@ankhorage/infra 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @ankhorage/infra
 
+## 1.0.4
+
+### Patch Changes
+
+- 434d4da: Clear the Expo/Metro export cache before building generated Minikube app images so rotated browser-safe Supabase credentials replace stale values in the client bundle.
+
+## 1.0.3
+
+### Patch Changes
+
+- 9ab757e: Prevent generated Supabase migration lifecycles from waiting indefinitely on blocked CLI telemetry, and report visible migration progress.
+
 ## 1.0.2
 
 ### Patch Changes

package/README.md

@@ -3,7 +3,7 @@
 
 # INFRA
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v1.0.1](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v1.0.3](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Executable infra provider and standalone CLI for Ankhorage project workflows.
 

package/dist/adapters/minikube/base/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/minikube/base/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAE9D,eAAO,MAAM,aAAa,QAAQ,CAAC;AAoDnC,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;IAC/C,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,GAAG,2BAA2B,EAAE,CAoLhC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/minikube/base/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAG9D,eAAO,MAAM,aAAa,QAAQ,CAAC;AAoDnC,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,yBAAyB,EAAE,CAAC;IAC/C,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,GAAG,2BAA2B,EAAE,CAoLhC"}

package/dist/adapters/minikube/base/index.js

@@ -1,4 +1,5 @@
 import { resolveSupabaseProfileModel } from '../auth/supabase/profile';
+import { getSupabaseMigrationCommandScript } from './supabaseMigrations';
 export const APP_NAMESPACE = 'app';
 const SUPABASE_NAMESPACE = 'supabase';
 const SUPABASE_IMAGES = {
@@ -284,7 +285,7 @@ host-level Supabase Compose runtime.
 
 ## Lifecycle Semantics
 
-- \`up.sh\`: starts \`minikube -p ${appSlug}\`, deploys provider namespaces, runs migrations with \`supabase migration up --db-url "$SUPABASE_DB_URL"\`, starts slug-owned port-forwards, and deploys the app runtime.
+- \`up.sh\`: starts \`minikube -p ${appSlug}\`, deploys provider namespaces, runs migrations with CLI telemetry disabled for that command, starts slug-owned port-forwards, and deploys the app runtime.
 - \`down.sh\`: stops slug-owned port-forwards, then stops \`minikube -p ${appSlug}\`. Persistent data remains in the profile.
 - \`reset.sh\`: requires \`ANKH_RESET_CONFIRM=${appSlug}\`; ${resetDescription}. It does not delete the Minikube profile.
 - \`destroy.sh\`: deletes only \`minikube -p ${appSlug}\`.
@@ -297,7 +298,13 @@ ${resourceLines}
 
 Supabase runtime ownership is Kubernetes. Migration authoring/history remains Supabase
 migration files. Migration execution targets the Kubernetes Postgres endpoint through
-\`supabase migration up --db-url "$SUPABASE_DB_URL"\`.
+\`SUPABASE_TELEMETRY_DISABLED=1 supabase --yes migration up --db-url "$SUPABASE_DB_URL"\`.
+The migration process does not require stdin. \`--yes\` remains defense in depth for future
+CLI prompts; it is not the hang fix. Command-scoped telemetry disable avoids the unbounded
+telemetry shutdown in Supabase CLI 2.106.0 when PostHog is blocked, without changing the
+user's persistent telemetry preference. Migration failures stop \`up.sh\`, and the completion
+message is printed only after a zero exit status. No migration deadline is added; using a
+current Supabase CLI remains recommended.
 
 Supabase manifests are generated from the current official Supabase self-hosting Docker
 topology, service documentation, environment-variable contracts, and pinned official images.
@@ -322,6 +329,13 @@ Pinned images:
 - Studio: \`http://127.0.0.1:${supabaseHostPorts.studio}\`
 - DB migration endpoint: \`127.0.0.1:${supabaseHostPorts.db}\`
 
+## App Image Export
+
+\`build-app-image.sh\` clears the Expo/Metro bundler cache before every web export. Expo
+inlines \`EXPO_PUBLIC_*\` values into the browser bundle, so cache invalidation ensures a
+rotated browser-safe Supabase URL or anon key replaces the previous value before the Docker
+image is built. Privileged Supabase credentials are not written to the app's public env file.
+
 ## Runtime Conventions
 
 - Monitoring requested: \`${monitoringEnabled ? 'true' : 'false'}\`
@@ -1994,6 +2008,7 @@ function getUpScript(args) {
         oauthProviders,
         secretStoreProvider,
     });
+    const supabaseMigrationCommand = getSupabaseMigrationCommandScript();
     return `#!/usr/bin/env bash
 set -Eeuo pipefail
 
@@ -2348,7 +2363,7 @@ run_supabase_migrations() {
     require_command supabase
     (
       cd "\${ROOT_DIR}"
-      supabase migration up --db-url "\${SUPABASE_DB_URL}"
+${indentShellBlock(supabaseMigrationCommand, 6)}
     )
   fi
 }
@@ -2647,7 +2662,7 @@ fi
 
 (
   cd "\${APP_SOURCE_DIR}"
-  bunx expo export --platform web --output-dir "\${APP_WEB_EXPORT_DIR}"
+  bunx expo export --platform web --clear --output-dir "\${APP_WEB_EXPORT_DIR}"
 )
 
 if [[ "\${APP_WEB_EXPORT_DIR}" = /* ]]; then