@ankhorage/infra 2.0.1 → 3.1.1

package/src/adapters/minikube/base/index.test.ts

@@ -101,7 +101,7 @@ describe('generateMinikubeBaseArtifacts app-owned cluster model', () => {
           target: 'minikube',
           monitoring: false,
         },
-        plugins: [],
+        modules: [],
       },
       {
         appManifest: createAppManifest('frontend-only'),
@@ -508,7 +508,7 @@ function createSupabaseManifest(): InfraManifestInput {
       provider: 'supabase',
       buckets: ['assets'],
     },
-    plugins: [],
+    modules: [],
   };
 }
 

package/src/adapters/minikube/base/twoAppIsolation.integration.test.ts

@@ -140,7 +140,7 @@ function generateAppOnlyInfrastructure(slug: string) {
       target: 'minikube',
       monitoring: false,
     },
-    plugins: [],
+    modules: [],
   };
 
   return generateInfrastructure(manifest, {
@@ -280,7 +280,7 @@ function generateSupabaseInfrastructure(slug: string) {
     secretStore: {
       provider: 'supabase-vault',
     },
-    plugins: [],
+    modules: [],
   };
 
   return generateInfrastructure(manifest, {

package/src/adapters/minikube/secrets/index.test.ts

@@ -14,7 +14,7 @@ function createManifest(overrides: Partial<InfraManifestInput> = {}): InfraManif
     secretStore: {
       provider: 'supabase-vault',
     },
-    plugins: [],
+    modules: [],
     ...overrides,
   };
 }

package/src/commands.test.ts

@@ -66,7 +66,7 @@ describe('infra command table', () => {
               manifestPath: '/workspace/apps/shop/ankh.config.json',
               projectId: 'shop',
               projectPath: '/workspace/apps/shop',
-              manifest: createAppManifest('shop', { plugins: [] }),
+              manifest: createAppManifest('shop', { modules: [] }),
             });
           },
           validateInfraSupport() {
@@ -104,7 +104,7 @@ describe('infra command table', () => {
               manifestPath: '/workspace/apps/studio/ankh.config.json',
               projectId: 'studio',
               projectPath: '/workspace/apps/studio',
-              manifest: createAppManifest('studio', { plugins: [] }),
+              manifest: createAppManifest('studio', { modules: [] }),
             });
           },
           syncProjectInfrastructure() {
@@ -146,7 +146,7 @@ describe('infra command table', () => {
           projectPath: '/workspace/apps/shop',
           manifest: createAppManifest('shop', {
             deployment: { target: 'minikube', monitoring: false },
-            plugins: [],
+            modules: [],
           }),
         });
       },

package/src/generatedApiDatabase.test.ts

@@ -327,7 +327,7 @@ describe('generated API database bridge', () => {
     const infra: InfraManifestInput = {
       deployment: { target: 'minikube', monitoring: false },
       database: { provider: 'supabase', tier: 'dev' },
-      plugins: [],
+      modules: [],
     };
     const appManifest = {
       ...createAppManifest('catalog', infra),

package/src/index.test.ts

@@ -42,7 +42,7 @@ describe('generateInfrastructure', () => {
         domain: 'alpha.local',
         cdn: false,
       },
-      plugins: [],
+      modules: [],
     };
 
     const result = generateInfrastructure(manifest, { appManifest: createAppManifest('alpha') });
@@ -125,7 +125,7 @@ describe('generateInfrastructure', () => {
         provider: 'supabase',
         buckets: ['assets', ' assets ', '', 'assets', 'uploads'],
       },
-      plugins: [],
+      modules: [],
     };
 
     const result = generateInfrastructure(manifest, {
@@ -163,7 +163,7 @@ describe('generateInfrastructure', () => {
         provider: 'supabase',
         tier: 'dev',
       },
-      plugins: [],
+      modules: [],
     };
 
     const appManifest: Pick<AppManifest, 'metadata' | 'navigator' | 'screens' | 'settings'> = {
@@ -237,7 +237,7 @@ describe('generateInfrastructure', () => {
 
   test('throws for missing deployment', () => {
     const manifest: InfraManifestInput = {
-      plugins: [],
+      modules: [],
     };
 
     expect(() => generateInfrastructure(manifest)).toThrow('Deployment configuration is missing.');
@@ -249,7 +249,7 @@ describe('generateInfrastructure', () => {
         target: 'kubernetes',
         monitoring: false,
       },
-      plugins: [],
+      modules: [],
     };
 
     expect(() => generateInfrastructure(manifest)).toThrow(
@@ -267,7 +267,7 @@ describe('generateInfrastructure', () => {
         provider: 'supabase',
         tier: 'dev',
       },
-      plugins: [],
+      modules: [],
     };
 
     expect(() => generateInfrastructure(manifest, { namespaceHint: 'shop' })).toThrow(

package/src/minikubeImageLifecycle.test.ts

@@ -11,7 +11,7 @@ describe('minikube generated app image lifecycle', () => {
         target: 'minikube',
         monitoring: false,
       },
-      plugins: [],
+      modules: [],
     };
 
     const result = generateInfrastructure(manifest, { appManifest: createAppManifest('shop') });

package/src/package.test.ts

@@ -24,6 +24,11 @@ describe('package metadata', () => {
       'ankhorage-infra': './dist/cli/bin.js',
     });
     expect(packageJson.ankh).toEqual(expectedAnkhMetadata);
+    expect(packageJson.exports['./project']).toEqual({
+      types: './dist/project/index.d.ts',
+      import: './dist/project/index.js',
+      default: './dist/project/index.js',
+    });
     expect(JSON.parse(JSON.stringify(expectedAnkhMetadata))).toEqual(expectedAnkhMetadata);
 
     const capabilityText = JSON.stringify(packageJson.ankh.capabilities);

package/src/project/index.test.ts

@@ -0,0 +1,70 @@
+import { afterEach, describe, expect, test } from 'bun:test';
+import { promises as fs } from 'fs';
+import os from 'os';
+import path from 'path';
+
+import {
+  resolveProjectInfrastructurePortForward,
+  runProjectInfrastructureLifecycle,
+} from './index.js';
+
+const temporaryPaths: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(
+    temporaryPaths.splice(0).map((entry) => fs.rm(entry, { force: true, recursive: true })),
+  );
+});
+
+async function createProjectFixture(): Promise<string> {
+  const projectPath = await fs.mkdtemp(path.join(os.tmpdir(), 'ankh-infra-project-'));
+  temporaryPaths.push(projectPath);
+  const infraRoot = path.join(projectPath, 'infra', 'minikube');
+  const scriptsRoot = path.join(infraRoot, 'scripts');
+  await fs.mkdir(scriptsRoot, { recursive: true });
+  await fs.writeFile(
+    path.join(scriptsRoot, 'status.sh'),
+    "#!/usr/bin/env bash\nprintf 'status-ok'\nprintf 'status-warning' >&2\n",
+    'utf8',
+  );
+  await fs.writeFile(
+    path.join(infraRoot, '.env.example'),
+    'APP_PORT_FORWARD_LOCAL_PORT=48123\n',
+    'utf8',
+  );
+  return projectPath;
+}
+
+describe('@ankhorage/infra/project', () => {
+  test('executes generated lifecycle scripts without exposing script paths to consumers', async () => {
+    const projectPath = await createProjectFixture();
+    const stdout: string[] = [];
+    const stderr: string[] = [];
+
+    const result = await runProjectInfrastructureLifecycle({
+      projectId: 'example',
+      projectPath,
+      script: 'status',
+      target: 'minikube',
+      onStdout: (chunk) => stdout.push(chunk),
+      onStderr: (chunk) => stderr.push(chunk),
+    });
+
+    expect(result).toEqual({ stdout: 'status-ok', stderr: 'status-warning' });
+    expect(stdout.join('')).toBe('status-ok');
+    expect(stderr.join('')).toBe('status-warning');
+  });
+
+  test('resolves the generated app port-forward endpoint through the owner API', async () => {
+    const projectPath = await createProjectFixture();
+    const result = await resolveProjectInfrastructurePortForward({
+      projectPath,
+      target: 'minikube',
+    });
+
+    expect(result).toEqual({
+      localPort: 48123,
+      url: 'http://127.0.0.1:48123',
+    });
+  });
+});

package/src/project/index.ts

@@ -0,0 +1,17 @@
+export {
+  type ResolvedInfraProject,
+  resolveInfraProject as resolveInfraWorkspaceProject,
+} from '../project.js';
+export {
+  type InfraSyncResult,
+  resolveProjectInfrastructureTarget,
+  syncProjectInfrastructure,
+} from '../projectInfrastructure.js';
+export {
+  type InfraLifecycleScript,
+  type InfraPortForwardInfo,
+  InfraScriptExecutionError,
+  type InfraScriptOutput,
+  resolveProjectInfrastructurePortForward,
+  runProjectInfrastructureLifecycle,
+} from '../runtime.js';

package/src/project.test.ts

@@ -58,7 +58,7 @@ describe('resolveInfraProject', () => {
 
     expect(project.manifest.metadata.name).toBe('shop');
     expect(project.manifest.metadata.slug).toBe('shop');
-    expect(project.manifest.infra.plugins).toEqual([]);
+    expect(project.manifest.infra.modules).toEqual([]);
   });
 
   test('rejects malformed manifest JSON', async () => {
@@ -186,7 +186,7 @@ describe('resolveInfraProject', () => {
         monitoring: false,
         target: 'minikube',
       },
-      plugins: [],
+      modules: [],
     });
     const fixture = await createWorkspaceFixture({
       manifest,

package/src/project.ts

@@ -1,4 +1,4 @@
-import { APP_CATEGORIES, type AppManifest, type NavigatorSpec } from '@ankhorage/contracts';
+import { type AppManifest, isAppManifest } from '@ankhorage/contracts';
 import { promises as fs } from 'fs';
 import path from 'path';
 
@@ -37,11 +37,7 @@ export async function resolveInfraProject(options: {
   }
 
   const manifestPath = path.join(projectPath, 'ankh.config.json');
-  const manifest = await readProjectManifest({
-    manifestPath,
-    projectId,
-    projectPath,
-  });
+  const manifest = await readProjectManifest({ manifestPath, projectId });
 
   return {
     appsRoot,
@@ -75,9 +71,7 @@ function createFallbackManifest(projectId: string): AppManifest {
     },
     themes: [],
     activeThemeId: 'default',
-    infra: {
-      plugins: [],
-    },
+    infra: { modules: [] },
     navigator: {
       type: 'stack',
       routes: [{ name: 'index', screenId: 'index' }],
@@ -95,15 +89,14 @@ function createFallbackManifest(projectId: string): AppManifest {
 async function readProjectManifest(args: {
   readonly manifestPath: string;
   readonly projectId: string;
-  readonly projectPath: string;
 }): Promise<AppManifest> {
   if (!(await pathExists(args.manifestPath))) {
     return createFallbackManifest(args.projectId);
   }
 
   const rawManifest = await fs.readFile(args.manifestPath, 'utf8');
-
   let parsed: unknown;
+
   try {
     parsed = JSON.parse(rawManifest);
   } catch (error) {
@@ -125,15 +118,10 @@ async function findWorkspaceRoot(startPath: string): Promise<string | null> {
 
   for (;;) {
     const appsRoot = path.join(currentPath, 'apps');
-    if (await isDirectory(appsRoot)) {
-      return currentPath;
-    }
+    if (await isDirectory(appsRoot)) return currentPath;
 
     const parentPath = path.dirname(currentPath);
-    if (parentPath === currentPath) {
-      return null;
-    }
-
+    if (parentPath === currentPath) return null;
     currentPath = parentPath;
   }
 }
@@ -166,69 +154,6 @@ function validateExplicitProjectId(projectId: string): string {
   return projectId;
 }
 
-function isAppManifest(value: unknown): value is AppManifest {
-  if (!isRecord(value)) {
-    return false;
-  }
-
-  return (
-    isAppManifestMetadata(value.metadata) &&
-    Array.isArray(value.themes) &&
-    typeof value.activeThemeId === 'string' &&
-    isInfraManifestRecord(value.infra) &&
-    isNavigatorSpec(value.navigator) &&
-    isRecord(value.screens) &&
-    isSettingsRecord(value.settings)
-  );
-}
-
-function isAppManifestMetadata(value: unknown): value is AppManifest['metadata'] {
-  return (
-    isRecord(value) &&
-    typeof value.name === 'string' &&
-    typeof value.slug === 'string' &&
-    typeof value.version === 'string' &&
-    APP_CATEGORIES.some((category) => category === value.category) &&
-    typeof value.themeId === 'string' &&
-    (value.created === undefined || typeof value.created === 'string') &&
-    (value.updated === undefined || typeof value.updated === 'string')
-  );
-}
-
-function isInfraManifestRecord(value: unknown): value is AppManifest['infra'] {
-  return isRecord(value) && Array.isArray(value.plugins);
-}
-
-function isNavigatorSpec(value: unknown): value is NavigatorSpec {
-  return (
-    isRecord(value) &&
-    typeof value.type === 'string' &&
-    Array.isArray(value.routes) &&
-    (value.initialRouteName === undefined || typeof value.initialRouteName === 'string')
-  );
-}
-
-function isSettingsRecord(value: unknown): value is AppManifest['settings'] {
-  return (
-    isRecord(value) &&
-    (value.apiBaseUrl === undefined || typeof value.apiBaseUrl === 'string') &&
-    isLocalizationRecord(value.localization)
-  );
-}
-
-function isLocalizationRecord(value: unknown): value is AppManifest['settings']['localization'] {
-  return (
-    isRecord(value) &&
-    typeof value.defaultLocale === 'string' &&
-    Array.isArray(value.locales) &&
-    value.locales.every((locale) => typeof locale === 'string')
-  );
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null;
-}
-
 async function isDirectory(filePath: string): Promise<boolean> {
   try {
     const stat = await fs.stat(filePath);

package/src/projectContractsParser.test.ts

@@ -0,0 +1,49 @@
+import { afterEach, expect, test } from 'bun:test';
+import { promises as fs } from 'fs';
+import path from 'path';
+
+import { resolveInfraProject } from './project.js';
+import { createAppManifest, createWorkspaceFixture } from './testSupport.js';
+
+const tempRoots = new Set<string>();
+
+afterEach(async () => {
+  await Promise.all(
+    [...tempRoots].map((rootPath) => fs.rm(rootPath, { force: true, recursive: true })),
+  );
+  tempRoots.clear();
+});
+
+test('Infra rejects nested manifest shapes rejected by Contracts', async () => {
+  const manifest = createAppManifest('cards', { modules: [] });
+  const fixture = await createWorkspaceFixture({ manifest, projectId: 'cards' });
+  tempRoots.add(fixture.rootPath);
+
+  const malformedManifest = {
+    ...manifest,
+    navigator: {
+      ...manifest.navigator,
+      type: 'not-a-canonical-navigator',
+    },
+  };
+  await fs.writeFile(
+    path.join(fixture.projectPath, 'ankh.config.json'),
+    JSON.stringify(malformedManifest),
+    'utf8',
+  );
+
+  const error = await captureError(
+    resolveInfraProject({ cwd: fixture.rootPath, projectId: fixture.projectId }),
+  );
+  expect(error.message).toContain('Project manifest has an invalid shape');
+});
+
+async function captureError(promise: Promise<unknown>): Promise<Error> {
+  try {
+    await promise;
+  } catch (error) {
+    if (error instanceof Error) return error;
+    throw error;
+  }
+  throw new Error('Expected project resolution to reject.');
+}

package/src/projectInfrastructure.test.ts

@@ -29,7 +29,7 @@ describe('project infrastructure sync', () => {
       projectPath,
       manifest: createAppManifest('shop', {
         deployment: { target: 'minikube', monitoring: false },
-        plugins: [],
+        modules: [],
       }),
       generateInfrastructureImpl() {
         return {
@@ -77,7 +77,7 @@ describe('project infrastructure sync', () => {
 
     const manifest = createAppManifest('shop', {
       deployment: { target: 'minikube', monitoring: false },
-      plugins: [],
+      modules: [],
     });
 
     await syncProjectInfrastructure({
@@ -141,7 +141,7 @@ describe('project infrastructure sync', () => {
     const result = await syncProjectInfrastructure({
       projectId: 'shop',
       projectPath,
-      manifest: createAppManifest('shop', { plugins: [] }),
+      manifest: createAppManifest('shop', { modules: [] }),
     });
 
     expect(result.generated).toBe(0);
@@ -158,7 +158,7 @@ describe('project infrastructure sync', () => {
       projectPath,
       manifest: createAppManifest('studio', {
         deployment: { target: 'minikube', monitoring: false },
-        plugins: [],
+        modules: [],
       }),
     });
 
@@ -183,7 +183,7 @@ describe('project infrastructure sync', () => {
     );
 
     const target = await resolveProjectInfrastructureTarget({
-      manifest: createAppManifest('shop', { plugins: [] }),
+      manifest: createAppManifest('shop', { modules: [] }),
       projectPath,
     });
 

package/src/readme-usage.ts

@@ -1,11 +1,17 @@
 import { runCli } from './cli/bin.js';
 
 /***
- * Provider and CLI surface
+ * Provider, CLI, and project API surface
  *
- * `@ankhorage/infra` owns infra command behavior.
+ * `@ankhorage/infra` owns infrastructure generation, project reconciliation,
+ * and generated lifecycle execution.
  *
- * The same shared command implementation backs both:
+ * The same owner implementation backs CLI consumers and the public
+ * `@ankhorage/infra/project` application-service boundary. Trusted hosts such
+ * as Studio should call that subpath instead of reproducing ledger, generated
+ * file, lifecycle-script, or port-forward configuration semantics.
+ *
+ * CLI entrypoints:
  *
  * - `ankh infra ...`
  * - `bunx @ankhorage/infra ...`
@@ -18,12 +24,10 @@ import { runCli } from './cli/bin.js';
  * - `up`
  * - `down`
  *
- * `status` runs the generated live runtime status script for a project.
- *
- * Project resolution is project-aware:
- *
- * - pass `[project]`, or
- * - omit it when cwd is already inside `apps/<project>`
+ * Project resolution for the CLI is workspace-aware: pass `[project]`, or
+ * omit it when cwd is already inside `apps/<project>`. Programmatic project
+ * operations accept an explicit project path and do not require Studio or a
+ * particular workspace layout.
  *
  * @usage
  */