@ankhorage/infra 4.1.10 → 5.0.0

package/dist/adapters/minikube/index.js

@@ -1,136 +0,0 @@
-import { validateInfraApiSupport } from '../../infraValidation';
-import { generateAuthProviderArtifacts } from './auth';
-import { generateAuthorizationArtifacts } from './authz';
-import { APP_NAMESPACE, generateMinikubeBaseArtifacts } from './base';
-import { generateSecretStoreArtifacts } from './secrets';
-import { generateStorageArtifacts } from './storage';
-const CANONICAL_PROJECT_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/;
-const BUILT_IN_NAMESPACES = new Set([APP_NAMESPACE, 'supabase']);
-export function generateMinikubeInfra(manifest, options = {}) {
-    if (manifest.deployment?.target !== 'minikube') {
-        throw new Error(`Minikube adapter only supports deployment target "minikube" (received "${manifest.deployment?.target ?? 'undefined'}").`);
-    }
-    if (manifest.database?.provider && manifest.database.provider !== 'supabase') {
-        throw new Error(`Unsupported database provider for minikube adapter: "${manifest.database.provider}". Only "supabase" is implemented.`);
-    }
-    const appSlug = validateCanonicalAppSlug(options.appManifest?.metadata.slug);
-    const appRuntimeEnabled = options.appManifest?.deploy === undefined ||
-        options.appManifest.deploy.targets.web?.enabled === true;
-    const namespace = APP_NAMESPACE;
-    const authArtifacts = generateAuthProviderArtifacts({
-        appManifest: options.appManifest,
-        manifest,
-        namespace,
-    });
-    const authzArtifacts = generateAuthorizationArtifacts({
-        manifest,
-        namespace,
-        appManifest: options.appManifest,
-    });
-    const storageArtifacts = generateStorageArtifacts({ manifest, namespace });
-    const secretStoreArtifacts = generateSecretStoreArtifacts({ manifest, namespace });
-    const extraResources = unique([
-        ...authArtifacts.resources,
-        ...authzArtifacts.resources,
-        ...storageArtifacts.resources,
-        ...secretStoreArtifacts.resources,
-    ]);
-    const providerLifecycle = [
-        ...authArtifacts.providerLifecycle,
-        ...authzArtifacts.providerLifecycle,
-        ...storageArtifacts.providerLifecycle,
-        ...secretStoreArtifacts.providerLifecycle,
-    ];
-    const providerNamespaces = unique([
-        ...providerLifecycle.map((contribution) => contribution.namespace),
-    ]).filter((providerNamespace) => !BUILT_IN_NAMESPACES.has(providerNamespace));
-    const extraEnvEntries = unique([
-        ...authArtifacts.envEntries,
-        ...authzArtifacts.envEntries,
-        ...storageArtifacts.envEntries,
-        ...secretStoreArtifacts.envEntries,
-    ]);
-    const baseFiles = generateMinikubeBaseArtifacts({
-        manifest,
-        appSlug,
-        extraResources,
-        providerNamespaces,
-        providerLifecycle,
-        extraEnvEntries,
-        appRuntimeEnabled,
-    });
-    const warnings = unique([
-        ...collectWarnings(manifest),
-        ...authArtifacts.warnings,
-        ...authzArtifacts.warnings,
-        ...storageArtifacts.warnings,
-        ...secretStoreArtifacts.warnings,
-    ]);
-    return {
-        files: [
-            ...baseFiles,
-            ...authArtifacts.files,
-            ...authzArtifacts.files,
-            ...storageArtifacts.files,
-            ...secretStoreArtifacts.files,
-        ],
-        warnings,
-        meta: {
-            target: 'minikube',
-            providers: collectProviders(manifest),
-        },
-        dependencies: collectDependencies(manifest),
-    };
-}
-function collectProviders(manifest) {
-    const providers = new Set();
-    if (manifest.auth?.provider)
-        providers.add(manifest.auth.provider);
-    if (manifest.auth?.authorization?.engine) {
-        providers.add(manifest.auth.authorization.engine);
-    }
-    if (manifest.database?.provider)
-        providers.add(manifest.database.provider);
-    if (manifest.storage?.provider)
-        providers.add(manifest.storage.provider);
-    if (manifest.secretStore?.provider)
-        providers.add(manifest.secretStore.provider);
-    if (manifest.state?.provider)
-        providers.add(manifest.state.provider);
-    return [...providers].sort();
-}
-function collectDependencies(manifest) {
-    if (manifest.state?.provider !== 'legend') {
-        return [];
-    }
-    return [
-        {
-            name: '@ankhorage/state-legend',
-            version: '^0.1.0',
-            reason: 'Selected by infra.state.provider=legend.',
-        },
-    ];
-}
-function collectWarnings(manifest) {
-    const warnings = [...validateInfraApiSupport(manifest)];
-    if (manifest.deployment?.monitoring) {
-        warnings.push('Monitoring is enabled in manifest, but monitoring stack resources are not generated yet.');
-    }
-    if (manifest.networking?.cdn) {
-        warnings.push('CDN is enabled in manifest, but CDN resources are not generated for minikube.');
-    }
-    return warnings;
-}
-function validateCanonicalAppSlug(slug) {
-    if (!slug) {
-        throw new Error('Cannot generate Minikube infrastructure: appManifest.metadata.slug is required.');
-    }
-    if (slug.trim() !== slug || !CANONICAL_PROJECT_SLUG_RE.test(slug)) {
-        throw new Error('Cannot generate Minikube infrastructure: appManifest.metadata.slug must be a canonical lowercase slug up to 40 characters using only a-z, 0-9, and hyphens, without leading or trailing hyphens.');
-    }
-    return slug;
-}
-function unique(values) {
-    return [...new Set(values)];
-}
-//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/minikube/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAOhE,OAAO,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,QAAQ,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAC3E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,UAA2C,EAAE;IAE7C,IAAI,QAAQ,CAAC,UAAU,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,0EAA0E,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,WAAW,KAAK,CAC1H,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,wDAAwD,QAAQ,CAAC,QAAQ,CAAC,QAAQ,oCAAoC,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GACrB,OAAO,CAAC,WAAW,EAAE,MAAM,KAAK,SAAS;QACzC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3D,MAAM,SAAS,GAAG,aAAa,CAAC;IAEhC,MAAM,aAAa,GAAG,6BAA6B,CAAC;QAClD,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ;QACR,SAAS;KACV,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,8BAA8B,CAAC;QACpD,QAAQ;QACR,SAAS;QACT,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,4BAA4B,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IAEnF,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,GAAG,aAAa,CAAC,SAAS;QAC1B,GAAG,cAAc,CAAC,SAAS;QAC3B,GAAG,gBAAgB,CAAC,SAAS;QAC7B,GAAG,oBAAoB,CAAC,SAAS;KAClC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG;QACxB,GAAG,aAAa,CAAC,iBAAiB;QAClC,GAAG,cAAc,CAAC,iBAAiB;QACnC,GAAG,gBAAgB,CAAC,iBAAiB;QACrC,GAAG,oBAAoB,CAAC,iBAAiB;KAC1C,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,CAAC;QAChC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;KACnE,CAAC,CAAC,MAAM,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,MAAM,CAAC;QAC7B,GAAG,aAAa,CAAC,UAAU;QAC3B,GAAG,cAAc,CAAC,UAAU;QAC5B,GAAG,gBAAgB,CAAC,UAAU;QAC9B,GAAG,oBAAoB,CAAC,UAAU;KACnC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,6BAA6B,CAAC;QAC9C,QAAQ;QACR,OAAO;QACP,cAAc;QACd,kBAAkB;QAClB,iBAAiB;QACjB,eAAe;QACf,iBAAiB;KAClB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC;QACtB,GAAG,eAAe,CAAC,QAAQ,CAAC;QAC5B,GAAG,aAAa,CAAC,QAAQ;QACzB,GAAG,cAAc,CAAC,QAAQ;QAC1B,GAAG,gBAAgB,CAAC,QAAQ;QAC5B,GAAG,oBAAoB,CAAC,QAAQ;KACjC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE;YACL,GAAG,SAAS;YACZ,GAAG,aAAa,CAAC,KAAK;YACtB,GAAG,cAAc,CAAC,KAAK;YACvB,GAAG,gBAAgB,CAAC,KAAK;YACzB,GAAG,oBAAoB,CAAC,KAAK;SAC9B;QACD,QAAQ;QACR,IAAI,EAAE;YACJ,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC;SACtC;QACD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4B;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;QACzC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,WAAW,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ;QAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA4B;IACvD,IAAI,QAAQ,CAAC,KAAK,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,0CAA0C;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B;IACnD,MAAM,QAAQ,GAAG,CAAC,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAExD,IAAI,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,CACX,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IACjG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAwB;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,kMAAkM,CACnM,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { validateInfraApiSupport } from '../../infraValidation';\nimport type {\n  GeneratedPackageDependency,\n  InfraManifestInput,\n  InfrastructureGenerationOptions,\n  InfrastructureGenerationResult,\n} from '../../types';\nimport { generateAuthProviderArtifacts } from './auth';\nimport { generateAuthorizationArtifacts } from './authz';\nimport { APP_NAMESPACE, generateMinikubeBaseArtifacts } from './base';\nimport { generateSecretStoreArtifacts } from './secrets';\nimport { generateStorageArtifacts } from './storage';\n\nconst CANONICAL_PROJECT_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/;\nconst BUILT_IN_NAMESPACES = new Set([APP_NAMESPACE, 'supabase']);\n\nexport function generateMinikubeInfra(\n  manifest: InfraManifestInput,\n  options: InfrastructureGenerationOptions = {},\n): InfrastructureGenerationResult {\n  if (manifest.deployment?.target !== 'minikube') {\n    throw new Error(\n      `Minikube adapter only supports deployment target \"minikube\" (received \"${manifest.deployment?.target ?? 'undefined'}\").`,\n    );\n  }\n\n  if (manifest.database?.provider && manifest.database.provider !== 'supabase') {\n    throw new Error(\n      `Unsupported database provider for minikube adapter: \"${manifest.database.provider}\". Only \"supabase\" is implemented.`,\n    );\n  }\n\n  const appSlug = validateCanonicalAppSlug(options.appManifest?.metadata.slug);\n  const appRuntimeEnabled =\n    options.appManifest?.deploy === undefined ||\n    options.appManifest.deploy.targets.web?.enabled === true;\n  const namespace = APP_NAMESPACE;\n\n  const authArtifacts = generateAuthProviderArtifacts({\n    appManifest: options.appManifest,\n    manifest,\n    namespace,\n  });\n  const authzArtifacts = generateAuthorizationArtifacts({\n    manifest,\n    namespace,\n    appManifest: options.appManifest,\n  });\n  const storageArtifacts = generateStorageArtifacts({ manifest, namespace });\n  const secretStoreArtifacts = generateSecretStoreArtifacts({ manifest, namespace });\n\n  const extraResources = unique([\n    ...authArtifacts.resources,\n    ...authzArtifacts.resources,\n    ...storageArtifacts.resources,\n    ...secretStoreArtifacts.resources,\n  ]);\n  const providerLifecycle = [\n    ...authArtifacts.providerLifecycle,\n    ...authzArtifacts.providerLifecycle,\n    ...storageArtifacts.providerLifecycle,\n    ...secretStoreArtifacts.providerLifecycle,\n  ];\n  const providerNamespaces = unique([\n    ...providerLifecycle.map((contribution) => contribution.namespace),\n  ]).filter((providerNamespace) => !BUILT_IN_NAMESPACES.has(providerNamespace));\n  const extraEnvEntries = unique([\n    ...authArtifacts.envEntries,\n    ...authzArtifacts.envEntries,\n    ...storageArtifacts.envEntries,\n    ...secretStoreArtifacts.envEntries,\n  ]);\n\n  const baseFiles = generateMinikubeBaseArtifacts({\n    manifest,\n    appSlug,\n    extraResources,\n    providerNamespaces,\n    providerLifecycle,\n    extraEnvEntries,\n    appRuntimeEnabled,\n  });\n\n  const warnings = unique([\n    ...collectWarnings(manifest),\n    ...authArtifacts.warnings,\n    ...authzArtifacts.warnings,\n    ...storageArtifacts.warnings,\n    ...secretStoreArtifacts.warnings,\n  ]);\n\n  return {\n    files: [\n      ...baseFiles,\n      ...authArtifacts.files,\n      ...authzArtifacts.files,\n      ...storageArtifacts.files,\n      ...secretStoreArtifacts.files,\n    ],\n    warnings,\n    meta: {\n      target: 'minikube',\n      providers: collectProviders(manifest),\n    },\n    dependencies: collectDependencies(manifest),\n  };\n}\n\nfunction collectProviders(manifest: InfraManifestInput): string[] {\n  const providers = new Set<string>();\n\n  if (manifest.auth?.provider) providers.add(manifest.auth.provider);\n  if (manifest.auth?.authorization?.engine) {\n    providers.add(manifest.auth.authorization.engine);\n  }\n  if (manifest.database?.provider) providers.add(manifest.database.provider);\n  if (manifest.storage?.provider) providers.add(manifest.storage.provider);\n  if (manifest.secretStore?.provider) providers.add(manifest.secretStore.provider);\n  if (manifest.state?.provider) providers.add(manifest.state.provider);\n\n  return [...providers].sort();\n}\n\nfunction collectDependencies(manifest: InfraManifestInput): readonly GeneratedPackageDependency[] {\n  if (manifest.state?.provider !== 'legend') {\n    return [];\n  }\n\n  return [\n    {\n      name: '@ankhorage/state-legend',\n      version: '^0.1.0',\n      reason: 'Selected by infra.state.provider=legend.',\n    },\n  ];\n}\n\nfunction collectWarnings(manifest: InfraManifestInput): string[] {\n  const warnings = [...validateInfraApiSupport(manifest)];\n\n  if (manifest.deployment?.monitoring) {\n    warnings.push(\n      'Monitoring is enabled in manifest, but monitoring stack resources are not generated yet.',\n    );\n  }\n\n  if (manifest.networking?.cdn) {\n    warnings.push('CDN is enabled in manifest, but CDN resources are not generated for minikube.');\n  }\n\n  return warnings;\n}\n\nfunction validateCanonicalAppSlug(slug: string | undefined): string {\n  if (!slug) {\n    throw new Error(\n      'Cannot generate Minikube infrastructure: appManifest.metadata.slug is required.',\n    );\n  }\n\n  if (slug.trim() !== slug || !CANONICAL_PROJECT_SLUG_RE.test(slug)) {\n    throw new Error(\n      'Cannot generate Minikube infrastructure: appManifest.metadata.slug must be a canonical lowercase slug up to 40 characters using only a-z, 0-9, and hyphens, without leading or trailing hyphens.',\n    );\n  }\n\n  return slug;\n}\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n"]}

package/dist/adapters/minikube/secrets/index.d.ts

@@ -1,7 +0,0 @@
-import type { InfraManifestInput } from '../../../types';
-import { type MinikubeAdapterArtifacts } from '../contracts';
-export declare function generateSecretStoreArtifacts(args: {
-    readonly manifest: InfraManifestInput;
-    readonly namespace: string;
-}): MinikubeAdapterArtifacts;
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/secrets/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/minikube/secrets/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAGrF,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GAAG,wBAAwB,CAS3B"}

package/dist/adapters/minikube/secrets/index.js

@@ -1,13 +0,0 @@
-import { SUPABASE_VAULT_SECRET_STORE_PROVIDER } from '@ankhorage/supabase-vault';
-import { emptyMinikubeArtifacts } from '../contracts';
-import { generateSupabaseVaultSecretStoreArtifacts } from './supabase-vault';
-export function generateSecretStoreArtifacts(args) {
-    const provider = args.manifest.secretStore?.provider;
-    if (!provider)
-        return emptyMinikubeArtifacts();
-    if (provider === SUPABASE_VAULT_SECRET_STORE_PROVIDER) {
-        return generateSupabaseVaultSecretStoreArtifacts(args);
-    }
-    throw new Error(`Unsupported secret-store provider for minikube adapter: "${provider}".`);
-}
-//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/secrets/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/minikube/secrets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AAGjF,OAAO,EAAE,sBAAsB,EAAiC,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,yCAAyC,EAAE,MAAM,kBAAkB,CAAC;AAE7E,MAAM,UAAU,4BAA4B,CAAC,IAG5C;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,sBAAsB,EAAE,CAAC;IAE/C,IAAI,QAAQ,KAAK,oCAAoC,EAAE,CAAC;QACtD,OAAO,yCAAyC,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,QAAQ,IAAI,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["import { SUPABASE_VAULT_SECRET_STORE_PROVIDER } from '@ankhorage/supabase-vault';\n\nimport type { InfraManifestInput } from '../../../types';\nimport { emptyMinikubeArtifacts, type MinikubeAdapterArtifacts } from '../contracts';\nimport { generateSupabaseVaultSecretStoreArtifacts } from './supabase-vault';\n\nexport function generateSecretStoreArtifacts(args: {\n  readonly manifest: InfraManifestInput;\n  readonly namespace: string;\n}): MinikubeAdapterArtifacts {\n  const provider = args.manifest.secretStore?.provider;\n  if (!provider) return emptyMinikubeArtifacts();\n\n  if (provider === SUPABASE_VAULT_SECRET_STORE_PROVIDER) {\n    return generateSupabaseVaultSecretStoreArtifacts(args);\n  }\n\n  throw new Error(`Unsupported secret-store provider for minikube adapter: \"${provider}\".`);\n}\n"]}

package/dist/adapters/minikube/secrets/supabase-vault/index.d.ts

@@ -1,8 +0,0 @@
-import type { InfraManifestInput } from '../../../../types';
-import type { MinikubeAdapterArtifacts } from '../../contracts';
-export declare const SUPABASE_VAULT_MIGRATION_PATH = "infra/minikube/supabase/migrations/202607120001_ankhorage_supabase_vault.sql";
-export declare function generateSupabaseVaultSecretStoreArtifacts(args: {
-    readonly manifest: InfraManifestInput;
-    readonly namespace: string;
-}): MinikubeAdapterArtifacts;
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/secrets/supabase-vault/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/minikube/secrets/supabase-vault/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,eAAO,MAAM,6BAA6B,iFACsC,CAAC;AAEjF,wBAAgB,yCAAyC,CAAC,IAAI,EAAE;IAC9D,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GAAG,wBAAwB,CAmB3B"}

package/dist/adapters/minikube/secrets/supabase-vault/index.js

@@ -1,118 +0,0 @@
-import { SUPABASE_VAULT_MIGRATION_SQL, SUPABASE_VAULT_SECRET_STORE_PROVIDER, } from '@ankhorage/supabase-vault';
-export const SUPABASE_VAULT_MIGRATION_PATH = 'infra/minikube/supabase/migrations/202607120001_ankhorage_supabase_vault.sql';
-export function generateSupabaseVaultSecretStoreArtifacts(args) {
-    validateOAuthSecretReferences(args.manifest);
-    return {
-        files: [
-            {
-                path: SUPABASE_VAULT_MIGRATION_PATH,
-                content: getCurrentSupabaseVaultMigrationSql(),
-            },
-            {
-                path: 'infra/minikube/secrets/supabase-vault.md',
-                content: getRuntimeGuide(args.namespace),
-            },
-        ],
-        resources: [],
-        providerLifecycle: [],
-        envEntries: [`SECRET_STORE_PROVIDER=${SUPABASE_VAULT_SECRET_STORE_PROVIDER}`],
-        warnings: [],
-    };
-}
-function getCurrentSupabaseVaultMigrationSql() {
-    return `${SUPABASE_VAULT_MIGRATION_SQL.trim()
-        .replace('create extension if not exists supabase_vault with schema extensions;', () => `create schema if not exists vault;
-do $$
-begin
-  create extension if not exists supabase_vault with schema vault;
-exception
-  when insufficient_privilege then
-    create table if not exists vault.secrets (
-      id uuid primary key default gen_random_uuid(),
-      secret text not null,
-      name text,
-      description text,
-      created_at timestamptz not null default now()
-    );
-
-    create or replace function vault.create_secret(
-      secret text,
-      name text default null,
-      description text default null
-    )
-    returns uuid
-    language plpgsql
-    security definer
-    set search_path = vault, public
-    as $vault$
-    declare
-      secret_id uuid;
-    begin
-      insert into vault.secrets (secret, name, description)
-      values (secret, name, description)
-      returning id into secret_id;
-
-      return secret_id;
-    end;
-    $vault$;
-
-    create or replace view vault.decrypted_secrets as
-      select id, secret as decrypted_secret
-      from vault.secrets;
-end
-$$;`)
-        .trim()}\n`;
-}
-function validateOAuthSecretReferences(manifest) {
-    const oauth = manifest.auth?.oauth;
-    if (!oauth?.enabled)
-        return;
-    const enabledProviders = oauth.providers.filter((provider) => provider.enabled !== false);
-    if (enabledProviders.length === 0) {
-        throw new Error('OAuth is enabled but no OAuth provider is enabled.');
-    }
-    for (const provider of enabledProviders) {
-        if (!provider.credentialsRef?.trim()) {
-            throw new Error(`OAuth provider "${provider.id}" is enabled but does not define credentialsRef.`);
-        }
-    }
-}
-function getRuntimeGuide(namespace) {
-    return `# Supabase Vault secret store
-
-This project selects the provider-neutral secret-store backend through:
-
-\`\`\`text
-infra.secretStore.provider = ${SUPABASE_VAULT_SECRET_STORE_PROVIDER}
-\`\`\`
-
-The immutable migration at:
-
-\`\`\`text
-${SUPABASE_VAULT_MIGRATION_PATH}
-\`\`\`
-
-is applied by the Kubernetes-owned Supabase migration lifecycle during \`scripts/up.sh\`
-with command-scoped CLI telemetry disabled around
-\`supabase --yes migration up --db-url "$SUPABASE_DB_URL"\`.
-
-## Security boundary
-
-- Secret values are stored only through Supabase Vault.
-- Public manifests contain logical references such as \`auth/oauth/google\`, never values.
-- Project and environment scope are supplied by trusted server code.
-- The browser may receive secret metadata, but must never receive resolved values or Vault IDs.
-- Bootstrap database access must come from trusted process environment or workload identity.
-- Do not expose service-role keys, provider secrets, or resolved payloads through
-  \`NEXT_PUBLIC_*\`, \`EXPO_PUBLIC_*\`, generated YAML, tracked JSON, or app bundles.
-
-## Trusted adapter composition
-
-Use \`createInfraSecretStoreAdapter\` from \`@ankhorage/infra\` in server-only code and pass
-a trusted Supabase Vault SQL client. The app manifest chooses the provider; privileged connection
-configuration does not belong in the manifest.
-
-Generated Kubernetes namespace: \`${namespace}\`.
-`;
-}
-//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/secrets/supabase-vault/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/adapters/minikube/secrets/supabase-vault/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,2BAA2B,CAAC;AAKnC,MAAM,CAAC,MAAM,6BAA6B,GACxC,8EAA8E,CAAC;AAEjF,MAAM,UAAU,yCAAyC,CAAC,IAGzD;IACC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE7C,OAAO;QACL,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,mCAAmC,EAAE;aAC/C;YACD;gBACE,IAAI,EAAE,0CAA0C;gBAChD,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;aACzC;SACF;QACD,SAAS,EAAE,EAAE;QACb,iBAAiB,EAAE,EAAE;QACrB,UAAU,EAAE,CAAC,yBAAyB,oCAAoC,EAAE,CAAC;QAC7E,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC;IAC1C,OAAO,GAAG,4BAA4B,CAAC,IAAI,EAAE;SAC1C,OAAO,CACN,uEAAuE,EACvE,GAAG,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAuCR,CACC;SACA,IAAI,EAAE,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,6BAA6B,CAAC,QAA4B;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,OAAO;QAAE,OAAO;IAE5B,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC1F,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,EAAE,kDAAkD,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO;;;;;+BAKsB,oCAAoC;;;;;;EAMjE,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;oCAuBK,SAAS;CAC5C,CAAC;AACF,CAAC","sourcesContent":["import {\n  SUPABASE_VAULT_MIGRATION_SQL,\n  SUPABASE_VAULT_SECRET_STORE_PROVIDER,\n} from '@ankhorage/supabase-vault';\n\nimport type { InfraManifestInput } from '../../../../types';\nimport type { MinikubeAdapterArtifacts } from '../../contracts';\n\nexport const SUPABASE_VAULT_MIGRATION_PATH =\n  'infra/minikube/supabase/migrations/202607120001_ankhorage_supabase_vault.sql';\n\nexport function generateSupabaseVaultSecretStoreArtifacts(args: {\n  readonly manifest: InfraManifestInput;\n  readonly namespace: string;\n}): MinikubeAdapterArtifacts {\n  validateOAuthSecretReferences(args.manifest);\n\n  return {\n    files: [\n      {\n        path: SUPABASE_VAULT_MIGRATION_PATH,\n        content: getCurrentSupabaseVaultMigrationSql(),\n      },\n      {\n        path: 'infra/minikube/secrets/supabase-vault.md',\n        content: getRuntimeGuide(args.namespace),\n      },\n    ],\n    resources: [],\n    providerLifecycle: [],\n    envEntries: [`SECRET_STORE_PROVIDER=${SUPABASE_VAULT_SECRET_STORE_PROVIDER}`],\n    warnings: [],\n  };\n}\n\nfunction getCurrentSupabaseVaultMigrationSql(): string {\n  return `${SUPABASE_VAULT_MIGRATION_SQL.trim()\n    .replace(\n      'create extension if not exists supabase_vault with schema extensions;',\n      () => `create schema if not exists vault;\ndo $$\nbegin\n  create extension if not exists supabase_vault with schema vault;\nexception\n  when insufficient_privilege then\n    create table if not exists vault.secrets (\n      id uuid primary key default gen_random_uuid(),\n      secret text not null,\n      name text,\n      description text,\n      created_at timestamptz not null default now()\n    );\n\n    create or replace function vault.create_secret(\n      secret text,\n      name text default null,\n      description text default null\n    )\n    returns uuid\n    language plpgsql\n    security definer\n    set search_path = vault, public\n    as $vault$\n    declare\n      secret_id uuid;\n    begin\n      insert into vault.secrets (secret, name, description)\n      values (secret, name, description)\n      returning id into secret_id;\n\n      return secret_id;\n    end;\n    $vault$;\n\n    create or replace view vault.decrypted_secrets as\n      select id, secret as decrypted_secret\n      from vault.secrets;\nend\n$$;`,\n    )\n    .trim()}\\n`;\n}\n\nfunction validateOAuthSecretReferences(manifest: InfraManifestInput): void {\n  const oauth = manifest.auth?.oauth;\n  if (!oauth?.enabled) return;\n\n  const enabledProviders = oauth.providers.filter((provider) => provider.enabled !== false);\n  if (enabledProviders.length === 0) {\n    throw new Error('OAuth is enabled but no OAuth provider is enabled.');\n  }\n\n  for (const provider of enabledProviders) {\n    if (!provider.credentialsRef?.trim()) {\n      throw new Error(\n        `OAuth provider \"${provider.id}\" is enabled but does not define credentialsRef.`,\n      );\n    }\n  }\n}\n\nfunction getRuntimeGuide(namespace: string): string {\n  return `# Supabase Vault secret store\n\nThis project selects the provider-neutral secret-store backend through:\n\n\\`\\`\\`text\ninfra.secretStore.provider = ${SUPABASE_VAULT_SECRET_STORE_PROVIDER}\n\\`\\`\\`\n\nThe immutable migration at:\n\n\\`\\`\\`text\n${SUPABASE_VAULT_MIGRATION_PATH}\n\\`\\`\\`\n\nis applied by the Kubernetes-owned Supabase migration lifecycle during \\`scripts/up.sh\\`\nwith command-scoped CLI telemetry disabled around\n\\`supabase --yes migration up --db-url \"$SUPABASE_DB_URL\"\\`.\n\n## Security boundary\n\n- Secret values are stored only through Supabase Vault.\n- Public manifests contain logical references such as \\`auth/oauth/google\\`, never values.\n- Project and environment scope are supplied by trusted server code.\n- The browser may receive secret metadata, but must never receive resolved values or Vault IDs.\n- Bootstrap database access must come from trusted process environment or workload identity.\n- Do not expose service-role keys, provider secrets, or resolved payloads through\n  \\`NEXT_PUBLIC_*\\`, \\`EXPO_PUBLIC_*\\`, generated YAML, tracked JSON, or app bundles.\n\n## Trusted adapter composition\n\nUse \\`createInfraSecretStoreAdapter\\` from \\`@ankhorage/infra\\` in server-only code and pass\na trusted Supabase Vault SQL client. The app manifest chooses the provider; privileged connection\nconfiguration does not belong in the manifest.\n\nGenerated Kubernetes namespace: \\`${namespace}\\`.\n`;\n}\n"]}

package/dist/adapters/minikube/storage/index.d.ts

@@ -1,7 +0,0 @@
-import type { InfraManifestInput } from '../../../types';
-import { type MinikubeAdapterArtifacts } from '../contracts';
-export declare function generateStorageArtifacts(args: {
-    manifest: InfraManifestInput;
-    namespace: string;
-}): MinikubeAdapterArtifacts;
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/storage/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/adapters/minikube/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAGrF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,wBAAwB,CAoE3B"}

package/dist/adapters/minikube/storage/index.js

@@ -1,77 +0,0 @@
-import { emptyMinikubeArtifacts } from '../contracts';
-import { generateSupabaseStorageArtifacts } from './supabase';
-export function generateStorageArtifacts(args) {
-    const { manifest, namespace } = args;
-    const spec = manifest.storage;
-    if (!spec) {
-        return emptyMinikubeArtifacts();
-    }
-    const buckets = normalizeBuckets(spec.buckets);
-    const { provider } = spec;
-    const includeSupabaseConnectionEnvEntries = manifest.auth?.provider !== 'supabase';
-    const emptyBucketsWarning = 'Storage buckets are empty after normalization; no storage artifacts generated.';
-    switch (provider) {
-        case 'auto': {
-            const shouldResolveToSupabase = manifest.database?.provider === 'supabase' || manifest.auth?.provider === 'supabase';
-            if (!shouldResolveToSupabase) {
-                return {
-                    ...emptyMinikubeArtifacts(),
-                    warnings: [
-                        'Storage provider "auto" could not be resolved for minikube; no storage artifacts generated.',
-                    ],
-                };
-            }
-            if (buckets.length === 0) {
-                return {
-                    ...emptyMinikubeArtifacts(),
-                    warnings: [emptyBucketsWarning],
-                };
-            }
-            return generateSupabaseStorageArtifacts({
-                namespace,
-                buckets,
-                includeSupabaseConnectionEnvEntries,
-            });
-        }
-        case 'supabase': {
-            if (buckets.length === 0) {
-                return {
-                    ...emptyMinikubeArtifacts(),
-                    warnings: [emptyBucketsWarning],
-                };
-            }
-            return generateSupabaseStorageArtifacts({
-                namespace,
-                buckets,
-                includeSupabaseConnectionEnvEntries,
-            });
-        }
-        case 's3':
-        case 'r2':
-            return {
-                ...emptyMinikubeArtifacts(),
-                warnings: [
-                    `Storage provider "${provider}" is not implemented for minikube yet; no storage artifacts generated.`,
-                ],
-            };
-        default: {
-            const exhaustiveCheck = provider;
-            return exhaustiveCheck;
-        }
-    }
-}
-function normalizeBuckets(rawBuckets) {
-    const normalized = [];
-    const seen = new Set();
-    for (const raw of rawBuckets) {
-        const bucket = raw.trim();
-        if (!bucket)
-            continue;
-        if (seen.has(bucket))
-            continue;
-        seen.add(bucket);
-        normalized.push(bucket);
-    }
-    return normalized;
-}
-//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/storage/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/adapters/minikube/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAiC,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CAAC,IAGxC;IACC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC1B,MAAM,mCAAmC,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,CAAC;IACnF,MAAM,mBAAmB,GACvB,gFAAgF,CAAC;IAEnF,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,uBAAuB,GAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,CAAC;YAEvF,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBAC7B,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE;wBACR,6FAA6F;qBAC9F;iBACF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE,CAAC,mBAAmB,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,OAAO,gCAAgC,CAAC;gBACtC,SAAS;gBACT,OAAO;gBACP,mCAAmC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,GAAG,sBAAsB,EAAE;oBAC3B,QAAQ,EAAE,CAAC,mBAAmB,CAAC;iBAChC,CAAC;YACJ,CAAC;YAED,OAAO,gCAAgC,CAAC;gBACtC,SAAS;gBACT,OAAO;gBACP,mCAAmC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,IAAI,CAAC;QACV,KAAK,IAAI;YACP,OAAO;gBACL,GAAG,sBAAsB,EAAE;gBAC3B,QAAQ,EAAE;oBACR,qBAAqB,QAAQ,wEAAwE;iBACtG;aACF,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,eAAe,GAAU,QAAQ,CAAC;YACxC,OAAO,eAAe,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAA6B;IACrD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import type { InfraManifestInput } from '../../../types';\nimport { emptyMinikubeArtifacts, type MinikubeAdapterArtifacts } from '../contracts';\nimport { generateSupabaseStorageArtifacts } from './supabase';\n\nexport function generateStorageArtifacts(args: {\n  manifest: InfraManifestInput;\n  namespace: string;\n}): MinikubeAdapterArtifacts {\n  const { manifest, namespace } = args;\n  const spec = manifest.storage;\n\n  if (!spec) {\n    return emptyMinikubeArtifacts();\n  }\n\n  const buckets = normalizeBuckets(spec.buckets);\n  const { provider } = spec;\n  const includeSupabaseConnectionEnvEntries = manifest.auth?.provider !== 'supabase';\n  const emptyBucketsWarning =\n    'Storage buckets are empty after normalization; no storage artifacts generated.';\n\n  switch (provider) {\n    case 'auto': {\n      const shouldResolveToSupabase =\n        manifest.database?.provider === 'supabase' || manifest.auth?.provider === 'supabase';\n\n      if (!shouldResolveToSupabase) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [\n            'Storage provider \"auto\" could not be resolved for minikube; no storage artifacts generated.',\n          ],\n        };\n      }\n\n      if (buckets.length === 0) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [emptyBucketsWarning],\n        };\n      }\n\n      return generateSupabaseStorageArtifacts({\n        namespace,\n        buckets,\n        includeSupabaseConnectionEnvEntries,\n      });\n    }\n    case 'supabase': {\n      if (buckets.length === 0) {\n        return {\n          ...emptyMinikubeArtifacts(),\n          warnings: [emptyBucketsWarning],\n        };\n      }\n\n      return generateSupabaseStorageArtifacts({\n        namespace,\n        buckets,\n        includeSupabaseConnectionEnvEntries,\n      });\n    }\n    case 's3':\n    case 'r2':\n      return {\n        ...emptyMinikubeArtifacts(),\n        warnings: [\n          `Storage provider \"${provider}\" is not implemented for minikube yet; no storage artifacts generated.`,\n        ],\n      };\n    default: {\n      const exhaustiveCheck: never = provider;\n      return exhaustiveCheck;\n    }\n  }\n}\n\nfunction normalizeBuckets(rawBuckets: readonly string[]): string[] {\n  const normalized: string[] = [];\n  const seen = new Set<string>();\n\n  for (const raw of rawBuckets) {\n    const bucket = raw.trim();\n    if (!bucket) continue;\n    if (seen.has(bucket)) continue;\n    seen.add(bucket);\n    normalized.push(bucket);\n  }\n\n  return normalized;\n}\n"]}

package/dist/adapters/minikube/storage/supabase/index.d.ts

@@ -1,7 +0,0 @@
-import type { MinikubeAdapterArtifacts } from '../../contracts';
-export declare function generateSupabaseStorageArtifacts(args: {
-    namespace: string;
-    buckets: string[];
-    includeSupabaseConnectionEnvEntries: boolean;
-}): MinikubeAdapterArtifacts;
-//# sourceMappingURL=index.d.ts.map

package/dist/adapters/minikube/storage/supabase/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/minikube/storage/supabase/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mCAAmC,EAAE,OAAO,CAAC;CAC9C,GAAG,wBAAwB,CAuD3B"}

package/dist/adapters/minikube/storage/supabase/index.js

@@ -1,82 +0,0 @@
-export function generateSupabaseStorageArtifacts(args) {
-    const { namespace, buckets, includeSupabaseConnectionEnvEntries } = args;
-    const root = 'infra/minikube/k8s/storage/supabase';
-    const resourceRoot = 'storage/supabase';
-    const bucketsCsv = buckets.join(',');
-    const defaultBucket = buckets[0] ?? '';
-    const envEntries = [
-        'STORAGE_PROVIDER=supabase',
-        'STORAGE_RUNTIME_MODE=local',
-        `STORAGE_BUCKETS=${bucketsCsv}`,
-        `STORAGE_DEFAULT_BUCKET=${defaultBucket}`,
-        'EXPO_PUBLIC_STORAGE_PROVIDER=supabase',
-        `EXPO_PUBLIC_STORAGE_BUCKETS=${bucketsCsv}`,
-        `EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET=${defaultBucket}`,
-    ];
-    if (includeSupabaseConnectionEnvEntries) {
-        envEntries.push('', '# Supabase provider connection details', 'EXPO_PUBLIC_SUPABASE_URL=', 'EXPO_PUBLIC_SUPABASE_ANON_KEY=');
-    }
-    return {
-        files: [
-            {
-                path: `${root}/supabase-storage.configmap.yaml`,
-                content: getSupabaseStorageConfigMap({
-                    namespace,
-                    bucketsCsv,
-                    defaultBucket,
-                }),
-            },
-            {
-                path: `${root}/app-runtime-storage.env.configmap.yaml`,
-                content: getRuntimeStorageEnvConfigMap({
-                    namespace,
-                    bucketsCsv,
-                    defaultBucket,
-                }),
-            },
-        ],
-        resources: [
-            `${resourceRoot}/supabase-storage.configmap.yaml`,
-            `${resourceRoot}/app-runtime-storage.env.configmap.yaml`,
-        ],
-        providerLifecycle: [],
-        envEntries,
-        warnings: [
-            `Storage buckets are configured but not created automatically yet. Ensure buckets exist in Supabase Storage: ${bucketsCsv}.`,
-        ],
-    };
-}
-function getSupabaseStorageConfigMap(args) {
-    const { namespace, bucketsCsv, defaultBucket } = args;
-    return `apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: supabase-storage-config
-  namespace: ${namespace}
-data:
-  STORAGE_PROVIDER: "supabase"
-  STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
-  STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
-`;
-}
-function getRuntimeStorageEnvConfigMap(args) {
-    const { namespace, bucketsCsv, defaultBucket } = args;
-    return `apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: app-runtime-storage-env
-  namespace: ${namespace}
-data:
-  STORAGE_PROVIDER: "supabase"
-  STORAGE_RUNTIME_MODE: "local"
-  STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
-  STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
-  EXPO_PUBLIC_STORAGE_PROVIDER: "supabase"
-  EXPO_PUBLIC_STORAGE_BUCKETS: "${escapeYamlDoubleQuoted(bucketsCsv)}"
-  EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET: "${escapeYamlDoubleQuoted(defaultBucket)}"
-`;
-}
-function escapeYamlDoubleQuoted(value) {
-    return value.replaceAll('\\', '\\\\').replaceAll('"', '\\"');
-}
-//# sourceMappingURL=index.js.map

package/dist/adapters/minikube/storage/supabase/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/adapters/minikube/storage/supabase/index.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gCAAgC,CAAC,IAIhD;IACC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,mCAAmC,EAAE,GAAG,IAAI,CAAC;IACzE,MAAM,IAAI,GAAG,qCAAqC,CAAC;IACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvC,MAAM,UAAU,GAAG;QACjB,2BAA2B;QAC3B,4BAA4B;QAC5B,mBAAmB,UAAU,EAAE;QAC/B,0BAA0B,aAAa,EAAE;QACzC,uCAAuC;QACvC,+BAA+B,UAAU,EAAE;QAC3C,sCAAsC,aAAa,EAAE;KACtD,CAAC;IAEF,IAAI,mCAAmC,EAAE,CAAC;QACxC,UAAU,CAAC,IAAI,CACb,EAAE,EACF,wCAAwC,EACxC,2BAA2B,EAC3B,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,GAAG,IAAI,kCAAkC;gBAC/C,OAAO,EAAE,2BAA2B,CAAC;oBACnC,SAAS;oBACT,UAAU;oBACV,aAAa;iBACd,CAAC;aACH;YACD;gBACE,IAAI,EAAE,GAAG,IAAI,yCAAyC;gBACtD,OAAO,EAAE,6BAA6B,CAAC;oBACrC,SAAS;oBACT,UAAU;oBACV,aAAa;iBACd,CAAC;aACH;SACF;QACD,SAAS,EAAE;YACT,GAAG,YAAY,kCAAkC;YACjD,GAAG,YAAY,yCAAyC;SACzD;QACD,iBAAiB,EAAE,EAAE;QACrB,UAAU;QACV,QAAQ,EAAE;YACR,+GAA+G,UAAU,GAAG;SAC7H;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,IAIpC;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEtD,OAAO;;;;eAIM,SAAS;;;sBAGF,sBAAsB,CAAC,UAAU,CAAC;6BAC3B,sBAAsB,CAAC,aAAa,CAAC;CACjE,CAAC;AACF,CAAC;AAED,SAAS,6BAA6B,CAAC,IAItC;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAEtD,OAAO;;;;eAIM,SAAS;;;;sBAIF,sBAAsB,CAAC,UAAU,CAAC;6BAC3B,sBAAsB,CAAC,aAAa,CAAC;;kCAEhC,sBAAsB,CAAC,UAAU,CAAC;yCAC3B,sBAAsB,CAAC,aAAa,CAAC;CAC7E,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC","sourcesContent":["import type { MinikubeAdapterArtifacts } from '../../contracts';\n\nexport function generateSupabaseStorageArtifacts(args: {\n  namespace: string;\n  buckets: string[];\n  includeSupabaseConnectionEnvEntries: boolean;\n}): MinikubeAdapterArtifacts {\n  const { namespace, buckets, includeSupabaseConnectionEnvEntries } = args;\n  const root = 'infra/minikube/k8s/storage/supabase';\n  const resourceRoot = 'storage/supabase';\n  const bucketsCsv = buckets.join(',');\n  const defaultBucket = buckets[0] ?? '';\n\n  const envEntries = [\n    'STORAGE_PROVIDER=supabase',\n    'STORAGE_RUNTIME_MODE=local',\n    `STORAGE_BUCKETS=${bucketsCsv}`,\n    `STORAGE_DEFAULT_BUCKET=${defaultBucket}`,\n    'EXPO_PUBLIC_STORAGE_PROVIDER=supabase',\n    `EXPO_PUBLIC_STORAGE_BUCKETS=${bucketsCsv}`,\n    `EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET=${defaultBucket}`,\n  ];\n\n  if (includeSupabaseConnectionEnvEntries) {\n    envEntries.push(\n      '',\n      '# Supabase provider connection details',\n      'EXPO_PUBLIC_SUPABASE_URL=',\n      'EXPO_PUBLIC_SUPABASE_ANON_KEY=',\n    );\n  }\n\n  return {\n    files: [\n      {\n        path: `${root}/supabase-storage.configmap.yaml`,\n        content: getSupabaseStorageConfigMap({\n          namespace,\n          bucketsCsv,\n          defaultBucket,\n        }),\n      },\n      {\n        path: `${root}/app-runtime-storage.env.configmap.yaml`,\n        content: getRuntimeStorageEnvConfigMap({\n          namespace,\n          bucketsCsv,\n          defaultBucket,\n        }),\n      },\n    ],\n    resources: [\n      `${resourceRoot}/supabase-storage.configmap.yaml`,\n      `${resourceRoot}/app-runtime-storage.env.configmap.yaml`,\n    ],\n    providerLifecycle: [],\n    envEntries,\n    warnings: [\n      `Storage buckets are configured but not created automatically yet. Ensure buckets exist in Supabase Storage: ${bucketsCsv}.`,\n    ],\n  };\n}\n\nfunction getSupabaseStorageConfigMap(args: {\n  namespace: string;\n  bucketsCsv: string;\n  defaultBucket: string;\n}) {\n  const { namespace, bucketsCsv, defaultBucket } = args;\n\n  return `apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: supabase-storage-config\n  namespace: ${namespace}\ndata:\n  STORAGE_PROVIDER: \"supabase\"\n  STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n`;\n}\n\nfunction getRuntimeStorageEnvConfigMap(args: {\n  namespace: string;\n  bucketsCsv: string;\n  defaultBucket: string;\n}) {\n  const { namespace, bucketsCsv, defaultBucket } = args;\n\n  return `apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: app-runtime-storage-env\n  namespace: ${namespace}\ndata:\n  STORAGE_PROVIDER: \"supabase\"\n  STORAGE_RUNTIME_MODE: \"local\"\n  STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n  EXPO_PUBLIC_STORAGE_PROVIDER: \"supabase\"\n  EXPO_PUBLIC_STORAGE_BUCKETS: \"${escapeYamlDoubleQuoted(bucketsCsv)}\"\n  EXPO_PUBLIC_STORAGE_DEFAULT_BUCKET: \"${escapeYamlDoubleQuoted(defaultBucket)}\"\n`;\n}\n\nfunction escapeYamlDoubleQuoted(value: string): string {\n  return value.replaceAll('\\\\', '\\\\\\\\').replaceAll('\"', '\\\\\"');\n}\n"]}

package/dist/authRedirects.d.ts

@@ -1,19 +0,0 @@
-export type AuthRedirectEnvironment = 'local' | 'preview' | 'production';
-export interface ResolveAuthRedirectConfigurationInput {
-    environment: AuthRedirectEnvironment;
-    gatewayOrigin: string;
-    siteOrigin: string;
-    callbackRoute: string;
-    webOrigins?: readonly string[];
-    nativeRedirectUris?: readonly string[];
-}
-export interface AuthRedirectConfiguration {
-    providerCallbackUrl: string;
-    siteUrl: string;
-    redirectAllowList: readonly string[];
-    serializedRedirectAllowList: string;
-}
-export declare function resolveAuthRedirectConfiguration(input: ResolveAuthRedirectConfigurationInput): AuthRedirectConfiguration;
-export declare function getLocalAuthRedirectPatterns(callbackRoute: string): readonly string[];
-export declare function normalizeAuthCallbackRoute(callbackRoute: string): string;
-//# sourceMappingURL=authRedirects.d.ts.map

package/dist/authRedirects.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authRedirects.d.ts","sourceRoot":"","sources":["../src/authRedirects.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAEzE,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,uBAAuB,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,2BAA2B,EAAE,MAAM,CAAC;CACrC;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,yBAAyB,CAyB3B;AAED,wBAAgB,4BAA4B,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAGrF;AAED,wBAAgB,0BAA0B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAExE"}