@ankhorage/infra 3.1.1 → 3.3.0

package/dist/projectInfrastructure.js.map

@@ -1 +1 @@
-{"version":3,"file":"projectInfrastructure.js","sourceRoot":"","sources":["../src/projectInfrastructure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAC7D,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAmBnC,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAK/C;IACC,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACL,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE;gBACP,MAAM,EAAE,iEAAiE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAE3D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,CAAC;YACZ,OAAO;YACP,QAAQ,EAAE,eAAe;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,0BAA0B,IAAI,sBAAsB,CAAC,CAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,EACnB;QACE,aAAa,EAAE,IAAI,CAAC,SAAS;QAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ;KAC3B,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,aAAa,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEhE,MAAM,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;QAC7B,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAC5B,QAAQ,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO;QACP,QAAQ,EAAE,gBAAgB;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,IAGxD;IACC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC;IAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,QAAgB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE3D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,WAAmB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,YAAY,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB,EAAE,MAAmB;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,WAAmB,EAAE,KAA0B;IACxE,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,YAAY,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;QAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,MAAyB;IAC9C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import type { AppManifest } from '@ankhorage/contracts';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport { generateInfrastructure } from './index.js';\nimport { validateInfraSupport } from './infraValidation.js';\n\nconst INFRA_LEDGER_RELATIVE_PATH = '.ankh/infra-ledger.json';\nconst STUDIO_PROJECT_ID = 'studio';\n\ninterface InfraLedger {\n  readonly schemaVersion: 1;\n  readonly generatedAt: string;\n  readonly target: string;\n  readonly files: readonly string[];\n  readonly warnings: readonly string[];\n}\n\nexport interface InfraSyncResult {\n  readonly generated: number;\n  readonly removed: number;\n  readonly warnings: readonly string[];\n  readonly skipped?: {\n    readonly reason: string;\n  };\n}\n\nexport async function syncProjectInfrastructure(args: {\n  readonly generateInfrastructureImpl?: typeof generateInfrastructure;\n  readonly manifest: AppManifest;\n  readonly projectId: string;\n  readonly projectPath: string;\n}): Promise<InfraSyncResult> {\n  const supportWarnings = validateInfraSupport(args.manifest.infra);\n\n  if (args.projectId === STUDIO_PROJECT_ID) {\n    return {\n      generated: 0,\n      removed: 0,\n      warnings: supportWarnings,\n      skipped: {\n        reason: 'apps/studio is the dashboard and is not a generated app target.',\n      },\n    };\n  }\n\n  const previousLedger = await readInfraLedger(args.projectPath);\n  const previousFiles = new Set(previousLedger?.files ?? []);\n\n  if (args.manifest.infra.deployment === undefined) {\n    const removed = await removeFiles(args.projectPath, previousFiles);\n    await removeInfraLedger(args.projectPath);\n    return {\n      generated: 0,\n      removed,\n      warnings: supportWarnings,\n    };\n  }\n\n  const generated = (args.generateInfrastructureImpl ?? generateInfrastructure)(\n    args.manifest.infra,\n    {\n      namespaceHint: args.projectId,\n      appManifest: args.manifest,\n    },\n  );\n  const combinedWarnings = uniqueStrings([...supportWarnings, ...generated.warnings]);\n  const nextFiles = new Set<string>();\n\n  for (const file of generated.files) {\n    const outputPath = resolveProjectFile(args.projectPath, file.path);\n    await fs.mkdir(path.dirname(outputPath), { recursive: true });\n    await fs.writeFile(outputPath, file.content, 'utf8');\n\n    if (file.executable === true) {\n      await fs.chmod(outputPath, 0o755);\n    }\n\n    nextFiles.add(file.path);\n  }\n\n  const staleFiles = new Set([...previousFiles].filter((filePath) => !nextFiles.has(filePath)));\n  const removed = await removeFiles(args.projectPath, staleFiles);\n\n  await writeInfraLedger(args.projectPath, {\n    schemaVersion: 1,\n    generatedAt: new Date().toISOString(),\n    target: generated.meta.target,\n    files: [...nextFiles].sort(),\n    warnings: combinedWarnings,\n  });\n\n  return {\n    generated: generated.files.length,\n    removed,\n    warnings: combinedWarnings,\n  };\n}\n\nexport async function resolveProjectInfrastructureTarget(args: {\n  readonly manifest: AppManifest;\n  readonly projectPath: string;\n}): Promise<string | null> {\n  const manifestTarget = args.manifest.infra.deployment?.target;\n  if (manifestTarget !== undefined) {\n    return manifestTarget;\n  }\n\n  const ledger = await readInfraLedger(args.projectPath);\n  return ledger?.target ?? null;\n}\n\nexport function resolveProjectFile(projectPath: string, filePath: string): string {\n  const rootPath = path.resolve(projectPath);\n  const resolvedPath = path.resolve(rootPath, filePath);\n  const relativePath = path.relative(rootPath, resolvedPath);\n\n  if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {\n    throw new Error(`Invalid infra output path outside project root: ${filePath}`);\n  }\n\n  return resolvedPath;\n}\n\nasync function readInfraLedger(projectPath: string): Promise<InfraLedger | null> {\n  const ledgerPath = path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH);\n\n  try {\n    const rawLedger = await fs.readFile(ledgerPath, 'utf8');\n    const parsedLedger: unknown = JSON.parse(rawLedger);\n    return isInfraLedger(parsedLedger) ? parsedLedger : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function writeInfraLedger(projectPath: string, ledger: InfraLedger): Promise<void> {\n  const ledgerPath = path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH);\n  await fs.mkdir(path.dirname(ledgerPath), { recursive: true });\n  await fs.writeFile(ledgerPath, `${JSON.stringify(ledger, null, 2)}\\n`, 'utf8');\n}\n\nasync function removeInfraLedger(projectPath: string): Promise<void> {\n  await fs.rm(path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH), { force: true });\n}\n\nasync function removeFiles(projectPath: string, files: ReadonlySet<string>): Promise<number> {\n  let removedFiles = 0;\n\n  for (const filePath of files) {\n    await fs.rm(resolveProjectFile(projectPath, filePath), { force: true });\n    removedFiles += 1;\n  }\n\n  return removedFiles;\n}\n\nfunction isInfraLedger(value: unknown): value is InfraLedger {\n  return (\n    isRecord(value) &&\n    value.schemaVersion === 1 &&\n    typeof value.generatedAt === 'string' &&\n    typeof value.target === 'string' &&\n    Array.isArray(value.files) &&\n    value.files.every((filePath) => typeof filePath === 'string') &&\n    Array.isArray(value.warnings) &&\n    value.warnings.every((warning) => typeof warning === 'string')\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null;\n}\n\nfunction uniqueStrings(values: readonly string[]): readonly string[] {\n  return [...new Set(values)];\n}\n"]}
+{"version":3,"file":"projectInfrastructure.js","sourceRoot":"","sources":["../src/projectInfrastructure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAC7D,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AA+BnC,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAK/C;IACC,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACL,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE;gBACP,MAAM,EAAE,iEAAiE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAE3D,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACnE,MAAM,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,OAAO;YACL,SAAS,EAAE,CAAC;YACZ,OAAO;YACP,QAAQ,EAAE,eAAe;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,0BAA0B,IAAI,sBAAsB,CAAC,CAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,EACnB;QACE,aAAa,EAAE,IAAI,CAAC,SAAS;QAC7B,WAAW,EAAE,IAAI,CAAC,QAAQ;KAC3B,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,aAAa,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEhE,MAAM,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE;QACvC,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM;QAC7B,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAC5B,QAAQ,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO;QACP,QAAQ,EAAE,gBAAgB;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAIlD;IACC,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzC,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE;gBACP,MAAM,EAAE,iEAAiE;aAC1E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO;QACL,SAAS,EAAE,MAAM,KAAK,IAAI;QAC1B,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI;QACxC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;QAC3D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,IAAI,IAAI;QACxE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;QACvC,QAAQ,EAAE,aAAa,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,IAGxD;IACC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC;IAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,QAAgB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE3D,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,WAAmB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,YAAY,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB,EAAE,MAAmB;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,WAAmB,EAAE,KAA0B;IACxE,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,YAAY,IAAI,CAAC,CAAC;IACpB,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;QAC7D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,MAAyB;IAC9C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import type { AppManifest } from '@ankhorage/contracts';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport { generateInfrastructure } from './index.js';\nimport { validateInfraSupport } from './infraValidation.js';\n\nconst INFRA_LEDGER_RELATIVE_PATH = '.ankh/infra-ledger.json';\nconst STUDIO_PROJECT_ID = 'studio';\n\ninterface InfraLedger {\n  readonly schemaVersion: 1;\n  readonly generatedAt: string;\n  readonly target: string;\n  readonly files: readonly string[];\n  readonly warnings: readonly string[];\n}\n\nexport interface InfraSyncResult {\n  readonly generated: number;\n  readonly removed: number;\n  readonly warnings: readonly string[];\n  readonly skipped?: {\n    readonly reason: string;\n  };\n}\n\nexport interface InfraProjectInspection {\n  readonly generated: boolean;\n  readonly generatedAt: string | null;\n  readonly hasDeployment: boolean;\n  readonly target: string | null;\n  readonly trackedFiles: number;\n  readonly warnings: readonly string[];\n  readonly skipped?: {\n    readonly reason: string;\n  };\n}\n\nexport async function syncProjectInfrastructure(args: {\n  readonly generateInfrastructureImpl?: typeof generateInfrastructure;\n  readonly manifest: AppManifest;\n  readonly projectId: string;\n  readonly projectPath: string;\n}): Promise<InfraSyncResult> {\n  const supportWarnings = validateInfraSupport(args.manifest.infra);\n\n  if (args.projectId === STUDIO_PROJECT_ID) {\n    return {\n      generated: 0,\n      removed: 0,\n      warnings: supportWarnings,\n      skipped: {\n        reason: 'apps/studio is the dashboard and is not a generated app target.',\n      },\n    };\n  }\n\n  const previousLedger = await readInfraLedger(args.projectPath);\n  const previousFiles = new Set(previousLedger?.files ?? []);\n\n  if (args.manifest.infra.deployment === undefined) {\n    const removed = await removeFiles(args.projectPath, previousFiles);\n    await removeInfraLedger(args.projectPath);\n    return {\n      generated: 0,\n      removed,\n      warnings: supportWarnings,\n    };\n  }\n\n  const generated = (args.generateInfrastructureImpl ?? generateInfrastructure)(\n    args.manifest.infra,\n    {\n      namespaceHint: args.projectId,\n      appManifest: args.manifest,\n    },\n  );\n  const combinedWarnings = uniqueStrings([...supportWarnings, ...generated.warnings]);\n  const nextFiles = new Set<string>();\n\n  for (const file of generated.files) {\n    const outputPath = resolveProjectFile(args.projectPath, file.path);\n    await fs.mkdir(path.dirname(outputPath), { recursive: true });\n    await fs.writeFile(outputPath, file.content, 'utf8');\n\n    if (file.executable === true) {\n      await fs.chmod(outputPath, 0o755);\n    }\n\n    nextFiles.add(file.path);\n  }\n\n  const staleFiles = new Set([...previousFiles].filter((filePath) => !nextFiles.has(filePath)));\n  const removed = await removeFiles(args.projectPath, staleFiles);\n\n  await writeInfraLedger(args.projectPath, {\n    schemaVersion: 1,\n    generatedAt: new Date().toISOString(),\n    target: generated.meta.target,\n    files: [...nextFiles].sort(),\n    warnings: combinedWarnings,\n  });\n\n  return {\n    generated: generated.files.length,\n    removed,\n    warnings: combinedWarnings,\n  };\n}\n\nexport async function inspectProjectInfrastructure(args: {\n  readonly manifest: AppManifest;\n  readonly projectId: string;\n  readonly projectPath: string;\n}): Promise<InfraProjectInspection> {\n  const supportWarnings = validateInfraSupport(args.manifest.infra);\n\n  if (args.projectId === STUDIO_PROJECT_ID) {\n    return {\n      generated: false,\n      generatedAt: null,\n      hasDeployment: false,\n      target: null,\n      trackedFiles: 0,\n      warnings: supportWarnings,\n      skipped: {\n        reason: 'apps/studio is the dashboard and is not a generated app target.',\n      },\n    };\n  }\n\n  const ledger = await readInfraLedger(args.projectPath);\n  return {\n    generated: ledger !== null,\n    generatedAt: ledger?.generatedAt ?? null,\n    hasDeployment: args.manifest.infra.deployment !== undefined,\n    target: args.manifest.infra.deployment?.target ?? ledger?.target ?? null,\n    trackedFiles: ledger?.files.length ?? 0,\n    warnings: uniqueStrings([...supportWarnings, ...(ledger?.warnings ?? [])]),\n  };\n}\n\nexport async function resolveProjectInfrastructureTarget(args: {\n  readonly manifest: AppManifest;\n  readonly projectPath: string;\n}): Promise<string | null> {\n  const manifestTarget = args.manifest.infra.deployment?.target;\n  if (manifestTarget !== undefined) {\n    return manifestTarget;\n  }\n\n  const ledger = await readInfraLedger(args.projectPath);\n  return ledger?.target ?? null;\n}\n\nexport function resolveProjectFile(projectPath: string, filePath: string): string {\n  const rootPath = path.resolve(projectPath);\n  const resolvedPath = path.resolve(rootPath, filePath);\n  const relativePath = path.relative(rootPath, resolvedPath);\n\n  if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {\n    throw new Error(`Invalid infra output path outside project root: ${filePath}`);\n  }\n\n  return resolvedPath;\n}\n\nasync function readInfraLedger(projectPath: string): Promise<InfraLedger | null> {\n  const ledgerPath = path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH);\n\n  try {\n    const rawLedger = await fs.readFile(ledgerPath, 'utf8');\n    const parsedLedger: unknown = JSON.parse(rawLedger);\n    return isInfraLedger(parsedLedger) ? parsedLedger : null;\n  } catch {\n    return null;\n  }\n}\n\nasync function writeInfraLedger(projectPath: string, ledger: InfraLedger): Promise<void> {\n  const ledgerPath = path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH);\n  await fs.mkdir(path.dirname(ledgerPath), { recursive: true });\n  await fs.writeFile(ledgerPath, `${JSON.stringify(ledger, null, 2)}\\n`, 'utf8');\n}\n\nasync function removeInfraLedger(projectPath: string): Promise<void> {\n  await fs.rm(path.join(projectPath, INFRA_LEDGER_RELATIVE_PATH), { force: true });\n}\n\nasync function removeFiles(projectPath: string, files: ReadonlySet<string>): Promise<number> {\n  let removedFiles = 0;\n\n  for (const filePath of files) {\n    await fs.rm(resolveProjectFile(projectPath, filePath), { force: true });\n    removedFiles += 1;\n  }\n\n  return removedFiles;\n}\n\nfunction isInfraLedger(value: unknown): value is InfraLedger {\n  return (\n    isRecord(value) &&\n    value.schemaVersion === 1 &&\n    typeof value.generatedAt === 'string' &&\n    typeof value.target === 'string' &&\n    Array.isArray(value.files) &&\n    value.files.every((filePath) => typeof filePath === 'string') &&\n    Array.isArray(value.warnings) &&\n    value.warnings.every((warning) => typeof warning === 'string')\n  );\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null;\n}\n\nfunction uniqueStrings(values: readonly string[]): readonly string[] {\n  return [...new Set(values)];\n}\n"]}

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEnG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB;CAOF;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAe7B;AAED,wBAAsB,uCAAuC,CAAC,IAAI,EAAE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBhC;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAET"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEnG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB;CAOF;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAe7B;AAED,wBAAsB,uCAAuC,CAAC,IAAI,EAAE;IAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBhC;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAET"}

package/dist/runtime.js

@@ -1,6 +1,7 @@
 import { spawn } from 'child_process';
 import { promises as fs } from 'fs';
 import path from 'path';
+import { readProjectInfrastructureEnvironment } from './projectEnvironment.js';
 export class InfraScriptExecutionError extends Error {
     exitCode;
     stderr;
@@ -27,14 +28,14 @@ export async function runProjectInfrastructureLifecycle(args) {
     });
 }
 export async function resolveProjectInfrastructurePortForward(args) {
-    const infraRoot = path.join(args.projectPath, 'infra', args.target);
-    const envPath = path.join(infraRoot, '.env');
-    const fallbackEnvPath = path.join(infraRoot, '.env.example');
-    const sourcePath = (await pathExists(envPath)) ? envPath : fallbackEnvPath;
-    const env = await readSimpleEnvMap(sourcePath);
-    const localPort = parsePositivePort(env.get('APP_PORT_FORWARD_LOCAL_PORT'));
+    const environment = await readProjectInfrastructureEnvironment({
+        keys: ['APP_PORT_FORWARD_LOCAL_PORT'],
+        projectPath: args.projectPath,
+        target: args.target,
+    });
+    const localPort = parsePositivePort(environment.APP_PORT_FORWARD_LOCAL_PORT);
     if (localPort === null) {
-        throw new Error(`Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT in ${sourcePath}. Regenerate infrastructure first.`);
+        throw new Error('Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT. Regenerate infrastructure first.');
     }
     return {
         localPort,
@@ -108,25 +109,6 @@ function createExitError(scriptPath, exitCode, stdout, stderr) {
         stdout,
     });
 }
-async function readSimpleEnvMap(filePath) {
-    const out = new Map();
-    const content = await fs.readFile(filePath, 'utf8');
-    for (const line of content.split(/\r?\n/u)) {
-        const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith('#'))
-            continue;
-        const separator = trimmed.indexOf('=');
-        if (separator <= 0)
-            continue;
-        const key = trimmed.slice(0, separator).trim();
-        const value = trimmed
-            .slice(separator + 1)
-            .trim()
-            .replace(/^['"]|['"]$/g, '');
-        out.set(key, value);
-    }
-    return out;
-}
 function parsePositivePort(value) {
     if (value === undefined)
         return null;

package/dist/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAgBxB,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,QAAQ,CAAgB;IACxB,MAAM,CAAS;IACf,MAAM,CAAS;IAExB,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IASvD;IACC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,qCAAqC,IAAI,CAAC,SAAS,UAAU,CACnG,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,IAG7D;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IAC3E,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAE5E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,0EAA0E,UAAU,oCAAoC,CACzH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,EAAE,oBAAoB,SAAS,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAM3C;IACC,MAAM,iCAAiC,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;QACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAI7C;IACC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,wBAAwB,CAAC;QAClC;YACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAM7B;IACC,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3D,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAClC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5B,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CACjE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,KAAY,EACZ,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,iCAAiC,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;QACzE,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,UAAkB,EAClB,QAAuB,EACvB,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ;QACR,OAAO,EAAE,iBAAiB,UAAU,sBAAsB,QAAQ,IAAI,SAAS,GAAG;QAClF,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO;aAClB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;aACpB,IAAI,EAAE;aACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraCommandContext } from './commandContext.js';\n\nexport type InfraLifecycleScript = 'destroy' | 'down' | 'port-forward' | 'reset' | 'status' | 'up';\n\nexport interface InfraScriptOutput {\n  readonly stderr: string;\n  readonly stdout: string;\n}\n\nexport interface InfraPortForwardInfo {\n  readonly localPort: number;\n  readonly url: string;\n}\n\nexport class InfraScriptExecutionError extends Error {\n  readonly exitCode: number | null;\n  readonly stderr: string;\n  readonly stdout: string;\n\n  constructor(args: {\n    readonly exitCode: number | null;\n    readonly message: string;\n    readonly stderr: string;\n    readonly stdout: string;\n  }) {\n    super(args.message);\n    this.name = 'InfraScriptExecutionError';\n    this.exitCode = args.exitCode;\n    this.stderr = args.stderr;\n    this.stdout = args.stdout;\n  }\n}\n\nexport async function runProjectInfrastructureLifecycle(args: {\n  readonly args?: readonly string[];\n  readonly env?: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<InfraScriptOutput> {\n  const scriptPath = resolveProjectInfraScriptPath(args);\n  if (!(await pathExists(scriptPath))) {\n    throw new Error(\n      `Infra script not found: ${scriptPath}. Run infra generate for project '${args.projectId}' first.`,\n    );\n  }\n\n  return runShellScript({\n    args: args.args ?? [],\n    env: args.env ?? process.env,\n    onStderr: args.onStderr,\n    onStdout: args.onStdout,\n    scriptPath,\n  });\n}\n\nexport async function resolveProjectInfrastructurePortForward(args: {\n  readonly projectPath: string;\n  readonly target: string;\n}): Promise<InfraPortForwardInfo> {\n  const infraRoot = path.join(args.projectPath, 'infra', args.target);\n  const envPath = path.join(infraRoot, '.env');\n  const fallbackEnvPath = path.join(infraRoot, '.env.example');\n  const sourcePath = (await pathExists(envPath)) ? envPath : fallbackEnvPath;\n  const env = await readSimpleEnvMap(sourcePath);\n  const localPort = parsePositivePort(env.get('APP_PORT_FORWARD_LOCAL_PORT'));\n\n  if (localPort === null) {\n    throw new Error(\n      `Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT in ${sourcePath}. Regenerate infrastructure first.`,\n    );\n  }\n\n  return {\n    localPort,\n    url: `http://127.0.0.1:${localPort}`,\n  };\n}\n\nexport async function runProjectInfraScript(args: {\n  readonly context: InfraCommandContext;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<void> {\n  await runProjectInfrastructureLifecycle({\n    env: args.context.env,\n    onStderr: (chunk) => args.context.writeStderr(chunk),\n    onStdout: (chunk) => args.context.writeStdout(chunk),\n    projectId: args.projectId,\n    projectPath: args.projectPath,\n    script: args.script,\n    target: args.target,\n  });\n}\n\nexport function resolveProjectInfraScriptPath(args: {\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): string {\n  return path.join(args.projectPath, getInfraScriptsDirectory(args.target), `${args.script}.sh`);\n}\n\nfunction getInfraScriptsDirectory(target: string): string {\n  switch (target) {\n    case 'minikube':\n      return 'infra/minikube/scripts';\n    default:\n      throw new Error(`Unsupported deployment target for infra scripts: ${target}`);\n  }\n}\n\nasync function runShellScript(args: {\n  readonly args: readonly string[];\n  readonly env: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly scriptPath: string;\n}): Promise<InfraScriptOutput> {\n  return new Promise<InfraScriptOutput>((resolve, reject) => {\n    const child = spawn('bash', [args.scriptPath, ...args.args], {\n      cwd: path.dirname(args.scriptPath),\n      env: { ...args.env },\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n\n    let stdout = '';\n    let stderr = '';\n    child.stdout.setEncoding('utf8');\n    child.stderr.setEncoding('utf8');\n    child.stdout.on('data', (chunk: string) => {\n      stdout += chunk;\n      args.onStdout?.(chunk);\n    });\n    child.stderr.on('data', (chunk: string) => {\n      stderr += chunk;\n      args.onStderr?.(chunk);\n    });\n    child.once('error', (error) =>\n      reject(createStartError(args.scriptPath, error, stdout, stderr)),\n    );\n    child.once('close', (exitCode) => {\n      if (exitCode === 0) {\n        resolve({ stderr, stdout });\n        return;\n      }\n      reject(createExitError(args.scriptPath, exitCode, stdout, stderr));\n    });\n  });\n}\n\nfunction createStartError(\n  scriptPath: string,\n  error: Error,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode: null,\n    message: `Failed to start infra script '${scriptPath}': ${error.message}`,\n    stderr,\n    stdout,\n  });\n}\n\nfunction createExitError(\n  scriptPath: string,\n  exitCode: number | null,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode,\n    message: `Infra script '${scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,\n    stderr,\n    stdout,\n  });\n}\n\nasync function readSimpleEnvMap(filePath: string): Promise<Map<string, string>> {\n  const out = new Map<string, string>();\n  const content = await fs.readFile(filePath, 'utf8');\n  for (const line of content.split(/\\r?\\n/u)) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const separator = trimmed.indexOf('=');\n    if (separator <= 0) continue;\n    const key = trimmed.slice(0, separator).trim();\n    const value = trimmed\n      .slice(separator + 1)\n      .trim()\n      .replace(/^['\"]|['\"]$/g, '');\n    out.set(key, value);\n  }\n  return out;\n}\n\nfunction parsePositivePort(value: string | undefined): number | null {\n  if (value === undefined) return null;\n  const parsed = Number.parseInt(value.trim(), 10);\n  return Number.isInteger(parsed) && parsed >= 1 && parsed <= 65_535 ? parsed : null;\n}\n\nasync function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,oCAAoC,EAAE,MAAM,yBAAyB,CAAC;AAc/E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,QAAQ,CAAgB;IACxB,MAAM,CAAS;IACf,MAAM,CAAS;IAExB,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IASvD;IACC,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,2BAA2B,UAAU,qCAAqC,IAAI,CAAC,SAAS,UAAU,CACnG,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,IAG7D;IACC,MAAM,WAAW,GAAG,MAAM,oCAAoC,CAAC;QAC7D,IAAI,EAAE,CAAC,6BAA6B,CAAC;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,iBAAiB,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAE7E,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,EAAE,oBAAoB,SAAS,EAAE;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAM3C;IACC,MAAM,iCAAiC,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;QACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;QACpD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAI7C;IACC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,wBAAwB,CAAC;QAClC;YACE,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAM7B;IACC,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3D,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAClC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5B,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CACjE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,UAAkB,EAClB,KAAY,EACZ,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,iCAAiC,UAAU,MAAM,KAAK,CAAC,OAAO,EAAE;QACzE,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,UAAkB,EAClB,QAAuB,EACvB,MAAc,EACd,MAAc;IAEd,OAAO,IAAI,yBAAyB,CAAC;QACnC,QAAQ;QACR,OAAO,EAAE,iBAAiB,UAAU,sBAAsB,QAAQ,IAAI,SAAS,GAAG;QAClF,MAAM;QACN,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport { promises as fs } from 'fs';\nimport path from 'path';\n\nimport type { InfraCommandContext } from './commandContext.js';\nimport { readProjectInfrastructureEnvironment } from './projectEnvironment.js';\n\nexport type InfraLifecycleScript = 'destroy' | 'down' | 'port-forward' | 'reset' | 'status' | 'up';\n\nexport interface InfraScriptOutput {\n  readonly stderr: string;\n  readonly stdout: string;\n}\n\nexport interface InfraPortForwardInfo {\n  readonly localPort: number;\n  readonly url: string;\n}\n\nexport class InfraScriptExecutionError extends Error {\n  readonly exitCode: number | null;\n  readonly stderr: string;\n  readonly stdout: string;\n\n  constructor(args: {\n    readonly exitCode: number | null;\n    readonly message: string;\n    readonly stderr: string;\n    readonly stdout: string;\n  }) {\n    super(args.message);\n    this.name = 'InfraScriptExecutionError';\n    this.exitCode = args.exitCode;\n    this.stderr = args.stderr;\n    this.stdout = args.stdout;\n  }\n}\n\nexport async function runProjectInfrastructureLifecycle(args: {\n  readonly args?: readonly string[];\n  readonly env?: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<InfraScriptOutput> {\n  const scriptPath = resolveProjectInfraScriptPath(args);\n  if (!(await pathExists(scriptPath))) {\n    throw new Error(\n      `Infra script not found: ${scriptPath}. Run infra generate for project '${args.projectId}' first.`,\n    );\n  }\n\n  return runShellScript({\n    args: args.args ?? [],\n    env: args.env ?? process.env,\n    onStderr: args.onStderr,\n    onStdout: args.onStdout,\n    scriptPath,\n  });\n}\n\nexport async function resolveProjectInfrastructurePortForward(args: {\n  readonly projectPath: string;\n  readonly target: string;\n}): Promise<InfraPortForwardInfo> {\n  const environment = await readProjectInfrastructureEnvironment({\n    keys: ['APP_PORT_FORWARD_LOCAL_PORT'],\n    projectPath: args.projectPath,\n    target: args.target,\n  });\n  const localPort = parsePositivePort(environment.APP_PORT_FORWARD_LOCAL_PORT);\n\n  if (localPort === null) {\n    throw new Error(\n      'Generated Infra did not provide a valid APP_PORT_FORWARD_LOCAL_PORT. Regenerate infrastructure first.',\n    );\n  }\n\n  return {\n    localPort,\n    url: `http://127.0.0.1:${localPort}`,\n  };\n}\n\nexport async function runProjectInfraScript(args: {\n  readonly context: InfraCommandContext;\n  readonly projectId: string;\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): Promise<void> {\n  await runProjectInfrastructureLifecycle({\n    env: args.context.env,\n    onStderr: (chunk) => args.context.writeStderr(chunk),\n    onStdout: (chunk) => args.context.writeStdout(chunk),\n    projectId: args.projectId,\n    projectPath: args.projectPath,\n    script: args.script,\n    target: args.target,\n  });\n}\n\nexport function resolveProjectInfraScriptPath(args: {\n  readonly projectPath: string;\n  readonly script: InfraLifecycleScript;\n  readonly target: string;\n}): string {\n  return path.join(args.projectPath, getInfraScriptsDirectory(args.target), `${args.script}.sh`);\n}\n\nfunction getInfraScriptsDirectory(target: string): string {\n  switch (target) {\n    case 'minikube':\n      return 'infra/minikube/scripts';\n    default:\n      throw new Error(`Unsupported deployment target for infra scripts: ${target}`);\n  }\n}\n\nasync function runShellScript(args: {\n  readonly args: readonly string[];\n  readonly env: Readonly<Record<string, string | undefined>>;\n  readonly onStderr?: (chunk: string) => void;\n  readonly onStdout?: (chunk: string) => void;\n  readonly scriptPath: string;\n}): Promise<InfraScriptOutput> {\n  return new Promise<InfraScriptOutput>((resolve, reject) => {\n    const child = spawn('bash', [args.scriptPath, ...args.args], {\n      cwd: path.dirname(args.scriptPath),\n      env: { ...args.env },\n      stdio: ['ignore', 'pipe', 'pipe'],\n    });\n\n    let stdout = '';\n    let stderr = '';\n    child.stdout.setEncoding('utf8');\n    child.stderr.setEncoding('utf8');\n    child.stdout.on('data', (chunk: string) => {\n      stdout += chunk;\n      args.onStdout?.(chunk);\n    });\n    child.stderr.on('data', (chunk: string) => {\n      stderr += chunk;\n      args.onStderr?.(chunk);\n    });\n    child.once('error', (error) =>\n      reject(createStartError(args.scriptPath, error, stdout, stderr)),\n    );\n    child.once('close', (exitCode) => {\n      if (exitCode === 0) {\n        resolve({ stderr, stdout });\n        return;\n      }\n      reject(createExitError(args.scriptPath, exitCode, stdout, stderr));\n    });\n  });\n}\n\nfunction createStartError(\n  scriptPath: string,\n  error: Error,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode: null,\n    message: `Failed to start infra script '${scriptPath}': ${error.message}`,\n    stderr,\n    stdout,\n  });\n}\n\nfunction createExitError(\n  scriptPath: string,\n  exitCode: number | null,\n  stdout: string,\n  stderr: string,\n): InfraScriptExecutionError {\n  return new InfraScriptExecutionError({\n    exitCode,\n    message: `Infra script '${scriptPath}' exited with code ${exitCode ?? 'unknown'}.`,\n    stderr,\n    stdout,\n  });\n}\n\nfunction parsePositivePort(value: string | undefined): number | null {\n  if (value === undefined) return null;\n  const parsed = Number.parseInt(value.trim(), 10);\n  return Number.isInteger(parsed) && parsed >= 1 && parsed <= 65_535 ? parsed : null;\n}\n\nasync function pathExists(filePath: string): Promise<boolean> {\n  try {\n    await fs.access(filePath);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/types.d.ts

@@ -30,7 +30,7 @@ export interface InfrastructureGenerationOptions {
     /**
      * Optional app-level context used by provider/engine-specific generators.
      */
-    readonly appManifest?: Pick<AppManifest, 'generatedApis' | 'infra' | 'metadata' | 'navigator' | 'screens' | 'settings'>;
+    readonly appManifest?: Pick<AppManifest, 'deploy' | 'generatedApis' | 'infra' | 'metadata' | 'navigator' | 'screens' | 'settings'>;
 }
 export interface InfraGenerationInput {
     /**

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CACzB,WAAW,EACX,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAC9E,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,+BAA+B,CAAC;CACpD;AAED,MAAM,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AACnE,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,oBAAoB,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;AAE3F,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CACzB,WAAW,EACX,QAAQ,GAAG,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CACzF,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,+BAA+B,CAAC;CACpD;AAED,MAAM,MAAM,sBAAsB,GAAG,+BAA+B,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,8BAA8B,CAAC;AACnE,MAAM,MAAM,aAAa,GAAG,2BAA2B,CAAC;AACxD,MAAM,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,oBAAoB,GAAG,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC;AAE3F,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C,CAAC"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AppManifest, InfraManifest } from '@ankhorage/contracts';\n\nexport interface GeneratedInfrastructureFile {\n  /**\n   * Path relative to the target app root.\n   */\n  readonly path: string;\n  readonly content: string;\n  readonly executable?: boolean;\n}\n\nexport interface GeneratedPackageDependency {\n  readonly name: string;\n  readonly version: string;\n  readonly reason: string;\n}\n\nexport interface InfrastructureGenerationMeta {\n  readonly target: NonNullable<InfraManifest['deployment']>['target'];\n  readonly providers: readonly string[];\n}\n\nexport interface InfrastructureGenerationResult {\n  readonly files: readonly GeneratedInfrastructureFile[];\n  readonly warnings: readonly string[];\n  readonly meta: InfrastructureGenerationMeta;\n  readonly dependencies: readonly GeneratedPackageDependency[];\n}\n\nexport interface InfrastructureGenerationOptions {\n  /**\n   * Optional namespace hint from caller context, such as app slug or project id.\n   */\n  readonly namespaceHint?: string;\n  /**\n   * Optional app-level context used by provider/engine-specific generators.\n   */\n  readonly appManifest?: Pick<\n    AppManifest,\n    'generatedApis' | 'infra' | 'metadata' | 'navigator' | 'screens' | 'settings'\n  >;\n}\n\nexport interface InfraGenerationInput {\n  /**\n   * Infra manifest section from an app manifest.\n   */\n  readonly manifest: InfraManifestInput;\n  /**\n   * Optional root used by callers that want to keep output intent alongside generation.\n   * The generator itself still returns relative file paths and does not write to disk.\n   */\n  readonly outputRoot?: string;\n  readonly options?: InfrastructureGenerationOptions;\n}\n\nexport type InfraGenerationOptions = InfrastructureGenerationOptions;\nexport type InfraGenerationResult = InfrastructureGenerationResult;\nexport type GeneratedFile = GeneratedInfrastructureFile;\nexport type PackageDependency = GeneratedPackageDependency;\n\nexport interface InfraDiagnostic {\n  readonly severity: 'warning';\n  readonly message: string;\n}\n\ntype InfraStorageProvider = NonNullable<InfraManifest['storage']>['provider'] | 'supabase';\n\ninterface InfraStorageSpecInput {\n  readonly provider: InfraStorageProvider;\n  readonly buckets: readonly string[];\n}\n\n/**\n * Infra-local manifest input type.\n *\n * This is intentionally broader than `@ankhorage/contracts` to allow adapters to support\n * additional providers before the shared contracts package officially includes them.\n */\nexport type InfraManifestInput = Omit<InfraManifest, 'storage'> & {\n  readonly storage?: InfraStorageSpecInput;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { AppManifest, InfraManifest } from '@ankhorage/contracts';\n\nexport interface GeneratedInfrastructureFile {\n  /**\n   * Path relative to the target app root.\n   */\n  readonly path: string;\n  readonly content: string;\n  readonly executable?: boolean;\n}\n\nexport interface GeneratedPackageDependency {\n  readonly name: string;\n  readonly version: string;\n  readonly reason: string;\n}\n\nexport interface InfrastructureGenerationMeta {\n  readonly target: NonNullable<InfraManifest['deployment']>['target'];\n  readonly providers: readonly string[];\n}\n\nexport interface InfrastructureGenerationResult {\n  readonly files: readonly GeneratedInfrastructureFile[];\n  readonly warnings: readonly string[];\n  readonly meta: InfrastructureGenerationMeta;\n  readonly dependencies: readonly GeneratedPackageDependency[];\n}\n\nexport interface InfrastructureGenerationOptions {\n  /**\n   * Optional namespace hint from caller context, such as app slug or project id.\n   */\n  readonly namespaceHint?: string;\n  /**\n   * Optional app-level context used by provider/engine-specific generators.\n   */\n  readonly appManifest?: Pick<\n    AppManifest,\n    'deploy' | 'generatedApis' | 'infra' | 'metadata' | 'navigator' | 'screens' | 'settings'\n  >;\n}\n\nexport interface InfraGenerationInput {\n  /**\n   * Infra manifest section from an app manifest.\n   */\n  readonly manifest: InfraManifestInput;\n  /**\n   * Optional root used by callers that want to keep output intent alongside generation.\n   * The generator itself still returns relative file paths and does not write to disk.\n   */\n  readonly outputRoot?: string;\n  readonly options?: InfrastructureGenerationOptions;\n}\n\nexport type InfraGenerationOptions = InfrastructureGenerationOptions;\nexport type InfraGenerationResult = InfrastructureGenerationResult;\nexport type GeneratedFile = GeneratedInfrastructureFile;\nexport type PackageDependency = GeneratedPackageDependency;\n\nexport interface InfraDiagnostic {\n  readonly severity: 'warning';\n  readonly message: string;\n}\n\ntype InfraStorageProvider = NonNullable<InfraManifest['storage']>['provider'] | 'supabase';\n\ninterface InfraStorageSpecInput {\n  readonly provider: InfraStorageProvider;\n  readonly buckets: readonly string[];\n}\n\n/**\n * Infra-local manifest input type.\n *\n * This is intentionally broader than `@ankhorage/contracts` to allow adapters to support\n * additional providers before the shared contracts package officially includes them.\n */\nexport type InfraManifestInput = Omit<InfraManifest, 'storage'> & {\n  readonly storage?: InfraStorageSpecInput;\n};\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ankhorage/infra",
   "type": "module",
-  "version": "3.1.1",
+  "version": "3.3.0",
   "description": "Project-aware infrastructure generation library and executable Ankh provider for Ankhorage.",
   "homepage": "https://github.com/ankhorage/infra#readme",
   "bugs": {
@@ -35,7 +35,7 @@
     "openapi"
   ],
   "dependencies": {
-    "@ankhorage/contracts": "^7.2.0",
+    "@ankhorage/contracts": "^7.7.0",
     "@ankhorage/supabase-vault": "^0.2.4"
   },
   "files": [

package/src/adapters/minikube/auth/index.ts

@@ -1,13 +1,14 @@
-import type { InfraManifestInput } from '../../../types';
+import type { InfraManifestInput, InfrastructureGenerationOptions } from '../../../types';
 import { emptyMinikubeArtifacts, type MinikubeAdapterArtifacts } from '../contracts';
-import { generateSupabaseOAuthRuntimeArtifacts } from './oauthRuntime';
 import { generateSupabaseAuthArtifacts } from './supabase';
+import { generateTargetAwareSupabaseOAuthRuntimeArtifacts } from './targetAwareOAuthRuntime';
 
 export function generateAuthProviderArtifacts(args: {
+  appManifest: InfrastructureGenerationOptions['appManifest'];
   manifest: InfraManifestInput;
   namespace: string;
 }): MinikubeAdapterArtifacts {
-  const { manifest, namespace } = args;
+  const { appManifest, manifest, namespace } = args;
   const { auth } = manifest;
 
   if (!auth) {
@@ -21,7 +22,10 @@ export function generateAuthProviderArtifacts(args: {
   }
 
   const providerArtifacts = generateSupabaseAuthArtifacts({ manifest, namespace });
-  const oauthArtifacts = generateSupabaseOAuthRuntimeArtifacts(manifest);
+  const oauthArtifacts = generateTargetAwareSupabaseOAuthRuntimeArtifacts({
+    appManifest,
+    manifest,
+  });
 
   return {
     files: [...providerArtifacts.files, ...oauthArtifacts.files],

package/src/adapters/minikube/auth/targetAwareOAuthRuntime.test.ts

@@ -0,0 +1,83 @@
+import type { InfraManifest } from '@ankhorage/contracts';
+import { describe, expect, test } from 'bun:test';
+
+import { createAppManifest } from '../../../testSupport';
+import { generateTargetAwareSupabaseOAuthRuntimeArtifacts } from './targetAwareOAuthRuntime';
+
+describe('target-aware Supabase OAuth runtime', () => {
+  test('removes the legacy native redirect environment source', () => {
+    const artifacts = generateTargetAwareSupabaseOAuthRuntimeArtifacts({
+      appManifest: undefined,
+      manifest: createOAuthManifest(),
+    });
+    const [lifecycle] = artifacts.providerLifecycle;
+    const command = lifecycle?.reconciliationCommands[0]?.command ?? '';
+
+    expect(command).toContain('http://127.0.0.1:*/auth/callback');
+    expect(command).toContain('http://localhost:*/auth/callback');
+    expect(command).not.toContain('OAUTH_NATIVE_REDIRECT_URLS');
+    expect(artifacts.warnings).toEqual([
+      'OAuth deploy.targets is missing; Infra keeps Web-local redirects only until canonical targets are persisted.',
+    ]);
+  });
+
+  test('emits only the enabled native callback for a native-only app', () => {
+    const appManifest = {
+      ...createAppManifest('native-oauth'),
+      deploy: {
+        targets: {
+          web: { enabled: false },
+          android: {
+            enabled: true,
+            package: 'com.ankh.native',
+            scheme: 'ankh-native',
+          },
+          ios: {
+            enabled: false,
+            bundleIdentifier: 'com.ankh.native',
+          },
+        },
+      },
+    };
+    const artifacts = generateTargetAwareSupabaseOAuthRuntimeArtifacts({
+      appManifest,
+      manifest: createOAuthManifest(),
+    });
+    const [lifecycle] = artifacts.providerLifecycle;
+    const command = lifecycle?.reconciliationCommands[0]?.command ?? '';
+    const status = lifecycle?.statusChecks[0]?.command ?? '';
+
+    expect(command).toContain("oauth_redirect_allow_list='ankh-native://auth/callback'");
+    expect(command).not.toContain('oauth_site_url');
+    expect(command).not.toContain('localhost:*');
+    expect(command).not.toContain('127.0.0.1:*');
+    expect(command).not.toContain('OAUTH_NATIVE_REDIRECT_URLS');
+    expect(status).toContain('app-callback: disabled (web target)');
+    expect(status).toContain('native-callbacks: ankh-native://auth/callback');
+    expect(artifacts.warnings).toEqual([]);
+  });
+});
+
+function createOAuthManifest(): InfraManifest {
+  return {
+    deployment: { target: 'minikube', monitoring: false },
+    auth: {
+      scope: 'global',
+      provider: 'supabase',
+      oauth: {
+        enabled: true,
+        callbackRoute: '/auth/callback',
+        providers: [
+          {
+            id: 'google',
+            enabled: true,
+            credentialsRef: 'auth/oauth/google',
+          },
+        ],
+      },
+    },
+    database: { provider: 'supabase', tier: 'dev' },
+    secretStore: { provider: 'supabase-vault' },
+    modules: [],
+  };
+}

package/src/adapters/minikube/auth/targetAwareOAuthRuntime.ts

@@ -0,0 +1,136 @@
+import { getLocalAuthRedirectPatterns, normalizeAuthCallbackRoute } from '../../../authRedirects';
+import { resolveAuthTargetRedirectModel } from '../../../authTargetRedirects';
+import type { InfraManifestInput, InfrastructureGenerationOptions } from '../../../types';
+import type { MinikubeAdapterArtifacts, MinikubeProviderLifecycle } from '../contracts';
+import { generateSupabaseOAuthRuntimeArtifacts } from './oauthRuntime';
+
+interface RedirectPolicy {
+  readonly callbackRoute: string;
+  readonly localPatterns: readonly string[];
+  readonly nativeRedirectUris: readonly string[];
+  readonly webEnabled: boolean;
+}
+
+export function generateTargetAwareSupabaseOAuthRuntimeArtifacts(args: {
+  readonly appManifest: InfrastructureGenerationOptions['appManifest'];
+  readonly manifest: InfraManifestInput;
+}): MinikubeAdapterArtifacts {
+  const baseArtifacts = generateSupabaseOAuthRuntimeArtifacts(args.manifest);
+  if (!baseArtifacts.providerLifecycle.some((lifecycle) => lifecycle.id === 'supabase-auth')) {
+    return baseArtifacts;
+  }
+
+  const callbackRoute = normalizeAuthCallbackRoute(args.manifest.auth?.oauth?.callbackRoute ?? '');
+  const targets = resolveAuthTargetRedirectModel({
+    callbackRoute,
+    targets: args.appManifest?.deploy?.targets,
+  });
+  const policy: RedirectPolicy = {
+    callbackRoute,
+    localPatterns: targets.webEnabled ? getLocalAuthRedirectPatterns(callbackRoute) : [],
+    nativeRedirectUris: targets.nativeRedirectUris,
+    webEnabled: targets.webEnabled,
+  };
+
+  return {
+    ...baseArtifacts,
+    files: baseArtifacts.files.map((file) =>
+      file.path === 'infra/minikube/auth/oauth-runtime.md'
+        ? { ...file, content: getTargetAwareGuide(policy) }
+        : file,
+    ),
+    providerLifecycle: baseArtifacts.providerLifecycle.map((lifecycle) =>
+      lifecycle.id === 'supabase-auth' ? applyRedirectPolicy(lifecycle, policy) : lifecycle,
+    ),
+    warnings: [...baseArtifacts.warnings, ...targets.warnings],
+  };
+}
+
+function applyRedirectPolicy(
+  lifecycle: MinikubeProviderLifecycle,
+  policy: RedirectPolicy,
+): MinikubeProviderLifecycle {
+  return {
+    ...lifecycle,
+    reconciliationCommands: lifecycle.reconciliationCommands.map((entry) => ({
+      ...entry,
+      command: rewriteReconciliationCommand(entry.command, policy),
+    })),
+    statusChecks: lifecycle.statusChecks.map((entry) => ({
+      ...entry,
+      command: getTargetAwareStatusCommand(policy),
+    })),
+  };
+}
+
+function rewriteReconciliationCommand(command: string, policy: RedirectPolicy): string {
+  const legacyPatterns = getLocalAuthRedirectPatterns(policy.callbackRoute).join(',');
+  const legacyPolicy = `oauth_redirect_allow_list="\${oauth_site_url},\${oauth_site_url}/\${oauth_callback_path},${legacyPatterns}"
+if [[ -n "\${OAUTH_NATIVE_REDIRECT_URLS:-}" ]]; then
+  oauth_redirect_allow_list="\${oauth_redirect_allow_list},\${OAUTH_NATIVE_REDIRECT_URLS}"
+fi`;
+  const staticRedirects = [...policy.localPatterns, ...policy.nativeRedirectUris].join(',');
+  const suffix = staticRedirects ? `,${staticRedirects}` : '';
+  const canonicalPolicy = policy.webEnabled
+    ? `oauth_redirect_allow_list="\${oauth_site_url},\${oauth_site_url}/\${oauth_callback_path}${suffix}"`
+    : `oauth_redirect_allow_list='${staticRedirects}'`;
+  let rewritten = replaceOnce(command, legacyPolicy, canonicalPolicy);
+
+  if (!policy.webEnabled) {
+    rewritten = replaceOnce(rewritten, 'oauth_site_url="${SITE_URL%/}"\n', '');
+  }
+
+  return rewritten;
+}
+
+function getTargetAwareStatusCommand(policy: RedirectPolicy): string {
+  const appCallback = policy.webEnabled
+    ? `if [[ -n "\${SITE_URL:-}" ]]; then
+  echo "- provider supabase-auth/app-callback: \${SITE_URL%/}/\${oauth_callback_path}"
+else
+  echo "- provider supabase-auth/app-callback: unavailable"
+fi`
+    : 'echo "- provider supabase-auth/app-callback: disabled (web target)"';
+  const localPatterns = policy.localPatterns.join(',') || 'none';
+  const nativeRedirects = policy.nativeRedirectUris.join(',') || 'none';
+
+  return `oauth_callback_route='${policy.callbackRoute}'
+oauth_callback_path="\${oauth_callback_route#/}"
+if [[ -n "\${API_EXTERNAL_URL:-}" ]]; then
+  echo "- provider supabase-auth/provider-callback: \${API_EXTERNAL_URL%/}/callback"
+else
+  echo "- provider supabase-auth/provider-callback: unavailable"
+fi
+${appCallback}
+echo "- provider supabase-auth/local-callback-patterns: ${localPatterns}"
+echo "- provider supabase-auth/native-callbacks: ${nativeRedirects}"`;
+}
+
+function getTargetAwareGuide(policy: RedirectPolicy): string {
+  const nativeRedirects = policy.nativeRedirectUris.length
+    ? policy.nativeRedirectUris.map((uri) => `- \`${uri}\``).join('\n')
+    : '- none';
+
+  return `# Supabase OAuth Runtime Reconciliation
+
+The provider callback remains project-owned. GoTrue-to-app redirects use the configured callback
+route \`${policy.callbackRoute}\` and are derived from \`AppManifest.deploy.targets\`.
+
+- Web target: ${policy.webEnabled ? 'enabled' : 'disabled'}
+- Native callbacks:
+${nativeRedirects}
+
+Local loopback patterns are emitted only for an enabled Web target. Native callbacks come only
+from enabled Android/iOS target schemes; no environment variable or slug-derived identity can add
+a native callback. Provider credential values remain sourced from trusted secret resolution.
+`;
+}
+
+function replaceOnce(value: string, search: string, replacement: string): string {
+  if (!value.includes(search)) {
+    throw new Error(
+      'Supabase OAuth redirect reconciliation template drifted from its canonical form.',
+    );
+  }
+  return value.replace(search, replacement);
+}

package/src/adapters/minikube/index.ts

@@ -33,7 +33,11 @@ export function generateMinikubeInfra(
   const appSlug = validateCanonicalAppSlug(options.appManifest?.metadata.slug);
   const namespace = APP_NAMESPACE;
 
-  const authArtifacts = generateAuthProviderArtifacts({ manifest, namespace });
+  const authArtifacts = generateAuthProviderArtifacts({
+    appManifest: options.appManifest,
+    manifest,
+    namespace,
+  });
   const authzArtifacts = generateAuthorizationArtifacts({
     manifest,
     namespace,

package/src/authTargetRedirects.test.ts

@@ -0,0 +1,62 @@
+import type { AppDeployTargets } from '@ankhorage/contracts/deploy';
+import { describe, expect, test } from 'bun:test';
+
+import { resolveAuthTargetRedirectModel } from './authTargetRedirects';
+
+describe('resolveAuthTargetRedirectModel', () => {
+  test('derives enabled native callbacks and deduplicates shared schemes', () => {
+    const targets: AppDeployTargets = {
+      web: { enabled: true },
+      android: {
+        enabled: true,
+        package: 'com.ankh.demo',
+        scheme: 'ankh-demo',
+      },
+      ios: {
+        enabled: true,
+        bundleIdentifier: 'com.ankh.demo',
+        scheme: 'ankh-demo',
+      },
+    };
+
+    expect(resolveAuthTargetRedirectModel({ callbackRoute: '/auth/callback', targets })).toEqual({
+      nativeRedirectUris: ['ankh-demo://auth/callback'],
+      warnings: [],
+      webEnabled: true,
+    });
+  });
+
+  test('omits disabled targets and warns instead of guessing missing native schemes', () => {
+    const targets: AppDeployTargets = {
+      web: { enabled: false },
+      android: {
+        enabled: false,
+        package: 'com.ankh.demo',
+      },
+      ios: {
+        enabled: true,
+        bundleIdentifier: 'com.ankh.demo',
+      },
+    };
+
+    const result = resolveAuthTargetRedirectModel({ callbackRoute: '/auth/callback', targets });
+
+    expect(result.nativeRedirectUris).toEqual([]);
+    expect(result.webEnabled).toBe(false);
+    expect(result.warnings).toEqual([
+      'OAuth ios target is enabled but deploy.targets.ios.scheme is missing; native callback omitted.',
+    ]);
+  });
+
+  test('keeps the pre-target manifest path Web-only and explicit', () => {
+    expect(
+      resolveAuthTargetRedirectModel({ callbackRoute: '/auth/callback', targets: undefined }),
+    ).toEqual({
+      nativeRedirectUris: [],
+      warnings: [
+        'OAuth deploy.targets is missing; Infra keeps Web-local redirects only until canonical targets are persisted.',
+      ],
+      webEnabled: true,
+    });
+  });
+});

package/src/authTargetRedirects.ts

@@ -0,0 +1,46 @@
+import type { AppDeployTargets } from '@ankhorage/contracts/deploy';
+
+interface AuthTargetRedirectModel {
+  readonly nativeRedirectUris: readonly string[];
+  readonly warnings: readonly string[];
+  readonly webEnabled: boolean;
+}
+
+export function resolveAuthTargetRedirectModel(args: {
+  readonly callbackRoute: string;
+  readonly targets: AppDeployTargets | undefined;
+}): AuthTargetRedirectModel {
+  if (args.targets === undefined) {
+    return {
+      nativeRedirectUris: [],
+      warnings: [
+        'OAuth deploy.targets is missing; Infra keeps Web-local redirects only until canonical targets are persisted.',
+      ],
+      webEnabled: true,
+    };
+  }
+
+  const callbackPath = args.callbackRoute.replace(/^\/+/u, '');
+  const nativeRedirectUris: string[] = [];
+  const warnings: string[] = [];
+
+  for (const [targetId, target] of [
+    ['android', args.targets.android],
+    ['ios', args.targets.ios],
+  ] as const) {
+    if (target?.enabled !== true) continue;
+    if (target.scheme === undefined) {
+      warnings.push(
+        `OAuth ${targetId} target is enabled but deploy.targets.${targetId}.scheme is missing; native callback omitted.`,
+      );
+      continue;
+    }
+    nativeRedirectUris.push(`${target.scheme}://${callbackPath}`);
+  }
+
+  return {
+    nativeRedirectUris: [...new Set(nativeRedirectUris)],
+    warnings,
+    webEnabled: args.targets.web?.enabled === true,
+  };
+}