@ankhorage/infra 3.0.0 → 3.2.0

package/dist/runtime.js

@@ -1,6 +1,7 @@
 import { spawn } from 'child_process';
 import { promises as fs } from 'fs';
 import path from 'path';
+import { readProjectInfrastructureEnvironment } from './projectEnvironment.js';
 export class InfraScriptExecutionError extends Error {
     exitCode;
     stderr;
@@ -13,16 +14,45 @@ export class InfraScriptExecutionError extends Error {
         this.stdout = args.stdout;
     }
 }
-export async function runProjectInfraScript(args) {
+export async function runProjectInfrastructureLifecycle(args) {
     const scriptPath = resolveProjectInfraScriptPath(args);
     if (!(await pathExists(scriptPath))) {
         throw new Error(`Infra script not found: ${scriptPath}. Run infra generate for project '${args.projectId}' first.`);
     }
-    await runShellScript({
-        context: args.context,
+    return runShellScript({
+        args: args.args ?? [],
+        env: args.env ?? process.env,
+        onStderr: args.onStderr,
+        onStdout: args.onStdout,
         scriptPath,
     });
 }
+export async function resolveProjectInfrastructurePortForward(args) {
+    const environment = await readProjectInfrastructureEnvironment({
+        keys: ['APP_PORT_FORWARD_LOCAL_PORT'],
+        projectPath: args.projectPath,
+        target: args.target,
+    });
+    const localPort = parsePositivePort(environment.APP_PORT_FORWARD_LOCAL_PORT);
+    if (localPort === null) {
+        throw new Error('Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT. Regenerate infrastructure first.');
+    }
+    return {
+        localPort,
+        url: `http://127.0.0.1:${localPort}`,
+    };
+}
+export async function runProjectInfraScript(args) {
+    await runProjectInfrastructureLifecycle({
+        env: args.context.env,
+        onStderr: (chunk) => args.context.writeStderr(chunk),
+        onStdout: (chunk) => args.context.writeStdout(chunk),
+        projectId: args.projectId,
+        projectPath: args.projectPath,
+        script: args.script,
+        target: args.target,
+    });
+}
 export function resolveProjectInfraScriptPath(args) {
     return path.join(args.projectPath, getInfraScriptsDirectory(args.target), `${args.script}.sh`);
 }
@@ -35,46 +65,56 @@ function getInfraScriptsDirectory(target) {
     }
 }
 async function runShellScript(args) {
-    await new Promise((resolve, reject) => {
-        const child = spawn('bash', [args.scriptPath], {
+    return new Promise((resolve, reject) => {
+        const child = spawn('bash', [args.scriptPath, ...args.args], {
             cwd: path.dirname(args.scriptPath),
-            env: { ...args.context.env },
+            env: { ...args.env },
             stdio: ['ignore', 'pipe', 'pipe'],
         });
         let stdout = '';
         let stderr = '';
         child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
         child.stdout.on('data', (chunk) => {
             stdout += chunk;
-            args.context.writeStdout(chunk);
+            args.onStdout?.(chunk);
         });
-        child.stderr.setEncoding('utf8');
         child.stderr.on('data', (chunk) => {
             stderr += chunk;
-            args.context.writeStderr(chunk);
-        });
-        child.once('error', (error) => {
-            reject(new InfraScriptExecutionError({
-                exitCode: null,
-                message: `Failed to start infra script '${args.scriptPath}': ${error.message}`,
-                stderr,
-                stdout,
-            }));
+            args.onStderr?.(chunk);
         });
+        child.once('error', (error) => reject(createStartError(args.scriptPath, error, stdout, stderr)));
         child.once('close', (exitCode) => {
             if (exitCode === 0) {
-                resolve();
+                resolve({ stderr, stdout });
                 return;
             }
-            reject(new InfraScriptExecutionError({
-                exitCode,
-                message: `Infra script '${args.scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,
-                stderr,
-                stdout,
-            }));
+            reject(createExitError(args.scriptPath, exitCode, stdout, stderr));
         });
     });
 }
+function createStartError(scriptPath, error, stdout, stderr) {
+    return new InfraScriptExecutionError({
+        exitCode: null,
+        message: `Failed to start infra script '${scriptPath}': ${error.message}`,
+        stderr,
+        stdout,
+    });
+}
+function createExitError(scriptPath, exitCode, stdout, stderr) {
+    return new InfraScriptExecutionError({
+        exitCode,
+        message: `Infra script '${scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,
+        stderr,
+        stdout,
+    });
+}
+function parsePositivePort(value) {
+    if (value === undefined)
+        return null;
+    const parsed = Number.parseInt(value.trim(), 10);
+    return Number.isInteger(parsed) && parsed >= 1 && parsed <= 65_535 ? parsed : null;
+}
 async function pathExists(filePath) {
     try {
         await fs.access(filePath);

package/dist/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAMxB,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,QAAQ,CAAgB;IACxB,MAAM,CAAS;IACf,MAAM,CAAS;IAExB,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAM3C;IACC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,qCAAqC,IAAI,CAAC,SAAS,UAAU,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAI7C;IACC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,wBAAwB,CAAC;QAClC;YACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAG7B;IACC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YAC7C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAClC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CACJ,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,iCAAiC,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;gBAC9E,MAAM;gBACN,MAAM;aACP,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,MAAM,CACJ,IAAI,yBAAyB,CAAC;gBAC5B,QAAQ;gBACR,OAAO,EAAE,iBAAiB,IAAI,CAAC,UAAU,sBAAsB,QAAQ,IAAI,SAAS,GAAG;gBACvF,MAAM;gBACN,MAAM;aACP,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraCommandContext } from './commandContext.js';\n\nexport type InfraLifecycleScript = 'down' | 'status' | 'up';\n\nexport class InfraScriptExecutionError extends Error {\n  readonly exitCode: number | null;\n  readonly stderr: string;\n  readonly stdout: string;\n\n  constructor(args: {\n    readonly exitCode: number | null;\n    readonly message: string;\n    readonly stderr: string;\n    readonly stdout: string;\n  }) {\n    super(args.message);\n    this.name = 'InfraScriptExecutionError';\n    this.exitCode = args.exitCode;\n    this.stderr = args.stderr;\n    this.stdout = args.stdout;\n  }\n}\n\nexport async function runProjectInfraScript(args: {\n  readonly context: InfraCommandContext;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<void> {\n  const scriptPath = resolveProjectInfraScriptPath(args);\n  if (!(await pathExists(scriptPath))) {\n    throw new Error(\n      `Infra script not found: ${scriptPath}. Run infra generate for project '${args.projectId}' first.`,\n    );\n  }\n\n  await runShellScript({\n    context: args.context,\n    scriptPath,\n  });\n}\n\nexport function resolveProjectInfraScriptPath(args: {\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): string {\n  return path.join(args.projectPath, getInfraScriptsDirectory(args.target), `${args.script}.sh`);\n}\n\nfunction getInfraScriptsDirectory(target: string): string {\n  switch (target) {\n    case 'minikube':\n      return 'infra/minikube/scripts';\n    default:\n      throw new Error(`Unsupported deployment target for infra scripts: ${target}`);\n  }\n}\n\nasync function runShellScript(args: {\n  readonly context: InfraCommandContext;\n  readonly scriptPath: string;\n}): Promise<void> {\n  await new Promise<void>((resolve, reject) => {\n    const child = spawn('bash', [args.scriptPath], {\n      cwd: path.dirname(args.scriptPath),\n      env: { ...args.context.env },\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n\n    let stdout = '';\n    let stderr = '';\n\n    child.stdout.setEncoding('utf8');\n    child.stdout.on('data', (chunk: string) => {\n      stdout += chunk;\n      args.context.writeStdout(chunk);\n    });\n\n    child.stderr.setEncoding('utf8');\n    child.stderr.on('data', (chunk: string) => {\n      stderr += chunk;\n      args.context.writeStderr(chunk);\n    });\n\n    child.once('error', (error) => {\n      reject(\n        new InfraScriptExecutionError({\n          exitCode: null,\n          message: `Failed to start infra script '${args.scriptPath}': ${error.message}`,\n          stderr,\n          stdout,\n        }),\n      );\n    });\n\n    child.once('close', (exitCode) => {\n      if (exitCode === 0) {\n        resolve();\n        return;\n      }\n\n      reject(\n        new InfraScriptExecutionError({\n          exitCode,\n          message: `Infra script '${args.scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,\n          stderr,\n          stdout,\n        }),\n      );\n    });\n  });\n}\n\nasync function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAc/E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,QAAQ,CAAgB;IACxB,MAAM,CAAS;IACf,MAAM,CAAS;IAExB,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IASvD;IACC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,qCAAqC,IAAI,CAAC,SAAS,UAAU,CACnG,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,IAG7D;IACC,MAAM,WAAW,GAAG,MAAM,oCAAoC,CAAC;QAC7D,IAAI,EAAE,CAAC,6BAA6B,CAAC;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAE7E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,EAAE,oBAAoB,SAAS,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAM3C;IACC,MAAM,iCAAiC,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;QACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAI7C;IACC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,wBAAwB,CAAC;QAClC;YACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAM7B;IACC,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3D,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAClC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5B,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CACjE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,KAAY,EACZ,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,iCAAiC,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;QACzE,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,UAAkB,EAClB,QAAuB,EACvB,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ;QACR,OAAO,EAAE,iBAAiB,UAAU,sBAAsB,QAAQ,IAAI,SAAS,GAAG;QAClF,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraCommandContext } from './commandContext.js';\nimport { readProjectInfrastructureEnvironment } from './projectEnvironment.js';\n\nexport type InfraLifecycleScript = 'destroy' | 'down' | 'port-forward' | 'reset' | 'status' | 'up';\n\nexport interface InfraScriptOutput {\n  readonly stderr: string;\n  readonly stdout: string;\n}\n\nexport interface InfraPortForwardInfo {\n  readonly localPort: number;\n  readonly url: string;\n}\n\nexport class InfraScriptExecutionError extends Error {\n  readonly exitCode: number | null;\n  readonly stderr: string;\n  readonly stdout: string;\n\n  constructor(args: {\n    readonly exitCode: number | null;\n    readonly message: string;\n    readonly stderr: string;\n    readonly stdout: string;\n  }) {\n    super(args.message);\n    this.name = 'InfraScriptExecutionError';\n    this.exitCode = args.exitCode;\n    this.stderr = args.stderr;\n    this.stdout = args.stdout;\n  }\n}\n\nexport async function runProjectInfrastructureLifecycle(args: {\n  readonly args?: readonly string[];\n  readonly env?: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<InfraScriptOutput> {\n  const scriptPath = resolveProjectInfraScriptPath(args);\n  if (!(await pathExists(scriptPath))) {\n    throw new Error(\n      `Infra script not found: ${scriptPath}. Run infra generate for project '${args.projectId}' first.`,\n    );\n  }\n\n  return runShellScript({\n    args: args.args ?? [],\n    env: args.env ?? process.env,\n    onStderr: args.onStderr,\n    onStdout: args.onStdout,\n    scriptPath,\n  });\n}\n\nexport async function resolveProjectInfrastructurePortForward(args: {\n  readonly projectPath: string;\n  readonly target: string;\n}): Promise<InfraPortForwardInfo> {\n  const environment = await readProjectInfrastructureEnvironment({\n    keys: ['APP_PORT_FORWARD_LOCAL_PORT'],\n    projectPath: args.projectPath,\n    target: args.target,\n  });\n  const localPort = parsePositivePort(environment.APP_PORT_FORWARD_LOCAL_PORT);\n\n  if (localPort === null) {\n    throw new Error(\n      'Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT. Regenerate infrastructure first.',\n    );\n  }\n\n  return {\n    localPort,\n    url: `http://127.0.0.1:${localPort}`,\n  };\n}\n\nexport async function runProjectInfraScript(args: {\n  readonly context: InfraCommandContext;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<void> {\n  await runProjectInfrastructureLifecycle({\n    env: args.context.env,\n    onStderr: (chunk) => args.context.writeStderr(chunk),\n    onStdout: (chunk) => args.context.writeStdout(chunk),\n    projectId: args.projectId,\n    projectPath: args.projectPath,\n    script: args.script,\n    target: args.target,\n  });\n}\n\nexport function resolveProjectInfraScriptPath(args: {\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): string {\n  return path.join(args.projectPath, getInfraScriptsDirectory(args.target), `${args.script}.sh`);\n}\n\nfunction getInfraScriptsDirectory(target: string): string {\n  switch (target) {\n    case 'minikube':\n      return 'infra/minikube/scripts';\n    default:\n      throw new Error(`Unsupported deployment target for infra scripts: ${target}`);\n  }\n}\n\nasync function runShellScript(args: {\n  readonly args: readonly string[];\n  readonly env: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly scriptPath: string;\n}): Promise<InfraScriptOutput> {\n  return new Promise<InfraScriptOutput>((resolve, reject) => {\n    const child = spawn('bash', [args.scriptPath, ...args.args], {\n      cwd: path.dirname(args.scriptPath),\n      env: { ...args.env },\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n\n    let stdout = '';\n    let stderr = '';\n    child.stdout.setEncoding('utf8');\n    child.stderr.setEncoding('utf8');\n    child.stdout.on('data', (chunk: string) => {\n      stdout += chunk;\n      args.onStdout?.(chunk);\n    });\n    child.stderr.on('data', (chunk: string) => {\n      stderr += chunk;\n      args.onStderr?.(chunk);\n    });\n    child.once('error', (error) =>\n      reject(createStartError(args.scriptPath, error, stdout, stderr)),\n    );\n    child.once('close', (exitCode) => {\n      if (exitCode === 0) {\n        resolve({ stderr, stdout });\n        return;\n      }\n      reject(createExitError(args.scriptPath, exitCode, stdout, stderr));\n    });\n  });\n}\n\nfunction createStartError(\n  scriptPath: string,\n  error: Error,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode: null,\n    message: `Failed to start infra script '${scriptPath}': ${error.message}`,\n    stderr,\n    stdout,\n  });\n}\n\nfunction createExitError(\n  scriptPath: string,\n  exitCode: number | null,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode,\n    message: `Infra script '${scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,\n    stderr,\n    stdout,\n  });\n}\n\nfunction parsePositivePort(value: string | undefined): number | null {\n  if (value === undefined) return null;\n  const parsed = Number.parseInt(value.trim(), 10);\n  return Number.isInteger(parsed) && parsed >= 1 && parsed <= 65_535 ? parsed : null;\n}\n\nasync function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/infra",
   "type": "module",
-  "version": "3.0.0",
+  "version": "3.2.0",
   "description": "Project-aware infrastructure generation library and executable Ankh provider for Ankhorage.",
   "homepage": "https://github.com/ankhorage/infra#readme",
   "bugs": {
@@ -35,7 +35,7 @@
     "openapi"
   ],
   "dependencies": {
-    "@ankhorage/contracts": "^6.0.0",
+    "@ankhorage/contracts": "^7.2.0",
     "@ankhorage/supabase-vault": "^0.2.4"
   },
   "files": [
@@ -62,6 +62,11 @@
       "import": "./dist/metadata/index.js",
       "default": "./dist/metadata/index.js"
     },
+    "./project": {
+      "types": "./dist/project/index.d.ts",
+      "import": "./dist/project/index.js",
+      "default": "./dist/project/index.js"
+    },
     "./package.json": "./package.json"
   },
   "bin": {

package/src/package.test.ts

@@ -24,6 +24,11 @@ describe('package metadata', () => {
       'ankhorage-infra': './dist/cli/bin.js',
     });
     expect(packageJson.ankh).toEqual(expectedAnkhMetadata);
+    expect(packageJson.exports['./project']).toEqual({
+      types: './dist/project/index.d.ts',
+      import: './dist/project/index.js',
+      default: './dist/project/index.js',
+    });
     expect(JSON.parse(JSON.stringify(expectedAnkhMetadata))).toEqual(expectedAnkhMetadata);
 
     const capabilityText = JSON.stringify(packageJson.ankh.capabilities);

package/src/project/index.test.ts

@@ -0,0 +1,149 @@
+import { afterEach, describe, expect, test } from 'bun:test';
+import { promises as fs } from 'fs';
+import os from 'os';
+import path from 'path';
+
+import { createAppManifest } from '../testSupport.js';
+import {
+  inspectProjectInfrastructure,
+  readProjectInfrastructureEnvironment,
+  resolveProjectInfrastructureDatabaseUrl,
+  resolveProjectInfrastructurePortForward,
+  runProjectInfrastructureLifecycle,
+} from './index.js';
+
+const temporaryPaths: string[] = [];
+
+afterEach(async () => {
+  await Promise.all(
+    temporaryPaths.splice(0).map((entry) => fs.rm(entry, { force: true, recursive: true })),
+  );
+});
+
+async function createProjectFixture(): Promise<string> {
+  const projectPath = await fs.mkdtemp(path.join(os.tmpdir(), 'ankh-infra-project-'));
+  temporaryPaths.push(projectPath);
+  const infraRoot = path.join(projectPath, 'infra', 'minikube');
+  const scriptsRoot = path.join(infraRoot, 'scripts');
+  await fs.mkdir(scriptsRoot, { recursive: true });
+  await fs.writeFile(
+    path.join(scriptsRoot, 'status.sh'),
+    "#!/usr/bin/env bash\nprintf 'status-ok'\nprintf 'status-warning' >&2\n",
+    'utf8',
+  );
+  await fs.writeFile(
+    path.join(infraRoot, '.env.example'),
+    [
+      'APP_PORT_FORWARD_LOCAL_PORT=48123',
+      'SITE_URL=http://example.local',
+      'DATABASE_URL=postgres://example',
+      'PRIVATE_VALUE=not-selected',
+      '',
+    ].join('\n'),
+    'utf8',
+  );
+  return projectPath;
+}
+
+describe('@ankhorage/infra/project', () => {
+  test('executes generated lifecycle scripts without exposing script paths to consumers', async () => {
+    const projectPath = await createProjectFixture();
+    const stdout: string[] = [];
+    const stderr: string[] = [];
+
+    const result = await runProjectInfrastructureLifecycle({
+      projectId: 'example',
+      projectPath,
+      script: 'status',
+      target: 'minikube',
+      onStdout: (chunk) => stdout.push(chunk),
+      onStderr: (chunk) => stderr.push(chunk),
+    });
+
+    expect(result).toEqual({ stdout: 'status-ok', stderr: 'status-warning' });
+    expect(stdout.join('')).toBe('status-ok');
+    expect(stderr.join('')).toBe('status-warning');
+  });
+
+  test('resolves the generated app port-forward endpoint through the owner API', async () => {
+    const projectPath = await createProjectFixture();
+    const result = await resolveProjectInfrastructurePortForward({
+      projectPath,
+      target: 'minikube',
+    });
+
+    expect(result).toEqual({
+      localPort: 48123,
+      url: 'http://127.0.0.1:48123',
+    });
+  });
+
+  test('reads only requested runtime environment values from the generated fallback', async () => {
+    const projectPath = await createProjectFixture();
+    const result = await readProjectInfrastructureEnvironment({
+      keys: ['SITE_URL', 'MISSING_VALUE'],
+      projectPath,
+      target: 'minikube',
+    });
+
+    expect(result).toEqual({ SITE_URL: 'http://example.local' });
+  });
+
+  test('prefers generated runtime environment and resolves the trusted database URL', async () => {
+    const projectPath = await createProjectFixture();
+    const envPath = path.join(projectPath, 'infra', 'minikube', '.env');
+    await fs.writeFile(
+      envPath,
+      'SITE_URL=http://runtime.local\nDATABASE_URL=postgres://runtime\n',
+      'utf8',
+    );
+
+    const environment = await readProjectInfrastructureEnvironment({
+      keys: ['SITE_URL'],
+      projectPath,
+      target: 'minikube',
+    });
+    const databaseUrl = await resolveProjectInfrastructureDatabaseUrl({
+      projectPath,
+      target: 'minikube',
+    });
+
+    expect(environment).toEqual({ SITE_URL: 'http://runtime.local' });
+    expect(databaseUrl).toBe('postgres://runtime');
+  });
+
+  test('inspects deployment and generated state through the owner ledger', async () => {
+    const projectPath = await createProjectFixture();
+    await fs.mkdir(path.join(projectPath, '.ankh'), { recursive: true });
+    await fs.writeFile(
+      path.join(projectPath, '.ankh', 'infra-ledger.json'),
+      JSON.stringify({
+        schemaVersion: 1,
+        generatedAt: '2026-08-12T04:00:00.000Z',
+        target: 'minikube',
+        files: ['infra/minikube/.env.example', 'infra/minikube/scripts/status.sh'],
+        warnings: ['generated warning'],
+      }),
+      'utf8',
+    );
+    const manifest = createAppManifest('example', {
+      deployment: { monitoring: false, target: 'minikube' },
+      modules: [],
+    });
+
+    const result = await inspectProjectInfrastructure({
+      manifest,
+      projectId: 'example',
+      projectPath,
+    });
+
+    expect(result).toEqual({
+      generated: true,
+      generatedAt: '2026-08-12T04:00:00.000Z',
+      hasDeployment: true,
+      target: 'minikube',
+      trackedFiles: 2,
+      warnings: ['generated warning'],
+    });
+  });
+});

package/src/project/index.ts

@@ -0,0 +1,21 @@
+export {
+  type ResolvedInfraProject,
+  resolveInfraProject as resolveInfraWorkspaceProject,
+} from '../project.js';
+export { resolveProjectInfrastructureDatabaseUrl } from '../projectDatabase.js';
+export { readProjectInfrastructureEnvironment } from '../projectEnvironment.js';
+export {
+  type InfraProjectInspection,
+  type InfraSyncResult,
+  inspectProjectInfrastructure,
+  resolveProjectInfrastructureTarget,
+  syncProjectInfrastructure,
+} from '../projectInfrastructure.js';
+export {
+  type InfraLifecycleScript,
+  type InfraPortForwardInfo,
+  InfraScriptExecutionError,
+  type InfraScriptOutput,
+  resolveProjectInfrastructurePortForward,
+  runProjectInfrastructureLifecycle,
+} from '../runtime.js';

package/src/project.ts

@@ -1,4 +1,4 @@
-import { APP_CATEGORIES, type AppManifest, type NavigatorSpec } from '@ankhorage/contracts';
+import { type AppManifest, isAppManifest } from '@ankhorage/contracts';
 import { promises as fs } from 'fs';
 import path from 'path';
 
@@ -37,11 +37,7 @@ export async function resolveInfraProject(options: {
   }
 
   const manifestPath = path.join(projectPath, 'ankh.config.json');
-  const manifest = await readProjectManifest({
-    manifestPath,
-    projectId,
-    projectPath,
-  });
+  const manifest = await readProjectManifest({ manifestPath, projectId });
 
   return {
     appsRoot,
@@ -75,9 +71,7 @@ function createFallbackManifest(projectId: string): AppManifest {
     },
     themes: [],
     activeThemeId: 'default',
-    infra: {
-      modules: [],
-    },
+    infra: { modules: [] },
     navigator: {
       type: 'stack',
       routes: [{ name: 'index', screenId: 'index' }],
@@ -95,15 +89,14 @@ function createFallbackManifest(projectId: string): AppManifest {
 async function readProjectManifest(args: {
   readonly manifestPath: string;
   readonly projectId: string;
-  readonly projectPath: string;
 }): Promise<AppManifest> {
   if (!(await pathExists(args.manifestPath))) {
     return createFallbackManifest(args.projectId);
   }
 
   const rawManifest = await fs.readFile(args.manifestPath, 'utf8');
-
   let parsed: unknown;
+
   try {
     parsed = JSON.parse(rawManifest);
   } catch (error) {
@@ -125,15 +118,10 @@ async function findWorkspaceRoot(startPath: string): Promise<string | null> {
 
   for (;;) {
     const appsRoot = path.join(currentPath, 'apps');
-    if (await isDirectory(appsRoot)) {
-      return currentPath;
-    }
+    if (await isDirectory(appsRoot)) return currentPath;
 
     const parentPath = path.dirname(currentPath);
-    if (parentPath === currentPath) {
-      return null;
-    }
-
+    if (parentPath === currentPath) return null;
     currentPath = parentPath;
   }
 }
@@ -166,69 +154,6 @@ function validateExplicitProjectId(projectId: string): string {
   return projectId;
 }
 
-function isAppManifest(value: unknown): value is AppManifest {
-  if (!isRecord(value)) {
-    return false;
-  }
-
-  return (
-    isAppManifestMetadata(value.metadata) &&
-    Array.isArray(value.themes) &&
-    typeof value.activeThemeId === 'string' &&
-    isInfraManifestRecord(value.infra) &&
-    isNavigatorSpec(value.navigator) &&
-    isRecord(value.screens) &&
-    isSettingsRecord(value.settings)
-  );
-}
-
-function isAppManifestMetadata(value: unknown): value is AppManifest['metadata'] {
-  return (
-    isRecord(value) &&
-    typeof value.name === 'string' &&
-    typeof value.slug === 'string' &&
-    typeof value.version === 'string' &&
-    APP_CATEGORIES.some((category) => category === value.category) &&
-    typeof value.themeId === 'string' &&
-    (value.created === undefined || typeof value.created === 'string') &&
-    (value.updated === undefined || typeof value.updated === 'string')
-  );
-}
-
-function isInfraManifestRecord(value: unknown): value is AppManifest['infra'] {
-  return isRecord(value) && Array.isArray(value.modules);
-}
-
-function isNavigatorSpec(value: unknown): value is NavigatorSpec {
-  return (
-    isRecord(value) &&
-    typeof value.type === 'string' &&
-    Array.isArray(value.routes) &&
-    (value.initialRouteName === undefined || typeof value.initialRouteName === 'string')
-  );
-}
-
-function isSettingsRecord(value: unknown): value is AppManifest['settings'] {
-  return (
-    isRecord(value) &&
-    (value.apiBaseUrl === undefined || typeof value.apiBaseUrl === 'string') &&
-    isLocalizationRecord(value.localization)
-  );
-}
-
-function isLocalizationRecord(value: unknown): value is AppManifest['settings']['localization'] {
-  return (
-    isRecord(value) &&
-    typeof value.defaultLocale === 'string' &&
-    Array.isArray(value.locales) &&
-    value.locales.every((locale) => typeof locale === 'string')
-  );
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === 'object' && value !== null;
-}
-
 async function isDirectory(filePath: string): Promise<boolean> {
   try {
     const stat = await fs.stat(filePath);

package/src/projectContractsParser.test.ts

@@ -0,0 +1,49 @@
+import { afterEach, expect, test } from 'bun:test';
+import { promises as fs } from 'fs';
+import path from 'path';
+
+import { resolveInfraProject } from './project.js';
+import { createAppManifest, createWorkspaceFixture } from './testSupport.js';
+
+const tempRoots = new Set<string>();
+
+afterEach(async () => {
+  await Promise.all(
+    [...tempRoots].map((rootPath) => fs.rm(rootPath, { force: true, recursive: true })),
+  );
+  tempRoots.clear();
+});
+
+test('Infra rejects nested manifest shapes rejected by Contracts', async () => {
+  const manifest = createAppManifest('cards', { modules: [] });
+  const fixture = await createWorkspaceFixture({ manifest, projectId: 'cards' });
+  tempRoots.add(fixture.rootPath);
+
+  const malformedManifest = {
+    ...manifest,
+    navigator: {
+      ...manifest.navigator,
+      type: 'not-a-canonical-navigator',
+    },
+  };
+  await fs.writeFile(
+    path.join(fixture.projectPath, 'ankh.config.json'),
+    JSON.stringify(malformedManifest),
+    'utf8',
+  );
+
+  const error = await captureError(
+    resolveInfraProject({ cwd: fixture.rootPath, projectId: fixture.projectId }),
+  );
+  expect(error.message).toContain('Project manifest has an invalid shape');
+});
+
+async function captureError(promise: Promise<unknown>): Promise<Error> {
+  try {
+    await promise;
+  } catch (error) {
+    if (error instanceof Error) return error;
+    throw error;
+  }
+  throw new Error('Expected project resolution to reject.');
+}

package/src/projectDatabase.ts

@@ -0,0 +1,27 @@
+import { readProjectInfrastructureEnvironment } from './projectEnvironment.js';
+
+const DATABASE_URL_KEYS = [
+  'ANKH_SECRET_STORE_DATABASE_URL',
+  'SUPABASE_DB_URL',
+  'POSTGRES_URL',
+  'DB_URL',
+  'DATABASE_URL',
+] as const;
+
+export async function resolveProjectInfrastructureDatabaseUrl(args: {
+  readonly projectPath: string;
+  readonly target: string;
+}): Promise<string | null> {
+  const environment = await readProjectInfrastructureEnvironment({
+    keys: DATABASE_URL_KEYS,
+    projectPath: args.projectPath,
+    target: args.target,
+  });
+
+  for (const key of DATABASE_URL_KEYS) {
+    const value = environment[key]?.trim();
+    if (value) return value;
+  }
+
+  return null;
+}

package/src/projectEnvironment.ts

@@ -0,0 +1,51 @@
+import { promises as fs } from 'fs';
+import path from 'path';
+
+export async function readProjectInfrastructureEnvironment(args: {
+  readonly keys: readonly string[];
+  readonly projectPath: string;
+  readonly target: string;
+}): Promise<Readonly<Record<string, string>>> {
+  const infraRoot = path.join(args.projectPath, 'infra', args.target);
+  const envPath = path.join(infraRoot, '.env');
+  const fallbackPath = path.join(infraRoot, '.env.example');
+  const sourcePath = (await pathExists(envPath)) ? envPath : fallbackPath;
+  const environment = await readEnvironmentFile(sourcePath);
+  const selected: Record<string, string> = {};
+
+  for (const key of new Set(args.keys)) {
+    const value = environment.get(key);
+    if (value !== undefined) selected[key] = value;
+  }
+
+  return selected;
+}
+
+async function readEnvironmentFile(filePath: string): Promise<Map<string, string>> {
+  const out = new Map<string, string>();
+  const content = await fs.readFile(filePath, 'utf8');
+
+  for (const line of content.split(/\r?\n/u)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) continue;
+    const separator = trimmed.indexOf('=');
+    if (separator <= 0) continue;
+    const key = trimmed.slice(0, separator).trim();
+    const value = trimmed
+      .slice(separator + 1)
+      .trim()
+      .replace(/^['"]|['"]$/g, '');
+    out.set(key, value);
+  }
+
+  return out;
+}
+
+async function pathExists(filePath: string): Promise<boolean> {
+  try {
+    await fs.access(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}