase/index.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gCAAgC,CAAC,IAIhD;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mCAAmC,EAAE,GAAG,IAAI,CAAC;IACzE,MAAM,IAAI,GAAG,qCAAqC,CAAC;IACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvC,MAAM,UAAU,GAAG;QACjB,2BAA2B;QAC3B,4BAA4B;QAC5B,mBAAmB,UAAU,EAAE;QAC/B,0BAA0B,aAAa,EAAE;QACzC,uCAAuC;QACvC,+BAA+B,UAAU,EAAE;QAC3C,sCAAsC,aAAa,EAAE;KACtD,CAAC;IAEF,IAAI,mCAAmC,EAAE,CAAC;QACxC,UAAU,CAAC,IAAI,CACb,EAAE,EACF,wCAAwC,EACxC,mCAAmC,EACnC,eAAe,EACf,oBAAoB,EACpB,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,GAAG,IAAI,kCAAkC;gBAC/C,OAAO,EAAE,2BAA2B,CAAC;oBACnC,SAAS;oBACT,UAAU;oBACV,aAAa;iBACd,CAAC;aACH;YACD;gBACE,IAAI,EAAE,GAAG,IAAI,yCAAyC;gBACtD,OAAO,EAAE,6BAA6B,CAAC;oBACrC,SAAS;oBACT,UAAU;oBACV,aAAa;iBACd,CAAC;aACH;SACF;QACD,SAAS,EAAE;YACT,GAAG,YAAY,kCAAkC;YACjD,GAAG,YAAY,yCAAyC;SACzD;QACD,UAAU;QACV,QAAQ,EAAE;YACR,+GAA+G,UAAU,GAAG;SAC7H;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAIpC;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEtD,OAAO;;;;eAIM,SAAS;;;sBAGF,sBAAsB,CAAC,UAAU,CAAC;6BAC3B,sBAAsB,CAAC,aAAa,CAAC;CACjE,CAAC;AACF,CAAC;AAED,SAAS,6BAA6B,CAAC,IAItC;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEtD,OAAO;;;;eAIM,SAAS;;;;sBAIF,sBAAsB,CAAC,UAAU,CAAC;6BAC3B,sBAAsB,CAAC,aAAa,CAAC;;kCAEhC,sBAAsB,CAAC,UAAU,CAAC;yCAC3B,sBAAsB,CAAC,aAAa,CAAC;CAC7E,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import type { MinikubeAdapterArtifacts } from '../../contracts';\n\nexport function generateSupabaseStorageArtifacts(args: {\n  namespace: string;\n  buckets: string[];\n  includeSupabaseConnectionEnvEntries: boolean;\n}): MinikubeAdapterArtifacts {\n  const { namespace, buckets, includeSupabaseConnectionEnvEntries } = args;\n  const root = 'infra/minikube/k8s/storage/supabase';\n  const resourceRoot = 'storage/supabase';\n  const bucketsCsv = buckets.join(',');\n  const defaultBucket = buckets[0] ?? '';\n\n  const envEntries = [\n    'STORAGE_PROVIDER=supabase',\n    'STORAGE_RUNTIME_MODE=local',\n    `STORAGE_BUCKETS=${bucketsCsv}`,\n    `STORAGE_DEFAULT_BUCKET=${defaultBucket}`,\n    'EXPO_PUBLIC_STORAGE_PROVIDER=supabase',\n    `EXPO_PUBLIC_STORAGE_BUCKETS=${bucketsCsv}`,\n    `EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET=${defaultBucket}`,\n  ];\n\n  if (includeSupabaseConnectionEnvEntries) {\n    envEntries.push(\n      '',\n      '# Supabase provider connection details',\n      'SUPABASE_SECRET_SYNC_ENABLED=true',\n      'SUPABASE_URL=',\n      'SUPABASE_ANON_KEY=',\n      'SUPABASE_SERVICE_ROLE_KEY=',\n      'SUPABASE_JWT_SECRET=',\n      'EXPO_PUBLIC_SUPABASE_URL=',\n      'EXPO_PUBLIC_SUPABASE_ANON_KEY=',\n    );\n  }\n\n  return {\n    files: [\n      {\n        path: `${root}/supabase-storage.configmap.yaml`,\n        content: getSupabaseStorageConfigMap({\n          namespace,\n          bucketsCsv,\n          defaultBucket,\n        }),\n      },\n      {\n        path: `${root}/app-runtime-storage.env.configmap.yaml`,\n        content: getRuntimeStorageEnvConfigMap({\n          namespace,\n          bucketsCsv,\n          defaultBucket,\n        }),\n      },\n    ],\n    resources: [\n      `${resourceRoot}/supabase-storage.configmap.yaml`,\n      `${resourceRoot}/app-runtime-storage.env.configmap.yaml`,\n    ],\n    envEntries,\n    warnings: [\n      `Storage buckets are configured but not created automatically yet. Ensure buckets exist in Supabase Storage: ${bucketsCsv}.`,\n    ],\n  };\n}\n\nfunction getSupabaseStorageConfigMap(args: {\n  namespace: string;\n  bucketsCsv: string;\n  defaultBucket: string;\n}) {\n  const { namespace, bucketsCsv, defaultBucket } = args;\n\n  return `apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: supabase-storage-config\n  namespace: ${namespace}\ndata:\n  STORAGE_PROVIDER: \"supabase\"\n  STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n`;\n}\n\nfunction getRuntimeStorageEnvConfigMap(args: {\n  namespace: string;\n  bucketsCsv: string;\n  defaultBucket: string;\n}) {\n  const { namespace, bucketsCsv, defaultBucket } = args;\n\n  return `apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: app-runtime-storage-env\n  namespace: ${namespace}\ndata:\n  STORAGE_PROVIDER: \"supabase\"\n  STORAGE_RUNTIME_MODE: \"local\"\n  STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n  EXPO_PUBLIC_STORAGE_PROVIDER: \"supabase\"\n  EXPO_PUBLIC_STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n`;\n}\n\nfunction escapeYamlDoubleQuoted(value: string): string {\n  return value.replaceAll('\\\\', '\\\\\\\\').replaceAll('\"', '\\\\\"');\n}\n"]}

package/dist/datasets.d.ts

@@ -0,0 +1,11 @@
+import type { AppDataManifest } from '@ankhorage/contracts';
+import type { GeneratedInfrastructureFile } from './types';
+export interface DatasetInfrastructureArtifacts {
+    readonly files: readonly GeneratedInfrastructureFile[];
+    readonly warnings: readonly string[];
+}
+export declare function generateDatasetInfrastructureArtifacts(args: {
+    readonly data: AppDataManifest | undefined;
+    readonly databaseProvider: string | undefined;
+}): DatasetInfrastructureArtifacts;
+//# sourceMappingURL=datasets.d.ts.map

package/dist/datasets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"datasets.d.ts","sourceRoot":"","sources":["../src/datasets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAIhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AAE3D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAoDD,wBAAgB,sCAAsC,CAAC,IAAI,EAAE;IAC3D,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C,GAAG,8BAA8B,CA4DjC"}